Logo
Bezbedan Balkan / Bezbednost državnih resursa / Phishing / Scam / Spam kampanje /

Pošta i kurirske službe - SMS i E-mail prevare


Threaded Mode
Pošta i kurirske službe - SMS i E-mail prevare
VincaSec
Posting Freak
*****
Posts: 945
Threads: 551
Joined: Oct 2023
Reputation: 172
#71

05-17-2024, 06:05 PM
   
There is no patch for stupidity - Kevin Mitnick
Website Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#72

05-18-2024, 04:56 PM
istekli prevarantski domeni:

Code:
Domain Name: POSTA-SRBIJA.COM Registry Domain ID: 2777941149_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.tucows.com Registrar URL: http://tucowsdomains.com Updated Date: 2024-05-07T07:35:50 Creation Date: 2023-05-03T21:57:30 Registrar Registration Expiration Date: 2024-05-03T21:57:30

Code:
Domain Name: POSTA-SERBIA.COM Registry Domain ID: 2777981935_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.tucows.com Registrar URL: http://tucowsdomains.com Updated Date: 2024-05-08T02:38:04 Creation Date: 2023-05-04T05:52:54 Registrar Registration Expiration Date: 2024-05-04T05:52:54
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#73

05-18-2024, 05:11 PM
pronađeni sumnjivi domeni:

Code:
postars.icu postarsr.cc postarsr.vip rsposta-rspoy.top posta-serbia.dnibbou3.workers.dev
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#74

05-29-2024, 10:44 AM
ovde ima nešto ali ne znam šta jer redirektuje na zvanični sajt pošte, možda nemam potpun link ili traži određeni referal koji takođe nemam:

posta.techpost7 .space/cash70553561

ovi su mi sumnjivi ali nema ništa na njima:

Code:
beogradposta.blog beogradposta.shop beogradposta.sbs
(This post was last modified: 05-29-2024, 10:53 AM by milos_rs.)
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#75

06-30-2024, 01:18 AM
sumnjiv domen

Code:
postars.city

ima izdate sertifikate https://crt.sh/?q=postars.city datuma 2024-06-17 ali zapravo domen nije registrovan ?!
(This post was last modified: 06-30-2024, 01:18 AM by milos_rs.)
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#76

07-18-2024, 11:30 PM
vratili se

   

bit .ly/3Lt7OaD?nLI=NheUkph785?FMt=MiWE6zqdAw

redirektuje na posvhes .life/sr/

   

stsandardna priča
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#77

07-19-2024, 12:14 AM
izgleda da se danas masovno spamuje, ima puno primera

   

   

druga slika ima drugačiji link, bit .ly/4cOkYv8?ayy=Fb6bM1cL54?MVn=OhxB1ylo2Li vodi na drugačiji domen, posfada .life/sr

   
(This post was last modified: 07-19-2024, 12:19 AM by milos_rs.)
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#78

07-22-2024, 02:38 PM
još jedan...

   

bit .ly/46chfF7?KLa=RrMLOLmT9C?Ges=jMu2t496lw

vodi na pookestconline .top/srb/

Code:
pookestconline.top has address 38.54.6.50


   
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#79

07-22-2024, 02:53 PM
sad kad pogledam, ova IP adresa 38.54.6.50 hostuje gomilu phishing sajtova

servicio-post.top
csl-points.click
cslpoint.buzz
postainvest.shop
dhl-post-mx.sbs
858889.top
csl88.life
servicio-post.life
6ht7p590.xyz
dhlmxs.sbs
355678.top
slposl.top
slposd.top
588678.top
verfirton.com
Find
Reply
milos_rs
Administrator
*******
Posts: 2,126
Threads: 884
Joined: Sep 2022
Reputation: 375
#80

07-28-2024, 02:55 PM
I u hrvatskoj skemuju:

   

Code:
prostor-za-dostavu.one has address 20.117.224.127

Kad se ode browserom redirektuje na https://www.mediapart.fr/

kad odem sa mobilnim UA dobijem:

   

verovatno jer samo radi sa hrvatskih IP adresa
Find
Reply
« Next Oldest | Next Newest »


Forum Jump:


Users browsing this thread: 2 Guest(s)