관리-도구

편집 파일: 1624528678.M478989P23833.server.saraya-global.com,S=60847,W=61998:2,

Envelope-to: doreen.o@saraya.co.nz
Delivery-date: Thu, 24 Jun 2021 17:57:58 +0800
MIME-Version: 1.0
From: <postmaster@alisonathome.com>
To: <doreen.o@saraya.co.nz>
Date: Thu, 24 Jun 2021 09:57:11 +0000
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4e10ae38-14a7-4d49-b4b8-5eb1e954d925"
Content-Language: en-US
Message-ID:
 <b92aa715-a6fd-4b77-bc0e-fc70eabf952e@CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM>
In-Reply-To: <004a01d7690d$01934e9a$5d0e08b8$@saraya.co.nz>
References: <004a01d7690d$01934e9a$5d0e08b8$@saraya.co.nz>
Thread-Index: Ac0d0hgy0yrf72ye0d0hgy0yrf72yZSWGmry
Auto-Submitted: auto-replied
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Jun 2021 09:57:11.3434
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-AuthSource: CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-Network-Message-Id:
	d28ddb79-b941-449f-6cff-08d936f66fb2
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CWLP123MB3473
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.saraya-global.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  [https://products.office.com/en-us/CMSImages/Office365Logo_Orange.png?version=b8d100a9-0a8b-8e6a-88e1-ef488fee0470]
    Your message to carroll_elle@alisoncork.com couldn't be delivered. carroll_elle
    wasn [...] 
 Content analysis details:   (15.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: readthedocs.io]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  1.0 FORGED_SPF_HELO        No description available.
  8.5 KAM_CRIM               Extortion Email
X-Spam-Flag: YES
Subject:  ***SPAM***  Undeliverable: ***SPAM***  Payment from your account.

--4e10ae38-14a7-4d49-b4b8-5eb1e954d925
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="339ace4f-578b-4f82-9292-48f215000c8e"

--339ace4f-578b-4f82-9292-48f215000c8e
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

[https://products.office.com/en-us/CMSImages/Office365Logo_Orange.png?versi=
on=3Db8d100a9-0a8b-8e6a-88e1-ef488fee0470]
Your message to carroll_elle@alisoncork.com couldn't be delivered.
carroll_elle wasn't found at alisoncork.com.
doreen.o        Office 365      carroll_elle
Action Required                 Recipient
Unknown To address

How to Fix It
The address may be misspelled or may not exist. Try one or more of the foll=
owing:

*   Send the message again following these steps: In Outlook, open this n=
on-delivery report (NDR) and choose Send Again from the Report ribbon. In O=
utlook on the web, select this NDR, then select the link "To send this mess=
age again, click here." Then delete and retype the entire recipient address=
. If prompted with an Auto-Complete List suggestion don't select it. After =
typing the complete address, click Send.
  *   Contact the recipient (by phone, for example) to check that the addre=
ss exists and is correct.
  *   The recipient may have set up email forwarding to an incorrect addres=
s. Ask them to check that any forwarding they've set up is working correctl=
y.
  *   Clear the recipient Auto-Complete List in Outlook or Outlook on the w=
eb by following the steps in this article: Fix email delivery issues for er=
ror code 5.1.10 in Office 365<https://go.microsoft.com/fwlink/?LinkId=3D532=
972>, and then send the message again. Retype the entire recipient address =
before selecting Send.

If the problem continues, forward this message to your email admin. If you'=
re an email admin, refer to the More Info for Email Admins section below.

Was this helpful? Send feedback to Microsoft<https://go.microsoft.com/fwlin=
k/?LinkId=3D525921>.
________________________________

More Info for Email Admins
Status code: 550 5.1.10

This error occurs because the sender sent a message to an email address hos=
ted by Office 365 but the address is incorrect or doesn't exist at the dest=
ination domain. The error is reported by the recipient domain's email serve=
r, but most often it must be fixed by the person who sent the message. If t=
he steps in the How to Fix It section above don't fix the problem, and you'=
re the email admin for the recipient, try one or more of the following:

The email address exists and is correct - Confirm that the recipient addres=
s exists, is correct, and is accepting messages.

Synchronize your directories - If you have a hybrid environment and are usi=
ng directory synchronization make sure the recipient's email address is syn=
ced correctly in both Office 365 and in your on-premises directory.

Errant forwarding rule - Check for forwarding rules that aren't behaving as=
 expected. Forwarding can be set up by an admin via mail flow rules or mail=
box forwarding address settings, or by the recipient via the Inbox Rules fe=
ature.

Recipient has a valid license - Make sure the recipient has an Office 365 l=
icense assigned to them. The recipient's email admin can use the Office 365=
 admin center to assign a license (Users > Active Users > select the recipi=
ent > Assigned License > Edit).

