관리-도구

편집 파일: 1625149218.M887712P11036.server.saraya-global.com,S=19013,W=19401:2,

Envelope-to: edna@saraya.com.my
Delivery-date: Thu, 01 Jul 2021 22:20:18 +0800
Received-SPF: None (protection.outlook.com: mail.turnerusd202.org does not
 designate permitted sender hosts)
MIME-Version: 1.0
From: Microsoft Outlook
	<MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@turnerusd202.org>
To: <edna@saraya.com.my>
Date: Thu, 1 Jul 2021 09:18:58 -0500
Content-Type: multipart/report; report-type=delivery-status;
	boundary="4e9d65f0-f2ec-4a9e-9524-86cb375b3139"
Content-Language: en-US
Message-ID: <8d6c6f9c-de1d-4417-89f3-20458bbde54d@MAIL.turnerusd202.org>
In-Reply-To: <003101d76e94$02cf0d9a$1b53f380$@saraya.com.my>
References: <003101d76e94$02cf0d9a$1b53f380$@saraya.com.my>
Thread-Index: Ac12tjoidwsx55tg12tjoidwsq54mpPvm5zM
Auto-Submitted: auto-replied
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Jul 2021 14:19:20.1262
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 8fc5a528-4ad2-4def-83ca-08d93c9b37b8
X-MS-Exchange-CrossTenant-Id: 8d59bdd5-1145-4dfc-98e6-2b4372719704
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=8d59bdd5-1145-4dfc-98e6-2b4372719704;Ip=[216.21.169.177];Helo=[mail.turnerusd202.org]
X-MS-Exchange-CrossTenant-AuthSource: BN7NAM10FT004.eop-nam10.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR08MB4175
X-Spam-Status: Yes, score=18.4
X-Spam-Score: 184
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.saraya-global.com",
 has identified this incoming email as possible spam. The original
 message has been attached to this so you can view it or label
 similar future email. If you have any questions, see
 root\@localhost for details.
 Content preview: Delivery has failed to these recipients or groups: forbesk@turnerusd202.org<mailto:forbesk@turnerusd202.org>
 The email address you entered couldn't be found. Please check the recipient's
 email address and try to resend the message. If the problem cont [...] 
 Content analysis details: (18.4 points, 5.0 required)
 pts rule name description
 ---- ---------------------- --------------------------------------------------
 5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
 [score: 1.0000]
 1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
 [score: 1.0000]
 0.0 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence
 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
 blocked. See
 http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
 for more information.
 [URIs: turnerusd202.org]
 -0.0 SPF_HELO_PASS SPF: HELO matches SPF record
 1.5 KAM_MXURI URI: URI begins with a mail exchange prefix, i.e.
 mx.[...]
 0.0 HTML_MESSAGE BODY: HTML included in message
 -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
 author's domain
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
 valid
 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
 8.5 KAM_CRIM Extortion Email
 0.5 PDS_BTC_ID FP reduced Bitcoin ID
 0.0 MALWARE_NORDNS Malware bragging + no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Undeliverable: Payment from your account.

--4e9d65f0-f2ec-4a9e-9524-86cb375b3139
Content-Type: multipart/alternative; differences=Content-Type;
	boundary="0f9d509f-cfe8-4c4f-a240-7fc172e7a690"

--0f9d509f-cfe8-4c4f-a240-7fc172e7a690
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Delivery has failed to these recipients or groups:

forbesk@turnerusd202.org<mailto:forbesk@turnerusd202.org>
The email address you entered couldn't be found. Please check the recipient=
's email address and try to resend the message. If the problem continues, p=
lease contact your email admin.

