Dear Pak Syafril,
Berikut ini adalaha message header dari SPAM tersebut, ada 2 contoh SPAM
Received: from SG2PR0601MB1786.apcprd06.prod.outlook.com
(2a01:111:e400:7803::24) by SG2PR0601MB1470.apcprd06.prod.outlook.com with
HTTPS via SG2PR04CA0056.APCPRD04.PROD.OUTLOOK.COM; Fri, 27 Apr 2018 01:51:54
+0000
Received: from PS1PR06CA0007.apcprd06.prod.outlook.com
(2a01:111:e400:7829::17) by SG2PR0601MB1786.apcprd06.prod.outlook.com
(2a01:111:e400:2013::17) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.696.15; Fri, 27
Apr 2018 01:51:53 +0000
Received: from HK2APC01FT041.eop-APC01.prod.protection.outlook.com
(2a01:111:f400:7ebc::206) by PS1PR06CA0007.outlook.office365.com
(2a01:111:e400:7829::17) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.715.18 via Frontend
Transport; Fri, 27 Apr 2018 01:51:52 +0000
Authentication-Results: spf=pass (sender IP is 202.152.63.242)
smtp.mailfrom=puninar.com; puninar.com; dkim=none (message not signed)
header.d=none;puninar.com; dmarc=pass action=none header.from=puninar.com;
Received-SPF: Pass (protection.outlook.com: domain of puninar.com designates
202.152.63.242 as permitted sender) receiver=protection.outlook.com;
client-ip=202.152.63.242; helo=mail.puninar.com;
Received: from mail.puninar.com (202.152.63.242) by
HK2APC01FT041.mail.protection.outlook.com (10.152.249.47) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.20.696.11 via Frontend Transport; Fri, 27 Apr 2018 01:51:52 +0000
X-MDAV-Result: clean
X-MDAV-Processed: mail.puninar.com, Fri, 27 Apr 2018 08:54:23 +0700
Authentication-Results-Original: puninar.com; auth=pass (login)
smtp.auth=chitra.asbar...@puninar.com
Received: from FINANCECHITRA by puninar.com (MDaemon PRO v17.5.2) with ESMTPSA
id 58-md50000021205.msg;
Fri, 27 Apr 2018 08:54:20 +0700
X-Spam-Processed: puninar.com, Fri, 27 Apr 2018 08:54:20 +0700
(not processed: message from trusted or authenticated source)
X-MDArrival-Date: Fri, 27 Apr 2018 08:54:20 +0700
X-Authenticated-Sender: chitra.asbar...@puninar.com
X-Rcpt-To: itsupp...@puninar.com
X-MDRcpt-To: itsupp...@puninar.com
X-Envelope-From: chitra.asbar...@puninar.com
X-CAV-Result: clean
From: Chitra Asbarina <chitra.asbar...@puninar.com>
To: 'itsupport' <itsupp...@puninar.com>
References: <74E1B43843216DCF5A0F83F89AD674E1@73VQM7SY8R>
In-Reply-To: <74E1B43843216DCF5A0F83F89AD674E1@73VQM7SY8R>
Subject: FW: [Possible SPAM-IT Puninar]
Date: Fri, 27 Apr 2018 08:49:33 +0700
Message-ID: <002501d3ddca$19ed49f0$4dc7ddd0$@puninar.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0026_01D3DE04.C64C7010"
X-Mailer: Microsoft Outlook 16.0
Content-Language: en-us
Thread-Index: AQK5t8GWm3MDfeDvtcvupDiYPDhA0KJIJFKA
X-Antivirus: Avast (VPS 180425-6, 25/04/2018), Outbound message
X-Antivirus-Status: Clean
X-Return-Path: <chitra.asbar...@puninar.com>
X-MDaemon-Deliver-To: <itsupp...@puninar.com>
Return-Path: chitra.asbar...@puninar.com
X-MS-Exchange-Organization-ExpirationStartTime: 27 Apr 2018 01:51:52.5092
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id:
9dbc7158-0d3f-4947-1fa0-08d5abe172d1
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Forefront-Antispam-Report:
