[MASOCH-L] dominio super fraudulento

[Leandro]

Outro para Netflix:

netflixmaisbrasil.com.br
Titular: Patricia de Souza Mendonça
Documento: 007.374.541-30


Leandro
SPFBL.net

2017-06-22 18:02 GMT-03:00 Bruno Cabral <bruno at openline.com.br>:

> Mais um de banco (contato at santander.com.br)
>
>
> Received: from BN3NAM04HT245.eop-NAM04.prod.protection.outlook.com
>  (10.163.68.25) by SN1PR19MB0686.namprd19.prod.outlook.com with HTTPS via
>  CY1PR17CA0015.NAMPRD17.PROD.OUTLOOK.COM; Wed, 21 Jun 2017 15:31:59 +0000
> Received: from BN3NAM04FT038.eop-NAM04.prod.protection.outlook.com
>  (10.152.92.56) by BN3NAM04HT245.eop-NAM04.prod.protection.outlook.com
>  (10.152.93.97) with Microsoft SMTP Server (version=TLS1_2,
>  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1157.12; Wed,
> 21
>  Jun 2017 15:31:59 +0000
> Authentication-Results: spf=none (sender IP is 23.252.2.10)
>  smtp.mailfrom=linweb01.na.cloud.im; openline.com.br; dkim=none (message
> not
>  signed) header.d=none;openline.com.br; dmarc=none action=none
>  header.from=santander.com.br;
> Received-SPF: None (protection.outlook.com: linweb01.na.cloud.im does not
>  designate permitted sender hosts)
> Received: from BAY004-PAMC2F3.hotmail.com (10.152.92.51) by
>  BN3NAM04FT038.mail.protection.outlook.com (10.152.92.242) with Microsoft
> SMTP
>  Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384)
> id
>  15.1.1178.14 via Frontend Transport; Wed, 21 Jun 2017 15:31:58 +0000
> X-IncomingTopHeaderMarker: OriginalChecksum:25C630CA1968601E653646525582B4
> 61D40DB6A0EF90BA57CC77FB90184215B9;UpperCasedChecksum:
> E7CC6F6A96DF85F8E48FDFDFAC6D0783E2134510A6F07239864FB80615FB
> 6FFA;SizeAsReceived:1003;Count:16
> Received: from linweb01.na.cloud.im ([23.252.2.10]) by
> BAY004-PAMC2F3.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
>      Wed, 21 Jun 2017 08:26:16 -0700
> Received: by linweb01.na.cloud.im (Postfix, from userid 106216)
>     id B32F78FA50; Wed, 21 Jun 2017 10:14:07 -0500 (CDT)
> To: <bruno at openline.com.br>
> Subject: Comunicado importante [Protocolo - S30413480 ]
> X-PHP-Script: blog.jndfinancial.com/mls.php for 189.75.2.234
> X-PHP-Filename: /var/www/vhosts/3/106216/webspace/httpdocs/
> blog.JNDFINANCIAL.COM/mls.php REMOTE_ADDR: 189.75.2.234
> Date: Wed, 21 Jun 2017 10:13:59 -0500
> From: Santander <contato at santander.com.br>
> Message-ID: <07d79d572c954c4830c3a09de9c4872b at blog.jndfinancial.com>
> X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
> Content-Type: text/html; charset="iso-8859-1"
> Content-Transfer-Encoding: 8bit
> Return-Path: 106216 at linweb01.na.cloud.im
> X-OriginalArrivalTime: 21 Jun 2017 15:26:16.0220 (UTC)
> FILETIME=[B9562DC0:01D2EAA2]
> X-IncomingHeaderCount: 16
> X-MS-Exchange-Organization-Network-Message-Id: efde9889-ebde-4f69-8693-
> 08d4b8baa844
> X-EOPAttributedMessage: 0
> X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
> X-MS-Exchange-Organization-MessageDirectionality: Incoming
> CMM-sender-ip: 23.252.2.10
> CMM-sending-ip: 23.252.2.10
> CMM-Authentication-Results: hotmail.com; spf=none (sender IP is
> 23.252.2.10)
>  smtp.mailfrom=106216 at linweb01.na.cloud.im; dkim=none
>  header.d=santander.com.br; x-hmca=none header.id=contato at santander.com.br
> CMM-X-SID-PRA: contato at santander.com.br
> CMM-X-AUTH-Result: NONE
> CMM-X-SID-Result: NONE
> CMM-X-Message-Status: n:n
>
>
> __
> masoch-l list
> https://eng.registro.br/mailman/listinfo/masoch-l
>