Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From fggjgkvh@caleraisd.k12.ok.us  Mon Dec 19 15:42:13 2016
Return-Path: <fggjgkvh@caleraisd.k12.ok.us>
X-Original-To: tjungblut@ift-informatik.de
Delivered-To: tjungblut@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 2D44A375212C0; Mon, 19 Dec 2016 15:42:13 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Mon, 19 Dec 2016 15:42:13 +0100
Subject: *****SPAM***** 
Message-Id: <Y[20
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***********************************
X-Spam-Status: Yes, score=35.3 required=5.0 tests=BAYES_99,EMPTY_MESSAGE,
	FH_FAKE_RCVD_LINE,FSL_HELO_BARE_IP_2,INVALID_MSGID,MISSING_DATE,MISSING_FROM,
	MISSING_HEADERS,MISSING_SUBJECT,MSGID_SHORT,RCVD_DOUBLE_IP_SPAM,
	RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,
	RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_HTTP,
	RCVD_IN_SORBS_SOCKS,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RCVD_NUMERIC_HELO,RDNS_NONE,
	TT_MSGID_TRUNC,TVD_RCVD_IP,TVD_RCVD_IP4,UNCLOSED_BRACKET autolearn=no
	autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5857F1C5.54763D0B"
Date: Mon, 19 Dec 2016 15:42:13 +0100 (CET)
From: fggjgkvh@caleraisd.k12.ok.us

This is a multi-part message in MIME format.

------------=_5857F1C5.54763D0B
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  [...] 

Content analysis details:   (35.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [179.127.175.210 listed in psbl.surriel.com]
 3.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 MSGID_SHORT            Message-ID is unusually short
 1.5 UNCLOSED_BRACKET       Headers contain an unclosed bracket
 0.0 TVD_RCVD_IP            No description available.
 0.0 TVD_RCVD_IP4           No description available.
 2.3 FH_FAKE_RCVD_LINE      RCVD line looks faked (A)
 1.4 TT_MSGID_TRUNC         Scora: Message-Id ends after left-bracket + digits
 1.0 MISSING_HEADERS        Missing To: header
 2.4 RCVD_HELO_IP_MISMATCH  Received: HELO and IP do not match, but should
 1.2 RCVD_NUMERIC_HELO      Received: contains an IP address used for HELO
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [179.127.175.210 listed in zen.spamhaus.org]
 2.4 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [179.127.175.210 listed in bl.mailspike.net]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
             [Blocked - see <http://www.spamcop.net/bl.shtml?179.127.175.210>]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                          [179.127.175.210 listed in bl.score.senderscore.com]
 0.0 RCVD_IN_SORBS_HTTP     RBL: SORBS: sender is open HTTP proxy server
                            [179.127.175.210 listed in dnsbl.sorbs.net]
 1.9 RCVD_IN_SORBS_SOCKS    RBL: SORBS: sender is open SOCKS proxy server
 0.8 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
 1.8 MISSING_SUBJECT        Missing Subject: header
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 1.8 RCVD_DOUBLE_IP_SPAM    Bulk email fingerprint (double IP) found
 1.4 MISSING_DATE           Missing Date: header
 2.3 EMPTY_MESSAGE          Message appears to have no textual parts and no
                            Subject: text
 1.0 MISSING_FROM           Missing From: header
 0.6 INVALID_MSGID          Message-Id is not valid, according to RFC 2822
 1.5 FSL_HELO_BARE_IP_2     No description available.



------------=_5857F1C5.54763D0B
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from 85.214.156.58 (unknown [179.127.175.210])
	by ift-informatik.de (Postfix) with SMTP id 86B37375212BF
	for <tobias.jungblut@ift-informatik.de>; Mon, 19 Dec 2016 15:42:09 +0100 (CET)
Received: from 48.128.24.125 by 179.127.175.211; Mon, 19 Dec 2016 16:35:08 +0200
Message-ID: <Y[20

------------=_5857F1C5.54763D0B--