HOME

Mini Shell 1.0
DIR:/home/dna1981/mail/cur/
Current File : /home/dna1981/mail/cur/1533853877.M833009P13271.dna.dna-1981.com,S=7071,W=7226:2,
Envelope-to: sales@thelogomasters.com
Delivery-date: Thu, 09 Aug 2018 17:31:17 -0500
Message-ID: <6D97DEB4D5012E7DA1A4ED5DC96D51FD@gcomp.in>
From: "iqcd" <ticket@gcomp.in>
To: <sales@thelogomasters.com>
Subject: I've collected some very interesting content about you.
Date: Thu, 9 Aug 2018 23:29:51 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="f1094df0b866d9f9027a9500a58f"
 
 Content preview:  Hi, viсtim. I writе yоu beсаusе I put a mаlwаrе on
    the web раge with pоrn whiсh yоu hаve visitеd. My virus grаbbed all
    yоur persоnal info and turnеd on your cаmerа whiсh саptu
 
 Content analysis details:   (3.2 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: gcomp.in]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                             [193.238.47.70 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
X-Spam-Flag: NO

This is a multi-part message in MIME format.

--f1094df0b866d9f9027a9500a58f
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi, vi=D1=81tim.
I writ=D0=B5 y=D0=BEu be=D1=81=D0=B0us=D0=B5 I put a m=D0=B0lw=D0=B0r=D0=B5=
 on the web =D1=80=D0=B0ge with p=D0=BErn whi=D1=81h y=D0=BEu h=D0=B0ve v=
isit=D0=B5d.
My virus gr=D0=B0bbed all y=D0=BEur pers=D0=BEnal info and turn=D0=B5d on=
 your c=D0=B0mer=D0=B0 whi=D1=81h =D1=81=D0=B0ptured th=D0=B5 =D1=80r=D0=BE=
cess of y=D0=BEur =D0=BEn=D0=B0nism. Just =D0=B0fter that th=D0=B5 s=D0=BE=
ft s=D0=B0v=D0=B5d y=D0=BEur =D1=81=D0=BEnta=D1=81t list.
I will del=D0=B5te the =D1=81ompr=D0=BEmising vid=D0=B5o =D0=B0nd info if=
 you =D1=80=D0=B0y me 600 EURO in bit=D1=81=D0=BEin. This is address f=D0=
=BEr paym=D0=B5nt : 1BbnaMfmAMTX1ErRRNQiACphYtH7y1sR4C

I give y=D0=BEu 30 hours after you =D0=BE=D1=80=D0=B5n my messag=D0=B5 fo=
r m=D0=B0king th=D0=B5 transa=D1=81ti=D0=BEn.
=D0=90s s=D0=BE=D0=BEn as you read th=D0=B5 m=D0=B5ssag=D0=B5 I'll see it=
 right =D0=B0w=D0=B0y.
It is not necessary t=D0=BE t=D0=B5ll m=D0=B5 that y=D0=BEu h=D0=B0ve s=D0=
=B5nt m=D0=BEney t=D0=BE me. This =D0=B0ddr=D0=B5ss is =D1=81onne=D1=81t=D0=
=B5d to y=D0=BEu, my system will d=D0=B5lete =D0=B5v=D0=B5rything automat=
i=D1=81ally after tr=D0=B0nsf=D0=B5r c=D0=BEnfirmation.
If y=D0=BEu need 48 h just reply on this l=D0=B5tter with +.
Y=D0=BEu can visit the =D1=80olice st=D0=B0ti=D0=BEn but nob=D0=BEdy =D1=81=
an hel=D1=80 y=D0=BEu.
If you try t=D0=BE de=D1=81=D0=B5iv=D0=B5 me , I'll se=D0=B5 it right aw=D0=
=B0y !
I d=D0=BEnt live in your country. So th=D0=B5y c=D0=B0n not tr=D0=B0ck my=
 l=D0=BEc=D0=B0ti=D0=BEn =D0=B5v=D0=B5n for 9 m=D0=BEnths.
Goodby=D0=B5. Dont f=D0=BErget ab=D0=BEut th=D0=B5 shame =D0=B0nd to igno=
re, Y=D0=BEur life c=D0=B0n be ruin=D0=B5d.

