From dysonkizz7detoi@gmail.com Tue Nov 05 02:15:45 2019 Received: from [42.231.162.215] (port=4250 helo=gmail.com) by srv.nscenter.net with smtp (Exim 4.92) (envelope-from ) id 1iRnRX-0006YJ-MH for info@royalweb.org; Tue, 05 Nov 2019 02:15:44 +0100 Message-ID: <18A1199B.025F6D9F@gmail.com> Date: Mon, 04 Nov 2019 17:15:42 -0800 Reply-To: "Dorotha Dowe  " From: "Dorotha Dowe  " User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.1.10) Gecko/20100512 Lightning/1.0b1 Thunderbird/3.0.5 MIME-Version: 1.0 To: Content-Type: multipart/mixed; boundary="------------021578520575031672560261" X-Spam-Status: Yes, score=43.0 X-Spam-Score: 430 X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "srv.nscenter.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: hi info here it is, social website traffic: http://www.mgdots.co/detail.php?id=113 Full details attached Content analysis details: (43.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mgdots.co] 4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL blocklist [URIs: mgdots.co] 4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [42.231.162.215 listed in zen.spamhaus.org] 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL blocklist [URIs: www.mgdots.co] 0.6 URIBL_SBL Contains an URL's NS IP listed in the Spamhaus SBL blocklist [URIs: www.mgdots.co] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 4.5 RCVD_IN_MSPIKE_L4 RBL: Bad reputation (-4) [42.231.162.215 listed in bl.mailspike.net] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [42.231.162.215 listed in bl.score.senderscore.com] 4.4 FSL_HELO_FAKE No description available. 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [42.231.162.215 listed in psbl.surriel.com] 1.5 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dysonkizz7detoi[at]gmail.com) 0.0 T_OBFU_HTML_ATTACH BODY: HTML attachment with non-text MIME type 0.8 PP_MIME_FAKE_ASCII_TEXT BODY: MIME text/plain claims to be ASCII but isn't 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.5 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_HTML_ATTACH HTML attachment to bypass scanning? 0.0 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS 1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla 2.0 SPOOFED_FREEMAIL No description available. X-Spam-Flag: YES Subject: ***SPAM*** re: I need social traffic fast This is a multi-part message in MIME format. --------------021578520575031672560261 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit hi info here it is, social website traffic: http://www.mgdots.co/detail.php?id=113 Full details attached Regards Dorotha Dowe   Unsubscribe option is available on the footer of our website --------------021578520575031672560261 Content-Type: application/octet-stream; name="Facebook-traffic-pricelist.html" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Facebook-traffic-pricelist.html" PGh0bWw+DQoNCjxoZWFkPg0KPE1FVEEgSFRUUC1FUVVJVj0iUmVmcmVzaCIgY29udGVudD0gIjI7 VVJMPWh0dHA6Ly93d3cubWdkb3RzLmNvL2RldGFpbC5waHA/aWQ9MTEzIj4NCjwvaGVhZD4NCg0K PHA+PGZvbnQgZmFjZT0iVmVyZGFuYSI+TG9hZGluZyA8Yj48YSBocmVmPSJodHRwOi8vd3d3Lm1n ZG90cy5jby9kZXRhaWwucGhwP2lkPTExMyI+RmFjZWJvb2sgdHJhZmZpYyBwcmljZWxpc3Q8L2E+ IDwvYj48L2ZvbnQ+PC9wPg0KPC9odG1sPg0KDQo= --------------021578520575031672560261--