CIP:202.152.63.242;IPV:NLI;CTRY:ID;EFV:NLI;SFV:SPM;SFS:(2990300002)(438002)(189003)(199004)(53546011)(86362001)(6306002)(102836004)(53936002)(8936002)(106002)(1096003)(733005)(68736007)(426003)(6636002)(6666003)(106466001)(229853002)(37006003)(336012)(606006)(356003)(450100002)(476003)(790700001)(54896002)(126002)(236005)(2473003)(84116003)(7826002)(966005)(50226002)(62580400003)(5000100001)(76176011)(81156014)(6862004)(4477795004)(46656002)(71636004)(81166006)(8676002)(260700001)(5660300001)(1420700001)(2616005)(11346002)(53376002)(61296003)(16586007)(270700001)(4743002)(104016004)(486006)(446003)(84326002)(46816001)(44736005)(97736004)(26005)(7416002)(44832011)(69596002)(36756003)(59010400001);DIR:INB;SFP:;SCL:5;SRVR:SG2PR0601MB1786;H:mail.puninar.com;FPR:;SPF:Pass;LANG:en;PTR:InfoDomainNonexistent;MX:1;A:1;CAT:SPM;
X-Microsoft-Exchange-Diagnostics:
1;HK2APC01FT041;1:qyD1WvD757ZQsdOHZ7kDeS5suQdCYx1ZYL0joWL6BMKNkgU1qo+SJjBqD+RsnIxj+5i5Qb0qzGWOJLX8BIwrdgr9gsWeJG3R5fObWnvUfW+S4KXjf7KNdjUQ/HqBe2PO
X-MS-Exchange-Organization-AuthSource:
HK2APC01FT041.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: puninar.com
X-MS-PublicTrafficType: Email
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEID:(7020095)(4652020)(5600026)(4608076)(2017052603328)(7153060);SRVR:SG2PR0601MB1786;
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1786;3:ZWkZ0uPtRL3gxGAz80jPhyuA/8RPwGNOFZy9LJHaHVoUCQhOyteprudTApWP0fkA1O95VzW/MlTZNtWYstkGA5W8wn+BU9oKsNfxi8GfDexzFuKuAgYfmqTpWfC7KfWlXyaWNWi6Aa+1f4V2FrYnhaevfpWna6sVJfDGBEgMJYAatoNxrInQrto+SSmfiBAN1CBc0oekKFYc86hzb/yKeDINjleHixDJmiOyEzynRONhzXXx07u5UpfhFu0uN3KdjH4fwXOqwpn7VUUyY1SWRW/okT7A3SNuGGBwfPmdEJTQlvd+V6UuAu0HrtaSznHFrNDRy+y4M26MPtnC+7YBB/USQ85lew3U6vkUr5NFEJE=;25:XJ+UabmkHtKWTfdvgs8Mv56iYrnuVVpeSMKalc+y7XL6I6x/8i/j1ZPviRXVqGCfCrkbqlOIU/p4p/mVqmT4o4c1r+FeXoZMeWHJPIS6DQnLFGCGItdHym0PXYI09yujrvsSnEHfMcgVhh3+KoB8dO6QNhMKTegLPZ73+MBrlvLww7BBTpFxVWKkhJ2CEO3d12sb9Eti85GrLHYi8sg4Pz2zUd+fAx0ZKGyKel9Lwn02VQcglMpY5dKVQrsJdnLFQxf+5ETfT/+mqDMGWZP8CzpmvnRlExD4wpjwKcCex7VPTiqd2wnjHztRsGVn8UzlZ1owMJ/3UHXqPvylgFwDYg==
X-MS-TrafficTypeDiagnostic: SG2PR0601MB1786:
X-LD-Processed: 25d340fb-aa64-4208-9133-f3ecd2846366,ExtAddr
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1786;31:LLp/xKHTtjjKyh2qBBCAVlb0iM/y1n3KmdeKT3G3sbOVYG5f28tbKZ0WsaAVNNWChlagFVuEnZGYsrI0CJ9BqeED45vJ6udRzs5/Fi74P4I3d2nHRG4Y6vUuYI59HkJJBzsOI4/DF5k9FSlQReQyrsl6T5wVQAK65sKelLusQypYm9QRY/oVsCCKDMcmKYWzV36VSwZq7IVHK90ln8/L/BPh1vq8p/UEW35bSR42e8o=;20:IuO9cuz2sVUAmpcyhipVyMtmxJ72mbf3+GykCNON93qJjkriYWnuQ7fRlsw4i108FXuR8LM1RVD9rLufuEWHZbRFjrtACTttC878pQjVzFJIWfXR33qNBNDTkwvp+CrOjpmtWpubuJegELUbjaHm5gIeYNGC7E6J6utF7r1QxnmhE5jGJK/5qpT8E84tqhFmiZ0DXY5lQHEso9j47ZBoLkF4bCKb18410Z4fitkbf1xksPIVbBOmlCrOUwQVRK16;4:pwEHzoVz8ZMSITWx/4GzGFxLBt4A4yH01A6sedfTEsMWSaTl7Uc/zG/UvmrCyXf+J3H/tK6aYJJf/fhs172Bpcrvw2DU7I0xazD26ZUfN1IJsTBmxN4P7PXFpMMew4WUYR/FMOIka3zsinrfwI0xy3Rr3t98r/HbNv3Zg/kcffAcoR0g8dIPjJzXw0hkWM6xJIty00t/6t2l528h9GWiPsDet1eq6uihA5eXXpqwXZOt73FuNkdWmvrMDQWXuI42m1unfErjFbPFRgiiLJEPUrEXygok1y5Wz5hv34xVWjmF1VNTKmsAzVgv+VPcyjM9BwyDJdUR21q+oJE2VFxHV+9ZiJSgCW93zbS7rHouhNXBLUYve7SUveJxTmUolU4u
X-Exchange-Antispam-Report-Test:
UriScan:(28532068793085)(21748063052155)(252103738410646);
