Автор Тема: куриозен имейл  (Прочетена 569 пъти)

petar258

  • Участник
  • *****
  • Публикации: 326
  • Distribution: Ubuntu-mate 16.04, Windows 7
    • Профил
куриозен имейл
« -: Сеп 10, 2018, 19:51 »
Поредния фишинг имейл който лъже че е от известна банка. Интересното обаче е IP адреса от който идва(212.122.184.99) - от обхвата на министерски съвет и може би конкретно от висшия съдебен съвет(има там нещо vss.justice.bg). Хакера който е направил това явно се гаври с недъгавите бг институции и тяхната явно не особено кадърна поддръжка  ;D ;D ;D
Моя имейл е заменен с xxx

X-Apparently-To: xxx; Mon, 10 Sep 2018 04:33:54 +0000
Return-Path: <apache@vss.justice.bg>
X-YahooFilteredBulk: 212.122.184.99
Received-SPF: pass (domain of vss.justice.bg designates 212.122.184.99 as permitted sender)
X-YMailISG: wWvOKIUWLDuYIFtigh6LHX_9ocDK_WvtxciPEV0sKyMqYv4y
 PDGMfblbAutu4G6.I3gkUt7DPv1a1gnOFuRPGIzkSk5ZkHRzupDKb4sG83uU
 gpYbNW8djt5GVhWFMIVrrecPe0VpmPFXzbPALxPyRr85cYvw5KE8OYujLDgF
 sMM1bjVsRsxuWyhYoW85vsHx_10pGBAMWt1our7OSSgNGbToExIFt_LFOw40
 YQZ1QXYv49ALIpjCqQw9K0W_MsC5Z3dXmtVBjLI3PZ0nui8bcxlQ.X_lkyxy
 VvI7x4TdA1SSz8Aj0hT0symMNHFX0pWQMkoUS901ST4VpYwLKnUEMiQzkDZC
 nrEfG..c0pzQc5EdW799ThDmJl42Mj7LI_tU2KMASZhwokqNfLVnD.wDbjfF
 qr4tX6EyonoRMgxTgEsI0pyZ8VHYLDJfHGRdF4ZCL9sAH1FWiftQJDPQ.TJQ
 Te0grPyeMEZNSkVL3UQG1tRhB9WTgStoU1Ww0em59jdrrbShHbYWQnwivhiN
 27yQxDDFZpy0a6JB55D3s0fa6tjQKIIhoe3C82GYfqVvuA_KBRQN.xGGwLSK
 qYkifrZwvaj.dlws56q8HTpUikRHG2C3Ja96lOtcPQLBzzWJ3AVyr0_zKiPB
 6xYhwJKyS4jvCF.u9lQ1uD2hZC12Alg5YCncKdNr7eKew69NV4D800Q1mMzn
 wl1beeT5bYrjSfesAy28km61xo3fH3qWC7hKscJhg5EVyjmg0WcUFOiA4IA0
 2xg4W2jz6YpfHYjbdtWNnuSNp67hBA2jIFpBKa0LY0RueeYS3FnPM1omwwHr
 0vl7BzMDmC71ZJGXFO_EFzw2bM2OO9vHCq.gtUM5jC.WQLsOcouVkaVWyy0T
 _yUM3INbIIZdyphrE.5ILk4YyMDrmpXb6S.mmFe9WJtf4IqBEe1y5ihwIymo
 zNh1z8lYvgDKQQlKWdeLvCfs_nhuQfi8PGV1CIVu4KTGrPr60leh6DzMKes7
 2NSezDk1KZRSauGIE.Bl6DDMj56LPOAoTUBO4u_UkDlne22waNlg0PSYH4Kg
 SXSQcj.yaSRepVPrw_U7oceZTgOxgNQZ8NHDcXz28imKB2gsgjtGdxZkc6v_
 7Pch_jwAlb1YicD5_ekily2yGBVHr0fn1PiGFaE67VQTMHJDD9NtquZOQaI2
 mlpS8pYnAjUXBuZZPieGSvEbBD7JDeBPwhHqU6gd5FF8R0YxawFJ
X-Originating-IP: [212.122.184.99]
Authentication-Results: mta4334.mail.gq1.yahoo.com  from=UniCreditBulbank.bg; domainkeys=neutral (no sig);  from=UniCreditBulbank.bg; dkim=neutral (no sig)
Received: from 127.0.0.1  (EHLO vss.justice.bg) (212.122.184.99)
  by mta4334.mail.gq1.yahoo.com with SMTPS; Mon, 10 Sep 2018 04:33:52 +0000
Received: from localhost (unknown [127.0.0.1])
   by vss.justice.bg (Postfix) with ESMTP id F16F6205A88
   for <xxx>; Sat,  8 Sep 2018 05:46:29 +0000 (UTC)
X-Virus-Scanned: amavisd-new at vss.justice.bg
Received: from vss.justice.bg ([127.0.0.1])
   by localhost (http://www.vss.justice.bg [127.0.0.1]) (amavisd-new, port 10024)
   with ESMTP id XYujSNcsG-6q for <xxx>;
   Sat,  8 Sep 2018 08:46:28 +0300 (EEST)
Received: by vss.justice.bg (Postfix, from userid 48)
   id 6FF042060F9; Sat,  8 Sep 2018 08:26:57 +0300 (EEST)
Date: Sat, 8 Sep 2018 08:26:57 +0300
To: xxx
From: UniCredit Bulbank <Online.Support@UniCreditBulbank.bg>
Subject: YOUR ACCOUNT HAS BEEN BLOCKED
Message-ID: <fc253e874d25aa14c5dce388ff00eaf6@www.vss.justice.bg>
X-Priority: 1
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="us-ascii"
Content-Length: 3099

