/home/smartonegroup/mail/.spam/new/1750448316.M233943P207732.server11.hhost.eg,S=10990,W=11208
Return-Path: <aqamok@werew.asdffmail.com>
Delivered-To: smartonegroup+spam@server11.hhost.eg
Received: from server11.hhost.eg
	by server11.hhost.eg with LMTP
	id YOyCDby4VWh0KwMAq0RAHw
	(envelope-from <aqamok@werew.asdffmail.com>)
	for <smartonegroup+spam@server11.hhost.eg>; Fri, 20 Jun 2025 19:38:36 +0000
Return-path: <aqamok@werew.asdffmail.com>
Envelope-to: marty@smartonegroup.com
Delivery-date: Fri, 20 Jun 2025 19:38:36 +0000
Received: from [190.113.188.186] (port=37538 helo=190-113-188-186.supercanal.com.ar)
	by server11.hhost.eg with esmtp (Exim 4.98.2)
	(envelope-from <aqamok@werew.asdffmail.com>)
	id 1uShZJ-00000000vTN-2FDE
	for marty@smartonegroup.com;
	Fri, 20 Jun 2025 19:38:36 +0000
Message-ID: <68558E5C.5050307@werew.asdffmail.com>
Date: Fri, 20 Jun 2025 12:37:48 -0400
From: "lewie jorge" <aqamok@werew.asdffmail.com>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1
MIME-Version: 1.0
To: <marty@smartonegroup.com>
Content-Type: multipart/alternative;
 boundary="------------090600040608010806020900"
X-Spam-Status: Yes, score=34.9
X-Spam-Score: 349
X-Spam-Bar: ++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server11.hhost.eg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Untitled Document.mdThe data from all your devices is copied
    to my servers. I hacked your system! This is your last warning! You are visiting
    adult resources. Now your family, colleagues and friends w [...] 
 Content analysis details:   (34.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: document.md]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: document.md]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [190.113.188.186 listed in zen.spamhaus.org]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <https://www.spamcop.net/bl.shtml?190.113.188.186>]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [190.113.188.186 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [190.113.188.186 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [190.113.188.186 listed in sa-accredit.habeas.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.1 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  4.7 GB_HASHBL_BTC          Message contains BTC address found on BTCBL
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  8.0 BTC_HASHBL_BLACK       Message contains BTC address found on BTC blocklist
                             [16kryn21kvxucvfzbdlftbrqcdnanfjf51]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                             2)
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  1.0 BITCOIN_SPAM_09        BitCoin spam pattern 09
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  8.5 KAM_CRIM               Extortion Email
  0.0 PDS_BTC_ID             FP reduced Bitcoin ID
  2.5 BITCOIN_SPAM_02        BitCoin spam pattern 02
  0.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  0.0 NO_FM_NAME_IP_HOSTN    No From name + hostname using IP address
X-Spam-Flag: YES
Subject:  ***SPAM***  The data from all your devices is copied to my servers.

This is a multi-part message in MIME format.
--------------090600040608010806020900
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

Untitled Document.mdThe data from all your devices is copied to my =
servers.
I hacked your system!
This is your last warning!
You are visiting adult resources.
Now your family, colleagues and friends will know about it.
All your gadgets are infected with the Trojan virus.
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.
I now have in front of me a video clip of the porn you were watching and =
your masturbation.
Your face is perfectly visible, everyone will recognize you.
I&#8217;m sure the video will destroy your reputation forever.
I plan to circulate the video to everyone you know.
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!
You can&#8217;t see when I connect to your camera.
You&#8217;re being monitored 24/7.
No antivirus will help you, no reinstalling the operating system or =
resetting your data.
Even if you change all your passwords and account information, I will =
know about it.
All the information is on my servers!
Don&#8217;t try to complain somewhere or share this letter.
It will end badly for you!
My address and my wallet are untraceable.
I will go straight to action and automatically start sending out the =
video and all of your information.
Writing back to me is useless. I don&#8217;t respond to emails.
As soon as you read the email, I get a notification. The timer has =
started.
You have 50 hours to make the payment. This is the only way to be safe!
Make a transfer of 1300$ USD to my wallet.
My bitcoin adress : 16kryN21kVXUcVFZBDLFtBrQcdNanFjF51
Detailed instructions are on Google.
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!
I&#8217;m sure we understand each other! Have a great day!

--------------090600040608010806020900
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; =
charset=3DISO-8859-1">
  </head>
  <body bgcolor=3D"#FFFFFF" text=3D"#000000">
    <!DOCTYPE html><html><head><meta charset=3D"utf-8"><title>Untitled =
Document.md</title><style></style></head><body id=3D"preview">
<p class=3D"has-line-data" data-line-start=3D"0" data-line-end=3D"1">The =
data from all your devices is copied to my servers.</p>
<p class=3D"has-line-data" data-line-start=3D"2" data-line-end=3D"4">I =
hacked your system!<br>
This is your last warning!</p>
<p class=3D"has-line-data" data-line-start=3D"5" data-line-end=3D"7">You =
are visiting adult resources.<br>
Now your family, colleagues and friends will know about it.</p>
<p class=3D"has-line-data" data-line-start=3D"8" =
data-line-end=3D"10">All your gadgets are infected with the Trojan =
virus.<br>
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.</p>
<p class=3D"has-line-data" data-line-start=3D"11" data-line-end=3D"14">I =
now have in front of me a video clip of the porn you were watching and =
your masturbation.<br>
Your face is perfectly visible, everyone will recognize you.<br>
I&#8217;m sure the video will destroy your reputation forever.</p>
<p class=3D"has-line-data" data-line-start=3D"15" data-line-end=3D"17">I =
plan to circulate the video to everyone you know.<br>
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!</p>
<p class=3D"has-line-data" data-line-start=3D"18" =
data-line-end=3D"21">You can&#8217;t see when I connect to your =
camera.<br>
You&#8217;re being monitored 24/7.<br>
No antivirus will help you, no reinstalling the operating system or =
resetting your data.</p>
<p class=3D"has-line-data" data-line-start=3D"22" =
data-line-end=3D"24">Even if you change all your passwords and account =
information, I will know about it.<br>
All the information is on my servers!</p>
<p class=3D"has-line-data" data-line-start=3D"25" =
data-line-end=3D"28">Don&#8217;t try to complain somewhere or share this =
letter.<br>
It will end badly for you!<br>
My address and my wallet are untraceable.</p>
<p class=3D"has-line-data" data-line-start=3D"29" data-line-end=3D"32">I =
will go straight to action and automatically start sending out the video =
and all of your information.<br>
Writing back to me is useless. I don&#8217;t respond to emails.<br>
As soon as you read the email, I get a notification. The timer has =
started.</p>
<p class=3D"has-line-data" data-line-start=3D"33" =
data-line-end=3D"34">You have 50 hours to make the payment. This is the =
only way to be safe!</p>
<p class=3D"has-line-data" data-line-start=3D"35" =
data-line-end=3D"36">Make a transfer of 1300$ USD to my wallet.</p>
<p class=3D"has-line-data" data-line-start=3D"37" =
data-line-end=3D"38">My bitcoin adress : =
16kryN21kVXUcVFZBDLFtBrQcdNanFjF51</p>
<p class=3D"has-line-data" data-line-start=3D"39" =
data-line-end=3D"43">Detailed instructions are on Google.<br>
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!<br>
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!<br>
I&#8217;m sure we understand each other! Have a great day!</p>

</body></html>
  </body>
</html>

--------------090600040608010806020900--
Path: home/smartonegroup/mail/.spam/new