File: /home/vslw/mail/.spam/new/1750550884.M476173P2571870.dal1.hostclusters.com,S=10798,W=11016
Return-Path: <mehdi@bouc.com>
Delivered-To: vslw+spam@dal1.hostclusters.com
Received: from dal1.hostclusters.com
by dal1.hostclusters.com with LMTP
id sOf2G2RJV2hePicAaFRWGw
(envelope-from <mehdi@bouc.com>)
for <vslw+spam@dal1.hostclusters.com>; Sat, 21 Jun 2025 19:08:04 -0500
Return-path: <mehdi@bouc.com>
Envelope-to: order-update@vslw.org
Delivery-date: Sat, 21 Jun 2025 19:08:04 -0500
Received: from [179.6.6.175] (port=55438)
by dal1.hostclusters.com with esmtp (Exim 4.98.2)
(envelope-from <mehdi@bouc.com>)
id 1uT8Fi-0000000AnWr-3YMb
for order-update@vslw.org;
Sat, 21 Jun 2025 19:08:04 -0500
Message-ID: <002401dbe2df$02768d01$388aa581@wwixbmi>
From: "bond tzi-dar" <mehdi@bouc.com>
To: <order-update@vslw.org>
Date: 21 Jun 2025 12:40:21 -0600
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0021_01DBE2DF.0272EA04"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=39.0
X-Spam-Score: 390
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dal1.hostclusters.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Untitled Document.mdThe data from all your devices is copied
to my servers. I hacked your system! This is your last warning! You are visiting
adult resources. Now your family, colleagues and friends w [...]
Content analysis details: (39.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: document.md]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?179.6.6.175>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[179.6.6.175 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[179.6.6.175 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[179.6.6.175 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
5.0 BTC_HASHBL_BLACK Message contains BTC address found on BTC blacklist
[16kryn21kvxucvfzbdlftbrqcdnanfjf51]
4.2 GB_HASHBL_BTC Message contains BTC address found on BTCBL
[16kryn21kvxucvfzbdlftbrqcdnanfjf51]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
1.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2
0.7 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
(FTSDMCXX/boundary variant) + no rDNS
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.3 BITCOIN_SPAM_09 BitCoin spam pattern 09
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
2.3 BITCOIN_XPRIO Bitcoin + priority
8.5 KAM_CRIM Extortion Email
1.0 KAM_HTMLNOISE Spam containing useless HTML padding
1.3 RATWARE_NO_RDNS Suspicious MsgID and MIME boundary + no rDNS
0.5 PDS_BTC_ID FP reduced Bitcoin ID
3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers
0.7 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
(FTSDMCXX/boundary variant) + direct-to-MX
0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
4.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
X-Spam-Flag: YES
Subject: ***SPAM*** The data from all your devices is copied to my servers.
This is a multi-part message in MIME format.
------=_NextPart_000_0021_01DBE2DF.0272EA04
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Untitled Document.mdThe data from all your devices is copied to my =
servers.
I hacked your system!
This is your last warning!
You are visiting adult resources.
Now your family, colleagues and friends will know about it.
All your gadgets are infected with the Trojan virus.
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.
I now have in front of me a video clip of the porn you were watching and =
your masturbation.
Your face is perfectly visible, everyone will recognize you.
I’m sure the video will destroy your reputation forever.
I plan to circulate the video to everyone you know.
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!
You can’t see when I connect to your camera.
You’re being monitored 24/7.
No antivirus will help you, no reinstalling the operating system or =
resetting your data.
Even if you change all your passwords and account information, I will =
know about it.
All the information is on my servers!
Don’t try to complain somewhere or share this letter.
It will end badly for you!
My address and my wallet are untraceable.
I will go straight to action and automatically start sending out the =
video and all of your information.
Writing back to me is useless. I don’t respond to emails.
As soon as you read the email, I get a notification. The timer has =
started.
You have 50 hours to make the payment. This is the only way to be safe!
Make a transfer of 1300$ USD to my wallet.
My bitcoin adress : 16kryN21kVXUcVFZBDLFtBrQcdNanFjF51
Detailed instructions are on Google.
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!
I hope your reputation is important to you, so I don’t advise you =
to do anything stupid!
I’m sure we understand each other! Have a great day!
------=_NextPart_000_0021_01DBE2DF.0272EA04
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2600.0000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<!DOCTYPE html><html><head><meta charset=3D"utf-8"><title>Untitled =
Document.md</title><style></style></head><body id=3D"preview">
<p class=3D"has-line-data" data-line-start=3D"0" data-line-end=3D"1">The =
data from all your devices is copied to my servers.</p>
<p class=3D"has-line-data" data-line-start=3D"2" data-line-end=3D"4">I =
hacked your system!<br>
This is your last warning!</p>
<p class=3D"has-line-data" data-line-start=3D"5" data-line-end=3D"7">You =
are visiting adult resources.<br>
Now your family, colleagues and friends will know about it.</p>
<p class=3D"has-line-data" data-line-start=3D"8" =
data-line-end=3D"10">All your gadgets are infected with the Trojan =
virus.<br>
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.</p>
<p class=3D"has-line-data" data-line-start=3D"11" data-line-end=3D"14">I =
now have in front of me a video clip of the porn you were watching and =
your masturbation.<br>
Your face is perfectly visible, everyone will recognize you.<br>
I’m sure the video will destroy your reputation forever.</p>
<p class=3D"has-line-data" data-line-start=3D"15" data-line-end=3D"17">I =
plan to circulate the video to everyone you know.<br>
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!</p>
<p class=3D"has-line-data" data-line-start=3D"18" =
data-line-end=3D"21">You can’t see when I connect to your =
camera.<br>
You’re being monitored 24/7.<br>
No antivirus will help you, no reinstalling the operating system or =
resetting your data.</p>
<p class=3D"has-line-data" data-line-start=3D"22" =
data-line-end=3D"24">Even if you change all your passwords and account =
information, I will know about it.<br>
All the information is on my servers!</p>
<p class=3D"has-line-data" data-line-start=3D"25" =
data-line-end=3D"28">Don’t try to complain somewhere or share this =
letter.<br>
It will end badly for you!<br>
My address and my wallet are untraceable.</p>
<p class=3D"has-line-data" data-line-start=3D"29" data-line-end=3D"32">I =
will go straight to action and automatically start sending out the video =
and all of your information.<br>
Writing back to me is useless. I don’t respond to emails.<br>
As soon as you read the email, I get a notification. The timer has =
started.</p>
<p class=3D"has-line-data" data-line-start=3D"33" =
data-line-end=3D"34">You have 50 hours to make the payment. This is the =
only way to be safe!</p>
<p class=3D"has-line-data" data-line-start=3D"35" =
data-line-end=3D"36">Make a transfer of 1300$ USD to my wallet.</p>
<p class=3D"has-line-data" data-line-start=3D"37" =
data-line-end=3D"38">My bitcoin adress : =
16kryN21kVXUcVFZBDLFtBrQcdNanFjF51</p>
<p class=3D"has-line-data" data-line-start=3D"39" =
data-line-end=3D"43">Detailed instructions are on Google.<br>
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!<br>
I hope your reputation is important to you, so I don’t advise you =
to do anything stupid!<br>
I’m sure we understand each other! Have a great day!</p>
</body></html></BODY></HTML>
------=_NextPart_000_0021_01DBE2DF.0272EA04--