| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <37014.boletim@comercial.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id iL45ERom1WfybAAAIWsJAg
(envelope-from <37014.boletim@comercial.golfinhorosa.coupons>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 04:02:50 -0300
Return-path: <37014.boletim@comercial.golfinhorosa.coupons>
Envelope-to: contas@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 04:02:50 -0300
Received: from comercial.golfinhorosa.coupons ([65.109.168.2]:55848)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <37014.boletim@comercial.golfinhorosa.coupons>)
id 1ttLXg-000000007Fz-26E3
for contas@lrsys.com.br;
Sat, 15 Mar 2025 04:02:49 -0300
Received: from comercial.golfinhorosa.coupons (localhost [127.0.0.1])
by comercial.golfinhorosa.coupons (Postfix) with ESMTP id 2965824CB7
for <contas@lrsys.com.br>; Sat, 15 Mar 2025 04:02:00 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=comercial.golfinhorosa.coupons; s=default; t=1742022120;
bh=+IgC5S/FDyVOi2a0xE1RKg0te72H5ARbvPNTr03GySQ=;
h=From:To:Reply-To:Date:Subject:From;
b=gFUqBW9crgSX6kn3pGlbDb1JmY8hn8zsCxD7iAXAQy0zptlj/x82unwYJR4WwrS/N
rONB5xv94s2CjYjQrBATZEqgllbapSoJ5y8ipnr2LuMH05bPesR5dxQco7hHHBqANN
PF5WnLuUjA36NzKhQok2FFs6nsd1jC3HuEpSeDC/EhZDlAlx4DRxy6m8BNxy2mp9vh
6dnHS6qMmYGAICGIkQ3GuXNtzDfopooCbHJcLIfLhY1BTaringkBju1K5fbeWRtZHP
1FekwAsFka0BdURFchPc5aCnzvhus9iejwlUxhmX7VuZ/+Q94BsVNm2Z+XJUimSgY6
8vsOKqcZIZe4w==
From: "Legislacao Contabil" <37014.boletim@comercial.golfinhorosa.coupons>
To: contas@lrsys.com.br
Content-Type: multipart/alternative; boundary="JwczbhfQ2AGtiROVGb=_EoNyTU8YmVH45Z"
MIME-Version: 1.0
Reply-To: numna6gk@comercial.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 04:02:00 -0300
Message-Id: <20250315070200.2965824CB7@comercial.golfinhorosa.coupons>
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado Cliente
contas@lrsys.com.br
Content analysis details: (12.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 37.host.secureserver.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: golfinhorosa.coupons]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?65.109.168.2>]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[65.109.168.2 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[65.109.168.2 listed in bl.score.senderscore.com]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
X-Spam-Flag: YES
Subject: ***SPAM*** Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
Nacional, IR e etc - Brasil). ref: nT33JMf9
This is a multi-part message in MIME format
--JwczbhfQ2AGtiROVGb=_EoNyTU8YmVH45Z
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--JwczbhfQ2AGtiROVGb=_EoNyTU8YmVH45Z
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--JwczbhfQ2AGtiROVGb=_EoNyTU8YmVH45Z--