| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <notificacao93@concordia7400rl.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id 6ILsJZjtwWf6VgAAIWsJAg
(envelope-from <notificacao93@concordia7400rl.auditoria.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 14:08:40 -0300
Return-path: <notificacao93@concordia7400rl.auditoria.biz>
Envelope-to: producao@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 14:08:40 -0300
Received: from concordia7400rl.auditoria.biz ([5.161.208.52]:40988)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <notificacao93@concordia7400rl.auditoria.biz>)
id 1to3ql-0005oB-3D
for producao@lrsys.com.br;
Fri, 28 Feb 2025 14:08:40 -0300
Received: from concordia7400rl.auditoria.biz (localhost [127.0.0.1])
by concordia7400rl.auditoria.biz (Postfix) with ESMTP id 738B62236C
for <producao@lrsys.com.br>; Fri, 28 Feb 2025 14:07:54 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=concordia7400rl.auditoria.biz; s=default; t=1740762474;
bh=mhr7A4lQckYALJliA5ZMYWeIRywXwGim5BbYKsh4uX8=;
h=From:To:Reply-To:Date:Subject:From;
b=57aSA32/dXfUmojLtXCnMDqXeFH0iAvKs1U/vLB67DAV9MSNAh2yJ+3R/mD06hOj/
9loHpXdreRI7JeIrgP1H8neLKZw9IFQgG//p4oFA2l8l9/ql6a9D1kMO4E6pO7Gy59
QHwOpJ37RDARPJWTPLrUWQjyPbyE5JPB5xubC6h9QEQTxlAh2Pw4ZJRIARzuNJvwuH
FqJ47VwDzYs12gwSHvnFDbggXivEqnYFzveEnOaXyGksWPKhho7gWLU1OKsfmOGZeB
db0Hp+tE8SzcJ5DjrDqDfjhsDZiEkukPuR1Mss11ZdIMX7IX7mh1wkY8yFMhzs5R5i
p2IOIxbmlK00A==
From: "Concordia.50" <notificacao93@concordia7400rl.auditoria.biz>
To: producao@lrsys.com.br
Content-Type: multipart/alternative; boundary="Zx6DQksAoT1HAWdGyfHUCyMpXU5x8A9=_S"
MIME-Version: 1.0
Reply-To: gj4pih2bd@concordia7400rl.auditoria.biz
Date: Fri, 28 Feb 2025 14:07:54 -0300
Message-Id: <20250228170754.738B62236C@concordia7400rl.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado(a),producao@lrsys.com.br
Confirmamos o recebimento do protocolo 585952372 referente à Baixa de Débitos.
O documento foi registrado com sucesso pela SEFAZ-DFAZ-CTDA - Tributação
e Dívida Ativa na data de 28/02/2025.
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: hvvc.us]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: auditoria.biz]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.208.52 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.208.52 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.2 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject: ***SPAM*** 93091586 - Acompanhe o Protocolo 585952372 - SEFAZ e Divida Ativa
This is a multi-part message in MIME format
--Zx6DQksAoT1HAWdGyfHUCyMpXU5x8A9=_S
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--Zx6DQksAoT1HAWdGyfHUCyMpXU5x8A9=_S
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--Zx6DQksAoT1HAWdGyfHUCyMpXU5x8A9=_S--