Return-Path: <nao-responder376253@concordia804mp.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id iDTMJvYZwmcuBwAAIWsJAg
	(envelope-from <nao-responder376253@concordia804mp.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 17:17:58 -0300
Return-path: <nao-responder376253@concordia804mp.auditoria.biz>
Envelope-to: pessoal@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 17:17:58 -0300
Received: from concordia804mp.auditoria.biz ([178.156.158.150]:46958)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nao-responder376253@concordia804mp.auditoria.biz>)
	id 1to6ny-0000aX-2h
	for pessoal@lrsys.com.br;
	Fri, 28 Feb 2025 17:17:58 -0300
Received: from concordia804mp.auditoria.biz (localhost [127.0.0.1])
	by concordia804mp.auditoria.biz (Postfix) with ESMTP id 484082125C
	for <pessoal@lrsys.com.br>; Fri, 28 Feb 2025 17:17:13 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia804mp.auditoria.biz; s=default; t=1740773833;
	bh=/A99v9Z+bKbpQKtwj4sA3T8omluZF49xpv9A4Dq7vyw=;
	h=From:To:Reply-To:Date:Subject:From;
	b=pUWm1ySRmLkwDren4n9i83RE+D9oy5/A6pxEWS+LKk22LSGyCftwOdINrJ7//gZNa
	 AP8RxROktfKo5sJvFkxRzXHVcGM4n4WAzgAk8MnO0FE6AjBS2cWvloqBG1sPx/efsL
	 56TrypmGrCdebHrNwTswQlCwwXy3BKmuRKje5we24INwMhMymMVHbFmNgPAHvq4j1A
	 yJnh5z0urZBkofEVIgul67vkv2kJ1ItMI9Nq1SVoynfm/E11qcjIg2tC0qalWmJQ25
	 WgdmqAI6TSikj35ybsH9drcFWmKcJA6vNRqpDbRmEUTSQa8ZIZm6Ys0k4opWo2/BEC
	 hFfo5RG91PNUw==
From: "CE1" <nao-responder376253@concordia804mp.auditoria.biz>
To: pessoal@lrsys.com.br
Content-Type: multipart/alternative; boundary="4qfMyKg45RlJYydSpDFmMdkB=_3OW1rDWd"
MIME-Version: 1.0
Reply-To: qqo8t0@concordia804mp.auditoria.biz
Date: Fri, 28 Feb 2025 17:17:13 -0300
Message-Id: <20250228201713.484082125C@concordia804mp.auditoria.biz>
X-Spam-Status: Yes, score=10.7
X-Spam-Score: 107
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Documento assinado
    - Acesse agora Acessar o documento Olá pessoal@lrsys.com.br, 
 Content analysis details:   (10.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: auditoria.biz]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [178.156.158.150 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [178.156.158.150 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?4pyFIERvY3VtZW50byBhc3NpbmFkbw==?=  Protocolo: V325124X561

This is a multi-part message in MIME format

--4qfMyKg45RlJYydSpDFmMdkB=_3OW1rDWd
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--4qfMyKg45RlJYydSpDFmMdkB=_3OW1rDWd
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--4qfMyKg45RlJYydSpDFmMdkB=_3OW1rDWd--