| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <fiscalidheclh371.cliente@protonmail.com>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id sBp6JLspxmf6TwAAIWsJAg
(envelope-from <fiscalidheclh371.cliente@protonmail.com>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Mon, 03 Mar 2025 19:14:19 -0300
Return-path: <fiscalidheclh371.cliente@protonmail.com>
Envelope-to: gerencia@lrsys.com.br
Delivery-date: Mon, 03 Mar 2025 19:14:19 -0300
Received: from admin4.tiquirabee.sbs ([5.161.252.32]:41070)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <fiscalidheclh371.cliente@protonmail.com>)
id 1tpE3C-000000005Y3-2IrE
for gerencia@lrsys.com.br;
Mon, 03 Mar 2025 19:14:19 -0300
Received: from admin4.tiquirabee.sbs (localhost [127.0.0.1])
by admin4.tiquirabee.sbs (Postfix) with ESMTP id B4B06405C
for <gerencia@lrsys.com.br>; Mon, 3 Mar 2025 19:13:33 -0300 (-03)
From: "Pagbank" <fiscalidheclh371.cliente@protonmail.com>
To: gerencia@lrsys.com.br
Content-Type: multipart/alternative; boundary="S7J7=_KcRTEvyopL3clzNh8Mh3nZsf168j"
MIME-Version: 1.0
Reply-To: w0cpdx7u@protonmail.com
Date: Mon, 3 Mar 2025 19:13:33 -0300
Message-Id: <20250303221333.B4B06405C@admin4.tiquirabee.sbs>
X-Spam-Status: Yes, score=10.1
X-Spam-Score: 101
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Pagamento aprovado!
Olá!
Content analysis details: (10.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: pagseguro.com.br]
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6710]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.252.32 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[5.161.252.32 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[fiscalidheclh371.cliente[at]protonmail.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.5 KAM_DMARC_QUARANTINE DKIM has Failed or SPF has failed on the
message and the domain has a DMARC
quarantine policy
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.8 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 SPOOFED_FREEMAIL No description available.
2.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail
reply-to
X-Spam-Flag: YES
Subject: ***SPAM*** Seu pagamento foi aprovado! Protocolo-00026188423
This is a multi-part message in MIME format
--S7J7=_KcRTEvyopL3clzNh8Mh3nZsf168j
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--S7J7=_KcRTEvyopL3clzNh8Mh3nZsf168j
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--S7J7=_KcRTEvyopL3clzNh8Mh3nZsf168j--