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(9101521199)(2401047)(8121501046)(3002001)(93006095)(93004095)(3231232)(901025)(902075)(913088)(7045084)(2230133)(944501410)(52103095)(52102095)(52105095)(52106095)(52401190)(52601095)(52606095)(52602095)(52606095)(52606095)(52505095)(52406095)(52304095)(52205095)(10201501046)(1610001)(9300000083)(9301000104)(8301001075)(8301003183)(201708071742011);SRVR:SG2PR0601MB1786;BCL:0;PCL:0;RULEID:;SRVR:SG2PR0601MB1786;
X-MS-Exchange-Organization-SCL: 5
X-Microsoft-Exchange-Diagnostics:
=?us-ascii?Q?1;SG2PR0601MB1786;23:QoW9fn/vM7qQRu8Fbj97qogjB2QUc9oKCwYUHQI?=
=?us-ascii?Q?dGhydAK4wU4RicNDn+rjY4frZxJDcA7u879uLCRD7L0DSuXK6JiLbofHlhqD?=
=?us-ascii?Q?PwDx67tzZuPNh4wCrw3O0ZmG/QSP/qREv8opeMgygHeAxNx97+ws3zyAtgMx?=
=?us-ascii?Q?nSXD25ltjbhM89iGyIC1GueV4AvbU+G4LFnqbD6XUcQ9U/nXAEa/lBeTAxUr?=
=?us-ascii?Q?no+kTNhGfAIjFdIZ0BZbVY2b4cbmIkbyb6/USCezp8ddxwF8RucnOhF0oLhy?=
=?us-ascii?Q?V6HI+LBtNKScliMcy6mxgOxn4ZAboWqGf6LhWHPo8siKRMUOF7w4zBn96Jid?=
=?us-ascii?Q?6nht+Caq6xJ9xmvDasTgAebHVx/HJ5caBwBz8GZaZF2X+wjPiGmU6ssCtkLC?=
=?us-ascii?Q?z4GCCgMz291qz30+ZbfwMTpf0HRUoH5Jg9KjIO/VkH3fgT1dnMyj2ajijNRU?=
=?us-ascii?Q?esogLdsfHJ0MfeEUEVtbdvAGYeE54g0GEx28pXPH6pApsHW7kh9EOqYWdvCv?=
=?us-ascii?Q?wH9jtjaucfChhkygyxwORYPeB9RLSAzPdEr+7EJJXicieXWIQgtGyvwYwgc9?=
=?us-ascii?Q?k5MjSv3xfB+FShxhJFFThXsJAFnYRCxD6YalBONY3PMnXfcw2bwQU3gRvy6T?=
=?us-ascii?Q?B0AaqUri9oZVhySzzFewbYouChMA7EByQQg61L4RcyX43o3bxUW6xxOWbbK1?=
=?us-ascii?Q?y+RLQDUkZUV1953LjihhzA5nMsiNQg+2EIiOTbOIqhXqZk0gp1vIZK2Rqjdc?=
=?us-ascii?Q?xpu7Ba39nA92mB3BTQzfJH2vsRjBx02poVjIrNEFOxFC2HjVfvF/XVLjoBbm?=
=?us-ascii?Q?KuzOmZab9AP/iCEXTSgzt1Q9WCm8CkjFyU0on2DtgoJPGaSl9cg89ZV2kSkq?=
=?us-ascii?Q?MQ+UO2HBkB2BPt15T1NVJiEBI3Yk2wueaV7Gag1ToVGsGKPdzUrdKqtod+tF?=
=?us-ascii?Q?NDKLoezQdScyKi6j8ZBgdvk0aX/TG+eLj7vBeQXRkNAPcOz+6K4L5efF+AGT?=
=?us-ascii?Q?vBkikPUP1C7cZmksMwatcuBmmkPia6v4X7nMSMVNeO7EmNjgA7XmF6NZvt3v?=
=?us-ascii?Q?hywzpGCijjNs6QGoejKoZYXAIYpDFVOtLl6HogCKyoJg9JDfwQUVVl0NfBoJ?=
=?us-ascii?Q?ceZ4emtM3TJG4yND196q4ft1E7vpupRAcpoaWIV/prCeQecnjFhM7OTREaXv?=
=?us-ascii?Q?qkiHToj5yMjR0Mz6o6JefvpfY8e8WCoMXnWLlzqguGgnFqILsTobrIRuHULo?=
=?us-ascii?Q?IVraFKOFMFZAg7IgkOHdIU5m9z+qYDuEIB817T8iOD0WDYObtk3DU2nsFE5M?=
=?us-ascii?Q?40LxD1DS4fkkC4k5NntWOXVA2Ot4+l0qEO/3wyx4CNhNqRPH2lKATcNbN2iK?=
=?us-ascii?Q?DfYkXHD1BLeYUKY+9Cfva89dU+fvtNNnnuYTWvGpY9hrrgve1VXpNFPTRUBf?=
=?us-ascii?Q?b6XBDS8SjuwEst+RnczQHVtB8j0KAZmpv4vNHA4rPV6qNz4Wsome1SBIG5NJ?=
=?us-ascii?Q?2Abux4vgy2J7wuWVwkWeZ6vMFRS2oYUilWjODDNgPoI8lEpn7xqErB0dM4Uk?=
=?us-ascii?Q?gfs2lPYDkdxqIZdL54A=3D=3D?=
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1786;6:AVIznTT38CoVvGXAfOxeWCMbB+thX1O6hZ1d/AKoCOqQNFD8p0C01Kh4xLuDAbfyXrnBQCUc6eYcwkPyC3RESvAX9LEqxoAVhxXknHDt3BQYSP1XWE+PiTR/RTyvLnYBd3huOmO4/srQXXPgJy93zz8CM6qV11vK77BYXG30c6fJy9wP01ZSsrh4eL54SEaJDCDcimi7NXJ55KkVuSkSsDrz1d8tSK0kdLU4imZejZKlzs6zLvOIDWwqYdSjWAJxPB4+Ui7OsY7cQHsLP3IClnJUTe4c4clqHYwdulLDuKMW10y32PMYQtdI+0Df8bZ4FaIgOEx51D+L8/ntu6/VsgMcHmeCUMLmzqRL4mp4JXX9ch8W5s2dVQELFB+Zncwvqo/8W38kllu+VoVdnUA7O22h3MNCVVv4HGP2J29R1lFuSmHtkUDGXUQxI+VrtOqAbfK1Port6sGwaEnSTajRiVwwyrtKhaOH+nmxapmeWg77Dd8Bpgyp7Etn6ei3s1nbJ3h6Z69lRasnrN+O7odKpzjmytssOIp5Q/EH1lwlduE=;5:RPakE6Bl4Kca1gRoeSrIt8tfJhE+ZFhBB4K7LK3t+ZNb97oZAlfxrpIFXpH65IUhkK5AV+jDy0MqQTmq2g2i07ddSwFD2wJk8/BkSbsLvin/sw6to25ltk7/2LlJGAibHO1QOzx9r76JaEHUMErzkiryNiti2JytQLwcRSfm2zs=;24:ppxTia+rXAI01Wu5gpQrjcO1l9pq763EEQxLHazjBCsZfubw+5S85LO3vpjVut8SeNUboZx+89mmH7AYUQIYmw==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Test+Block+Spam
