ROOTPLOIT
Server: Apache
System: Linux node6122.myfcloud.com 6.14.3-x86_64-linode168 #1 SMP PREEMPT_DYNAMIC Mon Apr 21 19:47:55 EDT 2025 x86_64
User: bashacomputer (1004)
PHP: 7.4.33
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/bashacomputer/mail/cur/1747536538.M686585P434982.node6122.myfcloud.com,S=4962,W=5060:2,
Return-Path: <antonova@investneftetrade.ru>
Delivered-To: bashacomputer@node6122.myfcloud.com
Received: from node6122.myfcloud.com
	by node6122.myfcloud.com with LMTP
	id vS8gKJpKKWgmowYAVnYaFg
	(envelope-from <antonova@investneftetrade.ru>)
	for <bashacomputer@node6122.myfcloud.com>; Sun, 18 May 2025 05:48:58 +0300
Return-path: <antonova@investneftetrade.ru>
Envelope-to: info@bashacomputer.com
Delivery-date: Sun, 18 May 2025 05:48:58 +0300
Received: from mail.investneftetrade.ru ([95.181.202.6]:63527)
	by node6122.myfcloud.com with esmtp (Exim 4.98.1)
	(envelope-from <antonova@investneftetrade.ru>)
	id 1uGU57-00000001o15-3pBn
	for info@bashacomputer.com;
	Sun, 18 May 2025 05:48:58 +0300
Received: from [23.171.176.41] ([23.171.176.41]) by mail.investneftetrade.ru over TLS secured channel with Microsoft SMTPSVC(10.0.14393.4169);
	 Sun, 18 May 2025 05:10:22 +0300
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: my subject
To: Recipients <antonova@investneftetrade.ru>
From: "DFChange" <antonova@investneftetrade.ru>
Date: Sat, 17 May 2025 21:44:14 -0500
Reply-To: liamclark708@gmail.com
Message-ID: <IISGRAfvirg3Vcj4Wzz0001ef75@mail.investneftetrade.ru>
X-OriginalArrivalTime: 18 May 2025 02:10:22.0583 (UTC) FILETIME=[02F17070:01DBC79A]
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "node6122.myfcloud.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello, I am reaching out to you from Donation For Change.
   In light of the financial hardships and inflation many are facing, you've
   been nominated for a grant to help ease these difficulties for you, those
   around you and your community. You are eligible to r [...] 
 Content analysis details:   (2.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [95.181.202.6 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [95.181.202.6 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [95.181.202.6 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [95.181.202.6 listed in sa-trusted.bondedsender.org]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                             [score: 0.5002]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [liamclark708(at)gmail.com]
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free email?
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: NO

Hello,

I am reaching out to you from Donation For Change.

In light of the financial hardships and inflation many are facing, you've b=
een nominated for a grant to help ease these difficulties for you, those ar=
ound you and your community. You are eligible to receive a grant sum of =E2=
=82=AC800,000.

You can decline this offer. =

However, we would greatly appreciate if you could nominate someone who you =
believe could benefit from this grant.

Please respond to this email within 30 days to accept or decline this offer=
. If we do not hear from you by then, we will assume that you have declined=
 the offer, and the funds will be made available to the next nominee.

Thank you for your time.

Liam Clark
liamclark708@gmail.com