| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <gvxev@vfir68.conexaomktbr.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id 7V8GNvf2rWYYMgAAIWsJAg
(envelope-from <gvxev@vfir68.conexaomktbr.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 03 Aug 2024 06:23:03 -0300
Return-path: <gvxev@vfir68.conexaomktbr.com>
Envelope-to: faturamento@lrsys.com.br
Delivery-date: Sat, 03 Aug 2024 06:23:03 -0300
Received: from vfir68.conexaomktbr.com ([57.129.34.187]:39166)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <gvxev@vfir68.conexaomktbr.com>)
id 1saAyY-0003KO-1m
for faturamento@lrsys.com.br;
Sat, 03 Aug 2024 06:23:03 -0300
Received: from localhost (localhost [IPv6:::1])
by vfir68.conexaomktbr.com (Postfix) with UTF8SMTP id CBDDD21A25
for <faturamento@lrsys.com.br>; Sat, 3 Aug 2024 09:21:20 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=vfir68; d=vfir68.conexaomktbr.com; t=1722676880;
h=from:subject:date:message-id:to:mime-version:content-type:
user-agent:x-mailer:content-language;
bh=kA0Q871cTxE6BNbHUt3ACW21LbecRAVAZWutbhcnu3I=;
b=hX6PuMU2oSB5wWpSkOqx3KQlHtuD2aKx/KfC+Chb6WRsMNrmWIhu2IjpmBoqIfJT0IOEGr
jRVzKsOyKjXTueQmV6aTWUYR8FqrXiKS1pC+U3mOKxr3pawYit1l+XB8TCr1iEQD3khasU
aN7TWLOtpFNiP/uaYWlIgAcD/beySjXOiiYdF/vyhksUNypXh1YEUMLfzj2iFN+ljhc14G
owEJ4WmT5/ghoiXkCa6aTT35Abv/4Rruf1qSknwaqa3cDB43moyxIv5jmLp6WHABH79wPN
A4x0FQSZHOJuzTiJNTdAf96QboHTN1L0Ibl+deDQeuD3nMkH9WjsYxOmcGCBzg==
X-Mailer: Mutt/1.10.1 (2018-07-13)
User-Agent: Mutt/1.10.1 (2018-07-13)
Message-Id: <6bf4f03eb8b3547e01b640d6d2a19ce4@vfir68.conexaomktbr.com>
MIME-Version: 1.0
From: "LimpMax" <gvxev@vfir68.conexaomktbr.com>
To: <faturamento@lrsys.com.br>
Content-Type: multipart/alternative;
boundary=93cfe706515a75193a457f5512549592cf495c14703cade7d66f1d262941
Date: Sat, 03 Aug 2024 09:21:20 +0000
X-Spam-Status: Yes, score=14.8
X-Spam-Score: 148
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Confirme o cancelamento da fatura abaixo. Fatura https://xek99.app.goo.gl/HYLNgouq4p4r4SBe7
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: goo.gl]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: conexaomktbr.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.129.34.187 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[57.129.34.187 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?Q2FuY2VsYW1lbnRvIGRhIGZhdHVyYQ==?=
--93cfe706515a75193a457f5512549592cf495c14703cade7d66f1d262941
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPGh0bWw+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
PGhlYWQ+CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPHA+Q29uZmlybWUg
byBjYW5jZWxhbWVudG8gZGEgZmF0dXJhIGFiYWl4by48L3A+CgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCjxhIGhyZWY9Imh0dHBzOi8veGVrOTkuYXBwLmdvby5nbC9IWUxOZ291cTRwNHI0
U0JlNyI+RmF0dXJhPC9hPjwvZGl2PgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKPC9ib2R5PgoKCgoK
CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoK
CgoKCgoKCgoKPC9odG1sPgo=
--93cfe706515a75193a457f5512549592cf495c14703cade7d66f1d262941
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly94ZWs5OS5hcHAuZ29vLmdsL0hZTE5nb3VxNHA0cjRTQmU3
--93cfe706515a75193a457f5512549592cf495c14703cade7d66f1d262941--