AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1716806719.M587740P27642.dedi-4363141.lrsys.com.br,S=7126,W=7252
Return-Path: <juridico@mpne10.mascarotour.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id uM83Ij9kVGb6awAAIWsJAg
	(envelope-from <juridico@mpne10.mascarotour.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 27 May 2024 07:45:19 -0300
Return-path: <juridico@mpne10.mascarotour.com>
Envelope-to: vendas@lrsys.com.br
Delivery-date: Mon, 27 May 2024 07:45:19 -0300
Received: from mpne10.mascarotour.com ([15.235.40.42]:37966)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <juridico@mpne10.mascarotour.com>)
	id 1sBXqt-0007Bs-0o
	for vendas@lrsys.com.br;
	Mon, 27 May 2024 07:45:19 -0300
Received: (Haraka outbound); Mon, 27 May 2024 10:44:33 +0000
Authentication-Results: mpne10.mascarotour.com;
	auth=pass (login)
Message-Id: <fb4a7b8aa9bc3dede703fdeec2789357@mpne10.mascarotour.com>
Content-Type: multipart/alternative;
 boundary=7383348ecdeebe71ff34862fe5414e0a7c34844e0603d82ea59e910e26af
Date: Mon, 27 May 2024 10:44:33 +0000
Accept-Language: pt-BR, en-US
Content-Language: pt-BR
List-Unsubscribe: 
 <https://mpne10.mascarotour.com/?action=unsubscribe&u=vendas@lrsys.com.br>
MIME-Version: 1.0
From: "ConceitoPag" <juridico@mpne10.mascarotour.com>
To: <vendas@lrsys.com.br>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=mpne10.mascarotour.com; s=may1716805709595;
	h=subject:from:to;
	bh=mdgyzs21ha2BOEBe9wqzrIFWspSvfCQaLPOwOPYKCP4=;
	b=Bp7Rrt1xVEbxhR9lIWp22X6lX0q+Mzu/KHqXTmlKdBQeAwt9Utm+0NyZZPJxvp8uGg6g6nbPGJ
	1F4upljLkp7eGPpu9BPJ44icKWvwIPnFXz1M8+MHXC63GQD837+Gh4qWOyf3J1xfFQhIEpqpgrbZ
	RPetmRsk6/W/McTw23F3vK3sX5X/i7BxaT3C/hLVUow0zs6ijSTZ4BgLtUX+XvQIjBcL5LwtFq1w
	fbGkZvnRuY3EFVEUcRvipwr1jBUi9GU2h/leStOPATTr5i8A9ij22aTses+RbiLZgWG5NVeiXGnL
	cbN+O5wf/B9ih81xomDVefP+QbF27qkqVq49+8uA==
X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  38176637874 Olá, Pagamento realizado pelo cnpj: 49.007.149/0001-49
    
 Content analysis details:   (11.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: windows.net]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: mascarotour.com]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: mpne10.mascarotour.com]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 0.9967]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.3 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?UmVjUGFn?=

--7383348ecdeebe71ff34862fe5414e0a7c34844e0603d82ea59e910e26af
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8

CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjxo
dG1sPgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgo8aGVhZD4KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjx0aXRsZT4zODE3NjYzNzg3NDwvdGl0
bGU+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPGJvZHk+CgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo8cD5PbMOhLDwvcD4KCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjxwPlBhZ2FtZW50byByZWFsaXph
ZG8gcGVsbyBjbnBqOiA0OS4wMDcuMTQ5LzAwMDEtNDk8L3A+CgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCjxhIGhyZWY9Imh0dHBzOi8vMjcwNjIwMjQuYmxvYi5jb3JlLndpbmRv
d3MubmV0L3dlYi9pbmRleC5odG1sP2lkPTI1MCI+UGFnYV8zNzg0MDEwMTwvYT4KCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjxwPkNvbmNlaXRv
UGFnPC9wPgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjwvYm9keT4KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCjxicj48YnI+PGJyPjxicj48
YnI+PGJyPjxicj48YnI+PGJyPjxmb250IGNvbG9yPSIjRTZFNkU2Ij5uX2ViNjU3ZTI4LTYwMjYt
NGUxYi1iZGE2LWQ1OTE3MGRmNGUyNjwvZm9udD48L2h0bWw+Cgo=
--7383348ecdeebe71ff34862fe5414e0a7c34844e0603d82ea59e910e26af
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

aHR0cHM6Ly8yNzA2MjAyNC5ibG9iLmNvcmUud2luZG93cy5uZXQvd2ViL2luZGV4Lmh0bWw/aWQ9
MjUwDQoNCg0KDQoNCg0KDQoNCg0K
--7383348ecdeebe71ff34862fe5414e0a7c34844e0603d82ea59e910e26af--

Anon7 - 2022
AnonSec Team