Diagnostic information for administrators:

Generating server: MAIL.turnerusd202.org

forbesk@turnerusd202.org
Remote Server returned '550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipien=
t not found by SMTP address lookup'

Original message headers:

Received: from MAIL.turnerusd202.org (10.11.100.50) by MAIL.turnerusd202.or=
g
 (10.11.100.50) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Thu, 1 Jul =
2021
 09:18:57 -0500
Received: from [165.0.128.227] (165.0.128.227) by MAIL.turnerusd202.org
 (10.11.100.50) with Microsoft SMTP Server id 15.2.721.2 via Frontend
 Transport; Thu, 1 Jul 2021 09:18:57 -0500
From: <edna@saraya.com.my>
To: <forbesk@turnerusd202.org>
Subject: Payment from your account.
Date: Thu, 1 Jul 2021 17:14:21 +0100
Message-ID: <003101d76e94$02cf0d9a$1b53f380$@saraya.com.my>
MIME-Version: 1.0
Content-Type: text/plain; charset=3D"windows-1250"
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Outlook 15.0
Thread-Index: Ac12tjoidwsx55tg12tjoidwsq54mj=3D=3D
Content-Language: en-us
Return-Path: edna@saraya.com.my

--0f9d509f-cfe8-4c4f-a240-7fc172e7a690
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html>
<Head></head><body>
Delivery has failed=
 to these recipients or groups:
<a href=3D"mailto:for=
besk@turnerusd202.org">forbesk@turnerusd202.org</a> 

The email address you ent=
ered couldn't be found. Please check the recipient's email address and try =
to resend the message. If the problem continues, please contact your email =
admin. 

 


 
Diagnostic informa=
tion for administrators:
Generating server: MAIL.turnerusd202.org 

forbesk@turnerusd202.org 
Remote Server returned '550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipie=
nt not found by SMTP address lookup' 

Original message headers:
<pre>Received: from MAIL.turnerusd202.org (10.11.100.50) by MAIL.turnerusd2=
02.org
 (10.11.100.50) with Microsoft SMTP Server (version=3DTLS1_2,
 cipher=3DTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Thu, 1 Jul =
2021
 09:18:57 -0500
Received: from [165.0.128.227] (165.0.128.227) by MAIL.turnerusd202.org
 (10.11.100.50) with Microsoft SMTP Server id 15.2.721.2 via Frontend
 Transport; Thu, 1 Jul 2021 09:18:57 -0500
From: &lt;edna@saraya.com.my&gt;
To: &lt;forbesk@turnerusd202.org&gt;
Subject: Payment from your account.
Date: Thu, 1 Jul 2021 17:14:21 +0100
Message-ID: &lt;003101d76e94$02cf0d9a$1b53f380$@saraya.com.my&gt;
MIME-Version: 1.0
Content-Type: text/plain; charset=3D&quot;windows-1250&quot;
Content-Transfer-Encoding: 8bit
X-Mailer: Microsoft Outlook 15.0
Thread-Index: Ac12tjoidwsx55tg12tjoidwsq54mj=3D=3D
Content-Language: en-us
Return-Path: edna@saraya.com.my
</pre>

</body>
</html>=

--0f9d509f-cfe8-4c4f-a240-7fc172e7a690--

--4e9d65f0-f2ec-4a9e-9524-86cb375b3139
Content-Type: message/delivery-status

Reporting-MTA: dns;MAIL.turnerusd202.org
Received-From-MTA: dns;[165.0.128.227]
Arrival-Date: Thu, 1 Jul 2021 14:18:57 +0000

Final-Recipient: rfc822;forbesk@turnerusd202.org
Action: failed
Status: 5.1.10
Diagnostic-Code: smtp;550 5.1.10 RESOLVER.ADR.RecipientNotFound; Recipient not found by SMTP address lookup

--4e9d65f0-f2ec-4a9e-9524-86cb375b3139
Content-Type: message/rfc822

Received: from MAIL.turnerusd202.org (10.11.100.50) by MAIL.turnerusd202.org
 (10.11.100.50) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Thu, 1 Jul 2021
 09:18:57 -0500
Received: from [165.0.128.227] (165.0.128.227) by MAIL.turnerusd202.org
 (10.11.100.50) with Microsoft SMTP Server id 15.2.721.2 via Frontend
 Transport; Thu, 1 Jul 2021 09:18:57 -0500
From: <edna@saraya.com.my>
To: <forbesk@turnerusd202.org>
Subject: Payment from your account.
Date: Thu, 1 Jul 2021 17:14:21 +0100
Message-ID: <003101d76e94$02cf0d9a$1b53f380$@saraya.com.my>
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Outlook 15.0
Thread-Index: Ac12tjoidwsx55tg12tjoidwsq54mj==
Content-Language: en-us
Return-Path: edna@saraya.com.my

Greetings!

