[MASOCH-L] dominio super fraudulento
Leandro Carlos Rodrigues
leandro at allchemistry.com.br
Thu Jul 20 08:19:37 -03 2017
Estranho Bruno. Seu Outlook está pisando na bola contigo pois nem
deveria aceitar essa mensagem:
Received-SPF: Fail (protection.outlook.com: domain of santander.com.br does
not designate 45.77.54.78 as permitted sender)
Essa verificação do SPF é de praxe e fico admirado em ver a Microsoft
não respeitar ela.
Se fosse para aceitar o FAIL, então melhor desligar o SPF para poupar a
máquina concordam?
Leandro Carlos Rodrigues
TI All Chemistry do Brasil
(11) 3014-7100
Em 20/07/2017 08:14, Bruno Cabral escreveu:
> Mais um phishing
>
> Como o pessoal esta conseguindo enviar com esse remetente? centraldeatendimento at santander.com.br
>
> http://paroquiadefatima.com.br/aaigj/https/www.santander.com.br/pessoa-fisica/seguranca/br/?Y5Q7JLFUYT=8811189&m9PJ=HeYL6z6&bR2U=bruno@openline.com.br=
>
>
> Received: from SN1NAM04HT105.eop-NAM04.prod.protection.outlook.com
> (10.175.123.140) by BLUPR19MB0084.namprd19.prod.outlook.com with HTTPS via
> BN6PR06CA0002.NAMPRD06.PROD.OUTLOOK.COM; Thu, 20 Jul 2017 05:38:04 +0000
> Received: from SN1NAM04FT047.eop-NAM04.prod.protection.outlook.com
> (10.152.88.52) by SN1NAM04HT105.eop-NAM04.prod.protection.outlook.com
> (10.152.89.56) with Microsoft SMTP Server (version=TLS1_2,
> cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1240.9; Thu, 20
> Jul 2017 05:38:02 +0000
> Authentication-Results: spf=fail (sender IP is 45.77.54.78)
> smtp.mailfrom=santander.com.br; openline.com.br; dkim=none (message not
> signed) header.d=none;openline.com.br; dmarc=none action=none
> header.from=santander.com.br;
> Received-SPF: Fail (protection.outlook.com: domain of santander.com.br does
> not designate 45.77.54.78 as permitted sender)
> receiver=protection.outlook.com; client-ip=45.77.54.78; helo= 7wriueruueiw;
> Received: from BAY004-PAMC1F3.hotmail.com (10.152.88.54) by
> SN1NAM04FT047.mail.protection.outlook.com (10.152.89.225) with Microsoft SMTP
> Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
> 15.1.1240.9 via Frontend Transport; Thu, 20 Jul 2017 05:38:00 +0000
> X-IncomingTopHeaderMarker: OriginalChecksum:8265C26F4B62068F8D2B114B7939BF38A4D5CF01747BF66E3A0655368AE3273C;UpperCasedChecksum:EDD4101C46D4D883F29CFA3150B2D1B59D5A13AC49B318F1243B5D7392808D92;SizeAsReceived:1041;Count:14
> Received: from 7wriueruueiw ([45.77.54.78]) by BAY004-PAMC1F3.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
> Wed, 19 Jul 2017 22:37:54 -0700
> Received: from 45.77.54.78 (localhost [IPv6:::1])
> by 7wriueruueiw (Postfix) with ESMTP id D95532E960
> for <bruno at openline.com.br>; Thu, 20 Jul 2017 05:37:53 +0000 (UTC)
> Date: Thu, 20 Jul 2017 05:36:00 +0000
> To: <bruno at openline.com.br>
> From: Santander S/A <centraldeatendimento at santander.com.br>
> Reply-To: Santander S/A <centraldeatendimento at santander.com.br>
> Subject: =?iso-8859-1?Q?[COMUNICADO]_Prezado(a)_Cliente,_regularize_seu_acesso_e_e?=
> =?iso-8859-1?Q?vite_o_bloqueio_dos_servi=E7os.?=
> Message-ID: <f5f03cef5ba93e843da77faacc5ab464 at 45.77.54.78>
> X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
> Content-Type: multipart/alternative;
> boundary="b1_f5f03cef5ba93e843da77faacc5ab464"
> Return-Path: centraldeatendimento at santander.com.br
> X-OriginalArrivalTime: 20 Jul 2017 05:37:55.0183 (UTC) FILETIME=[564227F0:01D3011A]
> X-IncomingHeaderCount: 14
