/home/smartonegroup/mail/.spam/new/1750443137.M816858P3893791.server11.hhost.eg,S=12563,W=12821
Return-Path: <ymppgh@poui.com>
Delivered-To: smartonegroup+spam@server11.hhost.eg
Received: from server11.hhost.eg
	by server11.hhost.eg with LMTP
	id aJxIMIGkVWgfajsAq0RAHw
	(envelope-from <ymppgh@poui.com>)
	for <smartonegroup+spam@server11.hhost.eg>; Fri, 20 Jun 2025 18:12:17 +0000
Return-path: <ymppgh@poui.com>
Envelope-to: geziel@smartonegroup.com
Delivery-date: Fri, 20 Jun 2025 18:12:17 +0000
Received: from 220-137-83-5.dynamic-ip.hinet.net ([220.137.83.5]:26702)
	by server11.hhost.eg with esmtp (Exim 4.98.2)
	(envelope-from <ymppgh@poui.com>)
	id 1uSgDf-0000000GNkI-3uA7
	for geziel@smartonegroup.com;
	Fri, 20 Jun 2025 18:12:17 +0000
From: "olly henry" <ymppgh@poui.com>
To: <geziel@smartonegroup.com>
Date: 21 Jun 2025 08:44:22 +0700
Message-ID: <001901dbe251$02819aff$24ced684$@poui.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0016_01DBE251.027DDDF9"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: Acm1b9ttsmlikfnxm1b9ttsmlikfnx==
Content-Language: en-us
X-Spam-Status: Yes, score=36.1
X-Spam-Score: 361
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server11.hhost.eg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Untitled Document.mdThe data from all your devices is copied
    to my servers. I hacked your system! This is your last warning! You are visiting
    adult resources. Now your family, colleagues and friends w [...] 
 Content analysis details:   (36.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: document.md]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: document.md]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?220.137.83.5>]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [220.137.83.5 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [220.137.83.5 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [220.137.83.5 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [220.137.83.5 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [220.137.83.5 listed in psbl.surriel.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 DATE_IN_FUTURE_06_12   Date: is 6 to 12 hours after Received: date
  4.7 GB_HASHBL_BTC          Message contains BTC address found on BTCBL
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  8.0 BTC_HASHBL_BLACK       Message contains BTC address found on BTC blocklist
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  8.5 KAM_CRIM               Extortion Email
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.0 PDS_BAD_THREAD_QP_64   Bad thread header - short QP
  1.0 BITCOIN_SPAM_09        BitCoin spam pattern 09
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                             2)
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  0.0 PDS_BTC_ID             FP reduced Bitcoin ID
  0.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  The data from all your devices is copied to my servers.

This is a multi-part message in MIME format.

------=_NextPart_000_0016_01DBE251.027DDDF9
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Untitled Document.mdThe data from all your devices is copied to my =
servers.
I hacked your system!
This is your last warning!
You are visiting adult resources.
Now your family, colleagues and friends will know about it.
All your gadgets are infected with the Trojan virus.
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.
I now have in front of me a video clip of the porn you were watching and =
your masturbation.
Your face is perfectly visible, everyone will recognize you.
I&#8217;m sure the video will destroy your reputation forever.
I plan to circulate the video to everyone you know.
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!
You can&#8217;t see when I connect to your camera.
You&#8217;re being monitored 24/7.
No antivirus will help you, no reinstalling the operating system or =
resetting your data.
Even if you change all your passwords and account information, I will =
know about it.
All the information is on my servers!
Don&#8217;t try to complain somewhere or share this letter.
It will end badly for you!
My address and my wallet are untraceable.
I will go straight to action and automatically start sending out the =
video and all of your information.
Writing back to me is useless. I don&#8217;t respond to emails.
As soon as you read the email, I get a notification. The timer has =
started.
You have 50 hours to make the payment. This is the only way to be safe!
Make a transfer of 1300$ USD to my wallet.
My bitcoin adress : 16kryN21kVXUcVFZBDLFtBrQcdNanFjF51
Detailed instructions are on Google.
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!
I&#8217;m sure we understand each other! Have a great day!

------=_NextPart_000_0016_01DBE251.027DDDF9
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09font-size:11.0pt;
=09font-family:"Calibri",sans-serif;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri",sans-serif;
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-family:"Calibri",sans-serif;}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US =
link=3D"#0563C1" vlink=3D"#954F72" style=3D'word-wrap:break-word'><div =
class=3DWordSection1><p class=3DMsoNormal><!DOCTYPE =
html><html><head><meta charset=3D"utf-8"><title>Untitled =
Document.md</title><style></style></head><body id=3D"preview">
<p class=3D"has-line-data" data-line-start=3D"0" data-line-end=3D"1">The =
data from all your devices is copied to my servers.</p>
<p class=3D"has-line-data" data-line-start=3D"2" data-line-end=3D"4">I =
hacked your system!<br>
This is your last warning!</p>
<p class=3D"has-line-data" data-line-start=3D"5" data-line-end=3D"7">You =
are visiting adult resources.<br>
Now your family, colleagues and friends will know about it.</p>
<p class=3D"has-line-data" data-line-start=3D"8" =
data-line-end=3D"10">All your gadgets are infected with the Trojan =
virus.<br>
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.</p>
<p class=3D"has-line-data" data-line-start=3D"11" data-line-end=3D"14">I =
now have in front of me a video clip of the porn you were watching and =
your masturbation.<br>
Your face is perfectly visible, everyone will recognize you.<br>
I&#8217;m sure the video will destroy your reputation forever.</p>
<p class=3D"has-line-data" data-line-start=3D"15" data-line-end=3D"17">I =
plan to circulate the video to everyone you know.<br>
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!</p>
<p class=3D"has-line-data" data-line-start=3D"18" =
data-line-end=3D"21">You can&#8217;t see when I connect to your =
camera.<br>
You&#8217;re being monitored 24/7.<br>
No antivirus will help you, no reinstalling the operating system or =
resetting your data.</p>
<p class=3D"has-line-data" data-line-start=3D"22" =
data-line-end=3D"24">Even if you change all your passwords and account =
information, I will know about it.<br>
All the information is on my servers!</p>
<p class=3D"has-line-data" data-line-start=3D"25" =
data-line-end=3D"28">Don&#8217;t try to complain somewhere or share this =
letter.<br>
It will end badly for you!<br>
My address and my wallet are untraceable.</p>
<p class=3D"has-line-data" data-line-start=3D"29" data-line-end=3D"32">I =
will go straight to action and automatically start sending out the video =
and all of your information.<br>
Writing back to me is useless. I don&#8217;t respond to emails.<br>
As soon as you read the email, I get a notification. The timer has =
started.</p>
<p class=3D"has-line-data" data-line-start=3D"33" =
data-line-end=3D"34">You have 50 hours to make the payment. This is the =
only way to be safe!</p>
<p class=3D"has-line-data" data-line-start=3D"35" =
data-line-end=3D"36">Make a transfer of 1300$ USD to my wallet.</p>
<p class=3D"has-line-data" data-line-start=3D"37" =
data-line-end=3D"38">My bitcoin adress : =
16kryN21kVXUcVFZBDLFtBrQcdNanFjF51</p>
<p class=3D"has-line-data" data-line-start=3D"39" =
data-line-end=3D"43">Detailed instructions are on Google.<br>
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!<br>
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!<br>
I&#8217;m sure we understand each other! Have a great day!</p>

</body></html><o:p></o:p></p></div></body></html>
------=_NextPart_000_0016_01DBE251.027DDDF9--