wetransfer-phish-002

Return-Path: <bita@bita.co.id>
Delivered-To: vf_1s@indo.net.id
Received: from pop01.indo.net.id ([10.54.9.210])
    	by pop01.indo.net.id (Dovecot) with LMTP id P8owIKcRTVtheAAA6UW4AQ
    	for <vf_1s@indo.net.id>; Tue, 17 Jul 2018 04:44:07 +0700
Received: from pop01.indo.net.id
    	by pop01.indo.net.id (Dovecot) with LMTP id ZmlAM00QTVtFdAAA6UW4AQ
    	; Tue, 17 Jul 2018 04:44:07 +0700
Received: from pop01.indo.net.id (localhost [127.0.0.1])
    	by pop01.indo.net.id (Postfix) with ESMTP id 41Txkb3jkCzsRJq
    	for <vf_1s@indo.net.id>; Tue, 17 Jul 2018 04:44:07 +0700 (WIB)
X-Virus-Scanned: Debian amavisd-new at pop01.indo.net.id
Authentication-Results: pop01.indo.net.id (amavisd-new);
    	dkim=fail (1024-bit key) reason="fail (message has been altered)"
    	header.d=bita.co.id
Received: from pop01.indo.net.id
    	by pop01.indo.net.id (amavisd-new, unix socket) with LMTP
    	id PJRwXoD25RpK for <vf_1s@indo.net.id>;
    	Tue, 17 Jul 2018 04:44:07 +0700 (WIB)
Received: from sea2.indo.net.id (sea2.indo.net.id [117.54.121.30])
    	by pop01.indo.net.id (Postfix) with ESMTPS id 41Txkb2jMPzsRJj
    	for <vf_1s@indo.net.id>; Tue, 17 Jul 2018 04:44:07 +0700 (WIB)
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
    	by localhost (Email Security Appliance) with ESMTP id 3725C9C9DC1_B4D11A7B
    	for <vf_1s@indo.net.id>; Mon, 16 Jul 2018 21:44:07 +0000 (GMT)
Received: from unknown-host
    	by sea2.indo.net.id with queue id 1055115
    	for vf_1s@indo.net.id; Mon, 16 Jul 2018 21:43:43 GMT
Received: from mail.bita.co.id (mail.bdg.bita.co.id [202.138.233.202])
    	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    	(Client did not present a certificate)
    	by sea2.indo.net.id (Sophos Email Appliance) with ESMTPS id C55D99C6282_B4D1168F;
    	Mon, 16 Jul 2018 21:43:04 +0000 (GMT)
Received: from mail.bita.co.id (localhost [127.0.0.1])
    	by mail.bita.co.id (Postfix) with ESMTPS id 147CC49C2D2;
    	Tue, 17 Jul 2018 04:43:26 +0700 (WIT)
Received: from localhost (localhost [127.0.0.1])
    	by mail.bita.co.id (Postfix) with ESMTP id B5AEC49C2EC;
    	Tue, 17 Jul 2018 04:43:25 +0700 (WIT)
DKIM-Filter: OpenDKIM Filter v2.9.2 mail.bita.co.id B5AEC49C2EC
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bita.co.id; s=mail;
    	t=1531777406; bh=FMy3FvzSiAazFxse7vwFKeOJB5YPmbpTLfSpLYeQbYA=;
    	h=Date:From:Message-ID:Subject:MIME-Version:Content-Type;
    	b=AHTLhc/8j5WZQ8eFanKaKiwdE3c/9yEC7dHcWA6eq2WT+QJoDybAtC3snMybreyi3
    	MwrukpSQVGNqOTtXN80y4eG/LjuBPIXslg4UzotCnOtCzIMAGB2NnDK8OAZeIOscJa
