Avoid Your Email From De-Activation.

Source code

Return-Path:
Delivered-To: info@jakozpraku.cz
Received: from wes1-mx3.wedos.net ([10.28.12.40])
by wes1-im4.wedos.net (Dovecot) with LMTP id UWpZBfKZkVl6BQAA/yykGQ
for ; Mon, 14 Aug 2017 14:39:14 +0200
Received: from localhost (localhost [127.0.0.1])
by wes1-mx3.wedos.net (Postfix) with ESMTP id 3xWFXy0hCczgL
for ; Mon, 14 Aug 2017 14:39:14 +0200 (CEST)
X-Virus-Scanned: amavisd-new at wes1-mx3.wedos.net
X-Spam-Flag: NO
X-Spam-Score: 3.366
X-Spam-Level: ***
X-Spam-Status: No, score=3.366 required=4 tests=[HTML_MESSAGE=0.001,
HTML_TAG_BALANCE_BODY=0.712, MISSING_HEADERS=1.207,
REPLYTO_WITHOUT_TO_CC=1.946, RP_MATCHES_RCVD=-0.5] autolearn=disabled
Received: from wes1-mx3.wedos.net ([127.0.0.1])
by localhost (wes1-mx3.wedos.net [127.0.0.1]) (amavisd-new, port 10027)
with LMTP id 8xPOjI5r3DDf for ;
Mon, 14 Aug 2017 14:39:13 +0200 (CEST)
Received-SPF: none (sahapat.co.th: No applicable sender policy available) receiver=wes1-mx3-v3; identity=mailfrom; envelope-from=”assamaporn.i@sahapat.co.th”; helo=mail.sahapat.co.th; client-ip=110.170.212.173
Received: from mail.sahapat.co.th (mail.sahapat.co.th [110.170.212.173])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by wes1-mx3.wedos.net (Postfix) with ESMTPS id 3xWFXw3hsPz3Fb
for ; Mon, 14 Aug 2017 14:39:12 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.sahapat.co.th (Postfix) with ESMTP id 2FC452322AC3;
Mon, 14 Aug 2017 19:37:25 +0700 (ICT)
Received: from mail.sahapat.co.th ([127.0.0.1])
by localhost (mail.sahapat.co.th [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id tLyUbC-74PHV; Mon, 14 Aug 2017 19:37:24 +0700 (ICT)
Received: from localhost (localhost [127.0.0.1])
by mail.sahapat.co.th (Postfix) with ESMTP id 147BB2322AC6;
Mon, 14 Aug 2017 19:37:24 +0700 (ICT)
X-Virus-Scanned: amavisd-new at sahapat.co.th
Received: from mail.sahapat.co.th ([127.0.0.1])
by localhost (mail.sahapat.co.th [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id MnINHlK6n7xe; Mon, 14 Aug 2017 19:37:23 +0700 (ICT)
Received: from mail.sahapat.co.th (mail.sahapat.co.th [10.109.10.69])
by mail.sahapat.co.th (Postfix) with ESMTP id 47A7A2322ABB;
Mon, 14 Aug 2017 19:37:22 +0700 (ICT)
Date: Mon, 14 Aug 2017 19:37:22 +0700 (ICT)
From: Webmail Help Desk
Reply-To: Webmail Help Desk
Message-ID: <1704909202.15546.1502714242221.JavaMail.zimbra@sahapat.co.th>
Subject: Avoid Your Email From De-Activation.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_Part_15545_523038541.1502714242219″
X-Originating-IP: [10.109.10.69]
X-Mailer: Zimbra 8.6.0_GA_1153 (ZimbraWebClient – GC59 (Win)/8.6.0_GA_1153)
Thread-Topic: Avoid Your Email From De-Activation.
Thread-Index: 0XImk7hCoivq/ZrSGL3GWZADCT33Yg==

——=_Part_15545_523038541.1502714242219
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Dear Email Account Owner,

we here by to info you that we are currently upgrading from our old anti virus XOAT14 to our new Anti virus software VKAT16 2017/2018, to enable your email not to be spam or hack by email hackers. We here by advice all our customer to click on the link bellow and fill so that we can upgrade our Email account from global hacker/spammer on our new 2017/2018 Anti Virus to prevent your email.

Here is the link: https://1drv.ms/xs/s! ApzzJzXPpMyifKmtm6B7z4-qbFo

WARNING!!! Any E-MAIL OWNERS who refuses to upgrade his/her Account within 24 hours after notification of this update will permanently Be deleted from our data base and can also lead to malfunctioning of the user’s account and we will not be responsible for your loosing your account.

Thanks for your understanding towards our service.

Thank you for surfing the Internet and for using our service.

Warning Code: VX2G99AAJ
Thanks for your co-operation.
Help Desk

——=_Part_15545_523038541.1502714242219
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable