JezK
Edit File: 1786877659.M745090P3055012.ng-shost103.tenten.vn,S=5169,W=5283
Return-Path: <info@bangdientu.com> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id knKGKduWgWqknS4A0NYCOQ (envelope-from <info@bangdientu.com>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Sun, 16 Aug 2026 17:54:19 +0700 Return-path: <info@bangdientu.com> Envelope-to: info@bangdientu.com Delivery-date: Sun, 16 Aug 2026 17:54:19 +0700 Received: from [27.123.254.68] (port=42579 helo=27-123-254-68-mcnbd.com) by ng-shost103.tenten.vn with esmtp (Exim 4.99.5) (envelope-from <info@bangdientu.com>) id 1wvYVL-0000000CnTS-2NDX for info@bangdientu.com; Sun, 16 Aug 2026 17:54:19 +0700 Message-ID: <7df386f4-391e-493e-88dd-cb834f195dcf@bangdientu.com> Date: Sun, 16 Aug 2026 16:50:42 +0600 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: info@bangdientu.com From: info@bangdientu.com Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: Yes, score=25.8 X-Spam-Score: 258 X-Spam-Bar: +++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi, I am a hacker, and I have successfully gained access to your operating system. I also have full access to your account. I've been watching you for a few months now. Content analysis details: (25.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [27.123.254.68 listed in list.dnswl.org] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [27.123.254.68 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [27.123.254.68 listed in wl.mailspike.net] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 8.5 KAM_CRIM Extortion Email 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.5 PDS_BTC_ID FP reduced Bitcoin ID 2.3 BITCOIN_TOEQFM Bitcoin + To same as From 2.3 BITCOIN_SPAM_07 BitCoin spam pattern 07 2.9 BITCOIN_DIRECT Bitcoin + direct-to-MX 0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays 4.5 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin X-Spam-Flag: YES Subject: ***SPAM*** Your account is hacked. Your data is stolen. Learn how to regain access. X-From-Rewrite: unmodified, forwarded message Hi, I am a hacker, and I have successfully gained access to your operating system. I also have full access to your account. I've been watching you for a few months now. The fact is that your computer has been infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. Why did your antivirus not detect malware? Answer: The malware I used is driver-based, I update its signatures every 4 hours. Hence your antivirus is unable to detect its presence. I made a video showing how you satisfy yourself in the left half of the screen, and the right half shows the video you were watching at the time. With one mouse click, I can send this video to all your emails and contacts on your social networks. I can also make public all your e-mail correspondence and chat history on the messengers that you use. If you don't want this to happen, transfer $1250 in Bitcoin equivalent to my Bitcoin address (if you do not know how to do this, just search "buy bitcoin" on Google). My Bitcoin address (BTC Wallet) is: bc1qw6l8m0u9720l7p6l8nw3trcesgt2rxshvr7xrd After confirming your payment, I will delete the video immediately, and that's it. You will never hear from me again. I will give you 50 hours (more than 2 days) to pay. I will get a notice, when you open this email, and the timer will start. Filing a complaint somewhere does not make sense because this email cannot be tracked like my Bitcoin address. I never make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Best regards!