• 26-10-2021, 10:33:16
    #1
    Üyeliği durduruldu
    Kendime ait bir domain var, cpanel üzerinde kendime bir mail adresi oluşturdum. hem gönderici hem de alıcı adresi bu olan bir mail aldım. Bu domain üzerindeki tüm mail hesaplarını gmail hesabıma yönlendirmiştim. O yüzden gamil spam kutusunda gördüm.
    Dol4ndırıcı mail içeriğinde hesabımın ele geçirildiği ifade ediliyor.

    Alıntı
    Hello there!

    Unfortunately, there are some bad news for you.
    Around several months ago I have obtained access to your devices that you were using to browse internet.
    Subsequently, I have proceeded with tracking down internet activities of yours.

    Below, is the sequence of past events:
    In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).
    Clearly, I have effortlessly logged in to email account of yours (örnekmail@örnekmail.com).

    A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.
    Actually, that was quite simple (because you were clicking the links in inbox emails).
    All smart things are quite straightforward. (>_<)

    The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.
    I have managed to download all your personal data, as well as web browsing history and photos to my servers.
    I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.
    My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.

    So, by now you should already understand the reason why I remained unnoticed until this very moment...

    While collecting your information, I have found out that you are also a huge fan of websites for adults.
    You truly enjoy checking out **** websites and watching dirty videos, while having a lot of kinky fun.
    I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately masturbating.

    If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.
    It is also not a problem for me to allow those vids for access of public as well.
    I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.

    Let's resolve it like this:
    All you need is $1750 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.
    Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.

    That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.
    If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.

    Below is bitcoin wallet of mine: 1MBfGEss64UsqkWKA5ygs3Rbb5vnLgbtba

    You are given not more than 48 hours after you have opened this email (2 days to be precise).

    Below is the list of actions that you should not attempt doing:
    > Do not attempt to reply my email (the email in your inbox was created by me together with return address).
    > Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately.
    > Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.
    > Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.

    Below is the list of things you don't need to be concerned about:
    > That I will not receive the money you transferred.
    - Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).
    > That I still will make your videos available to public after your money transfer is complete.
    - Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!

    Everything will be carried out based on fairness!

    Before I forget...moving forward try not to get involved in this kind of situations anymore!
    An advice from me - regularly change all the passwords to your accounts.

