| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <wgegg@jggh1.spyseguro.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id wE2QIPyEnWWOEwAAIWsJAg
(envelope-from <wgegg@jggh1.spyseguro.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Tue, 09 Jan 2024 14:40:12 -0300
Return-path: <wgegg@jggh1.spyseguro.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Tue, 09 Jan 2024 14:40:12 -0300
Received: from jggh1.spyseguro.com ([178.128.114.12]:48386)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <wgegg@jggh1.spyseguro.com>)
id 1rNG59-0001Jk-0h
for financeiro@lrsys.com.br;
Tue, 09 Jan 2024 14:40:12 -0300
Received: from localhost (localhost [127.0.0.1])
by jggh1.spyseguro.com (Postfix) with UTF8SMTP id E0D7D2185B
for <financeiro@lrsys.com.br>; Tue, 9 Jan 2024 17:38:18 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=jggh1; d=jggh1.spyseguro.com; t=1704821898; h=from:subject:date:
message-id:to:mime-version:content-type:accept-language:user-agent:
x-mailer:x-sender:content-language:list-unsubscribe;
bh=/zcO+uO2rUO2y00JrLj+EE3vEUhw5cAlHRwRGWWX8GY=;
b=bGKKDl+2Lc7eGdtpJpQsuJSeZiRZz4S/TSORXbq6TZL79PGWff2R6/X/V3MwD13pE/UoAq
tkDjBSX4CybWylsp2QOW5FSwrd26EF4bLlBAaopzmmuer62yJMP/XzrtEWglqHLPfC0HVu
YAtWjcmcESn9SnreMojqDsH3YmWMb5P3h6Po+qg6Glc2Ic1sQnvvNvdVC7l6rditSsDMxn
bDcWNg3TQfymFs2XFKA8pTAp/ViLgpLrGmMwu74IKt7ndY3DFT68Loz3cgsILrM8fxEBIT
4meDRXR17o1TNUOC4Ss2igvabOayNf+9dO/9tnV+1O8OenyGaGjHvZi9YTKDbw==
List-Unsubscribe:
<https://jggh1.spyseguro.com/?action=unsubscribe&u=financeiro@lrsys.com.br>
User-Agent: Roundcube Webmail/1.4.11
Accept-Language: pt-BR, en-US
Message-Id: <7b686f205e40cf018629973ffa69b978@jggh1.spyseguro.com>
Date: Tue, 09 Jan 2024 17:38:18 +0000
MIME-Version: 1.0
From: "Analista Financeiro" <wgegg@jggh1.spyseguro.com>
X-Sender: wgegg@jggh1.spyseguro.com
X-Mailer: Roundcube Webmail/1.4.11
Content-Language: pt-BR
Content-Type: multipart/alternative;
boundary=98dde0e0a6611a9a3babe8af21ab072ffbd68440883d0c92550ec3e2a3fc
To: <financeiro@lrsys.com.br>
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 73440217 Boa tarde! Informo o desligamento dos funcionários
abaixo, que ocorreram no dia 09/01/2024.
Content analysis details: (19.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: goo.gl]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: spyseguro.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[178.128.114.12 listed in dnsbl.sorbs.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
1.0 KAM_HTMLNOISE Spam containing useless HTML padding
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RGVzbGlnYW1lbnRvcyAtIDA5LzAxLzIwMjQ=?=
--98dde0e0a6611a9a3babe8af21ab072ffbd68440883d0c92550ec3e2a3fc
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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--98dde0e0a6611a9a3babe8af21ab072ffbd68440883d0c92550ec3e2a3fc
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
Qm9hIHRhcmRlIQ0KDQogSW5mb3JtbyBvIGRlc2xpZ2FtZW50byBkb3MgZnVuY2lvbsOhcmlvcyBh
YmFpeG8sIHF1ZSBvY29ycmVyYW0gbm8gZGlhIDA5LzAxLzIwMjQuDQoNCiBTZWd1ZSBlbSBhbmV4
byBhcyBpbmZvcm1hw6fDtWVzLg0KDQogaHR0cHM6Ly9qYTJyNy5hcHAuZ29vLmdsL2tiTUZQN3FC
ZmpKZXppaWY2IEF0dCwNCg0KIFRhbWFyYSBNb3VyYQ0KDQogRGVwYXJ0YW1lbnRvIFBlc3NvYWwg
DQoNCg0KDQoNCg0KDQoNCg0Kbl82NzBhODI2OC0zNmVjLTQ1YzAtYjNjOC1jZTMwYmNmNjgwYzMg
--98dde0e0a6611a9a3babe8af21ab072ffbd68440883d0c92550ec3e2a3fc--