Return-Path: Delivered-To: adm@bewonderful.com.br Received: from cloud.mkt.tools by cloud.mkt.tools with LMTP id QF7SAIkrvGHmsgAAaNiWHg (envelope-from ) for ; Fri, 17 Dec 2021 03:17:45 -0300 Return-path: Envelope-to: adm@bewonderful.com.br Delivery-date: Fri, 17 Dec 2021 03:17:45 -0300 Received: from mail-bn7nam10on2139.outbound.protection.outlook.com ([40.107.92.139]:41088 helo=NAM10-BN7-obe.outbound.protection.outlook.com) by cloud.mkt.tools with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1my6YW-000BsC-7m for adm@bewonderful.com.br; Fri, 17 Dec 2021 03:17:44 -0300 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=OFqcY/EFDtQ3TexAL5UrtMvW2GVHc16gOY2gb2uv4pA3v30bCVrD93eFyFO8SpAm8I2GeJrm00J2cQUg4NOLESzxhnq/Hs0lnqZBAT3Oyozgic8yPnT0vbKaT3w8HclGJcfGdOptKe/q90gHZJV4QDjktp/a0v6pKmOxjboqAPsBOVzD2MYW6pIMtTLggSrq3HQ3hWZBYyY08MavyGkX9U/iDCL4jLStYGUCYLSUEMx0ENZSwbz/0koWbywCR/b1gQK82E4UGRvcQP0tKBjD1AmAuZIYts6UR+13dxWnUKMYcwI+d+/mnpt47RTMpdDl3CShQrsam/fXhOeAGfiegQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=n0cLxyUUrID8KHv80bfm4zyZoDwqyZQ1Yvy/E5pdXs4=; b=K2tFNzPbq5el4CDK5WVnM8NtG6k15oVYeKqEdVVma+7Sv21glitISTEZpxCjW1x/wp5TeW2l3nxvwLTdtnpfjhLAIr5wd3iD7fT0eID917VcJZLMsFVbQYARN70yCa19zvI0vCYY6nFblf6M5/qeb03xArWcojzwRrKNZqHBoZeIILm7JL0dLWWbkKKV5uL8M3oEWWGfwc+tWD1pTT1+uUrCncvXa0b+w/VLOlX7nM9NFiO69HOQVcT5Q8dwHtPbAZS+yFChYzLGpfpJ4cXdVZRzsC9IJTjkRghuLnSw4O1G4gfqaIK480hEbRzBhdCA9INKokHUDlpNUhOYwEqjZw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cbre.com.br; dmarc=pass action=none header.from=cbre.com.br; dkim=pass header.d=cbre.com.br; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cbrenet.onmicrosoft.com; s=selector2-cbrenet-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=n0cLxyUUrID8KHv80bfm4zyZoDwqyZQ1Yvy/E5pdXs4=; b=pk/0C+JhNBY0syX38WMlNQVCMk/F0iNjevKvKsaGWiD4yY4sVzh9e0vGzqGUFH/2Fsu5cPOYXlhWoCro2xB1qG22cEsroe6nzOJleaO7gWcib7aKQVStclUAvTP4CGZlKxShMEsuPWGNGDx1+DDCSq19E9+2HjK37L+feuj3Op0= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cbre.com.br; Received: from RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM (2603:10d6:10:22::12) by RO2P152MB4313.LAMP152.PROD.OUTLOOK.COM (2603:10d6:10:9b::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4778.17; Fri, 17 Dec 2021 06:16:48 +0000 Received: from RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM ([fe80::564:3050:2cac:fd1c]) by RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM ([fe80::564:3050:2cac:fd1c%4]) with mapi id 15.20.4801.015; Fri, 17 Dec 2021 06:16:48 +0000 From: "RIO NEGRO" To: adm@bewonderful.com.br Date: 17 Dec 2021 03:16:48 -0300 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 X-ClientProxiedBy: CP2P152CA0042.LAMP152.PROD.OUTLOOK.COM (2603:10d6:101:15::28) To RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM (2603:10d6:10:22::12) Message-ID: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 7d06439a-dd9b-4849-e314-08d9c124cf24 X-MS-TrafficTypeDiagnostic: RO2P152MB4313:EE_ X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:576; X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:pt;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(39860400002)(346002)(366004)(376002)(136003)(396003)(316002)(26005)(38100700002)(966005)(6506007)(55016003)(8936002)(2906002)(7696005)(33656002)(186003)(86362001)(38350700002)(66574015)(52116002)(166002)(6916009)(66476007)(19627405001)(5660300002)(8676002)(508600001)(4744005)(66556008)(9686003)(52536014)(66946007)(3480700007);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?ZmVuWlEvNzRVbWF4OFY1K0pkUERWTHhzNWtyUlk0QUV1MVEzWGU2dUUzOU5P?= =?utf-8?B?bDN0NHFwdXAwd3J6ZEE1bU9JUVpSYTdIekRVS1I2Z2VKWXVHNlp0dGZQMm4x?= =?utf-8?B?YkpPbHBMdU9KNTd4ZGl3ZEg3REl3SHRzRWxvZm1DcGhPT0U4WmZSNVhNbnVv?= =?utf-8?B?bFdOOExiQlY0Q1NtMmJUL1NXZERkUnpqNVV0NnY1RU9KVGtGdStjQ2RkVHkw?= =?utf-8?B?REVwTkhXalYxSkh0L05NcFQ2Vmx3Szd4Y2wvZWhoM1MxVTdxZVNFbkhMWHB3?= =?utf-8?B?OE1ZKzZTNGJ0U1p0U3hIenkrUG9DRXRRdWtoOHlWUG9HbWpsS1dwdDgwOU1Q?= =?utf-8?B?ZGx1UzFnU004ZDZoVEhYbHBRRHN0a2hWSVpWeDRDSDA2cVRpWmp1d3d5R05S?= =?utf-8?B?NHI5L3VyQmd0bDR0VDNNak5kSDBHZkJUK2NWWE1CY2RRVzlmM0JVR1hDUDQ5?= =?utf-8?B?NTZvR2xWRTBxRG40bW9ibVpydTlWenEwOHdNdHVuQm1EL3NTaW9Ya0RBMFRu?= =?utf-8?B?N2ltRG1CT0M1QjBpUHYyUlNlRE1lRzZQV1pOSGJnZUx4ZWN2YWUrcFoyUVBP?= =?utf-8?B?aGo5MEVHVS9EOGRRRXV2Vk5RZmJFZUJCenlJQVVYSTYyaHQyTk52WGZtRmE3?= =?utf-8?B?WlJHb1BLNTUrUFpoK0szQ3RtaHhEaDdGTG1INzJGTzc1OVdGUEU1OGNiUVVB?= =?utf-8?B?TXpZcGoxb2JoK2UyTFd6Rk9LUTB3K3RmSjlvMGJlT25XU3MrZElkN0lXcTBt?= =?utf-8?B?VmJWc1UzS3ZpZU5WWEdud3dxSDhhQTFwNVV1UjhHcHU0NXBLaGlNU3VRWkdu?= =?utf-8?B?clVKNTBLaCt6cFpHRFlvVnRESU81UkEwM0plQzZCUzcwOGZXanFxY0RCdWI1?= =?utf-8?B?LzlKN2krTk9TOUtSM3p5NGlEeG5LRDhoYlhVdjhtSUpFOXFXc1lQSXpSYXVt?= =?utf-8?B?dTZadXlpYWRaYWtoSU4ycUgyMzZvMGhEZmU1YVFkT1MzVEEvcHlNbWhjclFV?= =?utf-8?B?WmJQRlFWN3RPNElSM1MrTThQRGN3aVl4QkRueU5kc3dMa29xZDZmUktTRzJE?= =?utf-8?B?bWw5WitMdHh5dGpGTSt0cVRVRnFiNFk4YmsyeHNyaXZyRkhtaHZjM0FLR3M0?= =?utf-8?B?MzlOYVpIWVpxSUpkRWk5MHFPRXZkKzhCOW1YNnpyQ3hGRkhsbDRyMWdEOVRr?= =?utf-8?B?aHJySEt5M0RiY1NjQ2FGQVVienVwdkpScXJvMmhMT2Y0YmtkVGZyQnRFSHBx?