From cespinoza@mdp.gov.PY Mon Nov 29 02:51:25 2021 Return-path: Envelope-to: peter@bsdly.net Delivery-date: Mon, 29 Nov 2021 02:51:25 +0100 Received: from nerdhaven.nuug.no ([158.36.191.135]) by skapet.bsdly.net with esmtp (Exim 4.94.2) (envelope-from ) id 1mrVpE-000OZc-DB for peter@bsdly.net; Mon, 29 Nov 2021 02:51:25 +0100 Received: by nerdhaven.nuug.no (Postfix) id E4C88290054; Mon, 29 Nov 2021 02:49:56 +0100 (CET) X-Quarantine-ID: <6W1gK2+KovzC> X-Amavis-Alert: BAD HEADER, Improper folded header field made up entirely of whitespace (char 20 hex): X-Spam_report: ...aster@nuug.no for details.\n \n Content previ... Received: from portal.nuug.no (portal.nuug.no [158.36.191.225]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by nerdhaven.nuug.no (Postfix) with ESMTPS id B531329001D for ; Mon, 29 Nov 2021 02:49:51 +0100 (CET) Received: from mail.mdp.gov.py ([201.217.59.22] helo=ksmg.mdp.gov.py) by portal.nuug.no with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1mrVp5-000G4c-29 for postmaster@nuug.no; Mon, 29 Nov 2021 02:51:18 +0100 Received: from ksmg.mdp.gov.py (localhost [127.0.0.1]) by ksmg.mdp.gov.py (Postfix) with ESMTP id 7B6BA100716; Sun, 28 Nov 2021 22:10:47 -0300 (-03) Received: from mail.mdp.gov.py (mail.mdp.gov.py [192.168.108.20]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ksmg.mdp.gov.py (Postfix) with ESMTPS; Sun, 28 Nov 2021 22:10:46 -0300 (-03) Received: from mail.mdp.gov.py (localhost [127.0.0.1]) by mail.mdp.gov.py (Postfix) with ESMTPS id 00D7228C02E0; Mon, 29 Nov 2021 01:10:46 +0000 (UTC) Received: from mail.mdp.gov.py (localhost [127.0.0.1]) by mail.mdp.gov.py (Postfix) with ESMTPS id A26EA28C02BD; Mon, 29 Nov 2021 01:10:46 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.10.3 mail.mdp.gov.py A26EA28C02BD DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mdp.gov.py; s=5D484E36-48EA-11EC-9906-B05F8FF5DF87; t=1638148246; bh=Lzndhg7Z/nO8pismV/PEblFkOcRtD2qj9t+J+ttMraA=; h=Date:From:Message-ID:MIME-Version; b=iBMW6HS0+meUEjxNoCYVjWZA0ePOiB0kIoCkN/uUa9T5HxCQOcylb+tfeN2jrT2EN DFzejGnb3cHseu00TXQ4bblqsil6yGCm1uuwyz26fTAcSowW/pkYMrE9oB2biyIXHS 9ffEkZPDg0oFJD2lD4SN1SHhdoQll//4V6v9oQ7+ndh98FbqqBk0tw+el+wEsvrKs0 fFDcDye6rsLK6LYhoWIZbOeRK5Yuy/v+//klYcNEr4EPRhWwIO49dJnN8Wx1N3wIv8 FD6y8K36Y3TrxjI3+iD/Lzn0tv/m6JRLczBtN2uvf4KrgCvOcL/QETDjZgvZfZMhnq oLh+p5B2oSzmA== Received: from mail.mdp.gov.py (localhost [127.0.0.1]) by mail.mdp.gov.py (Postfix) with ESMTP id BA3E728C02B0; Mon, 29 Nov 2021 01:10:44 +0000 (UTC) Date: Mon, 29 Nov 2021 01:10:44 +0000 (UTC) From: CDP Reply-To: CDP Message-ID: <911945510.530.1638148244741.JavaMail.zimbra@mdp.gov.py> Subject: =?utf-8?Q?Viktig_=E2=80=93_svar?= MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_d74ce24d-1be1-4676-a9bc-3835fc615ae0" X-Originating-IP: [192.168.108.20] X-Mailer: Zimbra 8.8.15_GA_4173 (ZimbraWebClient - FF94 (Win)/8.8.15_GA_4173) Thread-Index: vRF4vM62Hu4wbbUA6Jxah8oHsu+u+A== Thread-Topic: Viktig =?utf-8?B?4oCTIHN2YXI=?= X-KSMG-Rule-ID: 1 X-KSMG-Message-Action: skipped, MessageAuthentication X-KSMG-AntiSpam-Lua-Profiles: 167529 [Nov 29 2021] X-KSMG-AntiSpam-Version: 5.9.20.0 X-KSMG-AntiSpam-Envelope-From: cespinoza@mdp.gov.py X-KSMG-AntiSpam-Rate: 10 X-KSMG-AntiSpam-Status: not_detected X-KSMG-AntiSpam-Method: none X-KSMG-AntiSpam-Auth: dkim=permerror header.d=mdp.gov.py X-KSMG-AntiSpam-Info: LuaCore: 467 467 6a1398c5db46024a699eb5e0eaacca295203140f, {Prob_reply_not_match_from}, 127.0.0.199:7.1.2;mdp.gov.py:7.1.1;d41d8cd98f00b204e9800998ecf8427e.com:7.1.1;mail.mdp.gov.py:7.1.1;gordonhous.com:7.1.1 X-MS-Exchange-Organization-SCL: -1 X-KSMG-AntiSpam-Interceptor-Info: scan successful X-KSMG-AntiPhishing: Clean, bases: 2021/11/29 00:37:00 X-KSMG-AntiVirus: Kaspersky Secure Mail Gateway, version 1.1.2.30, bases: 2021/11/28 23:26:00 #17761063 X-KSMG-AntiVirus-Status: Clean, skipped X-Spam_score: 7.4 X-Spam_score_int: 74 X-Spam_bar: +++++++ X-Spam_report: Spam detection software, running on the system "portal.nuug.no", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see postmaster@nuug.no for details. Content preview: Vi har hacket telefonen din og plassert trojanske hestevirus på telefonen din, datamaskinen og alle elektroniske enheter. Svar på denne meldingen og vi vil fortelle deg hva du skal gjøre og fjerne [...] Content analysis details: (7.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 5.0 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.5000] 1.0 MISSING_HEADERS Missing To: header 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 1.6 REPLYTO_WITHOUT_TO_CC No description available. X-New-Subject: *****SPAM***** Viktig – svar To: undisclosed-recipients:; Status: RO Content-Length: 923 Lines: 21 --=_d74ce24d-1be1-4676-a9bc-3835fc615ae0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Vi har hacket telefonen din og plassert trojanske hestevirus p=C3=A5 telefo= nen din, datamaskinen og alle elektroniske enheter.=20 Svar p=C3=A5 denne meldingen og vi vil fortelle deg hva du skal gj=C3=B8re = og fjerne viruset.=20 --=_d74ce24d-1be1-4676-a9bc-3835fc615ae0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Vi har hacket telefonen din og plassert tro= janske hestevirus p=C3=A5 telefonen din, datamaskinen og alle elektroniske = enheter.
Svar p=C3=A5 denne meldingen og vi vil fortelle deg hva du skal= gj=C3=B8re og fjerne viruset.

--=_d74ce24d-1be1-4676-a9bc-3835fc615ae0--