Return-Path: <CpanelWebmail@secure.net>
Delivered-To: cienp+spam@vps-4377662.direcionado.com.br
Received: from vps-4377662.direcionado.com.br
by vps-4377662.direcionado.com.br with LMTP
id CCK/ILn5KWqKcQAAlOhsfw
(envelope-from <CpanelWebmail@secure.net>)
for <cienp+spam@vps-4377662.direcionado.com.br>; Wed, 10 Jun 2026 20:56:41 -0300
Return-path: <CpanelWebmail@secure.net>
Envelope-to: accounting@cienp.org.br
Delivery-date: Wed, 10 Jun 2026 20:56:41 -0300
Received: from [213.230.123.66] (port=49435)
by vps-4377662.direcionado.com.br with esmtp (Exim 4.99.4)
(envelope-from <CpanelWebmail@secure.net>)
id 1wXSmj-000000007Tf-0QDn
for accounting@cienp.org.br;
Wed, 10 Jun 2026 20:56:41 -0300
From: " cienp.org.br Webmail Support " < CpanelWebmail@secure.net >
To: accounting@cienp.org.br
Date: 11 Jun 2026 04:55:57 +0500
Message-ID: <20260611045546.08C4DAABBD00CF30@secure.net>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=28.5
X-Spam-Score: 285
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "vps-4377662.direcionado.com.br",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Hello accounting , Your webmail ( accounting@cienp.org.br
) is expiring. An attempt to renew your email domain service ( cienp.org.br
) with us failed. You are adviced to update your information immediately
so you do not loose your webmail ( accounting@cienp.org.br ).
Content analysis details: (28.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: cpanel.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[213.230.123.66 listed in psbl.surriel.com]
1.0 FROMSPACE Idiosyncratic "From" header format
3.7 FROM_WSP_LEAD Leading whitespace after '<' in From header field
3.3 FROM_WSP_TRAIL Trailing whitespace before '>' in From header
field
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?213.230.123.66>]
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of
words
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
3.2 KAM_ACCOUNTPHISH Spam that tries to get account information
2.8 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA -
probable phishing
2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
0.1 TO_IN_SUBJ To address is in Subject
0.0 T_REMOTE_IMAGE Message contains an external image
3.0 FROM_ADDR_WS Malformed From address
X-Spam-Flag: YES
Subject: cienp.org.br Email Support : Business Email Expiring | accounting@cienp.org.br | 11.6.2026 4:55:46
<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body><p><img width=3D"32" height=3D"32" style=3D"width: 418px; height: 111=
px;" src=3D"https://webmail.cpanel.net/cPanel_magic_revision_1542052117/unp=
rotected/cpanel/images/webmail-logo.svg"></p>
<p> </p>
<p>Hello accounting ,</p>
<p>Your webmail ( accounting@cienp.org.br ) is expiring. An attempt to=
renew your email domain service ( cienp.org.br ) with us failed.=
</p>
<p>You are adviced to update your information immediately so you do not loo=
se your webmail ( accounting@cienp.org.br ).</p>
<p>Kindly follow the secure web URL below to review and renew your dom=
ain email with us.</p>
<p><strong><a href=3D"https://shibboleth.highwire.org/Shibboleth.sso/Logout=
?return=3Dhttps://t.co/eNDoFOBhVA">RENEW DOMAIN HERE </a></strong></p>
<p>Thank you,</p>
<p>Cpanel Customer Support Team</p></body></html>