> X-MS-Exchange-Organization-Network-Message-Id: 32f8dd02-8187-4a1d-d0d1-08d4cf317c26
> X-EOPAttributedMessage: 0
> X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
> X-MS-Exchange-Organization-MessageDirectionality: Incoming
> CMM-sender-ip: 45.77.54.78
> CMM-sending-ip: 45.77.54.78
> CMM-Authentication-Results: hotmail.com; spf=permerror (sender IP is
> 45.77.54.78) smtp.mailfrom=centraldeatendimento at santander.com.br; dkim=none
> header.d=santander.com.br; x-hmca=none
> header.id=centraldeatendimento at santander.com.br
> CMM-X-SID-PRA: centraldeatendimento at santander.com.br
> CMM-X-AUTH-Result: NONE
> CMM-X-SID-Result: NONE
> CMM-X-Message-Status: n:n
> CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
> CMM-X-Message-Info: 11chDOWqoTmjqhOzvWWho/vK8oL2x1FIoEm0Tn+r3D4Vy8IHo2wUnqmgo75eOgV+Nm6BEfg7zrqWrexOCBiei/weZ+AdWo10LcG0ZFsv4UoL4io60uKiWtBQcHOVFzhBriloLdoAkGjgPusQuhgpLvVOe30q8KuL997MTMTzSLVW1WtK8lSFMpdogUrgztlDwsWEqO1HRY9R1XHcqDJQx1suvuEUOP0rg5SytLt5E5IE5w5694j15cbm7/uXlmxL
> X-MS-Exchange-Organization-SCL: 5
> X-MS-Exchange-Organization-PCL: 2
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04FT047;1: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
> X-Forefront-Antispam-Report: EFV:NLI;SFV:SPM;SFS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:SN1NAM04HT105;H:BAY004-PAMC1F3.hotmail.com;FPR:;SPF:None;LANG:pt;
> X-MS-Exchange-Organization-AuthSource: SN1NAM04FT047.eop-NAM04.prod.protection.outlook.com
> X-MS-Exchange-Organization-AuthAs: Anonymous
> X-MS-PublicTrafficType: Email
> X-MS-Office365-Filtering-Correlation-Id: 32f8dd02-8187-4a1d-d0d1-08d4cf317c26
> X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(23075)(8291501071);SRVR:SN1NAM04HT105;
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;3: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
> X-MS-TrafficTypeDiagnostic: SN1NAM04HT105:
> X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;SN1NAM04HT105;25:X8/5FMQVat37bFQ4/fx3+6onXzPLkAG2oCOaLA1/S?=
> =?us-ascii?Q?7MCTpzaNjZBBjNsd6UhZ9ImakONXH0XzU8fRxklVAXFhpc2USgNXgmI8G8gz?=
> =?us-ascii?Q?oeW3ZmANZ846eTKZEHgjWu1jCi4XCLwtNOyW48r4nCilvftVfwbUmgEv2tGW?=
> =?us-ascii?Q?4Xf7LC7PxFLO/QRwsvrBnZU5CQkGn3ANVTjh+wxBsPl84fXnFBkTtLzO1yij?=
> =?us-ascii?Q?0IrEU1oBMi+vK9vaKf8H+ZiTEn/cRWzQre9rCrQCZ1aFp/NdmtF/WNXftilp?=
> =?us-ascii?Q?3nGZ2jpKh9Iku4d3q/8iQngN/a64ujDdYoJSmPNoPsLRzp3ChGWKYQCXXl6Q?=
> =?us-ascii?Q?+M4R+hixkB/edtwyeSdYm7mBu0PgaO40eyv8xk34MYXuonsPg30w22ptu/89?=
> =?us-ascii?Q?PN6RJPYDY3wKsjS7NTGZTkzG2e4KtTgSU2gFsm+1dETiKend7U2+j5xBdKKb?=
> =?us-ascii?Q?IXNWkCelksVWri0TtSAcLqKRX3/tHL1Uu/ICFz+CUSZhqrlxVGi34XB1ItNp?=
> =?us-ascii?Q?DH5cB69uYFwiE2xTPH/grexVzDKl8tcXGu2vMS3m+aZoHvJDyoJMP+Tvv3m1?=
> =?us-ascii?Q?syrEN3TS9NrW3Ny8O6V4x2wk899DESisGWDpvVRrIXJKi3NxqAmHQGctLjtQ?=
> =?us-ascii?Q?rK6tKlG2dg97pgnEB+Lpn5Yna/omXReuux96zb4tOSRWpgdII0vOqtgn72ga?=
> =?us-ascii?Q?Iz4jBkgL7eEWmPaEwDdXDZ3ooCtQCavYt/vx6TEb10DCe8PtUx6ZmrQ0fd+E?=
> =?us-ascii?Q?vGRGX6tenWy4vU86J6U6qexNcz/XlQkJrRC2sbjtQat6gArq15s9XV2asnFf?=
> =?us-ascii?Q?LRQ8ZDtt4rvjBbAnyhhB3/aFQ1fJYeBPiaIuc/TCvd9wWHdo8+Tw9NCvzsAQ?=
> =?us-ascii?Q?EyiRL/0hsfQdENDwyM3kGfp4folVsHvj61BUDVeorlb72UJ9hkhZZqztCiSo?=
> =?us-ascii?Q?iv4HCTe4bamSoROjv+Hec3pX2PSE6XdIaHbg0PSiv+bl4OOtv/369a66t/H8?=
> =?us-ascii?Q?uqedAp5jFDVgERQh06nQYzB?=
> X-MS-Exchange-Organization-AVStamp-Service: 1.0
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;31: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
