| Server IP : 162.214.74.102 / Your IP : 216.73.216.251 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/./././././mail/.spam/new/ |
Upload File : |
Return-Path: <noreply@noreply4.instrusaxofone.sbs>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id iL3vCyMmxGn9AQAAIWsJAg
(envelope-from <noreply@noreply4.instrusaxofone.sbs>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 25 Mar 2026 15:14:59 -0300
Return-path: <noreply@noreply4.instrusaxofone.sbs>
Envelope-to: contabilidade@lrsys.com.br
Delivery-date: Wed, 25 Mar 2026 15:14:59 -0300
Received: from noreply4.instrusaxofone.sbs ([46.224.160.143]:60664)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from <noreply@noreply4.instrusaxofone.sbs>)
id 1w5Skp-000000000H6-1Xgy
for contabilidade@lrsys.com.br;
Wed, 25 Mar 2026 15:14:59 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=noreply4.instrusaxofone.sbs; s=default; t=1774462452;
bh=1zhb8A2yWEsSYLQdnuHJKCe0fdOzgb/ahRUHFWD39ZE=;
h=From:To:Reply-To:Date:Subject:From;
b=wFFhQ4S4ob+0gCjmC/CB1qEqx8KrPImcrp3IZyJRGrUxS84kB3cdUo7Ihsq8FtsAG
EJNMsKTCjsEtrMqI9m86fK+Tc/tUi5f6RUilGBb7VnO6p82isLVokg6VroEGGqZm/O
5ysyu0+iJoA+AMmVUAqlsALd+62VX/8APr80S5scB2HZBMVWhRIMDRQJO25aHdXGm+
Kk013tugChAeNrJ3fIST4SfQdXfJJy15uNILlBWAfK1jrBqQsNjE23GxWb/9QQG12n
Wy7lc/MD8+mUUr7ZM1lpyVtFkPsF1qOwIVgRvNXrU4iynMbN2IXD90rzWyjoYfnbsx
60tA8ci80ZtBw==
From: "=?UTF-8?B?RGVwYXJ0YW1lbnRvIENvbnTDoWJpbA==?="
<noreply@noreply4.instrusaxofone.sbs>
To: contabilidade@lrsys.com.br
Content-Type: multipart/alternative; boundary="kZTxl7LnCjP5BhxL0EIpn5xpqn7=_4P8wx"
MIME-Version: 1.0
Reply-To: 55k8@noreply4.instrusaxofone.sbs
Date: Wed, 25 Mar 2026 15:14:12 -0300
Message-Id: <20260325181412.E860B4B970@noreply4.instrusaxofone.sbs>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Segue abaixo
documento do departamento cont_bil: Vencimento: 26/03/2026
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: instrusaxofone.sbs]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: instrusaxofone.sbs]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[46.224.160.143 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[46.224.160.143 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
X-Spam-Flag: YES
Subject: ***SPAM*** Guia para pagamento [DARF - IRPJ MENSAL] - Vencimento: 26/03/2026
This is a multi-part message in MIME format
--kZTxl7LnCjP5BhxL0EIpn5xpqn7=_4P8wx
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--kZTxl7LnCjP5BhxL0EIpn5xpqn7=_4P8wx
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--kZTxl7LnCjP5BhxL0EIpn5xpqn7=_4P8wx--