Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From promotions@zlima.win  Tue Jan  9 13:13:43 2018
Return-Path: <promotions@zlima.win>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id B01F81C881C05; Tue,  9 Jan 2018 13:13:43 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Tue, 09 Jan 2018 13:13:43 +0100
From: "Sven Hegel" <admin@zlima.win>
To: info@ift-informatik.de
Subject: *****SPAM***** Deine Notfall-Benachrichtigung
Date: Tue, 09 Jan 2018 07:05:12 +0000
Message-Id: <ff65b015b28a78f3a5647d9febdaa0bd@zlima.win>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.1 required=5.0 tests=BAYES_00,DATE_IN_PAST_03_06,
	DKIM_SIGNED,HTML_IMAGE_ONLY_24,HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,
	RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,T_DKIM_INVALID,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A54B1F7.B01A2FEC"

This is a multi-part message in MIME format.

------------=_5A54B1F7.B01A2FEC
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Your email client cannot read this email. To view it online,
   please go here: http://zlima.win/iem1/display.php?M=5271624&C=19eeb88872428a47422ac7c56aeaa504&S=100&L=9&N=58
   Hallo, Ich muss mich kurz fassen, da uns ein großer Tag bevorsteht. [...]
   

Content analysis details:   (6.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?45.122.138.158>]
 1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 1.6 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: ift-informatik.de]
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5A54B1F7.B01A2FEC
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from srv12.australianwinner.online (srv12.australianwinner.online [45.122.138.158])
	by ift-informatik.de (Postfix) with ESMTP id 74FFC1C881BCA
	for <info@ift-informatik.de>; Tue,  9 Jan 2018 13:13:41 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=k1; d=zlima.win;
 h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=admin@zlima.win;
 bh=XZ0VM/SKjGXXHTcdc7HNIIdLtMg=;
 b=jMY80ZKCF+dAiYln0kRQvXXS0GazcjWbFfi05DjMCMy4M5k0/wfw85prN7JtQCa5CVdQpkhuiIFC
   afpRlcNPntJj0b1yL94M2UJ1lzjOmKxUV4I6gk5CvGoVoA+35E6UDfPJrPDWi1GSiZzq//RomlSd
   sUwl4Bhsn94B7cKWpLI=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=k1; d=zlima.win;
 b=N1MaLyW9hPwQT8NdCu7xBBonw6zXiWpRxurrZZFmc8J4M97qKIJTGhRXv0V9GQiFPC2cfa5TCcWw
   aUjOS5E524LbmmIfdvYdKQXqzdocjecSoG5BAk1vvkpucO9IMAajMPH4sAkp8jmDp1PxjghPd4is
   n69LpqTrS/PCDFPhwts=;
Received: from mail.zopishow.xyz (198.175.127.112) by srv11.australianwinner.online id haiova0001gl for <info@ift-informatik.de>; Tue, 9 Jan 2018 12:13:39 +0000 (envelope-from <promotions@zlima.win>)
Received: from zlima.win (127.0.0.1) by mail.zopishow.xyz id haiojs0001gf for <info@ift-informatik.de>; Tue, 9 Jan 2018 12:10:38 +0000 (envelope-from <promotions@zlima.win>)
To: info@ift-informatik.de
Subject: Deine Notfall-Benachrichtigung
Message-ID: <ff65b015b28a78f3a5647d9febdaa0bd@zlima.win>
Date: Tue, 09 Jan 2018 07:05:12 +0000
From: "Sven Hegel" <admin@zlima.win>
Reply-To: promotion@zlima.win
MIME-Version: 1.0
X-Mailer-LID: 9
List-Unsubscribe: <http://zlima.win/iem1/unsubscribe.php?M=5271624&C=19eeb88872428a47422ac7c56aeaa504&L=9&N=100>
X-Mailer-RecptId: 5271624
X-Mailer-SID: 100
X-Mailer-Sent-By: 2
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_cf0878c5dc774fd8e7832a54f91a8c24"
Content-Transfer-Encoding: 8bit

--b1_cf0878c5dc774fd8e7832a54f91a8c24
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Your email client cannot read this email.
To view it online, please go here:
http://zlima.win/iem1/display.php?M=5271624&C=19eeb88872428a47422ac7c56aeaa504&S=100&L=9&N=58
Hallo,

Ich muss mich kurz fassen, da uns ein
großer Tag bevorsteht.

