Received: from exim by stodi.digitalkingdom.org with local (Exim 4.92) id 1jFwQ3-0002fJ-54 for lojban@lojban.org; Sun, 22 Mar 2020 01:57:19 -0700 X-Failed-Recipients: noras@cox.net, rlechevalier@cox.net Auto-Submitted: auto-replied From: Mail Delivery System To: lojban@lojban.org Content-Type: multipart/report; report-type=delivery-status; boundary=1584867439-eximdsn-1625117115 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: Date: Sun, 22 Mar 2020 01:57:19 -0700 --1584867439-eximdsn-1625117115 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: noras@cox.net (generated from lojban@lojban.org) host cxr.mx.a.cloudfilter.net [52.73.137.222] SMTP error from remote mail server after MAIL FROM: SIZE=5990: 550 5.1.0 sender rejected. Refer to Error Codes section at https://www.cox.com/residential/support/email-error-codes.html for more information. AUP#CDRBL rlechevalier@cox.net (ultimately generated from lojban@lojban.org) host cxr.mx.a.cloudfilter.net [52.73.137.222] SMTP error from remote mail server after MAIL FROM: SIZE=5990: 550 5.1.0 sender rejected. Refer to Error Codes section at https://www.cox.com/residential/support/email-error-codes.html for more information. AUP#CDRBL --1584867439-eximdsn-1625117115 Content-type: message/delivery-status Reporting-MTA: dns; stodi.digitalkingdom.org Action: failed Final-Recipient: rfc822;rlechevalier@cox.net Status: 5.0.0 Remote-MTA: dns; cxr.mx.a.cloudfilter.net Diagnostic-Code: smtp; 550 5.1.0 sender rejected. Refer to Error Codes section at https://www.cox.com/residential/support/email-error-codes.html for more information. AUP#CDRBL Action: failed Final-Recipient: rfc822;noras@cox.net Status: 5.0.0 Remote-MTA: dns; cxr.mx.a.cloudfilter.net Diagnostic-Code: smtp; 550 5.1.0 sender rejected. Refer to Error Codes section at https://www.cox.com/residential/support/email-error-codes.html for more information. AUP#CDRBL --1584867439-eximdsn-1625117115 Content-type: message/rfc822 Return-path: Received: from 82-208-115-174.dynamic.mts-nn.ru ([82.208.115.174]:30563) by stodi.digitalkingdom.org with esmtp (Exim 4.92) (envelope-from ) id 1jFwPw-0002ed-7b for lojban@lojban.org; Sun, 22 Mar 2020 01:57:15 -0700 Received: from hcmatsg ([95.116.189.85]) by 18609.com with MailEnable ESMTP; Sun, 22 Mar 2020 11:57:12 +0300 Received: (qmail 19954 invoked by uid 199); 22 Mar 2020 11:57:10 +0300 From: lojban@lojban.org To: lojban@lojban.org Subject: I GOT EVERYTHING! Date: Sun, 22 Mar 2020 11:57:12 +0300 Message-ID: <199547.199547@18609.com> Mime-Version: 1.0 Content-type: text/plain; charset=utf-8; X-Spam-Flag: YES X-Spam-Score: 8.5 (++++++++) X-Spam_score: 8.5 X-Spam_score_int: 85 X-Spam_bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "stodi.digitalkingdom.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hey, check the sender of this email, I sent this email from your email account. Some time ago your computer was infected with my private malware, RAT (Remote Administration Tool), your browser wasn't updated / patched, so you got automatically infected while browsing the website [...] Content analysis details: (8.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: anycoindirect.eu] -0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5% [score: 0.0107] 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 CK_HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP) 0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or Generic rPTR 0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [82.208.115.174 listed in dnsbl.sorbs.net] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [82.208.115.174 listed in bl.score.senderscore.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 1.0 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 1.0 MONERO_EXTORT_01 Extortion spam, pay via Monero cryptocurrency Hey, check the sender of this email, I sent this email from your email account. Some time ago your computer was infected with my private malware, RAT (Remote Administration Tool), your browser wasn't updated / patched, so you got automatically infected while browsing the website wich had my iframe placed in the background. My malware gave me access to all your accounts, to all your files and it was possible to spy on you over your webcam. Google: Remote Administration Tool, to see the functions of it. I collected all your files and I recorded few nice moments of you through your webcam, haha! After I collected everything, I removed my malware again. I can publish all your files and the video of you on the whole web, send it to your contacts, social network, hacking forums and the darknet. You can stop me, send exactly 900$ with the cryptocurrency Monero (XMR) to my Monero (XMR) wallet. It's very easy to buy Monero (XMR), for example here: www.binance.com , www.anycoindirect.eu , www.bitnovo.com , or Google for another exchanger. My Monero (XMR) wallet is: 49RD2byfAXfGU4BaZ5mgaQTH8zKowp6V7e88pPkiS1d1iPrJG9RVptDNU1NcHrm5hdKMZzjp2npNzS2CYwy4HjUU3CV52oX Yes that's a long wallet, copy and paste it, it's (CaSE-SEnSetiVE). Send the Monero (XMR) directly to my wallet, or create your wallet first with the software from: www.mymonero.com and then send to mine. I give you 2 days time to send the Monero (XMR). After that I remove everything and we forget everything. Mail-Client-ID: 1995479105 --1584867439-eximdsn-1625117115--