| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <produto@sbgx20.mascarotour.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id uINjAZwSVWYGfwAAIWsJAg
(envelope-from <produto@sbgx20.mascarotour.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 27 May 2024 20:09:16 -0300
Return-path: <produto@sbgx20.mascarotour.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Mon, 27 May 2024 20:09:16 -0300
Received: from sbgx20.mascarotour.com ([157.245.60.27]:60240)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <produto@sbgx20.mascarotour.com>)
id 1sBjSo-0008Rj-0S
for financeiro@lrsys.com.br;
Mon, 27 May 2024 20:09:15 -0300
Received: (Haraka outbound); Mon, 27 May 2024 23:08:25 +0000
Authentication-Results: sbgx20.mascarotour.com;
auth=pass (login)
From: "ConceitoPags" <produto@sbgx20.mascarotour.com>
To: <financeiro@lrsys.com.br>
List-Unsubscribe:
<https://sbgx20.mascarotour.com/?action=unsubscribe&u=financeiro@lrsys.com.br>
Accept-Language: pt-BR, en-US
Date: Mon, 27 May 2024 23:08:25 +0000
MIME-Version: 1.0
Message-Id: <b028f1ba06366380eccb5556545b9259@sbgx20.mascarotour.com>
Content-Type: multipart/alternative;
boundary=445b4736ff73eba64af7536943574f56f64c1d7fe703c2b6004e74f39827
Content-Language: pt-BR
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=sbgx20.mascarotour.com; s=may1716849635289;
h=subject:from:to;
bh=M9h2qp3xnz0miHa7ANzxxUXqaOEZ/dzmYg6SKHdBvlk=;
b=qQmNlC0pul7H/j3R0ndBiL29pKKvTV01hXfZhEbsXuW7Ng7iSoRErcvDeGCTzrfhwOe9l7/EsW
FIs3aZPzeJWXwLo0gOaWTYbUvwOB19dp9jg92Ho6bou+W5BqlFJV49dSMN+O7zFAlK8X4rnfzV8o
xUeOTrK6MiAT4A7zx9aOuRloXtZgvX5h/UKqrOsi1KBzxZdF7zpH/mPO51gQ23Uy1NSxW4i9O46g
J28uGG4sZ9qSuWjwnrdt7ktkt+JV9S92AjU2zcr6+5YB7N16SySs/TqnbK8W8+LV74OD2uNEar+0
sYRh+iJdyY5qdxmDWAjUn1aUfW3DVY54nqGbGWtw==
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 73620551881 Olá, Nota N: 40.617
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: windows.net]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: mascarotour.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.3 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RmljaGEgcGFncw==?=
--445b4736ff73eba64af7536943574f56f64c1d7fe703c2b6004e74f39827
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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==
--445b4736ff73eba64af7536943574f56f64c1d7fe703c2b6004e74f39827
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
Q29uY2VpdG9QYWdzDQoNCiANCg0KDQoNCg0KDQoNCg0KDQpuX2U5MjNmOGNhLTk0ZjktNDkyZC04
Zjg1LWQyZmY4NmQ1YmE2OSA=
--445b4736ff73eba64af7536943574f56f64c1d7fe703c2b6004e74f39827--