| Current File : /home/mak/mail/new/1646809789.M355449P31632.cloud.berardocollection.com,S=8300,W=8435 |
Return-Path: <SRS0=tBXTBz=TU=blnance.tech=mail@mak.pt>
Delivered-To: mak@cloud.berardocollection.com
Received: from cloud.berardocollection.com
by cloud.berardocollection.com with LMTP
id V2cCFb1SKGKQewAAuY/3dA
(envelope-from <SRS0=tBXTBz=TU=blnance.tech=mail@mak.pt>)
for <mak@cloud.berardocollection.com>; Wed, 09 Mar 2022 07:09:49 +0000
Return-path: <SRS0=tBXTBz=TU=blnance.tech=mail@mak.pt>
Envelope-to: rgrs@mak.pt
Delivery-date: Wed, 09 Mar 2022 07:09:49 +0000
Received: from blnance.tech ([87.251.85.15]:34463)
by cloud.berardocollection.com with esmtp (Exim 4.94.2)
(envelope-from <mail@blnance.tech>)
id 1nRqS7-0008E7-8k
for rgrs@mak.pt; Wed, 09 Mar 2022 07:09:49 +0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=key1; d=blnance.tech;
h=From:To:Subject:Date:MIME-Version:Message-ID:Content-Type; i=abuse@blnance.tech;
bh=z2bBJVoturKfuTWZCKaw1SMsdaY=;
b=DH620zAXwvxAOic3cfrlzS18pKhO3sihDstBFv0LCAkPYFrlgG93b55aUWh8y1Yz630v8DrnuC3z
L0EtJ8BzmCt8XCY4eDOKoqNfLJSmZ3HeEy+2q1kXw0ih2KkalIxerTd0gTC3xztdkch7PFNUTaPs
NRkLha0wZSYDgh712jubvbOL1u8pQ9WapsXvqC2ejb9IAAeswMpM5LxYOfUPYQNCCkapkF6+awWU
ntelQyRC4998Xbr0lKYaM+Px0opUvJ3zgk1x43T/S+QHsJ5qI0t7tHWJgq2+pbzOhxVkAp69xiOn
H6P7q96eqFj2V6nGGIPxqlMxHYe3We9qNAU/Ag==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=key1; d=blnance.tech;
b=Hkx8Gj8kAoJtViZuBkoQBFiJdO4cCgQEmKAe7RfS0tYbs7hG1W0371PqbLfshDoacOa88WBaT63T
QqLgFn8SmOXDxhgUIJlTmNQTMo0T1eFV/TAwMB/UaJ9roGWClBqUtff8cur4HL/5ZnAPH8Ue4C2h
+kCXKdRH+NwESJV2NHy4WImhkXRRV9v+gqupIKfoG8QLhWDZO6EjJt1DBqQ1YXiZcNRUN+YLdgzE
9yBzxovrHNuMPTp+X0QtoeVTA+MQk7QJRdTbgrobbeV3aOdFxUJR3eCGjL2fDmFbkFowa1SjqnQ1
PQARFim5HXmw/75Mwg8DDyrHbxry3jFaewLePA==;
From: HACKER <mail@blnance.tech>
To: To: rgrs@mak.pt
Bcc: rgrs@mak.pt, info@scardonicoperture.it, ann.teerlinck@konekt.be, martynas@silutes-vandenys.lt, alan@skodalocalmarketing.co.uk, posteitaliane@posteid.it, josephandersonfexgz@living-light.it, register-ejl6cjk@zeplan.fr, williamclarknuru@losipallets.it, bp@geschwandtner.at, nathalie.deweert@goestenopdam.nl
Subject: =?utf-8?B?Q2F1dGlvbiEgSGFja2VyIGF0dGE=?= =?utf-8?B?Y2sgb24geW91ciBhY2NvdW50IQ==?=
Date: Tue, 08 Mar 2022 23:09:24 +0400
MIME-Version: 1.0
Message-ID: <H9P0xtfu748nD5F.nRGiSNN8bUU9dR>
X-VR-SPAMSTATE: 67wU121Z;180D
X-subject: BT-ylvSiu3FIFUtOH5uzBk+hn;RK1p0Io06Ykm93rRW
X-LocalIps: jE19
Require-Recipient-Valid-Since: y0X99ovPS;pi
X-Facebook: p5mxfKSSw579
User-Agent: 8X3Q5Iy+FqoCq;Wi34;Fvb426Xh0brnLguW
Content-Type: multipart/alternative;
boundary="9836094980714-51159323255550646123"
X-Spam-Status: No, score=4.9
X-Spam-Score: 49
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "cloud.berardocollection.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hey, Your computer was infected with my malware, RAT (Remote
Administration Tool), your browser wasn't updated / patched, in such case
it's enough to just visit some website where my iframe is placed [...]
