Tässä Blogissa aikaisemmin mm. https://vaarallinenweb.blogspot.com/2018/08/google-palkito-japanista-tai-venajalta.html
-----------------------------e-mail------------------------------------
Dear Google User,
We congratulate you for being selected as a winner on our ongoing
promotion, you were selected due to your active use of our online
services, find and read the attached letter for more information about
your winning.
Larry Page,
CEO / CO-Founder
GOOGLE INC
----------------------------------------------------------------------
Verkossa tiedetään kertoa, että nämä ovat pääasiassa nigerialaista alkuperää.
Kirjeen lähdekoodista tunnistaa helposti spämmin, koska siinä on kertautunutta tietoa spämmisuodinten hakkeroimiseksi. Tässä alla esimerkki headeri eli kirjeen aloitusrivit lähdekoodissa. kaksoissuluissa olevat kommentit ovat minun:
Received: via tmail-2007f.2015-sau for fp6592.200; Tue, 2 Oct 2018 21:18:10 +0300 (EEST) Received: from fe22.mail.saunalahti.fi (fe22.mail.saunalahti.fi [62.142.5.27]) by be408.mail.saunalahti.fi (Postfix) with ESMTP id 85740601A6 for <fp6592@be408.mail.saunalahti.fi>; Tue, 2 Oct 2018 21:18:10 +0300 (EEST) X-Client-Addr: 62.75.161.166 ((saksalainen palvelin jolta viesti on saapunut)) X-Client-Addr: 62.75.161.166 X-Client-Addr: 62.75.161.166 Received: from vs161166.vserver.de (static-ip-62-75-161-166. inaddr.ip-pool.com [62.75.161.166]) ((saksalainen palvelin)) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by fe22.mail.saunalahti.fi (Postfix) with ESMTPS id 8C46520006; Tue, 2 Oct 2018 21:18:05 +0300 (EEST) ((tästä alkaa suodattimen hakkeriointi)) X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network X-No-Relay: not in my network ((spämmi-suodatin pettää)) Received: from User (unknown [142.0.38.234]) ((tuntematon USA:sta kotoisin oleva kone)) (Authenticated sender: info@sander-online.com) ((kaikki omistajatiedot on piiloitettu)) by vs161166.vserver.de (Postfix) with ESMTPA id 475A5183CDA; ((sakasalinen palvelin)) Tue, 2 Oct 2018 18:26:50 +0200 (CEST) Reply-To: <jefferydean1960@gmail.com> ((tämä osoite on ilmaisosoite, joten sen todellisen omistajan selvittäminen on hankalaa)) From: "GOOGLE INC"<info@sander-online.com> ((tämä kirje ei tule Googlelta)) Subject: Official Google Notification ((ei siis ole Googlen postia)) Date: Tue, 2 Oct 2018 09:26:55 -0700
On mahdollista, että saksalainen verkkokauppa sander-online.de on rekisteröinnyt rinnakkaisdomanin sander-online.com jota se ei käytä ja tämä domain ja postiosoite: info@sander-online.com on hakkeroitu spämmikäyttöön? Näitä GOOGLE spämmejä tulee aivan samanlaisia muistakin lähetysosoitteista.
Viimeisin Google-palkinto sapui Japanista ja reply osoite olisi vienyt Bahamalle. Bahaman osoite oli väärennetty @googleprom-team.com. Kuten arvata saattaa, domainnimen rekisteröijän tiedot oli piiloitettu.Siinä oli PDF-liite joka myös pystyy kantamaan viruksen.
