관리-도구

편집 파일: 1772103078.M131841P3450504.cp-biz03.syd05.ds.network,S=5676,W=5795

Envelope-to: tony@galaxybeads.com.au
Delivery-date: Thu, 26 Feb 2026 21:51:18 +1100
From: tony@galaxybeads.com.au
To: tony@galaxybeads.com.au
Date: Thu, 26 Feb 2026 15:51:15 +0500
Message-ID: <344208.344208@29163.com>
Mime-Version: 1.0
Content-type: text/plain;
 
 Content preview:  Hello there! Unfortunately, there is some bad news for you.
    Some time ago, your device was infected with my private trojan, R.A.T (Remote
    Administration Tool). 
 
 Content analysis details:   (127.0 points, 8.5 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
 [galaxybeads.com.au TXT:v=spf1 ip4:122.201.125.111 +a +mx +ip4:185.184.154.177 include:_spf.syrahost.com ?all]
  110 SPAM_RECORDED          BODY: No description available.
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.163.26.53 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.163.26.53 listed in bl.score.senderscore.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  8.5 KAM_CRIM               Extortion Email
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 PDS_BTC_ID             FP reduced Bitcoin ID
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  0.0 GB_BITCOIN_CP          Localized Bitcoin scam
  0.0 BITCOIN_SPAM_07        BitCoin spam pattern 07
  3.5 BITCOIN_TOEQFM         Bitcoin + To same as From
X-Spam-Flag: YES
Subject:  ***SPAM***  YOU PERVERT - I RECORDED YOU!

Hello there!

Unfortunately, there is some bad news for you.

Some time ago, your device was infected with my private trojan, R.A.T (Remote Administration Tool).

If you want to find out more about it, simply use Google.

My trojan allowed me to access your files, accounts, and your camera.

Check the sender of this email; I have sent it from your email account.

To ensure you read this email, you will receive it multiple times.

You truly enjoy browsing pornographic websites and watching explicit videos while having a lot of kinky fun.

I RECORDED YOU (through your camera) SATISFYING YOURSELF!

After that, I removed my malware to leave no traces.

If you still doubt my serious intentions, it only takes a couple of mouse clicks to share the video of you with your friends, relatives, all email contacts, on social networks, the darknet, and to publish all your files.

All you need is $1400 USD in Bitcoin (BTC) transferred to my account.

After the transaction is successful, I will proceed to delete everything.

I keep my promises.

You can easily buy Bitcoin (BTC) here:

https://cex.io/buy-bitcoins https://nexo.com/buy-crypto/bitcoin-btc https://bitpay.com/buy-bitcoin/?crypto=BTC https://paybis.com/ https://invity.io/buy-crypto

Alternatively, simply Google for other exchanges.

After that, send the Bitcoin (BTC) directly to my wallet, or install the free software: Atomic Wallet, or Exodus Wallet, then receive and send to mine.

My Bitcoin (BTC) address is: 1ACbLBbnmehCJCdUUrdGvHFC4gsDJbiKYc

Yes, that's how the address looks, copy and paste my address, it's (cAsE-sEnSEtiVE).

You are given no more than 3 days after you have opened this email.

Since I have access to this email account, I will know if this email has already been read.

Everything will be carried out based on fairness.

A piece of advice from me: regularly change all your passwords for your accounts and update your device with the latest security patches.