    Orijinal ileti diye bakınca mail gönderen gerçek adresi bulamadım.
    Alıntı
    Delivered-To: örnekgmail@gmail.com
    Received: by 2002:a4f:f318:0:0:0:0:0 with SMTP id c24csp665857ivo;
    Mon, 25 Oct 2021 19:19:40 -0700 (PDT)
    X-Google-Smtp-Source: ABdhPJwE8dicXXy5O3agPayswwELBYb/T8lve+W0j2RR9Xpz9kcG5YO8Rd6fU79IHIBoQh9YF3Jf
    X-Received: by 2002:a05:6402:438d:: with SMTP id o13mr2194423edc.127.1635214780345;
    Mon, 25 Oct 2021 19:19:40 -0700 (PDT)
    ARC-Seal: i=1; a=rsa-sha256; t=1635214780; cv=none;
    d=google.com; s=arc-20160816;
    b=PQrGKU5bBa5LGZxGJGvrxKS5GusBQpUnqEBG3YoD2os0jhEo HpW0Vz0YeDzuduz7i3
    N64e0e5W1u2sQkKV1qeHxUez/Z0zruMr8mTMdFuf7gMRUO7sMf2wrWgnn3SvXbjz8+BC
    moMulRH1MFn+3pah74+ttj6MP9oo/7Fi1DF5eECVm/T0Mpxy07GEhWfTvudzwXdyrVMB
    cQkLLh2g85HRvGeh+iMQ1jOTwc8DwMMQNVIAqpkhb4cjfN27mg cBhw4YE+3poJqwRd7N
    sqlYTDATHejK3wvyCdswYV80h17VnNuPfabNp52ZPbDV2vrUF4 Hegmk8lIeOCI85H+uP
    eX0A==
    ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
    h=subject:content-transfer-encoding:mime-version:date:to:from
    :message-id:dkim-signature;
    bh=uSwP3fJU/yjHpMrIiTAAIYDRDD4hYJAR6dbnDbl4UFM=;
    b=I3kxIwtgl89WzjtksewjhC2dWXObwxFPB0k+CLKzSR306kaG qKwD7BlkbNgSBdkyYN
    tMUafl5GkzM3ZaBfxtmmqii/ThNIS6sWsiNjAYSkJzjQ82DokGUf2phHdN5UPVSR8y01
    URwzEOQKvE1vJm4OdUuV6C7nY01sr/I3TuyYV/EYpAnke09Q/syQsab5P0hqHIA6mDmf
    XUmxFHRS5IDxIL3+WZbOGgBbSZ3cJVd4ih+9cAYwX+E7wMHRLp fq4+PV/MdXrOfvyxW4
    4K2hPT3B+wSMk7LuqEu46qd9fc+aR7GC+n0CGm5e5d+IIEpjxh k6qUILdfytRlotcE4L
    ek6Q==
    ARC-Authentication-Results: i=1; mx.google.com;
    dkim=pass header.i=@örnekdomain.com header.s=default header.b=KGQqNzJn;
    spf=pass (google.com: domain of nn.tnn.net@örnekdomain.com designates 78.142.208.230 as permitted sender) smtp.mailfrom=nn.tnn.net@örnekdomain.com
    Return-Path: <nn.tnn.net@örnekdomain.com>
    Received: from tarsel.veridyen.com ([78.142.208.230])
    by mx.google.com with ESMTPS id 17si24796640eja.19.2021.10.25.19.19.39
    for <örnekgmail@gmail.com>
    (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
    Mon, 25 Oct 2021 19:19:40 -0700 (PDT)
    Received-SPF: pass (google.com: domain of nn.tnn.net@örnekdomain.com designates 78.142.208.230 as permitted sender) client-ip=78.142.208.230;
    Authentication-Results: mx.google.com;
    dkim=pass header.i=@örnekdomain.com header.s=default header.b=KGQqNzJn;
    spf=pass (google.com: domain of nn.tnn.net@örnekdomain.com designates 78.142.208.230 as permitted sender) smtp.mailfrom=nn.tnn.net@örnekdomain.com
    DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=örnekdomain.com; s=default; h=Subject:Content-Transfer-Encoding:Content-Type:MIME-Versionate :To:From:Message-ID:Sender:Reply-To:Cc:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=uSwP3fJU/yjHpMrIiTAAIYDRDD4hYJAR6dbnDbl4UFM=; b=KGQqNzJnBW4/Q0lcN6EA7Hjt6A t2DQWbTGkZlm49MiNBKi+cbCaqgOATCvJ7lKKWzTtC6Kj1DE0Q yGwRcjxGBr8OGGMOzeP4B3X9rGI 3dOZNQy0UKPXcPkF0W39OhQs3qdAklamADsWe3/pcNdXGKNeYqvDD8taB9tznWJNYNKNYzaQsWk8r WbHzFW5l7BJWENdJbfFIpRaZ7hpMvaERWyYTnfq771vgcYDcQ7 x2dfZrYvH/ZULH2YQ/B8z7IPadi VPp4riTRsJRmPZ+apLmYBgSQ/Xj/nRBv0yzftBIZOFPUKlH99jX5mK3IOe4G0dtXeS1/of6vsdFwa 6WHWIGUg==;
    Received: from [187.84.209.197] (port=24804 helo=187-84-209.197.static.stech.net.br) by tarsel.veridyen.com with esmtp (Exim 4.94.2) (envelope-from <nn.tnn.net@örnekdomain.com>) id 1mfBn7-006u3X-UJ for nn.tnn.net@örnekdomain.com; Tue, 26 Oct 2021 05:00:53 +0300
    Message-ID: <89EA2814684BD65437F5C9B5960B89EA@8XYAOCLG>
