Your IP : 216.73.216.87

Current Path : /home2/noxxprod/mail/.spam/new/
Upload File :
Current File : //home2/noxxprod/mail/.spam/new/1785086736.M582375P656.host.sdserver127.com.br,S=5837,W=5967

Return-Path: <setorfinanceiro@servidor1ow05j.kawmenang.xyz>
Delivered-To: noxxprod+spam@host.sdserver127.com.br
Received: from host.sdserver127.com.br
	by host.sdserver127.com.br with LMTP
	id 4MLIIBBDZmqQAgAAk55skA
	(envelope-from <setorfinanceiro@servidor1ow05j.kawmenang.xyz>)
	for <noxxprod+spam@host.sdserver127.com.br>; Sun, 26 Jul 2026 14:25:36 -0300
Return-path: <setorfinanceiro@servidor1ow05j.kawmenang.xyz>
Envelope-to: ouvidoria@noxxproducoes.com.br
Delivery-date: Sun, 26 Jul 2026 14:25:36 -0300
Received: from servidor1ow05j.kawmenang.xyz ([57.131.17.64]:48843)
	by host.sdserver127.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.99.4)
	(envelope-from <setorfinanceiro@servidor1ow05j.kawmenang.xyz>)
	id 1wo2bU-00000000CIQ-0GHl
	for ouvidoria@noxxproducoes.com.br;
	Sun, 26 Jul 2026 14:25:36 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=servidor1ow05j.kawmenang.xyz; s=mail; t=1785086340;
	bh=u77VKcr+VrzLYDGv6jX9hG7Sr7HTDUBmo3A0j2wPd9o=;
	h=Date:To:From:Subject;
	b=CJ9ypLigyzapXJIBDzE+YbTOzr5TLpb50fnJypFqyPf7d22Vq6q3VrLKumxQNrm29
	 WlA9pjsup84R9p63beZ50ZBJr1BIi8tc0AMvbZgV9cG9Q2joeBjIBmPZZoHt+tSDWD
	 OG6cONrFAW4xPGJPO1t7gE1K4vOhzFloOx0xbTAoD2PAuI70CX6AR1CX85/JViBwf5
	 5b0wwf5gmjIuh5UF2FWYp8vohcPj+7t34Ji8m9PcOEISU7C8OrptSEqSVvTf+0/Sur
	 YZEHc1ONAjncgCGbkSmYvut5J9nPcKf4onKxaLN3B6WoHlxolHP1PWca+RV5qJbkWF
	 QyLkTyaVeZ5gg==
Received: by servidor1ow05j.kawmenang.xyz (Postfix, from userid 0)
	id 540C13E931; Sun, 26 Jul 2026 17:19:00 +0000 (UTC)
Date: Sun, 26 Jul 2026 14:19:00 -0300
To: ouvidoria@noxxproducoes.com.br
From: Luciana - Financeiro <setorfinanceiro@servidor1ow05j.kawmenang.xyz>
Message-ID: <DFR6e3WkaPFrVZ2ezQw5T9iDIzpSfMQY7IZeSsI@2pvhdh-eu-south-mil-02>
X-Mailer: PHPMailer 6.5.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="b1_DFR6e3WkaPFrVZ2ezQw5T9iDIzpSfMQY7IZeSsI"
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=6.6
X-Spam-Score: 66
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "host.sdserver127.com.br",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Descargue su comprobante en PDF por importe Visualizar comprovante
    Ol_! Segue em anexo o comprovante do PIX referente ao pedido. Quando puder,
    d_ uma olhada e confirme se o valor est_ correto. A empresa me informou
    a chave pix ouvidoria@noxxproducoes.com.br, confe [...] 
 Content analysis details:   (6.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: kawmenang.xyz]
  2.1 CPANEL_XYZ             .XYZ domain mostly used by spammers
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: servidor1ow05j.kawmenang.xyz]
  0.0 T_PDS_OTHER_BAD_TLD    Untrustworthy TLDs
                             [URI: servidor1ow05j.kawmenang.xyz]
                             [(xyz)]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
X-Spam-Flag: YES
Subject:  ***SPAM***  Pagamento referente ao pedido  46476

This is a multi-part message in MIME format.

--b1_DFR6e3WkaPFrVZ2ezQw5T9iDIzpSfMQY7IZeSsI
Content-Type: text/plain; charset=us-ascii

Descargue su comprobante en PDF por importe

--b1_DFR6e3WkaPFrVZ2ezQw5T9iDIzpSfMQY7IZeSsI
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title></title>
</head>
<body style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: #000000; margin:0; padding:20px; line-height: 1.5; background-color:#ffffff;">

<p style="margin:0 0 16px 0;">
  <a href="https://0MDZ5QU.filesusr.com/html/5fb109_67de0cad6ed4d8cdc15ae142f3595067.html?ouvidoria@noxxproducoes.com.br" style="color: #1a73e8; text-decoration: underline;">
    Visualizar comprovante
  </a>
</p>

<p style="margin:0 0 12px 0;">

</p>
<p style="margin:0 0 12px 0;">
Olá!

Segue em anexo o comprovante do PIX referente ao pedido.<br>
Quando puder, dê uma olhada e confirme se o valor está correto.<br>
A empresa me informou a chave pix ouvidoria@noxxproducoes.com.br, confesso que achei que erá mais barato.
<br>
Desculpe pela demora no envio.
<br>
Qualquer dúvida, fico à disposição.
<br>
Abraços!

</body>
</html>


--b1_DFR6e3WkaPFrVZ2ezQw5T9iDIzpSfMQY7IZeSsI--