File: /home/awaldron/mail/.spam/new/1285331416.H617484P19802.www2.pit.tblive.com,S=4456
Return-path: <hairsplittingry420@revosys.com>
Envelope-to: waldronkurt@blueliner.net
Delivery-date: Fri, 24 Sep 2010 08:30:16 -0400
Received: from [125.161.109.211] (helo=211.subnet125-161-109.speedy.telkom.net.id)
by www2.pit.tblive.com with esmtp (Exim 4.69)
(envelope-from <hairsplittingry420@revosys.com>)
id 1Oz7Pq-00059H-PA
for waldronkurt@blueliner.net; Fri, 24 Sep 2010 08:30:16 -0400
Received: from [125.161.109.211] (port=6383 helo=abe5)
by mail.revosys.com with asmtp
id 0B8070-0009A2-97
for <waldronkurt@blueliner.net>; Fri, 24 Sep 2010 20:30:07 +0700
Message-ID: <A1663194DA304C1F9D47E7CE391CD66D@abe5>
From: "Own a new Swiss watch. Marquita King" <hairsplittingry420@revosys.com>
To: <waldronkurt@blueliner.net>
Date: Fri, 24 Sep 2010 20:30:07 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01CB5BE4.3909DD50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Spam: Not detected
X-Mras: Ok
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Don’t be too late to purchase fantastic accessories for
a special price.. Visit us and you will pour into the world of stylish cheap
accessories. Just one click http://triphope.ru Don’t be too late
to purchase fantastic accessories for a special price.. Visit us and you
will pour into the world of stylish cheap accessories. [...]
Content analysis details: (18.5 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: triphope.ru]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?125.161.109.211>]
0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[125.161.109.211 listed in dnsbl.sorbs.net]
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.5 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: triphope.ru]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[URIs: triphope.ru]
[125.161.109.211 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Make people think that you keep pace with fashion; we can help you. We have lowered our prices to make branded accessories available.
This is a multi-part message in MIME format.
------=_NextPart_000_0005_01CB5BE4.3909DD50
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Don’t be too late to purchase fantastic accessories for a special price.. Visit us and you will pour into the world of stylish cheap accessories.
Just one click
http://triphope.ru
------=_NextPart_000_0005_01CB5BE4.3909DD50
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =3D
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.6001.18099" name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV align=3Dcenter><FONT face=3DArial size=3D2>Don=E2=80=99t be too late t=
o purchase fantastic accessories for a special price.. <b>Visit us and you =
will pour into the world of stylish cheap accessories.</b></FONT></DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2>
<A href=3D"http://triphope.ru">Just one click</A></FONT></DIV></BODY></HTML=
>
------=_NextPart_000_0005_01CB5BE4.3909DD50--