AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1716435859.M660403P1054.dedi-4363141.lrsys.com.br,S=7128,W=7254
Return-Path: <idnd@nhiv6.goldwik.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id CrBDJpO7TmYeBAAAIWsJAg
	(envelope-from <idnd@nhiv6.goldwik.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 23 May 2024 00:44:19 -0300
Return-path: <idnd@nhiv6.goldwik.com>
Envelope-to: faturamento@lrsys.com.br
Delivery-date: Thu, 23 May 2024 00:44:19 -0300
Received: from nhiv6.goldwik.com ([137.184.190.211]:40344)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <idnd@nhiv6.goldwik.com>)
	id 1s9zNH-0000GE-0E
	for faturamento@lrsys.com.br;
	Thu, 23 May 2024 00:44:19 -0300
Received: from localhost (localhost [127.0.0.1])
	by nhiv6.goldwik.com (Postfix) with UTF8SMTP id 9253721DC2
	for <faturamento@lrsys.com.br>; Thu, 23 May 2024 03:42:58 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=nhiv6; d=nhiv6.goldwik.com; t=1716435778; h=from:subject:date:
 message-id:to:mime-version:content-type:accept-language:user-agent:
 x-mailer:x-sender:content-language:list-unsubscribe;
 bh=1qYWJ9I8RUsq5v2D9TvzhXGBGWsrhlyoiBqUmiAnPo4=;
 b=vr3o8PXGcMbuAS4TgSQMYBD2BKW5Zt+cBvNWNr9NWgDVBUs0X5emOZx6WkD60VDto3Xjl4
 T9nYBWFqPiIyC4pOUZoWYu/Sf5rhaCxCnlo7AdPY2EIeWdSTO4qvXuTx0mTnM89sttXYsX
 +rv8dGBS1kakKWjpD/0xmYebstGVXzB3bEeZ7jPvrriWbYSyCTC8ZNOc6qJP+PjfD0EFPU
 59aT/WIoDmHroYMbolwY2JGr43j7iSDSSr85+qq9ds4UtPNqGCEIG8Z8tt3cu6oZCaolx4
 vXITIPFUp+Yb3O7awMKBjm0VkFkDlgqWVhZBAi2O9t2Ze8ivDnZDawFCt0P15g==
X-Mailer: Roundcube Webmail/1.4.13
User-Agent: Roundcube Webmail/1.4.13
Accept-Language: pt-BR, en-US
MIME-Version: 1.0
To: <faturamento@lrsys.com.br>
List-Unsubscribe: 
 <https://nhiv6.goldwik.com/?action=unsubscribe&u=faturamento@lrsys.com.br>
X-Sender: idnd@nhiv6.goldwik.com
Content-Language: pt-BR
Message-Id: <39b5f7fac8790d4db22379acac8927cc@nhiv6.goldwik.com>
Content-Type: multipart/alternative;
 boundary=967242eccbbbe4fb7fd268897e006219470f3c389dcc101264ac4312241b
From: "Financeiro" <idnd@nhiv6.goldwik.com>
Date: Thu, 23 May 2024 03:42:58 +0000
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Reembolso Abril de 2024 Segue em anexo documentos e planilha
    preenchida, com o comprovante. Visualizar anexo 
 Content analysis details:   (13.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: windows.net]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: goldwik.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.1 HTML_IMAGE_ONLY_16     BODY: HTML: images with 1200-1600 bytes of
                             words
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  1.0 KAM_HTMLNOISE          Spam containing useless HTML padding
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?UmVlbWJvbHNvIEFicmlsIGRlIDIwMjQ=?=

--967242eccbbbe4fb7fd268897e006219470f3c389dcc101264ac4312241b
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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--967242eccbbbe4fb7fd268897e006219470f3c389dcc101264ac4312241b
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

U2VndWUgZW0gYW5leG8gZG9jdW1lbnRvcyBlIHBsYW5pbGhhIHByZWVuY2hpZGEsIGNvbSBvIGNv
bXByb3ZhbnRlLg0KDQogaHR0cHM6Ly8yMjA1MjAyNDAwLmJsb2IuY29yZS53aW5kb3dzLm5ldC9w
b3J0YWxkcml2ZS9pbmRleC5odG1sIFF1YWxxdWVyIGTDunZpZGEgZXN0b3Ugw6AgZGlzcG9zacOn
w6NvLg0KDQogQXR0LA0KDQogQnJ1bm8gSWFjb25hDQoNCiBodHRwczovL3d3dy5hdmFzdC5jb20v
c2lnLWVtYWlsP3V0bV9tZWRpdW09ZW1haWwmdXRtX3NvdXJjZT1saW5rJnV0bV9jYW1wYWlnbj1z
aWctZW1haWwmdXRtX2NvbnRlbnQ9ZW1haWxjbGllbnR3d3cuYXZhc3QuY29tDQoNCg0KDQoNCg0K
DQoNCg0K
--967242eccbbbe4fb7fd268897e006219470f3c389dcc101264ac4312241b--

Anon7 - 2022
AnonSec Team