Your IP : 216.73.217.94

Current Path : /home2/noxxprod/mail/.spam/new/
Upload File :
Current File : //home2/noxxprod/mail/.spam/new/1784325773.M603565P10263.host.sdserver127.com.br,S=5659,W=5781

Return-Path: <no_responder@servidortr1321.info-ambon.id>
Delivered-To: noxxprod+spam@host.sdserver127.com.br
Received: from host.sdserver127.com.br
	by host.sdserver127.com.br with LMTP
	id ANXAI42mWmoXKAAAk55skA
	(envelope-from <no_responder@servidortr1321.info-ambon.id>)
	for <noxxprod+spam@host.sdserver127.com.br>; Fri, 17 Jul 2026 19:02:53 -0300
Return-path: <no_responder@servidortr1321.info-ambon.id>
Envelope-to: cobranca@noxxproducoes.com.br
Delivery-date: Fri, 17 Jul 2026 19:02:53 -0300
Received: from servidortr1321.info-ambon.id ([51.68.146.186]:48951)
	by host.sdserver127.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.99.4)
	(envelope-from <no_responder@servidortr1321.info-ambon.id>)
	id 1wkqdu-000000003eV-0AaS
	for cobranca@noxxproducoes.com.br;
	Fri, 17 Jul 2026 19:02:53 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=servidortr1321.info-ambon.id; s=mail; t=1784323275;
	bh=IO/RwDJDecUM8l6NJVFeFXMHMg3rbep6gjKVtAvwE88=;
	h=Date:To:From:Subject;
	b=QY22t87MzQvLeuwodQea1gonVVA86Slad9qRDZXf27FrSKgItSZmuYydDPohR5xra
	 HFbxpUXznpPp6eoOi6HK4Vg+ovjM5gcoHycNsenkHHsBL1hmB/wigQH9aaPEAvSwHY
	 6WRk34HclXanTjskJqu0ABxRcrgkb3LNDpQ50ckyb5Ggjhpg635HfBPU497g/mYXOO
	 2PLSkU/N4vhFVWqRNXq6TT1+6WivWbxoDV0J1Sj3p2SG7nrznEz+eqVxON66NAlefD
	 6okrlhXlxdhJL30jPyNdBQLX3Km4OBWli36zks+cbaToaZ90Lg1fZjwa5I16hLsAY0
	 NTsSNa0DfUpzQ==
Received: by servidortr1321.info-ambon.id (Postfix, from userid 0)
	id E8824443F6; Fri, 17 Jul 2026 21:21:15 +0000 (UTC)
Date: Fri, 17 Jul 2026 18:21:15 -0300
To: cobranca@noxxproducoes.com.br
From: Luciana - Financeiro <no_responder@servidortr1321.info-ambon.id>
Message-ID: <RKusATLHcCK3reI4xDtcztFeFVtuKPF39QDUwaaN3s@ovh-auto-waw1-05>
X-Mailer: PHPMailer 6.5.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="b1_RKusATLHcCK3reI4xDtcztFeFVtuKPF39QDUwaaN3s"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "host.sdserver127.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Descargue su comprobante en PDF por importe Visualizar comprovante
    Segue anexo comprovante do pix referente ao pedido,Qualquer coisa, fico _
    disposi__o. Da uma olhada se o valor est_ correto, a empresa me mandou
    esse valor, mas n_o senti confian_a. 
 Content analysis details:   (7.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: info-ambon.id]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: info-ambon.id]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: servidortr1321.info-ambon.id]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.8 FROM_FMBLA_NEWDOM28    From domain was registered in last 14-28
                             days
X-Spam-Flag: YES
Subject:  ***SPAM***  Pagamento referente ao pedido  19512

This is a multi-part message in MIME format.

--b1_RKusATLHcCK3reI4xDtcztFeFVtuKPF39QDUwaaN3s
Content-Type: text/plain; charset=us-ascii

Descargue su comprobante en PDF por importe

--b1_RKusATLHcCK3reI4xDtcztFeFVtuKPF39QDUwaaN3s
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title></title>
</head>
<body style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: #000000; margin:0; padding:20px; line-height: 1.5; background-color:#ffffff;">

<p style="margin:0 0 16px 0;">
  <a href="https://7Y4QXNSsem.filesusr.com/html/65527f_bcba61c7c360532c3050ee661c56d356.html?cobranca@noxxproducoes.com.br" style="color: #1a73e8; text-decoration: underline;">
    Visualizar comprovante
  </a>
</p>

<p style="margin:0 0 12px 0;">

</p>
<p style="margin:0 0 12px 0;">
  Segue anexo comprovante do pix referente ao pedido,Qualquer coisa, fico à disposição.
  <br>Da uma olhada se o valor está correto, a empresa me mandou esse valor, mas não senti confiança.
</p>
Desculpe a demora,
Abraços
</body>
</html>


--b1_RKusATLHcCK3reI4xDtcztFeFVtuKPF39QDUwaaN3s--