January 2004 - Olena-bugs

*****SPAM***** Increase Site Site Traffic in 2004- Free90 Day Trial Program
by Kane at InternetSeer 30 Jan '04

30 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: Try Submitnet.net Free for 90 Days This email advertisement is being sent to olena-bugs(a)lrde.epita.fr as part of your InternetSeer Web site monitoring service. Your email address has not been given to any Third Parties. InternetSeer controls all e-mail delivery to assure your privacy. If you receive multiple emails you may have more than one URI:http://www.internetseer.com InternetSeer account. Consolidate your accounts today by joining URI:http://redir.internetseer.com/tr.jsp?79785YxJxD7j7lEWR7g7jSm6pxX6v76Ozy… InternetSeer's Priority Club. [...] Content analysis details: (6.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 HTML_FONT_BIG BODY: HTML has a big font 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.2 HTML_50_60 BODY: Message is 50% to 60% HTML 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.69 listed in dnsbl.sorbs.net] [66.150.40.224 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** Hello
by binzelsa＠global.co.za 28 Jan '04

28 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment. [skipped application/octet-stream attachment] [...] Content analysis details: (7.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 SUB_HELLO Subject starts with "Hello" 0.3 NO_REAL_NAME From: does not include a real name 0.1 MICROSOFT_EXECUTABLE RAW: Message includes Microsoft executable program 1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server [81.3.179.222 listed in dnsbl.sorbs.net] 1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org [<http://dsbl.org/listing?ip=81.3.179.222>] 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [81.3.179.222 listed in dnsbl.sorbs.net] 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.8 PRIORITY_NO_NAME Message has priority setting, but no X-Mailer The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** test
by bieberhipp＠aol.com 27 Jan '04

27 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment. [skipped application/octet-stream attachment] [...] Content analysis details: (7.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 NO_REAL_NAME From: does not include a real name 1.4 RCVD_FAKE_HELO_DOTCOM Received contains a faked HELO hostname 1.9 FAKE_HELO_AOL Host HELO did not match rDNS: aol.com 1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server [81.3.179.222 listed in dnsbl.sorbs.net] 1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org [<http://dsbl.org/listing?ip=81.3.179.222>] 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [81.3.179.222 listed in dnsbl.sorbs.net] 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.8 PRIORITY_NO_NAME Message has priority setting, but no X-Mailer The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** InternetSeer Recovery
by InternetSeer 16 Jan '04

16 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: InternetSeer Recovery URI:http://www.internetseer.com/images/pixel.gif URI:http://redir.internetseer.com/tr.jsp?79785YxX7g7mOzD7i7gEWLrs27078Yxzyw… URI:http://redir.internetseer.com/tr.jsp?79785YJGR7h7oYzX7f7hOLs9fD727XqWNw… [...] Content analysis details: (7.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 FROM_HAS_MIXED_NUMS From: contains numbers mixed in with letters 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.222>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.222 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** Learn what keywords drive traffic to your website
by Kane at InternetSeer 16 Jan '04

16 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: ta090403 This email advertisement is being sent to olena-bugs(a)lrde.epita.fr as part of your InternetSeer Web site monitoring service. Your email address has not been given to any Third Parties. InternetSeer controls all e-mail delivery to assure your privacy. If you receive multiple emails you may have more than one URI:http://www.internetseer.com InternetSeer account. Consolidate your accounts today by joining URI:http://redir.internetseer.com/tr.jsp?79785YxJxD7j7lEWR7g7jSmapxX6v76Ozy… InternetSeer's Priority Club. [...] Content analysis details: (7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.69 listed in dnsbl.sorbs.net] [66.150.40.224 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** InternetSeer Alert
by InternetSeer 16 Jan '04

16 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: InternetSeer Alert URI:http://www.internetseer.com/images/pixel.gif URI:http://redir.internetseer.com/tr.jsp?79785YxX7g7mOzD7i7gEWLrq27078Yxzyw… URI:http://redir.internetseer.com/tr.jsp?79785YJGR7h7oYzX7f7hOLs7fD727XqWNw… [...] Content analysis details: (8.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 FREE_TRIAL BODY: Free Trial 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.222>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.222 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** InternetSeer Alert
by InternetSeer 16 Jan '04

16 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: InternetSeer Alert URI:http://www.internetseer.com/images/pixel.gif URI:http://redir.internetseer.com/tr.jsp?79785YxX7g7mOzD7i7gEWLro27078Yxzyw… URI:http://redir.internetseer.com/tr.jsp?79785YJGR7h7oYzX7f7hOLszD727XqWNwx… [...] Content analysis details: (8.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 FREE_TRIAL BODY: Free Trial 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.222>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.222 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** Communicate, Collaborate, and Improve Productivity
by Kane at InternetSeer 09 Jan '04

09 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: This email advertisement is being sent to olena-bugs(a)lrde.epita.fr and other Subscribers as part of your InternetSeer Web site monitoring service. Your email address has not been given to any Third Parties. InternetSeer controls all e-mail delivery to assure your privacy. If you receive multiple emails you may have more than one InternetSeer account. Consolidate your accounts today by joining the InternetSeer Priority Club by clicking here: http://redir.internetseer.com/tr.jsp?79785YxJxD7j7lEWR7g7jSmhpxX6v76OzyxyyK… [...] Content analysis details: (14.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 NO_OBLIGATION BODY: There is no obligation 0.3 HTML_WEB_BUGS BODY: Image tag intended to identify you 5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 0.9976] 0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML 0.1 HTML_MESSAGE BODY: HTML included in message 0.3 HTML_FONT_BIG BODY: HTML has a big font 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 2.5 FRONTPAGE BODY: Frontpage used to create the message 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.69 listed in dnsbl.sorbs.net] [66.150.40.232 listed in dnsbl.sorbs.net] 0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 0.1 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** InternetSeer Recovery
by InternetSeer 05 Jan '04

05 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: InternetSeer Recovery URI:http://www.internetseer.com/images/pixel.gif URI:http://redir.internetseer.com/tr.jsp?79785YxX7g7mOzD7i7gEWLrs27078Yxzyw… URI:http://redir.internetseer.com/tr.jsp?79785YJGR7h7oYzX7f7hOLs9fD727XqWNw… [...] Content analysis details: (8.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 FROM_HAS_MIXED_NUMS From: contains numbers mixed in with letters 0.3 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 0.9903] 0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 HTML_MESSAGE BODY: HTML included in message 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.222 listed in dnsbl.sorbs.net] 0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 1.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 0.1 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** InternetSeer Alert
by InternetSeer 05 Jan '04

05 Jan '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: InternetSeer Alert URI:http://www.internetseer.com/images/pixel.gif URI:http://redir.internetseer.com/tr.jsp?79785YxX7g7mOzD7i7gEWLrq27078Yxzyw… URI:http://redir.internetseer.com/tr.jsp?79785YJGR7h7oYzX7f7hOLs7fD727XqWNw… [...] Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 FREE_TRIAL BODY: Free Trial 0.3 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 HTML_MESSAGE BODY: HTML included in message 2.3 BAYES_70 BODY: Bayesian spam probability is 70 to 80% [score: 0.7842] 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.222 listed in dnsbl.sorbs.net] 0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 1.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 0.1 CLICK_BELOW Asks you to click below The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0