Welcome To Our Shell

Mister Spy & Souheyl Bypass Shell

From admin@newoffers.win  Fri Feb  9 11:27:04 2018
Return-Path: <admin@newoffers.win>
X-Original-To: cgabriel@ift-informatik.de
Delivered-To: cgabriel@ift-informatik.de
Received: by ift-informatik.de (Postfix, from userid 5555)
	id C61EC3D201213; Fri,  9 Feb 2018 11:27:04 +0100 (CET)
Received: from localhost by h2486555.stratoserver.net
	with SpamAssassin (version 3.4.0);
	Fri, 09 Feb 2018 11:27:04 +0100
From: "Lucas Theissen" <admin@newoffers.win>
To: info@ift-informatik.de
Subject: *****SPAM***** =?UTF-8?B?U2Nod2VpemVyIFN5c3RlbSBrYW5uIElobmVuIGVpbiBWZXJtw7ZnZW4gYnJpbmdlbg==?=
Date: Tue, 06 Feb 2018 12:02:23 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	h2486555.stratoserver.net
X-Spam-Flag: YES
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.1 required=5.0 tests=BAYES_00,FROM_OFFERS,
	HTML_IMAGE_ONLY_16,HTML_MESSAGE,MISSING_MID,RAZOR2_CF_RANGE_51_100,
	RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
	RCVD_IN_BRBL_LASTEXT,RCVD_IN_RP_RNBL autolearn=no autolearn_force=no
	version=3.4.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5A7D7778.027754F0"
Message-Id: <20180209102704.C61EC3D201213@ift-informatik.de>

This is a multi-part message in MIME format.

------------=_5A7D7778.027754F0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "h2486555.stratoserver.net",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
@@CONTACT_ADDRESS@@ for details.

Content preview:  Sehr geehrter Leser, haben Sie schon mal von Robotern gehört,
   die quasi automatisch Geld verdienen? Blödsinn - werden Sie jetzt vielleicht
   sagen. [...] 

Content analysis details:   (8.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                 [Blocked - see <http://www.spamcop.net/bl.shtml?5.133.8.213>]
 1.3 RCVD_IN_RP_RNBL        RBL: Relay in RNBL,
                            https://senderscore.org/blacklistlookup/
                            [5.133.8.213 listed in bl.score.senderscore.com]
 1.4 RCVD_IN_BRBL_LASTEXT   RBL: No description available.
                            [5.133.8.213 listed in bb.barracudacentral.org]
 1.0 FROM_OFFERS            From address is "at something-offers"
 1.1 HTML_IMAGE_ONLY_16     BODY: HTML: images with 1200-1600 bytes of words
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.5 MISSING_MID            Missing Message-Id: header

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_5A7D7778.027754F0
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from srv3.responsemailer.club (srv3.responsemailer.club [5.133.8.213])
	by ift-informatik.de (Postfix) with ESMTP id ADBAE3D201214
	for <info@ift-informatik.de>; Fri,  9 Feb 2018 11:27:02 +0100 (CET)
Received: from server.responsemailer.win (185.24.233.38) by srv3.responsemailer.club id hflteq0001gj for <info@ift-informatik.de>; Fri, 9 Feb 2018 11:40:17 +0100 (envelope-from <admin@newoffers.win>)
Received: from static.179.193.251.148.clients.your-server.de (148.251.193.179) by server.responsemailer.win id hflriq0001g9 for <info@ift-informatik.de>; Tue, 6 Feb 2018 11:02:20 -0500 (envelope-from <admin@newoffers.win>)
Received: from newoffers.win (91.134.138.87) by static.179.193.251.148.clients.your-server.de id hf71fm0001gg for <info@ift-informatik.de>; Tue, 6 Feb 2018 15:00:11 +0000 (envelope-from <admin@newoffers.win>)
To: info@ift-informatik.de
Subject: =?UTF-8?B?U2Nod2VpemVyIFN5c3RlbSBrYW5uIElobmVuIGVpbiBWZXJtw7ZnZW4gYnJpbmdlbg==?=
Date: Tue, 06 Feb 2018 12:02:23 +0000
From: "Lucas Theissen" <admin@newoffers.win>
Reply-To: neues@wirtschaftsplan.online
MIME-Version: 1.0
X-Mailer-LID: 11
List-Unsubscribe: <http://newoffers.win/iem1/unsubscribe.php?M=3836013&C=612ca7d1aaa6ba789642cc3d2aa22e42&L=11&N=363>
X-Mailer-RecptId: 3836013
X-Mailer-SID: 363
X-Mailer-Sent-By: 3
Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_84f7fe09a327e5b2a9989a5362ffaabb"
Content-Transfer-Encoding: 8bit

