Received: from mailnull by ld212.inmotionhosting.com with local (Exim 4.91) id 1h1rgA-000Gbb-MB for asad.khan@bfbio.com; Thu, 07 Mar 2019 03:59:14 -0800 X-Failed-Recipients: asadkhan747@yahoo.com Auto-Submitted: auto-replied From: Mail Delivery System To: asad.khan@bfbio.com Content-Type: multipart/report; report-type=delivery-status; boundary=1551959954-eximdsn-714009253 MIME-Version: 1.0 Subject: Mail delivery failed: returning message to sender Message-Id: Date: Thu, 07 Mar 2019 03:59:14 -0800 X-BoxTrapper-Match: errmsg: mailer/postmaster --1551959954-eximdsn-714009253 Content-type: text/plain; charset=us-ascii This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: asadkhan747@yahoo.com (ultimately generated from asad.khan@bfbio.com) host smtp.servconfig.com [23.235.198.62] SMTP error from remote mail server after end of data: 550 Message contained unsafe content (Sanesecurity.Phishing.Fake.Coin.27622) --1551959954-eximdsn-714009253 Content-type: message/delivery-status Reporting-MTA: dns; ld212.inmotionhosting.com Action: failed Final-Recipient: rfc822;asadkhan747@yahoo.com Status: 5.0.0 Remote-MTA: dns; smtp.servconfig.com Diagnostic-Code: smtp; 550 Message contained unsafe content (Sanesecurity.Phishing.Fake.Coin.27622) --1551959954-eximdsn-714009253 Content-type: message/rfc822 Return-path: Received: from [113.66.116.48] (port=23612) by ld212.inmotionhosting.com with esmtp (Exim 4.91) (envelope-from ) id 1h1rg3-000GVH-5A for asad.khan@bfbio.com; Thu, 07 Mar 2019 03:59:13 -0800 Message-ID: From: To: Date: 8 Mar 2019 02:34:02 +0700 MIME-Version: 1.0 Content-Type: text/plain; charset="ibm852" Content-Transfer-Encoding: 8bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5994 X-Spam-Status: Yes, score=26.8 X-Spam-Score: 268 X-Spam-Bar: ++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "ld212.inmotionhosting.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hi, your account has been infected! Renew the password this time! You do not know anything about me and you may be probably surprised for what reason you're reading this particular letter, proper? I'm hacker who exploitedyour emailand all devicesnot so long ago. Never try out to msg me or alternatively seek for me, it's impossible, because I forwarded you this message using YOUR hacked account. Content analysis details: (26.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100% [score: 1.0000] 1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100% [score: 1.0000] 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.9 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 3.5 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam (FTSDMCXX/boundary variant) + no rDNS 3.0 BITCOIN_SPAM_07 BitCoin spam pattern 07 2.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam (FTSDMCXX/boundary variant) + direct-to-MX 2.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX 2.3 TO_EQ_FM_DIRECT_MX To == From and direct-to-MX 2.5 DOS_OE_TO_MX Delivered direct to MX with OE headers X-Spam-Flag: YES Subject: ***SPAM*** Security Notice. Someone have access to your system. Hi, your account has been infected! Renew the password this time! You do not know anything about me and you may be probably surprised for what reason you're reading this particular letter, proper? I'm hacker who exploitedyour emailand all devicesnot so long ago. Never try out to msg me or alternatively seek for me, it's impossible, because I forwarded you this message using YOUR hacked account. I've installed special program on the adult videos (porno) site and guess that you visited this site to have fun (you understand what I mean). While you have been keeping an eye on video clips, your internet browser started out to act like a RDP (Remote Control) having a keylogger that provided me access to your screen and network camera. Then, my softobtainedall information. You have typed passcodes on the online resources you visited, I caught them. Surely, you are able change each of them, or have already modified them. However it doesn't matter, my program renews needed data regularly. What actually I have done? I generated a reserve copy of every your system. Of all the files and each contact. I formed a dual-screen videofile. The first part displays the film that you were watching (you have got an interesting preferences, ahahhh...), and the second screen displays the recording from your own camera. What exactly should you do? Clearly, I think, $754(USD) will be a fair price for our small riddle. You will make the deposit by bitcoins (if you do not understand this, go searching "how to purchase bitcoin" in any search engine). My bitcoin wallet address: 1PAcoXVyzBDRryyg3MAmBQhDuofNYu55Uo (It is cAsE sensitive, so copy and paste it). Important: You will have 2 days in order to make the payment. (I have an unique pixel in this letter, and at the moment I understand that you've read through this email). To tracethe reading of a messageand the actionsin it, I utilizea Facebook pixel. Thanks to them. (That whichis usedfor the authorities may helpus.) In case I fail to get bitcoins, I shall undoubtedly send your video files to each of your contacts, along with relatives, co-workers, etc? --1551959954-eximdsn-714009253--