Three new messages with bitcoin extortion in this morning.
All hoping to receive funds at bitcoin address
1L2UavMTrhpCXWn9LvqhCqRSvxYzfQsBw4.
This is funny, I've seen this address before, right at the beginning of 2021:
New year, new scams - Koos van den Hout
but it still hasn't received anything. Good.
Analyzing the headers show a lot of dead ends again. One sample:
Received: from evanwiggs.com (evanwiggs.com [68.171.49.21])
by mxdrop304.xs4all.net (8.14.9/8.14.9/Debian-xs4all~5) with ESMTP id
14N7DOiH028056
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)
for <.....@..........>; Sun, 23 May 2021 09:13:27 +0200
Received: (qmail 5080 invoked from network); 23 May 2021 03:13:26 -0400
Received: from unknown (HELO test3.novalocal) (123.156.225.126)
by evanwiggs.com with SMTP; 23 May 2021 03:13:26 -0400
The host in the middle was different for each attempt, but the
'test3.novalocal' was the same in all three. I'm guessing it is a fake Received
header. An online header analyzer agrees with this.
When I search for the name
.novalocal it seems related to openstack
installations.
Update 2021-05-29:
Hello whoever is behind wallet
1L2UavMTrhpCXWn9LvqhCqRSvxYzfQsBw4,
please give up!