| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././././mail/.spam/new/ |
Upload File : |
Return-Path: <46629.contabil@ecm42.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id NF7aGlcw1We9eAAAIWsJAg
(envelope-from <46629.contabil@ecm42.golfinhorosa.coupons>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 04:46:31 -0300
Return-path: <46629.contabil@ecm42.golfinhorosa.coupons>
Envelope-to: recepcao@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 04:46:31 -0300
Received: from ecm42.golfinhorosa.coupons ([37.27.244.178]:38968)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <46629.contabil@ecm42.golfinhorosa.coupons>)
id 1ttMDy-00000000821-0ZSy
for recepcao@lrsys.com.br;
Sat, 15 Mar 2025 04:46:31 -0300
Received: from ecm42.golfinhorosa.coupons (localhost [127.0.0.1])
by ecm42.golfinhorosa.coupons (Postfix) with ESMTP id 5A33525207
for <recepcao@lrsys.com.br>; Sat, 15 Mar 2025 04:45:40 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=ecm42.golfinhorosa.coupons; s=default; t=1742024740;
bh=p2jjxU3CgPPax1OIYuBUdwcxXWroJWrFgUGC5Q2h9Dk=;
h=From:To:Reply-To:Date:Subject:From;
b=IThpe0XGJKWNt1oCC1GAiOtKqg4aQKbEfxlsFFmxRS2aJgfp58tTCsBlY58NNypHx
+nsaVR2ZHpB1Q8n3oGzepIxA2heOl/7tUj4Q0tUlsGnfxMvNNTd3k9UUeCRzVGTtnq
VQDmPH09kImVDvjHyW6DflJFNXIsiw6T1KslOYjleUcCAnTKWZ3SticlGVH0YfqoxN
ybza80weOMqeUyMBRi9GRr4bSXSTr7czzZtJnkbbK1aHtPCkM8onnCy5oMfOH8bq5t
eDtI/vUoXnzapZCwc4yMcoxhrEKX46K4JBK0I8rLKVvj0GBQnNm41HaUR/36TXcZZG
XV9YSnsF1l0Lg==
From: "Legislacao Contabil" <46629.contabil@ecm42.golfinhorosa.coupons>
To: recepcao@lrsys.com.br
Content-Type: multipart/alternative; boundary="Tn=_hqg5I5KyBxhnj20lW17iWidS5bJf5C"
MIME-Version: 1.0
Reply-To: v8ob@ecm42.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 04:45:40 -0300
Message-Id: <20250315074540.5A33525207@ecm42.golfinhorosa.coupons>
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado Cliente
recepcao@lrsys.com.br
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: golfinhorosa.coupons]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: golfinhorosa.coupons]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?37.27.244.178>]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.244.178 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.244.178 listed in bl.score.senderscore.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
X-Spam-Flag: YES
Subject: ***SPAM*** Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
Nacional, IR e etc - Brasil). ref: 9Rg6UJHEA0V
This is a multi-part message in MIME format
--Tn=_hqg5I5KyBxhnj20lW17iWidS5bJf5C
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--Tn=_hqg5I5KyBxhnj20lW17iWidS5bJf5C
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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=
--Tn=_hqg5I5KyBxhnj20lW17iWidS5bJf5C--