Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Les services sécurisés de la Bancassurance Le message
du service de securite « Credit Mutuel » Bonjour, Cest « Credit
Mutuel » qui vous salue ! Nous sommes contents de vous presenter notre
nouveau systeme de securite. Pour le present, le niveau de notre
securite est monte au nouveau degre qualitatif. En elaborant le
perfectionnement de notre systeme, nous avons pris en consideration
tous les nouvelles technologies de securite des transactions en-ligne.
Vous avez de la chance, car ce nest quaujourdhui vous avez de la
chance de recevoir lutilisation viagere de notre systeme tout a fait
gratuitement! Pour confirmer votre desir de vous brancher sur ce
systeme, nous vous demandons de passer au lien au bas de cette lettre.
Nous vous demandons de ne pas ebruiter vos donnees individuelles aux
tiers. Nous vous prions dagreer nos salutations distinguees, Le
departement de securite « Credit Mutuel » [...]
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.9 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found
0.5 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
[score: 0.6678]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[12.65.60.127 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[12.65.60.127 listed in combined.njabl.org]
0.6 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Job offer. Good income. Our company is in need of
financial representatives. You can earn up to 3000-4000 Euro per
month. Good carreer opportunities. You don't need to have any special
knowledge. You can take it as a part time job. You need to have basic
computer skills, english language and some accounting skills. Please
send us your resume to france(a)market-bonds.com and I will send you all
the details regarding that position. [...]
Content analysis details: (15.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.9 RATWARE_RCVD_PF Bulk email fingerprint (Received PF) found
3.1 FAKE_OUTBLAZE_RCVD Received header contains faked 'mr.outblaze.com'
1.9 EARN_PER_WEEK BODY: Contains 'earn $something per week'
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[61.85.183.29 listed in sbl-xbl.spamhaus.org]
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: eBay Suspension eBay Suspension Need Help? Dear valued
eBay member, We regret to inform you that your eBay account has been
suspended due to concerns we have for the safety and integrity of the
eBay community. [...]
Content analysis details: (20.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.8 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?82.79.189.249>]
0.1 DIGEST_MULTIPLE Message hits more than one network digest check
2.4 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: http://frsvbt.primaryfe.info/?AjCFCl4ONFHTko4
Software from well-known companies! Check out our pricelist. [...]
Content analysis details: (16.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_FONT_BIG BODY: HTML tag for a big font size
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.9 HTML_LINK_PUSH_HERE BODY: HTML link text says "push here" or similar
0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?68.34.126.71>]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: primaryfe.info nightcapif.info]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: primaryfe.info nightcapif.info]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: primaryfe.info nightcapif.info]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Access all the software possible for bottom prices!
Our software is 2-10 times cheaper than sold by our competitors.
Examples: $79.95 Windows XP Professional (Including: Service Pack 2)
$89.95 Microsoft Office 2003 Professional / $79.95 Office XP
Professional $99.95 Adobe Photoshop 8.0/CS (Including: ImageReady CS)
$179.95 Macromedia Studio MX 2004 (Including: Dreamweaver MX + Flash
MX + Fireworks MX) $79.95 Adobe Acrobat 6.0 Professional $69.95 MS
Project 2003 Professional [...]
Content analysis details: (16.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
0.0 HTML_40_50 BODY: Message is 40% to 50% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: digreceam.info]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: digreceam.info]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: digreceam.info]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: digreceam.info]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: digreceam.info]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: q Opt-in Email Special Offer unsubscribe me SEARCH
Software TOP 10 NEW TITLES ON SALE NOW! 1 Office Pro 2003 2 Adobe
Photoshop 9.0 3 Windows XP Pro 4 Adobe Acrobat 7 Pro 5 Flash MX 2004 6
Corel Draw 12 7 Norton Antivirus 2005 8 Windows 2003 Server 9 Alias
Maya 6 Wavefrt 10 Adobe Illustrator 11 See more by this manufacturer
Microsoft Symantec Adobe Customers also bought these other items...
[...]
Content analysis details: (25.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.8 RATWARE_EGROUPS Bulk email fingerprint (eGroups) found
3.8 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
0.1 RCVD_BY_IP Received by mail server with no name
0.1 HTML_80_90 BODY: Message is 80% to 90% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: neatosoft.net]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: neatosoft.net]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: neatosoft.net]
4.1 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
0.1 DIGEST_MULTIPLE Message hits more than one network digest check
2.4 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Spam detection software, running on the system "kualalumpur.lrde.epita.fr", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Mail transaction failed. Partial message is available.
[...]
Content analysis details: (6.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUB_HELLO Subject starts with "Hello"
0.0 NO_REAL_NAME From: does not include a real name
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
1.1 PRIORITY_NO_NAME Message has priority, but no X-Mailer/User-Agent
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
