AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././././mail/.spam/new/1742327658.M464296P22527.dedi-4363141.lrsys.com.br,S=6753,W=6875
Return-Path: <mtexperiencia@secretarias09i.gavetamaterial.cfd>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id xrZFG2rP2Wf/VwAAIWsJAg
	(envelope-from <mtexperiencia@secretarias09i.gavetamaterial.cfd>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Tue, 18 Mar 2025 16:54:18 -0300
Return-path: <mtexperiencia@secretarias09i.gavetamaterial.cfd>
Envelope-to: contabilidade@lrsys.com.br
Delivery-date: Tue, 18 Mar 2025 16:54:18 -0300
Received: from secretarias09i.gavetamaterial.cfd ([188.245.239.114]:35740)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <mtexperiencia@secretarias09i.gavetamaterial.cfd>)
	id 1tud0v-000000005pR-46W0
	for contabilidade@lrsys.com.br;
	Tue, 18 Mar 2025 16:54:18 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=secretarias09i.gavetamaterial.cfd; s=default; t=1742327606;
	bh=TJOLffpeN318fXnkOr1VQcijgDqYr8gU/OACn0nt4dY=;
	h=From:To:Reply-To:Date:Subject:From;
	b=HvTfBte/QudCM1e87MlGO0UQDb3LK43mjfeeNIcdBh/bymMYG7r2z8vsx73T5vyaK
	 VsTYntFoXcEYiLl3SOleX+gB9ZpvbudZDEINCvB0wUVgtvBy2ScQ8TKbEO3S8nDcE7
	 dTUJ8rK5gX/NnR8hZGPuFp2xi+2bOuMLy5AegBtWNZkqJqqv1kkkPwd30tR4DO/Ici
	 a/jamTDqeIU4uNfH/dNk9TbCBDVdebr8anWP2gklrvT0D+heejJEuXk9oRlvLaIlu9
	 5OgiWOm/pEnYWLgmj3ckvV8p9R+Vm4ZvGxwrA3YZWLVbJ8FoHEGPMAweGV8bhHkBzi
	 4WxXvCUVNQPTw==
Received: from secretarias09i.gavetamaterial.cfd (localhost [127.0.0.1])
	by secretarias09i.gavetamaterial.cfd (Postfix) with ESMTP id 8EA57274E3
	for <contabilidade@lrsys.com.br>; Tue, 18 Mar 2025 16:53:26 -0300 (-03)
From: "=?UTF-8?B?TcO0bmljYSBUYXZhcmVzIC0gT3BvcnR1bmlkYWRlIGRlIFRyYWJhbGhv?="
 <mtexperiencia@secretarias09i.gavetamaterial.cfd>
To: contabilidade@lrsys.com.br
Content-Type: multipart/alternative; boundary="VKhmHFXHa7lUbxIZWp3vX=_jYJEjOt9Rbc"
MIME-Version: 1.0
Reply-To: 35cl@secretarias09i.gavetamaterial.cfd
Date: Tue, 18 Mar 2025 16:53:26 -0300
Message-Id: <20250318195326.8EA57274E3@secretarias09i.gavetamaterial.cfd>
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Perfil Profissional
    Olá, 
 Content analysis details:   (10.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: 64.host.secureserver.net]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: gavetamaterial.cfd]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [188.245.239.114 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [188.245.239.114 listed in bl.score.senderscore.com]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  1.5 FROM_FMBLA_NEWDOM      From domain was registered in last 7 days
X-Spam-Flag: YES
Subject:  ***SPAM*** 
 =?UTF-8?B?Q3VycsOtY3VsbyBEaXNwb27DrXZlbCBwYXJhIENvbnN1bHRhIC0gQWd1YXJkbyBGZWVkYmFjaw==?=

This is a multi-part message in MIME format

--VKhmHFXHa7lUbxIZWp3vX=_jYJEjOt9Rbc
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--VKhmHFXHa7lUbxIZWp3vX=_jYJEjOt9Rbc
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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=

--VKhmHFXHa7lUbxIZWp3vX=_jYJEjOt9Rbc--


Anon7 - 2022
AnonSec Team