    From: <nn.tnn.net@örnekdomain.com>
    To: <nn.tnn.net@örnekdomain.com>
    Date: 25 Oct 2021 20:48:53 -0300
    MIME-Version: 1.0
    Content-Type: text/plain; charset="iso-8859-3"
    Content-Transfer-Encoding: 8bit
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.0290
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.0290
    X-Spam-Status: Yes, score=31.0
    X-Spam-Score: 310
    X-Spam-Bar: +++++++++++++++++++++++++++++++
    X-Spam-Report: Spam detection software, running on the system "tarsel.veridyen.com", has identified this incoming email as possible spam.
    The original message has been attached to this so you can view it or label similar future email.
    If you have any questions, see root\@localhost for details. Content preview:
    Hello there! Unfortunately, there are some bad news for you.
    Around several months ago I have obtained access to your devices that you
    were using to browse internet. Subsequently, I have proceeded with tracking
    do [...]
    Content analysis details:
    (31.0 points, 5.0 required)
    pts rule name
    description ---- ---------------------- --------------------------------------------------
    5.0 BAYES_99
    BODY: Bayes spam probability is 99 to 100%
    [score: 0.9966]
    0.0 CK_HELO_GENERIC
    Relay used name indicative of a Dynamic Pool or
    Generic rPTR
    2.7 RCVD_IN_PSBL
    RBL: Received via a relay in PSBL
    [187.84.209.197 listed in psbl.surriel.com]
    1.3 RCVD_IN_VALIDITY_RPBL
    RBL: Relay in Validity RPBL,
    https://senderscore.org/blocklistlookup/
    [187.84.209.197 listed in bl.score.senderscore.com]
    1.5 SPF_SOFTFAIL
    SPF: sender does not match SPF record (softfail)
    1.8 PYZOR_CHECK
    Listed in Pyzor
    (https://pyzor.readthedocs.io/en/latest/)
    2.0 RDNS_NONE
    Delivered to internal network by a host with no rDNS
    0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
    (FTSDMCXX/boundary variant) + no rDNS
    0.0 BITCOIN_XPRIO
    Bitcoin + priority
    0.8 FSL_BULK_SIG
    Bulk signature with no Unsubscribe
    0.5 PDS_BTC_ID
    FP reduced Bitcoin ID
    0.5 PDS_BTC_MSGID
    Bitcoin ID with T_MSGID_NOFQDN2
    0.0 TO_EQ_FM_DIRECT_MX
    To == From and direct-to-MX
    0.0 MIMEOLE_DIRECT_TO_MX
    MIMEOLE + direct-to-MX
    3.0 BITCOIN_YOUR_INFO
    BitCoin with your personal info
    3.5 BITCOIN_SPAM_07
    BitCoin spam pattern 07
    2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
    (FTSDMCXX/boundary variant) + direct-to-MX
    2.5 DOS_OE_TO_MX
    Delivered direct to MX with OE headers
    1.3 BITCOIN_MALWARE
    BitCoin + malware bragging
    1.0 MALWARE_NORDNS
    Malware bragging + no rDNS
    1.6 AC_FROM_MANY_DOTS
    Multiple periods in From user name
    0.0 NO_FM_NAME_IP_HOSTN
    No From name + hostname using IP address
    X-Spam-Flag: YES
    Subject: ***SPAM***
    You have an outstanding payment.
    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
    X-AntiAbuse: Primary Hostname - tarsel.veridyen.com
    X-AntiAbuse: Original Domain - örnekdomain.com
    X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
    X-AntiAbuse: Sender Address Domain - örnekdomain.com
    X-Get-Message-Sender-Via: tarsel.veridyen.com: redirect/forwarder owner nn.tnn.net@örnekdomain.com -> örnekgmail@gmail.com
    X-Authenticated-Sender: tarsel.veridyen.com: nn.tnn.net@örnekdomain.com
    X-Source:
    X-Source-Args:
    X-Source-Dir:
    X-From-Rewrite: unmodified, forwarded message

