Return-Path: Delivered-To: admin@fenacobu.bi Received: from server1.cbinetwhm.bi by server1.cbinetwhm.bi with LMTP id KD0wGoTfZF4oWwAAbKRxwA (envelope-from ) for ; Sun, 08 Mar 2020 14:05:24 +0200 Return-path: Envelope-to: admin@fenacobu.bi Delivery-date: Sun, 08 Mar 2020 14:05:24 +0200 Received: from [42.231.163.214] (port=4441 helo=gmail.com) by server1.cbinetwhm.bi with smtp (Exim 4.93) (envelope-from ) id 1jAugJ-000643-Dm for admin@fenacobu.bi; Sun, 08 Mar 2020 14:05:24 +0200 Message-ID: <56CE00B8.E4CCDC42@gmail.com> Date: Sun, 08 Mar 2020 04:05:27 -0800 Reply-To: "Darcey Dowling  " From: "Darcey Dowling  " User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.1) Gecko/20061217 Thunderbird/2.0b1 MIME-Version: 1.0 To: Content-Type: multipart/mixed; boundary="------------574751434004360476515577" X-Spam-Status: Yes, score=51.3 X-Spam-Score: 513 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Increase sales and ranks with our targeted traffic http://bulkwebtraffic.io Check the pricelist attached Regards Darcey Dowling   Content analysis details: (51.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.9 FSL_HELO_FAKE No description available. 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: bulkwebtraffic.io] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [42.231.163.214 listed in zen.spamhaus.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [42.231.163.214 listed in psbl.surriel.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: bulkwebtraffic.io] 5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: bulkwebtraffic.io] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [42.231.163.214 listed in bl.score.senderscore.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [roddorva8vkfoy[at]gmail.com] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type 0.0 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 2.5 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3) [42.231.163.214 listed in bl.mailspike.net] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 5.0 KAM_VERY_BLACK_DBL Email that hits both URIBL Black and Spamhaus DBL 2.0 KAM_RBL Higher scores for hitting multiple trusted RBLs 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 0.0 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: ***SPAM*** organic Premium Visits - Country targeted This is a multi-part message in MIME format. --------------574751434004360476515577 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Increase sales and ranks with our targeted traffic http://bulkwebtraffic.io Check the pricelist attached Regards Darcey Dowling   Unsubscribe option is available on the footer of our website --------------574751434004360476515577 Content-Type: application/octet-stream; name="Pricelist.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Pricelist.html" PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7 VVJMPWh0dHA6Ly9idWxrd2VidHJhZmZpYy5pby9vcmRlci1ub3cuaHRtbCI+DQo8L2hlYWQ+DQoN CjxwPjxmb250IGZhY2U9IlZlcmRhbmEiPkxvYWRpbmcgPGI+PGEgaHJlZj0iaHR0cDovL2J1bGt3 ZWJ0cmFmZmljLmlvL29yZGVyLW5vdy5odG1sIj5QcmljZWxpc3Q8L2E+IDwvYj48L2ZvbnQ+PC9w Pg0KPC9odG1sPg0KDQo= --------------574751434004360476515577--