Beware email gift from apple coupon

Hi,

A few days ago I have email from Apple Coupon (noreply@my.apple.id.ltd). It's look like from apple Indonesia (because they language using bahasa).

But I curious about they email address, it's that true email address from apple Indonesia or not?. I searched they domain using whois but refused by system. Then, when I view full header the email, I've got this:

"

From "Apple Coupon" Fri Jul 24 06:17:14 2015

X-Apparently-To: yoe_c_me_us@yahoo.com; Fri, 24 Jul 2015 11:04:07 +0000

Return-Path: <noreply@my.apple.id.ltd>

Received-SPF: none (domain of my.apple.id.ltd does not designate permitted sender hosts)

bmFuZ2thbiBoYWRpYWggZGFyaSBBcHBsZSBJbmRvbmVzaWEuIERhbGFtIHJh

bmdrYSBtZXJheWFrYW4gIiBVbGFuZyBUYWh1biBrZS01IEFwcGxlIEluZG9u

ZXNpYSAiLiBBbmRhIGJpc2EgbWVuZ2FtYmlsIGhhZGlhaCBkaSBBcGxpa2Fz

aSBBcHBsZSBJRC4gSXBob25lLTYgUGx1cyA1LjUgaW5jaGkgU3Blc2lmaWth

c2kgw4LCuyAxMDgwIHggMTkyMCBwaXhlbHMgw4LCuyBEaW1lbgEwAQEBAQNt

dWx0aXBhcnQvYWx0ZXJuYXRpdmUDAzgCA3RleHQvcGxhaW4DAzACA3RleHQv

aHRtbAMDOAJBcHBsZSBJRChZbjFTOWQ5ZkFsU1YyMWtleSkuaHRtbAN0ZXh0

L2h0bWwDAzE-

X-YMailISG: DCYDla0WLDuADWFCxMXpIuDUYgOn3ZXj.mEmf1ho5NnuIjtW

jGBtBng1bVJZ9j6Cb7hpCDHiKNd3oBQnXmkcltI_v0nkSnwxt81xDtwyMUuy

KDqBG9C52y5VK5l7bTrYaJ1beZljG18MUXhlSzsxNQ_x5gyOXTmS5EkRpOKG

zlD0WKPQx1mN05HU8azJdSsQXjOU4Skh04SO1vY7uBgI86mW9VybwBaIPH2u

pGKwuKbswRnemDfMa0DnVqKo7uoeO2noRa.cIRJWQR2lV15LR_zWBd6uvkqb

jdh9JeXoqxr3S6Arl9zIsMR0lUrbHjYjGN7_vAAUGFNejep5XeEH7WoX7Naw

awoOmHglBvzCCZtJUEyITvgFY.mvsmrXGZM0GEkIDMkRVS_HcBu_aK.w2mvz

1xUUxoA_xLRghPAog.1tBzTJ0MYEnWYKeop4rrSwV.JTTWQZXlhn6BSnSN_2

QzDAreDLXBR84p5WPX4CVnJHhxzOXv9BrlZmLeYDHT4wPTMEcypcRoIP8_Zh

jyzsLaCtuZfMXz.aI3VEsLxyj4yTuj9pNupiFVtsI7RHKZx7vpdnLfHDot8K

tHuAczlzOvPWnVhgji8uWBpTvNCTkUPsdBQIrSV0cWrVOQsCNLqRO8.WEpuV

KE7ipQIFbxXzHFtN709jcwKoKPaoXfjTiE_taanWIAz_qokWfkW_vLMnjpSP

k_UqmKjP6cyJCWtV7aTFlhgl50HK6pvaD0pbLXF3yz.e0mV4CrBVbG4kf3AK

NPaLXA7eRtUvq1Irk_pmJmJh7EBc1Sbc7reKzDoirEdm6NT9n7WHi7ppeNgT

fpPNXBJ6MfiQUF5srpWEi8P_XiO6VDKLeFU23UM.a_uYMmq7JVkW.14zoCyd

oqkDXcUCfA2BVQ9ODjZ8X944SfS7iUatsA8grkpUmRMB5dFNud5Q548VMRw5

AfMVgkKcRVvZmLUAjbkxGgefbGgBKfRhk3kSSrjyAOM9rFvOxkKIOOPStppQ

.wDTKbi5bJb3aCGDIVH4kpQWaNGJmHwGjCAq41SqG0Qh_gx8U9L4Vw_tqM_C

2lQSH3l4xgZ44qkDQPoPY39.hTNrSAAp4xvfjaUdC5ov64ez.oJ1mhshOhQL

Yf19byg2Nrr8yXvXAsTJ55fgDbf0sh3Oci7WlAieiVeZuqUpuwNwNpivNP_9

DxzpLnRNd.h3SVzzXdb77oWtrU_W.u.FSxNQGsniHWf5KBCINdID64brJnjO

