MOON
Server: Apache
System: Linux server.royaltuning.hu 4.18.0-425.13.1.el8_7.x86_64 #1 SMP Tue Feb 21 04:20:52 EST 2023 x86_64
User: royaltuning (1001)
PHP: 8.2.30
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/royaltuning/mail/.spam/new/1722980811.M300953P2892448.server.royaltuning.hu,S=11133,W=11371
Return-Path: <tstag@bellsouth.net>
Delivered-To: royaltuning+spam@server.royaltuning.hu
Received: from server.royaltuning.hu
	by server.royaltuning.hu with LMTP
	id IkbXEcuZsmagIiwAs5Hlmw
	(envelope-from <tstag@bellsouth.net>)
	for <royaltuning+spam@server.royaltuning.hu>; Tue, 06 Aug 2024 23:46:51 +0200
Return-path: <tstag@bellsouth.net>
Envelope-to: no-reply@royaltuning.hu
Delivery-date: Tue, 06 Aug 2024 23:46:51 +0200
Received: from [105.154.60.93] (port=23799)
	by server.royaltuning.hu with esmtp (Exim 4.97.1)
	(envelope-from <tstag@bellsouth.net>)
	id 1sbS12-0000000C8S4-0aOg
	for no-reply@royaltuning.hu;
	Tue, 06 Aug 2024 23:46:51 +0200
From: "bartlett darryl" <tstag@bellsouth.net>
To: <no-reply@royaltuning.hu>
Date: 6 Aug 2024 22:26:57 +0000
Message-ID: <004301dae852$06a9c2a5$68a315aa$@bellsouth.net>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0040_01DAE852.06A776E4"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: Acx2iu209fdgk59ix2iu209fdgk59i==
Content-Language: en
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.royaltuning.hu",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Nemr&eacute;g az &Ouml;n eszk&ouml;ze megfert&#337;z&#337;d&ouml;tt
    a saj&aacute;t tr&oacute;jai v&iacute;rusommal, az R.A.T.-vel (Remote Administration
    Tool), ha t&ouml;bbet szeretne megtudni r&oacut [...] 
 Content analysis details:   (17.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: cex.io]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [105.154.60.93 listed in zen.spamhaus.org]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [105.154.60.93 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [105.154.60.93 listed in sa-trusted.bondedsender.org]
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [tstag[at]bellsouth.net]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 RATWARE_NO_RDNS        Suspicious MsgID and MIME boundary + no rDNS
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 BITCOIN_SPAM_03        BitCoin spam pattern 03
  0.0 KAM_SHORT              Use of a URL Shortener for very short URL
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 PDS_BTC_ID             FP reduced Bitcoin ID
  0.0 PDS_BAD_THREAD_QP_64   Bad thread header - short QP
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.4 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  0.0 SPOOFED_FREEMAIL       No description available.
  2.4 BITCOIN_SPAM_05        BitCoin spam pattern 05
X-Spam-Flag: YES
Subject:  ***SPAM***  Re:

This is a multi-part message in MIME format.

------=_NextPart_000_0040_01DAE852.06A776E4
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Nemr&eacute;g az &Ouml;n eszk&ouml;ze megfert&#337;z&#337;d&ouml;tt a =
saj&aacute;t tr&oacute;jai v&iacute;rusommal, az R.A.T.-vel (Remote =
Administration Tool), ha t&ouml;bbet szeretne megtudni r&oacute;la, =
egyszer&#369;en haszn&aacute;lja a Google-t.
A tr&oacute;jai lehet&#337;v&eacute; tette sz&aacute;momra, hogy =
hozz&aacute;f&eacute;rjek a f&aacute;jljaidhoz, fi&oacute;kjaidhoz =
&eacute;s a kamer&aacute;dhoz.

Igaz&aacute;n &eacute;lvezed a porn&oacute;oldalak =
megtekint&eacute;s&eacute;t &eacute;s a mocskos vide&oacute;k =
megtekint&eacute;s&eacute;t, mik&ouml;zben nagyon perverz m&oacute;don =
sz&oacute;rakozol.
FELVETTEM T&Eacute;GED (a k&eacute;sz&uuml;l&eacute;ked =
kamer&aacute;j&aacute;n kereszt&uuml;l), amint kiel&eacute;g&iacute;ted =
magad!
Ezut&aacute;n elt&aacute;vol&iacute;tottam a rosszindulat&uacute; =
szoftvereket, hogy ne hagyjak nyomokat.

Ha m&eacute;g mindig k&eacute;telkedsz a komoly =
sz&aacute;nd&eacute;kaimban, csak n&eacute;h&aacute;ny =
eg&eacute;rkattint&aacute;s kell ahhoz, hogy a r&oacute;lad =
k&eacute;sz&uuml;lt vide&oacute;t megoszd bar&aacute;taiddal, =
rokonaiddal, az &ouml;sszes e-mail kapcsolatoddal, a =
k&ouml;z&ouml;ss&eacute;gi h&aacute;l&oacute;zatokon &eacute;s a =
darknetben.
Mind&ouml;ssze 1300 USD Bitcoin (BTC) &aacute;tutal&aacute;sra van =
sz&uuml;ks&eacute;ged a sz&aacute;ml&aacute;mra.
A sikeres tranzakci&oacute;t k&ouml;vet&#337;en mindent =
t&ouml;rl&ouml;k.
Legyen biztos benne, hogy betartom az &iacute;g&eacute;reteimet.
Itt k&ouml;nnyen v&aacute;s&aacute;rolhat Bitcoin-t (BTC):

https://cex.io/buy-bitcoins
https://nexo.com/buy-crypto/bitcoin-btc
https://bitpay.com/buy-bitcoin/?crypto=3DBTC
https://paybis.com/
https://invity.io/buy-crypto

