JezK

Edit File: 1786960068.M26216P2913679.ng-shost103.tenten.vn,S=5853,W=5954

Return-Path: <sales@bangdientu.com> Delivered-To: ygse2u4nhwzo@ng-shost103.tenten.vn Received: from ng-shost103.tenten.vn by ng-shost103.tenten.vn with LMTP id bG+aOsPYgmqPdSwA0NYCOQ (envelope-from <sales@bangdientu.com>) for <ygse2u4nhwzo@ng-shost103.tenten.vn>; Mon, 17 Aug 2026 16:47:47 +0700 Return-path: <sales@bangdientu.com> Envelope-to: sales@bangdientu.com Delivery-date: Mon, 17 Aug 2026 16:47:48 +0700 Received: from [45.237.235.56] (port=33710 helo=45-237-235-56.veloznet.net) by ng-shost103.tenten.vn with esmtp (Exim 4.99.5) (envelope-from <sales@bangdientu.com>) id 1wvtwX-0000000CCkU-2kZN for sales@bangdientu.com; Mon, 17 Aug 2026 16:47:47 +0700 MIME-Version: 1.0 Date: Mon, 17 Aug 2026 06:43:26 -0300 From: <sales@bangdientu.com> Thread-Topic: Your account is hacked. Your data is stolen. Learn how to regain access. Message-ID: <98152070-5B42-4E40-8E42-B92B584D7859@hxcore.ol> To: <sales@bangdientu.com> Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8" X-Spam-Status: Yes, score=30.1 X-Spam-Score: 301 X-Spam-Bar: ++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ng-shost103.tenten.vn", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi, I am a hacker, and I have successfully gained access to your operating system. I also have full access to your account. I've been watching you for a few months now. Content analysis details: (30.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [45.237.235.56 listed in list.dnswl.org] 1.5 RCVD_IN_HOSTKARMA_BL RBL: Sender listed in HOSTKARMA-BLACK [45.237.235.56 listed in hostkarma.junkemailfilter.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [45.237.235.56 listed in psbl.surriel.com] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 8.5 KAM_CRIM Extortion Email 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any anti-forgery methods 0.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 3.5 BITCOIN_TOEQFM Bitcoin + To same as From 0.5 PDS_BTC_ID FP reduced Bitcoin ID 3.2 BITCOIN_DIRECT Bitcoin + direct-to-MX 2.5 BITCOIN_SPAM_07 BitCoin spam pattern 07 4.4 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.2 HELO_MISC_IP Looking for more Dynamic IP Relays X-Spam-Flag: YES Subject: ***SPAM*** Your account is hacked. Your data is stolen. Learn how to regain access. X-From-Rewrite: unmodified, forwarded message SGksCgpJIGFtIGEgaGFja2VyLCBhbmQgSSBoYXZlIHN1Y2Nlc3NmdWxseSBnYWluZWQgYWNjZXNz