Witam
Ktoś rozsyła spam rzekomo używając skrzynki mojej żony. Może ktoś obeznany w temacie mi pomoże
Oto kopia źródła wiadomości od osoby która dostała trefnego maila (dane wrażliwe zmieniłem na moje dane mój mail itp):
X-Virus-Scanned: by amavisd-new using ClamAV ()
X-Spam-Flag: YES
X-Spam-Score: 9.658
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.658 tagged_above=-10 required=6.31
tests=[AXB_JT_FOLNO0=3.999, DATE_IN_FUTURE_12_24=2.489,
FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001,
HTML_MESSAGE=0.001, NA_582=2, SPF_FAIL=0.919, SPF_HELO_PASS=-0.001]
autolearn=disabled
X-Seen: f5f285ea8e660491d063c3c47b98c6664087e3ea
Received: from veam.websitewelcome.com (unknown [192.185.83.150])
by pm5.nazwa.pl (Postfix) with ESMTP id 7DDE62DB7AE
for <mail_odbiorcy@pm5.olsztyn.pl>; Tue, 22 Dec 2015 19:45:50 +0100 (CET)
Received: from [176.43.163.146] (port=4572 helo=itso.com)
by veam.websitewelcome.com with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.85)
(envelope-from <mój_mail@poczta.fm>)
id 1aBRwR-0008sC-NG; Tue, 22 Dec 2015 12:45:48 -0600
From: moje dane <mój_mail@poczta.fm>
To: "ddtvn" <ddtvn@tvn.pl>,itp itd
subject: ***SPAM*** Fw: new message
Date: Wed, 23 Dec 2015 02:43:05 -0800
Message-ID: <00004c0c218a$c783dbde$e1d50f4f$@poczta.fm>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_034746E4.301A7679"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdE7SUiQr5SQ2uwx3X56/re0wqbp7g==
Content-Language: en-us
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - veam.websitewelcome.com
X-AntiAbuse: Original Domain - pm5.olsztyn.pl
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - poczta.fm
X-BWhitelist: no
X-Source-IP: 176.43.163.146
X-Exim-ID: 1aBRwR-0008sC-NG
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (itso.com) [176.43.163.146]:4572
X-Source-Auth: info@trinityelectrical.co.uk
X-Email-Count: 146
X-Source-Cap: dHJpbml0eWU7Y2FoO3ZlYW0ud2Vic2l0ZXdlbGNvbWUuY29t
This is a multipart message in MIME format.
------=_NextPart_000_0001_034746E4.301A7679
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Hey!
Open message <http://mueu.nl/less.php?o>
moje dane
------=_NextPart_000_0001_034746E4.301A7679
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas=
-microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:off=
ice:word" xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"=
xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"C=
ontent-Type" CONTENT=3D"text/html; charset=3Dus-ascii"><meta name=3DGe=
nerator content=3D"Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
=2EMsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN link=3D"#0563=
C1" vlink=3D"#954F72"><div class=3DWordSection1><p class=3DMsoNormal><=
span lang=3DEN-US>Hey!<o:p></o:p></span></p><p class=3DMsoNormal><span=
lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN-US><b>Open message</b> <a href=3D"http://mueu.nl/less.php?o">=
http://mueu.nl/less.php</a><o:p></o:p></span></p><p class=3DMsoNormal>=
<span lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNormal><s=
pan lang=3DEN-US>moje dane<o:p></o:p></span></p></div></b=
ody></html>
------=_NextPart_000_0001_034746E4.301A7679--