Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From DONNA344300@GMAIL.COM  Sat May  5 08:35:45 2018
Return-Path: <DONNA344300@GMAIL.COM>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 33BDB3D200039; Sat,  5 May 2018 08:35:45 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Sat, 05 May 2018 08:35:45 +0200
From: "HELP ME RECEIVE, SECURE AND GIVE MY MONEY OUT AS CHARITY"<DONNA344300@GMAIL.COM>
To: undisclosed-recipients:;
Subject: *****SPAM***** HELP ME RECEIVE, SECURE AND GIVE MY MONEY OUT AS CHARITY
Date: Fri, 4 May 2018 12:33:41 -0700
Message-Id: <20180504193545.BE6CB35C317@smtpa.comstar.ru>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ************************************************
X-Spam-Status: Yes, score=48.5 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
	BAYES_00,DKIM_ADSP_CUSTOM_MED,FORGED_MUA_OUTLOOK,FREEMAIL_FROM,
	FREEMAIL_REPLYTO,FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,
	FROM_MISSP_FREEMAIL,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,FROM_MISSP_TO_UNDISC,
	FROM_MISSP_USER,FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,
	LOTS_OF_MONEY,MILLION_USD,MONEY_FROM_MISSP,MSOE_MID_WRONG_CASE,
	NML_ADSP_CUSTOM_MED,NSL_RCVD_FROM_USER,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
	RCVD_IN_MSPIKE_L5,RCVD_IN_PSBL,RCVD_IN_SORBS_WEB,RDNS_NONE,SUBJ_ALL_CAPS,
	T_FROM_MISSP_DKIM,UPPERCASE_75_100,US_DOLLARS_3 autolearn=no
	autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5AED50C1.A6AECC29"

This is a multi-part message in MIME format.

------------=_5AED50C1.A6AECC29
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  HELLO MY FRIEND, GOOD MORNING AND HOW ARE YOU DOING TODAY?
   I KNOW YOU MAY BE WONDERING HOW I CAME ABOUT YOUR INFORMATION AND HOW COME
   YOU ARE GETTING THIS KIND OF MESSAGE FROM A COMPLETE AND TOTAL STRANGER YOU
   HAVE NEVER MET BEFORE. I HAVE BEEN RUNNING A PERSONAL CHARITY DEEDS FOR THE
   NEED AND HELPLESS FOR FEW YEARS BEFORE I AM NOW CURRENTLY DOWN ON THE SICK
   BED WITH CANCER AND I AM USING THIS AS THE ONLY MEDIUM TO COMMUNICATE WITH
   YOU AT THE MOMENT DUE TO MY PRESENT HEALTH CONDITION. [...] 

Content analysis details:   (48.5 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.8 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [50.198.47.113 listed in dnsbl.sorbs.net]
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [83.242.139.67 listed in psbl.surriel.com]
 3.2 MILLION_USD            BODY: Talks about millions of dollars
 4.5 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 3.1 NSL_RCVD_FROM_USER     Received from User
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                            CUSTOM_MED
 1.5 SUBJ_ALL_CAPS          Subject is all capitals
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            (tstruthersahs101[at]gmail.com)
 2.4 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [83.242.139.67 listed in bl.mailspike.net]
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (donna344300[at]gmail.com)
 1.8 US_DOLLARS_3           BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [83.242.139.67 listed in bb.barracudacentral.org]
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 4.5 FROM_MISSP_TO_UNDISC   From misspaced, To undisclosed
 0.8 FSL_NEW_HELO_USER      No description available.
 2.6 MSOE_MID_WRONG_CASE    No description available.
 0.7 FROM_MISSP_USER        From misspaced, from "User"
 2.5 FSL_MISSP_REPLYTO      Mis-spaced from and Reply-to
 2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
 2.3 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
 0.0 LOTS_OF_MONEY          Huge... sums of money
 0.0 UPPERCASE_75_100       message body is 75-100% uppercase
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
 1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                            freemails
 1.7 MONEY_FROM_MISSP       Lots of money and misspaced From
 1.2 FROM_MISSPACED         From: missing whitespace
 0.9 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list
 1.3 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
 0.0 T_FROM_MISSP_DKIM      From misspaced, DKIM dependable
 1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 4.3 FROM_MISSP_FREEMAIL    From misspaced + freemail provider



