22

✏️ Editing: 1684010136.M73910P4155943.depro4.fcomet.com,S=9995,W=10177:2,S

Envelope-to: info@autozone.com.sa
Delivery-date: Sat, 13 May 2023 22:35:36 +0200
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@depro4.fcomet.com>
To: info@autozone.com.sa
References: <2A87CD36A6607C5DF0BA41D1170B2A87@KCJWC5P>
Content-Type: multipart/report; report-type=delivery-status; boundary=1684010135-eximdsn-1987432117
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pxvxn-00HTIn-2K@depro4.fcomet.com>
Date: Sat, 13 May 2023 22:35:35 +0200

--1684010135-eximdsn-1987432117
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

khurram.dhedhi@balubaid.com.sa
    (ultimately generated from info@autozone.com.sa)
    host smtp.antispamcloud.com [149.13.75.71]
    SMTP error from remote mail server after end of data:
    550 Message rejected due to user rules.

--1684010135-eximdsn-1987432117
Content-type: message/delivery-status

Reporting-MTA: dns; depro4.fcomet.com

Action: failed
Final-Recipient: rfc822;info@autozone.com.sa
Status: 5.0.0
Remote-MTA: dns; smtp.antispamcloud.com
Diagnostic-Code: smtp; 550 Message rejected due to user rules.

--1684010135-eximdsn-1987432117
Content-type: message/rfc822

Return-path: <info@autozone.com.sa>
Received: from 254c2e17.nat.pool.telekom.hu ([37.76.46.23]:52051)
	by depro4.fcomet.com with esmtp (Exim 4.96)
	(envelope-from <info@autozone.com.sa>)
	id 1pxvx9-00HQtu-2D
	for info@autozone.com.sa;
	Sat, 13 May 2023 22:34:52 +0200
Message-ID: <2A87CD36A6607C5DF0BA41D1170B2A87@KCJWC5P>
From: <info@autozone.com.sa>
To: <info@autozone.com.sa>
Date: 13 May 2023 23:13:58 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5931
X-Spam-Status: Yes, score=42.3
X-Spam-Score: 423
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello there! Unfortunately, there are some bad news for you.
    Around several months ago I have obtained access to your devices that you
    were using to browse internet. Subsequently, I have proceeded with tracking
    do [...] 
 Content analysis details:   (42.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 CK_HELO_GENERIC        Relay used name indicative of a Dynamic Pool or
                             Generic rPTR
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [37.76.46.23 listed in zen.spamhaus.org]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [37.76.46.23 listed in psbl.surriel.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  4.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
                             address
                             [37.76.46.23 listed in dnsbl.sorbs.net]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  8.5 KAM_CRIM               Extortion Email
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 PDS_BTC_MSGID          Bitcoin ID with T_MSGID_NOFQDN2
  0.4 PDS_BTC_ID             FP reduced Bitcoin ID
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 BITCOIN_XPRIO          Bitcoin + priority
  0.3 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  2.8 BITCOIN_YOUR_INFO      BitCoin with your personal info
  0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
                             (FTSDMCXX/boundary variant) + direct-to-MX
  3.5 BITCOIN_SPAM_07        BitCoin spam pattern 07
  0.0 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  2.0 BITCOIN_MALWARE        BitCoin + malware bragging
  3.1 DOS_OE_TO_MX           Delivered direct to MX with OE headers
X-Spam-Flag: YES
Subject:  ***SPAM***  You have an outstanding payment.

Hello there!

Unfortunately, there are some bad news for you.
Around several months ago I have obtained access to your devices that you were using to browse internet.
Subsequently, I have proceeded with tracking down internet activities of yours.

Below, is the sequence of past events: 
In the past, I have bought access from hackers to numerous email accounts (today, that is a very straightforward task that can be done online).
Clearly, I have effortlessly logged in to email account of yours (info@autozone.com.sa).

A week after that, I have managed to install Trojan virus to Operating Systems of all your devices that are used for email access.
Actually, that was quite simple (because you were clicking the links in inbox emails).
All smart things are quite straightforward. (>__<)

The software of mine allows me to access to all controllers in your devices, such as video camera, microphone and keyboard.
I have managed to download all your personal data, as well as web browsing history and photos to my servers.
I can access all messengers of yours, as well as emails, social networks, contacts list and even chat history.
My virus unceasingly refreshes its signatures (since it is driver-based), and hereby stays invisible for your antivirus.

So, by now you should already understand the reason why I remained unnoticed until this very moment...

While collecting your information, I have found out that you are also a huge fan of websites for adults.
You truly enjoy checking out porn websites and watching dirty videos, while having a lot of kinky fun.
I have recorded several kinky scenes of yours and montaged some videos, where you reach orgasms while passionately masturbating.

If you still doubt my serious intentions, it only takes couple mouse clicks to share your videos with your friends, relatives and even colleagues.
It is also not a problem for me to allow those vids for access of public as well.
I truly believe, you would not want this to occur, understanding how special are the videos you love watching, (you are clearly aware of that) all that stuff can result in a real disaster for you.

Let's resolve it like this:
All you need is $1350 USD transfer to my account (bitcoin equivalent based on exchange rate during your transfer), and after the transaction is successful, I will proceed to delete all that kinky stuff without delay.
Afterwards, we can pretend that we have never met before. In addition, I assure you that all the harmful software will be deleted from all your devices. Be sure, I keep my promises.

That is quite a fair deal with a low price, bearing in mind that I have spent a lot of effort to go through your profile and traffic for a long period.
If you are unaware how to buy and send bitcoins - it can be easily fixed by searching all related information online.

Below is bitcoin wallet of mine: 1Pp5DTCTRSzoFyaHbrSEWGDWZZRp3rMsWv

You are given not more than 48 hours after you have opened this email (2 days to be precise).

Below is the list of actions that you should not attempt doing:
> Do not attempt to reply my email (the email in your inbox was created by me together with return address).
> Do not attempt to call police or any other security services. Moreover, don't even think to share this with friends of yours. Once I find that out (make no doubt about it, I can do that effortlessly, bearing in mind that I have full control over all your systems) - the video of yours will become available to public immediately. 
> Do not attempt to search for me - there is completely no point in that. All cryptocurrency transactions remain anonymous at all times.
> Do not attempt reinstalling the OS on devices of yours or get rid of them. It is meaningless too, because all your videos are already available at remote servers.

Below is the list of things you don't need to be concerned about:
> That I will not receive the money you transferred.
- Don't you worry, I can still track it, after the transaction is successfully completed, because I still monitor all your activities (trojan virus of mine includes a remote-control option, just like TeamViewer).
> That I still will make your videos available to public after your money transfer is complete.
- Believe me, it is meaningless for me to keep on making your life complicated. If I indeed wanted to make it happen, it would happen long time ago!

Everything will be carried out based on fairness!

Before I forget...moving forward try not to get involved in this kind of situations anymore!
An advice from me - regularly change all the passwords to your accounts.

--1684010135-eximdsn-1987432117--

MR SKB