| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <lacjb@qwns11.brechaturismobr.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id 2jNREeisAmbUSgAAIWsJAg
(envelope-from <lacjb@qwns11.brechaturismobr.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Tue, 26 Mar 2024 08:09:28 -0300
Return-path: <lacjb@qwns11.brechaturismobr.com>
Envelope-to: comercial@lrsys.com.br
Delivery-date: Tue, 26 Mar 2024 08:09:28 -0300
Received: from 23.40.73.34.bc.googleusercontent.com ([34.73.40.23]:34644 helo=qwns11.brechaturismobr.com)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <lacjb@qwns11.brechaturismobr.com>)
id 1rp4gD-0004xl-0M
for comercial@lrsys.com.br;
Tue, 26 Mar 2024 08:09:27 -0300
Received: from localhost (localhost [127.0.0.1])
by qwns11.brechaturismobr.com (Postfix) with UTF8SMTP id 2B57D3D9348
for <comercial@lrsys.com.br>; Tue, 26 Mar 2024 11:08:39 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=qwns11; d=qwns11.brechaturismobr.com; t=1711451319;
h=from:subject:date:message-id:to:mime-version:content-type:
accept-language:user-agent:x-mailer:x-sender:content-language:
list-unsubscribe; bh=MGncr9CxntEf0ZGy3D3qtEqzWwiBckTWP4o9lrOtQf0=;
b=BJQanuojbknBE6DR1CADuRNqzq4q3wETuEOAbTrm7pWOoPUiz96Lb4RjsNaZ8rSunnSqx7
XYMtFV4gpjBoJOl41AqEQyi2j73QP3k2albt2epbs+WmvEyFE6cHKS1Uj1P1FZTMuI6kBU
+Adcu3s0SL18AC6jbRQJv1Ou1Djzr3OCnF+OO9cYu1rc9fy5cWnSKNtyX3IXQjJU75bYMf
2B2yg6Nzxv5y3+FnEUCf6Nzugz+nM2LCy1EDTM/0VXFnvctaxqzAB4Tqx0D/5wieFVNsLp
BGqekWwn6ozxrDf8n0ISvrMHno5f9n5Z5Q6jwEOGULK2Zwi635CkXhHnln+tug==
X-Sender: lacjb@qwns11.brechaturismobr.com
Content-Type: multipart/alternative;
boundary=29dfe3247ea721d64b6c486197953f22a392db490e6ed8156d3e84b2fd9f
MIME-Version: 1.0
Message-Id: <457c1cf658abbaefaf6728fc628de778@qwns11.brechaturismobr.com>
Date: Tue, 26 Mar 2024 11:08:39 +0000
From: =?utf-8?q?Emite_F=C3=A1cil?= <lacjb@qwns11.brechaturismobr.com>
To: <comercial@lrsys.com.br>
Accept-Language: pt-BR, en-US
Content-Language: pt-BR
List-Unsubscribe:
<https://qwns11.brechaturismobr.com/?action=unsubscribe&u=comercial@lrsys.com.br>
X-Mailer: Roundcube Webmail/1.4.13
User-Agent: Roundcube Webmail/1.4.13
X-Spam-Status: Yes, score=16.9
X-Spam-Score: 169
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: spgoawaphcoihwexaw Olá, Segue Nota Fiscal Nº: 125755 .
Content analysis details: (16.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: windows.net]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: qwns11.brechaturismobr.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[34.73.40.23 listed in psbl.surriel.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: brechaturismobr.com]
0.0 TVD_RCVD_IP Message was received from an IP address
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
1.0 KAM_HTMLNOISE Spam containing useless HTML padding
X-Spam-Flag: YES
Subject: ***SPAM*** Segue Nota Fiscal do teu Pedido
--29dfe3247ea721d64b6c486197953f22a392db490e6ed8156d3e84b2fd9f
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
<html>
<head>
<title>spgoawaphcoihwexaw</title>
<style></style></head>
<body>
<p>Ol=C3=A1,</p>
<p>Segue Nota Fiscal N=C2=BA: 125755 .</p>
<br>
<p><a href=3D"https://210302024.blob.core.windows.net/web/index.html?id=3D1=
01">Arquivo PDF</a></p>
<p><a href=3D"https://210302024.blob.core.windows.net/web/index.html?id=3D1=
01">Arquivo XML</a></p>
<br>
<p>Att, Emite F=C3=A1cil</p>
</body>
<br><br><br><br><br><br><br><br><br><font color=3D"#E6E6E6">n_91c7c290-e0d0=
-49e4-a827-9d876f0971a0</font></html>
--29dfe3247ea721d64b6c486197953f22a392db490e6ed8156d3e84b2fd9f
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Ol=C3=A1,
Segue Nota Fiscal N=C2=BA: 125755 .
=20
https://210302024.blob.core.windows.net/web/index.html?id=3D101 https://21=
0302024.blob.core.windows.net/web/index.html?id=3D101=20
Att, Emite F=C3=A1cil
=20
n_91c7c290-e0d0-49e4-a827-9d876f0971a0=20
--29dfe3247ea721d64b6c486197953f22a392db490e6ed8156d3e84b2fd9f--