Return-Path: <info@safaridigar.com>
Delivered-To: info@safaridigar.com
Received: from irpro1.dnswebhost.com
	by irpro1.dnswebhost.com with LMTP
	id YIWiDqcBvWM9sQAAi4Q1oQ
	(envelope-from <info@safaridigar.com>)
	for <info@safaridigar.com>; Tue, 10 Jan 2023 09:41:51 +0330
Return-path: <info@safaridigar.com>
Envelope-to: info@safaridigar.com
Delivery-date: Tue, 10 Jan 2023 09:41:51 +0330
Received: from [203.130.19.210] (port=13789 helo=super19-line-210.super.net.pk)
	by irpro1.dnswebhost.com with esmtp (Exim 4.95)
	(envelope-from <info@safaridigar.com>)
	id 1pF7rJ-000Cvc-Ek
	for info@safaridigar.com;
	Tue, 10 Jan 2023 09:41:51 +0330
From: <info@safaridigar.com>
To: <info@safaridigar.com>
Date: 10 Jan 2023 14:57:59 +0400
Message-ID: <003901d924e4$0396fb71$d836189e$@safaridigar.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0036_01D924E4.0392A3FF"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Achnygpp12ooab4yhnygpp12ooab4y==
Content-Language: en
x-cr-hashedpuzzle: 2D4= ygpp 12oo ab4y hnyg pp12 ooab 4yhn ygpp 12oo ab4y hnyg pp12 ooab 4yhn ygpp;1;12ooab4yhnygpp12ooab4yhnygpp12ooab4yhnygpp12ooab;Sosha1_v1;7;\{25EB8D65-3243-03DA-1472-9ACDBCFC25EB\};ZQB3AGUAZgygpp12ooab4yhnygpp12ooab4yhnygpp12ooab;10 Jan 2023 14:57:59 +0400;4yhnygpp12ooab4y
x-cr-puzzleid: \{25EB8D65-3243-03DA-1472-9ACDBCFC25EB\}
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "irpro1.dnswebhost.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings! I am a professional hacker and you were under my
    observation for quite some time now.Nowadays, it is not really hard to organize,
    mostly for IT enthusiast like me. You may be wondering, how [...] 
 Content analysis details:   (17.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: life.in]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [203.130.19.210 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [203.130.19.210 listed in psbl.surriel.com]
  2.4 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.7 BITCOIN_MALF_HTML      Bitcoin + malformed HTML
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 RATWARE_NO_RDNS        Suspicious MsgID and MIME boundary + no rDNS
  0.1 PDS_BTC_ID             FP reduced Bitcoin ID
  1.0 TO_EQ_FM_DIRECT_MX     To == From and direct-to-MX
  1.0 BITCOIN_SPAM_07        BitCoin spam pattern 07
  0.2 BITCOIN_DEADLINE       BitCoin with a deadline
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  1.0 BITCOIN_MALWARE        BitCoin + malware bragging
  1.0 MALWARE_NORDNS         Malware bragging + no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Leaked uncensored photos from your device are about to be shared to public.

This is a multi-part message in MIME format.

------=_NextPart_000_0036_01D924E4.0392A3FF
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable

Greetings! I am a professional hacker and you were under my observation =
for quite some time now.Nowadays, it is not really hard to organize, =
mostly for IT enthusiast like me. You may be wondering, how did I manage =
to spy on you? Well, there are plenty of harmful websites out there and =
it turns out that you like to visit them during your free time. As =
result, my spyware has downloaded to your device. This spyware detects =
all image-format files on iOS devices (HEIF, HEVC or JPEG) as well as =
Android (JPEG, JPG or HEIC) devices.The most interesting part is that =
whenever you connect to WIFI or to mobile network (3G/4G+/H+/LTE), all =
your photos get quietly synchronized in silent mode to my own cloud =
storage. I have collected sufficient content in order to share to public =
your undisguised photos in social networks, like Instagram or Facebook =
in a form of new posts or news, or via personal messages of WhatsApp =
Viber, Telegram etc. Hence, even if you delete those photos from your =
device, I still have got a copy of them in my cloud, so you won&#8217;t =
be able to delete them as well.In order to avoid &#128293; YOUR =
UNCENSORED HOT NEWS &#128293; being shared to your contacts, I can =
suggest a fair deal to you. This deal is valid within 72 hours. Based on =
this deal, you need to transfer 1000 USD (in Bitcoin equivalent) to my =
bitcoin wallet and after that I will completely disappear from your =
life.In event that you are still unaware about how to complete bitcoin =
funds transfer, you can easily solve this issue by Googling "Buy Bitcoin =
with Credit Card or Debit Card" or something similar. Besides that, =
there are plenty of P2P services that can transfer the required Bitcoin =
amount to my wallet in exchange for funds transfer from your bank card =
(Visa, MasterCard or Maestro).Here is my Bitcoin address: =
18bSTrufLfuvHwS7JYuF626MBGULSmxTgR I really want to settle this =
situation in a peaceful manner and I believe you want that too. Nothing =
personal, it is simply my job. Make sure you use valid Antivirus =
software and stay away from unwanted websites.Take care of yourself.
------=_NextPart_000_0036_01D924E4.0392A3FF
Content-Type: text/html;
	charset="iso-8859-2"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:blue;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:purple;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>Greetings! =
</br>
</br>
I am a professional hacker and you were under my observation for quite =
some time now.</br>
Nowadays, it is not really hard to organize, mostly for IT enthusiast =
like me. </br>
</br>
You may be wondering, how did I manage to spy on you? </br>
Well, there are plenty of harmful websites out there and it turns out =
that you like to visit them during your free time. </br>
As result, my spyware has downloaded to your device. This spyware =
detects all image-format files on iOS devices (HEIF, HEVC or JPEG) as =
well as Android (JPEG, JPG or HEIC) devices.</br>
</br>
The most interesting part is that whenever you connect to WIFI or to =
mobile network (3G/4G+/H+/LTE), </br>
all your photos get quietly synchronized in silent mode to my own cloud =
storage. </br>
</br>
I have collected sufficient content in order to share to public your =
undisguised photos in social networks, </br>
like Instagram or Facebook in a form of new posts or news, or via =
personal messages of WhatsApp Viber, Telegram etc. </br>
</br>
Hence, even if you delete those photos from your device, I still have =
got a copy of them in my cloud, so you won&#8217;t be able to delete =
them as well.</br>
</br>
In order to avoid &#128293; YOUR UNCENSORED HOT NEWS &#128293; being =
shared to your contacts, </br>
I can suggest a fair deal to you. This deal is valid within 72 hours. =
</br>
</br>
Based on this deal, you need to transfer 1000 USD (in Bitcoin =
equivalent) to my bitcoin wallet and after that I will completely =
disappear from your life.</br>
</br>
In event that you are still unaware about how to complete bitcoin funds =
transfer, </br>
you can easily solve this issue by Googling "Buy Bitcoin with Credit =
Card or Debit Card" or something similar. </br>
</br>
Besides that, there are plenty of P2P services that can transfer the =
required Bitcoin amount to my wallet in exchange for funds transfer from =
your bank card (Visa, MasterCard or Maestro).</br>
</br>
Here is my Bitcoin address: 18bSTrufLfuvHwS7JYuF626MBGULSmxTgR </br>
</br>
I really want to settle this situation in a peaceful manner and I =
believe you want that too. </br>
</br>
Nothing personal, it is simply my job. </br>
Make sure you use valid Antivirus software and stay away from unwanted =
websites.</br>
Take care of yourself.<o:p></o:p></p></div></body></html>
------=_NextPart_000_0036_01D924E4.0392A3FF--


