HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/mail/.spam/new/1285277271.H974230P3377.www2.pit.tblive.com,S=7177
Return-path: <ozmdzl@abatwo.info>
Envelope-to: melissa@blueliner.net
Delivery-date: Thu, 23 Sep 2010 17:27:51 -0400
Received: from abatwo.info ([173.208.123.45] helo=mx1.abatwo.info)
	by www2.pit.tblive.com with smtp (Exim 4.69)
	(envelope-from <ozmdzl@abatwo.info>)
	id 1OytKY-0000s1-Qc
	for melissa@blueliner.net; Thu, 23 Sep 2010 17:27:51 -0400
Received: from AUSP01VMBX11.abatwo.info ([10.2.8.165]) by
 AUSP01MHUB05.abatwo.info ([10.2.8.172]) with mapi; Thu, 23 Sep 2010 16:27:45 -0600
From: Coupon Dept. <ozmdzl@abatwo.info>
To: "melissa@blueliner.net" <melissa@blueliner.net>
Date: Thu, 23 Sep 2010 16:27:45 -0600
Thread-Topic: Coupons are ready to be downloaded...
Thread-Index: ActY8VrH8lYAvqTbTRGTPdIPm93Ijg==
Message-ID: <CEF30587865979419C35B1BD3AE065BC39E4DF691F@AUSP01VMBX11.abatwo.info>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-cr-hashedpuzzle: Aarn A3pf A5Mb BTId CXUl C1ZX C4lX Dcqv Eja6 EnVu Gh+b
 HIau HNJQ I+oP JFdv
 JIGL;1;dABlAHMAdABpAG4AZwBAAGwAbwBsAG0AbwBuAGUAeQAuAG8AcgBnAA==;Sosha1_v1;7;{830CF6E4-E35E-40AF-95DD-43063641CFEC};YgByAGEAbgBkAG8AbgBAAG4AZQByAGQAeQBzAG8AdQB0AGgAbQBhAHIAawBlAHQAaQBuAGcALgBjAG8AbQA=;Thu, 23 Sep 2010 16:27:45 -0600 GMT;eQBlAGEAaAA=
x-cr-puzzleid: {830CF6E4-E35E-40AF-95DD-43063641CFEC}
acceptlanguage: en-US
Content-Type: multipart/alternative;
	boundary="_000_CEF30587865979419C35B1BD3AE065BC39E4DF691FAUSP01VMBX11c_"
MIME-Version: 1.0
X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010073001)]
X-MAIL-FROM: <ozmdzl@abatwo.info>
X-SOURCE-IP: [(unknown)]
X-AnalysisOut: [v=1.0 c=1 a=BLceEmwcHowA:10 a=38uLcFpo6nJaFUi5eYvXHw==:17 ]
X-AnalysisOut: [a=trbvPWiLAAAA:8 a=mZceFrucxzdXNoOef8cA:9 a=jsH-gU-AGIx0Z2]
X-AnalysisOut: [EzFYAA:7 a=yXpg4qJ1KZdDZSLl7cg2R4EK8ZEA:4 a=CjuIK1q_8ugA:1]
X-AnalysisOut: [0 a=hpkDWj5tzPgA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=zj]
X-AnalysisOut: [MnWt53KBA-Qb8NlugA:9 a=F_2LUnJiweOrUUskG1MA:7 a=F7Nm36d1Yt]
X-AnalysisOut: [NL0UYN-R5GQrIcXl8A:4]
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Coupons are now ready [http://sgq.abatwo.info/ritz1.JPG] <http://hjqjw.abatwo.info/ghhnpnoq/eooqwk/>
	Please activate coupons soon... [http://eon.abatwo.info/ritz2.JPG] <http://rjcjn.abatwo.info/ghz/wkwo/qeooqwe/>
	http://htctng.abatwo.info/hhwpwoce/ddcws/ [...] 
	Content analysis details:   (9.6 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	[Blocked - see <http://www.spamcop.net/bl.shtml?173.208.123.45>]
	-0.0 SPF_PASS               SPF: sender matches SPF record
	0.0 HTML_MESSAGE           BODY: HTML included in message
	1.8 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of words
	2.0 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
	[score: 0.8685]
	0.4 HTML_IMAGE_RATIO_02    BODY: HTML has a low ratio of text to image area
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: abatwo.info]
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: abatwo.info]
X-Spam-Flag: YES
Subject: ***SPAM*** Coupons are ready to be downloaded...

--_000_CEF30587865979419C35B1BD3AE065BC39E4DF691FAUSP01VMBX11c_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Coupons are now ready
[http://sgq.abatwo.info/ritz1.JPG]
<http://hjqjw.abatwo.info/ghhnpnoq/eooqwk/>
Please activate coupons soon...

[http://eon.abatwo.info/ritz2.JPG]
<http://rjcjn.abatwo.info/ghz/wkwo/qeooqwe/>
http://htctng.abatwo.info/hhwpwoce/ddcws/

--_000_CEF30587865979419C35B1BD3AE065BC39E4DF691FAUSP01VMBX11c_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
shape {behavior:url(#default#VML);}
</style>
http://htctng.abatwo.info/hhwpwoce/ddcws/

<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
	{mso-style-priority:99;
	mso-style-link:"Balloon Text Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:8.0pt;
	font-family:"Tahoma","sans-serif";}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
span.BalloonTextChar
	{mso-style-name:"Balloon Text Char";
	mso-style-priority:99;
	mso-style-link:"Balloon Text";
	font-family:"Tahoma","sans-serif";}
MsoChpDefault
	{mso-style-type:export-only;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal>Coupons are now ready<o:p></o:p></p>

<p class=3DMsoNormal><a =
href=3D"http://hjqjw.abatwo.info/ghhnpnoq/eooqwk/"><span
style=3D'color:windowtext;text-decoration:none'><img border=3D0 width=3D574
height=3D689 id=3D"Picture_x0020_0" =
src=3D"http://mox.abatwo.info/ritz1.JPG"
alt=3Dritz1.JPG></span></a><o:p></o:p></p>

<p class=3DMsoNormal>Please activate coupons soon...<o:p></o:p></p>

<p class=3DMsoNormal><o:p> </o:p></p>

<p class=3DMsoNormal><a =
href=3D"http://rjcjn.abatwo.info/ghz/wkwo/qeooqwe/"><span
style=3D'color:windowtext;text-decoration:none'><img border=3D0 width=3D604
height=3D146 id=3D"Picture_x0020_1" =
src=3D"http://dyb.abatwo.info/ritz2.JPG"
alt=3Dritz2.JPG></span></a><o:p></o:p></p>

</div>

</body>

</html>

--_000_CEF30587865979419C35B1BD3AE065BC39E4DF691FAUSP01VMBX11c_--