| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <94983.noreplay@challeng.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id gBmjE3Yl1WePawAAIWsJAg
(envelope-from <94983.noreplay@challeng.golfinhorosa.coupons>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 04:00:06 -0300
Return-path: <94983.noreplay@challeng.golfinhorosa.coupons>
Envelope-to: info@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 04:00:06 -0300
Received: from challeng.golfinhorosa.coupons ([95.217.128.223]:54292)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <94983.noreplay@challeng.golfinhorosa.coupons>)
id 1ttLV3-000000007DW-0f0G
for info@lrsys.com.br;
Sat, 15 Mar 2025 04:00:06 -0300
Received: from challeng.golfinhorosa.coupons (localhost [127.0.0.1])
by challeng.golfinhorosa.coupons (Postfix) with ESMTP id E223E269C1
for <info@lrsys.com.br>; Sat, 15 Mar 2025 03:59:12 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=challeng.golfinhorosa.coupons; s=default; t=1742021952;
bh=W+KoYoAqMNHxiv4U3IiXsUcxM4/W8ciBHdlxYyz2/4o=;
h=From:To:Reply-To:Date:Subject:From;
b=JD5MFvZcDQADleYuUVvghs92ve8oW/uCv8pyO94RGWW6/RXTTRnVMnEYmQGWjnFeE
VlmlpyzRUS9SrQQC5svlpufbf0p+IJyz+U5AvSiOaovgTrLZgzOWJL+llocn5cfy1/
mmcJ4VRmDJizba0XiZTV1VI0azZ+HiIj31+C2feUuPPxb8bfmuJHFzlC171UajSmum
XTT62Au0MpHb0qUAXUVA2YGlKXQa7iHk+1eDzV1jfR1cIDdHQ4+2PEq1h4PupPOU5D
LWfJKCb2RkKxP/wUC6amARz2UgiY8mGX+nYaL6bVz6UpWRqivEfjO67J4ZS41gWJGT
mHTtrSrqhRUTQ==
From: "Legislacao Contabil" <94983.noreplay@challeng.golfinhorosa.coupons>
To: info@lrsys.com.br
Content-Type: multipart/alternative; boundary="N8WMEcDj8=_P5DhRTLTsSA8JaDbkYbFbOU"
MIME-Version: 1.0
Reply-To: rggrya1c@challeng.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 03:59:12 -0300
Message-Id: <20250315065912.E223E269C1@challeng.golfinhorosa.coupons>
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado Cliente
info@lrsys.com.br
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 37.host.secureserver.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: golfinhorosa.coupons]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?95.217.128.223>]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.217.128.223 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[95.217.128.223 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
X-Spam-Flag: YES
Subject: ***SPAM*** Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
Nacional, IR e etc - Brasil). ref: 7wl2Krc
This is a multi-part message in MIME format
--N8WMEcDj8=_P5DhRTLTsSA8JaDbkYbFbOU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--N8WMEcDj8=_P5DhRTLTsSA8JaDbkYbFbOU
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline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--N8WMEcDj8=_P5DhRTLTsSA8JaDbkYbFbOU--