Blackmailing Bitcoin extortion fraudster sending sextortion content with ransom demands. This false ...
show moreBlackmailing Bitcoin extortion fraudster sending sextortion content with ransom demands. This false shite was sent From: Brandy Cook <[email protected]>. Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.13 as permitted sender). Subject: 🍓 You must pay before your time expires. Content reads: Hello! I'm the Chinese software engineer who hacked into your device OS. I've been watching you for month now. The thing is, you've been infected with malware through the adult website you visited... I have downloaded all confidential information from your system with a video. With one click, I can send this video to all your contacts. If you need to erase all of your collected data just send 0.04 btc (Bitcoin) to wallet: bc1q5lukj7heyexw9e3ncnjgs7c4uutgwadaqja5sa. Message ID <trinity-a8eafe11-4fcb-468d-828c-5fb4290084c8-1763643096893@3c-app-mailcom-bs09>. SMTPS id 4fb4d7f45d1cf-645363a81f4si1131386a12.30.2025.11.20.04.51.37. Thu, 20 Nov 2025 04:51:37 -0800 (PST).
show less
More sextortion filth from this scamming parasite engaging in blackmail through this dirty German ro ...
show moreMore sextortion filth from this scamming parasite engaging in blackmail through this dirty German rogue ISP. From: Natalie Johnson <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.14 as permitted sender). Subject: 🍓 Complete your payment or the upload will begin 🤣 . Content reads: Hello!
I'm the Chinese software engineer who hacked into your device OS. I've been watching you for month now. The thing is, you've been infected with malware through the adult website you visited... I have downloaded all confidential information from your system with a video. With one click, I can send this video to all your contacts. If you need to erase all of your collected data just send 0.04 btc (Bitcoin) to wallet: bc1q5lukj7heyexw9e3ncnjgs7c4uutgwadaqja5sa. Message ID <trinity-8da70ca7-4686-4e3f-ac04-11cecd45e31a-1763607151897@3c-app-mailcom-bs14>. SMTPS id a640c23a62f3a-b76550e7a64si49631966b.1205.2025.11.19.18.52.32. Wed, 19 Nov 2025 18:52:32 -0800 (PST).
show less
Promotional spammer sending unsolicited spoofed header content!. Reported to SCBL for further action ...
show morePromotional spammer sending unsolicited spoofed header content!. Reported to SCBL for further action to be taken.
show less
Promotional spammer sending unsolicited spoofed header content!. Reported to SCBL for further action ...
show morePromotional spammer sending unsolicited spoofed header content!. Reported to SCBL for further action to be taken.
show less
Promotional spammer sending fake cloud storage full to capacity notifications. From: "=?UTF-8?B?U2Vj ...
show morePromotional spammer sending fake cloud storage full to capacity notifications. From: "=?UTF-8?B?U2VjdXJlIENsb3VkIFNvbHV0aW9ucyDimIHvuI8=?=" <[email protected]>. Received-SPF: Fail (protection.outlook.com: domain of LyraWebb.onmicrosoft.com does not designate 193.24.210.31 as permitted sender). Subject: Act fast: your storage is low, safeguard your files today. Message-ID:
<4247b394-f146-46e9-8787-6b68e9cb6696@SN1PEPF0002636B.namprd02.prod.outlook.com>. SMTP Server id 15.20.9253.7 via Frontend Transport; Wed, 22 Oct 2025 18:38.
show less
Scumbag hacker attempting a phishing exercise with Phantom wallet. From: "Phantom Wallet <support@ph ...
show moreScumbag hacker attempting a phishing exercise with Phantom wallet. From: "Phantom Wallet <[email protected]> Received-SPF: SoftFail (protection.outlook.com: domain of transitioning phantomwalletverifyweb3.com discourages use of 217.154.160.159 as permitted sender). Subject: Verify your wallet. Message-ID: <519640577207282875978@WIN-2ADQP9U1AB1>. Microsoft SMTP Server id 15.20.9275.10 via Frontend Transport; Fri, 31 Oct 2025 17:20:03.
show less
Filthy scumbag sextortion parasite sending the usual crap they have a video of you. Serious criminal ...
show moreFilthy scumbag sextortion parasite sending the usual crap they have a video of you. Serious criminal content From: Romaliza Carmody <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.13 as permitted sender). Subject: 🠓 Pay to cancel the upcoming distribution 🤣. Content reads: Hello!
