HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/mail/.spam/new/1285285849.H528668P17097.www2.pit.tblive.com,S=3054
Return-path: <Lidia@ppp-124-120-80-87.revip2.asianet.co.th>
Envelope-to: focus@blueliner.net
Delivery-date: Thu, 23 Sep 2010 19:50:49 -0400
Received: from ppp-124-120-80-87.revip2.asianet.co.th ([124.120.80.87])
	by www2.pit.tblive.com with smtp (Exim 4.69)
	(envelope-from <Lidia@ppp-124-120-80-87.revip2.asianet.co.th>)
	id 1OyvYt-0004Rh-Kv
	for focus@blueliner.net; Thu, 23 Sep 2010 19:50:49 -0400
From: VIAGRA � Online <Lidia@ppp-124-120-80-87.revip2.asianet.co.th>
To: focus@blueliner.net
MIME-Version: 1.0
Content-type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.6
X-Spam-Score: 186
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Dear focus@blueliner.net Get ready to make her happy. Discount
	price store: ID4008913 http://umjsd.healthplanspillssite.net?name=focus@blueliner.net
	We do guarantee high-quality medications, instant worldwide delivery and
	friendly support. 2001-2010 Pfizer Inc. All rights reserved. [...] 
	Content analysis details:   (18.6 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	0.8 FB_GET_MEDS            BODY: Looks like trying to sell meds
	3.6 TVD_QUAL_MEDS          BODY: TVD_QUAL_MEDS
	0.0 MISSING_MID            Missing Message-Id: header
	0.0 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
	2.4 HELO_DYNAMIC_IPADDR    Relay HELO'd using suspicious hostname (IP addr
	1)
	0.0 MISSING_DATE           Missing Date: header
	0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[124.120.80.87 listed in dnsbl.sorbs.net]
	0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
	[124.120.80.87 listed in zen.spamhaus.org]
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: healthplanspillssite.net]
	1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
	[URIs: healthplanspillssite.net]
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: healthplanspillssite.net]
	1.5 URIBL_SBL              Contains an URL listed in the SBL blocklist
	[URIs: healthplanspillssite.net]
	0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
	dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** RE: focus@blueliner.net September 62% OFF.

Dear focus@blueliner.net
Get ready to make her happy.
Discount price store: ID4008913
http://umjsd.healthplanspillssite.net?name=focus@blueliner.net
We do guarantee high-quality medications, instant worldwide delivery and friendly support. 
2001-2010 Pfizer Inc. All rights reserved.