File: /home/awaldron/mail/.spam/new/1285682672.H260028P875.www2.pit.tblive.com,S=4322
Return-path: <bulletiningas154@radiodelilah.com>
Envelope-to: quirkedfocusa@blueliner.net,
quirkedfocus@blueliner.net
Delivery-date: Tue, 28 Sep 2010 10:04:32 -0400
Received: from [110.138.218.17] (helo=17.subnet110-138-218.speedy.telkom.net.id)
by www2.pit.tblive.com with esmtp (Exim 4.69)
(envelope-from <bulletiningas154@radiodelilah.com>)
id 1P0anG-0000Cq-Ma; Tue, 28 Sep 2010 10:04:32 -0400
Received: from [110.138.218.17] (port=3417 helo=andronetgame3)
by radiodelilah.com.inbound10.mxlogic.net with asmtp
id 760A2C-000294-41
for <quirkedfocus@blueliner.net>; Tue, 28 Sep 2010 21:04:22 +0700
Message-ID: <2617626784AA4BC0B023479C0BBDBE73@andronetgame3>
From: "Buy your Swiss watch now. Fidel Shultz" <bulletiningas154@radiodelilah.com>
To: <quirkedfocus@blueliner.net>
Date: Tue, 28 Sep 2010 21:04:22 +0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01CB5F16.0D2CCC30"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Spam: Not detected
X-Mras: Ok
X-Spam-Status: Yes, score=17.4
X-Spam-Score: 174
X-Spam-Bar: +++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Don�t buy in original shops, D&G wallet can be bought here
much cheaper.. Attractiveness can be reached by buying stylish accessories.
Enter http://notehaunt.ru Don�t buy in original shops, D&G wallet
can be bought here much cheaper.. Attractiveness can be reached by buying
stylish accessories. [...]
Content analysis details: (17.4 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.5 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split
IP)
0.0 SUBJ_BUY Subject line starts with Buy or Buying
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[110.138.218.17 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?110.138.218.17>]
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: notehaunt.ru]
1.5 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: notehaunt.ru]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Buy branded accessories to change your status to a trendy one. Buy earrings right now and save money.
This is a multi-part message in MIME format.
------=_NextPart_000_0005_01CB5F16.0D2CCC30
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Don�t buy in original shops, D&G wallet can be bought here much cheaper.. Attractiveness can be reached by buying stylish accessories.
Enter
http://notehaunt.ru
------=_NextPart_000_0005_01CB5F16.0D2CCC30
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =3D
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.6001.18099" name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV align=3Dcenter><FONT face=3DArial size=3D2><b>Don=92t buy in original =
shops, D&G wallet can be bought here much cheaper..</b> Attractiveness can =
be reached by buying stylish accessories.</FONT></DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV align=3Dcenter><FONT face=3DArial size=3D2>
<A href=3D"http://notehaunt.ru">Enter</A></FONT></DIV></BODY></HTML>
------=_NextPart_000_0005_01CB5F16.0D2CCC30--