Return-Path: <klostocc091em@gmail.com>
Delivered-To: admin@fenacobu.bi
Received: from server1.cbinetwhm.bi
	by server1.cbinetwhm.bi with LMTP
	id UasCHy29aV/sVgAAbKRxwA
	(envelope-from <klostocc091em@gmail.com>)
	for <admin@fenacobu.bi>; Tue, 22 Sep 2020 11:00:29 +0200
Return-path: <klostocc091em@gmail.com>
Envelope-to: admin@fenacobu.bi
Delivery-date: Tue, 22 Sep 2020 11:00:29 +0200
Received: from [104.148.61.178] (port=2357 helo=gmail.com)
	by server1.cbinetwhm.bi with smtp (Exim 4.93)
	(envelope-from <klostocc091em@gmail.com>)
	id 1kKe9v-0005jp-QV
	for admin@fenacobu.bi; Tue, 22 Sep 2020 11:00:29 +0200
Message-ID: <B7C30591.5CD19363@gmail.com>
Date: Tue, 22 Sep 2020 02:00:24 -0700
Reply-To: "Chong Caddy  " <klostocc091em@gmail.com>
From: "Chong Caddy  " <klostocc091em@gmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.8) Gecko/20100408 Thunderbird/3.0.3
MIME-Version: 1.0
To: <admin@fenacobu.bi>
Content-Type: multipart/mixed;
	boundary="------------243875252446384316180516"
X-Spam-Status: Yes, score=40.3
X-Spam-Score: 403
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  hi After checking fenacobu.bi we strongly advise you take
   any of our services here http://www.liftmyrank.co/affordable-seo-services-small-businesses/
    
 Content analysis details:   (40.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [104.148.61.178 listed in zen.spamhaus.org]
  5.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                             [URIs: liftmyrank.co]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: liftmyrank.co]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [104.148.61.178 listed in psbl.surriel.com]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URIs: liftmyrank.co]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                            [104.148.61.178 listed in bl.score.senderscore.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?104.148.61.178>]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [klostocc091em[at]gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  0.0 T_OBFU_HTML_ATTACH     BODY: HTML attachment with non-text MIME type
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.1 URIBL_SBL_A            Contains URL's A record listed in the Spamhaus SBL
                             blocklist
                             [URIs: www.liftmyrank.co]
  2.4 TBIRD_SUSP_MIME_BDRY   Unlikely Thunderbird MIME boundary
  5.0 KAM_VERY_BLACK_DBL     Email that hits both URIBL Black and Spamhaus
                              DBL
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  2.0 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: YES
Subject:  ***SPAM***  re: Search Engine Optimization matters

This is a multi-part message in MIME format.

--------------243875252446384316180516
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

hi

After checking fenacobu.bi we strongly advise you take any of our services
here

http://www.liftmyrank.co/affordable-seo-services-small-businesses/

Pricelist attached


Regards
Chong Caddy  












http://www.liftmyrank.co/unsubscribe/



--------------243875252446384316180516
Content-Type: application/octet-stream;
	name="SEO-Pricelist.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="SEO-Pricelist.html"

PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7
VVJMPWh0dHA6Ly93d3cubGlmdG15cmFuay5jby9PcmRlci1wYWdlLXBvc2l0aXZlLyI+DQo8L2hl
YWQ+DQoNCjxwPjxmb250IGZhY2U9IlZlcmRhbmEiPkxvYWRpbmcgPGI+PGEgaHJlZj0iaHR0cDov
L3d3dy5saWZ0bXlyYW5rLmNvL09yZGVyLXBhZ2UtcG9zaXRpdmUvIj5TRU8gIFByaWNlbGlzdDwv
YT4gPC9iPjwvZm9udD48L3A+DQo8L2h0bWw+DQoNCg==

--------------243875252446384316180516--

