I think I got 3 of these damn emails today alone.  I’m pretty sick of this and it looks like people have lost interest in this thread, but if someone wants to try and track this AH down, Bitcoin address is in tact.  It sounds like it would be very difficult, but it does not seem like it should be.

*******************************************************

Return-path: <info@ednawest.com>
Envelope-to: *************************
Received: from us11-005mrr.dh.atmailcloud.com ([172.16.7.5])
        by us11-401ms.dh.atmailcloud.com with esmtp (Exim 4.90_1)
        (envelope-from <info@ednawest.com>)
        id 1fnd8Q-0007RK-OB
        for *****************; Thu, 09 Aug 2018 15:05:18 +1000
Received: from us11-005mx.dh.atmailcloud.com ([172.16.2.5])
        by us11-005mrr.dh.atmailcloud.com with esmtp (Exim 4.90_1)
        (envelope-from <info@ednawest.com>)
       From: "Latisha" <info>
BTC Address: 1AYQWsWEQEPHtkKv2YGR8LJ3FfN5xMPb6S
(It is case sensitive, so copy and paste it)

Well, I got #5 of these dang emails.  It’s the same damn context, so I’m just posting pertinent info, such as his email addy and the Bitcoin address.  This one came from Panama.

NAMECHEAP INC
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

(p)
********************************************************

Return-path: <info@ednawest.com>
Envelope-to: ***********************
Received: from us11-006mrr.dh.atmailcloud.com ([172.16.7.6])
        by us11-401ms.dh.atmailcloud.com with esmtp (Exim 4.90_1)
        (envelope-from <info@ednawest.com>)
        id
Received: from mail.ednawest.com ([46.161.42.79])
        by us11-005mx.dh.atmailcloud.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
        (Exim 4.90_1)
        (envelope-from <info@ednawest.com>)
       
From: "Chris" <info>
Subject: ************************
Date: Wed, 8 Aug 2018 12:23:56 -0700
Importance: normal
 
Bitcoin Address: 1GAHTd4Z8sQPbw3cwqwV398XRPod1k6nwt
(It is case sensitive, so copy and paste it)

I looked up williehowell.com and it’s in Russia.  No surprise there.


46.161.42.91 IP address Information

The IP address 46.161.42.91 was found in Saint Petersburg, Saint Petersburg City, Russian Federation. It is allocated to Petersburg Internet Network ltd., Petersburg Internet Network LLC. Additional IP location information, as well as network tools are available below.
IP address:   46.161.42.91
hostname:    mail.williehowell.com
ISP:    Petersburg Internet Network ltd.
Organization:    Petersburg Internet Network LLC
City:    Saint Petersburg
Region:    Saint Petersburg City
Country:    Russian Federation (RU) flag
Postal code:    190005
latitude:    59.8944
longitude:    30.2642

Well, I got the 4th one of the day just now.  In the program I have that lets me look at email on my server and delete without ever downloading to my computer, it let me look at the headers.  Below  the asterisks are some of the headers with the return email addy.  This time I left the Bitcoin link in tact.  I’m getting rather sick of this.  This makes a total of 5 times I’ve received this email, one when I started this thread and 4 today.

*************************************************************

Return-path: <important@williehowell.com>
Envelope-to: *****************
Received: from us11-006mrr.dh.atmailcloud.com ([172.16.7.6])
        by us11-401ms.dh.atmailcloud.com with esmtp (Exim 4.90_1)
        (envelope-from <important@williehowell.com>)
        id 1fn6Lx-0006vb-Hi
        Received: from mail.williehowell.com ([46.161.42.91])
       
 
 Content analysis details:   (2.4 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 ATMAIL_BAD_SEKRIT1     BODY: itsasekrit
  1.5 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5000]
  0.6 INVALID_MSGID          Message-Id is not valid, according to RFC 2822
  0.1 TO_IN_SUBJ             To address is in Subject

It seems that, (****************), is your password. You may not know me and you are probably wondering why you are getting this e mail, right?
 
in fact, I setup a viruses over the adult vids (adult) web-site and guess what happens, you visited this web site to have fun (you really know what I am talking about). During the time you were watching videos, your internet browser started out working as a RDP (Remote Desktop) which gave me accessibility to your screen and web cam. from then on, my software programs obtained all of your current contacts from your Messenger, Outlook, Facebook, in addition to emails.
 
What did I actually do?
 
I made a double-screen video. 1st part shows the recording you were watching (you've got a good taste haha . . .), and Second part shows the recording of your webcam.
 
exactly what should you do?
 
