Return-Path: <nvmgv@ydaa75.brindesgoaisgo.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id FWzsGdaPSmbzXQAAIWsJAg
	(envelope-from <nvmgv@ydaa75.brindesgoaisgo.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sun, 19 May 2024 20:48:38 -0300
Return-path: <nvmgv@ydaa75.brindesgoaisgo.com>
Envelope-to: sac@lrsys.com.br
Delivery-date: Sun, 19 May 2024 20:48:38 -0300
Received: from ydaa75.brindesgoaisgo.com ([57.128.85.187]:48966)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nvmgv@ydaa75.brindesgoaisgo.com>)
	id 1s8qGY-0006FW-0x
	for sac@lrsys.com.br;
	Sun, 19 May 2024 20:48:38 -0300
Received: from localhost (localhost [IPv6:::1])
	by ydaa75.brindesgoaisgo.com (Postfix) with UTF8SMTP id D242521072
	for <sac@lrsys.com.br>; Sun, 19 May 2024 23:47:46 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 s=ydaa75; d=ydaa75.brindesgoaisgo.com; t=1716162466;
  h=from:subject:date:message-id:to:mime-version:content-type:
 accept-language:user-agent:x-mailer:x-sender:content-language:
 list-unsubscribe; bh=0RlvckXz3ZQX5M3LpOBPvDPRTVRFrgtrRoOKmi+/pXU=;
 b=FkTp3vbpBX9Rfxuk/LAsZicdzdRrFqCIygHQcgOVP6IiP1Lgpi4E2tdonmK6ZFq6eTrP7a
 HJp2f/+5hOLyo1LETsJabbSDoH0thES9R3eUzqzXE/hwhomPi3HqYf+58El04eenN6ADdn
 Vgun8Cr/Gd410RzwBRI9aObgQ2bSdv2iaO/587truK3S5hJyeKBn0oOedkW/KmvqjdGGvx
 6FH16XosF7xtmu+otPBUDJXitvSSEkHMwBfUoUu/f4d/I1F/J7yPTNxYinzVPeMamuxF1C
 sD7p3c3lSyLAOSLYpJAHrqBZ4dBPDKkqYdMA+r/2ZGjGQR3QeL3OdruQqv4QWQ==
Date: Sun, 19 May 2024 23:47:46 +0000
MIME-Version: 1.0
To: <sac@lrsys.com.br>
List-Unsubscribe: 
 <https://ydaa75.brindesgoaisgo.com/?action=unsubscribe&u=sac@lrsys.com.br>
Accept-Language: pt-BR, en-US
Message-Id: <e4599a3eee9e4e1cf9bd45036ca568f3@ydaa75.brindesgoaisgo.com>
Content-Type: multipart/alternative;
 boundary=f47f7586d2f65e8607f5fa70552e00881afaffacab44f052784f66f87c12
From: "Finanet" <nvmgv@ydaa75.brindesgoaisgo.com>
X-Sender: nvmgv@ydaa75.brindesgoaisgo.com
X-Mailer: Roundcube Webmail/1.4.13
User-Agent: Roundcube Webmail/1.4.13
Content-Language: pt-BR
X-Spam-Status: Yes, score=9.1
X-Spam-Score: 91
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  23vqadphflmpwn42 Caro colaborador, A partir de 19º de junho,
    a emissão de notas deverá sofrer alguns ajustes. 
 Content analysis details:   (9.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: windows.net]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: brindesgoaisgo.com]
  3.0 BAYES_95               BODY: Bayes spam probability is 95 to 99%
                             [score: 0.9595]
  0.0 HK_RANDOM_FROM         From username looks random
  0.0 HK_RANDOM_ENVFROM      Envelope sender username looks random
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  0.0 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?QWp1c3RlcyBmaXNjYWlz?=

--f47f7586d2f65e8607f5fa70552e00881afaffacab44f052784f66f87c12
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
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--f47f7586d2f65e8607f5fa70552e00881afaffacab44f052784f66f87c12
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8

aHR0cHM6Ly8xMzA1MjAyNC5ibG9iLmNvcmUud2luZG93cy5uZXQvd2ViL2luZGV4Lmh0bWw/aWQ9
MTY0DQoNCg0KDQoNCg0KDQoNCg0K
--f47f7586d2f65e8607f5fa70552e00881afaffacab44f052784f66f87c12--