Mail flow settings and MX records are not correct - Misconfigured mail flow=
 or MX record settings can cause this error. Check your Office 365 mail flo=
w settings to make sure your domain and any mail flow connectors are set up=
 correctly. Also, work with your domain registrar to make sure the MX recor=
ds for your domain are configured correctly.

For more information and additional tips to fix this issue, see Fix email d=
elivery issues for error code 5.1.10 in Office 365<https://go.microsoft.com=
/fwlink/?LinkId=3D532972>.

Original Message Details
Created Date:   6/24/2021 3:03:12 PM
Sender Address: doreen.o@saraya.co.nz
Recipient Address:      carroll_elle@alisoncork.com
Subject:        ***SPAM*** Payment from your account.

Error Details
Reported error: 550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipient carrol=
l_elle@alisoncork.com not found by SMTP address lookup
DSN generated by:       CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM

Message Hops
HOP     TIME (UTC)      FROM    TO      WITH    RELAY TIME
1       6/24/2021
9:57:09 AM      [103.233.65.39] server.alisonathome.co.uk       esmtp (Exim=
 4.94.2) (envelope-from <doreen.o@saraya.co.nz>)     *
2       6/24/2021
9:57:10 AM      server.alisonathome.co.uk       VE1EUR03FT054.mail.protecti=
on.outlook.com       Microsoft SMTP Server (version=3DTLS1_2, cipher=3DTLS_=
ECDHE_RSA_WITH_AES_256_GCM_SHA384)    1 sec
3       6/24/2021
9:57:11 AM      VE1EUR03FT054.eop-EUR03.prod.protection.outlook.com     AM6=
P193CA0122.outlook.office365.com     Microsoft SMTP Server (version=3DTLS1_=
2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)    1 sec
4       6/24/2021
9:57:11 AM      AM6P193CA0122.EURP193.PROD.OUTLOOK.COM  CWLP123MB3473.GBRP1=
23.PROD.OUTLOOK.COM  Microsoft SMTP Server (version=3DTLS1_2, cipher=3DTLS_=
ECDHE_RSA_WITH_AES_256_GCM_SHA384)    *

Original Message Headers

Received: from AM6P193CA0122.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:85::27=
)
 by CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:71::15) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19; Thu, 24 =
Jun
 2021 09:57:11 +0000
Received: from VE1EUR03FT054.eop-EUR03.prod.protection.outlook.com
 (2603:10a6:209:85:cafe::a6) by AM6P193CA0122.outlook.office365.com
 (2603:10a6:209:85::27) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19 via Front=
end
 Transport; Thu, 24 Jun 2021 09:57:11 +0000
Authentication-Results: spf=3Dnone (sender IP is 37.9.61.138)
 smtp.mailfrom=3Dsaraya.co.nz; alisoncork.com; dkim=3Dnone (message not sig=
ned)
 header.d=3Dnone;alisoncork.com; dmarc=3Dnone action=3Dnone
 header.from=3Dsaraya.co.nz;
Received-SPF: None (protection.outlook.com: saraya.co.nz does not designate
 permitted sender hosts)
Received: from server.alisonathome.co.uk (37.9.61.138) by
 VE1EUR03FT054.mail.protection.outlook.com (10.152.19.64) with Microsoft SM=
TP
 Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) =
id
 15.20.4264.18 via Frontend Transport; Thu, 24 Jun 2021 09:57:10 +0000
Received: from [103.233.65.39] (port=3D50071)
        by server.alisonathome.co.uk with esmtp (Exim 4.94.2)
        (envelope-from <doreen.o@saraya.co.nz>)
        id 1lwM6h-0007Sv-CF
        for carroll_elle@alisoncork.com; Thu, 24 Jun 2021 10:57:09 +0100
From: <doreen.o@saraya.co.nz>
To: <carroll_elle@alisoncork.com>
Date: 24 Jun 2021 19:03:12 +0400
Message-ID: <004a01d7690d$01934e9a$5d0e08b8$@saraya.co.nz>
MIME-Version: 1.0
Content-Type: text/plain;
        charset=3D"windows-1250"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Ac0d0hgy0yrf72ye0d0hgy0yrf72ye=3D=3D
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.17514
X-Spam-Status: Yes, score=3D24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.aliso=
nathome.co.uk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings! I have to share bad news with you. Approximat=
ely
    few months ago I have gained access to your devices, which you use for =
internet
    browsing. After that, I have started tracking your internet activities.
 Content analysis details:   (24.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- ----------------------------------------------=
----
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  8.5 KAM_CRIM               Extortion Email
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with n=
o rDNS
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  1.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.3 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  1.5 BITCOIN_MALWARE        BitCoin + malware bragging
  0.0 MALWARE_NORDNS         Malware bragging + no rDNS
  3.0 BITCOIN_ONAN           BitCoin + [censored]
X-Spam-Flag: YES
Subject: ***SPAM***  Payment from your account.
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server.alisonathome.co.uk
X-AntiAbuse: Original Domain - alisoncork.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - saraya.co.nz
X-Get-Message-Sender-Via: server.alisonathome.co.uk: mailgid no entry from =
get_recent_authed_mail_ips_entry
X-Authenticated-Sender: server.alisonathome.co.uk:
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: doreen.o@saraya.co.nz
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: f41259e8-4667-4412-bf7c-3d972d325d1f:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 9dc70a50-93d3-443b-1d5b-08d936f66f=
05
X-MS-TrafficTypeDiagnostic: CWLP123MB3473:

