LittleDemon WebShell


Linux server.clickboxgo.com 3.10.0 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Path : /home/clickboxgo/mail/new/
File Upload :
Command :
Current File : /home/clickboxgo/mail/new/1750553278.M363806P28771.server.clickboxgo.com,S=10818,W=11045

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from server.clickboxgo.com
	by server.clickboxgo.com with LMTP
	id 9lLYFL5SV2hjcAAA2xCSNQ
	(envelope-from <[email protected]>)
	for <[email protected]>; Sat, 21 Jun 2025 20:47:58 -0400
Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Sat, 21 Jun 2025 20:47:58 -0400
Received: from [196.65.164.231] (port=14201)
	by server.clickboxgo.com with esmtp (Exim 4.98.1)
	(envelope-from <[email protected]>)
	id 1uT8rt-000000007T4-1Gqb
	for [email protected];
	Sat, 21 Jun 2025 20:47:58 -0400
Received: from [IPv6:::ffff:196.65.164.231] (unknown [196.65.164.231])
	by aero4.unstablemail.com (Postfix) with ESMTP id 2F8546DAF7EC
	for <[email protected]>; Sun, 22 Jun 2025 03:23:37 +0100 (UTC)
MIME-Version: 1.0
To: <[email protected]>
From: "elwood caradoc" <[email protected]>
Date: Sun, 22 Jun 2025 03:23:37 +0100
Importance: normal
X-Priority: 3
Content-Type: multipart/alternative;
	boundary="_9D6A2B59-76DC-1804-F3B2-C0EF45819D6A_"
X-Spam-Status: Yes, score=28.4
X-Spam-Score: 284
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.clickboxgo.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Untitled Document.mdThe data from all your devices is copied
    to my servers. I hacked your system! This is your last warning! You are visiting
    adult resources. Now your family, colleagues and friends w [...] 
 Content analysis details:   (28.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: document.md]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [196.65.164.231 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                         [196.65.164.231 listed in sa-trusted.bondedsender.org]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.8 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  8.5 KAM_CRIM               Extortion Email
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  1.3 BITCOIN_SPAM_09        BitCoin spam pattern 09
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.3 BITCOIN_XPRIO          Bitcoin + priority
  0.5 PDS_BTC_ID             FP reduced Bitcoin ID
  4.0 BITCOIN_EXTORT_01      Extortion spam, pay via BitCoin
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  The data from all your devices is copied to my servers.

--_9D6A2B59-76DC-1804-F3B2-C0EF45819D6A_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="iso-8859-1"

Untitled Document.mdThe data from all your devices is copied to my =
servers.
I hacked your system!
This is your last warning!
You are visiting adult resources.
Now your family, colleagues and friends will know about it.
All your gadgets are infected with the Trojan virus.
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.
I now have in front of me a video clip of the porn you were watching and =
your masturbation.
Your face is perfectly visible, everyone will recognize you.
I&#8217;m sure the video will destroy your reputation forever.
I plan to circulate the video to everyone you know.
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!
You can&#8217;t see when I connect to your camera.
You&#8217;re being monitored 24/7.
No antivirus will help you, no reinstalling the operating system or =
resetting your data.
Even if you change all your passwords and account information, I will =
know about it.
All the information is on my servers!
Don&#8217;t try to complain somewhere or share this letter.
It will end badly for you!
My address and my wallet are untraceable.
I will go straight to action and automatically start sending out the =
video and all of your information.
Writing back to me is useless. I don&#8217;t respond to emails.
As soon as you read the email, I get a notification. The timer has =
started.
You have 50 hours to make the payment. This is the only way to be safe!
Make a transfer of 1300$ USD to my wallet.
My bitcoin adress : 16kryN21kVXUcVFZBDLFtBrQcdNanFjF51
Detailed instructions are on Google.
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!
I&#8217;m sure we understand each other! Have a great day!

