Dear Pak Syafril,

Tanggal 2 November kemarin, user kami mengeluhkan adanya incoming email
(kebanyakan dari gmail dengan nada yang negatif) yang menyebutkan ada nya
usaha penipuan email berupa undangan interview yang dikirimkan oleh akun
kami ([email protected]) dengan subject "Re: Lampiran Undangan
Interview PT Fastrata Buana (Distributor Resmi Kapal Api)"

Dibawah ini contoh body email yang dikirimkan oleh salah satu akun gmail ke
akun recruitment kami:

Anjiing kurang lihai bos...buaya mau dikadalin,,,, go to hell yah kalian

Pada tanggal Sen, 2 Nov 2020 13:13 PT. Fastrata Buana
<[email protected] menulis:


Hal yang sudah kami coba terukusi ialah:
1. user recruitment kami merasa tidak pernah mengirimkan email dengan
subject " Lampiran Undangan Interview PT Fastrata Buana (Distributor Resmi
Kapal Api)"
2. kami sudah cek tidak ada pengiriman email dari akun recruiment ke alamat
para recipent
3. setiap email yang dikirimkan ke akun recruitment seallu berakhiran " Pada
tanggal Sen, 2 Nov 2020 13:13 PT. Fastrata Buana
<[email protected] menulis:", tanpa ada isi body email dari
recruitment yang dibawa (bisa saja email yg diterima oleh recipeint adalah
email tanpa body)

Sebagai infirmasi kami mengunakan cisco ironport sebagai email gateway

Awalnya saya fikir ah itu mugkin email iseng saja, namun yang menarik
perhatian saya adalah adanya email undelivered mail reurned to sender dari
alamat Mail Delivery System <[email protected]>,
Mail Delivery System <[email protected]>, dan
Mail Delivery System <[email protected]>
Dengan mengattachkan detail email yg berisi:
Reporting-MTA: dns; soproxy1.mail.unifiedlayer.com
X-Postfix-Queue-ID: C158A175A38
X-Postfix-Sender: rfc822; [email protected]
Arrival-Date: Sun,  1 Nov 2020 22:41:23 -0700 (MST)

Final-Recipient: rfc822; [email protected]
Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.0.0
Remote-MTA: dns; mta6.am0.yahoodns.net
Diagnostic-Code: smtp; 554 delivery error: dd Not a valid recipient -
    atlas203.free.mail.gq1.yahoo.com

dan mengetachkan email header sbb:
Return-Path: <[email protected]>
Received: from cmgw14.unifiedlayer.com (unknown [66.147.244.17])
        by soproxy1.mail.unifiedlayer.com (Postfix) with ESMTP id
C158A175A38
        for <[email protected]>; Sun,  1 Nov 2020 22:41:23
-0700 (MST)
Received: from bh-71.webhostbox.net ([162.222.225.153])
        by cmsmtp with ESMTP
        id ZSaok3oa7wNNlZSapkKCFb; Sun, 01 Nov 2020 22:41:23 -0700
X-Authority-Reason: ss=1
X-Authority-Analysis: v=2.3 cv=GOYm7NFK c=1 sm=1 tr=0
 a=eO15P5x6jIc7vv9pe4Dp0w==:117 a=dLZJa+xiwSxG16/P+YVxDGlgEgI=:19
 a=nNwsprhYR40A:10:nop_rcvd_month_year
 a=rNmwfhr7DhYA:10:endurance_base64_authed_username_1
a=mNTxRblWv1eaFlpSle4A:9
 a=n3BslyFRqc0A:10:nop_pdf
 a=rls1ZAiwvL0A:10:nop_attachment_filename_extension_2
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
        d=fastratabuana.co.id; s=default;
h=Content-Type:Message-ID:Subject:To:From:
        
Date:MIME-Version:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
        
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-C
c
        
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe
:
        List-Subscribe:List-Post:List-Owner:List-Archive;
        bh=cOHhH75hqEldpV6LlAWtxA6VFPkCdCP597GQfpgztvQ=;
b=yOM33HKQc4Mypc6zz/9ZSTUyId
        
hfPYbsdk91/b82ahnbsyVQazvWsacBYp3/aUKSNoNiW3Q6H3RO76CgJay3oGuCZVnbXPNjUh7Lgv
o
        
s6u9aqYPRSUFIhQV+Lj/2Swu80MKG7VA1wbdLdG29qT004SBs+TstDWhhSDATz8Ohve0tF2U1zlV
N
        
tl4DDDAi0SMEia+GqjIBUL9hItGjtdKnQgZRAcHJO+2jAR/r6sk8uFHCMuK/nmw5VsKqtWubYUHf
r
        
a1ZpXks8FqXqAA37MZRgKGGwE41CGJYiruSqPUzJGUVGrWuYgwMlUFD4thAm5nWv+whn90jdQjp7
U
        VtD8oDpQ==;
Received: from bh-71.webhostbox.net ([162.222.225.153]:57310)
        by bh-71.webhostbox.net with esmtpa (Exim 4.93)
        (envelope-from <[email protected]>)
        id 1kZSao-000vTB-B4; Mon, 02 Nov 2020 05:41:22 +0000
MIME-Version: 1.0
Date: Mon, 02 Nov 2020 05:41:22 +0000
From: "PT. Fastrata Buana" <[email protected]>
To: undisclosed-recipients:;
Subject: Lampiran Undangan Interview PT Fastrata Buana (Distributor Resmi
 Kapal Api)
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.3.15
Content-Type: multipart/mixed;
 boundary="=_a4aecb8154c204e60b4390c887b08b1e"
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - bh-71.webhostbox.net
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - fastratabuana.co.id
X-BWhitelist: no
X-Source-IP: 162.222.225.153
X-Source-L: Yes
X-Exim-ID: 1kZSao-000vTB-B4
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: bh-71.webhostbox.net [162.222.225.153]:57310
X-Source-Auth: [email protected]
X-Email-Count: 67
X-Org: HG=direseller_whb_net_legacy;ORG=directi;
X-Source-Cap: cnhweHhjYXY7d2ViaG9xbDY7YmgtNzEud2ViaG9zdGJveC5uZXQ=
X-Local-Domain: yes


Mohon analisanya Pak, apakah account email recruitment kami benar mengirim
email dari mail server lain?

Terimakasih,
Asep Y



-- 
--[mdaemon-l]----------------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server di Indonesia

Netiket: https://wiki.openstack.org/wiki/MailingListEtiquette
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Berlangganan: Kirim mail ke [email protected]
Henti Langgan: Kirim mail ke [email protected]
Versi terakhir: MDaemon 20.0.3, SecurityGateway 7.0.1


Kirim email ke