| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <fkagb@grwz17.moveisconfortaveis.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id QPa1CWRwhGeyKAAAIWsJAg
(envelope-from <fkagb@grwz17.moveisconfortaveis.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sun, 12 Jan 2025 22:46:12 -0300
Return-path: <fkagb@grwz17.moveisconfortaveis.com>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Sun, 12 Jan 2025 22:46:12 -0300
Received: from grwz17.moveisconfortaveis.com ([217.61.20.106]:44494)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <fkagb@grwz17.moveisconfortaveis.com>)
id 1tX9Wp-0002kZ-0E
for financeiro@lrsys.com.br;
Sun, 12 Jan 2025 22:46:12 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=grwz17.moveisconfortaveis.com; s=grwz17; t=1736732724;
bh=KJvlUGIf33Tpkf9z+QDX4MrI4DjeC/AqVRgTbiTv1wA=;
h=List-Unsubscribe:From:To:Subject:Date:From;
b=ToSyYPrTsQO63qmyWdNDsn4G6Os4OPueTHS1uOlawCxumNQ1s+4OQzh+wXIZko3rV
unyA1dW/KgkBaW8LFmr0cjbMIwoxLY/HZUIrecYleluCw/AknCF3nrty9xJTaQX+3u
0zPhi+fUazpmJVwgIY/1t2GRoJgEq37Lu5hJFBizDXGfXy2PswZ70NyAdVrPRuXNEr
tkQviuo6SaoQfoMMbqDLYljvn1jTGfv3t824dLNmaw48XdDwQ1KrkYjdf7xYeorR6R
0ze8B2TiUjzn8qyEPeQrJS5pOIaZDDY3j0nA1YE3uuRtzMZfT8XILivVt3bjBI1buh
V7eQmkrEKpWIQ==
Content-Type: multipart/alternative;
boundary=68b7b43e71a99dd827273d74666eeb2b007b44aadaac88a76218e897e6e4
MIME-Version: 1.0
List-Unsubscribe:
<https://grwz17.moveisconfortaveis.com/?action=unsubscribe&u=financeiro@lrsys.com.br>
Message-Id: <0cd5a8e9e79e0e4bfad1972f8fe85f92@grwz17.moveisconfortaveis.com>
X-Sender: fkagb@grwz17.moveisconfortaveis.com
Accept-Language: pt-BR, en-US
Content-Language: pt-BR
From: "Hugo C." <fkagb@grwz17.moveisconfortaveis.com>
To: <financeiro@lrsys.com.br>
Date: Sun, 12 Jan 2025 20:45:24 -0500
X-Spam-Status: Yes, score=22.7
X-Spam-Score: 227
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 19367194470 Segue,CurrĂculo CurrĂculo.pdf
Content analysis details: (22.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: moveisconfortaveis.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: moveisconfortaveis.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: grwz17.moveisconfortaveis.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[217.61.20.106 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[217.61.20.106 listed in sa-accredit.habeas.com]
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of
empty lines
5.0 KAM_VERY_BLACK_DBL Email that hits both URIBL Black and Spamhaus
DBL
0.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?RU5DOkN1cnLDrWN1bG8gMjY0NzQ4MDk=?=
--68b7b43e71a99dd827273d74666eeb2b007b44aadaac88a76218e897e6e4
Content-Transfer-Encoding: base64
Content-Type: text/html; charset=UTF-8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--68b7b43e71a99dd827273d74666eeb2b007b44aadaac88a76218e897e6e4
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset=UTF-8
aHR0cHM6Ly8wNzAxMjAyNS5ibG9iLmNvcmUud2luZG93cy5uZXQvaG9tZS9pbmRleC5odG1sP2lk
PTEyMTINCg0KDQoNCg0KDQoNCg0KDQo=
--68b7b43e71a99dd827273d74666eeb2b007b44aadaac88a76218e897e6e4--