ARC-Seal: i=1; cv=none; a=rsa-sha256; d=xicotepecpuebla.gob.mx;
 s=default; t=1738304267;
 b=LzZrRAJ8nvVrP1ud8iUPVXEhQPZOlEougptarOz41UidfT87dAi0jI0OlykQiScT63QmS
 z7iQz6L34xHrdGZ+4Ov9GdqblkdhbY7CASCOHKlOlOTVZcmuKj4jmxIlUIXrm/viudgWP2B
 F5L8RaitUMKD39JFj3fV2JyS/7zkQr4O+KFeOy+GdH48m/LajJPyKX+zJfIFPLvrIOy+Oj9
 LxOJ5GKMnSFvK5D6ctrAvTm1r2lNCqjg2htHKmCEq4G6x7v5FhnPhC1XzoAWZj+bL2JwqM6
 4zlUyvZ1Aa6rLHXVyM0aYIAJCHiIe54qTuJSbCD8pugZL/C5XBhPXV9/rlTQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
 d=xicotepecpuebla.gob.mx; s=default; t=1738304267; h=from : to : date
 : message-id : mime-version : content-type : subject : from;
 bh=lo0B6Ib7fpdut5gdLYPQM4h8Fz0xJIEx47sGwkqHx6o=;
 b=mBb41PS9tgiX5f9vbQQkjUCH9u5FDKYFr5JrUZBl27R61CwZtVsU90bAErmKGHSgn0GQS
 en6+WqR5Z4TX7W7PFqkOkF7rkItpBii7KQAWl6o6fvadUWYn+zG0ge60ANpXnSfyf2FEbLI
 is5tzF9DfztYKvVsoMScx9DyU/HjPGn2XZ18q0RUDvuAQ7Gn4d6UxRzcyE6ovGNbsGx6RX2
 rWsZKuD2yk5aseRSDMz+zQTsBX0MImuLYixOfkhjMuM+Kb6/IZ6aQppvTQ+vpv1yRjSpcVV
 hgurtTocpYIs3SAfSCBfdT+ht9xm0olxW063o8ZXkfcbUZLwywiheVYDKqOQ==
ARC-Authentication-Results: i=1; server.xicotepecpuebla.net;
  dmarc=none smtp.from=70677.p-world.jp header.from=70677.p-world.jp;
  spf=none smtp.mailfrom=edgar-hansokuk@70677.p-world.jp smtp.helo=out16-61.antispamcloud.com
Return-Path: <edgar-hansokuk@70677.p-world.jp>
X-Original-To: transparencia@xicotepecpuebla.gob.mx
Delivered-To: transparencia@xicotepecpuebla.gob.mx
Received: from out16-61.antispamcloud.com (out16-61.antispamcloud.com [185.201.18.61])
	by server.xicotepecpuebla.net (Postfix) with ESMTPS id BCD394000731
	for <transparencia@xicotepecpuebla.gob.mx>; Fri, 31 Jan 2025 00:17:46 -0600 (CST)
Authentication-Results: server.xicotepecpuebla.net;
	dmarc=none (p=NONE sp=NONE) smtp.from=70677.p-world.jp header.from=70677.p-world.jp;
	spf=none (sender IP is 185.201.18.61) smtp.mailfrom=edgar-hansokuk@70677.p-world.jp smtp.helo=out16-61.antispamcloud.com
Received-SPF: none (server.xicotepecpuebla.net: no valid SPF record)
Received: from h03.digitalserver.org ([104.37.173.229])
	by mx201.antispamcloud.com with esmtps (TLSv1.3:TLS_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <edgar-hansokuk@70677.p-world.jp>)
	id 1tdkLV-004yEd-Pw; Fri, 31 Jan 2025 07:17:45 +0100
Received: from [103.200.38.241] (port=22848 helo=[103.200.38.240])
	by h03.digitalserver.org with esmtp (Exim 4.98)
	(envelope-from <edgar-hansokuk@70677.p-world.jp>)
	id 1tdkLT-0000000A2ww-17Im
	for transparencia@xicotepecpuebla.com;
	Fri, 31 Jan 2025 00:17:38 -0600
From: "hamnet tiny" <edgar-hansokuk@70677.p-world.jp>
To: <transparencia@xicotepecpuebla.com>
Date: 31 Jan 2025 16:45:53 +0500
Message-ID: <004201db73da$02ec1022$506bdcae$@70677.p-world.jp>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_003F_01DB73DA.02E5FD6B"
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac0vcu3m60vcu3m60vcu3m60vcu3m6==
Content-Language: en
x-cr-hashedpuzzle: 2D4= cu3m 60vc u3m6 0vcu 3m60 vcu3 m60v cu3m 60vc u3m6 0vcu 3m60 vcu3 m60v cu3m;1;60vcu3m60vcu3m60vcu3m60vcu3m60vcu3m60vcu3m60vcu3;Sosha1_v1;7;\{44250A05-4B6B-2A44-250A-054B6B2A4425\};ZQB3AGUAZgcu3m60vcu3m60vcu3m60vcu3m60vcu3m60vcu3;31 Jan 2025 16:45:53 +0500;m6dv3g18wyu7kayb
x-cr-puzzleid: \{44250A05-4B6B-2A44-250A-054B6B2A4425\}
X-MagicSpam-TUUID: 4685878b-881a-4c90-b43f-7ff5c2a5794d
X-MagicSpam-SUUID: cf8277c4-78a6-4878-a1d7-383467fcfe83
X-Spam-Status: Yes, score=23.3
X-Spam-Score: 233
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "h03.digitalserver.org",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  &nbsp; &nbsp; I am someone who has complete control over your
    device. I have been monitoring your activity for several months, including
    your browsing history and any compromising videos you may have [...] 