In wenigen Stunden steht die nächste,
große Freischaltung an und ich wollte
sichergehen, dass Du dabei bist, bevor
wir loslegen.

Klicke einfach hier, um jetzt zu starten.
http://zlima.win/iem1/link.php?M=5271624&N=100&L=63&F=T

Vergewissere Dich, dass Du dies
unverzüglichst machst, nachdem Du
diese Nachricht geöffnet hast, um
sicherzugehen, dass Du dabei bist…

Danke und bis bald,

Sven Hegel

To stop receiving these
emails:http://zlima.win/iem1/unsubscribe.php?M=5271624&C=19eeb88872428a47422ac7c56aeaa504&L=9&N=100

--b1_cf0878c5dc774fd8e7832a54f91a8c24
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

<html><head></head><body><font face="arial, helvetica, sans-serif"
size="2">Hallo,<br /></font><font face="arial, helvetica, sans-serif"
size="2"><br /></font><font face="arial, helvetica, sans-serif"
size="2">Ich muss mich kurz fassen, da uns ein<br />gro&szlig;er Tag
bevorsteht.<br /></font><font face="arial, helvetica, sans-serif"
size="2"><br /></font><font face="arial, helvetica, sans-serif" size="2">In
wenigen Stunden steht die n&auml;chste,&nbsp;<br />gro&szlig;e
Freischaltung an und ich wollte&nbsp;<br />sichergehen, dass Du dabei bist,
bevor<br />wir loslegen.<br /></font><font face="arial, helvetica,
sans-serif" size="2"><a
href="http://zlima.win/iem1/link.php?M=5271624&N=100&L=64&F=H"><br
/></a></font><font face="arial, helvetica, sans-serif" size="2"><a
href="http://zlima.win/iem1/link.php?M=5271624&N=100&L=63&F=H">Klicke
einfach hier, um jetzt zu starten</a>.<br /></font><font face="arial,
helvetica, sans-serif" size="2"><br /></font><font face="arial, helvetica,
sans-serif" size="2">Vergewissere Dich, dass Du dies&nbsp;<br
/>unverz&uuml;glichst machst, nachdem Du&nbsp;<br />diese Nachricht
ge&ouml;ffnet hast, um<br />sicherzugehen, dass Du dabei bist&hellip;<br
/></font><font face="arial, helvetica, sans-serif" size="2"><br
/></font><font face="arial, helvetica, sans-serif" size="2">Danke und bis
bald,<br /></font><font face="arial, helvetica, sans-serif" size="2"><br
/></font><font face="arial, helvetica, sans-serif" size="2">Sven Hegel<br
/><br style="color: #222222; font-family: Arial, Helvetica, sans-serif;
font-size: 12.8px;" /><br style="color: #333333; font-family: arial,
helvetica, sans-serif; font-size: medium; background-color: #f9f9f9;"
/><font size="1" style="color: #333333; font-family: arial, helvetica,
sans-serif; background-color: #f9f9f9;">Diese Nachricht ist bestimmt
f&uuml;r : info@ift-informatik.de<br />Falls Sie diese E-Mails nicht mehr
erhalten m&ouml;chten,&nbsp;<a
href="http://zlima.win/iem1/unsubscribe.php?M=5271624&C=19eeb88872428a47422ac7c56aeaa504&L=9&N=100">klicken
Sie hier</a>, um sich abzumelden</font></font><br/>	<br>
<img
src="http://zlima.win/iem1/open.php?M=5271624&L=9&N=100&F=H&image=.jpg"
height="1" width="10"></body></html>

--b1_cf0878c5dc774fd8e7832a54f91a8c24--



------------=_5A54B1F7.B01A2FEC--