| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <vaga37@express6125.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id MFliKEX0yWdGMQAAIWsJAg
(envelope-from <vaga37@express6125.financeirorosa.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 16:15:17 -0300
Return-path: <vaga37@express6125.financeirorosa.biz>
Envelope-to: compras@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 16:15:17 -0300
Received: from express6125.financeirorosa.biz ([157.180.37.64]:56402)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <vaga37@express6125.financeirorosa.biz>)
id 1tqGga-000000003Ol-0Nxb
for compras@lrsys.com.br;
Thu, 06 Mar 2025 16:15:17 -0300
Received: from express6125.financeirorosa.biz (localhost [127.0.0.1])
by express6125.financeirorosa.biz (Postfix) with ESMTP id EE80D216EE
for <compras@lrsys.com.br>; Thu, 6 Mar 2025 16:14:29 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=express6125.financeirorosa.biz; s=default; t=1741288469;
bh=9GMsx0zvk3UeHiXfoYNW4VF+myMG1ja+LO8w73V4sZQ=;
h=From:To:Reply-To:Date:Subject:From;
b=PrXfDlxRbaShrCLNL/sfX5MF7gPSOPLHyR0FG9t8rZOfUp55jDF6ml+QOHWH4loJu
hpsYBUBQzintZXWrtZgPW7CTRxMG6bHpfXzozCw1oaSBO0TljxO4cFnIOuBIVcmaD2
+z/E5RQXxwDWuGzGo9huj9c1t4nHQVjQPHqqRIGa0RUg82qAhDci55H50IraTwTpdg
KqO4gS+qmbR0ZwduPS0tCpUJZG5Zj8YUSAV8co9Y0VkQiJ4FJi85iuLRJAIfPGaxEV
TKjFwosepvZOTPl9LBeN1G/SjE+YHv+pq73xDtbU2b6Y33nMh3owWuCxxqLXAwV9UI
OL7PCQIp/Tz3g==
From: "Priscila Dantas" <vaga37@express6125.financeirorosa.biz>
To: compras@lrsys.com.br
Content-Type: multipart/alternative; boundary="KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl"
MIME-Version: 1.0
Reply-To: n5mx@express6125.financeirorosa.biz
Date: Thu, 6 Mar 2025 16:14:29 -0300
Message-Id: <20250306191429.EE80D216EE@express6125.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Priscila Dantas
Caro(a) compras@lrsys.com.br,
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: financeirorosa.biz]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: financeirorosa.biz]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.180.37.64 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.180.37.64 listed in sa-trusted.bondedsender.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
X-Spam-Flag: YES
Subject: ***SPAM*** CV:527942622025
This is a multi-part message in MIME format
--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--KXl=_yQGXeF65uR8E8JPq6MdwhYU52tuCl--