ZIP-File aus Rumänien

Der Link dieser von GMX nicht als solche erkannten Spam im Namen von DHL an meine Blogkontaktadresse (die keine Pakete bestellt!;)) führt zur IP-Adresse 195.159.219.18 bei "PowerTech Information Systems AS" in Norwegen. Das könnte sich sogar um eine echte Seite handeln, denn sie findet nicht, was man bei ihr sucht. Die Gefahr dieser Spam besteht wohl eher in dem angehängten ZIP-File, das man auf keinen Fall öffnen sollte ...


Return-Path: [office@ademar.ro]
Received: from proxy1-1.romtelecom.net ([86.35.15.60]) by mx-ha.gmx.net (mxgmx108) with ESMTPS (Nemesis) id 0LqnaY-1aOIxa0X4M-00ePY8 for [contact@unan.ne]; Thu, 05 Nov 2015 04:09:56 +0100
Comment: DKIM? See http://www.dkim.org
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ademar.ro; s=mail; x=1447297796; h=Comment:DomainKey-Signature: Received:Received:MIME-Version:Content-Type:Date:From:To:Subject: Message-ID:User-Agent; bh=sdZZFy3TAl/vSYOTB+57QlEes7hd3wXkCGe+Qy 8TqaU=; b=M3YZNEYoR+4Tn+hyooB/oOsTtOI4rORykU8OxG54bUZ9DZa1VKogtO WzfMXx08s+effQ/Mnu4U3mpsRgyGeJYt1fOxptZsbWMHHtsHmBmDR07HcxgMleIG XzxcZiLVyc99soAPF/3ZUnnzrKlE3r9NUpDWlxLjsiOiDJc5lK15o=
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=mail; d=ademar.ro; h=Received:X-Spam-Checker-Version:X-Spam-Level:X-Spam-Status:Received:MIME-Version:Content-Type:Date:From:To:Subject:Message-ID:X-Sender:User-Agent; b=eGI+qCHLxsqgLzcavdoIidhJqO8W1ewelVe7eMmAofB78///q2U5n8tRhY4oMb 4jEyisP94NyymHn9w7syxRUx5weBigif9Pwtg4uwkaQZBiXxXRfueHhSJ9KrSD88 NFGnI3Tqf3hbvjVruZEMsvy6It66sC+BA2opEjL5hl9zQ=;
Received: (qmail-ldap/ctrl 2007 invoked from network); 5 Nov 2015 03:09:49 -0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on antispam03.lan
X-Spam-Level: *
X-Spam-Status: No, score=1.6 required=5.0 tests=BAYES_00,FSL_HELO_BARE_IP_2, RCVD_NUMERIC_HELO,URIBL_BLOCKED shortcircuit=no autolearn=no version=3.3.1
Received: from proxy.linux.romtelecom.net (HELO 86.35.15.202) (office@ademar.ro@[86.35.15.202]) (envelope-sender [office@ademar.ro]) by proxy1.romtelecom.net (qmail-ldap-1.03) with SMTP for [uhyrpx5ilw@outlook.com]; 5 Nov 2015 03:09:44 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_cb432881271213ee82f1e96a9a8f19bc"
Date: Thu, 05 Nov 2015 04:09:41 +0100
From: Islam Khaliffa [office@ademar.ro]
To: undisclosed-recipients:;
Subject: Shipping Document/Balance Invoice and Copy of DHL Receipt
Message-ID: [522cf0a3042464aa2b9cc36740d06c92@ademar.ro]
X-Sender: office@ademar.ro
User-Agent: Roundcube Webmail
Envelope-To: [contact@unan.ne]


[INVOICE BL 110000001287.zip]


Good day


Attached is the Shipping documents and BL kindly confirm if the address is OK.
We have sent you DHL envelope
Original copy of Bill of Lading and other relevant documents for clearing of consignment in your port
Herewith concerning DHL tracking link :
http://www.ye.dhl.com/content/ye/en/express/tracking.shtml?brand=DHL&AWB=3048263466%0D%0A


attached is a scanned copy of the docs.