--_9D6A2B59-76DC-1804-F3B2-C0EF45819D6A_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="iso-8859-1"

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta =
http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta =
name=3DGenerator content=3D"Microsoft Word 15 (filtered =
medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09font-size:11.0pt;
=09font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:blue;
=09text-decoration:underline;}
.MsoChpDefault
=09{mso-style-type:export-only;}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style></head><body lang=3DEN-US link=3Dblue vlink=3D"#954F72" =
style=3D'word-wrap:break-word'><div class=3DWordSection1><p =
class=3DMsoNormal><!DOCTYPE html><html><head><meta =
charset=3D"utf-8"><title>Untitled =
Document.md</title><style></style></head><body id=3D"preview">
<p class=3D"has-line-data" data-line-start=3D"0" data-line-end=3D"1">The =
data from all your devices is copied to my servers.</p>
<p class=3D"has-line-data" data-line-start=3D"2" data-line-end=3D"4">I =
hacked your system!<br>
This is your last warning!</p>
<p class=3D"has-line-data" data-line-start=3D"5" data-line-end=3D"7">You =
are visiting adult resources.<br>
Now your family, colleagues and friends will know about it.</p>
<p class=3D"has-line-data" data-line-start=3D"8" =
data-line-end=3D"10">All your gadgets are infected with the Trojan =
virus.<br>
I have full access to your video camera, microphone and contacts in your =
phone, messengers and social networks.</p>
<p class=3D"has-line-data" data-line-start=3D"11" data-line-end=3D"14">I =
now have in front of me a video clip of the porn you were watching and =
your masturbation.<br>
Your face is perfectly visible, everyone will recognize you.<br>
I&#8217;m sure the video will destroy your reputation forever.</p>
<p class=3D"has-line-data" data-line-start=3D"15" data-line-end=3D"17">I =
plan to circulate the video to everyone you know.<br>
I will also share your email and messenger data. Imagine how disastrous =
that would be for you!</p>
<p class=3D"has-line-data" data-line-start=3D"18" =
data-line-end=3D"21">You can&#8217;t see when I connect to your =
camera.<br>
You&#8217;re being monitored 24/7.<br>
No antivirus will help you, no reinstalling the operating system or =
resetting your data.</p>
<p class=3D"has-line-data" data-line-start=3D"22" =
data-line-end=3D"24">Even if you change all your passwords and account =
information, I will know about it.<br>
All the information is on my servers!</p>
<p class=3D"has-line-data" data-line-start=3D"25" =
data-line-end=3D"28">Don&#8217;t try to complain somewhere or share this =
letter.<br>
It will end badly for you!<br>
My address and my wallet are untraceable.</p>
<p class=3D"has-line-data" data-line-start=3D"29" data-line-end=3D"32">I =
will go straight to action and automatically start sending out the video =
and all of your information.<br>
Writing back to me is useless. I don&#8217;t respond to emails.<br>
As soon as you read the email, I get a notification. The timer has =
started.</p>
<p class=3D"has-line-data" data-line-start=3D"33" =
data-line-end=3D"34">You have 50 hours to make the payment. This is the =
only way to be safe!</p>
<p class=3D"has-line-data" data-line-start=3D"35" =
data-line-end=3D"36">Make a transfer of 1300$ USD to my wallet.</p>
<p class=3D"has-line-data" data-line-start=3D"37" =
data-line-end=3D"38">My bitcoin adress : =
16kryN21kVXUcVFZBDLFtBrQcdNanFjF51</p>
<p class=3D"has-line-data" data-line-start=3D"39" =
data-line-end=3D"43">Detailed instructions are on Google.<br>
As soon as the money comes into my account, I will delete the dirt and =
never bother you again!<br>
I hope your reputation is important to you, so I don&#8217;t advise you =
to do anything stupid!<br>
I&#8217;m sure we understand each other! Have a great day!</p>

</body></html></p><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p></div></body></html>

--_9D6A2B59-76DC-1804-F3B2-C0EF45819D6A_--



LittleDemon - FACEBOOK
[ KELUAR ]