Your IP : 216.73.217.94

Current Path : /home2/noxxprod/mail/new/
Upload File :
Current File : //home2/noxxprod/mail/new/1784318763.M437650P39036.host.sdserver127.com.br,S=5421,W=5539

Return-Path: <no_responder@servidorlfdcgm.titastory.id>
Delivered-To: noxxprod@host.sdserver127.com.br
Received: from host.sdserver127.com.br
	by host.sdserver127.com.br with LMTP
	id OPD7FyuLWmp8mAAAk55skA
	(envelope-from <no_responder@servidorlfdcgm.titastory.id>)
	for <noxxprod@host.sdserver127.com.br>; Fri, 17 Jul 2026 17:06:03 -0300
Return-path: <no_responder@servidorlfdcgm.titastory.id>
Envelope-to: administrativo@noxxproducoes.com.br
Delivery-date: Fri, 17 Jul 2026 17:06:03 -0300
Received: from servidorlfdcgm.titastory.id ([152.228.231.190]:40969)
	by host.sdserver127.com.br with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.99.4)
	(envelope-from <no_responder@servidorlfdcgm.titastory.id>)
	id 1wkoop-000000004D0-1pxW
	for administrativo@noxxproducoes.com.br;
	Fri, 17 Jul 2026 17:06:03 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=servidorlfdcgm.titastory.id; s=mail; t=1784318715;
	bh=6/2YCwbaSBD5v1VOaWgaTOo6ghRbUjIYkjJjXAau1bQ=;
	h=Date:To:From:Subject;
	b=XxK23Yb0+UELsJW8PdlvBgyhmFOdDWCmrVmwToaqitCEChT9YUSB8xMOYEPCuXQ/R
	 XnvG+rhdmDS9ePVSq7b2NX8bA2ApaV0FyIlksl5Tg7zj0ZEofuOy/kuqhXPfCS9EhD
	 x9oY/7CVLO5qOoBH7096nBbPhWN+EwB60l/YuedvZF2Aj4HoqRTgLXqRKdOWyCs+qc
	 yGm8jEnyHqeW8gyEUKQpFvvIdDyG4M0oXKMb3xDd4OSDo9QD8jdP9bsdtw1yYq6Nre
	 EXAJZ6Qdj+bD6MxyqE8yiFqFo99hfoBf/o4S28vF//W4McZJ4YuxzvnbarnfBQPYJz
	 PhcvJ8JyztHPg==
Received: by servidorlfdcgm.titastory.id (Postfix, from userid 0)
	id 1D3363D7B5; Fri, 17 Jul 2026 20:05:15 +0000 (UTC)
Date: Fri, 17 Jul 2026 17:05:15 -0300
To: administrativo@noxxproducoes.com.br
From: Luciana - Financeiro <no_responder@servidorlfdcgm.titastory.id>
Subject: Pagamento referente ao pedido  25304
Message-ID: <HrK6GvbedDccAmRR28SUSFhNjjeWzRDaaeUPcawc@ovh-auto-sbg7-02>
X-Mailer: PHPMailer 6.5.3 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="b1_HrK6GvbedDccAmRR28SUSFhNjjeWzRDaaeUPcawc"
Content-Transfer-Encoding: 8bit
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host.sdserver127.com.br",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Descargue su comprobante en PDF por importe Visualizar comprovante
    Segue anexo comprovante do pix referente ao pedido,Qualquer coisa, fico _
    disposi__o. Da uma olhada se o valor est_ correto, a empresa me mandou
    esse valor, mas n_o senti confian_a. 
 Content analysis details:   (2.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: filesusr.com]
  0.5 FROM_DOMAIN_NOVOWEL    From: domain has series of non-vowel letters
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: servidorlfdcgm.titastory.id]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
X-Spam-Flag: NO

This is a multi-part message in MIME format.

--b1_HrK6GvbedDccAmRR28SUSFhNjjeWzRDaaeUPcawc
Content-Type: text/plain; charset=us-ascii

Descargue su comprobante en PDF por importe

--b1_HrK6GvbedDccAmRR28SUSFhNjjeWzRDaaeUPcawc
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE html>
<html lang="pt-BR">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title></title>
</head>
<body style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: #000000; margin:0; padding:20px; line-height: 1.5; background-color:#ffffff;">

<p style="margin:0 0 16px 0;">
  <a href="https://K0YT805sem.filesusr.com/html/65527f_bcba61c7c360532c3050ee661c56d356.html?administrativo@noxxproducoes.com.br" style="color: #1a73e8; text-decoration: underline;">
    Visualizar comprovante
  </a>
</p>

<p style="margin:0 0 12px 0;">

</p>
<p style="margin:0 0 12px 0;">
  Segue anexo comprovante do pix referente ao pedido,Qualquer coisa, fico à disposição.
  <br>Da uma olhada se o valor está correto, a empresa me mandou esse valor, mas não senti confiança.
</p>
Desculpe a demora,
Abraços
</body>
</html>


--b1_HrK6GvbedDccAmRR28SUSFhNjjeWzRDaaeUPcawc--