22

✏️ Editing: 1678597647.M841278P3415914.depro4.fcomet.com,S=13179,W=13449:2,S

Envelope-to: info@autozone.com.sa
Delivery-date: Sun, 12 Mar 2023 06:07:27 +0100
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@depro4.fcomet.com>
To: info@autozone.com.sa
References: <005201d95487$03f61e76$198c9bbd$@autozone.com.sa>
Content-Type: multipart/report; report-type=delivery-status; boundary=1678597646-eximdsn-1055574257
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pbDva-00EKlm-UT@depro4.fcomet.com>
Date: Sun, 12 Mar 2023 06:07:26 +0100

--1678597646-eximdsn-1055574257
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

khurram.dhedhi@balubaid.com.sa
    (ultimately generated from info@autozone.com.sa)
    host smtp.antispamcloud.com [130.117.53.189]
    SMTP error from remote mail server after end of data:
    550 This message has been reported as spam by other users.

--1678597646-eximdsn-1055574257
Content-type: message/delivery-status

Reporting-MTA: dns; depro4.fcomet.com

Action: failed
Final-Recipient: rfc822;info@autozone.com.sa
Status: 5.0.0
Remote-MTA: dns; smtp.antispamcloud.com
Diagnostic-Code: smtp; 550 This message has been reported as spam by other users.

--1678597646-eximdsn-1055574257
Content-type: message/rfc822

Return-path: <info@autozone.com.sa>
Received: from [179.48.241.138] (port=13235 helo=179-48-241-138.inovaiptelecom.com.br)
	by depro4.fcomet.com with esmtp (Exim 4.95)
	(envelope-from <info@autozone.com.sa>)
	id 1pbDup-00EKSb-Ls
	for info@autozone.com.sa;
	Sun, 12 Mar 2023 06:06:42 +0100
From: <info@autozone.com.sa>
To: <info@autozone.com.sa>
Date: 11 Mar 2023 21:29:57 -0400
Message-ID: <005201d95487$03f61e76$198c9bbd$@autozone.com.sa>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_004F_01D95487.03F1ECDC"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Acog4cgg7ed61k55og4cgg7ed61k55==
Content-Language: en
x-cr-hashedpuzzle: 2D4= 4cgg 7ed6 1k55 og4c gg7e d61k 55og 4cgg 7ed6 1k55 og4c gg7e d61k 55og 4cgg;1;7ed61k55og4cgg7ed61k55og4cgg7ed61k55og4cgg7ed61k;Sosha1_v1;7;\{9996EE5D-4CE1-25FF-F088-3B2A87439996\};ZQB3AGUAZg4cgg7ed61k55og4cgg7ed61k55og4cgg7ed61k;11 Mar 2023 21:29:57 -0400;55og4cgg7ed61k55
x-cr-puzzleid: \{9996EE5D-4CE1-25FF-F088-3B2A87439996\}
X-Spam-Status: Yes, score=30.0
X-Spam-Score: 300
X-Spam-Bar: ++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  body{background-color:#f9f9f9;font-family:Arial,sans-serif;font-size:16px;line-height:1.6;color:#333;padding:20px}h1{font-size:24px;line-height:1.2;color:#000;margin-top:0;margin-bottom:20px;text-ali
    [...] 
 Content analysis details:   (30.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [179.48.241.138 listed in zen.spamhaus.org]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?179.48.241.138>]
  1.1 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  0.1 TRACKER_ID             BODY: Incorporates a tracking ID number
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP
                             addr 2)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  1.9 RATWARE_NO_RDNS        Suspicious MsgID and MIME boundary + no rDNS
  0.0 PDS_BAD_THREAD_QP_64   Bad thread header - short QP
  0.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.3 PDS_BTC_ID             FP reduced Bitcoin ID
  1.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  1.0 BITCOIN_SPAM_07        BitCoin spam pattern 07
  1.0 BITCOIN_PAY_ME         Pay me via BitCoin
  1.5 BITCOIN_YOUR_INFO      BitCoin with your personal info
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?SGV5LCB3aGF0J3MgdXA/?=

This is a multi-part message in MIME format.

