AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1740771824.M344254P32089.dedi-4363141.lrsys.com.br,S=8226,W=8370
Return-Path: <nao-responder0879@concordia4509t.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id YLI4FPARwmdZfQAAIWsJAg
	(envelope-from <nao-responder0879@concordia4509t.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 16:43:44 -0300
Return-path: <nao-responder0879@concordia4509t.auditoria.biz>
Envelope-to: pousada@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 16:43:44 -0300
Received: from concordia4509t.auditoria.biz ([5.161.208.10]:41964)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nao-responder0879@concordia4509t.auditoria.biz>)
	id 1to6Gq-0008PQ-23
	for pousada@lrsys.com.br;
	Fri, 28 Feb 2025 16:43:44 -0300
Received: from concordia4509t.auditoria.biz (localhost [127.0.0.1])
	by concordia4509t.auditoria.biz (Postfix) with ESMTP id EDBA3233AE
	for <pousada@lrsys.com.br>; Fri, 28 Feb 2025 16:42:58 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia4509t.auditoria.biz; s=default; t=1740771778;
	bh=t421KIDUtFlXrtUIulvh3BluuulYHU8zf9Fq7chqF7A=;
	h=From:To:Reply-To:Date:Subject:From;
	b=3I4ZP09d1RTl0pueT1+pfWIHWPE0eFaxvzlSrGWD3ckwwbViCmU1HYDM2+LhglWQ+
	 ufDCIK4/1jlEFt8nA3b+ZCMaDSZFMaOkGY3urp14DcooEyKgU2+qzMlqssHbdV2NhL
	 7jnE6bQR97AyZ/qOnv+bnKuRqeWOq4RjmtC2MSiPdOoTkpXtV1hX+iThGo8Zf/GHLV
	 I6N6yq8EHatPall1buy/nccCUnbjlX19fsydyhIhhT33ZuwYSXOQTrusAwjRURgA+u
	 iKgriWNwfBV2sZaQBarkI95202ZBISQoMTAGwC2wkLa504ZDZ1HuUW3Xqj4fqrnspk
	 7Be4UW+YcDO3w==
From: "SETOR32" <nao-responder0879@concordia4509t.auditoria.biz>
To: pousada@lrsys.com.br
Content-Type: multipart/alternative; boundary="KGyeu=_tUcs7aRModCpPX9H0ZOJY9VHoHT"
MIME-Version: 1.0
Reply-To: 24tybs8f7a@concordia4509t.auditoria.biz
Date: Fri, 28 Feb 2025 16:42:58 -0300
Message-Id: <20250228194258.EDBA3233AE@concordia4509t.auditoria.biz>
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Seu documento
    foi assinado com sucesso Acessar o documento Olá pousada@lrsys.com.br, 
 Content analysis details:   (12.0 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: auditoria.biz]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?5.161.208.10>]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.208.10 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.208.10 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM*** 
 =?UTF-8?B?8J+TgyBBc3NpbmF0dXJhIGNvbmZpcm1hZGEgLSBWZWphIG9zIGRldGFsaGVz?= -
 Protocolo: DJ844705U750975

This is a multi-part message in MIME format

--KGyeu=_tUcs7aRModCpPX9H0ZOJY9VHoHT
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--KGyeu=_tUcs7aRModCpPX9H0ZOJY9VHoHT
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--KGyeu=_tUcs7aRModCpPX9H0ZOJY9VHoHT--


Anon7 - 2022
AnonSec Team