Content analysis details: (4.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: coingate.com]
0.0 URIBL_DBL_BLOCKED ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked. See
https://www.spamhaus.org/returnc/vol/
[URIs: coingate.com]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
parts
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.6 INVALID_MSGID Message-Id is not valid, according to RFC 2822
4.1 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
0.5 PDS_BTC_ID FP reduced Bitcoin ID
X-Spam-Flag: NO
--9836094980714-51159323255550646123
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: base64
PGh0bWw+DQo8Ym9keT4NCkhleSw8YnI+DQpZb3VyIGNvbXB1dGVyIHdhcyBpbmZlY3RlZCB3aXRo
IG15IG1hbHdhcmUsIFJBVCAoUmVtb3RlIEFkbWluaXN0cmF0aW9uIFRvb2wpLCB5b3VyIGJyb3dz
ZXIgd2Fzbid0IHVwZGF0ZWQgLyBwYXRjaGVkLCBpbiBzdWNoIGNhc2UgaXQncyBlbm91Z2ggdG8g
anVzdCB2aXNpdCBzb21lIHdlYnNpdGUgd2hlcmUgbXkgaWZyYW1lIGlzIHBsYWNlZCB0byBnZXQg
YXV0b21hdGljYWxseSBpbmZlY3RlZCwgDQppZiB5b3Ugd2FudCB0byBmaW5kIG91dCBtb3JlIC0g
R29vZ2xlOiAiRHJpdmUtYnkgZXhwbG9pdCIuPGJyPiANCk15IG1hbHdhcmUgZ2F2ZSBtZSBmdWxs
IGFjY2VzcyBhbmQgY29udHJvbCBvdmVyIHlvdXIgY29tcHV0ZXIsIG1lYW5pbmcsIEkgZ290IGFj
Y2VzcyB0byBhbGwgeW91ciBhY2NvdW50cyAoc2VlIHBhc3N3b3JkIGFib3ZlKSBhbmQgSSBjYW4g
c2VlIGV2ZXJ5dGhpbmcgb24geW91ciBzY3JlZW4sIHR1cm4gb24geW91ciBjYW1lcmEgb3IgbWlj
cm9waG9uZSBhbmQgeW91IHdvbid0IGV2ZW4gbm90aWNlIGFib3V0IGl0Lg0KSSBjb2xsZWN0ZWQg
YWxsIHlvdXIgcHJpdmF0ZSBkYXRhIGFuZCBJIFJFQ09SREVEIFlPVSAodGhyb3VnaCB5b3VyIHdl
YmNhbSkgU0FUSVNGWUlORyBZT1VSU0VMRiEgQWZ0ZXIgdGhhdCBJIHJlbW92ZWQgbXkgbWFsd2Fy
ZSB0byBub3QgbGVhdmUgYW55IHRyYWNlcy4gSSBjYW4gc2VuZCB0aGUgdmlkZW8gdG8gYWxsIHlv
dXIgY29udGFjdHMsIHBvc3QgaXQgb24gc29jaWFsIG5ldHdvcmssIHB1Ymxpc2ggaXQgb24gdGhl
IHdob2xlIHdlYiwNCmluY2x1ZGluZyB0aGUgZGFya25ldCwgd2hlcmUgdGhlIHNpY2sgcGVvcGxl
