---
title: "SPAM de server59.powerteam.com : DIRECTION GENERALE DES IMPOTS : Nouveaux remboursement disponibles"
url: https://www.cyber-neurones.org/2019/12/spam-de-server59-powerteam-com-direction-generale-des-impots-nouveaux-remboursement-disponibles/
date: 2019-12-16
modified: 2020-01-21
lang: fr
author: "Frederic"
description: "Un SPAM de server59.powerteam.com , à noter que le SPF passe ... merci powerteam.com ( cela envoi vers https://usersidlimited.com/remboursement/ : NE PAS CLIQUER SUR LE LIEN )  : Return-Path: <service@userchecksecurity.com>..."
categories:
  - "SPAM"
tags:
  - "SPAM"
word_count: 140
---

# SPAM de server59.powerteam.com : DIRECTION GENERALE DES IMPOTS : Nouveaux remboursement disponibles

Un SPAM de server59.**powerteam.com** , à noter que le SPF passe ... merci powerteam.com ( cela envoi vers https://**usersidlimited.com**/remboursement/ : NE PAS CLIQUER SUR LE LIEN )  :
Return-Path: <service@userchecksecurity.com>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on spamd14.phpnet.org
X-Spam-Level:
X-Spam-Status: No, score=0.9 required=5.0 tests=BAYES_00,
HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
NORDNS_LOW_CONTRAST,SPF_HELO_NONE,SPF_SOFTFAIL,T_KAM_HTML_FONT_INVALID,
URIBL_BLOCKED,URI_TRUNCATED autolearn=no autolearn_force=no
version=3.4.2
Received: from server59.powerteam.com (unknown [185.67.1.85])
...
Authentication-Results: server59.powerteam.com;
spf=pass (sender IP is 93.115.96.181) smtp.mailfrom=service@userchecksecurity.com smtp.helo=[93.115.96.181]
Received-SPF: pass (server59.powerteam.com: connection is authenticated)
...
Subject: Nouveaux remboursement disponibles
Message-ID: <cbd03706a3c4724ea0337688b69973d1@93.115.96.181>
Date: Mon, 16 Dec 2019 00:10:13 +0100

Whois :

- powerteam.com :

Registrant Contact Information:
NameDomain Administrator
Organization SPX FLOW, Inc.
Address 13320 Ballantyne Corporate Place
City Charlotte
State / Province NC
Postal Code 28277
Country **US**
Phone +1.7047524626
Email

- usersidlimited.com

 OVH : Merci .... c'est bien quand on reste sur du français ... Misère.

Le message est assez bien fait .... on progresse :

[![](https://www.cyber-neurones.org/wp-content/uploads/2019/12/capture-decran-2019-12-16-a-12-37-31.png)](https://www.cyber-neurones.org/wp-content/uploads/2019/12/capture-decran-2019-12-16-a-12-37-31.png)