Abuse to Bitcoin address
19Dmc8cHq37sXfqafuSqnxf69HLuLkm1jF

Ransomware

Abuser: Steven Laval

Return-Path: <james+vannier@saucenao.com> Received: from [(91.99.204.149)] by mail2 with Xeams SMTP; Sat, 9 Mar 2019 07:21:36 -0500 (EST) X-SM_EnvelopeFrom: james+vannier@saucenao.com X-SM_Proxy: true X-SM_RECEIVED_ON: Sat, 9 Mar 2019 07:21:36 -0500 (EST) MIME-Version: 1.0 Content-Type: multipart/related; boundary="68466299559270053" Message-ID: <771c2cba88441b39255825641.067c57c428.20190309150806.2314b4b558.57b36bb8 Date: Sat, 9 Mar 2019 15:08:06 +0300 From: Steven Laval<hatmoont@wecook.fr>

Canada, 2019-03-09 15:38:02

Sextortion

Abuser: Cyprien_Jacquot@ibnabitaleb.org

General sextortion email

United States, 2019-03-18 11:51:07

Ransomware

Abuser: Yassin.Leonard@kimballcroftsmd.com

Asking money (some hundreds of dollars) under the threat to disclose and reveal alleged stollen passwords. X-Apparently-To: Deleted; Wed, 20 Mar 2019 02:11:30 +0000 Return-Path: <Yassin.Leonard@kimballcroftsmd.com> X-YahooFilteredBulk: 14.177.86.196 Received-SPF: pass (domain of kimballcroftsmd.com designates 14.177.86.196 as permitted sender) X-Originating-IP: [14.177.86.196] Authentication-Results: mta4489.mail.gq1.yahoo.com from=kimballcroftsmd.com; dkim=neutral (no sig) Received: from 10.253.33.161 (EHLO kimballcroftsmd.com) (14.177.86.196) by mta4489.mail.gq1.yahoo.com with SMTP; Wed, 20 Mar 2019 02:11:29 +0000 Date: Wed, 20 Mar 2019 05:11:21 +0300 Message-ID: <uycvapuxpciu-spzygvl-t@gmail.com> From: <Yassin.Leonard@kimballcroftsmd.com> Content-ID: <ou_51.png> Content-Y-glaspdund: flampskect Content-Z-prahmapt: zanddrof Content-X-blirsnib: floondnov Content-Type: IMAGE/PNG; name="ou_51.png" --b1_b9c7874495a4c214970767082a8b7b8a

Portugal, 2019-03-20 22:46:30