| Server IP : 162.214.74.102 / Your IP : 216.73.216.251 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/./././././mail/.spam/new/ |
Upload File : |
Return-Path: <reply-to4651585l@b698.instavist.icu>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id 8tTFBL/Sg2gCBgAAIWsJAg
(envelope-from <reply-to4651585l@b698.instavist.icu>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 25 Jul 2025 15:53:51 -0300
Return-path: <reply-to4651585l@b698.instavist.icu>
Envelope-to: cobrancas@lrsys.com.br
Delivery-date: Fri, 25 Jul 2025 15:53:51 -0300
Received: from [185.173.176.124] (port=44748 helo=b698.instavist.icu)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <reply-to4651585l@b698.instavist.icu>)
id 1ufNY9-000000000OI-39Ue
for cobrancas@lrsys.com.br;
Fri, 25 Jul 2025 15:53:50 -0300
ARC-Seal: i=1; a=rsa-sha256; d=b698.instavist.icu; s=default; t=1753469582;
cv=none; b=Q5ryikLf0R8jPU/qC9rSswPRZWouVe9J0lPM3jQIMFF530vcWDuWBCb84Q0Mjfrs2G0eWL6xzw9El9Vx04hl8cjit5SPhOoKve+QgphgHUIUy6Pdhxtun31q28HpbbuY/yTBSHMZCuaWBLePoTjwnF478O2i4hnILmru4u0k8WB06pXMIUmll/570kJvJKwQSk8bfIRE1tvG9bhSrociHBeDJ9wJ3ZqSPwfXNVn972v9jLBSc9D3/5YXy28A512CpLSWdp4SKB4kIrxb4wtiAl34mEoG6d6lFPhByfGxwRoXBaeH2WJrMeWDlRzf2I9G54tT9+k/P5gbKqah8p4+bQ==
ARC-Message-Signature: i=1; a=rsa-sha256; d=b698.instavist.icu; s=default;
t=1753469582; c=relaxed/simple;
bh=aTGH9jvO95NRNMUIOI9bf7GTWROX/VaGgXK79W0/3NU=;
h=DKIM-Signature:From:To:Content-Type:MIME-Version:Reply-To:Date:
Subject:Message-Id; b=owXH28593cUo0yNRSoP9Fm9jkM9W1myC42tL5BbtJ3RZR2KKDLAKTOCz1TS+oUcq44b/njOcNBqRPzjIxfjzEN8tOFelZYr0Pi9yQlE5Kq4rXTJAOoyc7eePZuOVkvVz6XrTZ0BC1kEb/v5qA1+aFvriwFhn2sW8xrrmt/Hz4gKSiCl2K2cr3zJ8lQGCCvOk3OuqdNaMyX/sQufJif03ZsyTtbLUuGSVLdzUiZfUxhsNjTigkbb5+ZliSezgP530uEt2XTPF5bTfxsBmDtEx27hnTgLbHDbw0l3oYmWi2OXyajWRcdsxWl/3hZMbP1NlIqOrMDSE62nMjLShoiogTw==
ARC-Authentication-Results: i=1; b698.instavist.icu
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=b698.instavist.icu;
s=default; t=1753469582;
bh=aTGH9jvO95NRNMUIOI9bf7GTWROX/VaGgXK79W0/3NU=;
h=From:To:Reply-To:Date:Subject:From;
b=k1BgNgpB5r7uhuP+90XoE37aTRT947lofkZEmd2ukltUM74A1l05X5jPdwL2JK7r6
vXtFJDRtTY7v50SGeXJmk7Ljl9wR2jTgEKJfI2PalW/dzgm4AOrpI+D2QUWXLV97BC
dOWchSrOHwlKnn91Ou8AKujg7WMf6mt6oIWVoHa5rXL357/LNmry3srKtETvatW0fB
Q0/caOwNwFdOaBQfHE3dmIMGDajZD/A80FhgLjFtFFij0K6zerDYnS+YN1lJqZbfGX
2KIX2C0weq2v4c3jr1FYenjxHekOLsTRFIJAWvk8LuDWL0bc3BnShHmtASzIH2bP6F
sPQ7QqX3+G28Q==
From: "Tad-BR - Fernanda C. Moura" <reply-to4651585l@b698.instavist.icu>
To: cobrancas@lrsys.com.br
Content-Type: multipart/alternative; boundary="UlS42cja0q492vDWcSfHyyonMlMM=_dgqB"
MIME-Version: 1.0
Reply-To: 0w3mxw5@b698.instavist.icu
Date: Fri, 25 Jul 2025 15:53:01 -0300
Message-Id: <20250725185301.EC3FB49F43@b698.instavist.icu>
X-Spam-Status: Yes, score=20.5
X-Spam-Score: 205
X-Spam-Bar: ++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado(a)
cobrancas@lrsys.com.br, Encaminhamos para sua apreciação o documento atualizado
referente às pendências em aberto. Solicitamos sua atenção para análise
e eventual retorno, caso necessário.
