Cybersecurity By Matrix Företag

! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! 

Beware of fake e-mails with the invoice number for payment from this e-mail address:

info@nemcinasemily.eu 

! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! 

Original Message

Return-Path: <uid1140672@web.websupport.eu>

Delivered-To: (victim's email address)

Received: from mproxy201.prod.i.riva.co ([10.10.83.124])

by prod-use1-mbackend1027.ops.titan.email with LMTP

id 6BOeAfRTyWXZTAAA6G8cDw:P1

(envelope-from <uid1140672@web.websupport.eu>)

for <(victim's email address)>; Sun, 11 Feb 2024 23:10:44 +0000

Received: from mx.flockmail.com ([10.10.83.124])

by mproxy201.prod.i.riva.co with LMTP

id 6BOeAfRTyWXZTAAA6G8cDw

(envelope-from <uid1140672@web.websupport.eu>)

for <(victim's email address)>; Sun, 11 Feb 2024 23:10:44 +0000

Received: from mx.flockmail.com (localhost [127.0.0.1])

by mx.flockmail.com (Postfix) with ESMTP id EDC5212000A

for <(victim's email address)>; Sun, 11 Feb 2024 23:10:43 +0000 (UTC)

Received-SPF: pass (sender SPF authorized) identity=mailfrom; client-ip=37.9.169.36; helo=mail-proxyout-2.websupport.eu; envelope-from=uid1140672@web.websupport.eu;

Authentication-Results: mx.flockmail.com; dmarc=none (p=none dis=none) header.from=nemcinasemily.eu

Authentication-Results: mx.flockmail.com;

dkim=pass (2048-bit key) header.d=nemcinasemily.eu header.i=@nemcinasemily.eu header.b="bXQm6iH2"

Received: from mail-proxyout-2.websupport.eu (mail-proxyout-2.websupport.eu [37.9.169.36])

by mx.flockmail.com (Postfix) with ESMTPS id 14C89120008

for <(victim's email address)>; Sun, 11 Feb 2024 23:10:43 +0000 (UTC)

Received: from mail-proxyweb-7.websupport.eu (unknown [10.10.56.7])

by mail-proxyout-2.websupport.eu (Postfix) with ESMTP id 4TY3Gm2MfBz1xcy

for <(victim's email address)>; Mon, 12 Feb 2024 00:10:40 +0100 (CET)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nemcinasemily.eu;

s=mail; t=1707693040;

bh=VhtSLZR1l8wU9aRhzheYRw9RKtP6nt1k7gUG6THVMak=;

h=Date:To:From:Subject;

b=bXQm6iH2qCbv8uoLmOyR/v7yNX5+IuYNc5oybgTejPOJwp+iaOBwNwZxcshn7QCDw

eQVhKYE9Qhlz1cnMwFysoxLmfL1bV+V1dpRmhktF+GeIIzi75R51a3nW4kyz5TDotT

RXp6GRO9jZt/dztBKk6Ha5MPfueugM+VbHvasWZy4836qjTzKMyA7MW75rb9zL+ecu

eJkNhAlRfZfKy2uJZ6kNpALdPKoSUwImVodDA4cXk5CCkkI81P3k0O0frUVE+bludg

G5W01R1YH5S3TGb3n0mFj71YPgJBx+GoeVIs0oRCM5sKRqemEcSpKTmp10XEOGWNr3

fRddNqG+quXSg==

Received: from r1-u41-web-php74 (ing.r1.websupport.sk [37.9.175.131])

(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))

(No client certificate requested)

(Authenticated sender: r1@ru)

by ru-mail.websupport.sk (Postfix) with ESMTPSA id 4TY3Gk1rKPz7lqg

for <(victim's email address)>; Mon, 12 Feb 2024 00:10:38 +0100 (CET)

Received: (nullmailer pid 45720 invoked by uid 1140672);

