AnonSec Shell

Server IP : 162.214.74.102 / Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /home/lrsys/././././mail/.spam/new/
Upload File :
[ HOME ]
Current File : /home/lrsys/././././mail/.spam/new/1722460961.M58929P16063.dedi-4363141.lrsys.com.br,S=7140,W=7266
Envelope-to: compras@lrsys.com.br
Delivery-date: Wed, 31 Jul 2024 18:22:41 -0300
MIME-Version: 1.0
To: <compras@lrsys.com.br>
User-Agent: The Bat! (v9.2.5) Professional
Message-Id: <46581ec5095556badd30926f9228aae5@pkml24.conexaomktbr.com>
Content-Type: multipart/alternative;
 boundary=a3bc66cd89438d8a3a28cc337882940c0c1344ab8f06ef25b0a63bea8656
From: =?utf-8?q?Jo=C3=A3o?= <bjdvc@pkml24.conexaomktbr.com>
Date: Wed, 31 Jul 2024 21:21:32 +0000
    
 Content analysis details:   (22.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: conexaomktbr.com]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: pkml24.conexaomktbr.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: conexaomktbr.com]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 HK_RANDOM_FROM         From username looks random
  1.9 KAM_THEBAT             Abused X-Mailer Header for The Bat! MUA
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [91.134.105.77 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [91.134.105.77 listed in sa-trusted.bondedsender.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  2.5 XM_LIGHT_HEAVY         Special edition of a MUA
  3.4 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat!
                             (boundary)
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?RmljaGEgQ2FkYXN0cmFs?=

--a3bc66cd89438d8a3a28cc337882940c0c1344ab8f06ef25b0a63bea8656
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8

CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo8aHRtbD4K
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo8aGVhZD4KCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCjxwPlNlZ3VlIEZpY2hhIGNhZGFzdHJhbCBwYXJhIGVtaXNzw6NvIGRhIG5vdGEuPC9w
PgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCjxhIGhyZWY9Imh0dHBzOi8veGVrOTkuYXBwLmdvby5nbC9OekFkN0py
Qjc2a3lSSkcxNyI+RmljaGE8L2E+PC9kaXY+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjwvYm9keT4K
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPC9odG1sPgo=
--a3bc66cd89438d8a3a28cc337882940c0c1344ab8f06ef25b0a63bea8656
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

aHR0cHM6Ly94ZWs5OS5hcHAuZ29vLmdsL056QWQ3SnJCNzZreVJKRzE3
--a3bc66cd89438d8a3a28cc337882940c0c1344ab8f06ef25b0a63bea8656--
Anon7 - 2022
AnonSec Team