Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From christian.gabriel@shortnote.de  Thu Dec 22 22:58:36 2016
Return-Path: <christian.gabriel@shortnote.de>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 973AC37525DAE; Thu, 22 Dec 2016 22:58:36 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Thu, 22 Dec 2016 22:58:36 +0100
From: <christian.gabriel@shortnote.de>
To: <christian.gabriel@shortnote.de>
Subject: *****SPAM***** Greetings
Date: 22 Dec 2016 14:18:10 -0400
Message-Id: <980337910.201612221456@shortnote.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.9 required=5.0 tests=BAYES_50,DATE_IN_PAST_03_06,
	DIGEST_MULTIPLE,HTML_MESSAGE,PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,
	RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_PBL,RCVD_IN_XBL,RDNS_NONE,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_585C4C8C.92C08556"

This is a multi-part message in MIME format.

------------=_585C4C8C.92C08556
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Dear christian.gabriel, We are looking for employees working
   remotely. My name is Carlo, I am the personnel manager of a large International
   company. Most of the work you can do from home, that is, at a distance. [...]
   

Content analysis details:   (11.9 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: qualitytaskforce.com]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [131.72.29.75 listed in zen.spamhaus.org]
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
 0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                            [score: 0.4093]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.4 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.3 DIGEST_MULTIPLE        Message hits more than one network digest check
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_585C4C8C.92C08556
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from [131.72.29.75] (unknown [131.72.29.75])
	by ift-informatik.de (Postfix) with ESMTP id 7846F37520FB9
	for <christian.gabriel@shortnote.de>; Thu, 22 Dec 2016 22:58:32 +0100 (CET)
Date: 22 Dec 2016 14:18:10 -0400
From: <christian.gabriel@shortnote.de>
X-Priority: 3
Message-ID: <980337910.201612221456@shortnote.de>
To: <christian.gabriel@shortnote.de>
Subject: Greetings
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----------A9A66788CE68492"

------------A9A66788CE68492
Content-Type: text/plain; charset="cp-850"
Content-Transfer-Encoding: quoted-printable

Dear christian.gabriel,

We are looking for employees working remotely.

My name is Carlo, I am the personnel manager of a large International =
company.
Most of the work you can do from home, that is, at a distance.

Salary is $2900-$5100.

If you are interested in this offer, please visit=20
Our Site

d_healthHave a nice day!
------------A9A66788CE68492
Content-Type: text/html; charset="cp-850"
Content-Transfer-Encoding: quoted-printable

<html><head><title>Greetings</title>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dcp-850">
</head>
<body>
Dear christian.gabriel,<br>
<br>
We are looking for employees working remotely.<br>
<br>
My name is Carlo, I am the personnel manager of a large International =
company.<br>
Most of the work you can do from home, that is, at a distance.<br>
<b>Salary is $2900-$5100.</b><br>
<br>
If you are interested in this offer, please visit <a =
href=3D"http://qualitytaskforce.com/administrator/components/com_language=
s/views/multilangstatus/"><b>Our Site</b></a><br>
<br>d_health
Have a nice day!<br></body>
------------A9A66788CE68492--



------------=_585C4C8C.92C08556--