The Spam is in many people's Plusnet mailboxes.
You seem to be lucky.
It is hundreds a day like the attached.
Markus
Return-path: <user@lastname.plus.com>
Envelope-to: user@lastname.plus.com
Delivery-date: Sun, 03 May 2026 08:51:56 +0100
Received: from [84.93.230.243] (helo=avasin-ptp-007.plus.net)
by inmx-peh-010.plus.net with esmtp (PlusNet MXCore v2.00) id 1wJRcK-00083o-Gt
for user@lastname.plus.com; Sun, 03 May 2026 08:51:56 +0100
Received: from mail.enmail.co ([91.204.208.8])
by Plusnet Cloudmark Gateway with ESMTP
id JRbkw4jgEl3NFJRbkw7kHa; Sun, 03 May 2026 08:51:20 +0100
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.4 cv=O4iavw9W c=1 sm=1 tr=0 ts=69f6fe78
p=cldSXMTIpfOU4Y6ndKLFjA==:17 p=xuSakxmQ/AEa0MmB+nwSGURWKu8=:19
p=PTyU9qhKzLH6fPggfxA3TfOAniY=:19 p=jCbGUyW4jJGoy8l3dHf0DG8VQv0=:19
p=NX+gl+Xpg2tz9MSno0cNtH3+2FI=:19 p=bU8HyK+u2KSFcGbJwLAM7afV7Pw=:19
p=1VCpbxcMXNoKQD3_8Deh:22 a=/50HAxhVri9f9h8qkinWjQ==:117 a=NGcC8JguVDcA:10
a=tQgp67HcAAAA:8 a=lxoXj2O9AAAA:8 a=5TAOmqheAAAA:8 a=es68Ls6DAAAA:8
a=7LJQYQ5cGpOTLzKPqbUA:9 a=7zbRnxVGAaKOODsWIkmG:22
Received: from [198.163.193.190] (unknown [198.163.193.190])
by mail.enmail.co (Postfix) with ESMTP id DC570C0049
for <user@lastname.plus.com>; Sun, 3 May 2026 07:51:17 +0000 (UTC)
Authentication-Results: mail.enmail.co;
dkim=none;
spf=softfail (mail.enmail.co: 198.163.193.190 is neither permitted nor denied by domain of user@lastname.plus.com) smtp.mailfrom=user@lastname.plus.com;
dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plus.com (policy=none)
Received: from wurggqe ([60.220.73.164]) by 15751.com with MailEnable ESMTP; Sun, 3 May 2026 12:51:27 +0500
Received: (qmail 54451 invoked by uid 544); 3 May 2026 12:51:25 +0500
From: user@lastname.plus.com
To: user@lastname.plus.com
Date: Sun, 3 May 2026 12:51:27 +0500
Message-ID: <544510.544510@15751.com>
Mime-Version: 1.0
Content-type: text/plain;
X-Spamd-Result: default: False [9.70 / 4.00];
BAYES_SPAM(5.10)[100.00%];
SUBJ_ALL_CAPS(2.10)[28];
RDNS_NONE(2.00)[];
MV_CASE(0.50)[];
MIME_GOOD(-0.10)[text/plain];
DMARC_POLICY_SOFTFAIL(0.10)[plus.com : No valid SPF, No valid DKIM,none];
ASN(0.00)[asn:8193, ipnet:198.163.193.0/24, country:UZ];
FROM_NO_DN(0.00)[];
RCVD_COUNT_ONE(0.00)[1];
MIME_TRACE(0.00)[0:+];
RCPT_COUNT_ONE(0.00)[1];
ARC_NA(0.00)[];
R_DKIM_NA(0.00)[];
TO_EQ_FROM(0.00)[];
FROM_EQ_ENVFROM(0.00)[];
FUZZY_RATELIMITED(0.00)[rspamd.com];
R_SPF_SOFTFAIL(0.00)[~all:c];
TO_MATCH_ENVRCPT_ALL(0.00)[];
TO_DN_NONE(0.00)[];
NEURAL_SPAM(0.00)[1.000]
X-Spam: Yes
X-Original-Recipient: user@lastname.plus.com
X-CMAE-Envelope: MS4xfG04MJaV1IMERR9BtDs79CH3KUWx2YjRO3GWJJXcblnEymzeGktrgkEEzIsEt9inxVKyuFcSt53rkoCqE3zSI3gGhWWMPr5ZphdlWKvorrm65gJRwO2Z
7E0RADvYrixQTibfmY9QUYTg8EKoLifhDCJCsgGXwlHXUopSHVV1usdOCWiQA807Q9Hg/ezGkm6RRiEzESqb/gXHaDNItCpPAAM=
X-pn-pstn-db:" Spam 99
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: YOU PERVERT, I RECORDED YOU!
Hello!
Unfortunately, there is some bad news for you.
Some time ago, your device was infected with my private Trojan, R.A.T (Remote Administration Tool).
If you want to find out more about it, simply use Google.
My Trojan allowed me to access your files, accounts, and your camera.
Check the sender of this email, I have sent it from your email account.
To ensure you read this email, you will receive it multiple times.
I RECORDED YOU (through your camera) MASTURBATING!
After that, I removed my malware to leave no traces.
If you still doubt my serious intentions, it only takes a couple of mouse clicks to share the video of you masturbating with your family, friends, relatives, all email contacts, on social networks and the darknet.
All you need is $800 USD in Bitcoin (BTC), transferred to my wallet address.
After the transaction is successful, I will proceed to delete everything.
I keep my promises!
You can purchase Bitcoin (BTC) from reputable exchanges here:
http://binance.com - Payment options: Credit/debit cards, bank transfers, P2P trading, third-party payment providers, and gift cards.
http://bitrefill.com - Payment options: Paysafecard, credit/debit cards, crypto, bank transfer, and other gift card options.
http://crypto.com - Payment options: Credit/debit cards, bank transfers, Apple Pay, Google Pay, and more.
http://kucoin.com - Payment options: Credit/debit cards, bank transfer, third-party payment providers, and peer-to-peer.
Alternatively, simply Google for other exchanges.
Once purchased, you can send the Bitcoin directly to my wallet address or use a wallet application such as Atomic Wallet or Exodus Wallet to manage your transactions.
My Bitcoin (BTC) wallet address is: 1LK753UYyYXPcUthYTrxgnaGC8qxXN8ZUK
Yes, that's how the wallet address looks like. Copy and paste my wallet address, it's (case-sensitive).
A piece of advice from me: regularly change all your passwords and update your device with the latest security patches.
