From whitejoye45bcgee@gmail.com Wed Oct 30 13:44:51 2019 Received: from [42.231.162.212] (port=3212 helo=gmail.com) by srv.nscenter.net with smtp (Exim 4.92) (envelope-from ) id 1iPnLB-0000bA-JF for support@royalweb.org; Wed, 30 Oct 2019 13:44:51 +0100 Message-ID: <1C0F491D.F61EB4F0@gmail.com> Date: Wed, 30 Oct 2019 04:44:48 -0800 Reply-To: "Rodger Romney  " From: "Rodger Romney  " User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.8.1.12) Gecko/20080213 Thunderbird/2.0.0.12 X-Accept-Language: en-us MIME-Version: 1.0 To: Content-Type: multipart/mixed; boundary="------------734622185523708632613273" X-Spam-Status: Yes, score=29.2 X-Spam-Score: 292 X-Spam-Bar: +++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "srv.nscenter.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: hi After checking royalweb.org we strongly advise you take any of our services here http://www.liftmyrank.co/affordable-seo-services-small-businesses/ Content analysis details: (29.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: liftmyrank.co] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [42.231.162.212 listed in zen.spamhaus.org] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [42.231.162.212 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.8 FSL_HELO_FAKE No description available. 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [42.231.162.212 listed in bl.score.senderscore.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (whitejoye45bcgee[at]gmail.com) 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.8 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [42.231.162.212 listed in psbl.surriel.com] 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.2 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 2.0 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: ***SPAM*** re: Get back your ranks and reach top 10 This is a multi-part message in MIME format. --------------734622185523708632613273 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit hi After checking royalweb.org we strongly advise you take any of our services here http://www.liftmyrank.co/affordable-seo-services-small-businesses/ Pricelist attached Regards Rodger Romney   http://www.liftmyrank.co/unsubscribe/ --------------734622185523708632613273 Content-Type: application/octet-stream; name="SEO-Pricelist.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="SEO-Pricelist.html" PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7 VVJMPWh0dHA6Ly93d3cubGlmdG15cmFuay5jby9PcmRlci1wYWdlLXBvc2l0aXZlLyI+DQo8L2hl YWQ+DQoNCjxwPjxmb250IGZhY2U9IlZlcmRhbmEiPkxvYWRpbmcgPGI+PGEgaHJlZj0iaHR0cDov L3d3dy5saWZ0bXlyYW5rLmNvL09yZGVyLXBhZ2UtcG9zaXRpdmUvIj5TRU8gIFByaWNlbGlzdDwv YT4gPC9iPjwvZm9udD48L3A+DQo8L2h0bWw+DQoNCg== --------------734622185523708632613273--