>> Ini kita dapat email spoofing menggunakan domain kami
>Carikan transaksinya di smtp-in log. Berikut SMTP - IN Log nya Pak Mon 2023-08-07 11:55:26.847: ---------- Mon 2023-08-07 11:55:23.563: [00968378] Session 00968378; child 0016 Mon 2023-08-07 11:55:23.563: [00968378] Accepting SMTP connection from 198.58.114.46:58924 to 172.16.0.6:25 Mon 2023-08-07 11:55:23.563: [00968378] Location Screen says connection is from United States, North America Mon 2023-08-07 11:55:23.565: [00968378] --> 220 bb.ptbmi.com ESMTP MDaemon 23.0.1; Mon, 07 Aug 2023 11:55:23 +0700 Mon 2023-08-07 11:55:24.595: [00968378] <-- EHLO mail.iesencial.com Mon 2023-08-07 11:55:24.596: [00968378] --> 250-bb.ptbmi.com Hello mail.iesencial.com [198.58.114.46], pleased to meet you Mon 2023-08-07 11:55:24.596: [00968378] --> 250-ETRN Mon 2023-08-07 11:55:24.596: [00968378] Location Screening hiding AUTH from country United States, North America Mon 2023-08-07 11:55:24.596: [00968378] --> 250-8BITMIME Mon 2023-08-07 11:55:24.596: [00968378] --> 250-ENHANCEDSTATUSCODES Mon 2023-08-07 11:55:24.596: [00968378] --> 250-PIPELINING Mon 2023-08-07 11:55:24.596: [00968378] --> 250-CHUNKING Mon 2023-08-07 11:55:24.596: [00968378] --> 250-STARTTLS Mon 2023-08-07 11:55:24.596: [00968378] --> 250 SIZE Mon 2023-08-07 11:55:24.824: [00968378] <-- MAIL FROM:<hrd.recruitm...@ptbmi.com> SIZE=8603 Mon 2023-08-07 11:55:24.832: [00968378] Performing PTR lookup (46.114.58.198.IN-ADDR.ARPA) Mon 2023-08-07 11:55:25.232: [00968378] * D=46.114.58.198.IN-ADDR.ARPA TTL=(60) PTR=[mail.iesencial.com] Mon 2023-08-07 11:55:25.569: [00968378] * D=mail.iesencial.com TTL=(60) A=[198.58.114.46] Mon 2023-08-07 11:55:25.569: [00968378] ---- End PTR results Mon 2023-08-07 11:55:25.571: [00968378] Performing IP lookup (mail.iesencial.com) Mon 2023-08-07 11:55:25.902: [00968378] * D=mail.iesencial.com TTL=(60) A=[198.58.114.46] Mon 2023-08-07 11:55:25.902: [00968378] ---- End IP lookup results Mon 2023-08-07 11:55:25.905: [00968378] Performing IP lookup (ptbmi.com) Mon 2023-08-07 11:55:25.931: [00968378] * D=ptbmi.com TTL=(53) A=[202.148.6.47] Mon 2023-08-07 11:55:25.960: [00968378] * P=005 S=000 D=ptbmi.com TTL=(50) MX=[bb.ptbmi.com] Mon 2023-08-07 11:55:25.991: [00968378] * D=bb.ptbmi.com TTL=(26) A=[202.148.25.131] Mon 2023-08-07 11:55:25.991: [00968378] ---- End IP lookup results Mon 2023-08-07 11:55:25.992: [00968378] Performing SPF lookup (mail.iesencial.com / 198.58.114.46) Mon 2023-08-07 11:55:28.041: [00968378] * Result: none; no SPF record in DNS Mon 2023-08-07 11:55:28.041: [00968378] ---- End SPF results Mon 2023-08-07 11:55:28.041: [00968378] --> 250 2.1.0 Sender OK Mon 2023-08-07 11:55:28.041: [00968378] <-- RCPT TO:<hrd.recruitm...@ptbmi.com> Mon 2023-08-07 11:55:28.042: [00968378] Performing DNS-BL lookup (198.58.114.46 - connecting IP) Mon 2023-08-07 11:55:28.350: [00968378] * b.barracudacentral.org - passed Mon 2023-08-07 11:55:28.458: [00968378] * zen.spamhaus.org - passed Mon 2023-08-07 11:55:28.458: [00968378] ---- End DNS-BL results Mon 2023-08-07 11:55:28.460: [00968378] --> 250 2.1.5 Recipient OK Mon 2023-08-07 11:55:28.462: [00968378] <-- DATA Mon 2023-08-07 11:55:28.464: [00968378] --> 354 Enter mail, end with <CRLF>.<CRLF> Mon 2023-08-07 11:55:28.693: [00968378] Message size: 8603 bytes Mon 2023-08-07 11:55:28.694: [00968378] Performing DKIM verification Mon 2023-08-07 11:55:28.694: [00968378] * File: d:\mdaemon\queues\temp\22\md5001000000239.tmp Mon 2023-08-07 11:55:28.694: [00968378] * Message-ID: <20230806214657.ee2f01d012b9a...@ptbmi.com> Mon 2023-08-07 11:55:28.694: [00968378] * Result: neutral Mon 2023-08-07 11:55:28.694: [00968378] ---- End DKIM results Mon 2023-08-07 11:55:28.695: [00968378] Passing message through AntiVirus (Size: 8603)... Mon 2023-08-07 11:55:28.714: [00968378] * Message is clean (no viruses found) scanned by (IKARUS: clean (0.00303s)) Mon 2023-08-07 11:55:28.714: [00968378] ---- End AntiVirus results Mon 2023-08-07 11:55:28.716: [00968378] Message creation successful: d:\mdaemon\queues\inbound\46\md5001000027224.msg Mon 2023-08-07 11:55:28.716: [00968378] --> 250 2.6.0 Ok, message saved <Message-ID: <20230806214657.ee2f01d012b9a...@ptbmi.com>> Mon 2023-08-07 11:55:28.716: [00968378] <-- QUIT Mon 2023-08-07 11:55:28.716: [00968378] --> 221 2.0.0 See ya in cyberspace Mon 2023-08-07 11:55:28.717: [00968378] SMTP session successful (Bytes in/out: 8729/459) Mon 2023-08-07 11:55:28.718: ---------- Terima Kasih Rievo
