/home/arranoyd/mail/.spam/cur/1699669114.M16172P3828542.nl53.altushost.com,S=8804,W=9000:2,
Return-Path: <anne.talbot@gp-c81081.nhs.uk>
Delivered-To: arranoyd+spam@nl53.altushost.com
Received: from nl53.altushost.com
	by nl53.altushost.com with LMTP
	id qlIAAHrkTmU+azoAmQ2V0w
	(envelope-from <anne.talbot@gp-c81081.nhs.uk>)
	for <arranoyd+spam@nl53.altushost.com>; Sat, 11 Nov 2023 03:18:34 +0100
Return-path: <anne.talbot@gp-c81081.nhs.uk>
Envelope-to: info@jagma.hr
Delivery-date: Sat, 11 Nov 2023 03:18:34 +0100
Received: from [103.65.119.240] (port=12838 helo=[103.65.119.243])
	by nl53.altushost.com with esmtp (Exim 4.96.2)
	(envelope-from <anne.talbot@gp-c81081.nhs.uk>)
	id 1r1dZv-00G3mR-1N
	for info@jagma.hr;
	Sat, 11 Nov 2023 03:18:33 +0100
Message-ID: <D094911422D511A7E3E66355A266D094@8YTF7JGHA42>
From: <anne.talbot@gp-c81081.nhs.uk>
To: <info@jagma.hr>
Date: 11 Nov 2023 12:56:31 +0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_002D_01DA1477.0431D0A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Spam-Status: Yes, score=27.7
X-Spam-Score: 277
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "nl53.altushost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello there!Unfortunately, there are some bad news for you.Some
    time ago your device was infected with my private trojan, R.A.T (Remote Administration
    Tool), if you want to find out more about it simp [...] 
 Content analysis details:   (27.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: times.you]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [103.65.119.240 listed in bl.score.senderscore.com]
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  1.9 BITCOIN_MALF_HTML      Bitcoin + malformed HTML
  2.7 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
                             (FTSDMCXX/boundary variant) + no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.6 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.5 BITCOIN_XPRIO          Bitcoin + priority
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  0.3 PDS_BTC_MSGID          Bitcoin ID with T_MSGID_NOFQDN2
  2.3 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  3.0 GB_BITCOIN_CP          Localized Bitcoin scam
  0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
                             (FTSDMCXX/boundary variant) + direct-to-MX
  0.0 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  3.1 DOS_OE_TO_MX           Delivered direct to MX with OE headers
X-Spam-Flag: YES
Subject:  ***SPAM***  I recorded you.
X-From-Rewrite: unmodified, forwarded message

This is a multi-part message in MIME format.

------=_NextPart_000_002D_01DA1477.0431D0A0
Content-Type: text/plain;
	charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

Hello there!Unfortunately, there are some bad news for you.Some time ago =
your device was infected with my private trojan, R.A.T (Remote =
Administration Tool), if you want to find out more about it simply use =
Google.My trojan allowed me to access your files, accounts and your =
camera.Check the sender of this email, I have sent it from your email =
account.To make sure you read this email, you will receive it multiple =
times.You truly enjoy checking out porn websites and watching dirty =
videos, while having a lot of kinky fun.I RECORDED YOU (through your =
camera) SATISFYING YOURSELF!After that I removed my malware to not leave =
any traces.If you still doubt my serious intentions, it only takes =
couple mouse clicks to share the video of you with your friends, =
relatives, all email contacts, on social networks, the darknet and to =
publish all your files.All you need is $1700 USD in =F7it=D3=CFin =
(=F7=F4=F3) transfer to my account.After the transaction is successful, =
I will proceed to delete everything.Be sure, I keep my promises.You can =
easily buy =F7it=D3=CFin (=F7=F4=F3) =
here:https://cex.io/https://nexo.com/https://bitpay.com/https://paybis.co=
m/https://invity.io/Or simply google other exchanger.After that send the =
=F7it=D3=CFin (=F7=F4=F3) directly to my wallet, or install the free =
software: Atomicwallet, or: Exodus wallet, then receive and send to =
mine.My =F7it=D3=CFin (=F7=F4=F3) address is: =
1MvogqA76t4o8Cya83SbPCGn52VRJsbiUVYes, that's how the address looks =
like, copy and paste my address, it's (cAsE-sEnSEtiVE).You are given not =
more than 3 days after you have opened this email.As I got access to =
this email account, I will know if this email has already been =
read.Everything will be carried out based on fairness.An advice from me, =
regularly change all your passwords to your accounts and update your =
device with newest security patches.
------=_NextPart_000_002D_01DA1477.0431D0A0
Content-Type: text/html;
	charset="koi8-r"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dkoi8-r">
<META content=3D"MSHTML 6.00.2900.5512" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
Hello there!</br>
</br>
Unfortunately, there are some bad news for you.</br>
</br>
Some time ago your device was infected with my private trojan, R.A.T =
(Remote Administration Tool), if you want to find out more about it =
simply use Google.</br>
</br>
My trojan allowed me to access your files, accounts and your =
camera.</br>
</br>
Check the sender of this email, I have sent it from your email =
account.</br>
</br>
To make sure you read this email, you will receive it multiple =
times.</br>
</br>
You truly enjoy checking out porn websites and watching dirty videos, =
while having a lot of kinky fun.</br>
</br>
I RECORDED YOU (through your camera) SATISFYING YOURSELF!</br>
</br>
After that I removed my malware to not leave any traces.</br>
</br>
If you still doubt my serious intentions, it only takes couple mouse =
clicks to share the video of you with your friends, relatives, all email =
contacts, on social networks, </br>
the darknet and to publish all your files.</br>
</br>
All you need is $1700 USD in =F7it=D3=CFin (=F7=F4=F3) transfer to my =
account.</br>
</br>
After the transaction is successful, I will proceed to delete =
everything.</br>
</br>
Be sure, I keep my promises.</br>
</br>
You can easily buy =F7it=D3=CFin (=F7=F4=F3) here:</br>
</br>
https://cex.io/</br>
https://nexo.com/</br>
https://bitpay.com/</br>
https://paybis.com/</br>
https://invity.io/</br>
</br>
Or simply google other exchanger.</br>
</br>
After that send the =F7it=D3=CFin (=F7=F4=F3) directly to my wallet, or =
install the free software: Atomicwallet, or: Exodus wallet, then receive =
and send to mine.</br>
</br>
My =F7it=D3=CFin (=F7=F4=F3) address is: =
1MvogqA76t4o8Cya83SbPCGn52VRJsbiUV</br>
</br>
Yes, that's how the address looks like, copy and paste my address, it's =
(cAsE-sEnSEtiVE).</br>
</br>
You are given not more than 3 days after you have opened this =
email.</br>
</br>
As I got access to this email account, I will know if this email has =
already been read.</br>
</br>
Everything will be carried out based on fairness.</br>
</br>
An advice from me, regularly change all your passwords to your accounts =
and update your device with newest security patches.</BODY></HTML>
------=_NextPart_000_002D_01DA1477.0431D0A0--