Return-Path: <> Delivered-To: fenacobu@server1.cbinetwhm.bi Received: from server1.cbinetwhm.bi by server1.cbinetwhm.bi with LMTP id sClwBg7nOWjgdxMAbKRxwA (envelope-from <>) for ; Fri, 30 May 2025 19:12:46 +0200 Return-path: <> Envelope-to: info@fenacobu.bi Delivery-date: Fri, 30 May 2025 19:12:46 +0200 Received: from 78.62.82.34.bc.googleusercontent.com ([34.82.62.78]:55198 helo=[10.88.0.4]) by server1.cbinetwhm.bi with esmtp (Exim 4.98.2) id 1uL3Hf-00000005Ltz-0VHW for info@fenacobu.bi; Fri, 30 May 2025 19:12:45 +0200 Content-Type: multipart/related; boundary="===============8741382682762087032==" MIME-Version: 1.0 From: Ruben Convy To: info@fenacobu.bi Subject: =?utf-8?q?Hello?= X-Priority: 2 X-Spam-Subject: ***SPAM*** =?utf-8?q?Hello?= X-Spam-Status: Yes, score=21.2 X-Spam-Score: 212 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "server1.cbinetwhm.bi", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please I am writing to notify you again on my intention to list your name as a beneficiary to the total sum of GBP6.350 million (Six million, Three hundred and fifty thousand British Pounds Sterlings) [...] Content analysis details: (21.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.4 MISSING_DATE Missing Date: header 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 0.0 TVD_RCVD_IP Message was received from an IP address 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [34.82.62.78 listed in zen.spamhaus.org] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [34.82.62.78 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [34.82.62.78 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [34.82.62.78 listed in bl.score.senderscore.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [rubenconvy41(at)gmail.com] 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.6 RDNS_DYNAMIC Delivered to internal network by host with dynamic-looking rDNS 0.0 PDS_RDNS_DYNAMIC_FP RDNS_DYNAMIC with FP steps 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 SPOOFED_FREEMAIL No description available. 0.0 HK_SCAM No description available. 6.0 KAM_BENEFICIARYLOW Beneficiary scams (Lower Confidence) 0.3 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... 3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES --===============8741382682762087032== Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 PHA+IFBsZWFzZSBJIGFtIHdyaXRpbmcgdG8gbm90aWZ5IHlvdSBhZ2FpbiBvbiBteSBpbnRlbnRp b24gdG8gbGlzdCB5b3VyIG5hbWUgYXMgYSBiZW5lZmljaWFyeSB0byB0aGUgdG90YWwgc3VtIG9m IEdCUDYuMzUwIG1pbGxpb24gKFNpeCBtaWxsaW9uLCBUaHJlZSBodW5kcmVkIGFuZCBmaWZ0eSB0 aG91c2FuZCBCcml0aXNoIFBvdW5kcyBTdGVybGluZ3MpIGluIHRoZSBpbnRlbnQgb2YgdGhlIGRl Y2Vhc2VkIChuYW1lIG5vdyB3aXRoaGVsZCBzaW5jZSB0aGlzIGlzIG15IHNlY29uZCBsZXR0ZXIg dG8geW91KS48L3A+Cgo8cD5JIGNvbnRhY3RlZCB5b3UgYmVjYXVzZSB5b3UgYmVhciB0aGUgc3Vy bmFtZSBpZGVudGl0eSBhbmQgdGhlcmVmb3JlIGNhbiBwcmVzZW50IHlvdSBhcyB0aGUgYmVuZWZp Y2lhcnkgdG8gaW5oZXJpdCB0aGUgYWNjb3VudCBwcm9jZWVkcyBvZiB0aGUgZGVjZWFzZWQgc2lu Y2UgdGhlcmUgaXMgbm8gd3JpdHRlbiAmcXVvdDtXSUxMJnF1b3Q7IG9yIHRyYWNlIHRvIHRoZSBk ZWNlYXNlZCBmYW1pbHkgcmVsYXRpdmVzLiBNeSBhaW0gaXMgdG8gcHJlc2VudCB5b3UgdG8gbXkg QmFuayBBdXRob3JpdGllcyBhcyB0aGUgTmV4dCBvZiBLaW4gdG8gb3VyIGRlY2Vhc2VkIGNsaWVu dC4gSSB3aWxsIGd1aWRlIHlvdSBhbGwgdGhyb3VnaCB0aGUgQ2xhaW0gcHJvY2VkdXJlIGJ5IHBy b3ZpZGluZyBhbGwgcmVsZXZhbnQgSW5mb3JtYXRpb24gYW5kIGd1aWRpbmcgeW91IGluIHlvdXIg ZGVjaXNpb25zIGFuZCByZXNwb25zZSB0byB0aGUgQmFuayBNYW5hZ2VtZW50LiBBbGwgdGhlIHBh cGVycyB3aWxsIGJlIHByb2Nlc3NlZCBhZnRlciB5b3VyIGFjY2VwdGFuY2UuPC9wPgoKPHA+SW4g eW91ciBhY2NlcHRhbmNlIG9mIHRoaXMgZGVhbCwgSSByZXF1ZXN0IHRoYXQgeW91IGtpbmRseSBm b3J3YXJkIHRvIG1lIHlvdXIgbGV0dGVyIG9mIGFjY2VwdGFuY2U7IHlvdXIgY3VycmVudCB0ZWxl cGhvbmUgYW5kIGZheCBudW1iZXJzLCBhZ2UsIG9jY3VwYXRpb25hbCBzdGF0dXMgYW5kIGEgZm9y d2FyZGluZyBhZGRyZXNzIHRvIGVuYWJsZSBtZSBzdWJtaXQgdG8gdGhlIEJhbmsgTWFuYWdlbWVu dCB0aGUgZGV0YWlscyBhcyB0aGUgTmV4dCBvZiBLaW4gdG8gdGhlaXIgZGVjZWFzZWQgY3VzdG9t ZXIuPC9wPgoKPHA+QmVzdCBSZWdhcmRzLDwvcD4KCjxwPk1yLiBSdWJlbiBDT05WWTwvcD4= --===============8741382682762087032==--