File: //proc/self/root/home/awaldron/mail/.spam/new/1285864132.H363202P1836.www2.pit.tblive.com,S=3900
Return-path: <kurt@blueliner.net>
Envelope-to: kurt@blueliner.net
Delivery-date: Thu, 30 Sep 2010 12:28:52 -0400
Received: from chello089074149135.chello.pl ([89.74.149.135])
by www2.pit.tblive.com with smtp (Exim 4.69)
(envelope-from <kurt@blueliner.net>)
id 1P1M03-0000TP-F2
for kurt@blueliner.net; Thu, 30 Sep 2010 12:28:52 -0400
Message-Id: <20100930182850.2381.qmail@chello089074149135.chello.pl>
From: kurt@blueliner.net
To: kurt@blueliner.net
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=15.4
X-Spam-Score: 154
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml">
<head> <meta http-equiv="Content-Type" content="application/xhtml+xml; charset=UTF-8"/>
</head> <body> <table border="0" cellpadding="0" cellspacing="0" style="width:
896px"> <tr><td align="center" style="font: normal 11px Verdana, sans-serif;
color: #333;"><a href="http://sihlj.memedicgrugsd.ru?name=kurt@blueliner.net"
style="text-decoration: none; color: #0099ff;">Click here!</td></tr> <tr><td
align="center"> <br/> <a href="http://xxenb.memedicgrugsd.ru?name=kurt@blueliner.net"><img
src="http://lduh.memedicgrugsd.ru/1.gif" style="border-width: 0px"/></a></td></tr>
</table> </body> </html> [...]
Content analysis details: (15.4 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.3 DRUG_ED_CAPS BODY: Mentions an E.D. drug
0.0 MISSING_DATE Missing Date: header
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[89.74.149.135 listed in dnsbl.sorbs.net]
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?89.74.149.135>]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[89.74.149.135 listed in zen.spamhaus.org]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: memedicgrugsd.ru]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: memedicgrugsd.ru]
2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
0.3 DRUGS_ERECTILE Refers to an erectile drug
-1.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** Dear kurt@blueliner.net VIAGRA -57%
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="application/xhtml+xml; charset=UTF-8"/>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" style="width: 896px">
<tr><td align="center" style="font: normal 11px Verdana, sans-serif; color: #333;"><a href="http://sihlj.memedicgrugsd.ru?name=kurt@blueliner.net" style="text-decoration: none; color: #0099ff;">Click here!</td></tr>
<tr><td align="center">
<br/>
<a href="http://xxenb.memedicgrugsd.ru?name=kurt@blueliner.net"><img src="http://lduh.memedicgrugsd.ru/1.gif" style="border-width: 0px"/></a></td></tr>
</table>
</body>
</html>