Return-Path: <suporte@goaostejdksn.xyz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id 2EXSIxHuVWLGMQAAIWsJAg
	(envelope-from <suporte@goaostejdksn.xyz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Tue, 12 Apr 2022 18:24:33 -0300
Return-path: <suporte@goaostejdksn.xyz>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Tue, 12 Apr 2022 18:24:33 -0300
Received: from painel1.goaostejdksn.xyz ([45.65.9.63]:36506)
	by dedi-4363141.lrsys.com.br with esmtp (Exim 4.94.2)
	(envelope-from <suporte@goaostejdksn.xyz>)
	id 1neNzw-0003Ij-7M
	for financeiro@lrsys.com.br; Tue, 12 Apr 2022 18:24:33 -0300
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; d=minhanet.com;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=cobranca@minhanet.com;
 bh=pquMD/wL6F7zMscYziDv/dzAdIM=;
 b=A4iqJfJujAEY1x5NqdcgCmbntDkB8FR2QJbwmqjSWOXh41Te6aVkwMnKU6vSGZqngk4pKRJ29SSW
   mk/H+9Y7YBYltGtm3fBquFTxaLdGh40KewgeciHzLtD3MrxbbF91V7l6WhtV2dmvcOqqPZFmxXV7
   SKp0qskf9zhnCa9ETI8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; d=minhanet.com;
 b=BlJs6bgLbIBOP4/h0yGjAsQRBrdOSxcjkpcn5fjqvEO+Y6QgoyxAuPcTktlBE9yU98BXkesow+Y4
   0FuT5uQc/NBusaw+5f6RD0ezhPAXcVtPwbYW7Vm+UBzWqVgf22tdLV4cMp4PYj9yfR/5A4Zuh07g
   xsILcmrMXGJVm5ohdgc=;
To: financeiro@lrsys.com.br
Message-ID: <c93b80cfe81cdce7b16bf71ef754218f@server.goaostejdksn.xyz>
Date: Tue, 12 Apr 2022 21:11:05 +0000
From: "Minha NET" <cobranca@minhanet.com>
Reply-To: suporte@goaostejdksn.xyz
MIME-Version: 1.0
X-Mailer-LID: 9
List-Unsubscribe: <http://server.goaostejdksn.xyz/mkt/unsubscribe.php?M=844758&C=29be4e7b2392ce8f541c21fe9cd5e35f&L=9&N=11>
X-Mailer-RecptId: 844758
X-Mailer-SID: 11
X-Mailer-Sent-By: 1
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_a8f2b353a6fc7d0e536cfae047a35176"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=25.4
X-Spam-Score: 254
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Seu cliente de e-mail não pode ler este e-mail. Para visualizá-lo
    on-line, por favor, clique aqui: http://server.goaostejdksn.xyz/mkt/display.php?M=844758&C=29be4e7b2392ce8f541c21fe9cd5e35f&S=11&L=9
    [...] 
 Content analysis details:   (25.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: minhanet.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: goaostejdksn.xyz]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: server.goaostejdksn.xyz]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                  [Blocked - see <https://www.spamcop.net/bl.shtml?45.65.9.63>]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  2.0 PDS_OTHER_BAD_TLD      Untrustworthy TLDs
                             [URI: server.goaostejdksn.xyz (xyz)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 NORMAL_HTTP_TO_IP      URI: URI host has a public dotted-decimal IPv4
                              address
  1.2 NUMERIC_HTTP_ADDR      URI: Uses a numeric IP address in URL
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.7 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  3.0 XM_RECPTID             Has spammy message header
  2.7 HOSTED_IMG_MULTI_PUB_01 Multiple hosted images at public site
X-Spam-Flag: YES
Subject:  ***SPAM***  Fatura NET em atraso - Evite o Bloqueio.