--339ace4f-578b-4f82-9292-48f215000c8e
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
  <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D=
1" />
  <head>
    <title>
          DSN
        </title>
  </head>
  <body style=3D"        background-color: white;      ">
    <table style=3D"        background-color: white;         max-width: 548=
px;         color: black;         border-spacing: 0px 0px;         padding-=
top: 0px;         padding-bottom: 0px;        border-collapse: collapse;   =
   " width=3D"548" cellspacing=3D"0" cellpadding=3D"0">
      <tbody>
        <tr>
          <td style=3D"        text-align: left;        padding-bottom: 20p=
x;      ">
            <img height=3D"28" width=3D"126" style=3D"        max-width: 10=
0%;      " src=3D"https://products.office.com/en-us/CMSImages/Office365Logo=
_Orange.png?version=3Db8d100a9-0a8b-8e6a-88e1-ef488fee0470" />
          </td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        font-size: 16px;         padding-bottom: 10px;         -ms=
-text-size-adjust: 100%;        text-align: left;      ">Your message to <s=
pan style=3D"        color: #0072c6;      ">carroll_elle@alisoncork.com</sp=
an> couldn't be delivered.<br /></td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;         font-size: 24px;         padding-top: 0px;         paddin=
g-bottom: 20px;         text-align: center;         -ms-text-size-adjust: 1=
00%;      ">
            <span style=3D"        color: #0072c6;      ">carroll_elle</spa=
n> wasn't found at <span style=3D"        color: #0072c6;      ">alisoncork=
.com</span>.<br /></td>
        </tr>
        <tr>
          <td style=3D"        padding-bottom: 15px;         padding-left: =
0px;         padding-right: 0px;         border-spacing: 0px 0px;      ">
            <table style=3D"        max-width: 548px;         font-weight: =
600;        border-spacing: 0px 0px;         padding-top: 0px;         padd=
ing-bottom: 0px;        border-collapse: collapse;      ">
              <tbody>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        font-size: 15px;        font-weight: 600;        t=
ext-align: left;        width: 181px;        -ms-text-size-adjust: 100%;   =
     vertical-align: bottom;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"color:#000000">doreen.o</span>
                    </font>
                  </td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        font-size: 15px;        font-weight: 600;        t=
ext-align: center;        width: 186px;        -ms-text-size-adjust: 100%; =
       vertical-align: bottom;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"color:#000000">Office 365</span>
                    </font>
                  </td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;         -ms-text-size-adjust: 100%;         font-size: 15=
px;         font-weight: 600;        text-align: right;         width: 181p=
x;         vertical-align: bottom;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"color:#000000">carroll_elle</span>
                    </font>
                  </td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;        text-align: left;        padding-top: 0px=
;        padding-bottom: 0px;        vertical-align: middle;        width: =
181px;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"        color: #c00000;      ">
                        <b>Action Required</b>
                      </span>
                    </font>
                  </td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;        text-align: center;        padding-top: 0=
px;        padding-bottom: 0px;        vertical-align: middle;        width=
: 186px;      " />
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;        text-align: right;        padding-top: 0p=
x;        padding-bottom: 0px;        vertical-align: middle;        width:=
 181px;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"color:#000000">Recipient</span>
                    </font>
                  </td>
                </tr>
                <tr>
                  <td colspan=3D"3" style=3D"        padding-top:0;        =
padding-bottom:0;        padding-left:0;        padding-right:0      ">
                    <table cellspacing=3D"0" cellpadding=3D"0" style=3D"   =
     border-spacing: 0px 0px;        padding-top: 0px;        padding-botto=
m: 0px;        padding-left: 0px;        padding-right: 0px;        border-=
collapse: collapse;      ">
                      <tbody>
                        <tr height=3D"10">
                          <td width=3D"180" height=3D"10" bgcolor=3D"#c0000=
0" style=3D"        width: 180px;        line-height: 10px;        height: =
10px;        font-size: 6px;        padding-top: 0;        padding-bottom: =
0;        padding-left: 0;        padding-right: 0;      "></td>
                          <td width=3D"4" height=3D"10" bgcolor=3D"#ffffff"=
 style=3D"        width: 4px;        line-height: 10px;        height: 10px=