------------=_5AED50C1.A6AECC29
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from smtpa.comstar.ru (unknown [83.242.139.67])
	by ift-informatik.de (Postfix) with ESMTP id 802533D200016
	for <christian.gabriel@shortnote.de>; Sat,  5 May 2018 08:35:43 +0200 (CEST)
Received: from User (50-198-47-113-static.hfc.comcastbusiness.net [50.198.47.113])
	(Authenticated sender: test@comstar.ru)
	by smtpa.comstar.ru (Postfix) with ESMTP id BE6CB35C317;
	Fri,  4 May 2018 23:35:45 +0400 (MSD)
Reply-To: <tstruthersahs101@gmail.com>
From: "HELP ME RECEIVE, SECURE AND GIVE MY MONEY OUT AS CHARITY"<DONNA344300@GMAIL.COM>
Subject: HELP ME RECEIVE, SECURE AND GIVE MY MONEY OUT AS CHARITY
Date: Fri, 4 May 2018 12:33:41 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20180504193545.BE6CB35C317@smtpa.comstar.ru>
To: undisclosed-recipients:;

HELLO MY FRIEND, GOOD MORNING AND HOW ARE YOU DOING TODAY?


I KNOW YOU MAY BE WONDERING HOW I CAME ABOUT YOUR INFORMATION AND HOW
COME YOU ARE GETTING THIS KIND OF MESSAGE FROM A COMPLETE AND TOTAL
STRANGER YOU HAVE NEVER MET BEFORE. I HAVE BEEN RUNNING A PERSONAL
CHARITY DEEDS FOR THE NEED AND HELPLESS FOR FEW YEARS BEFORE I AM NOW
CURRENTLY DOWN ON THE SICK BED WITH CANCER AND I AM USING THIS AS THE
ONLY MEDIUM TO COMMUNICATE WITH YOU AT THE MOMENT DUE TO MY PRESENT
HEALTH CONDITION.


IN BRIEF MY NAME IS TERESA BOSH, FROM SAN ANGELO.TEXAS. UNITED STATES.
I RESIDE HERE IN 3406 WILDEWOOD DR,76904.  I WANT TO PASS THIS
IMPORTANT INFORMATION TO YOU DUE TO MY PRESENT CONDITION AND I WANT
YOU TO MAKE USE OF IT VERY WELL WHEN IT GETS TO YOU. I HAVE BEEN
HELPING THE NEED AND THE HELPLESS IN THE COUNTRY FOR A FEW YEARS NOW,
AS I HAVE ONLY FOLLOWED WHAT GOD HAD COMMANDED TO HELP WHO YOU COULD,
AS A RESULT I HAVE BEEN DOING THE BEST I COULD OVER THE YEARS BEFORE I
LOST MY HUSBAND AND THREE CHILDREN THROUGH A CAR ACCIDENT


NOW I AM DOWN ON THE SICK BED WITH CANCER WHICH I KNOW THE LORD COULD
HEAL ME IF HE WANTS AND TAKE ME TO HIS SIDE IF THAT BE HIS WISH. I OWN
A PRIVATE BUSINESS WHICH FLOURISHED OVER THE YEARS, WITH A LOT OF
FORTUNE I HAVE FOUND DOING MY BUSINESS BOTH IN THE STATES AND OVERSEAS
BEFORE I LOST MY FAMILY IN A CAR CRASH. BEING THROUGH ALL THESE I HAVE
DECIDED TO DO ONE FINAL GOOD DEED AS I HAVE DONE OVER THE YEARS TO
LOOK FOR SOMEONE, ANYONE TO REACH THROUGH TO YOUR NEED AND HELP YOU.
AT LEAST ALL THE WEALTH I HAVE GATHERED NOT TO BE ALL WASTED.


AFTER THIS DECISION OF MINE, I CAME ACROSS YOUR CONTACT DETAILS IN THE
INTERNET DIRECTORY WHICH I HAVE DECIDE TO GIVE YOU THE THREE MILLION
SEVEN HUNDRED THOUSAND UNITED STATES DOLLARS ( $3,700,000.00 USD) THAT
I HAVE IN MY ACCOUNT WITH THE HSBC BANk USA. I KNOW THIS MAY SOUND
STRANGE TO YOU BUT I SWEAR IT WITH EVERYTHING TO YOU THAT THIS IS REAL
AND THERE IS NO CATCH TO IT AT ALL I AM GOING TO HELP YOU, MAYBE GOD
HAD PUT THIS IN MY HEART TO DO BECAUSE HE FINALLY WANTS TO ANSWER YOUR
PRAYERS, I WILL HELP YOU FINANCIALLY, AND ALSO WILL LIKE YOU TO PUT IT
INTO GOOD USE. IF YOU NEED THIS HELP I HAVE OFFERED PLEASE CONTACT ME
AS SOON YOU CAN.


HAVE A BLESSED DAY
TERESA S. BOSH.

------------=_5AED50C1.A6AECC29--