EVOLUTION-NINJA
Edit File: 1701336068.M183164P26920.myaccount8.wpcpanel.com,S=6469,W=6624
Return-Path: <> Delivered-To: kahlita@e24.com.au Received: from myaccount8.wpcpanel.com by myaccount8.wpcpanel.com with LMTP id KF7PCQRUaGUoaQAAycIfzw (envelope-from <>) for <kahlita@e24.com.au>; Thu, 30 Nov 2023 20:21:08 +1100 Return-path: <> Envelope-to: kahlita@e24.com.au Delivery-date: Thu, 30 Nov 2023 20:21:08 +1100 Received: from mailnull by myaccount8.wpcpanel.com with local (Exim 4.96.2) id 1r8dEJ-00071k-36 for kahlita@e24.com.au; Thu, 30 Nov 2023 20:21:08 +1100 X-Failed-Recipients: kahlita@e24.com.au Auto-Submitted: auto-replied From: Mail Delivery System <Mailer-Daemon@myaccount8.wpcpanel.com> To: kahlita@e24.com.au References: <191449.191449@91351.com> Content-Type: multipart/report; report-type=delivery-status; boundary=1701336067-eximdsn-1804289383 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: <E1r8dEJ-00071k-36@myaccount8.wpcpanel.com> Date: Thu, 30 Nov 2023 20:21:07 +1100 --1701336067-eximdsn-1804289383 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: kahlita@e24.com.au The mail server detected your message as spam and has prevented delivery (120). --1701336067-eximdsn-1804289383 Content-type: message/delivery-status Reporting-MTA: dns; myaccount8.wpcpanel.com Action: failed Final-Recipient: rfc822;kahlita@e24.com.au Status: 5.0.0 --1701336067-eximdsn-1804289383 Content-type: message/rfc822 Return-path: <kahlita@e24.com.au> Received: from [2.132.94.230] (port=18362 helo=[5.251.252.238]) by myaccount8.wpcpanel.com with esmtp (Exim 4.96.2) (envelope-from <kahlita@e24.com.au>) id 1r8dEE-0006yt-2n for kahlita@e24.com.au; Thu, 30 Nov 2023 20:21:07 +1100 Received: from qycrerj ([112.242.49.19]) by 91351.com with MailEnable ESMTP; Thu, 30 Nov 2023 15:21:02 +0600 Received: (qmail 19144 invoked by uid 191); 30 Nov 2023 15:21:00 +0600 From: kahlita@e24.com.au To: kahlita@e24.com.au Subject: YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! Date: Thu, 30 Nov 2023 15:21:02 +0600 Message-ID: <191449.191449@91351.com> Mime-Version: 1.0 Content-type: text/plain; X-Spam-Subject: ***SPAM*** YOUR DEVICE AND EMAIL HAS BEEN COMPROMISED CHECK THIS MESSAGE NOW! X-Spam-Status: Yes, score=19.6 X-Spam-Score: 196 X-Spam-Bar: +++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "myaccount8.wpcpanel.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. Content analysis details: (19.6 points, 4.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [2.132.94.230 listed in dnsbl.sorbs.net] 4.2 BAYES_80 BODY: Bayes spam probability is 80 to 95% [score: 0.8975] 0.5 SUBJ_ALL_CAPS Subject is all capitals 1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 KAM_SHORT Use of a URL Shortener for very short URL 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment -0.0 T_SCC_BODY_TEXT_LINE No description available. 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.5 PDS_BTC_ID FP reduced Bitcoin ID 0.9 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 1.1 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.5 GB_BITCOIN_CP Localized Bitcoin scam 1.3 BITCOIN_SPAM_07 BitCoin spam pattern 07 1.5 BITCOIN_TOEQFM Bitcoin + To same as From 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays X-Spam-Flag: YES Hello there! Unfortunately, there are some bad news for you. Some time ago your device was infected with my private trojan, R.A.T (Remote Administration Tool), if you want to find out more about it simply use Google. My trojan allowed me to access your files, accounts and your camera. Check the sender of this email, I have sent it from your email account. To make sure you read this email, you will receive it multiple times. You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun. I RECORDED YOU (through your camera) SATISFYING YOURSELF! After that I removed my malware to not leave any traces. If you still doubt my serious intentions, it only takes couple mouse clicks to share the video of you with your friends, relatives, all email contacts, on social networks, the darknet and to publish all your files. All you need is $5000 USD in Bitcoin (BTC) transfer to my account. After the transaction is successful, I will proceed to delete everything. Be sure, I keep my promises. You can easily buy Bitcoin (BTC) here: https://cex.io/buy-bitcoins https://nexo.com/buy-crypto/bitcoin-btc https://bitpay.com/buy-bitcoin/?crypto=BTC https://paybis.com/ https://invity.io/buy-crypto Or simply google other exchanger. After that send the Bitcoin (BTC) directly to my wallet, or install the free software: Atomicwallet, or: Exodus wallet, then receive and send to mine. My Bitcoin (BTC) address is: 1EV3qSyz4XKoZAWvB1eVSYqHyqCNRdv9i7 Yes, that's how the address looks like, copy and paste my address, it's (cAsE-sEnSEtiVE). You are given not more than 3 days after you have opened this email. As I got access to this email account, I will know if this email has already been read. Everything will be carried out based on fairness. An advice from me, regularly change all your passwords to your accounts and update your device with newest security patches. --1701336067-eximdsn-1804289383--