Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From no-reply@mywebsite-editor.com  Fri May 12 21:25:33 2017
Return-Path: <no-reply@mywebsite-editor.com>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 3CC83375218F2; Fri, 12 May 2017 21:25:33 +0200 (CEST)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Fri, 12 May 2017 21:25:33 +0200
From: info@ift-informatik.de
To: info@ift-informatik.de
Subject: *****SPAM***** =?utf-8?Q?Neuer=20Kommentar/G=C3=A4?==?utf-8?Q?stebuc?=  =?utf-8?Q?heintrag=20auf=20Ihrer=20We?==?utf-8?Q?bsite?=
Date: Fri, 12 May 2017 21:25:31 +0200
Message-Id: <2017051221211231.13929.0@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.1 required=5.0 tests=BAYES_00,DRUGS_ERECTILE,
	RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
	RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,URIBL_BLOCKED,URIBL_DBL_SPAM
	autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_59160C2D.A5F878B6"

This is a multi-part message in MIME format.

------------=_59160C2D.A5F878B6
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Guten Tag, auf Ihrer Website http://konzertchor-nuernberg-fuerth.com/
   hat obkoripeiubu einen neuen Gästebucheintrag oder einen Kommentar hinterlassen:
   --- [url=http://100mgcheapest-price-viagra.com/]100mgcheapest-price-viagra.com.ankor[/url]
   &lt;a href="http://tadalafil-buy-5mg.com/"&gt;tadalafil-buy-5mg.com.ankor&lt;/a&gt;
   http://20mgprednisone-order.com/ --- [...] 

Content analysis details:   (5.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: 100mgcheapest-price-viagra.com]
-0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
                            trust
                            [212.227.126.187 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                            [212.227.126.187 listed in wl.mailspike.net]
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist
                            [URIs: 20mgprednisone-order.com]
 2.0 DRUGS_ERECTILE         Refers to an erectile drug



------------=_59160C2D.A5F878B6
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.187])
	by ift-informatik.de (Postfix) with ESMTPS id 6883E375218E9
	for <info@ift-informatik.de>; Fri, 12 May 2017 21:25:31 +0200 (CEST)
Received: from jimdoeu-shard05a.schlund.de ([10.72.39.20]) by
 mrieue.server.lan (mrieue002 [172.19.128.220]) with ESMTPS (Nemesis) id
 0MLKEL-1d9XJ40qoL-000P39 for <info@ift-informatik.de>; Fri, 12 May 2017
 21:25:31 +0200
Received: from jimdo by jimdoeu-shard05a.schlund.de with local (Exim 4.80)
	(envelope-from <no-reply@mywebsite-editor.com>)
	id 1d9GBv-000TJv-55
	for info@ift-informatik.de; Fri, 12 May 2017 21:25:31 +0200
To: info@ift-informatik.de
Subject: =?utf-8?Q?Neuer=20Kommentar/G=C3=A4?==?utf-8?Q?stebuc?=  =?utf-8?Q?heintrag=20auf=20Ihrer=20We?==?utf-8?Q?bsite?=
X-PHP-Originating-Script: 0:transport_mta.php
From: info@ift-informatik.de
MIME-Version: 1.0
User-Agent: eZ Components
Date: Fri, 12 May 2017 21:25:31 +0200
Message-Id: <2017051221211231.13929.0@ift-informatik.de>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
X-UI-Out-Filterresults: notjunk:1;V01:K0:T7809CeDbMs=:1Cb+4chuN+PuLjxETj9WDt
 Nlr0TAMlKlDfBSKYBQXpOFQ3+VAzL3i1ETHoIV0HssfJZSDCo/+RqeK+noPFcoWyvLIOGBxlY
 TBRNQghPrkz5XIVlJykJsPHeAWwBN9puB0EzPvCNN55qG+IiIIBOJnZ1HYe7lUDoMtiUZORGW
 yYDcBHaVwlv6BZtmR85bWlEWEeFSPIibNFfozc6KqHrGg+qio0JE2lyx0O1ORSq7NsIVuINcB
 sSi7a3CrWmW4oW0h2OxCD6iTpf1XwD8w3xcX+NFraFRcfia1p9n8uK4LDxFrNxBFa0GwE5YrX
 IYtuJz5Njc4QvcflfeHmZyh1fL1q+S8uqG5H8LAh8Gc7A0NC25PG5c73Dcffvt+kkTY0cZGHG
 iozJcFi5fKjszTKjZswpki6bdBe4Rr0+Vc3zF90YPaeGoWLotA3jgBG7p+7aWJxvbw6V1LCB2
 U3ZIG61mkTLOeWPg6rxw3gNL7/lF7mUdEzO6Ty0FUoG5QzvIjzQbsZgk50ON4jVXzgX30UWqY
 UwriIttPuLWegwYzBcXEbE=

Guten Tag,

auf Ihrer Website http://konzertchor-nuernberg-fuerth.com/ hat
obkoripeiubu einen neuen Gästebucheintrag oder einen Kommentar
hinterlassen:

---
[url=http://100mgcheapest-price-viagra.com/]100mgcheapest-price-viagra.com.ankor[/url]
&lt;a
href="http://tadalafil-buy-5mg.com/"&gt;tadalafil-buy-5mg.com.ankor&lt;/a&gt;
http://20mgprednisone-order.com/
---

Um direkt zum Eintrag zu springen, folgen Sie diesem Link:
http://konzertchor-nuernberg-fuerth.com/gästebuch/
Falls der Eintrag unerwünscht ist, können Sie diesen direkt nach dem
Einloggen in Ihre Website im Kommentar-Element löschen.

Mit freundlichen Grüßen,
Ihr 1&1 Team

 --
1&1 Internet AG
Elgendorfer Str. 57
56410 Montabaur

Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 6484
Vorstand: Ralph Dommermuth, Frank Einhellinger, Robert Hoffmann, Andreas
Hofmann, Markus Huhn, Hans-Henning Kettler, Uwe Lamnek, Jan Oetjen,
Christian Würst 
Aufsichtsratsvorsitzender: Michael Scheeren

Member of United Internet

------------=_59160C2D.A5F878B6--