| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <b93o15342@gmail.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id lC6fHg/cKmRbAwAAIWsJAg
(envelope-from <b93o15342@gmail.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 03 Apr 2023 11:00:47 -0300
Return-path: <b93o15342@gmail.com>
Envelope-to: info@doctor.lrsys.com.br
Delivery-date: Mon, 03 Apr 2023 11:00:47 -0300
Received: from server2.congressa.mx ([107.190.143.82]:40176)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <b93o15342@gmail.com>)
id 1pjKjj-0000Bx-1V
for info@doctor.lrsys.com.br;
Mon, 03 Apr 2023 11:00:47 -0300
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=congressa.mx; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=bczL7vG8kwZuqtxFeI6/Tyx4GtCITlD7JgOdtqAwPhs=; b=LlldR51aIdK2jo7vCdXV2YgLEE
/sxL2hRNGBesMRq+VsTb72pR0+GVFqrz8BTeGS5PAU6OOLY494ZAZCjTxJA7wF5G255Vg/hbxXApc
HOfge4YRJtcZODGdNTlMANO8y93lX50FFE/2WpYLqqfyE5d2QvLNpDLvl+uotvwZZyOa/z0C8tQlA
2CZDSskM9wVxmaIYrWMzhdKFHUVJiejzVTzxmRlrSCBwO85j3TM3Kr7m7x6MBtEGjK7nPrN/nAQyB
+gFxwtrTNQpF2gUggHY07Y/Nw53BkfTw9zhv3E3PlAOpnbLiW2ERSjXKNYfbNaePkR2ptCKqz4JwZ
moPibHBQ==;
Received: from [45.12.253.59] (port=59087 helo=gmail.com)
by server.congressa.mx with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from <b93o15342@gmail.com>)
id 1pjKj2-008goR-0B
for info@doctor.lrsys.com.br;
Mon, 03 Apr 2023 07:59:59 -0600
Reply-To: b93015342@gmail.com
From: Carr Ronald <b93o15342@gmail.com>
To: info@doctor.lrsys.com.br
Date: 03 Apr 2023 06:59:58 -0700
Message-ID: <20230403065958.39C80B57FD31A8AA@gmail.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.congressa.mx
X-AntiAbuse: Original Domain - doctor.lrsys.com.br
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: server.congressa.mx: authenticated_id: certificacion@congressa.mx
X-Authenticated-Sender: server.congressa.mx: certificacion@congressa.mx
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Greetings, If you think you have a solid background and idea
of making good profit in your line of business or any other business, then
get back to me for possible cooperation with you. I am ready to facilitate
and fund any business that is capable of generating upto 25% annual return
on investment (AROI) or more on Joint Venture basis, Hard loan funding can
also be considered. I am [...]
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: congressa.mx]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?45.12.253.59>]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9999]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9999]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[b93015342[at]gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[b93o15342[at]gmail.com]
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[b93o15342[at]gmail.com]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
X-Spam-Flag: YES
Subject: ***SPAM*** [Business Expansion & Development Proposal] info@doctor.lrsys.com.br
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.19003"></HEAD>
<body style=3D"MARGIN: 0.5em">
<P>Greetings,</P>
<P>If you think you have a solid background and idea of making good profit =
in your line of business or any other business, then get back to me for pos=
sible cooperation with you.</P>
<P>I am ready to facilitate and fund any business that is capable of genera=
ting upto 25% annual return on investment (AROI) or more on Joint Ven=
ture basis, Hard loan funding can also be considered. I am ready to work wi=
th any serious person in, so please go straight to the point and let me kno=
w if you are ready for this.</P>
<P>Regards,<BR>[Carr Ronald].</P></BODY></HTML>