BJSkaNaoxKOdUBrv.jTKmxX8YEmPtu7dhevju9HnV9x1B7lFLfEuOJuhCcy0

PPYS1lYlKHpwUGa8y_ylJ2jwr_BlVnGh_lgekaAfiY6.DCvhcysydyBVRzH_

lkafSL9fpx9rvcdhh8SV3vjMXai8jaHLiscFvs3oAQVjG1O71EI_WkfPDzg-

X-Originating-IP: [202.47.88.194]

Authentication-Results: mta1075.mail.bf1.yahoo.com from=my.apple.id.ltd; domainkeys=neutral (no sig); from=my.apple.id.ltd; dkim=neutral (no sig)

Received: from 127.0.0.1 (EHLO mail.bangda.kemendagri.go.id) (202.47.88.194)

by mta1075.mail.bf1.yahoo.com with SMTP; Fri, 24 Jul 2015 11:04:07 +0000

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.bangda.kemendagri.go.id (Postfix) with ESMTP id 0D4032E5F62

for <yoe_c_me_us@yahoo.com>; Fri, 24 Jul 2015 13:17:24 +0700 (WIB)

X-Virus-Scanned: amavisd-new at bangda.kemendagri.go.id

Received: from mail.bangda.kemendagri.go.id ([127.0.0.1])

by localhost (mail.bangda.kemendagri.go.id [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id AU7uDSsvqy8P for <yoe_c_me_us@yahoo.com>;

Fri, 24 Jul 2015 13:17:23 +0700 (WIB)

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.bangda.kemendagri.go.id (Postfix) with ESMTP id B5F652E5F63

for <yoe_c_me_us@yahoo.com>; Fri, 24 Jul 2015 13:17:23 +0700 (WIB)

X-Virus-Scanned: amavisd-new at bangda.kemendagri.go.id

Received: from mail.bangda.kemendagri.go.id ([127.0.0.1])

by localhost (mail.bangda.kemendagri.go.id [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id uT4MAiKWDCze for <yoe_c_me_us@yahoo.com>;

Fri, 24 Jul 2015 13:17:23 +0700 (WIB)

Received: from WIN-MMA5FRTGBK5 (unknown [203.153.214.50])

by mail.bangda.kemendagri.go.id (Postfix) with ESMTPSA id 5C6932E5F45

for <yoe_c_me_us@yahoo.com>; Fri, 24 Jul 2015 13:17:23 +0700 (WIB)

From: "Apple Coupon" <noreply@my.apple.id.ltd>

To: "yoe_c_me_us@yahoo.com" <yoe_c_me_us@yahoo.com>

Reply-To: noreply@my.apple.id.ltd

Date: Fri, 24 Jul 2015 15:17:14 +0900

Subject: Selamat anda mendapatkan hadiah dari Apple.

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="_=aspNetEmail=_169e7039be8d4e84a7503749051cbe73"

X-Mailer: aspNetEmail ver 3.7.0.0

Message-ID: <WIN-MMA5FRTGBK56aca04c0051846e188ba61ff83d9d273@WIN-MMA5FRTGBK5>

Content-Length: 8202"

Gotcha! It's a fake email address (see bold font I remarked).

So, be careful of this email address (especially user id from Indonesia, if you find in your inbox of this mail).

rgds,

yusyapril