HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //proc/self/root/home/awaldron/mail/.spam/new/1285730871.H184988P17244.www2.pit.tblive.com,S=3390
Return-path: <melissa@blueliner.net>
Envelope-to: melissa@blueliner.net
Delivery-date: Tue, 28 Sep 2010 23:27:51 -0400
Received: from 20158098105.user.veloxzone.com.br ([201.58.98.105])
	by www2.pit.tblive.com with smtp (Exim 4.69)
	(envelope-from <melissa@blueliner.net>)
	id 1P0nKe-0004U3-K2
	for melissa@blueliner.net; Tue, 28 Sep 2010 23:27:51 -0400
From: Adderall&Percocet <melissa@blueliner.net>
To: melissa@blueliner.net
MIME-Version: 1.0
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=17.2
X-Spam-Score: 172
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Click here! [...] 
	Content analysis details:   (17.2 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	0.0 MISSING_MID            Missing Message-Id: header
	0.0 MISSING_DATE           Missing Date: header
	2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	[Blocked - see <http://www.spamcop.net/bl.shtml?201.58.98.105>]
	0.0 HTML_MESSAGE           BODY: HTML included in message
	1.8 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
	1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
	1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
	[URIs: voffxwfm.ru]
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: voffxwfm.ru]
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: voffxwfm.ru]
	3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
	[201.58.98.105 listed in zen.spamhaus.org]
	0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
	1.5 URIBL_SBL              Contains an URL listed in the SBL blocklist
	[URIs: voffxwfm.ru]
	0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[201.58.98.105 listed in dnsbl.sorbs.net]
	0.0 HTML_SHORT_LINK_IMG_1  HTML is very short with a linked image
	-2.8 AWL                    AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** melissa@blueliner.net PainKiller 76% OFF.

<!DOCTYPE html
  PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
   <head>
      <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=UTF-8"/>
      </head>
   <body>
   <table border="0" cellpadding="0" cellspacing="0" style="width: 896px">
<tr><td align="center" style="font: normal 11px Verdana, sans-serif; color: #333;"><a href="http://eiikb.voffxwfm.ru?name=melissa@blueliner.net" style="text-decoration: none; color: #0099ff;">Click here!</td></tr>
<tr><td align="center">
<br/>
<a href="http://zsdkp.voffxwfm.ru?name=melissa@blueliner.net"><img src="http://lalaypta.voffxwfm.ru/lalajuepj.jpg" style="border-width: 0px"/></a></td></tr>
</table>
</body>
</html>