Return-Path: <root@zxc5.ctnetrh.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id GIfZE8qm52CJdQAAIWsJAg
	(envelope-from <root@zxc5.ctnetrh.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 08 Jul 2021 22:30:50 -0300
Return-path: <root@zxc5.ctnetrh.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Thu, 08 Jul 2021 22:30:50 -0300
Received: from 89-108-102-25.cloudvps.regruhosting.ru ([89.108.102.25]:44834 helo=zxc5.ctnetrh.com)
	by dedi-4363141.lrsys.com.br with esmtp (Exim 4.94.2)
	(envelope-from <root@zxc5.ctnetrh.com>)
	id 1m1fLo-0007sm-Qq
	for financeiro@lrsys.com.br; Thu, 08 Jul 2021 22:30:50 -0300
Received: by zxc5.ctnetrh.com (Postfix, from userid 0)
	id 3A92B5EAC0; Thu,  8 Jul 2021 22:32:36 +0300 (MSK)
MIME-Version: 1.0
Content-type:  text/html; charset=UTF-8
Content-Transfer-Encoding: base64
From: Documentos Recebidos<pix@transacao-pix-enviado.com>
To: financeiro@lrsys.com.br
Message-Id: <20210709012851.3A92B5EAC0@zxc5.ctnetrh.com>
Date: Thu,  8 Jul 2021 22:32:36 +0300 (MSK)
X-Spam-Status: Yes, score=23.4
X-Spam-Score: 234
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  extrato Você acaba de receber um comprovante de transação
    bancária realizada pelo Internet Banking. Clique no arquivo Anexo para visualizá-lo.
    
 Content analysis details:   (23.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: ctnetrh.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: ctnetrh.com]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  0.9 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in
                             DNS
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.4 FROM_MISSP_DYNIP       From misspaced + dynamic rDNS
  0.0 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
X-Spam-Flag: YES
Subject:  ***SPAM***  Fwd: Comprovante de transação bancária Nº387429303
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