HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/mail/.spam/new/1285660398.H735734P1203.www2.pit.tblive.com,S=4810
Return-path: <ogitoqufue8074@rima-tde.net>
Envelope-to: kurt@blueliner.net
Delivery-date: Tue, 28 Sep 2010 03:53:18 -0400
Received: from 20.red-81-45-215.staticip.rima-tde.net ([81.45.215.20] helo=rima-tde.net)
	by www2.pit.tblive.com with esmtp (Exim 4.69)
	(envelope-from <ogitoqufue8074@rima-tde.net>)
	id 1P0Uzu-0000FK-OA
	for kurt@blueliner.net; Tue, 28 Sep 2010 03:53:18 -0400
From: "NaturalViagra Provider" <ogitoqufue8074@rima-tde.net>
To: kurt@blueliner.net
Reply-To: ogitoqufue8074@rima-tde.net
Mime-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=12.9
X-Spam-Score: 129
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Newsletter Newsletter Tuesday, September 28, 2010 Subscribe
	or unsubscribe from this newsletter Subscriptions | Customer Service | Unsubscribe
	| Contact the Editor This message was sent to kurt@blueliner.net. [...] 
	Content analysis details:   (12.9 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	0.6 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is a abuseable web server
	[81.45.215.20 listed in dnsbl.sorbs.net]
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	0.0 MISSING_MID            Missing Message-Id: header
	0.0 MISSING_DATE           Missing Date: header
	3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
	[81.45.215.20 listed in zen.spamhaus.org]
	2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	[Blocked - see <http://www.spamcop.net/bl.shtml?81.45.215.20>]
	0.7 SPF_FAIL               SPF: sender does not match SPF record (fail)
	[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ogitoqufue8074%40rima-tde.net;ip=81.45.215.20;r=www2.pit.tblive.com]
	0.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
	[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=rima-tde.net;ip=81.45.215.20;r=www2.pit.tblive.com]
	1.6 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
	0.0 HTML_MESSAGE           BODY: HTML included in message
	0.1 HTML_FONT_SIZE_HUGE    BODY: HTML font size is huge
	1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
	0.0 HTML_SHORT_LINK_IMG_3  HTML is very short with a linked image
X-Spam-Flag: YES
Subject: ***SPAM*** Hi kurt, win a 80% discount. play

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Newsletter</title>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
</head>
<body>
<table width="99%" border="0" cellspacing="0" cellpadding="0" >
<tr height="50">
<td valign="bottom"><font face="arial" size="7" color="gray">&nbsp;Newsletter</font></td>
</tr>
<tr height="20"  style="color:gray;font-size:11px;font-family:Arial,Helvetica,sans-serif;">
<td><strong style="font-size:13px;">Tuesday, September 28, 2010</strong></td>
<td align="right"><a href="http://z.hemedlab.ru/?it=5F0376F76EdB3CbAF4f971EB65b"  style="color:#0066CC;">
Subscribe</a> or
	<a href="http://o.hemedlab.ru/?a=C51163efe2441FA525FDAbFe867" style="color:#0066CC;" >
unsubscribe</a> from this newsletter</td>
</tr></table>
<font face="Arial,Helvetica,sans-serif" size="2">
<ol style="font-family:Arial,Helvetica,sans-serif;color:red;font-size: 10px;padding-top:0">
		<div style="background-color:#CCE0F5;padding:15px 25px;margin:0px 0px 20px -40px; text-align: center;">
		<a href="http://s.hemedlab.ru/?loaf=0b5EFA6bE442d6af9C2C32F">
		<img alt="Click here" src="http://kv.hemedlab.ru/logo.jpg" style="border-width: 0px" /></a></div>
	</ol>
</font>
<ul>
</font>
<p><a href="http://y.hemedlab.ru/?significant=b5Be7F7D9962f4c157fF9ebea0" style="color:#0066CC;">
Subscriptions</a> | <a href="http://hbtr.hemedlab.ru/?etc=3235C37278A98Fb67D14d2" style="color:#0066CC;">
Customer Service</a> | <a href="http://myapv.hemedlab.ru/?with=f9feBFF1ee6C59Abd36A0551c5&delete=kurt@blueliner.net" style="color:#0066CC;">
Unsubscribe</a> | <a href="http://u.hemedlab.ru/?to=8B23C00c727989Cb7D939a9F6" style="color:#0066CC;">
Contact the Editor</a></p>
<p>This message was sent to kurt@blueliner.net.</p>
<p>Review our <a href="http://udafr.hemedlab.ru/?the=c398bA1E09d1C1A386A3f8d04F1C06" style="color:#0066CC;">
privacy policy</a>.</p>
</ul>
</font>
</body>
</html>