Phising de la CAF

Posted by on May 25, 2013 in Sécurité

Phising de la CAF

Juste pour rire un peu sous cette pluie……

un petit exemple de phising qui viens d’arriver dans ma mailbox

phising caf

Je ne vais même pas parler de l’orthographe….

Si je regarde un peu le parcours du mail je tombe la dessus

Received: from fep17.mx.upcmail.net (fep17.mx.upcmail.net [62.179.121.37])

Petit whois sur l’ip:

 

whois 62.179.121.37
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the “-B” flag.

% Information related to ‘62.179.121.0 – 62.179.121.255’

% Abuse contact for ‘62.179.121.0 – 62.179.121.255’ is ‘abuse@upc.at’

inetnum: 62.179.121.0 – 62.179.121.255
netname: UPC-MAILSYSTEM-EUROPE
descr: UPC Mailsystem for Europe
descr: Statically Allocated
country: AT
admin-c: LGI-RIPE
tech-c: LGI-RIPE
status: ASSIGNED PA
remarks: INFRA-AW
remarks: Contact abuse@chello.at concerning criminal
remarks: activities like spam, hacks, portscans
mnt-by: MNT-LGI
source: RIPE # Filtered

role: Hostmaster Liberty Global
address: Liberty Global Europe
address: Boeing Avenue 53
address: 1119 PE Schiphol Rijk
address: Netherlands
phone: +31 20 7788200
fax-no: +31 20 7788203
admin-c: SB666-RIPE
admin-c: SVS4-RIPE
tech-c: SB666-RIPE
tech-c: SVS4-RIPE
nic-hdl: LGI-RIPE
mnt-by: MNT-LGI
source: RIPE # Filtered

% Information related to ‘62.179.96.0/19AS6830’

route: 62.179.96.0/19
descr: UPC Broadband
origin: AS6830
mnt-by: AS6830-MNT
source: RIPE # Filtered

 

 

Je ne pense pas que la CAF utilise des serveurs en Hollande …… quoi que avec le président ……… 🙂

Bref attention la CAF ne vous donnera pas d’argent…..

Post a Reply

Your email address will not be published. Required fields are marked *