[MASOCH-L] dominio super fraudulento

[Luiz Fernando Mizael Meier]

Recebi ontem do www.seguranca-bb.ml

2017-07-26 6:54 GMT-03:00 Rubens Kuhl <rubensk at gmail.com>:

> On Wed, Jul 26, 2017 at 6:05 AM, Bruno Cabral <bruno at openline.com.br>
> wrote:
>
> > Tentativa de roubo de senha do BB. Links na mensagem:
> >
> > http://103.209.192.105/aapf/bb.com.br/pbb/pagina-inicial/
> > http://bit.ly/sac-atendimento
> >
> >
> E de novo teve falha da Microsoft:
>
>
> > Received: from BN3NAM04HT071.eop-NAM04.prod.protection.outlook.com
> >  (10.175.123.157) by BLUPR19MB0084.namprd19.prod.outlook.com with HTTPS
> > via
> >  BN6PR06CA0019.NAMPRD06.PROD.OUTLOOK.COM; Tue, 25 Jul 2017 17:19:22
> +0000
> > Received: from BN3NAM04FT025.eop-NAM04.prod.protection.outlook.com
> >  (10.152.92.57) by BN3NAM04HT071.eop-NAM04.prod.protection.outlook.com
> >  (10.152.92.190) with Microsoft SMTP Server (version=TLS1_2,
> >  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1240.9; Tue,
> > 25
> >  Jul 2017 17:19:22 +0000
> > Authentication-Results: spf=temperror (sender IP is 52.237.26.184)
> >  smtp.mailfrom=enz7.enz7.u3.internal.cloudapp.net; openline.com.br;
> > dkim=none
> >  (message not signed) header.d=none;openline.com.br; dmarc=temperror
> >  action=none header.from=sacbb.com.br;
> > Received-SPF: TempError (protection.outlook.com: error in processing
> > during
> >  lookup of enz7.enz7.u3.internal.cloudapp.net: DNS Timeout)
> >
>
>
> O record SPF do domínio sacbb.com.br está correto e respondendo...
>
> host -t txt sacbb.com.br
>
> sacbb.com.br descriptive text "v=spf1 a mx/16  -all"
>
>
> E esse IP não passa na condição especificada no SPF.
>
>
> Rubens
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l
>