Sun, 11 Feb 2024 23:02:50 -0000

Date: Mon, 12 Feb 2024 00:02:49 +0100

To: (victim's email address)

From: =?UTF-8?B?VGXigKzigKzigKzigK3igKzigKzigKzigK1sZeKArOKArOKArOKAreKArA==?= =?UTF-8?B?4oCs4oCs4oCtMg==?= <info@nemcinasemily.eu>

Subject: =?UTF-8?Q?Faktura_SE70190036_:_F=C3=85_TILLB=E2=80=AD=E2=80=ACAKA_D?=

 =?UTF-8?Q?=E2=80=AD=E2=80=ACIN_=C3=85TERB=E2=80=AD=E2=80=ACETALNING.....?=

Message-ID: <333a1a3be877795463ef04b3dd5ba05f@nemcinasemily.eu>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1c23d2005fd7209eb478b800b6c95c7bf"

Content-Transfer-Encoding: 8bit

X-Out-Rspamd-Server: mail-antispam-6

X-Out-Rspamd-Queue-Id: 4TY3Gk1rKPz7lqg

X-Out-Spamd-Result: default: False [2.30 / 1000.00];

ARC_NA(0.00)[];

GENERIC_REPUTATION(0.00)[-0.49708588090455];

FROM_HAS_DN(0.00)[];

TO_MATCH_ENVRCPT_ALL(0.00)[];

HTML_SHORT_LINK_IMG_1(0.00)[];

MIME_GOOD(-0.10)[multipart/alternative,text/plain];

TO_DN_NONE(0.00)[];

HAS_WP_URI(0.00)[];

RCPT_COUNT_ONE(0.00)[1];

MANY_INVISIBLE_PARTS(0.40)[5];

FORGED_SENDER(0.50)[info@nemcinasemily.eu,uid1140672@web.websupport.sk];

RCVD_COUNT_ZERO(0.00)[0];

MIME_TRACE(0.00)[0:+,1:+,2:~];

R_MIXED_CHARSET(0.00)[subject];

ASN(0.00)[asn:51013, ipnet:37.9.175.0/24, country:SK];

FROM_NEQ_ENVFROM(1.50)[info@nemcinasemily.eu,uid1140672@web.websupport.sk];

MID_RHS_MATCH_FROM(0.00)[]

Authentication-Results: ru-mail.websupport.sk;

auth=pass smtp.auth=r1@ru smtp.mailfrom=uid1140672@web.websupport.sk

X-CMAE-Score: 0

X-CMAE-Analysis: v=2.4 cv=c7OtQw9l c=1 sm=1 tr=0 ts=65c953f3

a=px3wvj+GYsZ5F2bxZBNyzw==:117 a=Dyo+arAJtf9ouNIT0+et4g==:17

a=k7vzHIieQBIA:10 a=5KLPUuaC_9wA:10 a=M51BFTxLslgA:10 a=A4EqBspgoKYA:10

a=r77TgQKjGQsHNAKrUKIA:9 a=RfoZlRsHFsEo7p1darMA:9 a=3ZKOabzyN94A:10

a=QEXdDO2ut3YA:10 a=BhIUUlOTAAAA:8 a=1XWaLZrsAAAA:8 a=i8GOkd0uAAAA:8

a=vyPBE8BbAAAA:8 a=poXzjmLTNpwww-cs:21 a=CSnJDcRrocEA:10

a=4HA5fc6BQK7SWB0cNzBs:22 a=Utl_bhL-P9EZ76mBUuyZ:22

a=PxVc2pFPlMNd4Re2pfqK:22

X-THID: 2022999262702592:0:bcfa64f806

X-Virus-Scanned: ClamAV using ClamSMTP

This is a multi-part message in MIME format.

