HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/mail/.spam/new/1285813229.H358935P27508.www2.pit.tblive.com,S=2793
Return-path: <TatianaGausman8997@onego.ru>
Envelope-to: jewbluelinergox@blueliner.net
Delivery-date: Wed, 29 Sep 2010 22:20:29 -0400
Received: from ip78-36-40-16.onego.ru ([78.36.40.16] helo=onego.ru)
	by www2.pit.tblive.com with esmtp (Exim 4.69)
	(envelope-from <TatianaGausman8997@onego.ru>)
	id 1P18l2-00079V-I3
	for jewbluelinergox@blueliner.net; Wed, 29 Sep 2010 22:20:29 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Date: Thu, 30 Sep 2010 06:20:22 +0400
From: "Tatiana Gausman" <TatianaGausman8997@onego.ru>
To: "jewbluelinergox" <jewbluelinergox@blueliner.net>
Message-Id: <75B4AEF34B.110D78F3957@onego.ru>
X-Spam-Status: Yes, score=16.6
X-Spam-Score: 166
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Take 2 pills and watch it grow http://iyb.now-big.ru/ [...]
	Content analysis details:   (16.6 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: now-big.ru]
	1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
	[URIs: now-big.ru]
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: now-big.ru]
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[78.36.40.16 listed in dnsbl.sorbs.net]
	2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	[Blocked - see <http://www.spamcop.net/bl.shtml?78.36.40.16>]
	3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
	[78.36.40.16 listed in zen.spamhaus.org]
	0.7 SPF_FAIL               SPF: sender does not match SPF record (fail)
	[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=tatianagausman8997%40onego.ru;ip=78.36.40.16;r=www2.pit.tblive.com]
	0.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
	[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=onego.ru;ip=78.36.40.16;r=www2.pit.tblive.com]
	1.5 URIBL_SBL              Contains an URL listed in the SBL blocklist
	[URIs: now-big.ru]
	0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
	dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** James Blunt falls off stage during concert

Take 2 pills and watch it grow
http://iyb.now-big.ru/