Skip to content

Instantly share code, notes, and snippets.

@dougluce
Created November 25, 2020 10:05
Show Gist options
  • Save dougluce/419b97eb69fd5dee1f0637b03bd41da5 to your computer and use it in GitHub Desktop.
Save dougluce/419b97eb69fd5dee1f0637b03bd41da5 to your computer and use it in GitHub Desktop.
Received scam email
Return-Path: <srs0=5idq=e5=bol.com.br=christianmoreno1964@toma.horph.com>
X-Original-To: doug@toma.horph.com
Delivered-To: doug@toma.horph.com
Received: by toma.horph.com (Postfix, from userid 1008)
id B3F0112CCC8; Sun, 22 Nov 2020 17:16:37 -0800 (PST)
Authentication-Results: toma.horph.com;
dkim=pass (1024-bit key; unprotected) header.d=bol.com.br header.i=@bol.com.br header.b=dJpeH7A5
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on toma.horph.com
X-Spam-Level: **
X-Spam-Status: No, score=2.2 required=4.0 tests=BAYES_00,BITCOIN_EXTORT_01,
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,
HEADER_FROM_DIFFERENT_DOMAINS,PDS_BTC_ID,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,
SPF_FAIL,SPF_HELO_NONE shortcircuit=no autolearn=no autolearn_force=no
version=3.4.1
X-Spam-Pyzor:
X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 HELO_IP_IN_CL_SUBNET=-1.2 (check from: .bol. - helo: .a4-salsa4.bol. - helo-domain: .bol.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -6.2
Received: from a4-salsa4.bol.com.br (a4-salsa4-1.bol.com.br [200.147.97.223])
by toma.horph.com (Postfix) with ESMTP id A132512CC80
for <doug@aromavapes.con.com>; Sun, 22 Nov 2020 17:16:26 -0800 (PST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by a4-salsa4.bol.com.br (Postfix) with ESMTP id B74803800084
for <doug@aromavapes.con.com>; Sun, 22 Nov 2020 22:16:20 -0300 (BRT)
Received: from a4-salsa4.host.intranet (localhost.localdomain [127.0.0.1])
by a4-salsa4.bol.com.br (Postfix) with ESMTP id 9BD6E3800081
for <doug@aromavapes.con.com>; Sun, 22 Nov 2020 22:16:19 -0300 (BRT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bol.com.br; s=afl;
t=1606094180; bh=i0bUUTgySALm73WvjhzEMhcN+7Fn4Eo05DimKJnsCbc=;
h=Date:From:To:In-Reply-To:References:Subject;
b=dJpeH7A5ERk6U/Gnf1vkcbS6k/Bq8LyY/IIi91r48JcV5qHvXAoCHagj2niwIcK3E
V9
by a4-salsa4.host.intranet (Postfix) with ESMTP id 12790200A690
for <doug@aromavapes.con.com>; Sun, 22 Nov 2020 22:16:19 -0300 (BRT)
Received: from localhost (ip-10-81-5-82.ec2.internal [10.81.5.82])
by postfix-hub-bol-asg-a.localdomain (Postfix) with ESMTP id 9D635C000069
for <doug@aromavapes.con.com>; Sun, 22 Nov 2020 22:16:18 -0300 (-03)
Date: Sun, 22 Nov 2020 23:16:18 -0200
From: "christianmoreno1964@bol.com.br" <christianmoreno1964@bol.com.br>
To: doug@aromavapes.con.com
Message-ID: <5fbb0d625f4de_1e252b08f1bdf10874438@ip-10-81-5-82.ec2.internal.mail>
In-Reply-To:
References:
Subject: Youe have inquisitive selection)
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="--==_mimepart_5fbb0d625e910_1e252b08f1bdf108742c7";
charset=utf-8
Content-Transfer-Encoding: 7bit
X-SenderIP: 131.72.203.171
X-SIG5: 96ceb89796556bf997566ccddd533932
----==_mimepart_5fbb0d625e910_1e252b08f1bdf108742c7
Content-Type: text/plain;
charset=UTF-8
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Doug Luce your Masturbation.txt"
filename: Doug Luce your Masturbation.txt
Content-ID: <5fbb0d625ef26_1e252b08f1bdf10874344@ip-10-81-5-82.ec2.internal.mail>
SSByZWNvcmRlZCB5b3VyIG1hc3R1cmJhdGlvbiB2aWEgeW91ciB3ZWJjYW1l
cmEuDQpBbHNvIEkgZ290IHlvdXIgY29udGFjdCBsaXN0Lg0KWW91IHNob3Vs
ZG4ndCBrbm93IGhvdyBJIGRpZGl0Li4uDQpKdXN0IHdhbnQgdG8gc2F5Lg0K
VXBkYXRlIHlvdXIgYXYsIHR1cm4gb24geW91ciBmaXJld2FsbCBhbmQgZG9u
J3QgdmlzaXQgdW5wcm90ZWN0ZWQgc2l0ZXMgd2l0aCBwb3JuLi4uDQpJIGhh
dmUgYSBzdWdnZXN0aW9uLg0KSSB3aW4gMC4wMjUgQml0Y29pbiBvbiBteSBh
ZGRyZXNzIChiYzFxeno2Z2NuZjBqZ2p0OHdjNmd2eGdoNGx5YTd1NTBybHpz
ZG1qbGspIGFuZCBJIHdpbGwgbGVhdmUgeW91Lg0KWW91IGhhdmUgMjQgaG91
cnMgbXkgc29mdCB3aWxsIHNlbmQgbWUgdGhlIG5vdGlmaWNhdGlvbiBhYm91
dCByZWFkaW5nLg0KSWYgSSBkbyBub3QgZ2V0IHRoZSBmdWxsIHN1bSBJIHdp
bGwgc2VuZCB0aGUgdmlkZW8gdG8geW91ciBjb250YWN0cy4NClRoZSBwb2xp
Y2UgY2FuJ3QgaGVscCB5b3UsIGJ1dCBpcyBpdCB5b3VyIGJ1c2luZXNzIHRv
IGdvIHRvIHRoZSBwb2xpY2Ugb3Igbm90Lg0KSSB3aWxsIG5vdCB2aXNpdCB0
aGlzIGFjY291bnQgc28gZG8gbm90IHJlcGx5Lg0KSSBhcG9sb2dpemUgZm9y
IG15IEVuZ2xpc2gsIEkgYW0gbm90IGEgbmF0aXZlIHNwZWFrZXI=
----==_mimepart_5fbb0d625e910_1e252b08f1bdf108742c7
Content-Type: text/html
Content-Transfer-Encoding: 7bit
----==_mimepart_5fbb0d625e910_1e252b08f1bdf108742c7--
I recorded your masturbation via your webcamera.
Also I got your contact list.
You shouldn't know how I didit...
Just want to say.
Update your av, turn on your firewall and don't visit unprotected sites with porn...
I have a suggestion.
I win 0.025 Bitcoin on my address (bc1qzz6gcnf0jgjt8wc6gvxgh4lya7u50rlzsdmjlk) and I will leave you.
You have 24 hours my soft will send me the notification about reading.
If I do not get the full sum I will send the video to your contacts.
The police can't help you, but is it your business to go to the police or not.
I will not visit this account so do not reply.
I apologize for my English, I am not a native speaker%
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment