--------------- Original Message ---------------
From: User Spam [spam@xbracket.com]
Sent: 3/7/2019 2:25 PM
To: abuse@unifiedlayer.com
Subject: Spam 162.144.63.44

Envelope-to: gina@xbracket.com
Delivery-date: Thu, 07 Mar 2019 01:32:56 -0700
Received: from gateway02.publicidadegoiania.com.br ([162.144.63.44]:48512 helo=srv.publicidadegoiania.com.br)
by p3plcpnl0041.prod.phx3.secureserver.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.91)
(envelope-from )
id 1h1oST-003v7p-Td
for gina@xbracket.com; Thu, 07 Mar 2019 01:32:56 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tmt.ind.br;
s=default; h=Date:Reply-To:Content-Type:To:Subject:From:Sender:Message-ID:Cc
:MIME-Version:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=Kossmv5ralzhJR9nVBFUY5xrLoUJf0gLgvseRFsihzo=; b=fSoWbiJncHDkKTATfIpNaWn6hh
zGwULapDBMIpRMWvH0axbCHm1Kzpo5FoPcWb+tHnSN4b5LNJXIlgTRg5dBNcj2DRLMU72lgtUTKp2
RGCf8YzGKUWsyF8offocAXic/IG9UAJ9ZmqHT8smR0C1lKleTn84mG1QQoyF+m/m1Ez3yuHmZFgf5
wnwtTZYBZkJIbkbGCidVKHaYzz5Sh7MJ6gl4I2gNkrU6gQ6nShgsqECWt5QeBafzRY6xMO5yHfHTk
8htbMp+v+FOkv6m/kl4qXdIIWD8YUWDmpxdxBRtzF1vbU8VdfyN3upOLSZz2H2mhYjryBSYFIkSna
306oeKLw==;
Received: from 201-3-29-8.dial.brasiltelecom.net.br ([201.3.29.8]:51432 helo=jow-PC)
by srv.publicidadegoiania.com.br with esmtpa (Exim 4.91)
(envelope-from )
id 1h1oR8-0004yO-Fl; Thu, 07 Mar 2019 02:31:31 -0600
From: "Santander Empresarial."
To: gina@tetraferro.com.br
Content-Type: text/html;
Reply-To: santander-esfera-empresarial@santander.com
Date: Thu, 7 Mar 2019 05:31:05 -0300
X-Priority: 3
X-Library: Indy 8.0.25
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - srv.publicidadegoiania.com.br
X-AntiAbuse: Original Domain - xbracket.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - santander.com
X-Get-Message-Sender-Via: srv.publicidadegoiania.com.br: authenticated_id: contato@tmt.ind.br
X-Authenticated-Sender: srv.publicidadegoiania.com.br: contato@tmt.ind.br
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "p3plcpnl0041.prod.phx3.secureserver.net",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: Santander Empresarial (Brasil) SA www.santander.com.br (4004-3535)
Super Linha Online - Comunicado de expiração Prezado(a) Cliente Santander
Empresarial: Prezado cliente, você possui 169.000 mi

Content analysis details: (18.0 points, 2.6 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SURBL_BLOCKED ADMINISTRATOR NOTICE: The query to SURBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: santander.com.br]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: santander.com.br]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=santander-esfera-empresarial%40santander.com;ip=162.144.63.44;r=p3plcpnl0041.prod.phx3.secureserver.net]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty
lines
1.6 MISSING_MID Missing Message-Id: header
0.7 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
headers
X-Spam-Flag: YES
Subject: ***SPAM*** Santander Empresarial,Voce Possui 169.000 mil Pontos Esfera a Seren
Resgatados.
X-getmail-retrieved-from-mailbox: INBOX
Status: R









bgcolor="#" width="20">
 bgcolor="#e52d2a" width="300">Santander Empresarial (Brasil) SA www.santander.com.br (4004-3535)










Super Linha Online - Comunicado de expiração


Prezado(a) Cliente Santander Empresarial:



Prezado
cliente, você possui 169.000 mil pontos Esfera a serem
Resgatados para seu cartão Santander Empresarial.



Atenção -
evite a expiração de seus pontos, efetuando agora mesmo
a atualização de seus dados cadastrais em nossa central de
relacionamento abaixo:



Clique em AREA DO CLIENTE e siga todos os procedimentos exigidos pelo
Internet Banking para que seus dados sejam atualizados com rapidez e
facilidade.






style="font-weight: bold; color: rgb(204, 0, 0);"> href="http://navadesign.com.br/active-clientela-com.pontos.resgatando0011/para.resgatar-seus-pontos.basta.cadastrar.dados.jpg/ativacao-pendente.resgate.small.jpg"> 🔒 AREA DO CLIENTE


width="27">



class="esquerda">Santander (Brasil) SA


width="474"> CNPJ: 60.746.948.0001-12

Instituição Financeira autorizada a funcionar pelo Banco
Central do Brasil.

Esta é uma mensagem totalmente segura.

Mensagem analizada e verificada pelo AVG AntiVirus e  ScanMail

Web Advisor

ref:_00D36qEW6._5001Qm82bR:ref