;        font-size: 6px;        padding-top: 0;        padding-bottom: 0;  =
      padding-left: 0;        padding-right: 0;      "></td>
                          <td width=3D"180" height=3D"10" bgcolor=3D"#ccccc=
c" style=3D"        width: 180px;        line-height: 10px;        height: =
10px;        font-size: 6px;        padding-top: 0;        padding-bottom: =
0;        padding-left: 0;        padding-right: 0;      "></td>
                          <td width=3D"4" height=3D"10" bgcolor=3D"#ffffff"=
 style=3D"        width: 4px;        line-height: 10px;        height: 10px=
;        font-size: 6px;        padding-top: 0;        padding-bottom: 0;  =
      padding-left: 0;        padding-right: 0;      "></td>
                          <td width=3D"180" height=3D"10" bgcolor=3D"#ccccc=
c" style=3D"        width: 180px;        line-height: 10px;        height: =
10px;        font-size: 6px;        padding-top: 0;        padding-bottom: =
0;        padding-left: 0;        padding-right: 0;      "></td>
                        </tr>
                      </tbody>
                    </table>
                  </td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        text-align: left;        width: 181px;        line-height: 20px;  =
      font-weight: 400;        padding-top: 0px;        padding-left: 0px; =
       padding-right: 0px;        padding-bottom: 0px;      ">
                    <font color=3D"#ffffff">
                      <span style=3D"        color: #c00000;      ">Unknown=
 To address</span>
                    </font>
                  </td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        text-align: center;        width: 186px;        line-height: 20px;=
        font-weight: 400;        padding-top: 0px;        padding-left: 0px=
;        padding-right: 0px;        padding-bottom: 0px;      " />
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        text-align: right;        width: 181px;        line-height: 20px; =
       font-weight: 400;        padding-top: 0px;        padding-left: 0px;=
        padding-right: 0px;        padding-bottom: 0px;      " />
                </tr>
              </tbody>
            </table>
          </td>
        </tr>
        <tr>
          <td style=3D"        width: 100%;        padding-top: 0px;       =
 padding-right: 10px;        padding-left: 10px;      ">
            <br />
            <table style=3D"        width: 100%;        padding-right: 0px;=
        padding-left: 0px;        padding-top: 0px;        padding-bottom: =
0px;        background-color: #f2f5fa;        margin-left: 0px;      ">
              <tbody>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 21px=
;        font-weight: 500;        background-color: #f2f5fa;        padding=
-top: 0px;        padding-bottom: 0px;        padding-left: 10px;        pa=
dding-right: 10px;      ">How to Fix It</td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 16px=
;        font-weight: 400;        padding-top: 0px;        padding-bottom: =
6px;        padding-left: 10px;        padding-right: 10px;        backgrou=
nd-color: #f2f5fa;      ">The address may be misspelled or may not exist. T=
ry one or more of the following:</td>
                </tr>
                <tr>
                  <td style=3D"         padding-top: 0px;         padding-b=
ottom: 0px;         padding-left: 0px;         padding-right: 0px;        b=
order-spacing: 0px 0px;      ">
                    <ul style=3D"        font-family: 'Segoe UI', Frutiger,=
 Arial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 16=
px;        font-weight: 400;        margin-left: 40px;        margin-bottom=
: 5px;        background-color: #f2f5fa;        padding-top: 0px;        pa=
dding-bottom: 0px;        padding-left: 6px;        padding-right: 6px;    =
  ">
                      <li>Send the message again following these steps: In =
Outlook, open this non-delivery report (NDR) and choose <b>Send Again</b> f=
rom the Report ribbon. In Outlook on the web, select this NDR, then select =
the link "<b>To send this message again, click here.</b>" Then delete and r=
etype the entire recipient address. If prompted with an Auto-Complete List =
suggestion don't select it. After typing the complete address, click <b>Sen=
d</b>.</li>
                      <li>Contact the recipient (by phone, for example) to =
check that the address exists and is correct.</li>
                      <li>The recipient may have set up email forwarding to=
 an incorrect address. Ask them to check that any forwarding they've set up=
 is working correctly.</li>
                      <li>Clear the recipient Auto-Complete List in Outlook=
 or Outlook on the web by following the steps in this article: <a href=3D"h=
ttps://go.microsoft.com/fwlink/?LinkId=3D532972">Fix email delivery issues =
for error code 5.1.10 in Office 365</a>, and then send the message again. R=
