Return-Path: Delivered-To: admin@fenacobu.bi Received: from server1.cbinetwhm.bi by server1.cbinetwhm.bi with LMTP id MEwzCm6BUl/2QgAAbKRxwA (envelope-from ) for ; Fri, 04 Sep 2020 20:03:26 +0200 Return-path: Envelope-to: admin@fenacobu.bi Delivery-date: Fri, 04 Sep 2020 20:03:26 +0200 Received: from [104.148.61.165] (port=1594 helo=gmail.com) by server1.cbinetwhm.bi with smtp (Exim 4.93) (envelope-from ) id 1kEG3W-0004gF-4g for admin@fenacobu.bi; Fri, 04 Sep 2020 20:03:26 +0200 Message-ID: Date: Fri, 04 Sep 2020 11:03:24 -0700 Reply-To: "Karrie Jorstad  " From: "Karrie Jorstad  " User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.12) Gecko/20080213 Thunderbird/2.0.0.12 X-Accept-Language: en-us MIME-Version: 1.0 To: Content-Type: multipart/mixed; boundary="------------435804815141531004073774" X-Spam-Status: Yes, score=39.1 X-Spam-Score: 391 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Increase sales and ranks with our targeted traffic http://bulkwebtraffic.io Check the pricelist attached Regards Karrie Jorstad   Content analysis details: (39.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [ninabuck952kuiec[at]gmail.com] 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: bulkwebtraffic.io] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [104.148.61.165 listed in zen.spamhaus.org] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [104.148.61.165 listed in bl.score.senderscore.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: bulkwebtraffic.io] 5.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: bulkwebtraffic.io] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [104.148.61.165 listed in psbl.surriel.com] 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 5.0 KAM_VERY_BLACK_DBL Email that hits both URIBL Black and Spamhaus DBL 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.3 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: ***SPAM*** organic Premium Visits - Country targeted This is a multi-part message in MIME format. --------------435804815141531004073774 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Increase sales and ranks with our targeted traffic http://bulkwebtraffic.io Check the pricelist attached Regards Karrie Jorstad   Unsubscribe option is available on the footer of our website --------------435804815141531004073774 Content-Type: application/octet-stream; name="Pricelist.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Pricelist.html" PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7 VVJMPWh0dHA6Ly9idWxrd2VidHJhZmZpYy5pby9vcmRlci1ub3cuaHRtbCI+DQo8L2hlYWQ+DQoN CjxwPjxmb250IGZhY2U9IlZlcmRhbmEiPkxvYWRpbmcgPGI+PGEgaHJlZj0iaHR0cDovL2J1bGt3 ZWJ0cmFmZmljLmlvL29yZGVyLW5vdy5odG1sIj5QcmljZWxpc3Q8L2E+IDwvYj48L2ZvbnQ+PC9w Pg0KPC9odG1sPg0KDQo= --------------435804815141531004073774--