--b1_84f7fe09a327e5b2a9989a5362ffaabb
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Sehr geehrter Leser,

haben Sie schon mal von Robotern gehört, die
quasi automatisch Geld verdienen?

Blödsinn - werden Sie jetzt vielleicht sagen.

Es ist unglaublich - aber so etwas gibt es wirklich!
Schauen Sie es sich einfach kurz an und entscheiden Sie dann,
ob Sie dem eine Chance geben wollen...

Hier geht es zur Webseite (klicken)
http://newoffers.win/iem1/link.php?M=3836013&N=363&L=175&F=T


Marketing Dienste
Abt. Newsletter
Lucas Theissen
Mellingburgredder 98
91062 Herzogenaurach











Disclaimer:
Sie erhalten diese Nachricht, weil Sie sich mit Ihrer
Adresse bei einem Portal oder einem sonstigen Dienst
von uns oder einem unserer Partnerunternehmen angemeldet haben.
Sofort abmelden:
http://newoffers.win/iem1/unsubscribe.php?M=3836013&C=612ca7d1aaa6ba789642cc3d2aa22e42&L=11&N=363

--b1_84f7fe09a327e5b2a9989a5362ffaabb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: 8bit

<html><head></head><body><div align="center">Sehr geehrter Leser,<br /><br
/>haben Sie schon mal von Robotern geh&ouml;rt, die <br />quasi automatisch
Geld verdienen?<br /><br />Bl&ouml;dsinn - werden Sie jetzt vielleicht
sagen.<br /><br />Es ist unglaublich - aber so etwas gibt es wirklich! <br
/>Schauen Sie es sich einfach kurz an und entscheiden Sie dann,<br />ob Sie
dem eine Chance geben wollen...<br /><br /><a target="_blank"
href="http://newoffers.win/iem1/link.php?M=3836013&N=363&L=175&F=H">Hier
geht es zur Webseite (klicken)</a><br /><br />Marketing Dienste &nbsp;<br
/>Abt. Newsletter<br />Lucas Theissen<br />Mellingburgredder 98<br />91062
Herzogenaurach<br /><br /></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"></div>
<div align="center"><br /><br /><br /><br /><br /><br /><br /><br /><br
/><br /><font size="2">Disclaimer:<br />Sie erhalten diese Nachricht, weil
Sie sich mit Ihrer <br />Adresse bei einem Portal oder einem sonstigen
Dienst <br />von uns oder einem unserer Partnerunternehmen angemeldet
haben.<br />Sofort abmelden:</font></div>
<div align="center"><font size="2"><a
href="http://newoffers.win/iem1/unsubscribe.php?M=3836013&C=612ca7d1aaa6ba789642cc3d2aa22e42&L=11&N=363">Unsubscribe
me from this list</a><br /></font></div>
<font size="2"><br /></font><br /><br/>	<br>
<img
src="http://newoffers.win/iem1/open.php?M=3836013&L=11&N=363&F=H&image=.jpg"
height="1" width="10"></body></html>

--b1_84f7fe09a327e5b2a9989a5362ffaabb--



------------=_5A7D7778.027754F0--