| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <nao-responder943@concordia3623zz.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id qOIzKN4gwmf1DAAAIWsJAg
(envelope-from <nao-responder943@concordia3623zz.auditoria.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 17:47:26 -0300
Return-path: <nao-responder943@concordia3623zz.auditoria.biz>
Envelope-to: amoxerifado@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 17:47:26 -0300
Received: from concordia3623zz.auditoria.biz ([5.161.242.91]:57698)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <nao-responder943@concordia3623zz.auditoria.biz>)
id 1to7GU-00012v-3B
for amoxerifado@lrsys.com.br;
Fri, 28 Feb 2025 17:47:26 -0300
Received: from concordia3623zz.auditoria.biz (localhost [127.0.0.1])
by concordia3623zz.auditoria.biz (Postfix) with ESMTP id 7072A22579
for <amoxerifado@lrsys.com.br>; Fri, 28 Feb 2025 17:46:41 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=concordia3623zz.auditoria.biz; s=default; t=1740775601;
bh=9e/IZNVndDIQ7uhxsD1a5zLPui/PJ5q5bG7/6NUExXU=;
h=From:To:Reply-To:Date:Subject:From;
b=KAn3jfX+c3oGXV8WKAhyfwdENRD3IgD42Pk2AJIvompKgDhnxRJpikyl/qdCOG3Hf
xWeApF+EMpX0fFU4hwXjtSz6XmhVx7hYW4HSDSXvEwFA7t5ccFNsU+2dej953kNCCt
3zw7JNMOCJFx9gL/7FlmSQn6ChNO06+jiEM3AD3bd5prMTdqtQfkvGWnmh4q2T/wcX
Rpp3XLrsvyThzer1xQuUJDv68uGmJOIAQrQbhhL7n5yynDI03OUMmjJ4MllzOGHWKh
0GfqNV8WezrzOKfptFsnIcWn02+7XFTQZQB0ya4EJwiWa7XplBwuqLZB+7IbV6Wf0B
GALWiyC2bfBOA==
From: "SETOR60" <nao-responder943@concordia3623zz.auditoria.biz>
To: amoxerifado@lrsys.com.br
Content-Type: multipart/alternative; boundary="4YYj=_N2VYmB7g2D6fr34YUfuCRwgs6fhA"
MIME-Version: 1.0
Reply-To: bpa@concordia3623zz.auditoria.biz
Date: Fri, 28 Feb 2025 17:46:41 -0300
Message-Id: <20250228204641.7072A22579@concordia3623zz.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Seu documento
foi finalizado Acessar o documento Olá amoxerifado@lrsys.com.br,
Content analysis details: (10.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: hvvc.us]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: auditoria.biz]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.242.91 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.242.91 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.2 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?8J+TnSBTZXUgZG9jdW1lbnRvIGZvaSBmaW5hbGl6YWRv?=
This is a multi-part message in MIME format
--4YYj=_N2VYmB7g2D6fr34YUfuCRwgs6fhA
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--4YYj=_N2VYmB7g2D6fr34YUfuCRwgs6fhA
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--4YYj=_N2VYmB7g2D6fr34YUfuCRwgs6fhA--