Return-path: <> Envelope-to: lojban@lojban.org Delivery-date: Thu, 26 Jan 2023 10:06:13 -0800 Received: from [192.168.123.254] (port=41458 helo=stodi.digitalkingdom.org) by d7893716a6e6 with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.94.2) id 1pL6dV-001ATQ-M4 for lojban@lojban.org; Thu, 26 Jan 2023 10:06:11 -0800 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=digitalkingdom.org; s=202111010720; h=Date:Message-Id:Subject:MIME-Version: Content-Type:References:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=5qnReM0z067boas7UgnDZdI+86FV1xtRNn2U9qNh5eg=; b=IRqzldgxRZSQy5khMrTc85MFdE Jq5ZAlUJzYUHaNeBbcIOyhRjbNQ6zRUjlQIv6LSr0rxznPTP2jj+0ftUsxZTN2zKwZbFFnNCqZ6UY eyzjE5y4NmlhKl9lra3bUMkiCb5qf9IFrNyTLOqIE9jkmqAp1O8z5AbdyWtId8OkeoWG68VUGRBJv rbc31UYwg5o4eEvAb0HdtbKU4mYeu7heI5SiHvfVAqHj8FBJH0Qj6r0csRFOGfDoo4b5Q1OF+Jas9 mHaZdS3knVNEn1nvQdgDnyjtI0xSOYOwrEwckb5yNyJqineeOAbaS19WGl2VgTyqHsdQr8PL1IEzl oBL9b4AQ==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=evolutionlab.org; s=202111010720; h=Date:Message-Id:Subject:MIME-Version: Content-Type:References:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=5qnReM0z067boas7UgnDZdI+86FV1xtRNn2U9qNh5eg=; b=nF+yUfs2w5PDIzQPp0zFmyJbfS cYzkIPlJQHTpHCqGc7WJrFnvT2KxycKXhaXJegG76JSgHpVZJuUeOVnHpeflZXThKODlLqAdAYUmU s++mpWuKmKTQVC316QMOKoP+dhRDLSCEuoYBFT+wvfLKkC/Rq5od2U/53k+zEs4IdJIa635O3cWkU FruqqEPGAxi+0o29SsGfhj0lK0jaiJqcTtMsuc6pYZtrpYnLJD1mALQfX0/lA1SFre44CZlw+qjkK Z5mLnDS2LwdxJeTCpMwW6LxS50lEanr+UKed2OEWA5Nbykenr19HW4RXqNxy+jt64iOkVVXR3O9gT WAtVc+sA==; Received: from exim by stodi.digitalkingdom.org with local (Exim 4.95) id 1pL6dV-006bd7-AT for request@digitalkingdom.org; Thu, 26 Jan 2023 10:06:09 -0800 X-Failed-Recipients: lojban@lojban.org Auto-Submitted: auto-replied From: Mail Delivery System To: request@digitalkingdom.org References: <004601d9317c$07edb427$ea9e71a4@iokdu> Content-Type: multipart/report; report-type=delivery-status; boundary=1674756369-eximdsn-1754713528 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: Date: Thu, 26 Jan 2023 10:06:09 -0800 X-Spam-Score: 1.3 (+) X-Spam_score: 1.3 X-Spam_score_int: 13 X-Spam_bar: + X-Spam-Report: Spam detection software, running on the system "f6db9eef8881", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: Content analysis details: (1.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: digitalkingdom.org] 0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: digitalkingdom.org] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 1.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.5 PDS_BTC_ID FP reduced Bitcoin ID --1674756369-eximdsn-1754713528 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: lojban@lojban.org (generated from request@digitalkingdom.org) host jukni.lojban.org [50.250.232.18] SMTP error from remote mail server after end of data: 550-Your message scored 17.1 SpamAssassin point. Report follows: 550-Spam detection software, running on the system "f6db9eef8881", 550-has identified this incoming email as possible spam. The original 550-message has been attached to this so you can view it or label 550-similar future email. If you have any questions, see 550-@@CONTACT_ADDRESS@@ for details. 550-Content preview: Hello! Have you recently noticed that I have e-mailed 550-you 550-from your account? Yes, this simply means that I have total access to 550-your 550-device. For the last couple of months, I have been watching you. Still 550-wondering 550-how is that possible? Well, you have been infected with malware 550-originating 550-from an adult website that you visited. You may not [...] 550-Content analysis details: (17.1 points, 5.0 required) 550-pts rule name description 550----- ---------------------- -------------------------------------------------- --1674756369-eximdsn-1754713528 Content-type: message/delivery-status Reporting-MTA: dns; stodi.digitalkingdom.org Action: failed Final-Recipient: rfc822;request@digitalkingdom.org Status: 5.0.0 Remote-MTA: dns; jukni.lojban.org Diagnostic-Code: smtp; 550-Your message scored 17.1 SpamAssassin point. Report follows: 550-Spam detection software, running on the system "f6db9eef8881", 550-has identified this incoming email as possible spam. The original 550-message has been attached to this so you can view it or label 550-similar future email. If you have any questions, see 550-@@CONTACT_ADDRESS@@ for details. 550-Content preview: Hello! Have you recently noticed that I have e-mailed 550-you 550-from your account? Yes, this simply means that I have total access to 550-your 550-device. For the last couple of months, I have been watching you. Still 550-wondering 550-how is that possible? Well, you have been infected with malware 550-originating 550-from an adult website that you visited. You may not [...] 