Dear Pak Syafril,

Tanggal 2 November kemarin, user kami mengeluhkan adanya incoming email
(kebanyakan dari gmail dengan nada yang negatif) yang menyebutkan ada nya
usaha penipuan email berupa undangan interview yang dikirimkan oleh akun
kami (recruitm...@fastratabuana.co.id) dengan subject "Re: Lampiran Undangan
Interview PT Fastrata Buana (Distributor Resmi Kapal Api)"

Dibawah ini contoh body email yang dikirimkan oleh salah satu akun gmail ke
akun recruitment kami:

Anjiing kurang lihai bos...buaya mau dikadalin,,,, go to hell yah kalian

Pada tanggal Sen, 2 Nov 2020 13:13 PT. Fastrata Buana
<recruitm...@fastratabuana.co.id menulis:


Hal yang sudah kami coba terukusi ialah:
1. user recruitment kami merasa tidak pernah mengirimkan email dengan
subject " Lampiran Undangan Interview PT Fastrata Buana (Distributor Resmi
Kapal Api)"
2. kami sudah cek tidak ada pengiriman email dari akun recruiment ke alamat
para recipent
3. setiap email yang dikirimkan ke akun recruitment seallu berakhiran " Pada
tanggal Sen, 2 Nov 2020 13:13 PT. Fastrata Buana
<recruitm...@fastratabuana.co.id menulis:", tanpa ada isi body email dari
recruitment yang dibawa (bisa saja email yg diterima oleh recipeint adalah
email tanpa body)

Sebagai infirmasi kami mengunakan cisco ironport sebagai email gateway

Awalnya saya fikir ah itu mugkin email iseng saja, namun yang menarik
perhatian saya adalah adanya email undelivered mail reurned to sender dari
alamat Mail Delivery System <mailer-dae...@soproxy10.mail.unifiedlayer.com>,
Mail Delivery System <mailer-dae...@soproxy11.mail.unifiedlayer.com>, dan
Mail Delivery System <mailer-dae...@soproxy1.mail.unifiedlayer.com>
Dengan mengattachkan detail email yg berisi:
Reporting-MTA: dns; soproxy1.mail.unifiedlayer.com
X-Postfix-Queue-ID: C158A175A38
X-Postfix-Sender: rfc822; recruitm...@fastratabuana.co.id
Arrival-Date: Sun,  1 Nov 2020 22:41:23 -0700 (MST)

Final-Recipient: rfc822; nursyarifah.alfauz...@yahoo.com
Original-Recipient: rfc822;nursyarifah.alfauz...@yahoo.com
Action: failed
Status: 5.0.0
Remote-MTA: dns; mta6.am0.yahoodns.net
Diagnostic-Code: smtp; 554 delivery error: dd Not a valid recipient -
    atlas203.free.mail.gq1.yahoo.com

dan mengetachkan email header sbb:
Return-Path: <recruitm...@fastratabuana.co.id>
Received: from cmgw14.unifiedlayer.com (unknown [66.147.244.17])
        by soproxy1.mail.unifiedlayer.com (Postfix) with ESMTP id
C158A175A38
        for <nursyarifah.alfauz...@yahoo.com>; Sun,  1 Nov 2020 22:41:23
-0700 (MST)
Received: from bh-71.webhostbox.net ([162.222.225.153])
        by cmsmtp with ESMTP
        id ZSaok3oa7wNNlZSapkKCFb; Sun, 01 Nov 2020 22:41:23 -0700
X-Authority-Reason: ss=1
X-Authority-Analysis: v=2.3 cv=GOYm7NFK c=1 sm=1 tr=0
 a=eO15P5x6jIc7vv9pe4Dp0w==:117 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19
 a=nNwsprhYR40A:10:nop_rcvd_month_year
 a=rNmwfhr7DhYA:10:endurance_base64_authed_username_1
a=mNTxRblWv1eaFlpSle4A:9
 a=n3BslyFRqc0A:10:nop_pdf
 a=rls1ZAiwvL0A:10:nop_attachment_filename_extension_2
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
        d=fastratabuana.co.id; s=default;
h=Content-Type:Message-ID:Subject:To:From:
        
Date:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
        
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-C
c
        
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe
:
        List-Subscribe:List-Post:List-Owner:List-Archive;
        bh=cOHhH75hqEldpV6LlAWtxA6VFPkCdCP597GQfpgztvQ=;
b=yOM33HKQc4Mypc6zz/9ZSTUyId
        
hfPYbsdk91/b82ahnbsyVQazvWsacBYp3/aUKSNoNiW3Q6H3RO76CgJay3oGuCZVnbXPNjUh7Lgv
o
        
s6u9aqYPRSUFIhQV+Lj/2Swu80MKG7VA1wbdLdG29qT004SBs+TstDWhhSDATz8Ohve0tF2U1zlV
N
        
tl4DDDAi0SMEia+GqjIBUL9hItGjtdKnQgZRAcHJO+2jAR/r6sk8uFHCMuK/nmw5VsKqtWubYUHf
r
        
a1ZpXks8FqXqAA37MZRgKGGwE41CGJYiruSqPUzJGUVGrWuYgwMlUFD4thAm5nWv+whn90jdQjp7
U
        VtD8oDpQ==;
Received: from bh-71.webhostbox.net ([162.222.225.153]:57310)
        by bh-71.webhostbox.net with esmtpa (Exim 4.93)
        (envelope-from <recruitm...@fastratabuana.co.id>)
        id 1kZSao-000vTB-B4; Mon, 02 Nov 2020 05:41:22 +0000
MIME-Version: 1.0
Date: Mon, 02 Nov 2020 05:41:22 +0000
From: "PT. Fastrata Buana" <recruitm...@fastratabuana.co.id>
To: undisclosed-recipients:;
Subject: Lampiran Undangan Interview PT Fastrata Buana (Distributor Resmi
 Kapal Api)
Message-ID: <7c0ebc7e4cb230151a7599fc79f5b...@fastratabuana.co.id>
X-Sender: recruitm...@fastratabuana.co.id
User-Agent: Roundcube Webmail/1.3.15
Content-Type: multipart/mixed;
 boundary="=_a4aecb8154c204e60b4390c887b08b1e"
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - bh-71.webhostbox.net
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fastratabuana.co.id
X-BWhitelist: no
X-Source-IP: 162.222.225.153
X-Source-L: Yes
X-Exim-ID: 1kZSao-000vTB-B4
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: bh-71.webhostbox.net [162.222.225.153]:57310
X-Source-Auth: recruitm...@fastratabuana.co.id
X-Email-Count: 67
X-Org: HG=direseller_whb_net_legacy;ORG=directi;
X-Source-Cap: cnhweHhjYXY7d2ViaG9xbDY7YmgtNzEud2ViaG9zdGJveC5uZXQ=
X-Local-Domain: yes


Mohon analisanya Pak, apakah account email recruitment kami benar mengirim
email dari mail server lain?

Terimakasih,
Asep Y



-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke mdaemon-l-subscr...@dutaint.com
Henti Langgan: Kirim mail ke mdaemon-l-unsubscr...@dutaint.com
Versi terakhir: MDaemon 20.0.3, SecurityGateway 7.0.1


Kirim email ke