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1786;7:4a4A7iJ0s9bF7jlvq9T6q+RLFKw6gHAHFc27hJFYAutry2cRTEHLhQlnyfb/5E6vTBk5QnTaMsmOaHi4PTM6ZMQogV+akNVM9/1XJMOxWYabDD0s45/NMSE2ygS4haLftfZtf0eDtvig+d5ULwKuxWn6vziIuuGDwe6oaY4XJUDVsUoHr1RvWKsDHD/Hvq4x39Ln184bNWBDh7cNzqcicXi7buLVMk7cmhHnds7cjxmxJgx4aX766OLSNCtfUGqLXPql3RG8/UcZ6cRciZkN5wmS077EebvL1jC+UO/SiQI=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Office365-Filtering-Correlation-Id: 9dbc7158-0d3f-4947-1fa0-08d5abe172d1
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Apr 2018 01:51:52.0560
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id:
9dbc7158-0d3f-4947-1fa0-08d5abe172d1
X-MS-Exchange-CrossTenant-Id: 25d340fb-aa64-4208-9133-f3ecd2846366
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp:
TenantId=25d340fb-aa64-4208-9133-f3ecd2846366;Ip=[202.152.63.242];Helo=[mail.puninar.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SG2PR0601MB1786
X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.5546530
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0715.014
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1470;9:6A+Sz3Ifv4yB+awm69d+dRGYmz3P3Zy1QOS02mwKYgl7SudStwuPuY7MvprarD2i/EgHnwCy1ZTuBt2AB++XE3/41khaFA1FGZj69ICFpi2BI72thSKvOkOPsNapplha
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?ialf/8CvmsUluhCfpDi7UqqqfVdJfhck2IpFMtxkb/6MuinvXj6/d3gH0HAM?=
=?us-ascii?Q?vCItX6I6rYhK8uxw3yFEoiFm91AgUsMlCmkr9LuObGYXU8uFClPdM+39Zjaz?=
=?us-ascii?Q?71OrLFvCg0didRJIr+QQv2e3UD8PkHhqifCWh3LdILbzG1nviWMfSOM9V/LJ?=
=?us-ascii?Q?3IvJOYTlBrWikSK7dYOlbV8zX1ABAT2KJGiqKGOGXicyHEZd2gMhGmfEe0Rj?=
=?us-ascii?Q?BvEYOCElT5kfe8YMwc3dklxR4WICrzISmqkUmUaxYzCz/wi2qIop06n19SOc?=
=?us-ascii?Q?6/5NEzBuiDGb7iDL3nL/040r0zx9lCmjdxRrDM3yyI5gQUHReum7azxdXv+8?=
=?us-ascii?Q?DuNxdZYuuJegscFgASn5BeA44Eil7JogZYfv5ElMdw1HIdBewDT4b2SX/h3z?=
=?us-ascii?Q?DeNIdDIzaU5mHVLF51hvwNOc1ldmU4IhkWPkPoEgo2VkFAfVjlHFkCZrYLVG?=
=?us-ascii?Q?vniHwzPXkh8E0XTGBMkEt6WzqylBDoUboMxjrmyhff9x14Czd+fFhKmhBLP0?=
=?us-ascii?Q?I9n3jca0soEOlqAReRTGFeJPGEBDOgCAGMC99eNLRj2rNwurXrH/6OrMtBxx?=
=?us-ascii?Q?anHQg7VwRIn8+qdQresBNbWxgl0JrvLAvoXh/Jei5zP8A1uDkM2Zfeu0dXsa?=
=?us-ascii?Q?HOMEow3IarRlSb84i07I/g61cxC9hisV/aFnvYRiFL1Dymznwi/pwNuQ834E?=
=?us-ascii?Q?LSIyr3K/Rjrp7mj/fyvwLMuDzt2OTUI82KTgLlJ81dHpO8guqMOBixeu6Sby?=
=?us-ascii?Q?aY70di1d/xAA5aZq3SFSnIqHQ7qWIBOgf99Oa/EVMRp3IfmAL3O2zVWHXCVk?=
=?us-ascii?Q?1BAD4e9krY0JcmCUXopY9L+s6z8cnU4iZPsMwW1uGb3GZ8y822Htr5sD7tJP?=
=?us-ascii?Q?6BVRRZ+2M4ON/T0cFdLtFk1u4v1sTQ/2vjitOr37L8GCUArtGGDINIurvqGJ?=
=?us-ascii?Q?fK1I8Nleh6+JDON6e62jPofDyZBMvRpyKInfeNNZ6KNQi6UWk6KGmtx1ul3E?=
=?us-ascii?Q?QUUi7oMqGC5Sw2+FdDAPYeYIdXI9VXlXXhrhZAl7onn+PClZa5K4u5MCJ+wE?=
=?us-ascii?Q?RpRtUL33ew/UhYCDUNxbJqsYORdoMA=3D=3D?=
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1470;27:e18HYklLT0tColyEpZ2vCPhiOa4MJye5RfYoMYEamYmY08Nt6dgj46Al/kR7QFmSv0Mpmmv2cturyIr90CNKPZhgIQhdqOHV/yD0g2PJGKLnjJDbHColtGoUP7EDlPPD
