OwlCyberSecurity - MANAGER

Edit File: 1744066422.M423227P3429778.server254.web-hosting.com,S=6542,W=6698:2,

Envelope-to: webmaster@sportspesatips.com
Delivery-date: Mon, 07 Apr 2025 18:53:42 -0400
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@server254.web-hosting.com>
To: webmaster@sportspesatips.com
References: <20250408015340.6B3F1B183F6B5F6E@thekheirs.com>
Content-Type: multipart/report; report-type=delivery-status; boundary=1744066422-eximdsn-1016440081
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1u1vLa-0000000EWor-0z5Z@server254.web-hosting.com>
Date: Mon, 07 Apr 2025 18:53:42 -0400

--1744066422-eximdsn-1016440081
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

ahmed@thekheirs.com
    Domain sportspesatips.com has exceeded the max emails per hour (63/50 (126%)) allowed.  Message discarded.

--1744066422-eximdsn-1016440081
Content-type: message/delivery-status

Reporting-MTA: dns; server254.web-hosting.com

Action: failed
Final-Recipient: rfc822;ahmed@thekheirs.com
Status: 5.0.0

--1744066422-eximdsn-1016440081
Content-type: message/rfc822

Return-path: <webmaster@sportspesatips.com>
Received: from [154.52.119.210] (port=55518)
	by server254.web-hosting.com with esmtpsa  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <webmaster@sportspesatips.com>)
	id 1u1vLZ-0000000EW8C-2Xfd
	for ahmed@thekheirs.com;
	Mon, 07 Apr 2025 18:53:41 -0400
Reply-To: ahmed@thekheirs.com
From: ahmed@thekheirs.com
To: ahmed@thekheirs.com
Subject: Hi, =?UTF-8?B?ZG9u4oCZdCBmb3JnZXQgdG8gcGF5IHlvdXIgZGVidCB0byBtZS4gIzc3MC0=?=721407
Date: 8 Apr 2025 01:53:40 +0300
Message-ID: <20250408015340.6B3F1B183F6B5F6E@thekheirs.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Greetings!

I have bad news for you. For the past few months, I have had access to the =
devices you use to browse the Internet. During that time, I have been track=
ing all your activity on the web.

Here=E2=80=99s how it happened: Some time ago, I purchased access to multip=
le email accounts from some hackers (these days, it=E2=80=99s quite easy to=
 buy such things online). That=E2=80=99s how I was able to easily access yo=
ur email account ahmed@thekheirs.com.

A week later, I had already installed a trojan on the operating systems of =
all the devices you use to access your email. In fact, it wasn=E2=80=99t di=
fficult at all (since you clicked on links from your inbox). As simple as i=
t is clever. =3D)

This software allows me to access all the drivers of your devices (for exam=
ple, the microphone, video camera, and keyboard). I have downloaded all you=
r information, data, photos, and web browsing history to my servers. I have=
 access to all your messengers, social networks, emails, chat histories, an=
d contact lists. My virus continuously updates its signatures (it=E2=80=99s=
 driver-based), which makes it invisible to antivirus programs.

By now, I assume you understand why I have remained undetected until this m=
essage=E2=80=A6

While gathering information about you, I discovered that you are a big fan =
of adult websites. You love visiting porn sites and watching exciting video=
s while pleasuring yourself. Well, I have managed to record several of your=
 dirty sessions and have put together a few videos of you masturbating and =
reaching orgasm.

If you don=E2=80=99t believe me, with just a few clicks, I can share all th=
e videos with your friends, colleagues, and family. I also have no problem =
making them public. I assume you wouldn=E2=80=99t want that to happen, cons=
idering the nature of the videos you like to watch (you know exactly what I=
 mean), as that would be a real disaster for you.

We can resolve this in the following way: You transfer $999 USD (the equiva=
lent in bitcoins at the exchange rate at the time of the transfer), and onc=
e I receive the transfer, I will immediately delete all your dirty content.=
 After that, we will forget about each other. I also commit to disabling an=
d removing all malicious software from your devices. Trust me, I will keep =
my word.

It=E2=80=99s a fair deal, and the price is quite low, especially considerin=
g that I have been monitoring your profile and traffic for a while now. If =
you don=E2=80=99t know how to buy and transfer bitcoins, you can find out t=
hrough any modern search engine.

This is my Bitcoin wallet: bc1qms44mfhzmvcmuxdapq4yshcgvf2gdt5j3u798p

You have less than 48 hours from the moment you opened this email (exactly =
2 days).

Things you should avoid doing:
Do not reply to this email (I created this email within your inbox and gene=
rated the sender=E2=80=99s address).

Do not try to contact the police or other security services. Also, do not t=
ell your friends. If I find out (as you can see, it=E2=80=99s really not th=
at difficult since I control all your systems), I will immediately make you=
r video public.

Do not try to track me down; it would be useless. All cryptocurrency transa=
ctions are anonymous.

Do not try to reinstall your operating system or get rid of your devices. T=
hat wouldn=E2=80=99t make sense either, as all the videos are stored on rem=
ote servers.

Things you don=E2=80=99t need to worry about:
That I won=E2=80=99t be able to receive your transfer.

Don=E2=80=99t worry, I will see it immediately once you complete the transf=
er, as I continuously monitor all your activities (my trojan has a remote c=
ontrol feature, similar to TeamViewer).

That I will share your videos even if you send the money.

Trust me, I have no interest in causing you more trouble. If that were my i=
ntention, I would have started a long time ago!

Everything will be done fairly!

One more thing=E2=80=A6 Make sure you don=E2=80=99t get caught in similar s=
ituations in the future. My advice: change all your passwords frequently!

--1744066422-eximdsn-1016440081--