Return-Path: <codyhuey981buxli@gmail.com>
Delivered-To: admin@fenacobu.bi
Received: from server1.cbinetwhm.bi
	by server1.cbinetwhm.bi with LMTP
	id yD6qDZcqoF8YAgAAbKRxwA
	(envelope-from <codyhuey981buxli@gmail.com>)
	for <admin@fenacobu.bi>; Mon, 02 Nov 2020 17:49:43 +0200
Return-path: <codyhuey981buxli@gmail.com>
Envelope-to: admin@fenacobu.bi
Delivery-date: Mon, 02 Nov 2020 17:49:43 +0200
Received: from [104.148.61.169] (port=3866 helo=gmail.com)
	by server1.cbinetwhm.bi with smtp (Exim 4.93)
	(envelope-from <codyhuey981buxli@gmail.com>)
	id 1kZc5S-00009L-49
	for admin@fenacobu.bi; Mon, 02 Nov 2020 17:49:43 +0200
Message-ID: <14500D00.22383060@gmail.com>
Date: Mon, 02 Nov 2020 07:49:39 -0800
Reply-To: "Susie Sievers  " <codyhuey981buxli@gmail.com>
From: "Susie Sievers  " <codyhuey981buxli@gmail.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080723 Fedora/2.0.0.16-1.fc8 Thunderbird/2.0.0.16
MIME-Version: 1.0
To: <admin@fenacobu.bi>
Content-Type: multipart/mixed;
	boundary="------------727454577614722045636432"
X-Spam-Status: Yes, score=38.3
X-Spam-Score: 383
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  hi After checking fenacobu.bi we strongly advise you take
   any of our services here http://www.liftmyrank.co/affordable-seo-services-small-businesses/
    
 Content analysis details:   (38.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  5.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                             [URIs: liftmyrank.co]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [104.148.61.169 listed in zen.spamhaus.org]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: liftmyrank.co]
  0.1 URIBL_SBL_A            Contains URL's A record listed in the Spamhaus SBL
                             blocklist
                             [URIs: www.liftmyrank.co]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?104.148.61.169>]
  1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                             https://senderscore.org/blacklistlookup/
                            [104.148.61.169 listed in bl.score.senderscore.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [codyhuey981buxli[at]gmail.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 T_OBFU_HTML_ATTACH     BODY: HTML attachment with non-text MIME type
  0.2 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII
                              but isn't
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [104.148.61.169 listed in psbl.surriel.com]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URIs: liftmyrank.co]
  0.0 T_HTML_ATTACH          HTML attachment to bypass scanning?
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  5.0 KAM_VERY_BLACK_DBL     Email that hits both URIBL Black and Spamhaus
                              DBL
  0.0 PDS_HP_HELO_NORDNS     High profile HELO with no sender rDNS
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.6 SPOOFED_FREEMAIL       No description available.
X-Spam-Flag: YES
Subject:  ***SPAM***  re: Get back your ranks and reach top 10

This is a multi-part message in MIME format.

--------------727454577614722045636432
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

hi

After checking fenacobu.bi we strongly advise you take any of our services
here

http://www.liftmyrank.co/affordable-seo-services-small-businesses/

Pricelist attached


Regards
Susie Sievers  












http://www.liftmyrank.co/unsubscribe/



--------------727454577614722045636432
Content-Type: application/octet-stream;
	name="SEO-Pricelist.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="SEO-Pricelist.html"

PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7
VVJMPWh0dHA6Ly93d3cubGlmdG15cmFuay5jby9PcmRlci1wYWdlLXBvc2l0aXZlLyI+DQo8L2hl
YWQ+DQoNCjxwPjxmb250IGZhY2U9IlZlcmRhbmEiPkxvYWRpbmcgPGI+PGEgaHJlZj0iaHR0cDov
L3d3dy5saWZ0bXlyYW5rLmNvL09yZGVyLXBhZ2UtcG9zaXRpdmUvIj5TRU8gIFByaWNlbGlzdDwv
YT4gPC9iPjwvZm9udD48L3A+DQo8L2h0bWw+DQoNCg==

--------------727454577614722045636432--

