|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/rainic/mail/rainic.com/info/.spam/new/ |
Upload File : |
Return-Path: <info@rainic.com>
Delivered-To: info+spam@rainic.com
Received: from srv.rainic.com
by srv.rainic.com with LMTP
id WBOQBB+ssmYxtxAAPTEVkw
(envelope-from <info@rainic.com>)
for <info+spam@rainic.com>; Tue, 06 Aug 2024 23:05:03 +0000
Return-path: <info@rainic.com>
Envelope-to: info@rainic.com
Delivery-date: Tue, 06 Aug 2024 23:05:03 +0000
Received: from [145.239.135.10] (port=65206 helo=rainic.com)
by srv.rainic.com with esmtp (Exim 4.97.1)
(envelope-from <info@rainic.com>)
id 1sbTEf-00000004bDs-37S0
for info@rainic.com;
Tue, 06 Aug 2024 23:05:01 +0000
From: info@rainic.com
To: info@rainic.com
Date: 6 Aug 2024 16:04:17 -0700
Message-ID: <20240806160416.3DFB0F3BDB704576@rainic.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "srv.rainic.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hey! Have you recently noticed that I have e-mailed you from
your account, meaning I have total access to your device. For the last couple
of months, I have been watching you and have complete access to your device.
You may not be familiar with this, with help of the Ransomeware and Trojan
Virus infected in your devic [...]
Content analysis details: (12.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[145.239.135.10 listed in sa-accredit.habeas.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?145.239.135.10>]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[145.239.135.10 listed in bl.score.senderscore.com]
1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX
3.0 BITCOIN_DEADLINE BitCoin with a deadline
0.0 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.0 BITCOIN_YOUR_INFO BitCoin with your personal info
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject: ***SPAM*** It is a matter of immediate response
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>
<p>Hey!</p>
<p>Have you recently noticed that I have e-mailed you from your account, me=
aning I have total access to your device.</p>
<p>For the last couple of months, I have been watching you and have complet=
e access to your device. You may not be familiar with this, with help of th=
e Ransomeware and Trojan Virus infected in your device originating from&nbs=
p;a website that you had visited.<br>
This simply means I have access to your camera, microphone, keylogs, passwo=
rds, remote control, admin privilege, and all your files without =
you even noticing it. This malwares undergoes a signature update every 30se=
conds, so your antivirus can not detect it.</p>
<p>I saw videos of your extramarital sexploitations, evidences on your=
misconducts and mischievous deals you do in your company. <br><br>With jus=
t a single click, this informations can be sent to all your social networks=
, phone and e-mail contacts. I can also share access to any of your&nb=
sp;contacts who responds for further information on you.</p>
<p>All you have to do to prevent this from happening is to transfer $2=
500 (USD) worth of cryptocurrency to any wallet address below(if you h=
ave no idea how to do this, you can open your browser and simply search: "B=
uy Cryptocurrency") and use your head to do the rest.</p>
<p>My wallet payment addresses: <br>BTC =3D 1LjwoPTNDBYLBWjJdFnvUMezEM=
HEWJsVrc<br>ETH =3D 0x19d7216905992b71661ee43d034b32d3a214a53f<br>LTC =3D L=
SsNNMc2SQm9gXrruCnBLuv9XvR2tRwWkc<br>BNB =3D 0x19d7216905992b71661ee43d034b=
32d3a214a53f<br>USDT(TRC20) =3D TGtCAJprpGbJYBEH9nCYLQ9LDmgNoSjqU5<br>ADA =
=3D addr1v8q0zs6ecar9crccr6sslmyj5rl29s90ttv3y2r6sw4cgqq23d5ep<br>TRX =3D T=
GtCAJprpGbJYBEH9nCYLQ9LDmgNoSjqU5<br><br></p>
<p>You have 24 hours to complete this transaction starting from 8/6/20=
24 4:04:16 p.m. which is the time you received this message. Once you open =
this e-mail, I will receive a notification, and my timer will start ticking=
=2E<br>Any attempt to file a complaint will not result in anything, since m=
y cryptocurrency wallet and this message cannot be traced.<br>After receivi=
ng a confirmation of your payment, I will delete the videos right away, and=
that's it, you will never hear from me again.<br><br>
If, by any chance you have share this message with anybody else, I will bro=
adcast everything as earlier mentioned above. Be Warned not to go against t=
he instructions as advised!</p></body></html>