Your IP : 216.73.217.94
| Current Path : /home2/noxxprod/mail/new/ |
|
|
| Current File : //home2/noxxprod/mail/new/1774907524.M63473P3397747.host.sdserver127.com.br,S=6091,W=6225 |
Return-Path: <andrefreitas@camp03.faqpar.com>
Delivered-To: noxxprod@host.sdserver127.com.br
Received: from host.sdserver127.com.br
by host.sdserver127.com.br with LMTP
id WJWqA4Twymlz2DMAk55skA
(envelope-from <andrefreitas@camp03.faqpar.com>)
for <noxxprod@host.sdserver127.com.br>; Mon, 30 Mar 2026 18:52:04 -0300
Return-path: <andrefreitas@camp03.faqpar.com>
Envelope-to: financeiro@noxxproducoes.com.br
Delivery-date: Mon, 30 Mar 2026 18:52:04 -0300
Received: from camp03.faqpar.com ([194.38.21.123]:43618)
by host.sdserver127.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <andrefreitas@camp03.faqpar.com>)
id 1w7KWg-00EIuS-36
for financeiro@noxxproducoes.com.br;
Mon, 30 Mar 2026 18:52:03 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=camp03.faqpar.com;
s=camp03; t=1774902100;
bh=SQRhxYQAYT7Fe7rTUXqaW7vB7+ByfaTzb7HLS5mJ67Q=;
h=From:To:Subject:Date;
b=Fh5gAxh31qMbEIWXEWMbmcISGEXcyuPyRApisQhrnxHEg/xTkl/9Ea8F+j1dUq7HK
5MlZWW3BbJBzcJDNfMk55DfRGXsFxmQccabPirs4vkq7882P3glC/kxM5W/hUnEXpS
3XS3nPvKLIExCUSZYcemkggLYp52YrMsXuMPPZRylvqyKK+bhavDDsDTriF6cHTGEr
bS/ceyi9MXMAsMwMGWWtJXsDMrE4cpxGyOUQJhj3+BA7b7cRhQLAYlqYvyzlzhjaFt
xcqOhXAdIiBq4nqOAJNfJsx0pJXPfiXAG9AbJWpu2m+afe3eMYJceRwQ7Gq7baa/Jt
JKR7mbIutUTdw==
From: =?UTF-8?B?Q2Ftw6lsaWEgQ2FtYXJnbyBDb250w6FiaWw=?= <andrefreitas@camp03.faqpar.com>
To: financeiro@noxxproducoes.com.br
Date: Mon, 30 Mar 2026 17:21:39 -0300
Message-ID: <uwbibmpiaxbm.1774902099986851100@camp03.faqpar.com>
MIME-Version: 1.0
Content-Language: pt-BR
Content-Type: multipart/alternative; boundary="----=_azjghxfhorqmwkij_1774902099986851100"
X-Spam-Status: Yes, score=6.4
X-Spam-Score: 64
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "host.sdserver127.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Prezado(a),financeiro@noxxproducoes.com.br. Segue abaixo documento
do departamento contábil: Vencimento: 05/04/2025
Content analysis details: (6.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: app.link]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: faqpar.com]
-2.0 RCVD_IN_VALIDITY_SAFE RBL: Sender in Validity Safe - Contact
certification@validity.com
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
-3.0 RCVD_IN_VALIDITY_CERTIFIED RBL: Sender in Validity Certification
- Contact certification@validity.com
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[194.38.21.123 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?R3VpYSBQYXJhIFBhZ2FtZW50byBEQVJGIC0gSVJQSiBlLUxhbHVyIDMwODc=?=
------=_azjghxfhorqmwkij_1774902099986851100
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Prezado(a),financeiro@noxxproducoes.com.br.
Segue abaixo documento do departamento cont=C3=A1bil:
Vencimento:
05/04/2025
Obs:
Clique no link para acessar o arquivo.
Guia:
DARF - IRPJ MENSAL 77131 «Clique aqui para acessar»
=E2=80=94 Departamento Cont=C3=A1bil
------=_azjghxfhorqmwkij_1774902099986851100
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64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------=_azjghxfhorqmwkij_1774902099986851100--