Return-Path: <glopez@gigiscleaning.net>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
	by node612.namehero.net with LMTP
	id yxi+IAGhNWrAywkAJLeZpw
	(envelope-from <glopez@gigiscleaning.net>)
	for <dfwparty+spam@node612.namehero.net>; Fri, 19 Jun 2026 14:05:21 -0600
Return-path: <glopez@gigiscleaning.net>
Envelope-to: glopez@gigiscleaning.net
Delivery-date: Fri, 19 Jun 2026 14:05:21 -0600
Received: from 109-183-190-142.customers.tmcz.cz ([109.183.190.142]:41091)
	by node612.namehero.net with esmtp (Exim 4.99.4)
	(envelope-from <glopez@gigiscleaning.net>)
	id 1wafSp-00000002f2z-0sMN
	for glopez@gigiscleaning.net;
	Fri, 19 Jun 2026 14:05:21 -0600
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
From: glopez@gigiscleaning.net
Mime-Version: 1.0 (1.0)
Date: Fri, 19 Jun 2026 22:00:27 +0200
Message-Id: <6F9EF243-3022-4AF1-8C26-EEC700E61051@gigiscleaning.net>
To: glopez@gigiscleaning.net
X-Mailer: iPhone Mail (21G93)
X-Spam-Status: Yes, score=29.6
X-Spam-Score: 296
X-Spam-Bar: +++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi, I am a hacker, and I have successfully gained access to
    your operating system. I also have full access to your account. I've been
    watching you for a few months now. 
 Content analysis details:   (29.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [109.183.190.142 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?109.183.190.142>]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [109.183.190.142 listed in list.dnswl.org]
  8.5 KAM_CRIM               Extortion Email
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                             2)
  0.2 PDS_BTC_ID             FP reduced Bitcoin ID
  3.5 BITCOIN_TOEQFM         Bitcoin + To same as From
  3.3 BITCOIN_SPAM_07        BitCoin spam pattern 07
  0.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  4.9 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
X-Spam-Flag: YES
Subject:  ***SPAM***  Your account is hacked. Your data is stolen. Learn how to regain access.

Hi,

I am a hacker, and I have successfully gained access to your operating syste=
m.
I also have full access to your account.

I've been watching you for a few months now.

The fact is that your computer has been infected with malware through an adu=
lt site that you visited.
If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other devic=
e.
This means that I can see everything on your screen, turn on the camera and m=
icrophone, but you do not know about it.
I also have access to all your contacts and all your correspondence.

Why did your antivirus not detect malware?
Answer: The malware I used is driver-based, I update its signatures every 4 h=
ours. Hence your antivirus is unable to detect its presence.
I made a video showing how you satisfy yourself in the left half of the scre=
en, and the right half shows the video you were watching at the time.

With one mouse click, I can send this video to all your emails and contacts o=
n your social networks.
I can also make public all your e-mail correspondence and chat history on th=
e messengers that you use.

If you don't want this to happen, transfer $1250 in Bitcoin equivalent to my=
 Bitcoin address (if you do not know how to do this, just search "buy bitcoi=
n" on Google).

My Bitcoin address (BTC Wallet) is: bc1qvq86ea5rwxl6uuesscmsx0a6xn6mhmx8sfzk=
x6

After confirming your payment, I will delete the video immediately, and that=
's it. You will never hear from me again.
I will give you 50 hours (more than 2 days) to pay. I will get a notice, whe=
n you open this email, and the timer will start.
Filing a complaint somewhere does not make sense because this email cannot b=
e tracked like my Bitcoin address.

I never make any mistakes.
If I find that you have shared this message with someone else, the video wil=
l be immediately distributed.

Best regards!=