| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <cfun@tcir15.corelnopapel.com.br>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id L3ewIWjhqmYteAAAIWsJAg
(envelope-from <cfun@tcir15.corelnopapel.com.br>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 31 Jul 2024 22:14:16 -0300
Return-path: <cfun@tcir15.corelnopapel.com.br>
Envelope-to: faturamento@lrsys.com.br
Delivery-date: Wed, 31 Jul 2024 22:14:16 -0300
Received: from [57.128.123.80] (port=56296 helo=tcir15.corelnopapel.com.br)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <cfun@tcir15.corelnopapel.com.br>)
id 1sZKOQ-0007zS-2y
for faturamento@lrsys.com.br;
Wed, 31 Jul 2024 22:14:16 -0300
Received: from localhost (localhost [IPv6:::1])
by tcir15.corelnopapel.com.br (Postfix) with UTF8SMTP id CA9DD21B9E
for <faturamento@lrsys.com.br>; Thu, 1 Aug 2024 01:12:23 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=tcir15; d=tcir15.corelnopapel.com.br; t=1722474743;
h=from:subject:date:message-id:to:mime-version:content-type:
user-agent:x-mailer:content-language;
bh=TZEPp+AYHieO00x7NyUqP4xEKmDqQ5txXenPL71JcXE=;
b=Z5pf3dzFTECOGHRPL3nDREnq3EhaEsV5BmMMcOaL9Qj0LuXBNppFFAcVK/zqIp0wdwtL8v
YaHyF1ET/vGgXNhRlWg5au3yoFW2ORgZkPYXwznRWvDHbRj6I+/2fXNvIC1pJeO9EhycEM
ZfNAaWH5gDco1b2CvuXIoSzua8e3pQF1PZxUravQLywgIl2E0kK+twqx+HnoSoRauzhOOL
ixHy+nCE8W63qrJSQKls4x9qGYVBe7diWL8AtTLcHfbZ8RgouSNv0apFNBcNjyPNiegxx+
9t+nJH63cgyVGD8qrqOK7QESLEjp1yAfULYTWA381owzK/TswWLBRQ3I9R568A==
To: <faturamento@lrsys.com.br>
Message-Id: <9e111473c5ed423b67392e766144538b@tcir15.corelnopapel.com.br>
Content-Type: multipart/alternative;
boundary=502b1ccc93ea77403a75cdd8e32920def3357f109d3ec201bef91e9675ee
MIME-Version: 1.0
From: =?utf-8?q?Jo=C3=A3o?= <cfun@tcir15.corelnopapel.com.br>
Date: Thu, 01 Aug 2024 01:12:23 +0000
X-Mailer: 1&1 Mail
User-Agent: 1&1 Mail
X-Spam-Status: Yes, score=21.3
X-Spam-Score: 213
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Segue Ficha cadastral para emissão da nota. Ficha https://yhv6e.app.goo.gl/sqyYLNWBhbjEV9H5A
Content analysis details: (21.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: goo.gl]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[57.128.123.80 listed in zen.spamhaus.org]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: corelnopapel.com.br]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: tcir15.corelnopapel.com.br]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.123.80 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.128.123.80 listed in sa-accredit.habeas.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RmljaGEgQ2FkYXN0cmFs?=
--502b1ccc93ea77403a75cdd8e32920def3357f109d3ec201bef91e9675ee
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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--502b1ccc93ea77403a75cdd8e32920def3357f109d3ec201bef91e9675ee
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly95aHY2ZS5hcHAuZ29vLmdsL3NxeVlMTldCaGJqRVY5SDVB
--502b1ccc93ea77403a75cdd8e32920def3357f109d3ec201bef91e9675ee--