HEX
Server: Apache
System: Linux www3.pit.tblive.com 5.14.0-687.38.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Aug 12 17:19:12 EDT 2026 x86_64
User: awaldron (1020)
PHP: 8.1.34
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/awaldron/mail/.spam/new/1285830572.H326677P26278.www2.pit.tblive.com,S=4888
Return-path: <ausahed7661@telepac.pt>
Envelope-to: billing@blueliner.net
Delivery-date: Thu, 30 Sep 2010 03:09:32 -0400
Received: from bl14-245-230.dsl.telepac.pt ([85.247.245.230] helo=telepac.pt)
	by www2.pit.tblive.com with esmtp (Exim 4.69)
	(envelope-from <ausahed7661@telepac.pt>)
	id 1P1DGl-0006pk-Fr
	for billing@blueliner.net; Thu, 30 Sep 2010 03:09:32 -0400
From: "SuperViagra Provider" <ausahed7661@telepac.pt>
To: billing@blueliner.net
Reply-To: ausahed7661@telepac.pt
Mime-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=16.5
X-Spam-Score: 165
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
	identified this incoming email as possible spam.  The original message
	has been attached to this so you can view it (if it isn't spam) or label
	similar future email.  If you have any questions, see
	the administrator of that system for details.
	Content preview:  Newsletter Newsletter Thu, September 30, 2010 Subscribe or
	unsubscribe from this newsletter Subscriptions | Customer Service | Unsubscribe
	| Contact the Editor This message was sent to billing@blueliner.net. [...]
	Content analysis details:   (16.5 points, 6.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	2.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
	[URIs: medicgrugsoa.ru]
	3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
	[score: 1.0000]
	0.0 MISSING_MID            Missing Message-Id: header
	0.0 MISSING_DATE           Missing Date: header
	0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
	[85.247.245.230 listed in dnsbl.sorbs.net]
	0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
	[85.247.245.230 listed in zen.spamhaus.org]
	0.7 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral)
	0.6 SPF_HELO_NEUTRAL       SPF: HELO does not match SPF record (neutral)
	1.9 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
	[URIs: medicgrugsoa.ru]
	1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL blocklist
	[URIs: medicgrugsoa.ru]
	1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
	[URIs: medicgrugsoa.ru]
	1.6 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
	0.0 HTML_MESSAGE           BODY: HTML included in message
	0.1 HTML_FONT_SIZE_HUGE    BODY: HTML font size is huge
	1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
	0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
	dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Hi billing, we offer -70%. Movement the in

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Newsletter</title>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1" />
</head>
<body>
<table width="99%" border="0" cellspacing="0" cellpadding="0" >
<tr height="50">
<td valign="bottom"><font face="arial" size="7" color="gray">&nbsp;Newsletter</font></td>
</tr>
<tr height="20"  style="color:gray;font-size:11px;font-family:Arial,Helvetica,sans-serif;">
<td><strong style="font-size:13px;">Thu, September 30, 2010</strong></td>
<td align="right"><a href="http://q.medicgrugsoa.ru/?use=E198b119f97587e81DA1dD7f"  style="color:#0066CC;">
Subscribe</a> or
	<a href="http://x.medicgrugsoa.ru/?strip=328B35b81c84dA2184f88d6094" style="color:#0066CC;" >
unsubscribe</a> from this newsletter</td>
</tr></table>
<font face="Arial,Helvetica,sans-serif" size="2">
<ol style="font-family:Arial,Helvetica,sans-serif;color:red;font-size: 10px;padding-top:0">
		<div style="background-color:#CCE0F5;padding:15px 25px;margin:0px 0px 20px -40px; text-align: center;">
		<a href="http://qka.medicgrugsoa.ru/?for=20884118994B090fD834">
		<img alt="Click here" src="http://vpmj.medicgrugsoa.ru/logo.jpg" style="border-width: 0px" /></a></div>
	</ol>
</font>
<ul>
</font>
<p><a href="http://tqxdn.medicgrugsoa.ru/?in=952CaC1cd41A41036758F4d" style="color:#0066CC;">
Subscriptions</a> | <a href="http://xjji.medicgrugsoa.ru/?are=38fb2562EFed0F26b9d3B67d796" style="color:#0066CC;">
Customer Service</a> | <a href="http://kx.medicgrugsoa.ru/?barbecue=D2A2BA246FB37538f99516ED&delete=billing@blueliner.net" style="color:#0066CC;">
Unsubscribe</a> | <a href="http://f.medicgrugsoa.ru/?then=cC8028C20f6bb2FC92Dc22dd" style="color:#0066CC;">
Contact the Editor</a></p>
<p>This message was sent to billing@blueliner.net.</p>
<p>Review our <a href="http://v.medicgrugsoa.ru/?Latitude=BA3757390A4E9354a44D8" style="color:#0066CC;">
privacy policy</a>.</p>
</ul>
</font>
</body>
</html>