22

✏️ Editing: 1706352050.M713239P3790325.depro4.fcomet.com,S=8634,W=8805:2,c

Envelope-to: info@autozone.com.sa
Delivery-date: Sat, 27 Jan 2024 11:40:50 +0100
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@depro4.fcomet.com>
To: info@autozone.com.sa
References: <65B5299E.2940.AB553B@info.autozone.com.sa>
Content-Type: multipart/report; report-type=delivery-status; boundary=1706352049-eximdsn-1329912092
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1rTg7F-00G1kK-2h@depro4.fcomet.com>
Date: Sat, 27 Jan 2024 11:40:49 +0100

--1706352049-eximdsn-1329912092
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

khurram.dhedhi@balubaid.com.sa
    (ultimately generated from info@autozone.com.sa)
    host smtp.antispamcloud.com [130.117.54.107]
    SMTP error from remote mail server after end of data:
    550 Message rejected due to user rules.

--1706352049-eximdsn-1329912092
Content-type: message/delivery-status

Reporting-MTA: dns; depro4.fcomet.com

Action: failed
Final-Recipient: rfc822;info@autozone.com.sa
Status: 5.0.0
Remote-MTA: dns; smtp.antispamcloud.com
Diagnostic-Code: smtp; 550 Message rejected due to user rules.

--1706352049-eximdsn-1329912092
Content-type: message/rfc822

Return-path: <info@autozone.com.sa>
Received: from [122.169.49.158] (port=12092 helo=abts-mum-dynamic-158.49.169.122.airtelbroadband.in)
	by depro4.fcomet.com with esmtp (Exim 4.96.2)
	(envelope-from <info@autozone.com.sa>)
	id 1rTg6Y-00G0i0-1w
	for info@autozone.com.sa;
	Sat, 27 Jan 2024 11:40:03 +0100
From: <info@autozone.com.sa>
To: <info@autozone.com.sa>
Date: 27 Jan 2024 19:47:46 +0400
MIME-Version: 1.0
Message-ID: <65B5299E.2940.AB553B@info.autozone.com.sa>
Priority: normal
X-mailer: Pegasus Mail for Windows (4.41)
Content-type: text/plain; charset="iso-8859-1"
Content-transfer-encoding: 7BIT
Content-description: Mail message body
X-Spam-Status: Yes, score=37.0
X-Spam-Score: 370
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "depro4.fcomet.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello pervert, I want to inform you about a very bad situation
    for you. However, you can benefit from it, if you will act wisely. Have you
    heard of Pegasus? This is a spyware program that installs on computers and
    smartphones and allows hackers to monitor the activity of device owners.
   It provides access to your webcam, messenge [...] 
 Content analysis details:   (37.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.2 CK_HELO_GENERIC        Relay used name indicative of a Dynamic Pool or
                             Generic rPTR
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [122.169.49.158 listed in zen.spamhaus.org]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?122.169.49.158>]
  4.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
                             address
                             [122.169.49.158 listed in dnsbl.sorbs.net]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [122.169.49.158 listed in bl.score.senderscore.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 BITCOIN_SPAM_09        BitCoin spam pattern 09
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  8.5 KAM_CRIM               Extortion Email
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.2 PDS_BTC_ID             FP reduced Bitcoin ID
  1.5 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.3 BITCOIN_SPAM_07        BitCoin spam pattern 07
  1.5 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  0.0 BITCOIN_TOEQFM         Bitcoin + To same as From
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  Response for you're doing.

Hello pervert,

I want to inform you about a very bad situation for you. However, you can benefit from it, if you will act wisely.

Have you heard of Pegasus? 
This is a spyware program that installs on computers and smartphones and allows hackers to monitor the activity of device owners. 
It provides access to your webcam, messengers, emails, call records, etc. It works well on Android, iOS, and Windows. 
I guess, you already figured out where I'm getting at.

It's been a few months since I installed it on all your devices because you were not quite choosy about what links to click on the internet. 
During this period, I've learned about all aspects of your private life, but one is of special significance to me.
I've recorded many videos of you jerking off to highly controversial porn videos. 
Given that the "questionable" genre is almost always the same, I can conclude that you have sick perversion.

I doubt you'd want your friends, family and co-workers to know about it. However, I can do it in a few clicks.
Every number in your contact book will suddenly receive these videos - on WhatsApp, on Telegram, on Skype, on email - everywhere. 
It is going to be a tsunami that will sweep away everything in its path, and first of all, your former life.
Don't think of yourself as an innocent victim. No one knows where your perversion might lead in the future, so consider this a kind of deserved punishment to stop you.

Better late than never.
I'm some kind of God who sees everything. 
However, don't panic. As we know, God is merciful and forgiving, and so do I. 
But my mercy is not free.

Transfer $1220 USD to my bitcoin wallet: 1A28fiWUfQnqEMqoDmMf7KZcjSDY7mEjfs

Once I receive confirmation of the transaction, I will permanently delete all videos compromising you, 
uninstall Pegasus from all of your devices, and disappear from your life. You can be sure - my benefit is only money. 
Otherwise, I wouldn't be writing to you, but destroy your life without a word in a second.

I'll be notified when you open my email, and from that moment you have exactly 48 hours to send the money. 
If cryptocurrencies are unchartered waters for you, don't worry, it's very simple. 
Just google "crypto exchange" and then it will be no harder than buying some useless stuff on Amazon.

I strongly warn you against the following:
) Do not reply to this email. I sent it from a temp email so I am untraceable.
) Do not contact the police. I have access to all your devices, and as soon as I find out you ran to the cops, videos will be published.
) Don't try to reset or destroy your devices.

As I mentioned above: I'm monitoring all your activity, so you either agree to my terms or the videos are published.

Also, don't forget that cryptocurrencies are anonymous, so it's impossible to identify me using the provided address.
Good luck, my perverted friend. I hope this is the last time we hear from each other.

And some friendly advice: from now on, don't be so careless about your online security.

--1706352049-eximdsn-1329912092--

MR SKB