File: /home/awaldron/mail/.spam/new/1286135280.H679138P32704.www2.pit.tblive.com,S=2428
Return-path: <BuyNow.CialisViagra@yahoo.com>
Envelope-to: kurt@blueliner.net
Delivery-date: Sun, 03 Oct 2010 15:48:00 -0400
Received: from pc-18-116-104-200.cm.vtr.net ([200.104.116.18])
by www2.pit.tblive.com with smtp (Exim 4.69)
(envelope-from <BuyNow.CialisViagra@yahoo.com>)
id 1P2UXL-0008VO-Le
for kurt@blueliner.net; Sun, 03 Oct 2010 15:48:00 -0400
X-Originating-IP: [200.104.116.18]
X-Originating-Email: [BuyNow.CialisViagra@yahoo.com]
X-Sender: BuyNow.CialisViagra@yahoo.com
Received: (qmail 5414 by uid 559); Sun, 3 Oct 2010 15:47:54 -0400
To: <kurt@blueliner.net>
From: <BuyNow.CialisViagra@yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "www2.pit.tblive.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: http://medicshopid21.com [...]
Content analysis details: (18.8 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9978]
0.0 MISSING_MID Missing Message-Id: header
0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 MISSING_DATE Missing Date: header
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[200.104.116.18 listed in dnsbl.sorbs.net]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[200.104.116.18 listed in zen.spamhaus.org]
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
2.3 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: medicshopid21.com]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: medicshopid21.com]
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** hello
http://medicshopid21.com