Return-Path: <root@xc39.rpirescontabil.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id CK6sIfKBRGFYPgAAIWsJAg
	(envelope-from <root@xc39.rpirescontabil.com>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 17 Sep 2021 08:54:26 -0300
Return-path: <root@xc39.rpirescontabil.com>
Envelope-to: atendimento@lrsys.com.br
Delivery-date: Fri, 17 Sep 2021 08:54:26 -0300
Received: from xc39.rpirescontabil.com ([5.188.35.201]:53266)
	by dedi-4363141.lrsys.com.br with esmtp (Exim 4.94.2)
	(envelope-from <root@xc39.rpirescontabil.com>)
	id 1mRCRh-000486-Rn
	for atendimento@lrsys.com.br; Fri, 17 Sep 2021 08:54:26 -0300
Received: by xc39.rpirescontabil.com (Postfix, from userid 0)
	id 26852129F38; Fri, 17 Sep 2021 03:11:08 +0000 (UTC)
MIME-Version: 1.0
Content-type:  text/html; charset=UTF-8
Content-Transfer-Encoding: base64
From: Pix Transferência recebida<contatopix@pixonline.com>
To: atendimento@lrsys.com.br
Message-Id: <20210917061313.26852129F38@xc39.rpirescontabil.com>
Date: Fri, 17 Sep 2021 03:11:08 +0000 (UTC)
X-Spam-Status: Yes, score=17.1
X-Spam-Score: 171
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  pix Prezado (a), comprovante da realização de um Pix Recebido
    
 Content analysis details:   (17.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: kgmcompressores.com]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?5.188.35.201>]
  1.5 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 URI_HEX                URI: URI hostname has long hexadecimal sequence
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
                             empty lines
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.6 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  Fwd: Você recebeu uma transferência pelo Pix! - Nº77881
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