    Hello there!

    Unfortunately, there are some bad news for you.
    Around several months ago I have obtained access to your devices that you were using to browse internet.
    Subsequently, I have proceeded with tracking down internet activities of yours.

    Below, is the sequence of past events:
    In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).
    Clearly, I have effortlessly logged in to email account of yours (nn.tnn.net@örnekdomain.com).

    A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.
    Actually, that was quite simple (because you were clicking the links in inbox emails).
    All smart things are quite straightforward. (>_<)

    The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.
    I have managed to download all your personal data, as well as web browsing history and photos to my servers.
    I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.
    My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.

    So, by now you should already understand the reason why I remained unnoticed until this very moment...

    While collecting your information, I have found out that you are also a huge fan of websites for adults.
    You truly enjoy checking out **** websites and watching dirty videos, while having a lot of kinky fun.
    I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately masturbating.

    If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.
    It is also not a problem for me to allow those vids for access of public as well.
    I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.

    Let's resolve it like this:
    All you need is $1750 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.
    Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.

    That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.
    If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.

    Below is bitcoin wallet of mine: 1MBfGEss64UsqkWKA5ygs3Rbb5vnLgbtba

    You are given not more than 48 hours after you have opened this email (2 days to be precise).

    Below is the list of actions that you should not attempt doing:
    > Do not attempt to reply my email (the email in your inbox was created by me together with return address).
    > Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately.
    > Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.
    > Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.

    Below is the list of things you don't need to be concerned about:
    > That I will not receive the money you transferred.
    - Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).
    > That I still will make your videos available to public after your money transfer is complete.
    - Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!

    Everything will be carried out based on fairness!

    Before I forget...moving forward try not to get involved in this kind of situations anymore!
    An advice from me - regularly change all the passwords to your accounts.

    Bu olay, sahte mail adresi ile yapılan basit bir dol4ndırıcılı kmaili mi yoksa yeni çıkan profesyonel bir dol4ndırıcılık hikayesi mi?
  • 26-10-2021, 10:34:08
    #2
    benden bana seslenir, hem ilaç hem de zehir
  • 26-10-2021, 10:38:58
    #3
    Sana istedigi bir mail adresinden mail göndermek basit birşey, 8 sene önce falan yapılıyordu. Şuanda bizde aynı problemi yaşıyoruz müşterim bu durumdan bıkmış durumda sürekli kotaniz doldu sifreniz degistirin v.s mailler geliyor tıklayınca plesk giriş sayfasının aynısını yapmışlar. Çözüm bilen varsa soylesin
  • 26-10-2021, 11:04:49
    #4
    Hocam acımayın böylelerine, bugün bana yarın size sessiz kaldığımız sürece bunların sayısı artacak. Vakit kaybetmeden kendiniz hakkında suç duyurusunda bulunun.
  • 26-10-2021, 11:26:55
    #5
    Hurtech adlı üyeden alıntı: mesajı görüntüle
    Hocam acımayın böylelerine, bugün bana yarın size sessiz kaldığımız sürece bunların sayısı artacak. Vakit kaybetmeden kendiniz hakkında suç duyurusunda bulunun.
    Konu sahibinin affına sığınarak. Çok güldüm ya valla iyi geldi.
  • 26-10-2021, 11:55:53
    #6
    Üyeliği durduruldu
    Hurtech adlı üyeden alıntı: mesajı görüntüle
    Hocam acımayın böylelerine, bugün bana yarın size sessiz kaldığımız sürece bunların sayısı artacak. Vakit kaybetmeden kendiniz hakkında suç duyurusunda bulunun.
    Hocam iyi diyorsunuz da, yurtdışı olunca iş daha da zor. Biz mecbur kalmadıkça yerli ve milli dol4ndırıcılara bile ses çıkar(a)mıyoruz...
  • 26-10-2021, 11:56:20
    #7
    sanırım hosting hacklenmiş @yalinyalniz;