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Received: from HKXPR0601MB1784.apcprd06.prod.outlook.com
(2a01:111:e400:7803::43) by SG2PR0601MB1470.apcprd06.prod.outlook.com with
HTTPS via SG2PR04CA0075.APCPRD04.PROD.OUTLOOK.COM; Fri, 27 Apr 2018 05:32:01
+0000
Received: from KL1PR0601CA0016.apcprd06.prod.outlook.com (2603:1096:802:1::26)
by HKXPR0601MB1784.apcprd06.prod.outlook.com (2a01:111:e400:a025::13) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.715.18; Fri, 27
Apr 2018 05:31:50 +0000
Received: from HK2APC01FT060.eop-APC01.prod.protection.outlook.com
(2a01:111:f400:7ebc::203) by KL1PR0601CA0016.outlook.office365.com
(2603:1096:802:1::26) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.715.18 via Frontend
Transport; Fri, 27 Apr 2018 05:31:50 +0000
Authentication-Results: spf=pass (sender IP is 202.152.63.242)
smtp.mailfrom=puninar-infinite.com; puninar-infinite.com; dkim=none (message
not signed) header.d=none;puninar-infinite.com; dmarc=bestguesspass
action=none header.from=puninar-infinite.com;
Received-SPF: Pass (protection.outlook.com: domain of puninar-infinite.com
designates 202.152.63.242 as permitted sender)
receiver=protection.outlook.com; client-ip=202.152.63.242;
helo=mail.puninar-infinite.com;
Received: from mail.puninar-infinite.com (202.152.63.242) by
HK2APC01FT060.mail.protection.outlook.com (10.152.249.160) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.696.11 via
Frontend Transport; Fri, 27 Apr 2018 05:31:49 +0000
X-MDAV-Result: clean
X-MDAV-Processed: mail.puninar-infinite.com, Fri, 27 Apr 2018 12:34:27 +0700
Authentication-Results-Original: mail.puninar-infinite.com; iprev=pass
policy.iprev=192.168.0.1 reason="white listed" (HELO [41.58.182.86]);
iprev=pass policy.iprev=192.168.0.1 reason="white listed" (MAIL
hilda.lusi...@puninar-infinite.com)
Received: from [41.58.182.86] by mail.puninar-infinite.com (MDaemon PRO
v17.5.2)
with ESMTP id 39-md50000021278.msg; Fri, 27 Apr 2018 12:34:26 +0700
X-Spam-Flag: YES
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.10 required=4.8
X-Spam-Report: * 1.3 URIBL_CR_SURBL Contains an URL listed in the CR SURBL
blocklist
* [URIs: brtu.org]
* 4.5 MDAEMON_OP_SPAM_HIGH MDaemon: spam/phish
* 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.1 URIBL_SBL_A Contains URL's A record listed in the Spamhaus SBL
* blocklist
* [URIs: brtu.org]
* 0.6 URIBL_SBL Contains an URL's NS IP listed in the Spamhaus SBL
* blocklist
* [URIs: brtu.org]
* 3.5 URI_WP_DIRINDEX URI for compromised WordPress site, possible
malware
X-Spam-Processed: mail.puninar-infinite.com, Fri, 27 Apr 2018 12:34:26 +0700
(processed during SMTP session)
X-MDOP-RefID:
str=0001.0A150206.5AE2B5BE.000E,ss=4,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=8
(_st=4 _vt=0 _iwf=0)
X-MDArrival-Date: Fri, 27 Apr 2018 12:34:26 +0700
X-Rcpt-To: hilda.lusi...@puninar-infinite.com
X-MDRcpt-To: hilda.lusi...@puninar-infinite.com
X-Envelope-From: hilda.lusi...@puninar-infinite.com
X-CAV-Result: clean
Message-ID: <5ae25349.9070...@puninar-infinite.com>
Date: Thu, 26 Apr 2018 14:31:37 -0800
From: <hilda.lusi...@puninar-infinite.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120824
Thunderbird/15.0
MIME-Version: 1.0
To: <hilda.lusi...@puninar-infinite.com>