 Content analysis details:   (23.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [103.200.38.241 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [103.200.38.241 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [103.200.38.241 listed in sa-trusted.bondedsender.org]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  3.0 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.9 RATWARE_NO_RDNS        Suspicious MsgID and MIME boundary + no rDNS
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.8 DOS_OUTLOOK_TO_MX      Delivered direct to MX with Outlook headers
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  1.0 PDS_BAD_THREAD_QP_64   Bad thread header - short QP
  1.0 BITCOIN_YOUR_INFO      BitCoin with your personal info
  2.7 BITCOIN_DEADLINE       BitCoin with a deadline
  0.3 MALWARE_NORDNS         Malware bragging + no rDNS
  1.1 BITCOIN_MALWARE        BitCoin + malware bragging
X-Spam-Flag: YES
Subject: =?utf-8?B?SWYgeW91IGRvbid0IG9wZW4gaXQsIHlvdSdsbCByZWdyZXQgaXQ=?=
X-Get-Message-Sender-Via: h03.digitalserver.org: redirect/forwarder owner transparencia@xicotepecpuebla.com -> esauvargasvargas@gmail.com
X-Authenticated-Sender: h03.digitalserver.org: transparencia@xicotepecpuebla.com
X-Originating-IP: 104.37.173.229
X-Spampanel-Domain: h03.digitalserver.org
X-Spampanel-Username: 104.37.173.229
Authentication-Results: antispamcloud.com; auth=pass smtp.auth=104.37.173.229@h03.digitalserver.org
X-Spampanel-Outgoing-Class: unsure
X-Spampanel-Outgoing-Evidence: Combined (0.76)
X-Recommended-Action: accept
X-Filter-ID: Pt3MvcO5N4iKaDQ5O6lkdGlMVN6RH8bjRMzItlySaT+gsRG0uf2nqkGr//45KdpdPUtbdvnXkggZ
 3YnVId/Y5jcf0yeVQAvfjHznO7+bT5yaYOgLKPXlF5uM+G7PH71tCtuvsNLrBRZn6W0l/UmE1xNv
 5gSUseRSk7gBz4PIN6IL9CTn4fqFzMTTEnT2f4XOHwXn/Sk6jy1artiuSCQugcYe//FZPhIGZKCy
 YnWilcZaa40DxZPJuLUk3zkVKd8p/KsEHMJFvah7gkI13aw6l6iuLHWxR2Wjt1ygF9XeeWDWdua9
 fePXVg9vQiWrNLltD8q7nojBZOKszxz6LUwYFcJxY8/2Az7xKsonyhrukv2DwIE7VKe+bqpcdCns
 72R1XiGmi+TmqOj9Iw49qCtTp9FvU3wxjnLZD2LZf/3m5KWNXAy6nurqI1nlgFd5UfvxwFIfGfya
 Z/ZaQ5hOMrRTQvZXmJh+1a1mxej/3hKzukSjtRu5bPC8zl5GPOV9RgMxYWA4ryBb6FrOHzigF4y0
 YammfZhpGDkGrvat2uAIDUqbcCEbjbqaWJiQIcFmk6Cipzi4JDWEiJuf4ysgNjLZYHLNC3/fL4Kg
 w09mhRCU70ZWBb39uS1TjWG2Inx+Ts2QD1e76szsWvBsaS+KViusBg4TfS2su/byymSuqTyxp/ZE
 xDyRiioQmvGTre37mWh0chGFHjQ6q190o7vmaHflczJ6R7d45NQBwei0vTRHYRfq7n4/BjGzakEi
 yFqBGkzfhNSYuv2ySpE3sBz8INDKYz3jF5xgPZv5J9iHdYALMftaLZotZFxzd25ty4PviFAPWBr1
 NXWZl2E6hvvGzvjMyNpfzLGlbE0qOKZX90VkqwxpstRTUmIOniN/MdcPZyMpT02LDtnlSi2r9DN6
 BsTxkIAGbQlqf5hYEEBSHvZuK+vsQ1TAdesTwAF3N04QviFDWSVkVEOhaHWhNS/WGeAFjxq6ibRB
 g9MtsT2Lu16/AMp+pvlHhV6a5QjptwQBGybQgKG1fwgjYRmdwI+r3EGwg8RabAunkUYcft86uA5c
 cNLMveoXnvurY8ry6g3qzXHGWyz6fZ9+dDG3ponuSVlpvyzVdc+6EVB3f+IZ3qip4P3s3NBrz9lm
 UiGfOfvAsXRJSwFByI0cnJC/RCaO6wrPSTEvuGslKTrRIXcXpFg5ivY=
X-Report-Abuse-To: spam@quarantine15.antispamcloud.com
X-Complaints-To: abuse@master.antispamcloud.com

This is a multi-part message in MIME format.

------=_NextPart_000_003F_01DB73DA.02E5FD6B
