| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <fiscalnyh319.cliente@protonmail.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id UBf3KA4fxmdARAAAIWsJAg
(envelope-from <fiscalnyh319.cliente@protonmail.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 03 Mar 2025 18:28:46 -0300
Return-path: <fiscalnyh319.cliente@protonmail.com>
Envelope-to: amoxerifado@lrsys.com.br
Delivery-date: Mon, 03 Mar 2025 18:28:46 -0300
Received: from admin58.batidadeamendoim.sbs ([5.161.70.27]:50326)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <fiscalnyh319.cliente@protonmail.com>)
id 1tpDL7-000000004Yg-3hyH
for amoxerifado@lrsys.com.br;
Mon, 03 Mar 2025 18:28:46 -0300
Received: from admin58.batidadeamendoim.sbs (localhost [127.0.0.1])
by admin58.batidadeamendoim.sbs (Postfix) with ESMTP id 8812146094
for <amoxerifado@lrsys.com.br>; Mon, 3 Mar 2025 18:28:00 -0300 (-03)
From: "Pagbank" <fiscalnyh319.cliente@protonmail.com>
To: amoxerifado@lrsys.com.br
Content-Type: multipart/alternative; boundary="EYUgRtoeTvRZMkv5cYj3Zs1owhps=_Kp9i"
MIME-Version: 1.0
Reply-To: ves08f4f0wvayh01m71@protonmail.com
Date: Mon, 3 Mar 2025 18:28:00 -0300
Message-Id: <20250303212800.8812146094@admin58.batidadeamendoim.sbs>
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Pagamento aprovado!
Olá!
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 160.host.secureserver.net]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6611]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.70.27 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fiscalnyh319.cliente[at]protonmail.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ves08f4f0wvayh01m71[at]protonmail.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.70.27 listed in sa-trusted.bondedsender.org]
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 SPOOFED_FREEMAIL No description available.
2.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** Seu pagamento foi aprovado! Protocolo-00060156040
This is a multi-part message in MIME format
--EYUgRtoeTvRZMkv5cYj3Zs1owhps=_Kp9i
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--EYUgRtoeTvRZMkv5cYj3Zs1owhps=_Kp9i
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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==
--EYUgRtoeTvRZMkv5cYj3Zs1owhps=_Kp9i--