--b1_a8f2b353a6fc7d0e536cfae047a35176
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Seu cliente de e-mail não pode ler este e-mail.
Para visualizá-lo on-line, por favor, clique aqui:
http://server.goaostejdksn.xyz/mkt/display.php?M=844758&C=29be4e7b2392ce8f541c21fe9cd5e35f&S=11&L=9&N=5


Para parar de receber nossos
Emails:http://server.goaostejdksn.xyz/mkt/unsubscribe.php?M=844758&C=29be4e7b2392ce8f541c21fe9cd5e35f&L=9&N=11

--b1_a8f2b353a6fc7d0e536cfae047a35176
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html>
<head>
</head>
<body>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii"
/>Para visualizar sua fatura, <a
href="http://20.122.111.142/70453477219/EMKT_CURSO_123-642//770453477219//?cliente=MAU-CLARO-199@dom.com"
style="color: #000;">clique aqui</a>.
<table style="width: 715px;">
<tbody style="font-family: 'Segoe UI Web (West European)',Segoe
UI,-apple-system,BlinkMacSystemFont,Roboto,Helvetica Neue,sans-serif;
font-size: 16px;">
<tr>
<td width="100%" height="94" align="left" valign="top" bgcolor="#c7d6ee"
style="border-bottom: 8px solid #ee352a;"><img
src="https://i.imgur.com/Y2Dt2pY.png" style="float: left;" /> <img
src="https://i.imgur.com/1iR6vGN.png" style="float: right;" /></td>
</tr>
<tr>
<td colspan="3" align="center">
<table style="width: 85%;">
<tbody>
<tr>
<td colspan="3">
<h1>AGORA, A NET EST&Aacute; NA CLARO.<br />CONFIRA A SUA FATURA
DIGITAL</h1>
</td>
</tr>
<tr>
<td height="45" colspan="3" valign="bottom"></td>
</tr>
<tr>
<td height="60" colspan="3">Voc&ecirc; est&aacute; recebendo em <b><span
style="color: #ee352a;">seguran&ccedil;a</span></b> a sua fatura Claro
net.</td>
</tr>
<tr>
<td height="180" colspan="3" valign="top" style="background:
url('https://i.imgur.com/Qvkx4E5.png'); background-repeat: no-repeat;">
<table style="margin-left: 20px; width: 100%;">
<tbody>
<tr style="font-size: 14px;">
<td height="130" valign="top"><br />E-mail do cliente:<br /> <br />
C&oacute;digo de barras:<br /> <b>23793.38*** *****.****** *****.****** *
****0000019900</b></td>
<td height="130" valign="top"><br />Vencimento:<br />
<b>12/04/2022</b></td>
</tr>
<tr style="color: #fff; font-size: 20px;">
<td width="76%">Total a pagar</td>
<td width="24%"><b>199,00</b></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td height="91" colspan="3" align="center" valign="middle">
<div style="width: 300px; height: 50px; line-height: 50px; border-radius:
30px; font-size: 20px; cursor: pointer; background-image:
linear-gradient(to right,#a54545,#d63a3a, #e81b1b);"><a
href="http://20.122.111.142/70453477219/EMKT_CURSO_123-642//770453477219//?cliente=MAU-CLARO-199@dom.com"
style="text-decoration: none; color: #fff;"> Acesse sua fatura </a></div>
</td>
</tr>
<tr>
<td colspan="3">
<div style="border-radius: 15px; background-color: #eceeee; padding: 15px
60px; font-weight: bold;">Caso o pagamento n&atilde;o for identificado no
prazo estimado,<br />seu nome ser&aacute; incluso no sistema de
prote&ccedil;&atilde;o ao cr&eacute;dito <span style="color:
#ee352a;">SPC/SERASA</span> <span style="color: #000000;">no pr&oacute;xmo
dia &uacute;til.</span></div>
</td>
</tr>
<tr>
<td width="15%" height="84"></td>
<td colspan="2" style="font-size: 14px;"></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td colspan="3" align="center"><img src="https://i.imgur.com/iP0mLYl.png"
/></td>
</tr>
<tr>
<td colspan="3" style="text-align: justify; font-size: 12px; padding:
20px;">*Tr&aacute;fego isento na rede da operadora Claro. N&atilde;o
responda este e-mail. Esta &eacute; uma mensagem gerada automaticamente.
Para enviar seus coment&aacute;rios, clique aqui e fale conosco. Para
entrar em contato com a Central de Relacionamento Claro, ligue 10621.</td>
</tr>
</tbody>
</table>
</body>
</html>

--b1_a8f2b353a6fc7d0e536cfae047a35176--