grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026Return-Path: <ibanca-uy@btgpactual.com>
Delivered-To: oramos@bagno-company.com
Received: from ambar.servidorlinux16.com
	by ambar.servidorlinux16.com with LMTP
	id t++dBvaYw2pj0A8Am9P8sg
	(envelope-from <ibanca-uy@btgpactual.com>)
	for <oramos@bagno-company.com>; Mon, 05 Oct 2026 09:32:54 -0300
Return-path: <ibanca-uy@btgpactual.com>
Envelope-to: oramos@bagno-company.com
Delivery-date: Mon, 05 Oct 2026 09:32:54 -0300
Received: from uyprodsmtp.btgpactual.com ([179.27.166.111]:13167)
	by ambar.servidorlinux16.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.100.1)
	(envelope-from <ibanca-uy@btgpactual.com>)
	id 1xDhsD-00000004LAP-1MrS
	for oramos@bagno-company.com;
	Mon, 05 Oct 2026 09:32:53 -0300
Received: from pps.filterd (uyagppwtc.ursulauy.net [127.0.0.1])
	by uyagppwtc.ursulauy.net (8.18.1.7/8.18.1.7) with ESMTP id 695CMrdK016115
	for <oramos@bagno-company.com>; Mon, 5 Oct 2026 09:32:06 -0300
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btgpactual.com;
	 h=content-type:date:from:message-id:mime-version:reply-to
	:subject:to; s=u1; bh=7r9TAKSINhNsjxxloyxY0M9fTpdV6qu7u0/54rodq9
	A=; b=HacBjBGkzb6YAgUtPov1X+pJAJqBouo3OvEUeTvkPbZRkFqIQcAVfswxJa
	RoxC/al+bzOYhobkF7rk4MEZ05SREPaTkL3ZmKqtVLprhLi34PMNUvQJJxtfgwHG
	js50o+8tp0FNwNAZyrlI1AdVVCFF1pFgMNHIY0pOt/N7IVuf0nWBCoW4dJLJxrvc
	dE1Exuf1L9By2s/6K3gBmKnvPvrGAZaekT4jbKKkNbWsHDy0goVL1SFLvUkfY0GK
	hGMPmPVAtB3tc7B5006wGj0eRv/U2aoboqgLqKhMxxvHmCkx6OyR31w6lGd7sb17
	NtaiaYnv7aFvJtQgwobNi55iXSUw==
Received: from uyw25227387.ursulauy.net ([166.76.104.42])
	by uyagppwtc.ursulauy.net (PPS) with ESMTPS id 4h3fryg17d-1
	(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
	for <oramos@bagno-company.com>; Mon, 05 Oct 2026 09:32:06 -0300 (BRT)
Received: from uyl20183960.uy.hsbc (166.76.3.202) by UYW25227387.URSULAUY.NET
 (166.76.104.42) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.35; Mon, 5 Oct
 2026 09:32:05 -0300
Date: Mon, 5 Oct 2026 09:32:05 -0300
From: <ibanca-uy@btgpactual.com>
Reply-To: <ibanca-uy@btgpactual.com>
To: <oramos@bagno-company.com>
Message-ID: <47691038.181791203525630.JavaMail.tcusr@uyl20183960.uy.hsbc>
Subject: BTG Pactual - HSBC - Transferencia exterior
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_Part_18_137354862.1791203525628"
X-Originating-IP: [166.76.3.202]
X-ClientProxiedBy: UYW25227387.URSULAUY.NET (166.76.104.42) To
 UYW25227387.URSULAUY.NET (166.76.104.42)
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1176,Hydra:6.1.134,FMLib:17.12.100.49
 definitions=2026-10-05_03,2026-10-05_01,2025-10-01_01
X-Spam-Status: No, score=-1.6
X-Spam-Score: -16
X-Spam-Bar: -
X-Ham-Report: Spam detection software, running on the system "ambar.servidorlinux16.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Estimado cliente, Hemos transferido por orden de DECOSO******
    un pago por USD 71.943,30 a la cuenta 12577***** en BANK OF AMERICA N.A.
   por concepto de (no informado). Atentamente, 
 Content analysis details:   (-1.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: btgpactual.com]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [179.27.166.111 listed in list.dnswl.org]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_EXTRA_CLOSE       BODY: HTML contains far too many close tags
  0.4 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: NO

------=_Part_18_137354862.1791203525628
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<p>Estimado cliente,<br/>Hemos transferido por orden de DECOSO****** un pag=
o por <b>USD 71.943,30</b> a la cuenta 12577***** en BANK OF AMERICA  N.A. =
por concepto de (no informado).</p><p>Atentamente,</p></br></br><p>Banco BT=
G Pactual Uruguay S.A.</p></br><p> <i>Mensaje autom=C3=A1tico, por favor no=
 responder. Por consultas contactarse con nuestro Centro de Atenci=C3=B3n a=
l Cliente (+598) 2915 1010</i>.</p>
------=_Part_18_137354862.1791203525628--