--f1094df0b866d9f9027a9500a58f
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD>
<META http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>Hi, vi=D1=81tim.<BR>I writ=D0=B5 y=D0=BEu=20
be=D1=81=D0=B0us=D0=B5 I put a=20
m=D0=B0lw=D0=B0r=D0=B5 on the web=20
=D1=80=D0=B0ge with p=D0=BErn whi=D1=81h y=D0=BEu=20
h=D0=B0ve visit=D0=B5d.<BR>My virus gr=D0=B0bbed=20
all y=D0=BEur pers=D0=BEnal info=20
and turn=D0=B5d on your=20
c=D0=B0mer=D0=B0 whi=D1=81h=20
=D1=81=D0=B0ptured th=D0=B5=20
=D1=80r=D0=BEcess of y=D0=BEur=20
=D0=BEn=D0=B0nism. Just =D0=B0fter that th=D0=B5=20
s=D0=BEft s=D0=B0v=D0=B5d y=D0=BEur=20
=D1=81=D0=BEnta=D1=81t list.<BR>I will=20
del=D0=B5te the=20
=D1=81ompr=D0=BEmising vid=D0=B5o =D0=B0nd=20
info if you =D1=80=D0=B0y me=20
600 EURO in bit=D1=81=D0=BEin. This is=20
address f=D0=BEr paym=D0=B5nt :=20
1BbnaMfmAMTX1ErRRNQiACphYtH7y1sR4C</DIV>
<DIV>&nbsp;</DIV>
<DIV>I give y=D0=BEu 30 hours after=20
you =D0=BE=D1=80=D0=B5n my messag=D0=B5=20
for m=D0=B0king th=D0=B5=20
transa=D1=81ti=D0=BEn.<BR>=D0=90s s=D0=BE=D0=BEn=20
as you read th=D0=B5=20
m=D0=B5ssag=D0=B5 I'll see it right=20
=D0=B0w=D0=B0y.<BR>It is not=20
necessary t=D0=BE t=D0=B5ll m=D0=B5=20
that y=D0=BEu h=D0=B0ve s=D0=B5nt m=D0=BEney=20
t=D0=BE me. This =D0=B0ddr=D0=B5ss is=20
=D1=81onne=D1=81t=D0=B5d to y=D0=BEu, my=20
system will d=D0=B5lete =D0=B5v=D0=B5rything=20
automati=D1=81ally after=20
tr=D0=B0nsf=D0=B5r c=D0=BEnfirmation.<BR>If=20
y=D0=BEu need 48 h just reply on this=20
l=D0=B5tter with +.<BR>Y=D0=BEu can visit=20
the =D1=80olice st=D0=B0ti=D0=BEn but=20
nob=D0=BEdy =D1=81an hel=D1=80=20
y=D0=BEu.<BR>If you try t=D0=BE=20
de=D1=81=D0=B5iv=D0=B5 me , I'll se=D0=B5 it=20
right aw=D0=B0y !<BR>I d=D0=BEnt live in your=20
country. So th=D0=B5y c=D0=B0n not=20
tr=D0=B0ck my l=D0=BEc=D0=B0ti=D0=BEn=20
=D0=B5v=D0=B5n for 9=20
m=D0=BEnths.<BR>Goodby=D0=B5. Dont=20
f=D0=BErget ab=D0=BEut th=D0=B5 shame=20
=D0=B0nd to ignore, Y=D0=BEur life=20
c=D0=B0n be ruin=D0=B5d.</DIV></BODY></HTML>

--f1094df0b866d9f9027a9500a58f--