--1c23d2005fd7209eb478b800b6c95c7bf

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

Hei!,Efter de slutliga beräkningarna av din räkning förra månaden. Vi har fastställt att du är berättigad till en återbetalning återbetalning på 1698.00 kr. Vänligen uppdatera din kontoinformation genom att klicka på > Gå till ditt kundområde så att vi kan behandla din återbetalning så snabbt som möjligt : > få tillgång till ditt kundområdeVarmt välkommen!Tele2-Team ;   

--1c23d2005fd7209eb478b800b6c95c7bf

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

<div style=3D"text-align: center;"><table align=3D"center" border=3D"0" cel=

lpadding=3D"0" cellspacing=3D"0" class=3D"v1emailContainer" style=3D"backgr=

ound-color: white; border-collapse: collapse; border-spacing: 0px; color: #=

17181a; font-family: Altform-Regular, Arial, Helvetica, sans-serif; font-si=

ze: 14px; max-width: 600px; text-size-adjust: 100%; width: 100%;"><tbody st=

yle=3D"box-sizing: border-box; text-size-adjust: 100%;"><tr style=3D"box-si=

zing: border-box; text-size-adjust: 100%;"><td style=3D"box-sizing: border-=

box; margin: 0px; padding: 0px; text-size-adjust: 100%;"><table align=3D"ce=

nter" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" id=3D"v1headerContai=