= =?utf-8?B?ZUZNUEF2WnNxV3I5cDAvMkhLWjN6VG92WVBHQnNaa2hpWWVKQnhHdW90Nys3?= =?utf-8?B?YTFSYmtwS0VNR2Zrd0pJbTlaNXNEZzllYzA3WWJVRGdGWEQxeUROejgxWkdy?= =?utf-8?B?TGxUNTNKaXFnbUM2d253blpxc3I2N1NjeER0RHFkMC9kTHpwRWFaeklQT2ht?= =?utf-8?B?N1BSM0g4czRlSllzSmM5VCtsSGtxVnJpU3NETkFtSnJwNUM5WDFCVnBUdXRy?= =?utf-8?B?UE5VVmUwanlObFRXeTg5anJVb0w4Vk9LZjNpOUJRczBZTzJpbmc1YjA4bjhV?= =?utf-8?B?eVkrWHk3RWJzNUVVaWJhaWpFVnAvSmFOZVR3UTYyTGRVb3dhWmZONzhiVURN?= =?utf-8?B?dm1LR21HQzJYaXJEajE2V3ZwZTZkMmYyVWRSVzVTTTRucnZUNGJKRkE0NXRC?= =?utf-8?B?ZThOS3h6c25Pa003MjFHejhEa2JHbjA5OHNZUnFDZmpQTStRUmdDdkptQ2xr?= =?utf-8?B?LzE2TlN6TmNDbXlyd2RBWlZ4bW1nWlN0dGxCdWRBcmlIa3h0T0VnSnVGbUlS?= =?utf-8?B?eCtsNkt4NjhHR1hXcUFLcHExMnRBNk9jQzhFK3ViMkw0NkwwWUJURzFZcDJW?= =?utf-8?B?RENVZ3BGdXo5enFqSUtTL2hmbm5Pb3FSUTBoYVpNbzNpeU5Nb0NXQUp1ZVVE?= =?utf-8?B?ZFJhVEZwR0VqTXl0ZHhvcEdqUEY3bVNISjNIR29abWNRUGRmQXhVSTNyU3Fv?= =?utf-8?B?VU1ubGRwQkwzNkNKaE9NS3VrSUIvbGVucEdIOFBNdis5YitwMGtmS0pzWUVY?= =?utf-8?B?b3BPelQ3cGIySmUvMmZXVmo1QWNaZzE5elVCREVnV3pwZHZoSkMvZng5U3N0?= =?utf-8?B?MjZhTFJ4UnpJU2lwYVlsSEtqcUFzMUtwNnQxTWJmVGtIU25UMWlyRk5OaTlx?= =?utf-8?Q?6pWw49mmZUEU27R3wrrCf8g=3D?= X-OriginatorOrg: cbre.com.br X-MS-Exchange-CrossTenant-Network-Message-Id: 7d06439a-dd9b-4849-e314-08d9c124cf24 X-MS-Exchange-CrossTenant-AuthSource: RO2P152MB3120.LAMP152.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Dec 2021 06:16:48.9170 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 4d119954-54ad-433a-8401-e1e5319e44a7 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: xYGPcoHSoMRNntj7mzkXJW4eRlTI1KibAvYFAis+hvKinOf3X0f+kxZSy5NAgECupTeQHXkhj9IEaYLUrS486w== X-MS-Exchange-Transport-CrossTenantHeadersStamped: RO2P152MB4313 X-Spam-Status: Yes, score=3.2 X-Spam-Score: 32 X-Spam-Bar: +++ X-Spam-Report: Spam detection software, running on the system "cloud.mkt.tools", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: OLÁ, WONDERFUL PROPAGANDA LTDA Aviso de boleto gerado Aviso de boleto gerado. Atenção: A senha para abertura do boleto é "4 primeiros números do CPF ou CNPJ". Caso o link abaixo não funcione, copie e cole o link na barra de endereço do seu navegador: Content analysis details: (3.2 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cbrenet.onmicrosoft.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror) 1.2 NUMERIC_HTTP_ADDR URI: Uses a numeric IP address in URL 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FORGED_SPF_HELO No description available. 0.0 LOTS_OF_MONEY Huge... sums of money X-Spam-Flag: YES Subject: ***SPAM*** Aviso de boleto gerado