Return-Path: Delivered-To: admin@fenacobu.bi Received: from server1.cbinetwhm.bi by server1.cbinetwhm.bi with LMTP id wfgrA/4RKF9uFAAAbKRxwA (envelope-from ) for ; Mon, 03 Aug 2020 15:32:46 +0200 Return-path: Envelope-to: admin@fenacobu.bi Delivery-date: Mon, 03 Aug 2020 15:32:46 +0200 Received: from [157.52.193.121] (port=1888 helo=gmail.com) by server1.cbinetwhm.bi with smtp (Exim 4.93) (envelope-from ) id 1k2aa1-0001Kl-Ag for admin@fenacobu.bi; Mon, 03 Aug 2020 15:32:46 +0200 Message-ID: <5BFC7B16.6588184C@gmail.com> Date: Mon, 03 Aug 2020 06:32:42 -0700 Reply-To: "Katrice Stabile  " From: "Katrice Stabile  " User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1.17) Gecko/20080914 Thunderbird/2.0.0.17 X-Accept-Language: en-us MIME-Version: 1.0 To: Content-Type: multipart/mixed; boundary="------------554855230001516503234734" X-Spam-Status: Yes, score=44.7 X-Spam-Score: 447 X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: hi here it is, ad rotator cheap traffic http://www.mgdots.co/detail.php?id=111 Pricelist attached Content analysis details: (44.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 6.2 RCVD_IN_MSPIKE_L5 RBL: Very bad reputation (-5) [157.52.193.121 listed in bl.mailspike.net] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [157.52.193.121 listed in bl.score.senderscore.com] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: mgdots.co] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [157.52.193.121 listed in zen.spamhaus.org] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [gunnclar77yipei[at]gmail.com] 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [157.52.193.121 listed in psbl.surriel.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: mgdots.co] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: mgdots.co] 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.0 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: ***SPAM*** re: I need chep Ad Rotator traffic for fenacobu.bi This is a multi-part message in MIME format. --------------554855230001516503234734 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit hi here it is, ad rotator cheap traffic http://www.mgdots.co/detail.php?id=111 Pricelist attached Regards Katrice Stabile   http://www.mgdots.co/unsubscribe/ 001 (516) 926-1772 18 Richmond St, Albany, New York --------------554855230001516503234734 Content-Type: application/octet-stream; name="ad-rotator-Details.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="ad-rotator-Details.html" PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7 VVJMPWh0dHA6Ly93d3cubWdkb3RzLmNvL2RldGFpbC5waHA/aWQ9MTExIj4NCjwvaGVhZD4NCg0K PHA+PGZvbnQgZmFjZT0iVmVyZGFuYSI+TG9hZGluZyA8Yj48YSBocmVmPSJodHRwOi8vd3d3Lm1n ZG90cy5jby9kZXRhaWwucGhwP2lkPTExMSI+RGV0YWlsczwvYT4gPC9iPjwvZm9udD48L3A+DQo8 L2h0bWw+DQoNCg== --------------554855230001516503234734--