Subject: [Possible SPAM-IT Puninar] 9172
Content-Type: multipart/alternative;
boundary="------------020502060801090105010305"
X-Return-Path: <hilda.lusi...@puninar-infinite.com>
X-MDaemon-Deliver-To: <hilda.lusi...@puninar-infinite.com>
Return-Path: hilda.lusi...@puninar-infinite.com
X-MS-Exchange-Organization-ExpirationStartTime: 27 Apr 2018 05:31:50.1883
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: Original Submit
X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: Original Submit
X-MS-Exchange-Organization-Network-Message-Id:
fa926b34-ea40-4a77-244b-08d5ac002d3f
X-EOPAttributedMessage: 0
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Forefront-Antispam-Report:
CIP:202.152.63.242;IPV:NLI;CTRY:ID;EFV:NLI;SFV:SPM;SFS:(10009020)(376002)(346002)(39850400004)(39380400002)(396003)(2990300002)(438002)(189003)(199004)(87266011)(2906002)(65816011)(53936002)(33656002)(5660300001)(126002)(104016004)(64126003)(53376002)(69596002)(316002)(26005)(106002)(19618925003)(80316001)(486006)(16586007)(10646004)(84326002)(106466001)(2876002)(564344004)(65806001)(65956001)(68736007)(606006)(2616005)(97736004)(336012)(956004)(2351001)(6666003)(37006003)(5000100001)(8676002)(6200100001)(81156014)(81166006)(476003)(8936002)(5001810100001)(356003)(426003)(6916009)(236005)(6306002)(498600001)(54896002)(86152003)(59896002)(58126008)(36756003)(86362001)(59010400001);DIR:OUT;SFP:1501;SCL:5;SRVR:HKXPR0601MB1784;H:mail.puninar-infinite.com;FPR:;SPF:Pass;LANG:en;PTR:InfoDomainNonexistent;MX:1;A:1;
X-Microsoft-Exchange-Diagnostics:
1;HK2APC01FT060;1:YofRbB6w34eOCVkoHctos9f0xd0zB9oFvN0tAPHv39pg7tVFDRQ9FeSxkzmzkDgyD88oNZf8pqjjk7n5bPXD95qIoe4RDod5xodL5vmMPTfdYmPPtYUdcXo9MtdiJa9P
X-MS-Exchange-Organization-AuthSource:
HK2APC01FT060.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: puninar.com
X-MS-PublicTrafficType: Email
X-Microsoft-Antispam:
UriScan:;BCL:0;PCL:0;RULEID:(7020095)(4652020)(5600026)(4608076)(4534165)(4627221)(201703031133081)(8559017)(2017052603328)(7153060);SRVR:HKXPR0601MB1784;
X-Microsoft-Exchange-Diagnostics:
1;HKXPR0601MB1784;3:1dTw0s5KzOHATMlKX5LYJxCOKUv8EB+ecY5o2oVF2osnZJZyrOrNrEGSIDnR4HM1uzft0uXyKl/IFGrOV/ksBahzBKitz13O3YvC1kOBv9oqafJ2/iVBpNpa82pPN5JBr2rLoBYKaw4wZPzTqCIbH5uxvbry7PIvQdUQeM1RXpDm8YPXOc6rPBW/2fSof6kOaBdANnv3kvfRM/q4Ml/zBI8QkKxUVfC10jDKsTxTjCTjLPMHYg9iPGlqc5xLw3A9yZ3ljeRKedVOrb6NTfGXoE5aBLwkOcBLZqmcvh7nWJJ57GSNe+Qpx1axIRcwfw9N0ICPVje3diCcoPi29yV+el7/MZ/72gI1V5LSvDfZtdk=;25:deq0fPvTwVhMRdIjFlo8E0zy9YUN/Qf4UkiLs8wjqbpu/vzUx/3p0VHrteGRR7LMOWQg85Sv2z3N9Uj9FUbYel/4Fuz051WM1GSDo2InUEX9Bew7CMgClMwtimv9VUwzLxBFloYpYtjQBEQIwf4vKNjzeFsUDtbi/LKCVoNV44rXsENSX9TVmbLYE86NNxhkrJ24kj+WDOIjQ+KNCW/FBnhBPnRxpfXnnCRDA83FUao=;31:nKQAOFMXlSXtQcwzE4XY29v8o/2crwrP/ILDPPGDUweUWFeGTDVemGPmkBQLY/jTSnxhh47U4bGZMwRS/BfEkuBkbDjUBpYfDuF+tTukaMSY/wQ/PHqZf+ZnJBYWXDl2
X-MS-TrafficTypeDiagnostic: HKXPR0601MB1784:|HKXPR0601MB1784:
X-Microsoft-Exchange-Diagnostics:
1;HKXPR0601MB1784;20:42zq3BaPreDuzQItCMsfIPbpq3mM3VsYc7w8VuSm7Tzm1qqMa2gmxeDzwCAptsaAcDv5qby/Rj5GfxYvgG8eMkRtCBOyNwKpgJW59IghZDXR8HIi9ATWZZEJTtMJEeCGXmek0uDWvelSSf/1+zkyR5D/gxtlTh5KawDKy8JcHOZhUUAQASzaXcL9juDlS0LbZh+uMZdF3IMO+cWHMtueQTCiBt+68fOmXrxpiv0MuSaNEMpLUg65BB0GT9eHvaen;4:cLeGguLNFDq4F6mcmX4p54v6Q+tXcdkmE+T9BJhbPK+AcV/b79AV3A2/AjnAwf/Lbk/zOI07zwpq2qYyQDJg3bKoJK3Km5l6Q3kA8s7cnb7kBayq1sxpcLZZpRqOioJwc+uXAFUVUy8YjzUlTzAGdAjchEO6o6u713vO98hwiiXQVTlfJE6GTuvcRxymMsZJoWggnreBqaTsE7Y6wauKAw==