Well, in my opinion, $1000 is really a reasonable price for our little secret. You will make the payment by Bitcoin (if you don't know this, search "how to purchase bitcoin" search engines like google).
 
Bitcoin Address: 1Cft34zDzUDJpr1ze23HtJdW2ohdp3xXu
(It's case sensitive, so copy and paste it)
 
Very important:
You've one day in order to make the payment. (I have a unique pixel in this e-mail, and at this moment I am aware that you have read this email message). If I don't get the BitCoins, I will certainly send out your videos to all of your contacts including relatives, colleagues, and so forth. Having said that, if I receive the payment, I'll destroy the video immidiately. If you'd like evidence, reply with "Yes!" and I will certainly send out your videos to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by answering this message.

This morning I got 3 more identical emails, only from different people.  I deleted all 3 right away, but I’m assuming that none had return email addresses.  I have a program that lets me see my email on the server and delete or bounce it without ever downloading to my computer so none ever reached my computer.  Is this guy that stupid, or has he shared this with others?

That someone can not be tracked down thru Bitcoin just seems wrong.  Seems like an invitation for criminals to be able to continue scamming people with no fear of being found.

I have belonged to so many forums over the years, I doubt I could count them all up.  Many do not use ssl and probably the forum I visit the most does not.  I know several forums have sold over the years, some to corporations that don’t seem to give a rats poop about the site as long as it generates money.

I can generally spot a scam in a heartbeat as I did with this one, but the BTC address they left was like nothing I’ve ever seen before.  I’m sure I’ve heard of Bitcoin on the news or a discussion in a forum, but today is the first time I’ve ever tried to understand what it is, and believe me, I still don’t understand it.

I assumed there would be a forum rule about posting the whole address, so I left the last 4 characters off.  If it’s ok to post it, I will.

I appreciate the responses.  I could pretty much read scam thru the whole thing, specially since I do not have or use a web cam, nor do I use messenger Outlook, or Facebook and they did not mention the name of the web site, important info if they wanted to be believed, but the password bothers me.  How would they get my password?  I was not and am not in fear of this email, but I am definitely ticked off.  I would love to get my hands on this person, or at least expose him and press charges.

I was hoping since I have their BTC number, tho I left the last 4 characters off for the purpose of posting, that it would be possible to find this person.  There is no contact info on the Bitcoin site, so I registered for this forum.

I just got an email that I pasted below the asterisks.  The only thing they have right is an old password that I still use for forums I’ve belonged to for years.  Mostly computer and photography related forums.  They are telling me they have videos from a porn site and my web cam and well, you can read the email.  I do not have a web cam, nor do I use Messenger, Outlook or Facebook.  I removed my password from the email.  Their BTC address is listed, tho I removed the last 4 characters for the purpose of posting here.  They are demanding $1,000 within 24 hours.  I do believe this is a scam of some sort.  If I click on reply, there is no address and if I try to look at all headers in the email, it is not available.  Never seen that before.  Is there a way to trace this person and find out who they are?  I am not sending them anything. 

One thing I did notice the other day is that a proxy program I run always in Firefox got turned off the other day.  That’s never happened before.


*************************************************

It seems that, (*****************), is your password. You may not know me and you are probably wondering why you are getting this e mail, right?
 
actually, I put in place a trojans over the adult vids (adult porn) web-site and you know what, you visited this web site to have fun (you know what I mean). While you were watching videos, your internet browser began working like a RDP (Remote Access) which provided accessibility of your screen and web cam. and then, my computer software obtained all of your current contacts from your Messenger, Outlook, Facebook, as well as emails.
 
What did I really do?
 
I made a double-screen video clip. First part shows the video you're seeing (you have a good taste haha . . .), and 2nd part shows the recording of your web camera.
 
exactly what should you do?
 
Well, in my opinion, $1000 is a fair price for your little secret. You'll make the payment by Bitcoin (if you do not know this, search "how to buy bitcoin" in Google).
 
BTC Address: 15mwbKGQ2MMQW91G6VUwHx8huEFRZZ****
(It is case sensitive, so copy and paste it)
 
Very important:
You've got 1 day in order to make the payment. (I have a completely unique pixel within this e mail, and at this moment I know that you have read through this email message). If I don't get the BitCoins, I will certainly send out your videos to all of your contacts including family members, colleagues, and so forth. Having said that, if I get the payment, I'll destroy the recording immidiately. If you'd like evidence, reply with "Yes!" and i'll undoubtedly send your videos to your 6 contacts. It is a non-negotiable offer, that being said don't waste my personal time and yours by answering this message.