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

&nbsp;
&nbsp;
I am someone who has complete control over your device.
I have been monitoring your activity for several months, including your =
browsing history and any compromising videos you may have created or =
viewed.
&nbsp;
You were infected with my malware when you visited an adult website.
&nbsp;
This virus allows me to gain full control over any of your devices, =
including your camera and screen.
I also have access to all your contacts and messages.
&nbsp;
I made a video that shows you engaging in a sexual act on one side of =
the screen while viewing explicit content on the other.
I could send this video to all your contacts if you don't comply with my =
demands.
&nbsp;
If you value your privacy, I recommend sending me between 1300 USD (US =
dollars) to my Bitcoin wallet address: =
bc1qgeyflkzjwc5y0xx950gmwxw0ydrgjcfw8ucf4f
Feel free to research how to use Bitcoin if you're unfamiliar with it.
&nbsp;
You have 50 hours to comply. The timer starts as soon as you open this =
email.
If you share this message with anyone, I will immediately distribute the =
video.
There is no way for you to track this email or my Bitcoin address, so =
don't bother trying.

------=_NextPart_000_003F_01DB73DA.02E5FD6B
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META =
HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 =
(filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:blue;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:purple;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue =
vlink=3Dpurple><div class=3DWordSection1><p =
class=3DMsoNormal><p>&nbsp;</p>
<p>&nbsp;</p>
<p>I am someone who has complete control over your device.</p>
<p>I have been monitoring your activity for several months, including =
your browsing history and any compromising videos you may have created =
or viewed.</p>
<p>&nbsp;</p>
<p>You were infected with my malware when you visited an adult =
website.</p>
<p>&nbsp;</p>
<p>This virus allows me to gain full control over any of your devices, =
including your camera and screen.</p>
<p>I also have access to all your contacts and messages.</p>
<p>&nbsp;</p>
<p>I made a video that shows you engaging in a sexual act on one side of =
the screen while viewing explicit content on the other.</p>
<p>I could send this video to all your contacts if you don't comply with =
my demands.</p>
<p>&nbsp;</p>
<p>If you value your privacy, I recommend sending me between 1300 USD =
(US dollars) to my Bitcoin wallet address: =
bc1qgeyflkzjwc5y0xx950gmwxw0ydrgjcfw8ucf4f</p>
<p>Feel free to research how to use Bitcoin if you're unfamiliar with =
it.</p>
<p>&nbsp;</p>
<p>You have 50 hours to comply. The timer starts as soon as you open =
this email.</p>
<p>If you share this message with anyone, I will immediately distribute =
the video.</p>
<p>There is no way for you to track this email or my Bitcoin address, so =
don't bother trying.</p><o:p></o:p></p></div></body></html>
------=_NextPart_000_003F_01DB73DA.02E5FD6B--


