File: /home/awaldron/mail/.spam/new/1285852778.H283835P4474.www2.pit.tblive.com,S=4276
Return-path: <presidencyvbg789@island-castaways.com>
Envelope-to: quirkedfocus@blueliner.net
Delivery-date: Thu, 30 Sep 2010 09:19:38 -0400
Received: from 41-218-199-188-adsl-dyn.4u.com.gh ([41.218.199.188])
by www2.pit.tblive.com with esmtp (Exim 4.69)
(envelope-from <presidencyvbg789@island-castaways.com>)
id 1P1J2v-0001A5-73
for quirkedfocus@blueliner.net; Thu, 30 Sep 2010 09:19:38 -0400
Received: from [41.218.199.188] (port=7049 helo=COM2)
by inbound.island-castaways.com.netsolmail.net with asmtp
id 3C5C21-000457-99
for <quirkedfocus@blueliner.net>; Thu, 30 Sep 2010 01:19:32 -1200
Message-ID: <78AF011BF79C41559508C3B80DAC6DEE@COM2>
From: "Known brands of Swiss watches. Louie Pugh" <presidencyvbg789@island-castaways.com>
To: <quirkedfocus@blueliner.net>
Date: Thu, 30 Sep 2010 01:19:32 -1200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01CB60A2.1EA417B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Spam: Not detected
X-Mras: Ok
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Take part in accessories selling only this month.. Armani
earrings are the best present for modish lady. We need you to click
http://foldpass.ru Take part in accessories selling only this month.. Armani
earrings are the best present for modish lady. [...]
Content analysis details: (18.7 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.218.199.188>]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[41.218.199.188 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: foldpass.ru]
1.5 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: foldpass.ru]
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Our prices will surely attract you attention as they are the lowest in the internet. Super discounted prices for branded accessories of famous manufacturers.
This is a multi-part message in MIME format.
------=_NextPart_000_0005_01CB60A2.1EA417B0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Take part in accessories selling only this month.. Armani earrings are the best present for modish lady.
We need you to click
http://foldpass.ru
------=_NextPart_000_0005_01CB60A2.1EA417B0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =3D
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.6001.18099" name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV align=3Dcenter><FONT face=3DArial size=3D2><b>Take part in accessories=
selling only this month..</b> Armani earrings are the best present for mod=
ish lady.</FONT></DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2>
<A href=3D"http://foldpass.ru">We need you to click</A></FONT></DIV></BODY>=
</HTML>
------=_NextPart_000_0005_01CB60A2.1EA417B0--