I have to share bad news with you.
Approximately few months ago I have gained access to your devices, which yo=
u use for internet browsing.
After that, I have started tracking your internet activities.

Here is the sequence of events:=20
Some time ago I have purchased access to email accounts from hackers (nowad=
ays, it is quite simple to purchase such thing online).
Obviously, I have easily managed to log in to your email account (forbesk@t=
urnerusd202.org).

One week later, I have already installed Trojan virus to Operating Systems =
of all the devices that you use to access your email.
In fact, it was not really hard at all (since you were following the links =
from your inbox emails).
All ingenious is simple. =3D)

This software provides me with access to all the controllers of your device=
s (e.g., your microphone, video camera and keyboard).
I have downloaded all your information, data, photos, web browsing history =
to my servers.
I have access to all your messengers, social networks, emails, chat history=
 and contacts list.
My virus continuously refreshes the signatures (it is driver-based), and he=
nce remains invisible for antivirus software.

Likewise, I guess by now you understand why I have stayed undetected until =
this letter...

While gathering information about you, I have discovered that you are a big=
 fan of adult websites.
You really love visiting porn websites and watching exciting videos, while =
enduring an enormous amount of pleasure.
Well, I have managed to record a number of your dirty scenes and montaged a=
 few videos, which show the way you masturbate and reach orgasms.

If you have doubts, I can make a few clicks of my mouse and all your videos=
 will be shared to your friends, colleagues and relatives.
I have also no issue at all to make them available for public access.
I guess, you really don't want that to happen, considering the specificity =
of the videos you like to watch, (you perfectly know what I mean) it will c=
ause a true catastrophe for you.

Let's settle it this way:
You transfer $1650 USD to me (in bitcoin equivalent according to the exchan=
ge rate at the moment of funds transfer), and once the transfer is received=
, I will delete all this dirty stuff right away.
After that we will forget about each other. I also promise to deactivate an=
d delete all the harmful software from your devices. Trust me, I keep my wo=
rd.

This is a fair deal and the price is quite low, considering that I have bee=
n checking out your profile and traffic for some time by now.
In case, if you don't know how to purchase and transfer the bitcoins - you =
can use any modern search engine.

Here is my bitcoin wallet: 12kieSEdCV4ikxdXXXC23ZsDcNmmKrRmwA

You have less than 48 hours from the moment you opened this email (precisel=
y 2 days).

Things you need to avoid from doing:
*Do not reply me (I have created this email inside your inbox and generated=
 the return address).
*Do not try to contact police and other security services. In addition, for=
get about telling this to you friends. If I discover that (as you can see, =
it is really not so hard, considering that I control all your systems) - yo=
ur video will be shared to public right away.=20
*Don't try to find me - it is absolutely pointless. All the cryptocurrency =
transactions are anonymous.
*Don't try to reinstall the OS on your devices or throw them away. It is po=
intless as well, since all the videos have already been saved at remote ser=
vers.

Things you don't need to worry about:
*That I won't be able to receive your funds transfer.
- Don't worry, I will see it right away, once you complete the transfer, si=
nce I continuously track all your activities (my trojan virus has got a rem=
ote-control feature, something like TeamViewer).
*That I will share your videos anyway after you complete the funds transfer=
.
- Trust me, I have no point to continue creating troubles in your life. If =
I really wanted that, I would do it long time ago!=20

Everything will be done in a fair manner!

One more thing... Don't get caught in similar kind of situations anymore in=
 future!
My advice - keep changing all your passwords on a frequent basis

--4e9d65f0-f2ec-4a9e-9524-86cb375b3139--