Your IP : 3.137.165.134


Current Path : /home/ncdcgo/mail/cur/
Upload File :
Current File : /home/ncdcgo/mail/cur/1530111866.M830379P555661.c1.nita.go.ug,S=3915,W=3986:2,T

Return-Path: <order@virtumedicalspa.com>
Delivered-To: ncdcgo@c1.nita.go.ug
Received: from c1.nita.go.ug
	by c1.nita.go.ug with LMTP id AGkBMXqnM1uNeggAmTLWoA
	for <ncdcgo@c1.nita.go.ug>; Wed, 27 Jun 2018 17:04:26 +0200
Return-path: <order@virtumedicalspa.com>
Envelope-to: nalule.lukia@ncdc.go.ug
Delivery-date: Wed, 27 Jun 2018 17:04:26 +0200
Received: from virtumedicalspa.com ([82.202.221.132]:55029)
	by c1.nita.go.ug with esmtp (Exim 4.91)
	(envelope-from <order@virtumedicalspa.com>)
	id 1fYBzc-002KY0-VI
	for nalule.lukia@ncdc.go.ug; Wed, 27 Jun 2018 17:04:26 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=virtumedicalspa.com;
 h=Date:From:Message-ID:To:Subject:MIME-Version:Content-Type:
 Content-Transfer-Encoding; i=order@virtumedicalspa.com;
 bh=oQDBjUrOBOveMkuKgmfUb8Pp3a20p35VbS48IOmqByY=;
 b=MwHzMTVMnz439ESm/12wfYA9YU80/xnoEc2hUf9um8IviHxDOXNdLWcNubrcgHG1EWYZpDHc8G+1
   0KckuDCsjbu4QZKtGpmtzcCwo0lo7NI+VDYitDA9tsIQ8ywKZJD9rs04UUymqFFkPeV88Y2ytn3U
   wxVjjqjGMTJfyONb98A=
Date: Wed, 27 Jun 2018 15:04:22 +0000
From: "=?utf-8?Q?Race_Mcauley?=" <order@virtumedicalspa.com>
Organization: skwatcrsje
X-Priority: 3 (Normal)
Message-ID: <177561245.20180627150422@virtumedicalspa.com>
To: nalule.lukia@ncdc.go.ug
Subject: =?utf-8?Q?=D0=A2i=D1=81=D0=BAet=23133465025=3A_=3Cnalule.lukia=40ncdc.go.ug=3E_27=2F06=2F2018_06=3A04=3A25_We_got_into_your_device?=
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=-0.1
X-Spam-Score: 0
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "c1.nita.go.ug",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Hi there. Hopefully you don't care about my english language
    grammar, because i'm from Indonesia. I infected your gadget with a trojan
    and now have all of your private files from your os. It was mou
 
 Content analysis details:   (-0.1 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: virtumedicalspa.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
X-Spam-Flag: NO

Hi there. 

Hopefully you don't care about my english language grammar, because i'm from Indonesia. I infected your gadget with a trojan and now have all of your private files from your os. 

It was mounted on an adult web page then you've picked the video and viewed it, my program immediately gain access to your os. 

And then, your camera recorded you going manual, on top of that i caught a video that you've looked at. 

Immediately after a little while additionally, it pulled out every one of your device contacts. If you ever need me to get rid of your everything i have got - transfer me 460 eu in bitcoin it is a cryptocurrency. It's my wallet transfer address - 13wRhnMQRVcUZwxht3TkaSayJNLCs6d9FH 

At this point you have 24hrs. to make a decision Immediately after i will get the deal i will get rid of this evidence and every thing entirely. If not, please remember that your evidence would be forwarded to all your buddies.