31.11.128-191.x IP Lookup - Switzerland

31.11.165.217

Complaint by Pierre Allemand :

Here is the original copy of an email I have received on December 21th 2018 at 10:16. "Delivered-To: pierreernestallemand@gmail.com Received: by 2002:a6b:9382:0:0:0:0:0 with SMTP id v124csp717430iod; Fri, 21 Dec 2018 01:16:11 -0800 (PST) X-Google-Smtp-Source: AFSGD/VpihEEomZ/ym/dJTKxMJ5r7GZA925lK4e18sh8pX98A30/eTW/6a12LNbCvgE5aASZEjz4 X-Received: by 2002:a1c:dc02:: with SMTP id t2mr1941396wmg.78.1545383771438; Fri, 21 Dec 2018 01:16:11 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1545383771; cv=none; d=google.com; s=arc-20160816; b=yE6/OK4zrXItdhblXjOA3ylDkKiymCrHDskUwZWHs83bAIesJlYAZ1JjIXhVOq9k2x l+fajzmYhlJTkveKK7ReCq0eZXikHng00TG9Ve+/QFiAfEXTVUDOZMO2ZCCygc/pC/EH BM3rbnIjx81KztqrP/eVjuBeYqJz6cxTahx1fIk6s5rpM500ETjl60YscRuY37XtuuSZ YCNCdw0iJuJ/wAWJqKiN3BDZCEEtFWKqbFpIo7wJaJU8WHMcBmtAgriZx1JVQnRy6GL5 yT3ekAdq1Tcc03bppeB4A8cJb87udObGUdwYsQfqgyUtaPg6M0xBHV8qzbfPvMLTuiEr xKaA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:subject:to:mime-version:user-agent:from :date:message-id; bh=565gcEqaBX0vaco3XAaWrTrzZf343tkGIEwt7gLWcyE=; b=S6IP7XfBuqsitHtuNCaWx5LqFeRNf20IioqLIylQLwh0pZZbKh4lXwmnMqmYCWR1mI Ci4D1ZKRvFrlZEuow7oQq2Jni24D5wCjEiW0QdUfq4NxgETGKGHDIdgYic4e4xMsFVd2 GQPNw0PaDy7w9LCzgDZLLh/P7lOhdJCzVCgv8WeGByci8ENVq+mg9S8IbQhCPGI4WShl +0apyb+LjMQOX5iY3pWUKML9713AP4B11TKOGz0RBEuFGcT+mgjMshi6UHzXlvEbVB93 ul3UvkIlEGV05z9meEL02YEzxevCwXRm6v73DFJWAmFYt+KnLr8Q4Z9uqMZYcxm0PYKI wu0Q== ARC-Authentication-Results: i=1; mx.google.com; spf=neutral (google.com: 54.37.14.96 is neither permitted nor denied by best guess record for domain of pierre.allemand@st-nom.com) smtp.mailfrom=pierre.allemand@st-nom.com Return-Path: <pierre.allemand@st-nom.com> Received: from ovh6.neodomaine.com (ovh6.neodomaine.com. [54.37.14.96]) by mx.google.com with ESMTPS id s184si7608766wmf.46.2018.12.21.01.16.10 for <pierreernestallemand@gmail.com> (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 21 Dec 2018 01:16:11 -0800 (PST) Received-SPF: neutral (google.com: 54.37.14.96 is neither permitted nor denied by best guess record for domain of pierre.allemand@st-nom.com) client-ip=54.37.14.96; Authentication-Results: mx.google.com; spf=neutral (google.com: 54.37.14.96 is neither permitted nor denied by best guess record for domain of pierre.allemand@st-nom.com) smtp.mailfrom=pierre.allemand@st-nom.com Received: from 031011165217.bielawa.vectranet.pl (031011165217.bielawa.vectranet.pl [31.11.165.217]) by ovh6.neodomaine.com (8.14.7/8.14.7) with ESMTP id wBL9G3Da026091 for <pierre.allemand@st-nom.com>; Fri, 21 Dec 2018 10:16:09 +0100 Message-ID: <5C1CBD36.8040900@st-nom.com> Date: Fri, 21 Dec 2018 10:15:18 +0000 From: <pierre.allemand@st-nom.com> User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 MIME-Version: 1.0 To: democratie <pierre.allemand@st-nom.com> Subject: Security Scam Warning. Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-neoDomaine-MailScanner-Information: Please contact the ISP for more information X-neoDomaine-MailScanner-ID: wBL9G3Da026091 X-neoDomaine-MailScanner_ovh6: Found to be clean X-neoDomaine-MailScanner-SpamCheck: n'est pas un polluriel, SpamAssassin (not cached, score=0.757, requis 1.8, BAYES_00 -1.90, RCVD_IN_BL_SPAMCOP_NET 1.35, RCVD_IN_MSPIKE_H2 -0.00, RCVD_IN_RP_RNBL 1.31, RCVD_IN_SORBS_DUL 0.00) X-neoDomaine-MailScanner-From: pierre.allemand@st-nom.com Hello! As you may have noticed, I sent you an email from your account. This means that I have full access to your account: On moment of hack your account has password: democratie You say: this is the old password! Or: I will change my password at any time! Yes! You're right! But the fact is that when you change the password, my trojan always saves a new one! I've been watching you for a few months now. The fact is that you were infected with malware through an adult site that you visited. If you are not familiar with this, I will explain. Trojan Virus gives me full access and control over a computer or other device. This means that I can see everything on your screen, turn on the camera and microphone, but you do not know about it. I also have access to all your contacts and all your correspondence. Why your antivirus did not detect malware? Answer: My malware uses the driver, I update its signatures every 4 hours so that your antivirus is silent. I made a video showing how you satisfy yourself in the left half of the screen, and in the right half you see the video that you watched. With one click of the mouse, I can send this video to all your emails and contacts on social networks. I can also post access to all your e-mail correspondence and messengers that you use. If you want to prevent this, transfer the amount of $762 to my bitcoin address (if you do not know how to do this, write to Google: &#8220;Buy Bitcoin&#8221;). My bitcoin address (BTC Wallet) is: 19Q3HZtnznuB5cuWng8cacwqZV13gNpZaN After receiving the payment, I will delete the video and you will never hear me again. I give you 48 hours to pay. I have a notice reading this letter, and the timer will work when you see this letter. Filing a complaint somewhere does not make sense because this email cannot be tracked like my bitcoin address. I do not make any mistakes. If I find that you have shared this message with someone else, the video will be immediately distributed. Best wishes! " The email was sourced from IP 31.11.165.217