Vagy egyszer&#369;en csak google m&aacute;s cser&eacute;l&#337;.
Ezut&aacute;n k&uuml;ldje a Bitcoin (BTC) k&ouml;zvetlen&uuml;l a =
t&aacute;rc&aacute;mba, vagy telep&iacute;tse az ingyenes szoftvert: =
Atomicwallet, vagy: Exodus p&eacute;nzt&aacute;rca, majd fogadja =
&eacute;s k&uuml;ldje el az eny&eacute;mnek.
Az &eacute;n Bitcoin (BTC) c&iacute;mem a k&ouml;vetkez&#337;: =
1EXyCD7A3rr7braW35UuvVDjsgSqtHqXQ

Igen, &iacute;gy n&eacute;z ki a c&iacute;m, m&aacute;sold ki &eacute;s =
illeszd be a c&iacute;memet, ez (cAsE-sEnSEtiVE).
&Ouml;n legfeljebb 3 napot kap, miut&aacute;n megnyitotta ezt az =
e-mailt.

------=_NextPart_000_0040_01DAE852.06A776E4
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:blue;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:purple;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-family:"Calibri","sans-serif";}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal><p>Nemr&eacute;g az &Ouml;n eszk&ouml;ze =
megfert&#337;z&#337;d&ouml;tt a saj&aacute;t tr&oacute;jai =
v&iacute;rusommal, az R.A.T.-vel (Remote Administration Tool), ha =
t&ouml;bbet szeretne megtudni r&oacute;la, egyszer&#369;en =
haszn&aacute;lja a Google-t.<br />A tr&oacute;jai lehet&#337;v&eacute; =
tette sz&aacute;momra, hogy hozz&aacute;f&eacute;rjek a =
f&aacute;jljaidhoz, fi&oacute;kjaidhoz &eacute;s a =
kamer&aacute;dhoz.</p>
<p><br />Igaz&aacute;n &eacute;lvezed a porn&oacute;oldalak =
megtekint&eacute;s&eacute;t &eacute;s a mocskos vide&oacute;k =
megtekint&eacute;s&eacute;t, mik&ouml;zben nagyon perverz m&oacute;don =
sz&oacute;rakozol.<br />FELVETTEM T&Eacute;GED (a =
k&eacute;sz&uuml;l&eacute;ked kamer&aacute;j&aacute;n kereszt&uuml;l), =
amint kiel&eacute;g&iacute;ted magad!</p>
<p>Ezut&aacute;n elt&aacute;vol&iacute;tottam a rosszindulat&uacute; =
szoftvereket, hogy ne hagyjak nyomokat.</p>
<p><br />Ha m&eacute;g mindig k&eacute;telkedsz a komoly =
sz&aacute;nd&eacute;kaimban, csak n&eacute;h&aacute;ny =
eg&eacute;rkattint&aacute;s kell ahhoz, hogy a r&oacute;lad =
k&eacute;sz&uuml;lt vide&oacute;t megoszd bar&aacute;taiddal, =
rokonaiddal, az &ouml;sszes e-mail kapcsolatoddal, a =
k&ouml;z&ouml;ss&eacute;gi h&aacute;l&oacute;zatokon &eacute;s a =
darknetben.<br />Mind&ouml;ssze 1300 USD Bitcoin (BTC) =
&aacute;tutal&aacute;sra van sz&uuml;ks&eacute;ged a =
sz&aacute;ml&aacute;mra.</p>
<p>A sikeres tranzakci&oacute;t k&ouml;vet&#337;en mindent =
t&ouml;rl&ouml;k.</p>
<p>Legyen biztos benne, hogy betartom az &iacute;g&eacute;reteimet.<br =
/>Itt k&ouml;nnyen v&aacute;s&aacute;rolhat Bitcoin-t (BTC):</p>
<p><br />https://cex.io/buy-bitcoins</p>
<p>https://nexo.com/buy-crypto/bitcoin-btc</p>
<p>https://bitpay.com/buy-bitcoin/?crypto=3DBTC</p>
<p>https://paybis.com/</p>
<p>https://invity.io/buy-crypto</p>
<p><br />Vagy egyszer&#369;en csak google m&aacute;s =
cser&eacute;l&#337;.</p>
<p>Ezut&aacute;n k&uuml;ldje a Bitcoin (BTC) k&ouml;zvetlen&uuml;l a =
t&aacute;rc&aacute;mba, vagy telep&iacute;tse az ingyenes szoftvert: =
Atomicwallet, vagy: Exodus p&eacute;nzt&aacute;rca, majd fogadja =
&eacute;s k&uuml;ldje el az eny&eacute;mnek.<br />Az &eacute;n Bitcoin =
(BTC) c&iacute;mem a k&ouml;vetkez&#337;: =
1EXyCD7A3rr7braW35UuvVDjsgSqtHqXQ</p>
<p><br />Igen, &iacute;gy n&eacute;z ki a c&iacute;m, m&aacute;sold ki =
&eacute;s illeszd be a c&iacute;memet, ez (cAsE-sEnSEtiVE).<br />&Ouml;n =
legfeljebb 3 napot kap, miut&aacute;n megnyitotta ezt az =
e-mailt.</p><o:p></o:p></p></div></body></html>
------=_NextPart_000_0040_01DAE852.06A776E4--