| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <gerente@niwd67.mascarotour.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id WRTYED43VGY+RwAAIWsJAg
(envelope-from <gerente@niwd67.mascarotour.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 27 May 2024 04:33:18 -0300
Return-path: <gerente@niwd67.mascarotour.com>
Envelope-to: marketing@lrsys.com.br
Delivery-date: Mon, 27 May 2024 04:33:18 -0300
Received: from [54.37.78.237] (port=60562 helo=niwd67.mascarotour.com)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <gerente@niwd67.mascarotour.com>)
id 1sBUr2-0004jq-2f
for marketing@lrsys.com.br;
Mon, 27 May 2024 04:33:18 -0300
Received: (Haraka outbound); Mon, 27 May 2024 07:32:29 +0000
Authentication-Results: niwd67.mascarotour.com;
auth=pass (login)
From: "ConceitoPag" <gerente@niwd67.mascarotour.com>
To: <marketing@lrsys.com.br>
List-Unsubscribe:
<https://niwd67.mascarotour.com/?action=unsubscribe&u=marketing@lrsys.com.br>
Content-Language: pt-BR
Date: Mon, 27 May 2024 07:32:29 +0000
MIME-Version: 1.0
Message-Id: <52516c49698fc48343bbec759df960e0@niwd67.mascarotour.com>
Content-Type: multipart/alternative;
boundary=e5e05ad3041cc4266450a35c699f49b152502aaaf5a3fec4ec11221b501c
Accept-Language: pt-BR, en-US
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=niwd67.mascarotour.com; s=may1716793385515;
h=subject:from:to;
bh=7vnwECcIT0SmdMPoM5ExsdUA4oLwLF5j1cQ1oJnZ/UA=;
b=m3NToszCEOdihK3KmTDh/3k4I7Kgjw1Lka+I4F7Q00+avcsSQzkTNDSwvIxc7qEkt6OwwT5KNb
De+mar3nNSiNf2k2+Dhro2nF+mtdtrrzaE9JQBXL0O0DbD4Ccbd8Bj01ZbOqoM89YlNjxh+hdQrU
6nYy2vMz98XWAbTm9Cyl4ABB08wPDJLrJjD06JptoJFzG8RqYlkLScxSvZHE8tzOdcM4I1PgsDq8
vL7LE4ha5AMj97z9ML9zPip4j45MCmis/79zcKDhWD/MykcdLW8meTOYS0dnr/uOrsdPJNuhHl1D
OGJT9TEf0FDqAgphOtlznYsMd3w/1FVzpBt19/1g==
X-Spam-Status: Yes, score=14.5
X-Spam-Score: 145
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 69103392548 Olá, Pagamento realizado pelo cnpj: 50.054.350/0001-50
Content analysis details: (14.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: windows.net]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: mascarotour.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: niwd67.mascarotour.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9999]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 0.9999]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.3 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?UmVjUGFn?=
--e5e05ad3041cc4266450a35c699f49b152502aaaf5a3fec4ec11221b501c
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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--e5e05ad3041cc4266450a35c699f49b152502aaaf5a3fec4ec11221b501c
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly8yNzA2MjAyNC5ibG9iLmNvcmUud2luZG93cy5uZXQvd2ViL2luZGV4Lmh0bWw/aWQ9
MjUwDQoNCg0KDQoNCg0KDQoNCg0K
--e5e05ad3041cc4266450a35c699f49b152502aaaf5a3fec4ec11221b501c--