> X-Exchange-Antispam-Report-Test: UriScan:(166494164430575)(83112858783495);
> X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(444000031);SRVR:SN1NAM04HT105;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:SN1NAM04HT105;
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;4: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;23:4nC3FXk+2JrELG9OqAlwYsMnSgbtNBnS/NaI+XJKp94icePWUPTLGA1ixrfiATcnTOryt11NJLG8lIzzgWLCj9wd0UdHvBOm21NjMv/gcQet68PIwqW981K2+Z0Rq34iUcFd2jPZMl71hTYHHoyQkpCAHC75prbDkhQvzYAuuTCYrmf6dqRLXuC7Zt+DzH95O89bh98lRNM6y0nvc4PKBw==
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;6: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
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;5: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;24:LvOK4ODoWszKAPZEBbrVAEHyPWF1utTO5KUNRuVD4NcMPHpjAM9S+65etvpX46N5ae3tODo8/snMK6uPWogwAQ==
> SpamDiagnosticOutput: 1:22
> SpamDiagnosticMetadata: Default
> X-Microsoft-Exchange-Diagnostics: 1;SN1NAM04HT105;7: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
> X-OriginatorOrg: outlook.com
> X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Jul 2017 05:38:00.5285
> (UTC)
> X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
> X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
> X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1NAM04HT105
> X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.5318710
> X-MS-Exchange-Processed-By-BccFoldering: 15.01.1261.018
> X-Microsoft-Exchange-Diagnostics:
> 1;BLUPR19MB0084;27:inmXRKXXQewtpeghWB1JH4vooCdgtuf0zqceAYWwlJCqMVX1xQpuKC6/Lv7BTRu1fSJrC7958E3JxXzUm/djDeyIWNAPKYjumBkps2VhC61GifVyQcIP0UyjaMe0rW+/lCDXobVFiuhLXqJyuyeJkQ==
> X-Microsoft-Antispam-Mailbox-Delivery:
> kl:0;dkl:0;rwl:0;ex:0;auth:0;dest:J;WIMS-SenderIP:45.77.54.78;WIMS-SPF:santander%2ecom%2ebr;WIMS-DKIM:santander%2ecom%2ebr;WIMS-822:centraldeatendimento%40santander%2ecom%2ebr;WIMS-PRA:centraldeatendimento%40santander%2ecom%2ebr;WIMS-AUTH:NONE;ENG:(400001000128)(400125000095)(5062000261)(5061607266)(5061608174)(4900095)(4921089)(3120004)(4950095)(4990090)(9100004)(9140004);RF:JunkEmail;OFR:SpamFilterAuthJ;
> MIME-Version: 1.0
> ________________________________
> De: masoch-l <masoch-l-bounces at eng.registro.br> em nome de Leandro Carlos Rodrigues <leandro at allchemistry.com.br>
> Enviado: quinta-feira, 20 de julho de 2017 08:01:55
> Para: masoch-l at eng.registro.br
> Assunto: Re: [MASOCH-L] dominio super fraudulento
>
> Mais uma leva dos ataques de ontem, usados em URLs fraudulentas:
>
> br-registro0002.com.br
> coc-coodenacao10121.com.br
> coc-coodenacao10123.com.br
> coc-coordenacao60983.com.br
> dcm-documentacao90902.com.br
> imi-notafiscal501.com.br
> imi-notafiscal505.com.br
> re-registradora1206.com.br
> registrador00022.com.br
> wex-documentacao312.com.br
> wex-documentacao314.com.br
>
> Isso é só uma pequena amostra que consegui aqui na empresa, então deve
> ter centenas deste tipo circulando por ai. Tomem cuidado!
>
> Leandro Carlos Rodrigues
> TI All Chemistry do Brasil
> (11) 3014-7100
>
> Em 13/07/2017 14:20, Leandro escreveu:
>> Valeu Bruno!
>>
>> Leandro
>> SPFBL.net
>>
>> 2017-07-13 14:10 GMT-03:00 Bruno Cabral<bruno at openline.com.br>:
>>
>>> Desculpe, o link realmente não foi. Segue agora:
>>>
>>> http://atendimentos-sac.tmp.k8.com.br/
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l
More information about the masoch-l
mailing list