ner" style=3D"background: rgb(4, 26, 49); border-collapse: collapse; border=

-spacing: 0px; color: #17181a; margin: 0px auto; text-size-adjust: 100%; wi=

dth: 100%;"><tbody style=3D"box-sizing: border-box; text-size-adjust: 100%;=

"><tr style=3D"box-sizing: border-box; text-size-adjust: 100%;"><td style=

=3D"box-sizing: border-box; margin: 0px; padding: 17px 0px 0px; text-align:=

 center; text-size-adjust: 100%; width: 600px;"></td></tr><tr style=3D"box-=

sizing: border-box; text-size-adjust: 100%;"><th align=3D"center" style=3D"=

box-sizing: border-box; font-weight: inherit; margin: 0px; padding: 0px; po=

sition: relative; text-align: -webkit-match-parent; text-size-adjust: 100%;=

" valign=3D"middle"><table align=3D"center" border=3D"0" cellpadding=3D"0" =

cellspacing=3D"0" style=3D"border-collapse: collapse; border-spacing: 0px; =

color: #17181a; margin: 0px; padding: 0px; table-layout: auto; text-align: =

center; text-size-adjust: 100%; width: 600px;"><tbody style=3D"box-sizing: =

border-box; text-size-adjust: 100%;"><tr style=3D"box-sizing: border-box; t=

ext-size-adjust: 100%;"><td align=3D"center" class=3D"v1inner v1logo" style=

=3D"box-sizing: border-box; margin: 0px; padding: 18px 0px 32px; text-size-=

adjust: 100%;"><a href=3D"https://t3.e.tele2.se/r/?id=3Dh1583eca2,488725a,1=

00c39" rel=3D"noreferrer" style=3D"background-color: transparent; box-sizin=

g: border-box; display: inline-block; text-decoration-line: none; text-size=

-adjust: 100%;" target=3D"_blank"><img alt=3D"Tele2" src=3D"https://res3.e.=

tele2.se/res/tele_mkt_prod3/tele2-logo-white-132px-more-space.png" style=3D=

"border: 0px; box-sizing: border-box; color: white; display: block; font-fa=

mily: Arial, sans-serif, Tele2Sans; font-size: 16px; height: auto; text-siz=

e-adjust: 100%; vertical-align: middle;" width=3D"90" /></a></td></tr></tbo=

dy></table></th></tr><tr style=3D"box-sizing: border-box; text-size-adjust:=

 100%;"><th align=3D"center" style=3D"border-collapse: collapse; box-sizing=

: border-box; font-weight: 400; margin: 0px; padding: 0px 0px 12px; positio=

n: relative; text-align: center; text-size-adjust: 100%; vertical-align: bo=

ttom;" valign=3D"bottom"><br /></th></tr></tbody></table></td></tr><tr styl=

e=3D"box-sizing: border-box; text-size-adjust: 100%;"><td class=3D"v1oneCol=

Top v1paddingSide24 v1textUnderImage" style=3D"background: linear-gradient(=

90deg, rgb(4, 26, 49), rgb(4, 26, 49)); box-sizing: border-box; margin: 0px=

; padding: 0px; text-size-adjust: 100%; width: 600px;"><table align=3D"cent=

er" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"border-collap=

se: collapse; border-spacing: 0px; color: #17181a; margin: 0px auto; text-s=

ize-adjust: 100%; width: 100%;"><tbody style=3D"box-sizing: border-box; tex=

t-size-adjust: 100%;"><tr style=3D"box-sizing: border-box; text-size-adjust=

: 100%;"><td class=3D"v1mainText" style=3D"box-sizing: border-box; color: w=

hite; font-family: Arial, sans-serif, Tele2Sans; font-size: 14px; line-heig=

ht: 24px; margin: 0px; padding: 0px; text-size-adjust: 100%;"><p style=3D"b=

ox-sizing: border-box; margin: 0px; text-size-adjust: 100%;">Hei!,<br style=

=3D"box-sizing: border-box; text-size-adjust: 100%;" /><br style=3D"box-siz=

ing: border-box; text-size-adjust: 100%;" />Efter de slutliga ber=C3=A4knin=

garna av din r=C3=A4kning f=C3=B6rra m=C3=A5naden. Vi har fastst=C3=A4llt a=

tt du =C3=A4r ber=C3=A4ttigad till en =C3=A5terbetalning =C3=A5terbetalning=

 p=C3=A5 1698.00 kr.=C2=A0<br style=3D"box-sizing: border-box; text-size-ad=

just: 100%;" /><br style=3D"box-sizing: border-box; text-size-adjust: 100%;=

" />V=C3=A4nligen uppdatera din kontoinformation genom att klicka p=C3=

=A5 > G=C3=A5 till ditt kundomr=C3=A5de s=C3=A5 att vi kan behandla din =

=C3=A5terbetalning s=C3=A5 snabbt som m=C3=B6jligt :=C2=A0</p><p style=3D"b=

