[MASOCH-L] dominio super fraudulento

[Rubens Kuhl]

On Wed, Jul 26, 2017 at 6:05 AM, Bruno Cabral <bruno at openline.com.br> wrote:

> Tentativa de roubo de senha do BB. Links na mensagem:
>
> http://103.209.192.105/aapf/bb.com.br/pbb/pagina-inicial/
> http://bit.ly/sac-atendimento
>
>
E de novo teve falha da Microsoft:


> Received: from BN3NAM04HT071.eop-NAM04.prod.protection.outlook.com
>  (10.175.123.157) by BLUPR19MB0084.namprd19.prod.outlook.com with HTTPS
> via
>  BN6PR06CA0019.NAMPRD06.PROD.OUTLOOK.COM; Tue, 25 Jul 2017 17:19:22 +0000
> Received: from BN3NAM04FT025.eop-NAM04.prod.protection.outlook.com
>  (10.152.92.57) by BN3NAM04HT071.eop-NAM04.prod.protection.outlook.com
>  (10.152.92.190) with Microsoft SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1240.9; Tue,
> 25
>  Jul 2017 17:19:22 +0000
> Authentication-Results: spf=temperror (sender IP is 52.237.26.184)
>  smtp.mailfrom=enz7.enz7.u3.internal.cloudapp.net; openline.com.br;
> dkim=none
>  (message not signed) header.d=none;openline.com.br; dmarc=temperror
>  action=none header.from=sacbb.com.br;
> Received-SPF: TempError (protection.outlook.com: error in processing
> during
>  lookup of enz7.enz7.u3.internal.cloudapp.net: DNS Timeout)
>


O record SPF do domínio sacbb.com.br está correto e respondendo...

host -t txt sacbb.com.br

sacbb.com.br descriptive text "v=spf1 a mx/16  -all"


E esse IP não passa na condição especificada no SPF.


Rubens