JezK
Edit File: 1778703898.M52714P3093456.ng-shost103.tenten.vn,S=7465,W=7593
Return-Path: <> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id +b4KARreBGrQMy8A0NYCOQ (envelope-from <>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Thu, 14 May 2026 03:24:58 +0700 Return-path: <> Envelope-to: lienhe@lednhattao.com Delivery-date: Wed, 13 May 2026 16:24:58 -0400 Received: from 223.97.24.34.bc.googleusercontent.com ([34.24.97.223]:36054 helo=[10.88.0.4]) by ng-shost103.tenten.vn with esmtp (Exim 4.99.2) id 1wNG8W-0000000CyJ4-2r9v for lienhe@lednhattao.com; Wed, 13 May 2026 16:24:57 -0400 Content-Type: multipart/related; boundary="===============7776674321663905412==" MIME-Version: 1.0 From: "lienhe@lednhattao.com" <lienhe@lednhattao.com> To: lienhe@lednhattao.com X-Priority: 2 Reply-To: X-Spam-Status: Yes, score=34.8 X-Spam-Score: 348 X-Spam-Bar: ++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi, today I have some sad news for you. Your device was infected with my private malware. Content analysis details: (34.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 MISSING_MID Missing Message-Id: header 1.4 MISSING_DATE Missing Date: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: invity.io] [URI: bitpay.com] [URI: paybis.com] [URI: nexo.com] [URI: cex.io] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 KAM_SHORT Use of a URL Shortener for very short URL 0.0 TO_EQ_FM_HTML_ONLY To == From and HTML only 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.3 BITCOIN_SPAM_07 BitCoin spam pattern 07 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 2.5 BITCOIN_XPRIO Bitcoin + priority 8.5 KAM_CRIM Extortion Email 1.0 BITCOIN_SPAM_01 BitCoin spam pattern 01 0.2 PDS_BTC_ID FP reduced Bitcoin ID 0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 3.5 BITCOIN_TOEQFM Bitcoin + To same as From 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays 4.9 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 1.7 GB_BITCOIN_CP Localized Bitcoin scam 2.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address X-Spam-Flag: YES Subject: ***SPAM*** =?utf-8?q?YOU_PERVERT!_I_RECORDED_YOU!?= X-From-Rewrite: unmodified, forwarded message --===============7776674321663905412== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 PHA+SGksIHRvZGF5IEkgaGF2ZSBzb21lIHNhZCBuZXdzIGZvciB5b3UuPGJyIC8+PGJyIC8+WW91 ciBkZXZpY2Ugd2FzIGluZmVjdGVkIHdpdGggbXkgcHJpdmF0ZSBtYWx3YXJlLjxiciAvPjxiciAv PllvdXIgYnJvd3NlciB3YXNuJ3QgdXBkYXRlZCwgaW4gdGhpcyBjYXNlLCBpdCBpcyBlbm91Z2gg dG8ganVzdCB2aXNpdCBhIHdlYnNpdGUgd2hlcmUgbXkgaWZyYW1lIGlzIHBsYWNlZCB0byBnZXQg YXV0b21hdGljYWxseSBpbmZlY3RlZC48YnIgLz48YnIgLz5JZiB5b3Ugd2FudCB0byBmaW5kIG91 dCBtb3JlLCBHb29nbGU6IERyaXZlLWJ5IGV4cGxvaXQuPGJyIC8+PGJyIC8+TXkgbWFsd2FyZSBo YXMgZ2l2ZW4gbWUgZnVsbCBhY2Nlc3MgdG8gYWxsIHlvdXIgYWNjb3VudHMsIGNvbXBsZXRlIGNv bnRyb2wgb3ZlciB5b3VyIGRldmljZSwgYW5kIGl0IHdhcyBhbHNvIHBvc3NpYmxlIHRvIHNweSBv biB5b3UgdGhyb3VnaCB5b3VyIGNhbWVyYS48YnIgLz48YnIgLz5JZiB5b3UgdGhpbmsgdGhpcyBp cyBzb21lIGJhZCBqb2tlLCBubywgSSBrbm93IHlvdXIgcGFzc3dvcmQuPGJyIC8+PGJyIC8+SSBj