File: /home/awaldron/mail/.spam/new/1285761852.H573625P8842.www2.pit.tblive.com,S=3375
Return-path: <Adderall@chello084010062229.chello.pl>
Envelope-to: melissa@blueliner.net
Delivery-date: Wed, 29 Sep 2010 08:04:12 -0400
Received: from chello084010062229.chello.pl ([84.10.62.229])
by www2.pit.tblive.com with smtp (Exim 4.69)
(envelope-from <Adderall@chello084010062229.chello.pl>)
id 1P0vON-0002IU-EO
for melissa@blueliner.net; Wed, 29 Sep 2010 08:04:12 -0400
From: Adderall@chello084010062229.chello.pl
To: melissa@blueliner.net
MIME-Version: 1.0
Content-type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.9
X-Spam-Score: 189
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Click here! [...]
Content analysis details: (18.9 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 MISSING_MID Missing Message-Id: header
0.0 MISSING_DATE Missing Date: header
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[84.10.62.229 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[84.10.62.229 listed in dnsbl.sorbs.net]
1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: srtqmzcr.ru]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: srtqmzcr.ru]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: srtqmzcr.ru]
0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: srtqmzcr.ru]
0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
0.0 HTML_MESSAGE BODY: HTML included in message
1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: srtqmzcr.ru]
0.0 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
X-Spam-Flag: YES
Subject: ***SPAM*** melissa@blueliner.net PainKiller 34% OFF.
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="application/xhtml+xml; charset=UTF-8"/>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" style="width: 896px">
<tr><td align="center" style="font: normal 11px Verdana, sans-serif; color: #333;"><a href="http://wfurn.srtqmzcr.ru?name=melissa@blueliner.net" style="text-decoration: none; color: #0099ff;">Click here!</td></tr>
<tr><td align="center">
<br/>
<a href="http://dragh.srtqmzcr.ru?name=melissa@blueliner.net"><img src="http://lalaovej.srtqmzcr.ru/lalalgkdm.jpg" style="border-width: 0px"/></a></td></tr>
</table>
</body>
</html>