AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.251
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/./././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/./././././mail/.spam/new/1753469114.M173390P882.dedi-4363141.lrsys.com.br,S=8885,W=9032
Return-Path: <reply-to73074c@j748.instavist.icu>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id eIT+CbrQg2hyAwAAIWsJAg
	(envelope-from <reply-to73074c@j748.instavist.icu>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 25 Jul 2025 15:45:14 -0300
Return-path: <reply-to73074c@j748.instavist.icu>
Envelope-to: cobranca@lrsys.com.br
Delivery-date: Fri, 25 Jul 2025 15:45:14 -0300
Received: from [185.173.176.149] (port=38012 helo=j748.instavist.icu)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <reply-to73074c@j748.instavist.icu>)
	id 1ufNPo-000000000DH-0Qoj
	for cobranca@lrsys.com.br;
	Fri, 25 Jul 2025 15:45:14 -0300
ARC-Seal: i=1; a=rsa-sha256; d=j748.instavist.icu; s=default; t=1753469044;
	cv=none; b=ySAa2EvGPd9wyS9wshJTUnLb+mPXldAoYpHF3I6fzK4KBx6FASxq9Em0xSzQVsn8nQeOf/7IkJ73m2UlrNCmgICEnncKb0lK4yfHSxGNPgl2MBtqOKdtzfu3lEUZWnfqETgJN1zMeM4odDu7rPs6EKlJBXpoG/mKI7VURtBnY81Bf/eQaaB7ekFbFecf14CXQl1j728Pu6n0K0CCd6fvuAPma5l6Wyw7TXfz2erODkQQrE9Xos7twbL/XHJxKMNrMBWqsQRYygmBXB+cNbe3ZvKVBdBqE//xdu5NZZt89KDDVuKHsoW6Njk0HBafMv4cgxsbfT5NN9hRtJ34sD4Kmw==
ARC-Message-Signature: i=1; a=rsa-sha256; d=j748.instavist.icu; s=default;
	t=1753469044; c=relaxed/simple;
	bh=d0BvKsP5ksoMIxWzLmLwElCxTjYSns5oMUG58OlEkWA=;
	h=DKIM-Signature:From:To:Content-Type:MIME-Version:Reply-To:Date:
	 Subject:Message-Id; b=O0CvSL7jtq+uVO5roAev2DuXSPba9EiA0MH5z2c6zatEqsEL4efcS+zhqcKLoDn6AyL4LdFQZelKmOkPYoCuHPv3HyLE4cG15upPJuhkmozmSsoVDYctyrNVU0oByRm7shqFyAWBLIINL1CRVO06FTf1XjnrJ1UiKXMQODKSbXbaWDWZCNbdo/zcG3V0tDZLZbZJF4ztsVlJ9eaGrEEb46JHvuNcHfmFm7OcUzAH7WUW0e/UN0tVqDrmQ8uxbewSVjQxw2m0KQf3wUfdPzgZIWvNG3n+gCinUeXWOdCta0MmjxlPpuI0xSB4W0sgvyht+GD02TJjXzK5K17euYuMVA==
ARC-Authentication-Results: i=1; j748.instavist.icu
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=j748.instavist.icu;
	s=default; t=1753469044;
	bh=d0BvKsP5ksoMIxWzLmLwElCxTjYSns5oMUG58OlEkWA=;
	h=From:To:Reply-To:Date:Subject:From;
	b=jEVgisFkSXuD5x3wQuyaybF6YiyJwtUqZI0M45RcPuuNvrT1HqSnM7HvACo08SmM6
	 B/SwsdMiF0kb5O543BZoD5941LaJpiTbwX/JEyXNxWYk5X++qdm8aHJK5vlMcyaqXv
	 OqorMsWvEBx1kSSJ9JuNjkhrKGfYqZz/0YZfL73LjS375HEbVFjqj/JR6E4EOYt/xh
	 d4QPh9jiKTNZF78yu/kwgnuDpIQc9fwqMvduY7BCeIU+UiE2aYNUzGU32yaHvAGRBy
	 QAnl+R78A+N7yeFX0TPFww61Jv9t0zSlUn0zB5OkdF9gG9LblSzIt1BhAKTCSqNYGt
	 P4Pivjp3eWSyA==
From: "Du-BR - Fernanda C. Moura" <reply-to73074c@j748.instavist.icu>
To: cobranca@lrsys.com.br
Content-Type: multipart/alternative; boundary="IdMjWQuqHVaOanG=_vVPjmkfYMel3BV41R"
MIME-Version: 1.0
Reply-To: m3o25vn@j748.instavist.icu
Date: Fri, 25 Jul 2025 15:44:04 -0300
Message-Id: <20250725184404.D3F3B4328F@j748.instavist.icu>
X-Spam-Status: Yes, score=20.4
X-Spam-Score: 204
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Prezado(a)
   cobranca@lrsys.com.br, Encaminhamos para sua apreciação o documento atualizado
    referente às pendências em aberto. Solicitamos sua atenção para análise
    e eventual retorno, caso necessário. 
 Content analysis details:   (20.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: 184.host.secureserver.net]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: instavist.icu]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [185.173.176.149 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [185.173.176.149 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [185.173.176.149 listed in psbl.surriel.com]
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: j748.instavist.icu (icu)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.0 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  17984
 =?UTF-8?B?QWNlc3NvIGFvIERvY3VtZW50byBjb20gSW5mb3JtYcOnw7VlcyBBdHVhbGl6YWRhcw==?=

