23 Scam Reports

Sextortion Scam

1

Typical sextortion

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Typical sextortion scam

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Ransomware

1

Please see attached image

0
1
Reported Addresses and Domains
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth
Reported Domain

api.ge-indonesia.com

Sextortion Scam

1

Did not lose any money since I knew from start it was scam. Source of the email: Received: from GVXP194MB2330.EURP194.PROD.OUTLOOK.COM (2603:10a6:150:1f7::9) by DU0P194MB1844.EURP194.PROD.OUTLOOK.COM with HTTPS; Sun, 19 May 2024 09:27:41 +0000 Received: from MW4PR03CA0089.namprd03.prod.outlook.com (2603:10b6:303:b6::34) by GVXP194MB2330.EURP194.PROD.OUTLOOK.COM (2603:10a6:150:1f7::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7587.34; Sun, 19 May 2024 09:27:40 +0000 Received: from CO1PEPF000042AA.namprd03.prod.outlook.com (2603:10b6:303:b6:cafe::16) by MW4PR03CA0089.outlook.office365.com (2603:10b6:303:b6::34) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7587.34 via Frontend Transport; Sun, 19 May 2024 09:27:38 +0000 Authentication-Results: spf=pass (sender IP is 45.139.197.92) smtp.mailfrom=esquemasdeaudio.com.br; dkim=none (message not signed) header.d=none;dmarc=fail action=none header.from=hotmail.com;compauth=fail reason=001 Received-SPF: Pass (protection.outlook.com: domain of esquemasdeaudio.com.br designates 45.139.197.92 as permitted sender) receiver=protection.outlook.com; client-ip=45.139.197.92; helo=server.esquemasdeaudio.com.br; pr=C Received: from server.esquemasdeaudio.com.br (45.139.197.92) by CO1PEPF000042AA.mail.protection.outlook.com (10.167.243.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7611.14 via Frontend Transport; Sun, 19 May 2024 09:27:38 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:D589192D82C0F974B7E287319CA7E703965EC85EC1FA851EE793DA063C9DD406;UpperCasedChecksum:D95499A6425319DCB1BB8572B3FBE75454FBE1D96F409D7E16C49A9445420E5A;SizeAsReceived:1168;Count:16 Received: from [203.189.234.194] (port=58005 helo=esquemasdeaudio.com.br) by server.esquemasdeaudio.com.br with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <contact@esquemasdeaudio.com.br>) id 1s8cpM-000Bm9-0g for capoom99@hotmail.com; Sun, 19 May 2024 05:27:36 -0400

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Mass extortion email "Hello pervert" using old leaked email passwords to convince people they have access to their "operating systems" and incriminating videos

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

sextortion scam

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Classic sextortion scam

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Sextortion scam attempt. Spoofed my email. I never mentioned this, but you’re lucky I use an app for emails, or I would be putting the headers on blast.

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Other Blackmail Scam

1

Extortion email

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Extortion email. Claiming Pegasus hack my computer's. Asking for 816usd to Bitcoin address.

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

email scam

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Standard sextortion scam. Demanded $999 in BTC. Spoofed a utility email into the header. From IP 37.187.92.220 (OVH). Hello pervert,   I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisely.   Have you heard of Pegasus? This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. I guess, you already figured out where I’m getting at. Etc etc

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Did not pay the address. Just reporting it.

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Sextortion scam email.

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Sextortion Scam

1

Email content Subject text A new payment schedule has been approved for : #856 - 5368340 Body text Hello pervert, I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisely. Have you heard of Pegasus? This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. I guess, you already figured out where I’m getting at. It’s been a few months since I installed it on all your devices because you were not quite choosy about what links to click on the internet. During this period, I’ve learned about all aspects of your private life, but one is of special significance to me. I’ve recorded many videos of you jerking off to highly controversial porn videos. Given that the “questionable” genre is almost always the same, I can conclude that you have sick perversion. I doubt you’d want your friends, family and co-workers to know about it. However, I can do it in a few clicks. Every number in your contact book will suddenly receive these videos – on WhatsApp, on Telegram, on Skype, on email – everywhere. It is going to be a tsunami that will sweep away everything in its path, and first of all, your former life. Don’t think of yourself as an innocent victim. No one knows where your perversion might lead in the future, so consider this a kind of deserved punishment to stop you. Better late than never. I’m some kind of God who sees everything. However, don’t panic. As we know, God is merciful and forgiving, and so do I. But my mercy is not free. Transfer $856 USD to my bitcoin wallet: bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth Once I receive confirmation of the transaction, I will permanently delete all videos compromising you, uninstall Pegasus from all of your devices, and disappear from your life. You can be sure – my benefit is only money. Otherwise, I wouldn’t be writing to you, but destroy your life without a word in a second. I’ll be notified when you open my email, and from that moment you have exactly 48 hours to send the money. If cryptocurrencies are unchartered waters for you, don’t worry, it’s very simple. Just google “crypto exchange” and then it will be no harder than buying some useless stuff on Amazon. I strongly warn you against the following: ) Do not reply to this email. is your address! ) Do not contact the police. I have access to all your devices, and as soon as I find out you ran to the cops, videos will be published. ) Don’t try to reset or destroy your devices. As I mentioned above: I’m monitoring all your activity, so you either agree to my terms or the videos are published. Also, don’t forget that cryptocurrencies are anonymous, so it’s impossible to identify me using the provided address. Good luck, my perverted friend. I hope this is the last time we hear from each other.

0
1
Reported Address
Reported Address
Bitcoin logo
bc1q7kn8n7mjngk9t9cvh3crgqa7xzdaday3meamth

Reports by Category

Backed By
TRM logoSolana logoCircle logoOpensea logoAave logoBinance logoCivic logoHedera logoRasomwhe.re logo
Backed By
TRM logoSolana logoCircle logoOpensea logoAave logoBinance logoCivic logoHedera logoRasomwhe.re logo