Ensin näitä tuli TNT, DHL, UPS naamioilla, sitten Amex, Apple.. kohta PayPal.. ja leviää kokoajajn..
Tällaisia ei pitäisi omalle koneelle edes s-postisoftaan ladata.. html-viesti, jossa kaikki ei ole sitä miltä näyttää - lähettäjä, laskun linkki jne. kuvat kylläkin tulevat applen palvelimelta..
S-postipalvelimen Boxtrapper/Spam -softan vieweristä otettu..
Mitä ikinäkin tilaatte ulkomailta, ja tracking s-postia saatte, kaikki pitäisi käyttää tällaisen "läpivalaisun" kautta. Yksi väärä klikkaus riittää..
Vähin mitä omalla koneella pitäisi olla, roskaposti filsu, joka osaa muuttaa html-viestit pelkäksi tekstiksi - mieluummin ei tarttis päästä edes filsulle saakka..
From ruttingef52@rougepot.com Wed Nov 12 15:39:47 2014
Received: from [118.71.132.251] (port=25762 helo=ip-address-pool-xxx.fpt.vn)
by __________ with esmtp (Exim 4.84)
(envelope-from <ruttingef52@rougepot.com>)
id 1XoY90-00009q-5m
for __________ ; Wed, 12 Nov 2014 15:39:46 +0200
Message-ID: <WJQJ60TL.4084670@rougepot.com>
Date: Wed, 12 Nov 2014 20:47:05 +0700
From: "iTunes" <store@apple.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Thunderbird/24.2.0
MIME-Version: 1.0
To: ________________
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=6.7
X-Spam-Score: 67
X-Spam-Bar: ++++++Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, score=6.7
X-Spam-Score: 67
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system,
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Order Acknowledgment Order Number: W5504712 Ordered on November
11, 2014 Dear Apple Member, [...]
Content analysis details: (6.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: odco.com.sa]
1.4 RCVD_IN_BRBL_LASTEX T RBL: No description available.
[118.71.132.251 listed in bb.barracudacentral .org]
0.0 HEADER_FROM_DIFFERE NT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
2.0 HTTPS_HTTP_MISMATCH BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5831]
0.0 HTML_FONT_LOW_CONTR AST BODY: HTML font color similar or identical to
background
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Order Number: W5504712
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<table border="0" align="center" width="702" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td align="left" valign="bottom" style="padding-bottom:8px;padding-left:2px">[img width= height= alt=iTunes Logo]http://images.apple.com/itunes/images/product_title.png[/img]</td>
<td align="right" valign="bottom" style="padding-bottom:8px">
<div style="font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;color:#444444;font-size:20px;line-height:1em!important">Order Acknowledgment</div>
</td>
</tr>
</tbody>
</table>
<table border="0" bgcolor="#ffffff" align="center" width="702" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td colspan="3"><img border="0" width="702" height="5" style="display:block;margin:0" alt="" src="http://email.images.apple.com/dm/groups/aos/om/global/top.gif" /></td>
</tr>
<tr>
<td bgcolor="#e3e3e3" width="1" style="font-size:1px;line-height:1px"> </td>
<td bgcolor="#ffffff" width="700">
<table border="0" align="center" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:20px 0 20px 0">
<table border="0" align="center" width="660" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td align="left">
<div style="line-height:0.92em!important;font-size:13px;font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;font-weight:bold">Order Number: W5504712 </div>
</td>
<td align="right">
<div style="line-height:1em!important;font-size:12px;font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif">Ordered on November 11, 2014</div>
</td>
</tr>
<tr>
<td style="padding-top:15px;border-bottom:1px solid #cccccc;font-size:1px;line-height:1px" colspan="2"></td></tr>
<tr>
<td style="padding:15px 0 34px 0" colspan="2">Dear Apple Member,
Thank you for shopping Apple.com. Please review your order details below and retain this email for your records. You will receive a shipping confirmation email once your order has shipped.
For more information please check PDF invoice on our site <a href="kttp://odco.com.sa/images/invoice.php">https://www.apple.com/support/itunes/account/billing[/url]
. </td>
</tr>
</tbody>
</table>
<table border="0" align="center" width="700" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td bgcolor="#2d5e9f" align="left" valign="top">
<div style="color:white;font-size:13px;font-weight:bold;line-height:1em!important;font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif">Items in Your Order</div>
</td>
</tr>
<tr>
<td align="left" valign="top"></td>
</tr>
</tbody>
</table>
<table border="0" align="center" width="660" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="15" style="padding-top:18px"></td>
<td align="left" width="410" valign="top" style="padding-top:18px">
<div style="line-height:1em;font-size:12px;font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;font-weight:bold"> iTunes iRa Pro </div>
</td>
<td align="right" width="76" valign="top" style="padding-top:18px">
<div style="font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;color:#797979;font-size:11px;line-height:1.09em">$899.99</div>
</td>
<td align="right" width="56" valign="top" style="padding-top:18px">
<div style="font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;color:#797979;font-size:11px;line-height:1.09em">1</div>
</td>
<td align="right" width="103" valign="top" style="padding-top:18px">
<div style="line-height:1em;font-size:12px;font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif">$899.99</div>
</td>
</tr>
<tr>
<td width="15"></td>
<td align="left" width="410">
<table border="0" align="center" width="410" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding-top:10px">
<div style="font-family:Lucida Grande,Lucida Sans,Lucida Sans Unicode,Arial,Helvetica,Verdana,sans-serif;color:#c5c5c5;font-size:10px;line-height:1em">Product Number: X88699L/B</div>
<div>Registered to:</div>
</td>
..