LittleDemon WebShell

Linux server.clickboxgo.com 3.10.0 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Path : /home/clickboxgo/mail/new/
Current File : /home/clickboxgo/mail/new/1739262412.M765678P9424.server.clickboxgo.com,S=9310,W=9502
Envelope-to: [email protected]
Delivery-date: Tue, 11 Feb 2025 03:26:52 -0500
Date: Tue, 11 Feb 2025 17:17:02 +0400
From: "harrison shivapra" <[email protected]>
Message-ID: <[email protected]>
To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----------DEB369F7-33646.DCFA278E6401"
    
 Content analysis details:   (34.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.9 KAM_THEBAT             Abused X-Mailer Header for The Bat! MUA
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [27.4.176.135 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [27.4.176.135 listed in bl.score.senderscore.com]
  3.0 DATE_IN_FUTURE_03_06   Date: is 3 to 6 hours after Received: date
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  1.1 MPART_ALT_DIFF_COUNT   BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  8.5 KAM_CRIM               Extortion Email
  3.4 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat!
                             (boundary)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.1 BITCOIN_SPAM_09        BitCoin spam pattern 09
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  3.0 BITCOIN_DEADLINE       BitCoin with a deadline
  2.5 BITCOIN_SPAM_02        BitCoin spam pattern 02
X-Spam-Flag: YES
Subject:  ***SPAM***  You certainly didn't know about this!

------------DEB369F7-33646.DCFA278E6401
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Consider this message as your last warning.
We hacked your system!
We have copied all the data from your device to our own servers.
Curious videos were recorded from your camera and your actions while =
watching porn.
Your device was infected with our virus when you visited the porn site.
&nbsp;
The Trojan virus gives us full access, allows us to control your device.
The virus allows not only to see your screen, but also to turn on your =
camera, microphone, without your knowledge.
We took over the video from your screen and camera, then we mounted a =
video in which you can see you watching porn in one part of the screen =
and masturbating in the other.
But that's not all! We have access to all the contacts in your phone =
book and social networks.
It won't take us long to send this video to your friends, family and =
friends on social networks, messengers and email in minutes.
We have a lot of audio recordings of your personal conversations, where =
a lot of "interesting" things are revealed!
This information can destroy your reputation once and for all in a =
matter of minutes.
You have an opportunity to prevent irreversible consequences.
To do this:
Transfer 1300 \$ USD (US dollars) to our bitcoin wallet.
&nbsp;
Don't know how to make a transfer? Enter the query "Buy bitcoins" into =
the search field.
&nbsp;
Our bitcoin wallet bc1qkl28a8q0y408zye9z9d4x9qhyhpmrah2l7uyah
&nbsp;
After making the payment, your video and audio recordings will be =
completely destroyed and you can be 100% sure that we won't bother you =
again.
You have time to think about it and make the transfer - 50 hours!
After you read this letter, we will get an automatic notification. From =
that moment on, the timer will start.
It is useless to complain, because bitcoin-wallets cannot be tracked, as =
well as the mail from which the letter arrived to you.
We also do not advise you to send this letter to anybody.
In this case the system will automatically send a request to the server, =
and all data will be published in social networks and messengers.
You will not be able to solve the problem by changing passwords in =
social networks, as all the information is already downloaded to the =
cluster of our servers.
Think about what your reputation means to you and how much the =
consequences will be.
You have 50 hours.

------------DEB369F7-33646.DCFA278E6401
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: base64

<html><head>            <style type=3D"text/css" title=3D"rt_noDelete">
    blockquote.rt {
    margin: 0 0 15px;
    border-left: 4px solid #CF57D7;
    padding: 0 0 0 23px;
    display: block;
    }
    p { margin: 0 0 0 0 }
.email-signature {font-family:"Arial"; font-size: 82pt; }
    </style></head><body>
<p>Consider this message as your last warning.</p>
<p>We hacked your system!</p>
<p>We have copied all the data from your device to our own servers.</p>
<p>Curious videos were recorded from your camera and your actions while =
watching porn.</p>
<p>Your device was infected with our virus when you visited the porn =
site.</p>
<p>&nbsp;</p>
<p>The Trojan virus gives us full access, allows us to control your =
device.</p>
<p>The virus allows not only to see your screen, but also to turn on =
your camera, microphone, without your knowledge.</p>
<p>We took over the video from your screen and camera, then we mounted a =
video in which you can see you watching porn in one part of the screen =
and masturbating in the other.</p>
<p>But that's not all! We have access to all the contacts in your phone =
book and social networks.</p>
<p>It won't take us long to send this video to your friends, family and =
friends on social networks, messengers and email in minutes.</p>
<p>We have a lot of audio recordings of your personal conversations, =
where a lot of "interesting" things are revealed!</p>
<p>This information can destroy your reputation once and for all in a =
matter of minutes.</p>
<p>You have an opportunity to prevent irreversible consequences.</p>
<p>To do this:</p>
<p>Transfer 1300 \$ USD (US dollars) to our bitcoin wallet.</p>
<p>&nbsp;</p>
<p>Don't know how to make a transfer? Enter the query "Buy bitcoins" =
into the search field.</p>
<p>&nbsp;</p>
<p>Our bitcoin wallet bc1qkl28a8q0y408zye9z9d4x9qhyhpmrah2l7uyah</p>
<p>&nbsp;</p>
<p>After making the payment, your video and audio recordings will be =
completely destroyed and you can be 100% sure that we won't bother you =
again.</p>
<p>You have time to think about it and make the transfer - 50 hours!</p>
<p>After you read this letter, we will get an automatic notification. =
From that moment on, the timer will start.</p>
<p>It is useless to complain, because bitcoin-wallets cannot be tracked, =
as well as the mail from which the letter arrived to you.</p>
<p>We also do not advise you to send this letter to anybody.</p>
<p>In this case the system will automatically send a request to the =
server, and all data will be published in social networks and =
messengers.</p>
<p>You will not be able to solve the problem by changing passwords in =
social networks, as all the information is already downloaded to the =
cluster of our servers.</p>
<p>Think about what your reputation means to you and how much the =
consequences will be.</p>
<p>You have 50 hours.</p></body>
------------DEB369F7-33646.DCFA278E6401--
LittleDemon - FACEBOOK
[ KELUAR ]