| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <notificacao57@concordia622tp.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id mAKLG1nrwWfGVAAAIWsJAg
(envelope-from <notificacao57@concordia622tp.auditoria.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 13:59:05 -0300
Return-path: <notificacao57@concordia622tp.auditoria.biz>
Envelope-to: cobrancas@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 13:59:05 -0300
Received: from concordia622tp.auditoria.biz ([178.156.136.16]:33718)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <notificacao57@concordia622tp.auditoria.biz>)
id 1to3hV-0005eq-2R
for cobrancas@lrsys.com.br;
Fri, 28 Feb 2025 13:59:05 -0300
Received: from concordia622tp.auditoria.biz (localhost [127.0.0.1])
by concordia622tp.auditoria.biz (Postfix) with ESMTP id 2C5AC2358A
for <cobrancas@lrsys.com.br>; Fri, 28 Feb 2025 13:58:20 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=concordia622tp.auditoria.biz; s=default; t=1740761900;
bh=EnPGgj9oXatdYvOXjbjqbFeVVRxyfCUDz8Uj5wDEMsw=;
h=From:To:Reply-To:Date:Subject:From;
b=BKqOM5aHGIVQm4OJ+0s9aeebLNV5iSsELkOsUTKQxRR94YXgNo+NSWg3V+YPZCtcX
Ol6nPCBCJgEEiZ+Hh2Aj7/UbtYp3ZT3p1TnLfJgbiaFy4a+ZSqe1n06Jih0n5QiSEg
+mU8fkew4YuwTmIKAwKybrSF3k7p376rghE27JtQ9JJEN0S6JotRrdcPwwaOkQVikI
0/RvGu9PtyB8LXlR4a1tOjwynDMee1KnooImuEl4cY6UqeFYkQm52fQUfc8tSAAVH2
RgQHzs4Z7xPBJhGskpu3znWat4GELVXCXIaH5GIzGmPw4L/65rQVesGtNEBQEnP+1H
kg1wpNKk5+DjA==
From: "638 - Escritorio" <notificacao57@concordia622tp.auditoria.biz>
To: cobrancas@lrsys.com.br
Content-Type: multipart/alternative; boundary="ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E"
MIME-Version: 1.0
Reply-To: d26@concordia622tp.auditoria.biz
Date: Fri, 28 Feb 2025 13:58:20 -0300
Message-Id: <20250228165820.2C5AC2358A@concordia622tp.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado(a),cobrancas@lrsys.com.br
Confirmamos o recebimento do protocolo 341225139 referente à Baixa de Débitos.
O documento foi registrado com sucesso pela SEFAZ-DFAZ-CTDA - Tributação
e Dívida Ativa na data de 28/02/2025.
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: auditoria.biz]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: auditoria.biz]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[178.156.136.16 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[178.156.136.16 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.2 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject: ***SPAM*** 41597165 - Protocolo 341225139 - SEFAZ Confirma Recebimento
This is a multi-part message in MIME format
--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9InB0LXB0Ij4KPGhlYWQ+CiAgICA8bWV0YSBjaGFy
c2V0PSJ1dGYtOCI+CjwvaGVhZD4KPGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiBBcmlhbCwgc2Fu
cy1zZXJpZjsgYmFja2dyb3VuZC1jb2xvcjogI2Y0ZjRmNDsgcGFkZGluZzogMjBweDsgdGV4dC1h
bGlnbjogY2VudGVyOyI+CiAgICA8ZGl2IGNsYXNzPSJjb250YWluZXIiIHN0eWxlPSJtYXgtd2lk