I'm the Chinese software engineer who hacked into your device OS. I've been watching you for month now. The thing is, you've been infected with malware through the adult website you visited... I have downloaded all confidential information from your system with a video. With one click, I can send this video to all your contacts. If you need to erase all of your collected data just send 0.04 btc (Bitcoin) to a wallet bc1qg4xum30h7keejhtfucslltl4jyh4r2scx2v9wl. Message ID <trinity-894e8246-d1c2-4a6a-81d7-68acb19b3293-1763427271762@3c-app-mailcom-bs01>. SMTPS id 4fb4d7f45d1cf-6433a3eb85fsi7063160a12.92.2025.11.17.16.54.32. Mon, 17 Nov 2025 16:54:35 -0800 (PST).
show less
Fraud/sextortion spammer sending the usual crap they have a video of you... yeah right, sure!. From: ...
show moreFraud/sextortion spammer sending the usual crap they have a video of you... yeah right, sure!. From: Sabrina Rodriguez <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.14 as permitted sender). Subject: 🠓 Confirm payment before the delivery begins 🤣. Content reads: Hello!
I'm the Chinese software engineer who hacked into your device OS. I've been watching you for month now. The thing is, you've been infected with malware through the adult website you visited... I have downloaded all confidential information from your system with a video. With one click, I can send this video to all your contacts. If you need to erase all of your collected data just send 0.04 btc (Bitcoin) to a wallet bc1qg4xum30h7keejhtfucslltl4jyh4r2scx2v9wl. Message ID <trinity-79735bba-f01d-4c38-a882-085fad8149ce-1763342650539@3c-app-mailcom-bs02>. SMTPS id a640c23a62f3a-b7399a69096si99556566b.666.2025.11.16.17.24.12. Sun, 16 Nov 2025 17:24:12 -0800 (PST).
show less
Fraud/sextortion spammer sending the usual crap that they have a video of you... yeah right, sure!. ...
show moreFraud/sextortion spammer sending the usual crap that they have a video of you... yeah right, sure!. From: Hannah Byrd <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 82.165.159.12 as permitted sender). Subject: 🠓 You will pay if you want me to stop the send-out 🤣. Content reads: Hello!
I'm the Chinese software engineer who hacked into your device OS. I've been watching you for month now. The thing is, you've been infected with malware through the adult website you visited... I have downloaded all confidential information from your system with a video. With one click, I can send this video to all your contacts. If you need to erase all of your collected data just send 0.04 btc (Bitcoin) to a wallet bc1qg4xum30h7keejhtfucslltl4jyh4r2scx2v9wl.
Message ID <trinity-8d583319-099d-4f64-97a8-7f221146bda7-1763373497436@3c-app-mailcom-bs09>. SMTPS id a640c23a62f3a-b73a22beabfsi91461666b.960.2025.11.17.01.58.17. Mon, 17 Nov 2025 01:58:21 -0800 (PST).
show less
Email spammer/scammer sending the usual crap that we are the beneficiary of some strangers inheritan ...
show moreEmail spammer/scammer sending the usual crap that we are the beneficiary of some strangers inheritance. From: "SGT. Perry Burlesson" <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 216.235.195.25 as permitted sender). Subject: RE: A BUSINESS DEAL FOR YOU. Message ID <1192488360.9391762930440192.JavaMail.www@app20114.cl2int.convio.net>. SMTPS id af79cd13be357-8b29a847d92si70079885a.156.2025.11.11.22.54.00. Tue, 11 Nov 2025 22:54:01 -0800 (PST).
show less
Unsolicited gambling spam content From: 💰Casino Spiele💰 <[email protected]> Using Yamail [ http://ya ...
show moreUnsolicited gambling spam content From: 💰Casino Spiele💰 <[email protected]> Using Yamail [ http://yandex.ru ] 5.0. Received-SPF: neutral (spfCheck: 198.38.83.97 is neither permitted nor denied by domain of aa300.ddns.net). Subject: 🔥🎰WILLKOMMENSBONUS 15.000€ bonus + 350 FS🎰!!I______002. Message ID <[email protected]>. No SMTP Server id present - spoofed content.
show less
Spoofing hacking fraudster sending fake alerts our Microsoft Outlook password has been changed. From ...
show moreSpoofing hacking fraudster sending fake alerts our Microsoft Outlook password has been changed. From: X <[email protected]>
Received-SPF: Pass (protection.outlook.com: domain of bounce.x.com designates 199.16.156.139 as permitted sender). Received: from spring-chicken-ce.x.com (199.16.156.139). Subject: Security alert: new or unusual X login. Content reads: We noticed an attempt to log in to your account@Jeanie that seems suspicious. Was this you?. Suspicious login Location* Unknown location Device 11.5.1 on iPhone *Location is approximate based on the login's IP address. If this was you Just to be safe, to log in to this account you’ll need to verify this is really you by answering some security questions. If this wasn’t you Complete these steps now to protect your account. Change your password. You'll be logged out of all your active X sessions except the one you're using at this time. Message-ID: <[email protected]>. SMTP Server id
15.20.9228.7 via Frontend Transport; Tue, 14 Oct 2025 01:17:12.
