FRAUDE - Email
Assunto da mensagem: ???
Data de inclusão: 23/02/18
Usuário recebe email informando que sua cota de email foi excedida e precisa de atualização, email disponibiliza link falso pra inserção de dados do usuário.
Conteúdo da mensagem
############################################################################### # !!! ATENCAO !!! ATENCAO !!! ATENCAO !!! ATENCAO !!! ATENCAO !!! ATENCAO !!! # # # # O TEXTO ABAIXO FOI TRANSCRITO A PARTIR DE UMA FRAUDE CADASTRADA EM NOSSOS # # SISTEMAS ATRAVES DA COLETA DE DADOS NA INTERNET E/OU CONTRIBUICAO DE # # PARCEIROS E/OU USUARIOS. # # # # EM CASO DE DUVIDAS ENTRE EM CONTATO ATRAVES DO EMAIL: cais@cais.rnp.br # # # # OBRIGADO. # # # # CENTRO DE ATENDIMENTO A INCIDENTES DE SEGURANCA (CAIS) # # REDE NACIONAL DE ENSINO E PESQUISA (RNP) # ############################################################################### Return-Path: see1036@petropolis.rj.gov.br Received: from mail.pop-ba.rnp.br (LHLO mail.pop-ba.rnp.br) (200.128.0.27) by mail.pop-ba.rnp.br with LMTP; Fri, 23 Feb 2018 13:32:53 -0300 (BRT) Received: from localhost (localhost [IPv6:::1]) by mail.pop-ba.rnp.br (Postfix) with ESMTP id E5689AC0DA0 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:52 -0300 (-03) X-Virus-Scanned: amavisd-new at pop-ba.rnp.br Received: from mail.pop-ba.rnp.br ([IPv6:::1]) by localhost (mail.pop-ba.rnp.br [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id SDlOvP8wa7D5 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:52 -0300 (-03) Received-SPF: permerror (petropolis.rj.gov.br ... petropolis.rj.gov.br: Maximum DNS-interactive terms limit (10) exceeded) receiver=mail.pop-ba.rnp.br; identity=mailfrom; envelope-from="see1036@petropolis.rj.gov.br"; helo=mx0.rnp.br; client-ip=200.130.35.135 Received: from mx0.rnp.br (mx0.rnp.br [200.130.35.135]) by mail.pop-ba.rnp.br (Postfix) with ESMTP id AFAF9AC0C44 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:52 -0300 (-03) Received: from mail-mtaout-proxy-01.rnp.br (mail-mtaout-proxy-01.rnp.br [200.130.35.126]) by mx0.rnp.br (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id w1NGWqIk012364 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:52 -0300 Received: from localhost (localhost [127.0.0.1]) by mail-mtaout-proxy-01.rnp.br (Postfix) with ESMTP id F347B100BD7 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:51 -0300 (BRT) Received: from mail-mtaout-proxy-01.rnp.br ([127.0.0.1]) by localhost (mail-mtaout-proxy-01.rnp.br [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id XcZEzdnKSSKt for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:51 -0300 (BRT) Received: from mail-mtain-02.rnp.br (mail-mtain-02.rnp.br [200.130.35.125]) by mail-mtaout-proxy-01.rnp.br (Postfix) with ESMTPS id E2439100AF7 for <fraudes@pop-ba.rnp.br>; Fri, 23 Feb 2018 13:32:51 -0300 (BRT) Received: from mx0.rnp.br (gti-idc-fw-35.rnp.br [200.130.35.1]) by mail-mtain-02.rnp.br (Postfix) with ESMTP id 67AC7CE190 for <artefatos@cais.rnp.br>; Fri, 23 Feb 2018 13:32:51 -0300 (BRT) Received: from zmta.cegep-ste-foy.qc.ca (zmta.cegep-ste-foy.qc.ca [199.202.105.166]) by mx0.rnp.br (8.14.4/8.14.4/Debian-8+deb8u2) with ESMTP id w1NGWoT9012361 for <artefatos@cais.rnp.br>; Fri, 23 Feb 2018 13:32:51 -0300 Received: from localhost (localhost [127.0.0.1]) by zmta.cegep-ste-foy.qc.ca (Postfix) with ESMTP id 75A132884EE3; Fri, 23 Feb 2018 11:13:28 -0500 (EST) Received: from zmta.cegep-ste-foy.qc.ca ([127.0.0.1]) by localhost (zmta.cegep-ste-foy.qc.ca [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id TMk7O3FHFT_r; Fri, 23 Feb 2018 11:13:27 -0500 (EST) Received: from localhost (localhost [127.0.0.1]) by zmta.cegep-ste-foy.qc.ca (Postfix) with ESMTP id EB09E2884EB7; Fri, 23 Feb 2018 11:13:11 -0500 (EST) X-Virus-Scanned: amavisd-new at cegep-ste-foy.qc.ca Received: from zmta.cegep-ste-foy.qc.ca ([127.0.0.1]) by localhost (zmta.cegep-ste-foy.qc.ca [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id FK3hwPRwfyuD; Fri, 23 Feb 2018 11:13:11 -0500 (EST) Received: from [10.129.57.110] (unknown [89.238.191.149]) by zmta.cegep-ste-foy.qc.ca (Postfix) with ESMTPSA id E19EA2884EC9; Fri, 23 Feb 2018 11:12:52 -0500 (EST) Content-Type: multipart/alternative; boundary="===============1843526567==" MIME-Version: 1.0 Subject: ??? To: Recipients <see1036@petropolis.rj.gov.br> From: "Administrador"<see1036@petropolis.rj.gov.br> Date: Fri, 23 Feb 2018 21:45:16 +0530 Message-Id: <20180223161252.E19EA2884EC9@zmta.cegep-ste-foy.qc.ca> X-CanIt-Geo: =?UTF-8?Q?ip=3D200.130.35.126;_country=3DBR;_region=3DFederal_District;_city=3DBras=C3=ADlia;_latitude=3D-15.7833;_longitude=3D-47.9167;_http://maps.google.com/maps=3Fq=3D-15.7833,-47.9167&z=3D6?= X-CanItPRO-Stream: base:zimbra (inherits from base:default) X-Canit-Stats-ID: Bayes signature not available X-Scanned-By: CanIt (www . roaringpenguin . com) on 200.130.35.135 X-Scanned-By: CanIt (www . roaringpenguin . com) on 200.130.35.135 You will not see this in a MIME-aware mail reader. --===============1843526567== Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Description: Mail message body