A particularly unpleasant scam attempt, Mrs Weaver was a very slightly put out :
From Spamcop’s header analysis, it appears that it originated from the network of timeweb.ru
-- message headers begin --
Return-Path: <return@dropthecoins.com>
Received: from murder (frontend-2.ukservers.net [10.0.17.167])
by cyrus-aws-05.ukservers.net with LMTPA;
Wed, 10 Jan 2018 04:00:05 +0000
X-Sieve: CMU Sieve 2.4
Received: from mailex-1-forwarder.ukservers.net (mx1.ukservers.net [10.0.17.169])
by frontend-2.ukservers.net (Cyrus v2.2.13-Debian-2.2.13-10) with LMTPA;
Wed, 10 Jan 2018 04:00:05 +0000
Received: from mailex-1.ukservers.net (mailex-1.ukservers.net [10.0.17.169])
by mailex-1-forwarder.ukservers.net (Postfix) with ESMTP id 6CDEF20001
for <janet@skyeshepherdhuts.co.uk>; Wed, 10 Jan 2018 04:00:05 +0000 (GMT)
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=5.23.55.60; helo=weeer10.dropthecoins.com; envelope-from=return@dropthecoins.com; receiver=janet@skyeshepherdhuts.co.uk
Received: from weeer10.dropthecoins.com (unknown [5.23.55.60])
by mailex-1.ukservers.net (Postfix mx-mailex-1) with ESMTP id 304504002C
for <janet@skyeshepherdhuts.co.uk>; Wed, 10 Jan 2018 04:00:04 +0000 (GMT)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=dropthecoins.com;
h=To:Subject:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=members@dropthecoins.com;
bh=Pzjb1Ur4Jz7vef9CVa9QkqDoeDo=;
b=neJmSr4qUA8ny8126hPn32R0O5JSyX1k7IbehpdSZnmShrlQKwy8RKRPIeFpQHDaoNkOiew3c9XO
jLVReoFNGRjX/ydDIspJsexYizE9X7yR+FFMJCUn2JBWWWniLPGTCNCcHvzIc7WPzwhG5+sEnJch
+h+N3JIRglxBcETnqDs=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=dropthecoins.com;
b=acgDjIfYxojKO6D0Q/ecY3UssWe3ldrTF5xRiyBD9BAR8w82Aj60/GWyndQAJJKbJOAJGVFu1HTi
H6VJl+uxPhHQtxjt6BGW4H+B09NAtgL7nn3lx/cDYKHxPXjoQQiCBHRkAISU9aaqn4DSAlmpFxKq
ceSG1IRTJH6mWf/y9Io=;
To: janet@skyeshepherdhuts.co.uk
Subject: =?UTF-8?B?RUVPTTogW2phbmV0QHNreWVzaGVwaGVyZGh1dHMuY28udWtdIDEwIErQsG4gMjAxOCAwMTowNTozNyBBbGwgaW4geW91ciBoYW5kcw==?=
Date: Tue, 09 Jan 2018 21:37:57 -0600
From: "Emily Robinson" <members@dropthecoins.com>
Reply-To: members@dropthecoins.com
MIME-Version: 1.0
X-Mailer-LID: 12
X-Mailer-SID: 17
List-Unsubscribe: <https://www.yessoftware.com/unsubscribe.php>
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_c7a1fb9c54562a3ea3b9ee9bb6524dd2"
Content-Transfer-Encoding: quoted-printable\n\n
Message-Id: <20180110040005.304504002C@mailex-1.ukservers.net>
X-UKServers-IP: 5.23.55.60
X-Envelope-To: janet@skyeshepherdhuts.co.uk
Тicket Dеtails
Email: janet@skyeshepherdhuts.co.uk
Camera ready,Notification: 10-01-2018
Status: Waiting for Reply
16xuXaHy9A7f20wJnKmIkF9XrA5Sy46Lu7_Priority:
Normal
........................................................................
Good day,
If u were more watchful
while caress yourself, I wouldn't worry you. I don't think that playing with yourself is
extremely terrible, but when all your friends,
relatives, сolleagues receive
video of it- it is
obviously
for u.
I seized virus on a porn web-site which was visited by
you. When the target click on a play button,
device starts recording the screen and all cameras on your
device starts working.
Moreover, soft makes a rdp supplied with keylogger function from the
system , so I could get all contacts
from ur e-mail, messengers and other social networks. I've
chosen dis e-mail because It's your
corporate address, so you should read
it.
I think that 400 usd is pretty
enough for this little false. I made a split screen
video(records from screen (interesting
category ) and camera ooooooh... its awful AF)
So its ur choice, if u want me to erase ur disgrace use my bitсоin
wallеt address:
1LYz7EgAF8PU6bSN8GDecnz9Gg814fs81W
You have one day after opening my message, I put the special tracking
pixel in it, so when you will open it I will see.If ya want me to
share proofs with ya, reply on this message
and I will send my creation to five contacts that I've got from ur
device.
P.S.. You are able to complain to cops, but
I don't think that they can help, the
investigation will last for one year- I'm from Ukraine - so I dgf lmao