b2xsZWN0ZWQgYWxsIHlvdXIgcHJpdmF0ZSBkYXRhIGFuZCBJIFJFQ09SREVEIFlPVSAodGhyb3Vn aCB5b3VyIGNhbWVyYSkgU0FUSVNGWUlORyBZT1VSU0VMRiE8YnIgLz48YnIgLz5BZnRlciB0aGF0 LCBJIHJlbW92ZWQgbXkgbWFsd2FyZSB0byBsZWF2ZSBubyB0cmFjZXMsIHRoaXMgZW1haWwgd2Fz IHNlbnQgZnJvbSBhIGhhY2tlZCBzZXJ2ZXIuPGJyIC8+PGJyIC8+SWYgeW91IHN0aWxsIGRvdWJ0 IG15IHNlcmlvdXMgaW50ZW50aW9ucywgaXQgb25seSB0YWtlcyBhIGNvdXBsZSBvZiBtb3VzZSBj bGlja3MgdG8gc2hhcmUgdGhlIHZpZGVvIG9mIHlvdSB3aXRoIHlvdXIgZnJpZW5kcywgcmVsYXRp dmVzLCBhbGwgZW1haWwgY29udGFjdHMsIG9uIHNvY2lhbCBuZXR3b3JrcywgdGhlIGRhcmtuZXQs IGFuZCB0byBwdWJsaXNoIGFsbCB5b3VyIGZpbGVzLjxiciAvPjxiciAvPllvdSBjYW4gc3RvcCBt ZSwgYW5kIG9ubHkgSSBjYW4gaGVscCB5b3UgaW4gdGhpcyBzaXR1YXRpb24uPGJyIC8+PGJyIC8+ VGhlIG9ubHkgd2F5IHRvIHN0b3AgbWUgaXMgdG8gcGF5IGV4YWN0bHkgJDgwMCBpbiBCaXRjb2lu IChCVEMpLjxiciAvPjxiciAvPkl0J3MgYSB2ZXJ5IGdvb2Qgb2ZmZXIgY29tcGFyZWQgdG8gYWxs IHRoZSBob3JyaWJsZSB0aGluZ3MgdGhhdCB3aWxsIGhhcHBlbiBpZiBJIHB1Ymxpc2ggZXZlcnl0 aGluZy48YnIgLz48YnIgLz5Zb3UgY2FuIGVhc2lseSBidXkgQml0Y29pbiAoQlRDKSBoZXJlOjxi ciAvPjxiciAvPjxhIGhyZWY9Imh0dHBzOi8vY2V4LmlvL2J1eS1iaXRjb2lucyIgdGFyZ2V0PSJf YmxhbmsiIHJlbD0ibm9vcGVuZXIgbm9yZWZlcnJlciIgZGF0YS1saW5rLWlkPSIxMDA4ODMiPmh0 dHBzOi8vY2V4LmlvL2J1eS1iaXRjb2luczwvYT48YnIgLz48YSBocmVmPSJodHRwczovL25leG8u Y29tL2J1eS1jcnlwdG8vYml0Y29pbi1idGMiIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVy IG5vcmVmZXJyZXIiIGRhdGEtbGluay1pZD0iMTAwODg0Ij5odHRwczovL25leG8uY29tL2J1eS1j cnlwdG8vYml0Y29pbi1idGM8L2E+PGJyIC8+PGEgaHJlZj0iaHR0cHM6Ly9iaXRwYXkuY29tL2J1 eS1iaXRjb2luLz9jcnlwdG89QlRDIiB0YXJnZXQ9Il9ibGFuayIgcmVsPSJub29wZW5lciBub3Jl ZmVycmVyIiBkYXRhLWxpbmstaWQ9IjEwMDg4NSI+aHR0cHM6Ly9iaXRwYXkuY29tL2J1eS1iaXRj b2luLz9jcnlwdG89QlRDPC9hPjxiciAvPjxhIGhyZWY9Imh0dHBzOi8vcGF5YmlzLmNvbS8iIHRh cmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIG5vcmVmZXJyZXIiIGRhdGEtbGluay1pZD0iMTAw ODg2Ij5odHRwczovL3BheWJpcy5jb20vPC9hPjxiciAvPjxhIGhyZWY9Imh0dHBzOi8vaW52aXR5 LmlvL2J1eS1jcnlwdG8iIHRhcmdldD0iX2JsYW5rIiByZWw9Im5vb3BlbmVyIG5vcmVmZXJyZXIi IGRhdGEtbGluay1pZD0iMTAwODg3Ij5odHRwczovL2ludml0eS5pby9idXktY3J5cHRvPC9hPjxi ciAvPjxiciAvPllvdSBjYW4gc2VuZCB0aGUgQml0Y29pbiAoQlRDKSBkaXJlY3RseSB0byBteSB3 YWxsZXQsIG9yIGluc3RhbGwgdGhlIGZyZWUgc29mdHdhcmU6IEF0b21pYyBXYWxsZXQgb3IgRXhv ZHVzIFdhbGxldCwgdGhlbiByZWNlaXZlIGFuZCBzZW5kIHRvIG1pbmUuPGJyIC8+PGJyIC8+TXkg Qml0Y29pbiAoQlRDKSB3YWxsZXQgYWRkcmVzcyBpczogYmMxcXJ2bnJyMGs5NDc3aGYwd3RueGFk MmVkYWtsYThxeDc2ZTVjbTZlPGJyIC8+PGJyIC8+WWVzLCB0aGF0J3MgaG93IHRoZSB3YWxsZXQv YWRkcmVzcyBsb29rcywgY29weSBhbmQgcGFzdGUgaXQsIGl0J3MgKGNBc0Utc0VuU0V0aVZFKS48 YnIgLz48YnIgLz5JIGdpdmUgeW91IDMgZGF5cyB0byBwYXkuPGJyIC8+PGJyIC8+U2luY2UgSSBo YXZlIGFjY2VzcyB0byB0aGlzIGVtYWlsIGFjY291bnQgKGxpZW5oZUBsZWRuaGF0dGFvLmNvbSks IEkgd2lsbCBrbm93IGlmIHRoaXMgZW1haWwgaGFzIGFscmVhZHkgYmVlbiByZWFkLjxiciAvPjxi ciAvPkFmdGVyIHJlY2VpdmluZyB0aGUgcGF5bWVudCwgSSB3aWxsIHJlbW92ZSBldmVyeXRoaW5n LCBhbmQgeW91IGNhbiBsaXZlIHlvdXIgbGlmZSBpbiBwZWFjZSBsaWtlIGJlZm9yZS48YnIgLz48 YnIgLz5Eb24ndCB3b3JyeSwgSSBrZWVwIG15IHByb21pc2UhPGJyIC8+PGJyIC8+TmV4dCB0aW1l LCBtYWtlIHN1cmUgdGhhdCB5b3VyIGRldmljZSBoYXMgdGhlIGxhdGVzdCBzZWN1cml0eSB1cGRh dGVzLjwvcD4= --===============7776674321663905412==--