etype the entire recipient address before selecting <b>Send</b>.</li>
                    </ul>
                  </td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 16px=
;        font-weight: 400;        padding-top: 0px;        padding-bottom: =
6px;        padding-left: 10px;        padding-right: 10px;        backgrou=
nd-color: #f2f5fa;      ">If the problem continues, forward this message to=
 your email admin. If you're an email admin, refer to the <b>More Info for =
Email Admins</b> section below.</td>
                </tr>
              </tbody>
            </table>
          </td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        -ms-text-size-adjust: 100%;        font-size: 14px;       =
 font-weight: 400;        padding-top: 10px;        padding-bottom: 0px;   =
     padding-bottom: 4px;      ">
            <br />
            <em>Was this helpful? <a href=3D"https://go.microsoft.com/fwlin=
k/?LinkId=3D525921">Send feedback to Microsoft</a>.</em>
          </td>
        </tr>
        <tr>
          <td style=3D"        -ms-text-size-adjust: 100%;        font-size=
: 0px;        line-height: 0px;        padding-top: 0px;        padding-bot=
tom: 0px;      ">
            <hr />
          </td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        -ms-text-size-adjust: 100%;        font-size: 21px;       =
 font-weight: 500;      ">
            <br />More Info for Email Admins</td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        -ms-text-size-adjust: 100%;        font-size: 14px;      "=
>
            <em>Status code: 550 5.1.10</em>
            <br />
            <br />This error occurs because the sender sent a message to an=
 email address hosted by Office 365 but the address is incorrect or doesn't=
 exist at the destination domain. The error is reported by the recipient do=
main's email server, but most often it must be fixed by the person who sent=
 the message. If the steps in the <b>How to Fix It</b> section above don't =
fix the problem, and you're the email admin for the recipient, try one or m=
ore of the following:<br /><br /><b>The email address exists and is correct=
</b> - Confirm that the recipient address exists, is correct, and is accept=
ing messages.<br /><br /><b>Synchronize your directories</b> - If you have =
a hybrid environment and are using directory synchronization make sure the =
recipient's email address is synced correctly in both Office 365 and in you=
r on-premises directory.<br /><br /><b>Errant forwarding rule</b> - Check f=
or forwarding rules that aren't behaving as expected. Forwarding can be set=
 up by an admin via mail flow rules or mailbox forwarding address settings,=
 or by the recipient via the Inbox Rules feature.<br /><br /><b>Recipient h=
as a valid license</b> - Make sure the recipient has an Office 365 license =
assigned to them. The recipient's email admin can use the Office 365 admin =
center to assign a license (Users &gt; Active Users &gt; select the recipie=
nt &gt; Assigned License &gt; Edit).<br /><br /><b>Mail flow settings and M=
X records are not correct</b> - Misconfigured mail flow or MX record settin=
gs can cause this error. Check your Office 365 mail flow settings to make s=
ure your domain and any mail flow connectors are set up correctly. Also, wo=
rk with your domain registrar to make sure the MX records for your domain a=
re configured correctly.<br /><br />For more information and additional tip=
s to fix this issue, see <a href=3D"https://go.microsoft.com/fwlink/?LinkId=
=3D532972">Fix email delivery issues for error code 5.1.10 in Office 365</a=
>.<br /><br /></td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        -ms-text-size-adjust: 100%;        font-size: 17px;       =
 font-weight: 500;      ">Original Message Details</td>
        </tr>
        <tr>
          <td style=3D"        font-size: 14px;        line-height: 20px;  =
      font-family: 'Segoe UI', Frutiger, Arial, sans-serif;        -ms-text=
-size-adjust: 100%;        font-weight: 500;      ">
            <table style=3D"        width: 100%;        border-collapse: co=
llapse;        margin-left: 10px;      ">
              <tbody>
                <tr>
                  <td valign=3D"top" style=3D"        font-family: 'Segoe U=
I', Frutiger, Arial, sans-serif;        font-size: 14px;        -ms-text-si=
ze-adjust: 100%;        white-space: nowrap;        font-weight: 500;      =
  width: 140px;      ">Created Date:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">6/24/2021 3:03:12 PM</td>
                </tr>
                <tr>
                  <td valign=3D"top" style=3D"        font-family: 'Segoe U=
I', Frutiger, Arial, sans-serif;        font-size: 14px;        -ms-text-si=
ze-adjust: 100%;        white-space: nowrap;        font-weight: 500;      =
  width: 140px;      ">Sender Address:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">doreen.o@saraya.co.nz</td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        font-size: 14px;        -ms-text-size-adjust: 100%=