IHRvIHlvdXIgb3BlcmF0aW5nIHN5c3RlbS4KSSBhbHNvIGhhdmUgZnVsbCBhY2Nlc3MgdG8geW91 ciBhY2NvdW50LgoKSSd2ZSBiZWVuIHdhdGNoaW5nIHlvdSBmb3IgYSBmZXcgbW9udGhzIG5vdy4K ClRoZSBmYWN0IGlzIHRoYXQgeW91ciBjb21wdXRlciBoYXMgYmVlbiBpbmZlY3RlZCB3aXRoIG1h bHdhcmUgdGhyb3VnaCBhbiBhZHVsdCBzaXRlIHRoYXQgeW91IHZpc2l0ZWQuCklmIHlvdSBhcmUg bm90IGZhbWlsaWFyIHdpdGggdGhpcywgSSB3aWxsIGV4cGxhaW4uClRyb2phbiBWaXJ1cyBnaXZl cyBtZSBmdWxsIGFjY2VzcyBhbmQgY29udHJvbCBvdmVyIGEgY29tcHV0ZXIgb3Igb3RoZXIgZGV2 aWNlLgpUaGlzIG1lYW5zIHRoYXQgSSBjYW4gc2VlIGV2ZXJ5dGhpbmcgb24geW91ciBzY3JlZW4s IHR1cm4gb24gdGhlIGNhbWVyYSBhbmQgbWljcm9waG9uZSwgYnV0IHlvdSBkbyBub3Qga25vdyBh Ym91dCBpdC4KSSBhbHNvIGhhdmUgYWNjZXNzIHRvIGFsbCB5b3VyIGNvbnRhY3RzIGFuZCBhbGwg eW91ciBjb3JyZXNwb25kZW5jZS4KCldoeSBkaWQgeW91ciBhbnRpdmlydXMgbm90IGRldGVjdCBt YWx3YXJlPwpBbnN3ZXI6IFRoZSBtYWx3YXJlIEkgdXNlZCBpcyBkcml2ZXItYmFzZWQsIEkgdXBk YXRlIGl0cyBzaWduYXR1cmVzIGV2ZXJ5IDQgaG91cnMuIEhlbmNlIHlvdXIgYW50aXZpcnVzIGlz IHVuYWJsZSB0byBkZXRlY3QgaXRzIHByZXNlbmNlLgpJIG1hZGUgYSB2aWRlbyBzaG93aW5nIGhv dyB5b3Ugc2F0aXNmeSB5b3Vyc2VsZiBpbiB0aGUgbGVmdCBoYWxmIG9mIHRoZSBzY3JlZW4sIGFu ZCB0aGUgcmlnaHQgaGFsZiBzaG93cyB0aGUgdmlkZW8geW91IHdlcmUgd2F0Y2hpbmcgYXQgdGhl IHRpbWUuCgpXaXRoIG9uZSBtb3VzZSBjbGljaywgSSBjYW4gc2VuZCB0aGlzIHZpZGVvIHRvIGFs bCB5b3VyIGVtYWlscyBhbmQgY29udGFjdHMgb24geW91ciBzb2NpYWwgbmV0d29ya3MuCkkgY2Fu IGFsc28gbWFrZSBwdWJsaWMgYWxsIHlvdXIgZS1tYWlsIGNvcnJlc3BvbmRlbmNlIGFuZCBjaGF0 IGhpc3Rvcnkgb24gdGhlIG1lc3NlbmdlcnMgdGhhdCB5b3UgdXNlLgoKSWYgeW91IGRvbid0IHdh bnQgdGhpcyB0byBoYXBwZW4sIHRyYW5zZmVyICQxMjUwIGluIEJpdGNvaW4gZXF1aXZhbGVudCB0 byBteSBCaXRjb2luIGFkZHJlc3MgKGlmIHlvdSBkbyBub3Qga25vdyBob3cgdG8gZG8gdGhpcywg anVzdCBzZWFyY2ggImJ1eSBiaXRjb2luIiBvbiBHb29nbGUpLgoKTXkgQml0Y29pbiBhZGRyZXNz IChCVEMgV2FsbGV0KSBpczogYmMxcXc2bDhtMHU5NzIwbDdwNmw4bnczdHJjZXNndDJyeHNodnI3 eHJkCgpBZnRlciBjb25maXJtaW5nIHlvdXIgcGF5bWVudCwgSSB3aWxsIGRlbGV0ZSB0aGUgdmlk ZW8gaW1tZWRpYXRlbHksIGFuZCB0aGF0J3MgaXQuIFlvdSB3aWxsIG5ldmVyIGhlYXIgZnJvbSBt ZSBhZ2Fpbi4KSSB3aWxsIGdpdmUgeW91IDUwIGhvdXJzIChtb3JlIHRoYW4gMiBkYXlzKSB0byBw YXkuIEkgd2lsbCBnZXQgYSBub3RpY2UsIHdoZW4geW91IG9wZW4gdGhpcyBlbWFpbCwgYW5kIHRo ZSB0aW1lciB3aWxsIHN0YXJ0LgpGaWxpbmcgYSBjb21wbGFpbnQgc29tZXdoZXJlIGRvZXMgbm90 IG1ha2Ugc2Vuc2UgYmVjYXVzZSB0aGlzIGVtYWlsIGNhbm5vdCBiZSB0cmFja2VkIGxpa2UgbXkg Qml0Y29pbiBhZGRyZXNzLgoKSSBuZXZlciBtYWtlIGFueSBtaXN0YWtlcy4KSWYgSSBmaW5kIHRo YXQgeW91IGhhdmUgc2hhcmVkIHRoaXMgbWVzc2FnZSB3aXRoIHNvbWVvbmUgZWxzZSwgdGhlIHZp ZGVvIHdpbGwgYmUgaW1tZWRpYXRlbHkgZGlzdHJpYnV0ZWQuCgpCZXN0IHJlZ2FyZHMh