File: /home/awaldron/mail/.spam/new/1285879974.H487353P11437.www2.pit.tblive.com,S=5173
Return-path: <billing@blueliner.net>
Envelope-to: billing@blueliner.net
Delivery-date: Thu, 30 Sep 2010 16:52:54 -0400
Received: from ppp-124-121-17-15.revip2.asianet.co.th ([124.121.17.15] helo=ppp-124-121-18-192.revip2.asianet.co.th)
by www2.pit.tblive.com with smtp (Exim 4.69)
(envelope-from <billing@blueliner.net>)
id 1P1Q7V-0002xX-FM
for billing@blueliner.net; Thu, 30 Sep 2010 16:52:54 -0400
Content-Return: allowed
Message-Id: <20101001035238.2632.qmail@ppp-124-121-18-192.revip2.asianet.co.th>
From: Online Pfizer Inc. <billing@blueliner.net>
To: TO_EMAIL
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Newsletter http://groups.yahoo.com/group/lwfwlsrek/messageATE
If you are unable to display this newsletter, please click here to view it
online. You are currently registered to receive newsletter at [billing@blueliner.net]
[...]
Content analysis details: (18.8 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
1.2 TO_MALFORMED To: has a malformed address
0.0 MISSING_DATE Missing Date: header
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[124.121.17.15 listed in dnsbl.sorbs.net]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[124.121.17.15 listed in zen.spamhaus.org]
1.6 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: medicshopnkd.ru]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: medicshopnkd.ru]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: medicshopnkd.ru]
0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: medicshopnkd.ru]
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: medicshopnkd.ru]
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
-0.5 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Subject: ***SPAM*** billing@blueliner.net "BEST PRICE " 65% OFF!
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>Newsletter</title>
</head>
<body>
<table align="center" cellpadding="0" cellspacing="0" width="792" style="border: 1px solid #999;">
<tr>
<td align="left" height="20" bgcolor="#333333" style="font:10px Arial, Helvetica, sans-serif; color:#fff;">
http://groups.yahoo.com/group/lwfwlsrek/messageATE </td>
</tr><tr><td style="text-align: center">
<br />
<a href="http://egj.medicshopnkd.ru">
<img alt="Click here for image" src="http://ejf.medicshopnkd.ru/1.gif" style="border-width: 0px" /></a><br /><br />
</td></tr>
<tr><td>
<table width="790" cellpadding="0" cellspacing="0">
<tr><td style="font: 10px Arial, Helvetica, sans-serif; color:#000000; text-align: center; padding: 6px; background-color:#eeeeee;">
<center><span style='font-size:8.5pt;font-family:Arial'>If you are unable to display this newsletter, please <a href="http://xyw.medicshopnkd.ru">
<b><font color="#336699"><span style='color:#336699;font-weight:bold'>click here</span></font></b></a> to view it online.<br />
</span></center>You are currently registered to receive newsletter at [billing@blueliner.net]
<br /><br />
<a href="http://fpi.medicshopnkd.ru" style="color:#cc0000;">Online Support Team</a> |
<a href="http://iik.medicshopnkd.ru" target="_blank" style="color:#cc0000;">
Unsubscribe</a> |
<a href="http://dho.medicshopnkd.ru" target="_blank" style="color:#cc0000;">
Subscribe</a> | <a href="http://dao.medicshopnkd.ru" target="_blank" style="color:#cc0000;">
Privacy Policy</a><br /><a href="http://fvv.medicshopnkd.ru" target="_blank" style="color:#cc0000;">
Subscribe/Renew to e-Magazine</a> | <a href="http://xmo.medicshopnkd.ru" style="color:#cc0000;">
Editorial Feedback</a>
<br /><br />
�2010
<a href="http://feb.medicshopnkd.ru" target="_blank" style="color:#cc0000;">
the Media</a>. All Rights Reserved. </td></tr>
</table>
</td></tr>
</table>
</body>
</html>