| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <zkdxn@pdrp9.fabricadepijamadondoka.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id ijJmG+QQrWZuLwAAIWsJAg
(envelope-from <zkdxn@pdrp9.fabricadepijamadondoka.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 02 Aug 2024 14:01:24 -0300
Return-path: <zkdxn@pdrp9.fabricadepijamadondoka.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Fri, 02 Aug 2024 14:01:24 -0300
Received: from pdrp9.fabricadepijamadondoka.com ([51.68.48.104]:52870)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <zkdxn@pdrp9.fabricadepijamadondoka.com>)
id 1sZveY-00038u-2g
for financeiro@lrsys.com.br;
Fri, 02 Aug 2024 14:01:24 -0300
Received: from localhost (localhost [IPv6:::1])
by pdrp9.fabricadepijamadondoka.com (Postfix) with UTF8SMTP id 680F621552
for <financeiro@lrsys.com.br>; Fri, 2 Aug 2024 17:00:19 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=pdrp9; d=pdrp9.fabricadepijamadondoka.com; t=1722618019;
h=from:subject:date:message-id:to:mime-version:content-type:
user-agent:x-mailer:content-language;
bh=G8PJ1H2wSl7S7axgR4kvvVMTzRjDrwINgybALcIN830=;
b=b/suldTSL/vYBdZMEppmwl7Stzu0r2em6XPn7nHawTrlZUDvsgUCJm57lQ5DlIX0SdOIJ0
ac+cRHdduwa7oqkETMlzgMIGakqkkzRPsN+UlsuhNLcjgzsDoOQKSKa2T5CVW8MMFmvj/a
bD/4WzxxMYfynd+iRS0Jf0axUU3VkVZgd3+cGl2+gOkAROl2lbc3LDdPuAFJmDBVcMow7+
FZHo6twfbcIhc2kLuEpuRiSNhVswlIB5r+WUpp1k6qIH+t/6c6yvP0i/xb1//kaDp1kHzb
9HctogqlvePkMibwTK8bl2vpGwKOI0YMh8nZbULWy6m9L34F/Z8ao5mFiqT4fw==
MIME-Version: 1.0
To: <financeiro@lrsys.com.br>
Content-Type: multipart/alternative;
boundary=4ab28485cd20b5127bb6c42519347d97c31c4a2d80a873b9d7fea8c3ff1b
Date: Fri, 02 Aug 2024 17:00:19 +0000
From: "LimpMax" <zkdxn@pdrp9.fabricadepijamadondoka.com>
X-Mailer: Amazon SES(Proxy)
User-Agent: Amazon SES(Proxy)
Message-Id:
<a8ddb26b4ba18742ec49725b42bd4032@pdrp9.fabricadepijamadondoka.com>
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Confirme o cancelamento da fatura abaixo. Fatura https://yhv6e.app.goo.gl/aHZiFKHSR4rUfJKEA
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: fabricadepijamadondoka.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: fabricadepijamadondoka.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.68.48.104 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.68.48.104 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?Q2FuY2VsYW1lbnRvIGRhIGZhdHVyYQ==?=
--4ab28485cd20b5127bb6c42519347d97c31c4a2d80a873b9d7fea8c3ff1b
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
Cgo8aHRtbD4KCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPGhlYWQ+CgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPHA+Q29uZmlybWUgbyBjYW5jZWxhbWVudG8gZGEgZmF0
dXJhIGFiYWl4by48L3A+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKPGEgaHJlZj0iaHR0cHM6Ly95aHY2ZS5hcHAuZ29vLmdsL2FIWmlGS0hT
UjRyVWZKS0VBIj5GYXR1cmE8L2E+PC9kaXY+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgo8L2JvZHk+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgo8L2h0bWw+Cg==
--4ab28485cd20b5127bb6c42519347d97c31c4a2d80a873b9d7fea8c3ff1b
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly95aHY2ZS5hcHAuZ29vLmdsL2FIWmlGS0hTUjRyVWZKS0VB
--4ab28485cd20b5127bb6c42519347d97c31c4a2d80a873b9d7fea8c3ff1b--