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 184.host.secureserver.net]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: instavist.icu]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: b698.instavist.icu]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[185.173.176.124 listed in psbl.surriel.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.173.176.124 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[185.173.176.124 listed in bl.score.senderscore.com]
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: b698.instavist.icu (icu)]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
0.5 FROM_SUSPICIOUS_NTLD From abused NTLD
0.0 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** 4814M =?UTF-8?B?RG9jdW1lbnRvIEdlcmFkbyBwYXJhIFZhbGlkYcOnw6Nv?=
This is a multi-part message in MIME format
--UlS42cja0q492vDWcSfHyyonMlMM=_dgqB
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--UlS42cja0q492vDWcSfHyyonMlMM=_dgqB
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9InB0LXB0Ij4KICA8aGVhZD4KICAgIDxtZXRhIGNo
YXJzZXQ9IlVURi04Ij4KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1k
ZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4KICAgIDxtZXRhIGh0dFAtZXF1aXY9IkNv
bnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PVVURi04Ij4KICA8L2hlYWQ+
CiAgPGJvZHkgc3R5bGU9Im1hcmdpbjowOyBwYWRkaW5nOjIwcHg7IGZvbnQtZmFtaWx5OkFyaWFs
LCBzYW5zLXNlcmlmOyBmb250LXNpemU6MTRweDsgY29sb3I6IzMzMzsgbGluZS1oZWlnaHQ6MS41
OyBiYWNrZ3JvdW5kLWNvbG9yOiNmOWY5Zjk7Ij4KCiAgICA8dGFibGUgd2lkdGg9IjEwMCUiIGNl
bGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgYm9yZGVyPSIwIiBzdHlsZT0ibWF4LXdpZHRo
OjYwMHB4OyBtYXJnaW46YXV0bzsgYmFja2dyb3VuZDojZmZmZmZmOyBwYWRkaW5nOjIwcHg7IGJv
cmRlcjoxcHggc29saWQgI2UwZTBlMDsiPgogICAgICA8dHI+CiAgICAgICAgPHRkPgoKICAgICAg
ICAgIDxwPlByZXphZG8oYSkgPHN0cm9uZz5jb2JyYW5jYXNAbHJzeXMuY29tLmJyPC9zdHJvbmc+
LDwvcD4KCiAgICAgICAgICA8cD5FbmNhbWluaGFtb3MgcGFyYSBzdWEgYXByZWNpYSYjMjMxOyYj
MjI3O28gbyBkb2N1bWVudG8gYXR1YWxpemFkbyByZWZlcmVudGUgJiMyMjQ7cyBwZW5kJiMyMzQ7
bmNpYXMgZW0gYWJlcnRvLiBTb2xpY2l0YW1vcyBzdWEgYXRlbiYjMjMxOyYjMjI3O28gcGFyYSBh
biYjMjI1O2xpc2UgZSBldmVudHVhbCByZXRvcm5vLCBjYXNvIG5lY2VzcyYjMjI1O3Jpby48L3A+
CgogICAgICAgICAgPHA+TyBhcnF1aXZvIHBvZGUgc2VyIGFjZXNzYWRvIGRlIGZvcm1hIHNlZ3Vy
YSBhdHJhdiYjMjMzO3MgZG8gbGluayBhYmFpeG86PC9wPgoKICAgICAgICAgIDxwIHN0eWxlPSJt
YXJnaW46MjBweCAwOyI+CiAgICAgICAgICAgIDxhIGhyZWY9Imh0dFBzOi8vNTUuMjMuMTY4LjE4
NC5ob3N0LnNlY3VyZXNlcnZlci5uZXQvR1BFRVIzYW1nL1EyMjFsMExFazFFSS9CTEllSUsxbHBL
MEwyVjIvL1ZWNDRQVF9QZW5kZW5jaWFzX0FiZXJ0b181NzU5MV83NzZfRUxZIiAKICAgICAgICAg
ICAgICAgdGFyZ2V0PSJfYmxhbmsiIAogICAgICAgICAgICAgICBzdHlsZT0iZGlzcGxheTppbmxp
bmUtYmxvY2s7IGJhY2tncm91bmQtY29sb3I6IzAwNTBlNjsgY29sb3I6I2ZmZmZmZjsgdGV4dC1k
ZWNvcmF0aW9uOm5vbmU7IHBhZGRpbmc6MTBweCAyMHB4OyBib3JkZXItcmFkaXVzOjRweDsiPgog
ICAgICAgICAgICAgIEFjZXNzYXIgRG9jdW1lbnRvCiAgICAgICAgICAgIDwvYT4KICAgICAgICAg
IDwvcD4KCiAgICAgICAgICA8cD5FbSBjYXNvIGRlIGQmIzI1MDt2aWRhcyBvdSBwYXJhIGNvbmZp
cm1hciBvIHJlY2ViaW1lbnRvLCBlc3RhbW9zICYjMjI0OyBkaXNwb3NpJiMyMzE7JiMyMjc7by48
L3A+CgogICAgICAgICAgPHA+QXRlbmNpb3NhbWVudGUsPGJyPgogICAgICAgICAgPHN0cm9uZz5Q
YXVsbyBSb2JlcnRvIDwvc3Ryb25nPjwvcD4KCiAgICAgICAgPC90ZD4KICAgICAgPC90cj4KICAg
IDwvdGFibGU+CgogIDwvYm9keT4KPC9odG1sPgo=
--UlS42cja0q492vDWcSfHyyonMlMM=_dgqB--