This is a multi-part message in MIME format

--IdMjWQuqHVaOanG=_vVPjmkfYMel3BV41R
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--IdMjWQuqHVaOanG=_vVPjmkfYMel3BV41R
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline

PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9InB0LXB0Ij4KICA8aGVhZD4KICAgIDxtZXRhIGNo
YXJzZXQ9IlVURi04Ij4KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1k
ZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4KICAgIDxtZXRhIGh0dFAtZXF1aXY9IkNv
bnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04Ij4KICA8L2hlYWQ+
CiAgPGJvZHkgc3R5bGU9Im1hcmdpbjowOyBwYWRkaW5nOjIwcHg7IGZvbnQtZmFtaWx5OkFyaWFs
LCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTRweDsgY29sb3I6IzMzMzsgbGluZS1oZWlnaHQ6MS41
OyBiYWNrZ3JvdW5kLWNvbG9yOiNmOWY5Zjk7Ij4KCiAgICA8dGFibGUgd2lkdGg9IjEwMCUiIGNl
bGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVyPSIwIiBzdHlsZT0ibWF4LXdpZHRo
OjYwMHB4OyBtYXJnaW46YXV0bzsgYmFja2dyb3VuZDojZmZmZmZmOyBwYWRkaW5nOjIwcHg7IGJv
cmRlcjoxcHggc29saWQgI2UwZTBlMDsiPgogICAgICA8dHI+CiAgICAgICAgPHRkPgoKICAgICAg
ICAgIDxwPlByZXphZG8oYSkgPHN0cm9uZz5jb2JyYW5jYUBscnN5cy5jb20uYnI8L3N0cm9uZz4s
PC9wPgoKICAgICAgICAgIDxwPkVuY2FtaW5oYW1vcyBwYXJhIHN1YSBhcHJlY2lhJiMyMzE7JiMy
Mjc7byBvIGRvY3VtZW50byBhdHVhbGl6YWRvIHJlZmVyZW50ZSAmIzIyNDtzIHBlbmQmIzIzNDtu
Y2lhcyBlbSBhYmVydG8uIFNvbGljaXRhbW9zIHN1YSBhdGVuJiMyMzE7JiMyMjc7byBwYXJhIGFu
JiMyMjU7bGlzZSBlIGV2ZW50dWFsIHJldG9ybm8sIGNhc28gbmVjZXNzJiMyMjU7cmlvLjwvcD4K
CiAgICAgICAgICA8cD5PIGFycXVpdm8gcG9kZSBzZXIgYWNlc3NhZG8gZGUgZm9ybWEgc2VndXJh
IGF0cmF2JiMyMzM7cyBkbyBsaW5rIGFiYWl4bzo8L3A+CgogICAgICAgICAgPHAgc3R5bGU9Im1h
cmdpbjoyMHB4IDA7Ij4KICAgICAgICAgICAgPGEgaHJlZj0iaHR0UHM6Ly81NS4yMy4xNjguMTg0
Lmhvc3Quc2VjdXJlc2VydmVyLm5ldC9USHAzOGhSNksvTjE4cHZ4SFB1cFAvQ0hlMGVCcHZpQnhI
NEQyLy9JRDFHQTdfUGVuZGVuY2lhc19BYmVydG9fNjNfNDA0X1IzOFZKUENIIiAKICAgICAgICAg
ICAgICAgdGFyZ2V0PSJfYmxhbmsiIAogICAgICAgICAgICAgICBzdHlsZT0iZGlzcGxheTppbmxp
bmUtYmxvY2s7IGJhY2tncm91bmQtY29sb3I6IzAwNTBlNjsgY29sb3I6I2ZmZmZmZjsgdGV4dC1k
ZWNvcmF0aW9uOm5vbmU7IHBhZGRpbmc6MTBweCAyMHB4OyBib3JkZXItcmFkaXVzOjRweDsiPgog
ICAgICAgICAgICAgIEFjZXNzYXIgRG9jdW1lbnRvCiAgICAgICAgICAgIDwvYT4KICAgICAgICAg
IDwvcD4KCiAgICAgICAgICA8cD5FbSBjYXNvIGRlIGQmIzI1MDt2aWRhcyBvdSBwYXJhIGNvbmZp
cm1hciBvIHJlY2ViaW1lbnRvLCBlc3RhbW9zICYjMjI0OyBkaXNwb3NpJiMyMzE7JiMyMjc7by48
L3A+CgogICAgICAgICAgPHA+QXRlbmNpb3NhbWVudGUsPGJyPgogICAgICAgICAgPHN0cm9uZz5Q
YXVsbyBSb2JlcnRvIDwvc3Ryb25nPjwvcD4KCiAgICAgICAgPC90ZD4KICAgICAgPC90cj4KICAg
IDwvdGFibGU+CgogIDwvYm9keT4KPC9odG1sPgo=

--IdMjWQuqHVaOanG=_vVPjmkfYMel3BV41R--


Anon7 - 2022
AnonSec Team