550-Content analysis details: (17.1 points, 5.0 required) 550-pts rule name description 550----- ---------------------- ----------[truncated] --1674756369-eximdsn-1754713528 Content-type: message/rfc822 Return-path: Received: from [191.95.172.111] (port=25291 helo=Dinamic-Tigo-191-95-172-111.tigo.com.co) by stodi.digitalkingdom.org with esmtp (Exim 4.95) (envelope-from ) id 1pL5Tw-006MyT-Oz for request@digitalkingdom.org; Thu, 26 Jan 2023 08:52:15 -0800 Message-ID: <004601d9317c$07edb427$ea9e71a4@iokdu> From: To: Subject: Don't forget to pay the tax within 2 days! Date: 26 Jan 2023 05:40:10 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.4275 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.4275 X-Spam-Flag: YES X-Spam-Score: 18.1 (++++++++++++++++++) X-Spam_score: 18.1 X-Spam_score_int: 181 X-Spam_bar: ++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "stodi.digitalkingdom.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hello! Have you recently noticed that I have e-mailed you from your account? Yes, this simply means that I have total access to your device. For the last couple of months, I have been watching you. Still wondering how is that possible? Well, you have been infected with malware originating from an adult website that you visited. You may not [...] Content analysis details: (18.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3320] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [191.95.172.111 listed in zen.spamhaus.org] 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [191.95.172.111 listed in bl.score.senderscore.com] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [191.95.172.111 listed in psbl.surriel.com] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 1.6 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 0.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=request%40digitalkingdom.org;ip=191.95.172.111;r=stodi.digitalkingdom.org] 0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 BITCOIN_XPRIO Bitcoin + priority 0.0 PDS_BTC_ID FP reduced Bitcoin ID 2.0 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1) 0.0 PDS_BTC_MSGID Bitcoin ID with T_MSGID_NOFQDN2 1.9 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin 0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 1.0 BITCOIN_SPAM_07 BitCoin spam pattern 07 1.0 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers 0.0 TO_EQ_FM_SPF_FAIL To == From and external SPF failed 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 0.0 XPRIO Has X-Priority header 0.0 NO_FM_NAME_IP_HOSTN No From name + hostname using IP address Hello! Have you recently noticed that I have e-mailed you from your account? Yes, this simply means that I have total access to your device. For the last couple of months, I have been watching you. Still wondering how is that possible? Well, you have been infected with malware originating from an adult website that you visited. You may not be familiar with this, but I will try explaining it to you. With help of the Trojan Virus, I have complete access to a PC or any other device. This simply means I can see you at any time I wish to on your screen by simply turning on your camera and microphone, without you even noticing it. In addition, I have also got access to your contacts list and all your correspondence. You may be asking yourself, "But my PC has an active antivirus, how is this even possible? Why didn't I receive any notification?" Well, the answer is simple: my malware uses drivers, where I update the signatures every four hours, making it undetectable, and hence keeping your antivirus silent. I have a video of you wanking on the left screen, and on the right screen - the video you were watching while masturbating. Wondering how bad could this get? With just a single click of my mouse, this video can be sent to all your social networks, and e-mail contacts. I can also share access to all your e-mail correspondence and messengers that you use. All you have to do to prevent this from happening is - transfer bitcoins worth $950 (USD) to my Bitcoin address (if you have no idea how to do this, you can open your browser and simply search: "Buy Bitcoin"). My bitcoin address (BTC Wallet) is: 15WXLWo8mH79dJiUiHJ7UMgrpXD33ky9XU After receiving a confirmation of your payment, I will delete the video right away, and that's it, you will never hear from me again. You have 2 days (48 hours) to complete this transaction. Once you open this e-mail, I will receive a notification, and my timer will start ticking. Any attempt to file a complaint will not result in anything, since this e-mail cannot be traced back, same as my bitcoin id. I have been working on this for a very long time by now; I do not give any chance for a mistake. If, by any chance I find out that you have shared this message with anybody else, I will broadcast your video as mentioned above. --1674756369-eximdsn-1754713528--