show less
Spoofing hacking fraudster sending fake phishing emails to notify us our Microsoft Outlook password ...
show moreSpoofing hacking fraudster sending fake phishing emails to notify us our Microsoft Outlook password has been changed. From: X <[email protected]> Received: from spruce-goose-ag.x.com (199.59.150.76) Received-SPF: Pass (protection.outlook.com: domain of bounce.x.com designates 199.59.150.76 as permitted sender). Subject: Your X confirmation code is xdapsupj. Message-ID: <[email protected]>. SMTP Server id 15.20.9228.7 via Frontend Transport; Tue, 14 Oct 2025 01:07:39.
show less
Bitcoin fraudsters attempting to lure folk with an enticing covert scam. From: Sporttia <no-reply@sp ...
show moreBitcoin fraudsters attempting to lure folk with an enticing covert scam. From: Sporttia <[email protected]> Received-SPF: pass (google.com: domain of [email protected] designates 149.72.162.108 as permitted sender). DMARC: FAIL. Subject: ✅ We’ve partnered with Binance. Instead of the iPhone 16 Pro Max, you have got an account with 1.3492 BTC - https://graph.org/STATIC-10-15-17?ko2 - After withdrawing the funds, please send proof of the prize to the Binance online support chat. ✅, welcome to Sporttia. Message ID <xe9vPnCjSU-VmQWp7Ip9uw@geopod-ismtpd-3>. SMTPS id d75a77b69052e-4e88ae3b022si651061cf.715.2025.10.14.23.53.11. Tue, 14 Oct 2025 23:53:11 -0700 (PDT).
show less
Spoofing fraudster sending a Bitcoin mining scam though Google blogspot links under the false preten ...
show moreSpoofing fraudster sending a Bitcoin mining scam though Google blogspot links under the false pretense of it being apartments for sale, bounced recipient content. From: Apartment Finder <[email protected]>. Received-SPF: pass (google.com: domain of bounce-1369373_html-1994321274-106771433-10948172-131074@bounce.mc.apartmentfinder.com designates 136.147.187.95 as permitted sender). Subject: Welcome to Apartment Finder. Content reads: Welcome to Apartment Finder, Www.wesdrq.blogspot.com - 1.346584 Bitcoin!. Message ID<[email protected]>. SMTPS id af79cd13be357-85c25a78b03si601896285a.256.2025.09.29.19.33.27. Mon, 29 Sep 2025 19:33:28 -0700 (PDT).
show less
Bitcoin mining fraudster circulating a scam using Google Blogspot links contained within email sent ...
show moreBitcoin mining fraudster circulating a scam using Google Blogspot links contained within email sent through this ISP. From: Tillman's Restaurant Equipment and Supplies <[email protected]>. Received-SPF: pass (google.com: domain of [email protected] designates 149.72.87.198 as permitted sender). Subject:[Tillman's Restaurant Equipment and Supplies] Login Details. Message ID <Ozr1IN3TQZySZIXNZqAsUw@geopod-ismtpd-11>. SMTPS id af79cd13be357-85c25a78d20si141901485a.25.2025.09.25.18.17.25. Thu, 25 Sep 2025 18:17:25 -0700 (PDT).
show less
Bitcoin mining fraudsters hosting a scam web page on this address which has been duly reported to FB ...
show moreBitcoin mining fraudsters hosting a scam web page on this address which has been duly reported to FBI IC 3 Internet Crime Division for investigation. A take down/suspension notice has also been served upon the actual hosting registrar (Nicenic).
show less
Portuguese spam sender of repeated unsolicited estate promotions content. Such has now been reported ...
show morePortuguese spam sender of repeated unsolicited estate promotions content. Such has now been reported to SCBL for further action against this bounced leaked non existent recipient trash. From: ZAP <[email protected]>. Received-SPF: pass (google.com: domain of bounce-40334_html-1430795514-3861202-518003543-11823@bounce.novidades.zapimoveis.com.br designates 13.111.188.133 as permitted sender). Subject: É fácil encontrar o imóvel ideal! 🏡🏢. Message ID <[email protected]>. SMTPS id af79cd13be357-83a31132bd0si269983485a.1342.2025.09.21.06.49.45. Sun, 21 Sep 2025 06:49:45 -0700 (PDT).
show less