    	lrzAvwmIlMMigFz1Hi4Vy2K7DsUTVN7j/Xvtsvng=
Received: from mail.bita.co.id ([127.0.0.1])
    	by localhost (mail.bita.co.id [127.0.0.1]) (amavisd-new, port 10026)
    	with ESMTP id TRNuouIsBslW; Tue, 17 Jul 2018 04:43:24 +0700 (WIT)
Received: from mail.bita.co.id (mail.bita.co.id [192.168.0.9])
    	by mail.bita.co.id (Postfix) with ESMTP id C948149C26E;
    	Tue, 17 Jul 2018 04:43:22 +0700 (WIT)
Date: Tue, 17 Jul 2018 04:43:22 +0700 (WIB)
From: WeTransfer <bita@bita.co.id>
Subject: You received a files via WeTransfer
MIME-Version: 1.0
Content-Type: multipart/alternative;
    	boundary="----=_Part_2896667_1254918677.1531777402729"
X-Priority: 1
Importance: high
X-Originating-IP: [129.56.24.103]
X-Mailer: Zimbra 8.6.0_GA_1211 (ZimbraWebClient - GC67 (Win)/8.6.0_GA_1211)
Thread-Topic: You received a files via WeTransfer
Thread-Index: nCGHbrYnRi6t5QccSgvqZ5wCg5q/8w==
X-Sophos-SenderHistory: ip=202.138.233.202,fs=13203096,da=24576561,mc=1262,sc=2,hc=1260,sp=0,fso=24551042,re=5,sd=0,hd=16
X-Sophos-ESA: [sea2.indo.net.id] 4.4.0.0, Antispam-Engine: 2018050300.03.03.000, Antispam-Data: 2018.7.16.212717
X-SASI-RCODE: 200
X-SEA-Spam: Gauge=IIIIIIIII, Probability=9%, Report='
     HTML_90_100 0.1, HTML_95_100 0.1, HTML_98_100 0.1, FROM_NAME_ONE_WORD 0.05, BODYTEXTH_SIZE_3000_MORE 0, BODYTEXTP_SIZE_3000_LESS 0, BODYTEXTP_SIZE_400_LESS 0, BODY_SIZE_10000_PLUS 0, DKIM_SIGNATURE 0, DQ_S_H 0, FONT_STYLE_1PT 0, IMPORTANCE_HIGH 0, MISSING_HEADERS 0, NO_URI_HTTPS 0, SPF_UNKNOWN 0, TO_MALFORMED 0, URI_ENDS_IN_PHP 0, URI_WITH_PATH_ONLY 0, WEBMAIL_SOURCE 0, WEBMAIL_XOIP 0, WEBMAIL_X_IP_HDR 0, X_PRIORITY_HIGH 0, __ANY_URI 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_ALT 0, __DQ_IP_FSO_LARGE 0, __DQ_S_HIST_1 0, __DQ_S_HIST_2 0, __DQ_S_IP_MC_100_P 0, __DQ_S_IP_MC_10_P 0, __DQ_S_IP_MC_1K_P 0, __DQ_S_IP_MC_5_P 0, __DQ_S_IP_SC_1_P 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HAS_XOIP 0, __HAS_X_MAILER 0, __HAS_X_PRIORITY 0, __HTML_AHREF_TAG 0, __HTML_FONT_BLUE 0, __HTML_TAG_CENTER 0, __HTML_TAG_DIV 0, __HTML_TAG_TABLE 0, __LINES_OF_YELLING 0,
     __MIME_HTML 0, __MIME_TEXT_H 0, __MIME_TEXT_H1 0, __MIME_TEXT_H2 0, __MIME_TEXT_P 0, __MIME_TEXT_P1 0, __MIME_TEXT_P2 0, __MIME_VERSION 0, __MULTIPLE_URI_HTML 0, __MULTIPLE_URI_TEXT 0, __PHISH_SPEAR_STRUCTURE_1 0, __SANE_MSGID 0, __SUBJ_ALPHA_END 0, __TAG_EXISTS_HTML 0, __URI_IN_BODY 0, __URI_NOT_IMG 0, __URI_NO_WWW 0, __URI_NS , __URI_WITH_PATH 0'
Message-Id: <20180716214407.3725C9C9DC1_B4D11A7B@sea2.indo.net.id>