;        white-space: nowrap;        font-weight: 500;        width: 140px;=
      ">Recipient Address:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">carroll_elle@alisoncork.com</td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        font-size: 14px;        -ms-text-size-adjust: 100%=
;        white-space: nowrap;        font-weight: 500;        width: 140px;=
      ">Subject:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">***SPAM***  Payment from your account.</t=
d>
                </tr>
              </tbody>
            </table>
          </td>
        </tr>
        <tr>
          <td style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sa=
ns-serif;        -ms-text-size-adjust: 100%;        font-size: 17px;       =
 font-weight: 500;      ">
            <br />Error Details</td>
        </tr>
        <tr>
          <td style=3D"        font-size: 14px;        line-height: 20px;  =
      font-family: 'Segoe UI', Frutiger, Arial, sans-serif;        -ms-text=
-size-adjust: 100%;        font-weight: 500;      ">
            <table style=3D"        width: 100%;        border-collapse: co=
llapse;        margin-left: 10px;      ">
              <tbody>
                <tr>
                  <td valign=3D"top" style=3D"        font-family: 'Segoe U=
I', Frutiger, Arial, sans-serif;        font-size: 14px;        -ms-text-si=
ze-adjust: 100%;        white-space: nowrap;        font-weight: 500;      =
  width: 140px;      ">Reported error:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">
                    <em>550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipien=
t carroll_elle@alisoncork.com not found by SMTP address lookup</em>
                  </td>
                </tr>
                <tr>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        font-size: 14px;        -ms-text-size-adjust: 100%=
;        white-space: nowrap;        font-weight: 500;        width: 140px;=
      ">DSN generated by:</td>
                  <td style=3D"        font-family: 'Segoe UI', Frutiger, A=
rial, sans-serif;        -ms-text-size-adjust: 100%;        font-size: 14px=
;        font-weight: 400;      ">CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM</t=
d>
                </tr>
              </tbody>
            </table>
          </td>
        </tr>
      </tbody>
    </table>
    <br />
    <table style=3D"width: 880px;" cellspacing=3D"0">
      <tr>
        <td colspan=3D"6" style=3D"        padding-top: 4px;        border-=
bottom: 1px solid #999999;        padding-bottom: 4px;        line-height: =
120%;        font-size: 17px;        font-family: 'Segoe UI', Frutiger, Ari=
al, sans-serif;        -ms-text-size-adjust: 100%;        font-weight: 500;=
      ">Message Hops</td>
      </tr>
      <tr>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;      ">HO=
P</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;        wi=
dth: 80px;      ">TIME (UTC)</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;      ">FR=
OM</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;      ">TO=
</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;      ">WI=
TH</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        background-color: #f2f5fa;        border-bottom: 1p=
x solid #999999;        white-space: nowrap;        padding: 8px;      ">RE=
LAY TIME</td>
      </tr>
      <tr>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: center;      ">1</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;        width: 80px;      ">6/24/2021<br />9:57=
:09 AM</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">[103.233.65.39]</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">server.alisonathome.co.uk</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">esmtp (Exim 4.94.2)	(envelope-from &lt;=
doreen.o@saraya.co.nz&gt;)</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">*</td>
      </tr>
      <tr>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: center;      ">2</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;        width: 80px;      ">6/24/2021<br />9:57=
:10 AM</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">server.alisonathome.co.uk</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">VE1EUR03FT054.mail.protection.outlook.c=
om</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">Microsoft SMTP Server (version=3DTLS1_2=
, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">1&nbsp;sec</td>
      </tr>
      <tr>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: center;      ">3</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;        width: 80px;      ">6/24/2021<br />9:57=
:11 AM</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">VE1EUR03FT054.eop-EUR03.prod.protection=
.outlook.com</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">AM6P193CA0122.outlook.office365.com</td=
