HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: //proc/self/root/home/awaldron/mail/.spam/new/1285589949.H860229P25428.www2.pit.tblive.com,S=2604
Return-path: <DeneenMckercher4103@brasiltelecom.net.br>
Envelope-to: billing@blueliner.net
Delivery-date: Mon, 27 Sep 2010 08:19:09 -0400
Received: from 201-14-241-216.paemt704.dsl.brasiltelecom.net.br ([201.14.241.216] helo=brasiltelecom.net.br)
	by www2.pit.tblive.com with esmtp (Exim 4.69)
	(envelope-from <DeneenMckercher4103@brasiltelecom.net.br>)
	id 1P0Cfl-0006bq-AI
	for billing@blueliner.net; Mon, 27 Sep 2010 08:19:09 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Date: Mon, 27 Sep 2010 09:19:07 -0300
From: "Deneen Mckercher" <DeneenMckercher4103@brasiltelecom.net.br>
To: "billing" <billing@blueliner.net>
Message-Id: <EEC2F8E395F.06BF6CDCE033C@brasiltelecom.net.br>
X-Spam-Status: Yes, score=15.0
X-Spam-Score: 150
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Too big for a hand job http://uu.now-cheapmans.ru/ [...] 
	Content analysis details:   (15.0 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: now-cheapmans.ru]
	1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
	[URIs: now-cheapmans.ru]
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: now-cheapmans.ru]
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	1.9 TVD_RCVD_IP            TVD_RCVD_IP
	0.0 SUBJ_BUY               Subject line starts with Buy or Buying
	0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[201.14.241.216 listed in dnsbl.sorbs.net]
	0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
	[201.14.241.216 listed in zen.spamhaus.org]
	0.7 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral)
	0.6 SPF_HELO_NEUTRAL       SPF: HELO does not match SPF record (neutral)
	1.5 URIBL_SBL              Contains an URL listed in the SBL blocklist
	[URIs: now-cheapmans.ru]
	0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
	dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Buy 2 and get 1 bottle free

Too big for a hand job
http://uu.now-cheapmans.ru/