| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <94725.noreplay@atendimento.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id hOSQMNYj1Wf8agAAIWsJAg
(envelope-from <94725.noreplay@atendimento.golfinhorosa.coupons>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 03:53:10 -0300
Return-path: <94725.noreplay@atendimento.golfinhorosa.coupons>
Envelope-to: tesouraria@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 03:53:10 -0300
Received: from atendimento.golfinhorosa.coupons ([37.27.247.115]:41606)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <94725.noreplay@atendimento.golfinhorosa.coupons>)
id 1ttLOK-0000000077J-3nDQ
for tesouraria@lrsys.com.br;
Sat, 15 Mar 2025 03:53:09 -0300
Received: from atendimento.golfinhorosa.coupons (localhost [127.0.0.1])
by atendimento.golfinhorosa.coupons (Postfix) with ESMTP id CE11021C74
for <tesouraria@lrsys.com.br>; Sat, 15 Mar 2025 03:52:22 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=atendimento.golfinhorosa.coupons; s=default; t=1742021542;
bh=3h9o+aZLIoQVMb1kfeqn1kq0kIGAFaPj6UrVlX7TvlY=;
h=From:To:Reply-To:Date:Subject:From;
b=bh6V6NmVSN0paVm+bl//ZqSjVU/q1DGrVgKkxp/5iWCj4N4K79ZOkAd09fpUOyjOv
QjKSZ3UpBK5v6rrg4Cmn8xKdgrtTZtj63RgNJTdmBHU7+TTSmnRnKqy/zDI6iAX8mQ
Q1Xnv1waJiPfckOa27w3xt0xeYNnkBfsSiFyDUuL6DetIOkPTxxis0D7fn0ry+KOhj
cZheUiMjYfOwYlgFrRpcOfXlkZtGp1hmVr63ajQlLjiOnFMp/Gy0UY0GwUTRjZc3zw
cp8+R0zJLXqgnTHHFJhnWBYMb/wcnideWBoyrF1HCjZqX6SK7mqD6MRJ5T2I2jpLaW
8VQvOauU2SuTA==
From: "Legislacao Contabil" <94725.noreplay@atendimento.golfinhorosa.coupons>
To: tesouraria@lrsys.com.br
Content-Type: multipart/alternative; boundary="T25JoTdN=_EMM7aVY26I5et1GDEjWDIpB7"
MIME-Version: 1.0
Reply-To: nbesois2cug@atendimento.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 03:52:22 -0300
Message-Id: <20250315065222.CE11021C74@atendimento.golfinhorosa.coupons>
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado Cliente
tesouraria@lrsys.com.br
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: golfinhorosa.coupons]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: golfinhorosa.coupons]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[37.27.247.115 listed in psbl.surriel.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.247.115 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.247.115 listed in bl.score.senderscore.com]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
X-Spam-Flag: YES
Subject: ***SPAM*** Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
Nacional, IR e etc - Brasil). ref: GNJh4yNOV
This is a multi-part message in MIME format
--T25JoTdN=_EMM7aVY26I5et1GDEjWDIpB7
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--T25JoTdN=_EMM7aVY26I5et1GDEjWDIpB7
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--T25JoTdN=_EMM7aVY26I5et1GDEjWDIpB7--