Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From Anastasiacljbu@static.vnpt.vn  Wed Nov 22 06:47:46 2017
Return-Path: <Anastasiacljbu@static.vnpt.vn>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 491B01C881B7E; Wed, 22 Nov 2017 06:47:46 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Wed, 22 Nov 2017 06:47:46 +0100
From: "Anastasia" <Anastasiacljbu@static.vnpt.vn>
To: info@ift-informatik.de
Subject: *****SPAM***** hi
Date: Wed, 22 Nov 2017 12:47:41 +0700
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.8 required=5.0 tests=BAYES_50,MISSING_MID,
	PYZOR_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,
	RCVD_IN_PSBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RDNS_NONE,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A150F82.9C5745DF"
Message-Id: <20171122054746.491B01C881B7E@ift-informatik.de>

This is a multi-part message in MIME format.

------------=_5A150F82.9C5745DF
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Dear info, Finally I have got a change to write to you. My
   name is Anastasia, i'm from Russia and now i'm living in USA :-) I saw you
   first time on Facebook or Instagram, I don't remember, but today seeing you
   again made me write to you:) You look so sexy and at the same time very cute
   and smart, just like my type. Maybe we can talk? If you would like to know
   more about me, please, email me. My email is jana5v4erika@rambler.ru [...]
   

Content analysis details:   (14.8 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: rambler.ru]
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                            [14.167.102.206 listed in zen.spamhaus.org]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [14.167.102.206 listed in psbl.surriel.com]
 0.8 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [14.167.102.206 listed in dnsbl.sorbs.net]
 0.8 BAYES_50               BODY: Bayes spam probability is 40 to 60%
                            [score: 0.5002]
 1.4 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?14.167.102.206>]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                           [14.167.102.206 listed in bl.score.senderscore.com]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [14.167.102.206 listed in bb.barracudacentral.org]
 0.5 MISSING_MID            Missing Message-Id: header
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS



------------=_5A150F82.9C5745DF
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: from static.vnpt.vn (unknown [14.167.102.206])
	by ift-informatik.de (Postfix) with ESMTP id 671311C881881
	for <info@ift-informatik.de>; Wed, 22 Nov 2017 06:47:44 +0100 (CET)
MIME-Version: 1.0
From: "Anastasia" <Anastasiacljbu@static.vnpt.vn>
To: info@ift-informatik.de
Date: Wed, 22 Nov 2017 12:47:41 +0700
Subject: hi
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64

RGVhciBpbmZvLA0KRmluYWxseSBJIGhhdmUgZ290IGEgY2hhbmdlIHRvIHdyaXRlIHRvIHlvdS4N
Ck15IG5hbWUgaXMgQW5hc3Rhc2lhLCBpJ20gZnJvbSBSdXNzaWEgYW5kIG5vdyBpJ20gbGl2aW5n
IGluIFVTQSA6LSkNCkkgc2F3IHlvdSBmaXJzdCB0aW1lIG9uIEZhY2Vib29rIG9yIEluc3RhZ3Jh
bSwgSSBkb24ndCByZW1lbWJlciwgYnV0IHRvZGF5IHNlZWluZyB5b3UgYWdhaW4gbWFkZSBtZSB3
cml0ZSB0byB5b3U6KQ0KWW91IGxvb2sgc28gc2V4eSBhbmQgYXQgdGhlIHNhbWUgdGltZSB2ZXJ5
IGN1dGUgYW5kIHNtYXJ0LCBqdXN0IGxpa2UgbXkgdHlwZS4NCk1heWJlIHdlIGNhbiB0YWxrPyBJ
ZiB5b3Ugd291bGQgbGlrZSB0byBrbm93IG1vcmUgYWJvdXQgbWUsIHBsZWFzZSwgZW1haWwgbWUu
DQpNeSBlbWFpbCBpcyBqYW5hNXY0ZXJpa2FAcmFtYmxlci5ydQ==

------------=_5A150F82.9C5745DF--