| Current File : /home/mak/mail/.spam/new/1757649322.M19344P5847.cloud.berardocollection.com,S=6592,W=6772 |
Return-Path: <root@trik21.artigourgentept1.org>
Delivered-To: mak+spam@cloud.berardocollection.com
Received: from cloud.berardocollection.com
by cloud.berardocollection.com with LMTP
id 12AAAaqZw2jXFgAAuY/3dA
(envelope-from <root@trik21.artigourgentept1.org>)
for <mak+spam@cloud.berardocollection.com>; Fri, 12 Sep 2025 04:55:22 +0100
Return-path: <root@trik21.artigourgentept1.org>
Envelope-to: escritorio@mak.pt
Delivery-date: Fri, 12 Sep 2025 04:55:22 +0100
Received: from trik21.artigourgentept1.org ([193.141.60.149]:55143)
by cloud.berardocollection.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.1)
(envelope-from <root@trik21.artigourgentept1.org>)
id 1uwusa-000000001WA-1ZWw
for escritorio@mak.pt;
Fri, 12 Sep 2025 04:55:21 +0100
Received: by trik21.artigourgentept1.org (Postfix, from userid 0)
id 9F7BAC189F; Fri, 12 Sep 2025 05:38:07 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=trik21.artigourgentept1.org; s=mail; t=1757648473;
bh=Vm2JU8mLNYleFY1LPIMMNwD7LpVPK/xqq7wixi3x+4Y=;
h=Subject:List-Unsubscribe:From:To:Date;
b=JYfdx/tdk06yZmVBlQF3Mua3YVPFYsdlpc3cm6JMP/n6sOvlq+6J+KGUgecfPyQaP
hE/qvxljJont3MChNWmgFWNIkXi743PdfIyQrCLVvUry9Og73emukCE21nd44VZqro
ewQHb6+OdWhkqkbsxe0kQcrdWqC0s7HPaoqhRGPCHwecg03Of7sP/K6nb5vkeygCI5
o5VHGo9TgmNIRZm3nfB3s9mbFd+lzF6xWEfS734HD2d+C85c3z3Yo8ch/e6ZvRRqiw
HE2Jz9j0WrrSngSuO9VOc3u1+CBghYyo3qn3OXuslk0DP8N2DS35lll2Ipb9RmVAbG
GrEpgAKxG2nhA==
content-type: text/html; charset=UTF-8
MIME-Version: 1.0
X-Priority: 1
X-MSmail-Priority: High
Priority: urgent
Importance: high
Content-Transfer-encoding: 8bit
X-Mailer: Clube do E-mail
X-Newsreader: Microsoft Outlook Express 6.00.2800.140
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Mailing-list: Clientes
X-Sender: grupo'
List-Unsubscribe: <mailto:Financeiro <grupo@trik21.artigourgentept1.org>?subject=unsubscribe>nMessage-ID: <bhX3rL9eyfw32hRXAuAQvWGZuWEaoA1Z5@trik21.artigourgentept1.org>
From: Financeiro <grupo@trik21.artigourgentept1.org>
To: escritorio@mak.pt
Message-Id: <20250912034113.9F7BAC189F@trik21.artigourgentept1.org>
Date: Fri, 12 Sep 2025 05:38:07 +0200 (CEST)
X-Spam-Status: Yes, score=8.7
X-Spam-Score: 87
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "cloud.berardocollection.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Exmo(a) Senhor(a), A transferência foi efetuada com sucesso.
Pode consultar o comprovativo abaixo: Ver Comprovativo
Content analysis details: (8.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: artigourgentept1.org]
0.0 URIBL_DBL_BLOCKED ADMINISTRATOR NOTICE: The query to
dbl.spamhaus.org was blocked. See
https://www.spamhaus.org/returnc/vol/
[URIs: artigourgentept1.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[193.141.60.149 listed in psbl.surriel.com]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.2 KAM_STORAGE_GOOGLE URI: Google Storage API being abused by
spammers
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[193.141.60.149 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[193.141.60.149 listed in sa-accredit.habeas.com]
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
1.8 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to
avoid URIBL
X-Spam-Flag: YES
Subject: ***SPAM*** Comprovativo de Pagamento - 12/09/2025
<!DOCTYPE html>
<html lang="pt-PT">
<head>
<meta charset="UTF-8">
<style>
body {
font-family: Arial, sans-serif;
line-height: 1.5;
color: #333;
max-width: 600px;
margin: 0 auto;
padding: 20px;
}
.button {
display: inline-block;
background-color: #0066CC;
color: white;
text-decoration: none;
padding: 10px 20px;
border-radius: 3px;
margin: 15px 0;
}
</style>
</head>
<body>
<p>Exmo(a) Senhor(a),</p>
<p>A transferência foi efetuada com sucesso. Pode consultar o comprovativo abaixo:</p>
<p>
<a href="https://storage.googleapis.com/extempresa/arcomp/index.html?hash=escritorio@mak.pt" class="button">Ver Comprovativo</a> <!-- Substitua LINK_AQUI pelo URL real -->
</p>
<p>Caso necessite de assistência, contacte-nos.</p>
<p>Obrigado,</p>
<p>Equipa Financeira</p>
</body>
</html>