X-Microsoft-Antispam-PRVS:
<hkxpr0601mb178427b9e4abee553cb0d000da...@hkxpr0601mb1784.apcprd06.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(252426572658733);
X-Exchange-Antispam-Report-CFA-Test:
BCL:0;PCL:0;RULEID:(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93004095)(3231232)(2230133)(944501410)(52105095)(10201501046)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061750153)(20161123564045)(20161123560045)(20161123558120)(20161123562045)(6072148)(201708071742011);SRVR:HKXPR0601MB1784;BCL:0;PCL:0;RULEID:;SRVR:HKXPR0601MB1784;
X-Forefront-PRVS: 0655F9F006
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-ExpirationInterval: 0:04:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: SpamEngine
X-Microsoft-Exchange-Diagnostics:
=?us-ascii?Q?1;HKXPR0601MB1784;23:o2IbsxOohCzutwY5zTN+5qSTdb41LWfmOOSpO0u?=
=?us-ascii?Q?7pumdwt25wfNAUAaGJ6X6C1quZnrV+tyRJcOojW+Bg/5FnrTTQWU9caiyWo/?=
=?us-ascii?Q?yJwMREDvpGfjhfUQ/sIVodCgY2G74zNcmfYkQbk55FfmWsGDmjJnAH7CmTBi?=
=?us-ascii?Q?XJC5OfASZWNY4C7Ejcog6ys2b7+sWGcpXQIPHIClUSUPASZvIbZllTjOZA/G?=
=?us-ascii?Q?wBUseSG92EeRk9Tb/RYwMGYiB17K3s2jTif0f2Plie3JciG/Hu6wVcjR8V0U?=
=?us-ascii?Q?RJqb8qVz6A94Xquq6jJ3RZV2cRQSKlp1RdhgdPD8xRTbjkd4wQWF5shfp7rJ?=
=?us-ascii?Q?GNFzRBpo+6bfzIuJzgW7VF+kdFf7NMOwRzXmfFaOUrIqunvsQyqLYlJ9YsFG?=
=?us-ascii?Q?bFz5i8nEb41SJNRTd9yrC8CfgACkoEWnOjphClnWTGatEorQJGkMjx5QYPDk?=
=?us-ascii?Q?MSH92diyupoqI6J6QLfmMBcEhB/qa3+syUx9HW9QxPJ20tUJt2mWuwE2U6uI?=
=?us-ascii?Q?+aPIdf4Bt+tdN0Io23ZtSgKGK5hXAP3NLtMszi57FxuA+qBd0Htor3njGi2G?=
=?us-ascii?Q?JCz+mNmgOPHXvP726UR5MkeBkTKZKjXV7AcDgN3P4xP5xrzL9Opcp7uK9RRE?=
=?us-ascii?Q?fb+WJsVt8PJ2uqKFjMlBvM32RRBJ924uAcSf9AnQnZu7xAQZAUUIKHmmQ9Eq?=
=?us-ascii?Q?9Y+Kk7sDGIScv9rq2hxx0U72APjS22xq2jX8YCRGwUebnxutu1lmn8Nj8d8s?=
=?us-ascii?Q?pUWktUIoSPrTO6VogXIlO3TDF7OOkt5donA1FTL6b6pBnmCeUcwIuUT0vGvU?=
=?us-ascii?Q?nbtgmo0cpHmEkVUfFGlFUXUouQP1CAA1hiEn965N/b0qAvGYlMTCcaMzX2+k?=
=?us-ascii?Q?GPilzkuPC2f9N82fbYU3yutGvUGND8TQUYwyjq6qyzQ+YH3LxpOojmFVppUN?=
=?us-ascii?Q?5IVVcEOqSDKmOcOJnN3tiov46aPJLfPcMA1jaH7qsXt0yZzWt0KbT56fJzcc?=
=?us-ascii?Q?BrVc9VPK0Ogh0InEiJNqVV+lnM3xd8j5fozYuYc8Fv1iF22W9gmO3Bfkz5Qh?=
=?us-ascii?Q?0bWJYuYf5foqUGO3yD6h7ajYl1pyT1gF0E91eTJnRGXOJ2VyHtrmXJXE/rNX?=
=?us-ascii?Q?7geG/0DQTBiw73vTNlMewm2KQnxzW8hRIkfBPotQMpQR0R7lImNnNLbSnHQC?=
=?us-ascii?Q?EufOGtzxuUTKSQfqPHc5Xpct7q9igRyc3Ti9Qfo45VFPSX3pCdfOBAdULfro?=
=?us-ascii?Q?azdqDiSbZsas4wqvVGv9VpJpHoL7jaRFGiYp36jkD/O6dDqkHoq4iHZ9S76K?=
=?us-ascii?Q?eHvMSdHQjXVaikFcNM337BxSV0cuM28lD5XUvGFUJmf/SXcC8ojOlGsu8BBS?=
=?us-ascii?Q?XE95eXlWouo77PB5nGtESzBVU/uOg3hDdIclTsnB5RvAxJkSGu0um0u5r0wv?=
=?us-ascii?Q?w00SckGy7DzpEMOFnkPoS62/FpHxmxl634UustNCnXHuJpBecgip2MEGcMw6?=
=?us-ascii?Q?2W4DvSvkV1bBpoQ=3D=3D?=
X-LD-Processed: 25d340fb-aa64-4208-9133-f3ecd2846366,ExtAddr
X-Microsoft-Exchange-Diagnostics:
1;HKXPR0601MB1784;23:gw2+TXvyNjPi/Abgl1ivO15ARuvFZAdkHflveXotgwa6Pbaejr/xviazClJtPY3fxFNLPxse6B79glwElSvYKqWb0Hu8f5ULS2guCmAdjUaljlVkfXa02HyBdNHMlomnGyl2yYqhlUnSeDRtXjVmf/7ebRaDV4utn0aB/ipdCbQ=;6:8nRX8p2NLMJlRcQnD1/L+1Dsw4g5bmOea32yBmME+VQOvlVgRUvbDgBGnpbl56RBOjk8t8f/lqJqtXrzayxphXqjV/1u8A/NRb3/9vHMfU472IhV1mZX30VCRZFrptDdyFNJovnUnaY0KTO6xmbxSm90839Af3p8bUhiDN1hCprqKb+dajdHII19bo47gqC3gjuYCuG5ElaQy0NrVOgiI/ax6U/4660bb0pbGrHQCOM0o5NpRBf0NKtBbv9JOZky2JoLrj5zKWarHs2whD9OiOtGQtXPHY1f6MlmNrIW3wFyXSF66lmZewu6F6GTPq1OOp/uz4nTFXaUrF0KADLLXzcUJcp5EsivVKLWi0bOISGBXd0pIHK/PLLjDyxUVgGblcRNQP4H8ORGPT+ww+z0Gw==;5:nSMz7bq+xS0nyPHYq8+CK/Q31gphQiKrCjCxKnBW6zP3JSebTtBcbMdB054apvxxOF206EZkaqZ2a9KE6lgzEk1NKbLdk09I0KhctJbousbxoN7Jj9ESQRzCeEmW6h7rocJxStt91VQUCsLBCe9NtfHtYLDW8ueftCBO8jIOnm4=
SpamDiagnosticOutput: 1:22
X-Microsoft-Exchange-Diagnostics:
1;HKXPR0601MB1784;7:nW4dYu2RcQ6y3ZO/ac8miQ9RRGnMolIcCCfWuIPqBp2NjZACFevh1LWilMVO6yk5W6HLvl9PBWV6HW6AAcevZQjZCYCYym7trGwhfIo23uM/8/f+GbowT/QjUT7aHxB91hGuH5he4uGZ2JryPqR/iD1lFveME8KNXJLDTsVpObTtJhEkf/IYUJFEqIw9+2p3F0a/1/ELmq4jsCmo6e5pvZO3AzVZtUlaTrwqk9wTR6TD96CtuhcfOEkkHmBcid7M
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Office365-Filtering-Correlation-Id: fa926b34-ea40-4a77-244b-08d5ac002d3f
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Apr 2018 05:31:49.9852
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id:
fa926b34-ea40-4a77-244b-08d5ac002d3f
X-MS-Exchange-CrossTenant-Id: 25d340fb-aa64-4208-9133-f3ecd2846366
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp:
TenantId=25d340fb-aa64-4208-9133-f3ecd2846366;Ip=[202.152.63.242];Helo=[mail.puninar-infinite.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HKXPR0601MB1784
X-MS-Exchange-Transport-EndToEndLatency: 00:00:11.1801057
X-MS-Exchange-Processed-By-BccFoldering: 15.20.0715.014
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1470;9:nbW5rFrXyQqgq9xYqgoXSwUAi10SwAmmNxveMSTQLFQDC0jKwrqIkAB+sOPToFrZWLuniTmWnV+TrMHVBaCygIxNRuwu4cwQdrOWyHRXRmd344jqQA/3l7stbLHMl8ox
X-Microsoft-Antispam-Message-Info:
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
X-Microsoft-Exchange-Diagnostics:
1;SG2PR0601MB1470;27:tULF11t2pX1lfpPx8kc59n2CTDgJnJBamWQS4HQxgl1IEe1UTzmM5RXRf27byXcWJe5CLqK1v/tgOpChWNPaqCUttd/36HNrRYTSRfp7PIUcC6/3P0FwEpviWt5Yh8HA
Terimakasih
Norman Sinaga
-----Original Message-----
From: mdaemon-l@dutaint.com <mdaemon-l@dutaint.com> On Behalf Of Syafril
Hermansyah
Sent: 27 April 2018 11:48
To: mdaemon-l@dutaint.com
Subject: [mdaemon-l] SPAM
On 27/04/18 11:20, Norman Sinaga (norman.sin...@puninar.com) wrote:
> Akhir – akhir ini banyak sekali SPAM masuk ke email kami,
Perlihatkan message header dari spam mail tersebut.
Salin message header itu ke notepad lalu lampirkan kesini agar lebih mudah
dibaca.
Cara melihat message hader
https://www.ablebits.com/office-addins-blog/2013/08/07/view-outlook-email-headers/
--
syafril
-------
Syafril Hermansyah
MDaemon-L Moderators, running MDaemon 18.0-64 bit Harap tidak cc: atau kirim ke
private mail untuk masalah MDaemon.
Banyak yang tidak menyadari bahwa untuk bisa menjadi pemimpin yang baik
sebenarnya harus pernah membuktikan dirinya pernah menjadi orang yang dipimpin.
--- Dahlan Iskan
--
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia
Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com Henti Langgan:
Kirim mail ke mdaemon-l-unsubscr...@dutaint.com Versi terakhir MD 18.0
(all-in-one), SG 5.0.1
