sâmbătă, 2 mai 2020

Avertisment de securitate

Avertisment de securitate
In acest moment au loc o serie de tentative de phishing dintr-un domeniu al carui nume se traduce: binepentrutineD  tara fiind .RU. Cel putin asa se numeste, in engleza, site-ul la care sunteti trimisi daca apasati butonul.
Cam asa arata un astfel de e-mail:

From MAIL ADMIN on 29.04.2020 <ora>
Hello <adresa dvs> ,

There will be Deactivation of the   e-mail  <adresa dvs>


Your mail account will be closed forever if you do not cancel this.

Regards,
Mail admin.


Bineinteles in loc de <adresa dvs> si adresamea  veti gasi propria adresa.

VERIFICARE:

1)Puneti mouse-ul deasupra butonului, FARA SA APASATI si observati adresa afisata.
Daca intr-adevar vi se pare ca e "bine pentru tine" sa dai click ! Nuuu, in nici un caz  dati click !

2) daca puneti mouse-ul in dreptul MAIL ADMIN va indica o adresa dinafara domeniului ub.ro.
Are forma: AdminT AT mail.com.

3) De asemnea: Reply to indica inafara domeniului ub.ro.


Pentru cunoscatori prezint si headerele mesajelor:

Return-Path: <bounces+5425565-3cd2-adresamea=ub.ro@sendgrid.net>
Received: from smtp-04.ub.ro ([unix socket])
    by smtp-04.ub.ro (Cyrus v2.3.16) with LMTPA;
    Wed, 29 Apr 2020 12:38:00 +0300
X-Sieve: CMU Sieve 2.3
Received: from o3.2e.shared.sendgrid.net (o3.2e.shared.sendgrid.net [50.31.60.24])
    by smtp-04.ub.ro (8.15.2/8.15.2) with ESMTP id 03T9bwoO052868
    for <adresamea@ub.ro>; Wed, 29 Apr 2020 12:38:00 +0300 (EEST)
    (envelope-from bounces+5425565-3cd2-adresamea=ub.ro@sendgrid.net)
DKIM-Filter: OpenDKIM Filter v2.10.3 smtp-04.ub.ro 03T9bwoO052868
Authentication-Results: smtp-04.ub.ro;
    dkim=pass (1024-bit key; unprotected) header.d=sendgrid.net header.i=@sendgrid.net header.b=l/7wKwcB
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.net;
    h=reply-to:from:to:subject:mime-version:content-type:content-transfer-encoding;
    s=smtpapi; bh=/uNan4AbdEmmNQJC0QYJw7uVezyhp3VRbtj9sBlGcL8=; b=l/
    7wKwcBFCrjU3Z54/PWnb5z0+JAbEc4Egzxt4wlxNAvbAuAaAwoCVXx3+UdUNfB08
    MubCdserZQkSHl3nD0+u8/gQcVUN6M0Hff8ooEOuTTpG4rrl8Haw0Uuv99/UJXhf
    3Jq4rM169F3ETdcRTOCjlzUH3p+SUWAj2jxxWxdFQ=
Received: by filter0717p1iad2.sendgrid.net with SMTP id filter0717p1iad2-13431-5EA94AD9-D
    2020-04-29 09:37:29.613668303 +0000 UTC m=+1162311.224787588
Received: from mail.com (unknown)
    by ismtpd0002p1sjc2.sendgrid.net (SG) with ESMTP id LlXk53WIQwal6pbQAzhUng
    for <adresamea@ub.ro>; Wed, 29 Apr 2020 09:37:29.479 +0000 (UTC)
Reply-To: aparanecsh@mail.com
From: MAIL ADMIN <Admint@mail.com>
To: adresamea@ub.ro
Subject: CANCEL DEACTIVATION REQUEST FOR adresamea@ub.ro
Date: Wed, 29 Apr 2020 09:37:29 +0000 (UTC)
Message-ID: <20200429023721.7683B2F60EA9B445@mail.com>
MIME-Version: 1.0
Content-Type: text/html;
    charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-SG-EID: Tt3l9wvsWgFdvQizyiqdOG5u/bRUIzK1VkiTyspE8/hjXwFTpu8kdp5BFWA7tH7UG/cKTdAb5v1aEY
    fCqyzugDvEY+oW+tpdUr3blxbdbE7FZLov5KavcBpzq9ifhJFHPBI68PMcCvLd8fR+yFEh3hOhWjEo
    jvsG5W8Qx5WWVrtLXvC4I6wXyKKpK6bsXexYGAtM2651YgjP5uEpct3Yvw==
X-Greylist: inspected by milter-greylist-4.6.2 (smtp-04.ub.ro [193.231.34.4]); Wed, 29 Apr 2020 12:38:00 +0300 (EEST) for IP:'50.31.60.24' DOMAIN:'o3.2e.shared.sendgrid.net' HELO:'o3.2e.shared.sendgrid.net' FROM:'ub.ro@sendgrid.net' RCPT:''
X-Greylist: Sender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (smtp-04.ub.ro [193.231.34.4]); Wed, 29 Apr 2020 12:38:00 +0300 (EEST) 


Niciun comentariu:

Trimiteți un comentariu