XMPP Service Operators - 2022-01-18

Establishing a secure connection from mdosch.de to qi0.de failed. Certificate hash: 8b21dd67cd9563bac822031792a894988d24529874caf7980c3be25012ffc93d. Error with certificate 0: certificate has expired. Establishing a secure connection from mdosch.de to tchncs.de failed. Certificate hash: 4335b5344bcf1630c1cee5df4aab7f05fd2135f41611e74e4ad9e40d281ef572. Error with certificate 0: certificate has expired.

https://aria-net.org/_matrix/media/v1/download/aria-net.org/BghQyrtQngKksqlEwWqQhRYB

huhu spoof phishing using operators?

now that's a first

So not actually a spoof since the real address is shown?

Licaon_Kter: look on the right... it's a spoof

(for who doesn't read with attention which is many)

I see punjab there, that's what I meant

By spoof I mean you won't see the "real" address.

Most (fake) spoof phishing attempts just won't do that now, they just append the address they intend to spoof in the name portion of the RCPT

That forgery is usually less catched rathen than actually attempting envelope spoofing that mail servers and content filtering actually care about now

Right

anyhow the originating mta is 192.163.203.92 and origin IP 189.145.87.161

Maranda: well, don't leave us hanging, what was in the important Excel file? 🤣

moparisthebest: not sure, you can have a look if you like -> https://erizo.webarrivecom/k74d/WC011584/

> Establishing a secure connection from mdosch.de to qi0.de failed. Certificate hash: 8b21dd67cd9563bac822031792a894988d24529874caf7980c3be25012ffc93d. Error with certificate 0: certificate has expired. Their 0157 email also doesn't work: > <xmpp@qi0.de>: TLSA lookup error for mail.bensch-server.de:25