<table style=3D"border: 0px; border-spacing: 0px; border-collapse: collapse=
; color: #000000; font-family: Tahoma, sans-serif; background-color: #fffff=
f; table-layout: fixed; width: 600px;">
<tbody>
<tr>
<td class=3D"" style=3D"padding-right: 32px; padding-left: 32px; vertical-a=
lign: top; word-break: break-word; word-wrap: break-word;">
<p>&nbsp;</p>
<p><em style=3D"color: #000000;"><strong><span style=3D"line-height: 24px;"=
><img src=3D"https://www.unicreditbulbank.bg/media/filer_public/ea/cb/eacb8=
d77-82e3-48bd-94cd-64341a95f6e5/unicredit-bulbank-logo-big.png" width=3D"30=
0" height=3D"35" /></span></strong></em></p>
<p><em style=3D"color: #000000;"><strong><span style=3D"line-height: 24px;"=
><br /><br /></span></strong></em><span style=3D"font-size: 13px; font-fami=
ly: Arial, Verdena;"><span style=3D"font-size: 13px; font-family: Arial, Ve=
rdena;"><span style=3D"vertical-align: inherit;"><span style=3D"vertical-al=
ign: inherit;">We noticed that some of the information in your account appe=
ars to be inaccurate or unverified.<br /></span><span style=3D"vertical-ali=
gn: inherit;">You need to check your information to keep using your service=
 <br />smoothly, please check your account information by clicking on the l=
ink below.</span></span></span></span></p>
<p>&nbsp;</p>
<p style=3D"background-color: #DF0101; border: none; color: white; padding:=
 15px 32px; text-align: center; text-decoration: none; display: inline-bloc=
k; font-size: 16px; margin: 4px 2px; cursor: pointer;"><a style=3D"text-dec=
oration: none; color: currentcolor;" href=3D"http://roster.com.pe/content/b=
r/redir.php" target=3D"_blank" rel=3D"noopener"><strong>Click here to verif=
y your account </strong></a></p>
<p><span style=3D"font-size: 13px; font-family: Arial, Verdena;"><br /><spa=
n style=3D"vertical-align: inherit;"><span style=3D"vertical-align: inherit=
;">We take all the steps necessary to automatically validate </span></span>=
<br /><span style=3D"vertical-align: inherit;"><span style=3D"vertical-alig=
n: inherit;">our users, </span></span><br /><span style=3D"vertical-align: =
inherit;"><span style=3D"vertical-align: inherit;">unfortunately in this ca=
se we were unable to verify your details. </span></span><br /><span style=
=3D"vertical-align: inherit;"><span style=3D"vertical-align: inherit;">The =
process will take only a few minutes </span></span><br /><span style=3D"ver=
tical-align: inherit;"><span style=3D"vertical-align: inherit;">and allow u=
s to maintain our high security profile. </span></span><br /><br /><br /><s=
pan style=3D"vertical-align: inherit;"><span style=3D"vertical-align: inher=
it;">Unicr&#1077;d&#1110;t BuIb&#1072;nk Supporting Team <br /></span></spa=
n></span><span style=3D"vertical-align: inherit;"><span style=3D"font-size:=
 10px; font-family: Arial, Verdena;"><em><span style=3D"vertical-align: inh=
erit;"><br />Copyright 1999-2018 All Rights Reserved</span></em></span></sp=
an><span style=3D"font-size: 10px; font-family: Arial, Verdena;"> <br /></s=
pan></p>
</td>
</tr>
</tbody>
</table>
<p>&nbsp;</p>
<p>&nbsp;</p>

Активен