------=_NextPart_000_004F_01D95487.03F1ECDC
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

=
body{background-color:#f9f9f9;font-family:Arial,sans-serif;font-size:16px=
;line-height:1.6;color:#333;padding:20px}h1{font-size:24px;line-height:1.=
2;color:#000;margin-top:0;margin-bottom:20px;text-align:center;text-trans=
form:uppercase;letter-spacing:2px}p{margin-top:0;margin-bottom:20px;text-=
align:justify}.highlight{background-color:#ffc107;color:#000;font-weight:=
700;padding:5px;border-radius:5px}
Greetings. I am the one who has infiltrated your system and accessed =
your private information.You may wonder why I chose you as my target. =
The truth is, I am a professional hacker who develops and tests exploits =
in the wild. I saw that you fit the criteria of a potential target who =
could afford to pay and had indulged in some questionable online =
activities.Using my expertise, I discovered a vulnerability in your =
system and exploited it using a zero-day technique. This type of exploit =
takes advantage of software vulnerabilities that are unknown to the =
developer, giving me complete access to your computer. With a packet =
sniffer, I was able to intercept your browsing history and found =
evidence of your involvement in adult content. From there, it was a =
simple matter to create a compromising video of you that I can use to =
blackmail you if necessary.As a hacker, I know the value of zero-day =
exploits and how they can be used to gain access to sensitive =
information. In your case, I used this technique to gain control of your =
entire digital life. I inserted bookmarks into your system and monitored =
all the traffic going in and out of your computer.I am willing to offer =
you a deal to resolve this situation. If you make the right decision, I =
will delete all the content that I have and the bookmarks that I =
inserted into your system. However, if you choose not to cooperate with =
me, I will take further action. I am a dedicated individual with =
obsessive-compulsive personality disorder, so I can assure you that I =
will follow through on my threats.My ultimate goal is to get paid for my =
work, and once I receive the payment, we will both go our separate ways. =
But time is running out, and the deal that I offer will expire in just a =
few days. You have until the weekend to make a payment of 1500 USD worth =
of Bitcoin to my account =
below.1MUptF6SZ7ycwGc5P1ZGCkP2JTgDs1bqjBRemember that this situation can =
become more costly for you if you make the wrong decision. If you refuse =
to cooperate, I will release the compromising video that I have created, =
and the shame that you have brought upon yourself will be public for all =
to see. The choice is yours, but I strongly advise you to make the right =
one.
------=_NextPart_000_004F_01D95487.03F1ECDC
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
(filtered medium)"><style></style></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><style>
 =
body{background-color:#f9f9f9;font-family:Arial,sans-serif;font-size:16px=
;line-height:1.6;color:#333;padding:20px}h1{font-size:24px;line-height:1.=
2;color:#000;margin-top:0;margin-bottom:20px;text-align:center;text-trans=
form:uppercase;letter-spacing:2px}p{margin-top:0;margin-bottom:20px;text-=
align:justify}.highlight{background-color:#ffc107;color:#000;font-weight:=
700;padding:5px;border-radius:5px}
</style>
<h1>Greetings. I am the one who has infiltrated your system and accessed =
your private information.</h1>
<p>You may wonder why I chose you as my target. The truth is, I am a =
professional hacker who develops and tests exploits in the wild. I saw =
that you fit the criteria of a potential target who could afford to pay =
and had indulged in some questionable online activities.
<p>Using my expertise, I discovered a vulnerability in your system and =
exploited it using a zero-day technique. This type of exploit takes =
advantage of software vulnerabilities that are unknown to the developer, =
giving me complete access to your computer. With a packet sniffer, I was =
able to intercept your browsing history and found evidence of your =
involvement in adult content. From there, it was a simple matter to =
create a compromising video of you that I can use to blackmail you if =
necessary.
<p>As a hacker, I know the value of zero-day exploits and how they can =
be used to gain access to sensitive information. In your case, I used =
this technique to gain control of your entire digital life. I inserted =
bookmarks into your system and monitored all the traffic going in and =
out of your computer.
<p>I am willing to offer you a deal to resolve this situation. If you =
make the right decision, I will delete all the content that I have and =
the bookmarks that I inserted into your system. However, if you choose =
not to cooperate with me, I will take further action. I am a dedicated =
individual with obsessive-compulsive personality disorder, so I can =
assure you that I will follow through on my threats.
<p>
<p>My ultimate goal is to get paid for my work, and once I receive the =
payment, we will both go our separate ways. But time is running out, and =
the deal that I offer will expire in just a few days. You have until the =
weekend to make a payment of 1500 USD worth of Bitcoin to my account =
below.
<p><span class=3Dhighlight>1MUptF6SZ7ycwGc5P1ZGCkP2JTgDs1bqjB</span>
<p>
<p>Remember that this situation can become more costly for you if you =
make the wrong decision. If you refuse to cooperate, I will release the =
compromising video that I have created, and the shame that you have =
brought upon yourself will be public for all to see. The choice is =
yours, but I strongly advise you to make the right =
one.<o:p></o:p></p></div></body></html>
------=_NextPart_000_004F_01D95487.03F1ECDC--

--1678597646-eximdsn-1055574257--

MR SKB