Return-Path: Delivered-To: info+spam@luanbird.com Received: from sand163.sitesanctuary.org by sand163.sitesanctuary.org with LMTP id IAOKNOSs1WefXAkAfhI6Ng (envelope-from ) for ; Sat, 15 Mar 2025 16:37:56 +0000 Return-path: Envelope-to: info@luanbird.com Delivery-date: Sat, 15 Mar 2025 16:37:56 +0000 Received: from [176.65.134.174] (port=61492 helo=luanbird.com) by sand163.sitesanctuary.org with esmtp (Exim 4.98.1) (envelope-from ) id 1ttUWJ-00000002ab4-34MQ for info@luanbird.com; Sat, 15 Mar 2025 16:37:56 +0000 From: Abuse luanbird.com Hosting provider To: info@luanbird.com Date: 15 Mar 2025 09:35:58 -0700 Message-ID: <20250315093557.770C4A629B7817E2@luanbird.com> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=49.7 X-Spam-Score: 497 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "sand163.sitesanctuary.org", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: New Page 7 Suspension Notice. Content analysis details: (49.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [176.65.134.174 listed in psbl.surriel.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: bafkreie6dita4ogrgjyryynkomtebn6ctsydb2cp3uumfhfws3e2ekesr4.ipfs.dweb.link] [URI: luanbird.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URI: bafkreie6dita4ogrgjyryynkomtebn6ctsydb2cp3uumfhfws3e2ekesr4.ipfs.dweb.link] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [176.65.134.174 listed in bl.score.senderscore.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=abuse%40luanbird.com;ip=176.65.134.174;r=sand163.sitesanctuary.org] 4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail) [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=luanbird.com;ip=176.65.134.174;r=sand163.sitesanctuary.org] 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 T_MXG_EMAIL_FRAG BODY: URI with email in fragment 1.0 URI_DWEBIPFS References Interplanetary File System PtP content via dweb.link, likely phishing 18 KAM_IPFS Abused Protocol for Distributed Content 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 0.0 URI_IPFS References Interplanetary File System PtP content, probable phishing 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 0.0 TO_EQ_FM_DOM_SPF_FAIL To domain == From domain and external SPF failed 0.0 VFY_ACCT_NORDNS Verify your account to a poorly-configured MTA - probable phishing 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 5.0 KAM_SOMETLD_ARE_BAD_TLD .bar, .beauty, .buzz, .cam, .casa, .cfd, .club, .date, .guru, .link, .live, .monster, .online, .press, .pw, .quest, .rest, .sbs, .shop, .stream, .top, .trade, .wiki, .work, .xyz TLD abuse 5.5 KAM_MAILBOX2 Mailbox Quota Phishing Scams X-Spam-Flag: YES Subject: ***SPAM*** Suspension Notice info@luanbird.com New Page 7
 

Suspension Notice.

The number of outbound emails generated from yo= ur  info@luanbird.com violates Our Hostin= g Services Agreement and/or Acceptable Use Policy.

Your account services has been marked for suspe= nsion due to violation of our terms and conditions.


To prevent this = your are required to verify your account.
   =20
Ensure to = verify your account as soon as possible to avoid service interruption and l= oosing access.
 =20

= Thank you= ,
Abuse Department  luanbird.com  Hosting provider