>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">Microsoft SMTP Server (version=3DTLS1_2=
, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">1&nbsp;sec</td>
      </tr>
      <tr>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: center;      ">4</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;        width: 80px;      ">6/24/2021<br />9:57=
:11 AM</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">AM6P193CA0122.EURP193.PROD.OUTLOOK.COM<=
/td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM<=
/td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">Microsoft SMTP Server (version=3DTLS1_2=
, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)</td>
        <td style=3D"        font-size: 12px;        font-family: 'Segoe UI=
', Frutiger, Arial, sans-serif;        -ms-text-size-adjust: 100%;        f=
ont-weight: 500;        border-bottom: 1px solid #999999;        padding: 8=
px;        text-align: left;      ">*</td>
      </tr>
    </table>
    <p style=3D"        font-family: 'Segoe UI', Frutiger, Arial, sans-seri=
f;        -ms-text-size-adjust: 100%;        font-size: 17px;        font-w=
eight: 500;        padding-top: 4px;        padding-bottom: 0;        margi=
n-top: 19px;        margin-bottom: 5px;      ">Original Message Headers</p>
    <pre style=3D"        color: gray;        white-space: pre;        padd=
ing-top: 0;        margin-top: 5px;      ">Received: from AM6P193CA0122.EUR=
P193.PROD.OUTLOOK.COM (2603:10a6:209:85::27)
 by CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:71::15) with
 Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19; Thu, 24 =
Jun
 2021 09:57:11 +0000
Received: from VE1EUR03FT054.eop-EUR03.prod.protection.outlook.com
 (2603:10a6:209:85:cafe::a6) by AM6P193CA0122.outlook.office365.com
 (2603:10a6:209:85::27) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19 via Front=
end
 Transport; Thu, 24 Jun 2021 09:57:11 +0000
Authentication-Results: spf=3Dnone (sender IP is 37.9.61.138)
 smtp.mailfrom=3Dsaraya.co.nz; alisoncork.com; dkim=3Dnone (message not sig=
ned)
 header.d=3Dnone;alisoncork.com; dmarc=3Dnone action=3Dnone
 header.from=3Dsaraya.co.nz;
Received-SPF: None (protection.outlook.com: saraya.co.nz does not designate
 permitted sender hosts)
Received: from server.alisonathome.co.uk (37.9.61.138) by
 VE1EUR03FT054.mail.protection.outlook.com (10.152.19.64) with Microsoft SM=
TP
 Server (version=3DTLS1_2, cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) =
id
 15.20.4264.18 via Frontend Transport; Thu, 24 Jun 2021 09:57:10 +0000
Received: from [103.233.65.39] (port=3D50071)
	by server.alisonathome.co.uk with esmtp (Exim 4.94.2)
	(envelope-from &lt;doreen.o@saraya.co.nz&gt;)
	id 1lwM6h-0007Sv-CF
	for carroll_elle@alisoncork.com; Thu, 24 Jun 2021 10:57:09 +0100
From: &lt;doreen.o@saraya.co.nz&gt;
To: &lt;carroll_elle@alisoncork.com&gt;
Date: 24 Jun 2021 19:03:12 +0400
Message-ID: &lt;004a01d7690d$01934e9a$5d0e08b8$@saraya.co.nz&gt;
MIME-Version: 1.0
Content-Type: text/plain;
	charset=3D"windows-1250"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Ac0d0hgy0yrf72ye0d0hgy0yrf72ye=3D=3D
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.17514
X-Spam-Status: Yes, score=3D24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.aliso=
nathome.co.uk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings! I have to share bad news with you. Approximat=
ely
    few months ago I have gained access to your devices, which you use for =
internet
    browsing. After that, I have started tracking your internet activities.=
=20
 Content analysis details:   (24.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- ----------------------------------------------=
----
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  8.5 KAM_CRIM               Extortion Email
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with n=
o rDNS
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  1.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.3 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  1.5 BITCOIN_MALWARE        BitCoin + malware bragging
  0.0 MALWARE_NORDNS         Malware bragging + no rDNS
  3.0 BITCOIN_ONAN           BitCoin + [censored]
X-Spam-Flag: YES
Subject: ***SPAM***  Payment from your account.
X-AntiAbuse: This header was added to track abuse, please include it with a=
ny abuse report
X-AntiAbuse: Primary Hostname - server.alisonathome.co.uk
X-AntiAbuse: Original Domain - alisoncork.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - saraya.co.nz
X-Get-Message-Sender-Via: server.alisonathome.co.uk: mailgid no entry from =
get_recent_authed_mail_ips_entry
X-Authenticated-Sender: server.alisonathome.co.uk:=20
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: doreen.o@saraya.co.nz
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: f41259e8-4667-4412-bf7c-3d972d325d1f:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 9dc70a50-93d3-443b-1d5b-08d936f66f=
05
X-MS-TrafficTypeDiagnostic: CWLP123MB3473:
</pre>
  </body>
</html>=