dGg6IDYwMHB4OyBtYXJnaW46IGF1dG87IGJhY2tncm91bmQ6ICNmZmZmZmY7IHBhZGRpbmc6IDI2
cHg7IGJvcmRlci1yYWRpdXM6IDhweDsgYm94LXNoYWRvdzogMCAwIDExcHggcmdiYSgwLCAwLCAw
LCAwLjEpOyI+CiAgCiAgICAgICAgPHRhYmxlIHN0eWxlPSJ3aWR0aDogMTAwJTsgZm9udC1mYW1p
bHk6ICdIZWx2ZXRpY2EgTmV1ZScsIEhlbHZldGljYSwgQXJpYWwsIHNhbnMtc2VyaWY7IGZvbnQt
c2l6ZTogMTRweDsgYmFja2dyb3VuZDogI2ZmZmZmZjsgYm9yZGVyLXJhZGl1czogNXB4OyI+CiAg
ICAgICAgICAgIDx0Ym9keT4KICAgICAgICAgICAgICAgIDx0cj4KICAgICAgICAgICAgICAgICAg
ICA8dGQgc3R5bGU9InBhZGRpbmc6IDIwcHg7IHRleHQtYWxpZ246IGxlZnQ7IGNvbG9yOiAjMDAw
MDA5OyI+CiAgICAgICAgICAgICAgICAgICAgICAgIFByZXphZG8oYSksPHNwYW4gc3R5bGU9InBh
ZGRpbmc6IDBweDsgdGV4dC1hbGlnbjogbGVmdDsgY29sb3I6ICNGRjAwMDA7Ij5jb2JyYW5jYXNA
bHJzeXMuY29tLmJyPC9zcGFuPgogICAgICAgICAgICAgICAgICAgICAgICA8cD5Db25maXJtYW1v
cyBvIHJlY2ViaW1lbnRvIGRvIHByb3RvY29sbyA8c3Ryb25nPjM0MTIyNTEzOTwvc3Ryb25nPiBy
ZWZlcmVudGUgJiMyMjQ7IDxzdHJvbmc+QmFpeGEgZGUgRCYjMjMzO2JpdG9zPC9zdHJvbmc+LiBP
IGRvY3VtZW50byBmb2kgcmVnaXN0cmFkbyBjb20gc3VjZXNzbyBwZWxhIDxzdHJvbmc+U0VGQVot
REZBWi1DVERBIC0gVHJpYnV0YSYjMjMxOyYjMjI3O28gZSBEJiMyMzc7dmlkYSBBdGl2YTwvc3Ry
b25nPiBuYSBkYXRhIGRlIDxzdHJvbmc+MjgvMDIvMjAyNTwvc3Ryb25nPi48L3A+CgogICAgICAg
ICAgICAgICAgICAgICAgICA8cD5QYXJhIGFjb21wYW5oYXIgbyBhbmRhbWVudG8gZG8gc2V1IHBy
b2Nlc3NvLCBhY2Vzc2UgbyBkb2N1bWVudG8gYWJhaXhvOjwvcD4KCiAgICAgICAgICAgICAgICAg
ICAgICAgIDxkaXYgc3R5bGU9Im1hcmdpbjogMjBweCAwOyB0ZXh0LWFsaWduOiBjZW50ZXI7Ij4K
ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDxhIGhyZWY9ImhUVHBTOi8vNzQtNTAtMTI3LTQ5
LnN0YXRpYy5odnZjLnVzL0MwOTRzcURNOTRNdi9JRHZndkY0czNGcUQzSzIvYnJ0Umh1am9ESUpB
ZWtmRWRsaHAvMzI4NzkwMzNfUmVjZWJpZG9fU0VGQVpfX19SUiIgdGFyZ2V0PSJfYmxhbmsiIHJl
bD0ibm9yZWZlcnJlciIgIGRhdGEtYXV0aD0iTm90QXBwbGljYWJsZSIgc3R5bGU9ImZvbnQtc2l6
ZTogMTRweDsgY29sb3I6ICNmZmY7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZm9udC13ZWlnaHQ6
IGJvbGQ7IHRleHQtYWxpZ246IGNlbnRlcjsgZGlzcGxheTogaW5saW5lLWJsb2NrOyBib3JkZXIt
cmFkaXVzOiA0cHg7IGJhY2tncm91bmQ6ICMxNDQzMDI7IHBhZGRpbmc6IDEwcHggMjBweDsiPgog
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEFjb21wYW5oYXIgUHJvY2Vzc28KICAgICAg
ICAgICAgICAgICAgICAgICAgICAgIDwvYT4KICAgICAgICAgICAgICAgICAgICAgICAgPC9kaXY+
CgogICAgICAgICAgICAgICAgICAgICAgICA8cCBzdHlsZT0iY29sb3I6ICMwMDAwMDc7IGZvbnQt
c2l6ZTogMTJweDsgdGV4dC1hbGlnbjogY2VudGVyOyI+CiAgICAgICAgICAgICAgICAgICAgICAg
ICAgICA8ZW0+RXN0YSBtZW5zYWdlbSBmb2kgZ2VyYWRhIGF1dG9tYXRpY2FtZW50ZS4gQ2FzbyB0
ZW5oYSBkJiMyNTA7dmlkYXMsIGVudHJlIGVtIGNvbnRhdG8gY29tIG5vc3NvIHN1cG9ydGUuPC9l
bT4KICAgICAgICAgICAgICAgICAgICAgICAgPC9wPgoKICAgICAgICAgICAgICAgICAgICAgICAg
PHAgc3R5bGU9ImNvbG9yOiAjMDAwMDA5OyBmb250LXNpemU6IDEycHg7IHRleHQtYWxpZ246IGNl
bnRlcjsiPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgPGVtPkVudmlhZG8gJiMyMjQ7cyAx
Mzo1ODoyMDwvZW0+CiAgICAgICAgICAgICAgICAgICAgICAgIDwvcD4KICAgICAgICAgICAgICAg
ICAgICA8L3RkPgogICAgICAgICAgICAgICAgPC90cj4KICAgICAgICAgICAgPC90Ym9keT4KICAg
ICAgICA8L3RhYmxlPgogICAgPC9kaXY+Cgo8L2JvZHk+Cgo8L2h0bWw+Cg==
--ZR97mwa1bqX=_sWXMmNJMo9J4uxkgOdZ4E--