Bezbedan Balkan › Bezbednost državnih resursa › Phishing / Scam / Spam kampanje v
Pošta i kurirske službe - SMS i E-mail prevare

Threaded Mode
Pošta i kurirske službe - SMS i E-mail prevare
VincaSec Away
Senior Member
****
Posts: 720
Threads: 405
Joined: Oct 2023
Reputation: 162
#71
05-17-2024, 03:05 PM
   
There is no patch for stupidity - Kevin Mitnick
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#72
05-18-2024, 01:56 PM
istekli prevarantski domeni:

Code:
Domain Name: POSTA-SRBIJA.COM
Registry Domain ID: 2777941149_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2024-05-07T07:35:50
Creation Date: 2023-05-03T21:57:30
Registrar Registration Expiration Date: 2024-05-03T21:57:30

Code:
Domain Name: POSTA-SERBIA.COM
Registry Domain ID: 2777981935_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.tucows.com
Registrar URL: http://tucowsdomains.com
Updated Date: 2024-05-08T02:38:04
Creation Date: 2023-05-04T05:52:54
Registrar Registration Expiration Date: 2024-05-04T05:52:54
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#73
05-18-2024, 02:11 PM
pronađeni sumnjivi domeni:

Code:
postars.icu
postarsr.cc
postarsr.vip
rsposta-rspoy.top
posta-serbia.dnibbou3.workers.dev
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#74
05-29-2024, 07:44 AM (This post was last modified: 05-29-2024, 07:53 AM by milos_rs.)
ovde ima nešto ali ne znam šta jer redirektuje na zvanični sajt pošte, možda nemam potpun link ili traži određeni referal koji takođe nemam:

posta.techpost7 .space/cash70553561

ovi su mi sumnjivi ali nema ništa na njima:

Code:
beogradposta.blog
beogradposta.shop
beogradposta.sbs
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#75
06-29-2024, 10:18 PM (This post was last modified: 06-29-2024, 10:18 PM by milos_rs.)
sumnjiv domen

Code:
postars.city

ima izdate sertifikate https://crt.sh/?q=postars.city datuma 2024-06-17 ali zapravo domen nije registrovan ?!
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#76
07-18-2024, 08:30 PM
vratili se

   

bit .ly/3Lt7OaD?nLI=NheUkph785?FMt=MiWE6zqdAw

redirektuje na posvhes .life/sr/

   

stsandardna priča
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#77
07-18-2024, 09:14 PM (This post was last modified: 07-18-2024, 09:19 PM by milos_rs.)
izgleda da se danas masovno spamuje, ima puno primera

   

   

druga slika ima drugačiji link, bit .ly/4cOkYv8?ayy=Fb6bM1cL54?MVn=OhxB1ylo2Li vodi na drugačiji domen, posfada .life/sr

   
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#78
07-22-2024, 11:38 AM
još jedan...

   

bit .ly/46chfF7?KLa=RrMLOLmT9C?Ges=jMu2t496lw

vodi na pookestconline .top/srb/

Code:
pookestconline.top has address 38.54.6.50


   
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#79
07-22-2024, 11:53 AM
sad kad pogledam, ova IP adresa 38.54.6.50 hostuje gomilu phishing sajtova

servicio-post.top
csl-points.click
cslpoint.buzz
postainvest.shop
dhl-post-mx.sbs
858889.top
csl88.life
servicio-post.life
6ht7p590.xyz
dhlmxs.sbs
355678.top
slposl.top
slposd.top
588678.top
verfirton.com
Find
Reply
milos_rs Offline
Administrator
*******
Posts: 942
Threads: 353
Joined: Sep 2022
Reputation: 306
#80
07-28-2024, 11:55 AM
I u hrvatskoj skemuju:

   

Code:
prostor-za-dostavu.one has address 20.117.224.127

Kad se ode browserom redirektuje na https://www.mediapart.fr/

kad odem sa mobilnim UA dobijem:

   

verovatno jer samo radi sa hrvatskih IP adresa
Find
Reply


Forum Jump:


Users browsing this thread: 8 Guest(s)