--339ace4f-578b-4f82-9292-48f215000c8e--

--4e10ae38-14a7-4d49-b4b8-5eb1e954d925
Content-Type: message/delivery-status

Reporting-MTA: dns;CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM
Received-From-MTA: dns;server.alisonathome.co.uk
Arrival-Date: Thu, 24 Jun 2021 09:57:11 +0000

Final-Recipient: rfc822;carroll_elle@alisoncork.com
Action: failed
Status: 5.1.10
Diagnostic-Code: smtp;550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipient carroll_elle@alisoncork.com not found by SMTP address lookup

--4e10ae38-14a7-4d49-b4b8-5eb1e954d925
Content-Type: message/rfc822

Received: from AM6P193CA0122.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:85::27)
 by CWLP123MB3473.GBRP123.PROD.OUTLOOK.COM (2603:10a6:400:71::15) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19; Thu, 24 Jun
 2021 09:57:11 +0000
Received: from VE1EUR03FT054.eop-EUR03.prod.protection.outlook.com
 (2603:10a6:209:85:cafe::a6) by AM6P193CA0122.outlook.office365.com
 (2603:10a6:209:85::27) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4264.19 via Frontend
 Transport; Thu, 24 Jun 2021 09:57:11 +0000
Authentication-Results: spf=none (sender IP is 37.9.61.138)
 smtp.mailfrom=saraya.co.nz; alisoncork.com; dkim=none (message not signed)
 header.d=none;alisoncork.com; dmarc=none action=none
 header.from=saraya.co.nz;
Received-SPF: None (protection.outlook.com: saraya.co.nz does not designate
 permitted sender hosts)
Received: from server.alisonathome.co.uk (37.9.61.138) by
 VE1EUR03FT054.mail.protection.outlook.com (10.152.19.64) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.4264.18 via Frontend Transport; Thu, 24 Jun 2021 09:57:10 +0000
Received: from [103.233.65.39] (port=50071)
	by server.alisonathome.co.uk with esmtp (Exim 4.94.2)
	(envelope-from <doreen.o@saraya.co.nz>)
	id 1lwM6h-0007Sv-CF
	for carroll_elle@alisoncork.com; Thu, 24 Jun 2021 10:57:09 +0100
From: <doreen.o@saraya.co.nz>
To: <carroll_elle@alisoncork.com>
Date: 24 Jun 2021 19:03:12 +0400
Message-ID: <004a01d7690d$01934e9a$5d0e08b8$@saraya.co.nz>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="windows-1250"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
Thread-Index: Ac0d0hgy0yrf72ye0d0hgy0yrf72ye==
X-MimeOLE: Produced By Microsoft MimeOLE V6.1.7601.17514
X-Spam-Status: Yes, score=24.5
X-Spam-Score: 245
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.alisonathome.co.uk",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings! I have to share bad news with you. Approximately
    few months ago I have gained access to your devices, which you use for internet
    browsing. After that, I have started tracking your internet activities. 
 Content analysis details:   (24.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  8.5 KAM_CRIM               Extortion Email
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  1.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.3 MIMEOLE_DIRECT_TO_MX   MIMEOLE + direct-to-MX
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  1.5 BITCOIN_MALWARE        BitCoin + malware bragging
  0.0 MALWARE_NORDNS         Malware bragging + no rDNS
  3.0 BITCOIN_ONAN           BitCoin + [censored]
X-Spam-Flag: YES
Subject: ***SPAM***  Payment from your account.
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.alisonathome.co.uk
X-AntiAbuse: Original Domain - alisoncork.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - saraya.co.nz
X-Get-Message-Sender-Via: server.alisonathome.co.uk: mailgid no entry from get_recent_authed_mail_ips_entry
X-Authenticated-Sender: server.alisonathome.co.uk: 
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: doreen.o@saraya.co.nz
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: f41259e8-4667-4412-bf7c-3d972d325d1f:0
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 9dc70a50-93d3-443b-1d5b-08d936f66f05
X-MS-TrafficTypeDiagnostic: CWLP123MB3473:

Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which yo=
u use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:=20
Some time ago I have purchased access to email accounts from hackers (nowad=
ays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account (carroll_e=
lle@alisoncork.com).

One week later, I have already installed Trojan virus to Operating Systems =
of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links =
from your inbox emails).
All ingenious is simple. =3D)

This software provides me with access to all the controllers of your device=
s (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history =
to my servers.
I have access to all your messengers, social networks, emails, chat history=
 and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and he=
nce remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until =
this letter...

While gathering information about you, I have discovered that you are a big=
 fan of adult websites.
You really love visiting porn websites and watching exciting videos, while =
enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a=
 few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos=
 will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don't want that to happen, considering the specificity =
of the videos you like to watch, (you perfectly know what I mean) it will c=
ause a true catastrophe for you.

Let's settle it this way:
You transfer $1650 USD to me (in bitcoin equivalent according to the exchan=
ge rate at the moment of funds transfer), and once the transfer is received=
, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate an=
d delete all the harmful software from your devices. Trust me, I keep my wo=
rd.

This is a fair deal and the price is quite low, considering that I have bee=
n checking out your profile and traffic for some time by now.
In case, if you don't know how to purchase and transfer the bitcoins - you =
can use any modern search engine.

Here is my bitcoin wallet: 1LjGz2WcECaNpK1ajWcpsPEQFSxrw5DxMM

You have less than 48 hours from the moment you opened this email (precisel=
y 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated=
 the return address).
*Do not try to contact police and other security services. In addition, for=
get about telling this to you friends. If I discover that (as you can see, =
it is really not so hard, considering that I control all your systems) - yo=
ur video will be shared to public right away.=20
*Don't try to find me - it is absolutely pointless. All the cryptocurrency =
transactions are anonymous.
*Don't try to reinstall the OS on your devices or throw them away. It is po=
intless as well, since all the videos have already been saved at remote ser=
vers.

Things you don't need to worry about:
*That I won't be able to receive your funds transfer.
- Don't worry, I will see it right away, once you complete the transfer, si=
nce I continuously track all your activities (my trojan virus has got a rem=
ote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer=
.
- Trust me, I have no point to continue creating troubles in your life. If =
I really wanted that, I would do it long time ago!=20

Everything will be done in a fair manner!

One more thing... Don't get caught in similar kind of situations anymore in=
 future!
My advice - keep changing all your passwords on a frequent basis

--4e10ae38-14a7-4d49-b4b8-5eb1e954d925--