February 2004 - Olena-bugs

*****SPAM***** regarding your website being down
by Kane at InternetSeer 26 Feb '04

26 Feb '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: minimize your website downtime URI:http://www.enterurl.com/images/atwatch/atwatch_logo_112103.gif Minimize Your Website Downtime! URI:http://redir.internetseer.com/tr.jsp?79785YKGxD7j7lEWR7g7jQnnpxX6v76Ozy… Click here for 14 Day Trial! [...] Content analysis details: (8.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.1 HTML_60_70 BODY: Message is 60% to 70% HTML 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED 0.5 HTML_IMAGE_RATIO_10 BODY: HTML has a low ratio of text to image area 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.69 listed in dnsbl.sorbs.net] [66.150.40.232 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below 0.4 AWL AWL: Auto-whitelist adjustment The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** Accept Credit Cards on your site in 24 hours
by Kane at InternetSeer 20 Feb '04

20 Feb '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: This email advertisement is being sent to olena-bugs(a)lrde.epita.fr and other Subscribers as part of your InternetSeer Web site monitoring service. Your email address has not been given to any Third Parties. InternetSeer controls all e-mail delivery to assure your privacy. If you receive multiple emails you may have more than one InternetSeer account. Consolidate your accounts today by joining the InternetSeer Priority Club by clicking here: http://redir.internetseer.com/tr.jsp?79785YxJxD7j7lEWR7g7jSmcpxX6v76OzyxyyK… [...] Content analysis details: (11.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.3 WANTS_CREDIT_CARD BODY: Asks for credit card details 2.0 MUST_BE_18 BODY: Possible porn - Must be 18 2.6 ACCEPT_CREDIT_CARDS BODY: Accept Credit Cards 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.8 HTML_30_40 BODY: Message is 30% to 40% HTML 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 0.2 HTML_TAG_BALANCE_TABLE BODY: HTML is missing "table" close tags 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.1 HTML_TAG_EXISTS_TBODY BODY: HTML has "tbody" tag 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.5 HTML_TITLE_EMPTY BODY: HTML title contains no text 0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.23 listed in dnsbl.sorbs.net] [66.150.40.69 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below -3.8 AWL AWL: Auto-whitelist adjustment The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** Increase Your Website Traffic for 2004
by Kane at InternetSeer 11 Feb '04

11 Feb '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: Try Submitnet.net Free for 90 Days This email advertisement is being sent to olena-bugs(a)lrde.epita.fr as part of your InternetSeer Web site monitoring service. Your email address has not been given to any Third Parties. InternetSeer controls all e-mail delivery to assure your privacy. If you receive multiple emails you may have more than one URI:http://www.internetseer.com InternetSeer account. Consolidate your accounts today by joining URI:http://redir.internetseer.com/tr.jsp?79785YxJxD7j7lEWR7g7jSm7pxX6v76Ozy… InternetSeer's Priority Club. [...] Content analysis details: (7.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 HTML_FONT_BIG BODY: HTML has a big font 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 0.2 HTML_50_60 BODY: Message is 50% to 60% HTML 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.69 listed in dnsbl.sorbs.net] [66.150.40.232 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below 0.4 AWL AWL: Auto-whitelist adjustment The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0

*****SPAM***** regarding your website being down
by Kane at InternetSeer 05 Feb '04

05 Feb '04

Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see the administrator of that system for details. Content preview: minimize your website downtime URI:http://www.enterurl.com/images/atwatch/atwatch_logo_112103.gif Minimize Your Website Downtime! URI:http://redir.internetseer.com/tr.jsp?79785YKGxD7j7lEWR7g7jQngpxX6v76Ozy… Click here for 14 Day Trial! [...] Content analysis details: (7.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here" 0.1 HTML_60_70 BODY: Message is 60% to 70% HTML 0.6 HTML_WEB_BUGS BODY: Image tag intended to identify you 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 HTML_IMAGE_ONLY_10 BODY: HTML: images with 800-1000 bytes of words 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette 0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED 0.5 HTML_IMAGE_RATIO_10 BODY: HTML has a low ratio of text to image area 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.4 HTML_FONT_INVISIBLE BODY: HTML font color is same as background 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?66.150.40.69>] 1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6909>] 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [66.150.40.228 listed in dnsbl.sorbs.net] [66.150.40.69 listed in dnsbl.sorbs.net] 0.0 CLICK_BELOW Asks you to click below -0.8 AWL AWL: Auto-whitelist adjustment The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.

1 0