Тупые долбодятлы, на этот раз из Турции, все не унимаются!
Пытаясь завести нас на фишинговый сайт сообщениями о фиктивных грузах на DHL:
Почему Турция, смотрим на реального отправителя:
eposta.omu.edu.tr [193.140.28.32] и обнаруживаем:
Return-path:
Received: from [10.10.10.72] (helo=frv72.fwdcdn.com) by frv33.fwdcdn.com; Fri, 17 Feb 2017 09:33:20 +0200
Received-SPF: none client-ip=193.140.28.5; envelope-from=dhl_express@uudpp.net; helo=MX.omu.edu.tr;
Received: from mx.omu.edu.tr ([193.140.28.5])
by frv72.fwdcdn.com with esmtps ID 1ced2d-000Otx-Vq
for tsdrive@ukr.net; Fri, 17 Feb 2017 09:33:20 +0200
Received: by MX.omu.edu.tr (Postfix, from userid 65534)
id 3vPlB42qMtz22HM; Fri, 17 Feb 2017 09:33:16 +0200 (EET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by MX.omu.edu.tr (Postfix) with ESMTP id 3vPlB414RJz223B
for; Fri, 17 Feb 2017 09:33:16 +0200 (EET)
X-Virus-Scanned: Scrollout F1 at omu.edu.tr
Received: from MX.omu.edu.tr ([127.0.0.1])
by localhost (MX.omu.edu.tr [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id JLRq7sdSLs5h for;
Fri, 17 Feb 2017 09:33:09 +0200 (EET)
Received: from zmail.omu.edu.tr (eposta.omu.edu.tr [193.140.28.32])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
Что пишут:
Dear customer,
Your parcel sent by your customer arrived at our office. Here is your shipping
Document/Invoice and copy of DHL receipt for your tracking please review your
package details HERE to confirm accordingly if your address is correct, before
we submit to our outlet officer for dispatch to your destination.
Sitemap:Accessibility:Legal Notice:Terms of Use:Privacy Notice:Using DHL Websites:Dispute Resolution:2017 © DHL International GmbH. All rights reserved.
Пытаясь завести нас на фишинговый сайт сообщениями о фиктивных грузах на DHL:
Почему Турция, смотрим на реального отправителя:
eposta.omu.edu.tr [193.140.28.32] и обнаруживаем:
IP Lookup Result for 193.140.28.32
| IP Address: | 193.140.28.32 |
|---|---|
| Organization: | National Academic Network and Information Center |
| ISP/Hosting: | National Academic Network and Information Center |
| Updated: |
| City: | Samsun |
|---|---|
| Country: | Turkey  |
| State: | Samsun |
| Timezone: | Asia/Istanbul |
Return-path:
Received: from [10.10.10.72] (helo=frv72.fwdcdn.com) by frv33.fwdcdn.com; Fri, 17 Feb 2017 09:33:20 +0200
Received-SPF: none client-ip=193.140.28.5; envelope-from=dhl_express@uudpp.net; helo=MX.omu.edu.tr;
Received: from mx.omu.edu.tr ([193.140.28.5])
by frv72.fwdcdn.com with esmtps ID 1ced2d-000Otx-Vq
for tsdrive@ukr.net; Fri, 17 Feb 2017 09:33:20 +0200
Received: by MX.omu.edu.tr (Postfix, from userid 65534)
id 3vPlB42qMtz22HM; Fri, 17 Feb 2017 09:33:16 +0200 (EET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by MX.omu.edu.tr (Postfix) with ESMTP id 3vPlB414RJz223B
for
X-Virus-Scanned: Scrollout F1 at omu.edu.tr
Received: from MX.omu.edu.tr ([127.0.0.1])
by localhost (MX.omu.edu.tr [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id JLRq7sdSLs5h for
Fri, 17 Feb 2017 09:33:09 +0200 (EET)
Received: from zmail.omu.edu.tr (eposta.omu.edu.tr [193.140.28.32])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
Что пишут:
Dear customer,
Your parcel sent by your customer arrived at our office. Here is your shipping
Document/Invoice and copy of DHL receipt for your tracking please review your
package details HERE to confirm accordingly if your address is correct, before
we submit to our outlet officer for dispatch to your destination.
Sitemap:Accessibility:Legal Notice:Terms of Use:Privacy Notice:Using DHL Websites:Dispute Resolution:2017 © DHL International GmbH. All rights reserved.
Сообщения
Комментариев нет:
Отправить комментарий