IGFyZSwgSSBjYW4gcHVibGlzaCBhbGwgSSBmb3VuZCBvbiB5b3VyIGNvbXB1dGVyIGV2ZXJ5d2hl
cmUhIE9ubHkgeW91IGNhbiBwcmV2ZW50IG1lIGZyb20gZG9pbmcgdGhpcyBhbmQgb25seSBJIGNh
biBoZWxwIHlvdSBvdXQgaW4gdGhpcyBzaXR1YXRpb24uIA0KVHJhbnNmZXIgZXhhY3RseSA3MDAk
IHdpdGggdGhlIGN1cnJlbnQgYml0Y29pbiAoQlRDKSBwcmljZSB0byBteSBiaXRjb2luIGFkZHJl
c3MuIEl0J3MgYSB2ZXJ5IGdvb2Qgb2ZmZXIsIGNvbXBhcmVkIHRvIGFsbCB0aGF0IGhvcnJpYmxl
IHNoaXQgdGhhdCB3aWxsIGhhcHBlbiBpZiBJIHB1Ymxpc2ggZXZlcnl0aGluZyE8YnI+DQo8YnI+
DQpZb3UgY2FuIGVhc2lseSBidXkgYml0Y29pbiBoZXJlOjxicj4NCnd3dy5wYXhmdWwuY29tPGJy
Pg0Kd3d3LmNvaW5nYXRlLmNvbTxicj4NCnd3dy5sb2NhbGJpdGNvaW5zLmNvbTxicj4NCnd3dy5j
b2luYmFzZS5jb208YnI+DQpvciBjaGVjayBmb3IgYml0Y29pbiBBVE0gbmVhciB5b3UsIG9yIEdv
b2dsZSBmb3Igb3RoZXIgZXhjaGFuZ2VyLjxicj4gDQo8YnI+DQpZb3UgY2FuIHNlbmQgdGhlIGJp
dGNvaW4gZGlyZWN0bHkgdG8gbXkgYWRkcmVzcywgb3IgY3JlYXRlIHlvdXIgb3duIHdhbGxldCBm
aXJzdCBoZXJlOiBodHRwczovL3d3dy5ibG9ja2NoYWluLmNvbS8gLCB0aGVuIHJlY2VpdmUgYW5k
IHNlbmQgdG8gbWluZS4gDQo8YnI+DQpNeSBiaXRjb2luIGFkZHJlc3MgaXM6IGJjMXF6dmM0bmx6
ejcyOHQ2cW52MHh6OHhjc3M1N2F6dDB1YXZnbXY4dg0KPGJyPg0KQ29weSBhbmQgcGFzdGUgbXkg
YWRkcmVzcywgaXQncyAoY0FzRS1zRW5TRXRpVkUpICE8YnI+DQo8YnI+DQpJIGdpdmUgeW91IDMg
ZGF5cyB0aW1lIHRvIHRyYW5zZmVyIHRoZSBiaXRjb2luISBBcyBJIGdvdCBhY2Nlc3MgdG8gdGhp
cyBlbWFpbCBhY2NvdW50LCBJIHdpbGwga25vdyBpZiB0aGlzIGVtYWlsIGhhcyBhbHJlYWR5IGJl
ZW4gcmVhZC4gSWYgeW91IGdldCB0aGlzIA0KZW1haWwgbXVsdGlwbGUgdGltZXMsIGl0J3MgdG8g
bWFrZSBzdXJlIHlvdSByZWFkIGl0LCBteSBtYWlsZXIgc2NyaXB0IGhhcyBiZWVuIGNvbmZpZ3Vy
ZWQgbGlrZSB0aGF0IGFuZCBhZnRlciBwYXltZW50IHlvdSBjYW4gaWdub3JlIGl0Lg0KQWZ0ZXIg
cmVjZWl2aW5nIHRoZSBwYXltZW50LCBJIHdpbGwgcmVtb3ZlIGV2ZXJ5dGhpbmcgYW5kIHlvdSBj
YW4gbGlmZSB5b3VyIGxpdmUgaW4gcGVhY2UgbGlrZSBiZWZvcmUuPGJyPg0KPGJyPg0KTmV4dCB0
aW1lIHVwZGF0ZSB5b3VyIGJyb3dzZXIgYmVmb3JlIGJyb3dzaW5nIHRoZSB3ZWIhIA0KPC9ib2R5
Pg0KPC9odG1sPg==
--9836094980714-51159323255550646123--