Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From MAILER-DAEMON  Mon Oct 17 12:42:00 2016
Return-Path: <>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id D05E1375251BE; Mon, 17 Oct 2016 12:42:00 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Mon, 17 Oct 2016 12:42:00 +0200
From: unal.kaynar@brenntag.com.tr
To: swonneberger@ift-informatik.de
Subject: *****SPAM***** Develop positive results
Date: Mon, 17 Oct 2016 14:40:49 +0400
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.0 required=5.0 tests=BAYES_60,FSL_HELO_BARE_IP_2,
	MISSING_MID,PYZOR_CHECK,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_XBL,
	RCVD_NUMERIC_HELO,RDNS_NONE,TVD_RCVD_IP,TVD_RCVD_IP4 autolearn=no
	autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5804AAF8.03E3F8BA"
Message-Id: <20161017104200.D05E1375251BE@ift-informatik.de>

This is a multi-part message in MIME format.

------------=_5804AAF8.03E3F8BA
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  The hottest night of joy you've ever had http://dandruff.gooddrugeshop.click/
   [...] 

Content analysis details:   (12.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 TVD_RCVD_IP4           No description available.
 0.0 TVD_RCVD_IP            No description available.
 1.2 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [145.255.176.198 listed in zen.spamhaus.org]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                           [145.255.176.198 listed in bb.barracudacentral.org]
 1.5 BAYES_60               BODY: Bayes spam probability is 60 to 80%
                            [score: 0.7458]
 1.4 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 0.5 MISSING_MID            Missing Message-Id: header
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 1.5 FSL_HELO_BARE_IP_2     No description available.



------------=_5804AAF8.03E3F8BA
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from 145.255.176.198 (unknown [145.255.176.198])
	by ift-informatik.de (Postfix) with SMTP id 534DF37525192
	for <swonneberger@ift-informatik.de>; Mon, 17 Oct 2016 12:41:58 +0200 (CEST)
Received: from unknown (HELO localhost) (unal.kaynar@brenntag.com.tr@140.194.227.215)
	by 145.255.176.198 with ESMTPA; Mon, 17 Oct 2016 14:46:33 +0400
X-Originating-IP: 140.194.227.215
From: unal.kaynar@brenntag.com.tr
To: swonneberger@ift-informatik.de
Subject: Develop positive results
Date: Mon, 17 Oct 2016 14:40:49 +0400

The hottest night of joy you've ever had http://dandruff.gooddrugeshop.click/


------------=_5804AAF8.03E3F8BA--