Return-Path: <info@tictactocsaintcanut.com>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id iKD3B2L0q2NeHQAAV5eKQw
	(envelope-from <info@tictactocsaintcanut.com>)
	for <info@tictactocsaintcanut.com>; Wed, 28 Dec 2022 02:46:42 -0500
Return-path: <info@tictactocsaintcanut.com>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Wed, 28 Dec 2022 02:46:42 -0500
Received: from 25.58.3.213.static.wline.lns.sme.cust.swisscom.ch ([213.3.58.25]:56282 helo=tictactocsaintcanut.com)
	by cl-t211-187cl.majeunesse.ca with esmtp (Exim 4.95)
	(envelope-from <info@tictactocsaintcanut.com>)
	id 1pAR98-0001wN-IT
	for info@tictactocsaintcanut.com;
	Wed, 28 Dec 2022 02:46:42 -0500
From: info@tictactocsaintcanut.com
To: info@tictactocsaintcanut.com
Date: 28 Dec 2022 08:46:00 +0100
Message-ID: <20221228084600.2AEFEE12A0A13109@tictactocsaintcanut.com>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=28.3
X-Spam-Score: 283
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi! I have bad news for you. About several months ago, I managed
    to get full access to all the devices you use to browse the Internet. Subsequently,
    I proceeded to monitor all your activities on the Inter [...] 
 Content analysis details:   (28.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 TVD_RCVD_IP            Message was received from an IP address
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [213.3.58.25 listed in zen.spamhaus.org]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [213.3.58.25 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [213.3.58.25 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?213.3.58.25>]
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  8.5 KAM_CRIM               Extortion Email
  0.0 BITCOIN_SPAM_03        BitCoin spam pattern 03
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 PDS_BTC_ID             FP reduced Bitcoin ID
  1.7 BITCOIN_DEADLINE       BitCoin with a deadline
  1.0 BITCOIN_SPAM_07        BitCoin spam pattern 07
  1.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
  1.0 BITCOIN_ONAN           BitCoin + [censored]
X-Spam-Flag: YES
Subject:  ***SPAM***  notification

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY style=3D"MARGIN: 0.5em">
<P>Hi!</P>
<P>I have bad news for you.<BR>About several months ago, I managed to get f=
ull access to all the devices you use to browse the Internet.<BR>Subsequent=
ly, I proceeded to monitor all your activities on the Internet.</P>
<P>You can check the sequence of events summarized below:<BR>I've bought sp=
ecial access to several email accounts from hackers before (currently it's =
a pretty simple thing that can be done online).<BR>Obviously, I can also ef=
fortlessly log in to your email account (info@tictactocsaintcanut.com).</P>=

<P>A week after that, I proceeded to install a Trojan horse virus on the op=
erating systems of all your devices, which you use to log into your email.<=
BR>It was actually a pretty simple thing to do (because you've already open=
ed links from your inbox).<BR>The genius is in the simplicity.</P>
<P>Thanks to this software, I can access all the controllers of your device=
s (like your video camera, microphone, keyboard, etc.).<BR>You can easily u=
pload all your data, photos, web browsing history and other information to =
my servers.<BR>I can access all your social media accounts, messengers, ema=
ils including chat history and contact list.<BR>This virus constantly updat=
es its signatures (since it is controlled by a driver) and therefore is not=
 detected by anti-virus software.<BR>
I hereby believe that now you understand why I was never detected until I s=
ent this letter...</P>
<P></P>
<P>By collecting all the information from your data, I also found out that =
you are a real fan and frequent visitor of adult websites.<BR>You really en=
joy browsing porn websites, while watching exciting videos and experiencing=
 amazing satisfaction.<BR>To be honest, I couldn't resist recording some of=
 your naughty solo sessions and compiling them into several videos, which s=
how you masturbating and cumming at the end.</P>
<P>If you still don't trust me, it only takes a few mouse clicks to distrib=
ute all these videos to your colleagues, friends and even family.<BR>Plus, =
I can upload them online for everyone to access.<BR>I really think you abso=
lutely don't want such things to happen, since the naughty stuff on display=
 in those videos you usually watch (you sure know what I'm trying to say) w=
ill spell complete disaster for you.</P>
<P><BR>With that in mind, here is my proposal:<BR>Transfer the amount equiv=
alent to <STRONG><FONT size=3D4>700</FONT></STRONG>&nbsp;<STRONG><FONT size=
=3D4>USD</FONT></STRONG> to my Bitcoin wallet, and I will forget everything=
=2E I will also permanently delete all data and videos.</P>
<P>&nbsp;It's really a good offer with a considerably low price, considerin=
g that I was monitoring your profile and your traffic for a long time.<BR>I=
f you are not already familiar with the process of buying and transferring =
bitcoins, all you can do is find the necessary information online.</P>
<P>My bitcoin wallet is the following : <FONT size=3D4><STRONG>3AJbVxC3ucmr=
GyeztFZ7ybSfscqUm3Bip9</STRONG></FONT><BR><BR>You have&nbsp;24 hours to res=
pond and you should also keep the following in mind:</P>
<P>It makes no sense to answer me - the address was generated automatically=
=2E<BR>It makes no sense to complain either, because the letter as well as =
my bitcoin wallet cannot be tracked.<BR>Everything was orchestrated with pr=
ecision.</P>
<P>If I ever detect that you mentioned anything about this letter to anyone=
, the video will be immediately shared and your contacts will be the first =
to receive it. Following this, the video will be posted on the web!</P>
<P>PS Time will start once you open this letter. (This program has a built-=
in timer).</P>
<P>Good luck and calm down! It was just bad luck, next time be careful.<BR>=
</P></BODY></HTML>