Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From postmaster@ningbosteel.com  Fri Jul  6 13:19:55 2018
Return-Path: <postmaster@ningbosteel.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 1CFB03D200E04; Fri,  6 Jul 2018 13:19:55 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Fri, 06 Jul 2018 13:19:55 +0200
From: "EU/UNICEF"<postmaster@ningbosteel.com>
Subject: *****SPAM***** Unicef Grant Claims
Date: Fri, 6 Jul 2018 08:18:14 -0300
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********************************
X-Spam-Status: Yes, score=34.3 required=5.0 tests=AXB_XMAILER_MIMEOLE_OL_024C2,
	BAYES_40,FORGED_MUA_OUTLOOK,FREEMAIL_FORGED_REPLYTO,
	FREEMAIL_REPLYTO_END_DIGIT,FROM_MISSPACED,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
	FSL_CTYPE_WIN1251,FSL_MISSP_REPLYTO,FSL_NEW_HELO_USER,MISSING_HEADERS,
	MISSING_MID,NSL_RCVD_HELO_USER,PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,
	REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_FROM_MSSP,TO_NO_BRKTS_MSFT,
	T_FROM_MISSP_DKIM,URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5B3F505B.BF98EC38"
Message-Id: <20180706111955.1CFB03D200E04@ift-informatik.de>

This is a multi-part message in MIME format.

------------=_5B3F505B.BF98EC38
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Hello, Be informed that Barclays bank PLC has been asked to
   released your approved Charity cash transfer of 5,000,000$ by UNICEF to the
   less privilege and charity organizations of your choice. Let me know if are
   interested in handling this reputable charity project, All e-mail addresses
   have been selected from a database of Internet e-mail users, from which your
   e-mail address resulted as a prize voucher. [...] 

Content analysis details:   (34.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: foxmail.com]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?190.12.183.224>]
 3.4 NSL_RCVD_HELO_USER     Received from HELO User
 4.5 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 1.0 MISSING_HEADERS        Missing To: header
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            (alertinfo1[at]foxmail.com)
-0.0 BAYES_40               BODY: Bayes spam probability is 20 to 40%
                            [score: 0.2181]
 1.4 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 2.5 FSL_MISSP_REPLYTO      Mis-spaced from and Reply-to
 0.5 MISSING_MID            Missing Message-Id: header
 0.8 FSL_NEW_HELO_USER      No description available.
 2.3 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
 2.2 AXB_XMAILER_MIMEOLE_OL_024C2 No description available.
 1.6 REPLYTO_WITHOUT_TO_CC  No description available.
 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
 1.3 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
 2.5 TO_NO_BRKTS_FROM_MSSP  Multiple formatting errors
 1.2 FROM_MISSPACED         From: missing whitespace
 0.0 T_FROM_MISSP_DKIM      From misspaced, DKIM dependable
 1.9 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 3.5 TO_NO_BRKTS_MSFT       To: misformatted and supposed Microsoft tool



------------=_5B3F505B.BF98EC38
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from mail.asu.edu.ru (mail.asu.edu.ru [91.202.254.185])
	by ift-informatik.de (Postfix) with ESMTPS id 23FAC3D200AB0
	for <info@ift-informatik.de>; Fri,  6 Jul 2018 13:19:53 +0200 (CEST)
Received: from [190.12.183.224] (helo=User)
	by mail.asu.edu.ru with esmtpa (Exim 4.72 (FreeBSD))
	(envelope-from <postmaster@ningbosteel.com>)
	id 1fbOkg-000EfH-R0; Fri, 06 Jul 2018 15:18:15 +0400
Reply-To: <alertinfo1@foxmail.com>
From: "EU/UNICEF"<postmaster@ningbosteel.com>
Subject: Unicef Grant Claims
Date: Fri, 6 Jul 2018 08:18:14 -0300
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Hello,

Be informed that Barclays bank PLC has been asked to released your approved Charity cash transfer of 5,000,000$ by UNICEF to the less privilege and charity organizations of your choice.

Let me know if are interested in handling this reputable charity project, All e-mail addresses have been selected from a database of Internet e-mail users, from which your e-mail address resulted as a prize voucher. 

Please remember that you did not enter or buy the ticket to receive this prize. 

It is an advertising program that promotes the use of Microsoft and Internet programs. 

Please answer with your winning number: UKOL / 456/010/0018 to receive your prize money. 

E-MAIL: alertinfo1@foxmail.com
Regards 
Mark.

------------=_5B3F505B.BF98EC38--