| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <vaga159@express57.financeirorosa.biz>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id iyPYFrXpyWe4JQAAIWsJAg
(envelope-from <vaga159@express57.financeirorosa.biz>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Thu, 06 Mar 2025 15:30:13 -0300
Return-path: <vaga159@express57.financeirorosa.biz>
Envelope-to: contas@lrsys.com.br
Delivery-date: Thu, 06 Mar 2025 15:30:13 -0300
Received: from express57.financeirorosa.biz ([95.217.16.33]:42352)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <vaga159@express57.financeirorosa.biz>)
id 1tqFyy-000000002Ux-3G9W
for contas@lrsys.com.br;
Thu, 06 Mar 2025 15:30:13 -0300
Received: from express57.financeirorosa.biz (localhost [127.0.0.1])
by express57.financeirorosa.biz (Postfix) with ESMTP id 45B0B22A91
for <contas@lrsys.com.br>; Thu, 6 Mar 2025 15:29:27 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=express57.financeirorosa.biz; s=default; t=1741285767;
bh=zbYeHHGrfYjmRqynycQ2WpmV2yM9M/cIwO45RXRAz3Q=;
h=From:To:Reply-To:Date:Subject:From;
b=UJPRai4Vvif51P3aPc6eYKj/0Y0OdQ+OS8L1h/Tqf85CN1HR308HPoo898qnAoTr8
S/1RyswGS6ZMoR3XjtgrCqiSseAGGWBZOAlGBBCe2rd8/SUaSjIM88nA0zLDi8JGfo
gpn9OMTf0Hza4fqNh5b9e3baMQ5gdkg4CV2sJKWBtHthjgEst2uhyz7cq0+O2XXCtM
ojvo3LoWRQ6HvIVhNJpUikrQQ6rVn+Q+GYUkUbHCoIcs1UCqqyi49bkjSwwsaCBBIe
khZW34LYdp0DsYV+Tjhp5C9nyiqtq/xfvGNGe7mm7yFKI7/6J2+MfxtvOQwfabf2A6
2L0iGiD3cxJ8A==
From: "Katia Rocha" <vaga159@express57.financeirorosa.biz>
To: contas@lrsys.com.br
Content-Type: multipart/alternative; boundary="G45bRWDkdW8r7wkv6CKJ0u=_c7AVVkL4DK"
MIME-Version: 1.0
Reply-To: sy4@express57.financeirorosa.biz
Date: Thu, 6 Mar 2025 15:29:27 -0300
Message-Id: <20250306182927.45B0B22A91@express57.financeirorosa.biz>
X-Spam-Status: Yes, score=11.2
X-Spam-Score: 112
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Katia Rocha
Caro(a) contas@lrsys.com.br,
Content analysis details: (11.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: financeirorosa.biz]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: financeirorosa.biz]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.217.16.33 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.217.16.33 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
X-Spam-Flag: YES
Subject: ***SPAM*** CV:5445672025
This is a multi-part message in MIME format
--G45bRWDkdW8r7wkv6CKJ0u=_c7AVVkL4DK
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--G45bRWDkdW8r7wkv6CKJ0u=_c7AVVkL4DK
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--G45bRWDkdW8r7wkv6CKJ0u=_c7AVVkL4DK--