from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <a.shahen@samnan.com.sa>)
	id 1hyE3y-000Jzi-Gw
	for dnsadmin@yoafrica.com; Thu, 15 Aug 2019 13:37:02 +0200

from [41.190.32.2] (port=12815 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hyE6G-0008Dh-Bf
	for dnsadmin@yoafrica.com; Thu, 15 Aug 2019 13:39:24 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id B7A2E77D314
	for <dnsadmin@yoafrica.com>; Thu, 15 Aug 2019 13:39:12 +0200 (CAT)

Yes, score=24.774 tagged_above=-999 required=5
	tests=[AV:Sanesecurity.Phishing.Fake.Coin.27586.UNOFFICIAL=5,
	ANTISPOOF_NAME=5, BAYES_50=0.8, BITCOIN_DEADLINE=3, L_AV_SS_Phish=5,
	PYZOR_CHECK=1.392, RCVD_IN_BL_SPAMCOP_NET=1.347,
	RCVD_IN_SBL_CSS=3.335, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
	ST_P0F_Linux=-0.1] autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id DD64077D2A2
	for <dnsadmin@yoafrica.com>; Thu, 15 Aug 2019 13:39:06 +0200 (CAT)

sengwe.yoafrica.com;
        spf=pass smtp.mailfrom=a.shahen@samnan.com.sa
          smtp.helo=smtp.samnan-co.com

pass
        (samnan.com.sa: 37.224.24.247 is authorized to use 'a.shahen@samnan.com.sa' in 'mfrom' identity (mechanism 'mx' matched))
        receiver=sengwe.yoafrica.com;
        identity=mailfrom;
        envelope-from="a.shahen@samnan.com.sa";
        helo=smtp.samnan-co.com;
        client-ip=37.224.24.247

delayed 899 seconds at sengwe.yoafrica.com, Thu, 15 Aug 2019 13:39:01 CAT

from smtp.samnan-co.com (smtp.samnan.com.sa [37.224.24.247])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id 5865777D2EA
	for <dnsadmin@yoafrica.com>; Thu, 15 Aug 2019 13:39:01 +0200 (CAT)

from [127.0.0.1] ([177.154.234.22]) by smtp.samnan-co.com with ESMTP id Kxcq2kUP2Uhm6MOc (version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NO) for <dnsadmin@yoafrica.com>; Thu, 15 Aug 2019 14:22:02 +0300 (+03)

	=?UTF-8?B?WyAqKiBTUEFNICoqIF1DYXV0aW9uISBIYWNrZXIgYXR0YWNrIG9uIHlvdXIg?=
	=?UTF-8?B?YWNjb3VudCE=?=

No, SCORE=6.50 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests=BSF_RULE_7582B, BSF_SC0_MV0922, NO_REAL_NAME

Code version 3.2, rules version 3.2.3.75315
	Rule breakdown below
	 pts rule name              description
	---- ---------------------- --------------------------------------------------
	0.00 NO_REAL_NAME           From: does not include a real name
	0.50 BSF_RULE_7582B         Custom Rule 7582B
	6.00 BSF_SC0_MV0922         Custom rule MV0922

Hello!

I am a hacker who has access to your operating system.
I also have full access to your account.

I've been watching you for a few months now.
The fact is that you were infected with malware through an adult site =
that you visited.

If you are not familiar with this, I will explain.
Trojan Virus gives me full access and control over a computer or other=
 device.
This means that I can see everything on your screen, turn on the camer=
a and microphone, but you do not know about it.

I also have access to all your contacts and all your correspondence.

Why your antivirus did not detect malware?
Answer: My malware uses the driver, I update its signatures every 4 ho=
urs so that your antivirus is silent.

I made a video showing how you satisfy yourself in the left half of th=
e screen, and in the right half you see the video that you watched.
With one click of the mouse, I can send this video to all your emails =
and contacts on social networks.
I can also post access to all your e-mail correspondence and messenger=
s that you use.

If you want to prevent this,
transfer the amount of $500 to my bitcoin address (if you do not know =
how to do this, write to Google: "Buy Bitcoin").

My bitcoin address (BTC Wallet) is:  35kSTw8xRozEnwvnBM1typ497ccjEcWpK=
i

After receiving the payment, I will delete the video and you will neve=
r hear me again.
I give you 50 hours (more than 2 days) to pay.
I have a notice reading this letter, and the timer will work when you =
see this letter.

Filing a complaint somewhere does not make sense because this email ca=
nnot be tracked like my bitcoin address.
I do not make any mistakes.

If I find that you have shared this message with someone else, the vid=
eo will be immediately distributed.

Best regards!