| Server IP : 162.214.74.102 / Your IP : 216.73.216.251 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/./././././mail/.spam/new/ |
Upload File : |
Return-Path: <noreply@relatorio04d.celulartrixel.cfd>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id OJlwO/76vmi/dAAAIWsJAg
(envelope-from <noreply@relatorio04d.celulartrixel.cfd>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 08 Sep 2025 12:49:18 -0300
Return-path: <noreply@relatorio04d.celulartrixel.cfd>
Envelope-to: administracao@lrsys.com.br
Delivery-date: Mon, 08 Sep 2025 12:49:19 -0300
Received: from relatorio04d.celulartrixel.cfd ([91.99.176.60]:57180)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <noreply@relatorio04d.celulartrixel.cfd>)
id 1uve7G-000000007qa-2Kdu
for administracao@lrsys.com.br;
Mon, 08 Sep 2025 12:49:18 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=relatorio04d.celulartrixel.cfd; s=default; t=1757346512;
bh=hItuZeqSABlDPlHdOntMQibFerHay/u2Ge/CrDsaVBk=;
h=From:To:Reply-To:Date:Subject:From;
b=M36b8UdAYJoV8a/J1UrmUhuTZBWGLFrWHCPPzn5IxZNTI7DJ81wCEmelI25r13qFs
vIHwite0ZRgJiQ8pRjZMEB1vVqWnXzNOv0wFuCyqBWj9XwktlpnVmiMUcUC5yMNGmM
EPWeQ1HBgF4OixbeL/hyWOkQa4A41FPfn4k5AAR1KMbmQlaWyez1G20SCzNrIEpeUt
LS6LOuDvfE1ZPT2rtPg+b/9j5Fa7CFyAT3XZ3wD0c3rXgTAncwVgvOdoBaQpIq1ZIs
JNmFjU390cHmk0dED/czG+R7ReX6DKxqoRe7kjiiwbFI/x5ueV7X3sktEwqc6ZDz8E
Oj3Q3AAsxtuAw==
From: "=?UTF-8?B?RGVwYXJ0YW1lbnRvIENvbnTDoWJpbA==?="
<noreply@relatorio04d.celulartrixel.cfd>
To: administracao@lrsys.com.br
Content-Type: multipart/alternative; boundary="1tED6oBXJip3k=_zlxegeNyJ9Cl5i7sftt"
MIME-Version: 1.0
Reply-To: 3w5j7@relatorio04d.celulartrixel.cfd
Date: Mon, 8 Sep 2025 12:48:32 -0300
Message-Id: <20250908154832.577EC2382B@relatorio04d.celulartrixel.cfd>
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Segue abaixo
documento do departamento contábil: Vencimento: 08/09/2025
Content analysis details: (9.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: celulartrixel.cfd]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[91.99.176.60 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[91.99.176.60 listed in sa-trusted.bondedsender.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
X-Spam-Flag: YES
Subject: ***SPAM*** Guia pgto [IRPJ-MENSAL] - Vencimento: 08/09/2025
This is a multi-part message in MIME format
--1tED6oBXJip3k=_zlxegeNyJ9Cl5i7sftt
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--1tED6oBXJip3k=_zlxegeNyJ9Cl5i7sftt
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--1tED6oBXJip3k=_zlxegeNyJ9Cl5i7sftt--