爱存不存的钓鱼邮件? - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
现在注册
已注册用户请  登录
mrqyoung
V2EX    域名

爱存不存的钓鱼邮件?

  •  
  •   mrqyoung 2015-09-26 00:10:58 +08:00 911 次点击
    这是一个创建于 3670 天前的主题,其中的信息可能已经有所发展或是发生改变。

    中心思想:请问现在是不是已经可以做到假冒别人域名的邮箱地址来发邮件了?

    1. 您的工行电子密码器需要校准,请立即登录进行校准

    注册一个歪果网站,验证码迟迟不来,于是翻了一下垃圾箱,看到了这封来自宇宙行的地址为email protected]标题为"您的工行电子密码器需要校准,请立即登录进行校准"的邮件,内容如下:
    感谢图床

    确认了一下域名 icbc.com.cn 准确无误啊,毕竟人家是果企,中文里面用个半角标点也是正常的。但是内容里面的链接http://103 。 239 。 75 。 87:9898/dzmmq/login=-=-==--------===.htm(已改为全角点号防误点)却是个 IP 地址。查了一下这个 IP ,显示是当前正在进行爱疯火热抢购的一个特别行正区的。所以巨硬把它分到垃圾件里也是有它的道理的。

    2. 揭开它神秘的面纱

    开了隐私模式,打开了这个网站:
    再次感谢图床, https 的图床

    看起来神似官网,中间图片还是轮播的。然而匆忙之余并没有标题,底部的备案号和一堆链接全是图!片!,想必程序员也是被逼太紧先上线再说。登录框右边的两大链接都是 # 的并且没有 js handle 它们。随便输入了点数字提交,显示需要拿出密码器按步骤操作,地址栏结尾是 .asp 的。

    3. 邮件内容

    x-store-info:4r51+eLowCe79NzwdU2kR3P+ctWZsO+J Authentication-Results: hotmail.com; spf=none (sender IP is 101.254.179.143) [email protected]; dkim=none header.d=icbc.com.cn; x-hmca=none [email protected] X-SID-PRA: [email protected] X-AUTH-Result: NONE X-SID-Result: NONE X-Message-Status: s1:n X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02 X-Message-Info: 11chDOWqoTk5F26YpePF8RpK6lOj3PnWxth079WqZvEowaqW20NuqZ8M5ag6TJF5A43DdCiG0d6F9FXx2CpjUGxuS+R3RbrPYlxCXFWVA2R3Czdcqoi6JpHdA+FVr/9Ap5/X3iAf2ybvsJbes0xKZ/zS4K9b8U1EIrj0cJyWmfNtcB1iIriloj2nZXaES1Ke39opekNPgZ5k+gSDAynQ1GqWhw2oufwVB3XccNi2r8gLEiX7JSJTmA== Received: from icbc.com.cn ([101.254.179.143]) by BAY004-MC5F12.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143); Wed, 23 Sep 2015 02:53:18 -0700 From: =??B?1tC5+rmkyczS+NDQ?= <webmaster@icbc.com.cn> Subject: =??B?xPq1xLmk0NC159fTw9zC68b30OjSqtCj17wsx+vBory0tcfCvL340NDQo9e8?= To: [email protected] Content-Type: text/html;charset="" Reply-To: [email protected] Date: Wed, 23 Sep 2015 17:53:17 +0800 X-Priority: 3 X-Mailer: FoxMail 3.11 Release [cn] Return-Path: [email protected] Message-ID: <BAY004-MC5F12EpTX5V00012196@BAY004-MC5F12.hotmail.com> X-OriginalArrivalTime: 23 Sep 2015 09:53:18.0626 (UTC) FILETIME=[ACA08020:01D0F5E5] <table width="80%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr><td align="left"> ×e?′μ?1¤DDó??§£ o<br><br> ?úo?£??ú°ìàíμ?1¤DDμ?×ó?ü???÷ê±?ó????′??úò??¨??ò?,?ú?éí¨1yD £×?1¤ò?μ?×ó?ü???÷1|?üD £?yμ?×ó?ü???÷ê±?ó£?è±£?y3 £ê1ó?,??×?±?o?μ?×ó?ü???÷oó<a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><font color="red"><b>á¢?′μ???</b></font></a>??DDD £×?;???ú′?à′ 2?±?£??′??á??a £?</td></tr> <tr><td align="right">?D1ú1¤éìò?DD</td></tr> </table><br><br><br> <table width="80%" border="0" align="center" cellpadding="0" cellspacing="0"> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_01.jpg" width="950"></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_02.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_03.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_04.jpg" width="950" /></a></td></tr> <tr><td align=&uot;center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_05.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_06.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_07.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_08.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_09.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_10.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_11.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_12.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_13.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_14.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_15.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_16.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_17.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_18.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_19.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_20.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_21.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/pic_22.jpg" width="950" /></a></td></tr> <tr><td align="center"><a target="_blank" href="http://103.239.75.87:9898/dzmmq/login=-=-==--------===.htm"><img border="0" src="http://v.icbc.com.cn/userfiles/Resources/ICBC/1???ò3??/2015/0216zhanghgjs/del.jpg" width="950"></a></td></tr> </table><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br> 
    目前尚无回复
    关于     帮助文档     自助推广系统     博客     API     FAQ     Solana     5460 人在线   最高记录 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 27ms UTC 08:33 PVG 16:33 LAX 01:33 JFK 04:33
    Do have faith in what you're doing.
    ubao snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86