ox-sizing: border-box; margin: 0px; text-size-adjust: 100%;"><br /></p><p s=

tyle=3D"box-sizing: border-box; margin: 0px; text-size-adjust: 100%;"><br s=

tyle=3D"box-sizing: border-box; text-size-adjust: 100%;" /><a data-saferedi=

recturl=3D"https://www.google.com/url?q=3Dhttp://links.dabadoc.com/ls/click=

?upn%3Dv16o8aYLxUMMw90H6-2FCAK8H7BJlXIEUOaTklC3HBfXyVgSCXY7qDPpoDRCQmLBHoLL=

ssqDGVRhAvBv4GpSveER0lwhO7wu46k4lCYFWMb2d-2FonlVZ66dk7CtdZS3-2FDzpW172JT17c=

EwNaQCqGYx-2FL6RHUltWjK7-2BAciGgxPYKFkfW2g7AOZteWxeujp9ojCaMlJ__Ol-2FZucCjU=

suZq1BrBoY2wzKyJJc5Bt0yFA-2BegvSfIIWod-2BvKubCD1hrWNMtX-2FeifZKOizdFfqxf5fV=

p2N-2FLwLL0zz1HgKM1Hx1NgfCskRK8rmyGucQPxEXyXWmWYo2FcIi4ps9I4fu-2BEEDzvgvkba=

gYc-2FyrXu8pSJyywFmNh20O-2BeGi4dwjRFUjLDi2tIZg1nh-2BQF1iqKvBRraQclTo1ORu9XP=

gUxP-2F5Hkece8AaXE-2BsveTOxXW3lQu8wDAoIgJIxHAOo3E0B54J26q2YGIQeQ-3D-3D&sour=

ce=3Dgmail&ust=3D1707669119389000&usg=3DAOvVaw1gaPEk4oVJovGAzQfH93RD" href=

=3D"https://www.officinedeldolce.it/wp-admin/see/tele" style=3D"background-=

color: rgb(11 105 135); border-color: rgb(11 105 135); border-radius: 4px; =

border-style: solid; border-width: 8px 18px; box-sizing: border-box; color:=

 white; display: inline-block; font-family: -apple-system, BlinkMacSystemFo=

nt, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", =

"Segoe UI Emoji", "Segoe UI Symbol"; font-size: medium; overflow: hidden; t=

ext-align: -webkit-center; text-decoration-line: none;" target=3D"_blank">>=

 f=C3=A5 tillg=C3=A5ng till ditt kundomr=C3=A5de</a><br style=3D"color: bla=

ck; font-family: "Helvetica Neue", Helvetica, Helvetica, Arial, sans-serif;=

 font-size: medium; text-align: -webkit-center;" /><br /></p><p style=3D"bo=

x-sizing: border-box; margin: 0px; text-size-adjust: 100%;">Varmt v=C3=

=A4lkommen!<br style=3D"box-sizing: border-box; text-size-adjust: 100%;" />=

Tele2-Team ;</p></td></tr><tr style=3D"box-sizing: border-box; text-size-ad=

just: 100%;"><td style=3D"box-sizing: border-box; font-size: 15px; height: =

15px; line-height: 15px; margin: 0px; padding: 0px; text-size-adjust: 100%;=

">=C2=A0</td></tr></tbody></table></td></tr><tr style=3D"box-sizing: border=

-box; text-size-adjust: 100%;"><td align=3D"center" class=3D"v1module-conta=

iner v1wide-image" style=3D"border-collapse: collapse; box-sizing: border-b=

ox; margin: 0px; padding: 0px; text-size-adjust: 100%;"><table align=3D"cen=

ter" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" class=3D"v1module" st=

yle=3D"border-collapse: collapse; border-spacing: 0px; color: #17181a; text=

-size-adjust: 100%; width: 100%;"><tbody style=3D"box-sizing: border-box; t=

ext-size-adjust: 100%;"><tr style=3D"box-sizing: border-box; text-size-adju=

st: 100%;"><td align=3D"center" class=3D"v1module-cell v1image" style=3D"ba=

ckground-color: #001425; border-collapse: collapse; box-sizing: border-box;=

 margin: 0px; padding: 0px; text-size-adjust: 100%;" valign=3D"top"><img bo=

rder=3D"0" class=3D"v1fluid" id=3D"v1heroImage3644457163" src=3D"https://re=

s3.e.tele2.se/res/tele_mkt_prod3/T2_BB_WELCOMELETTER_HEADERIMAGE_BOTTOM_TES=

T_20230901_6.png" style=3D"border: 0px; box-sizing: border-box; display: bl=

ock; line-height: 14px; margin: 0px; outline: none; padding-bottom: 10px; t=

ext-size-adjust: 100%; vertical-align: middle; width: 600px;" width=3D"600"=

 /></td></tr></tbody></table></td></tr><tr style=3D"box-sizing: border-box;=

 text-size-adjust: 100%;"><td style=3D"box-sizing: border-box; font-size: 1=

px; height: 1px; line-height: 1px; margin: 0px; padding: 0px; text-size-adj=

ust: 100%;">=C2=A0</td></tr><tr style=3D"box-sizing: border-box; text-size-=

adjust: 100%;"><td style=3D"background: linear-gradient(90deg, rgb(0, 20, 3=

7), rgb(107, 156, 197)); box-sizing: border-box; font-size: 1px; height: 1p=

x; line-height: 1px; margin: 0px; padding: 0px; text-size-adjust: 100%;">=

=C2=A0</td></tr></tbody></table></div>

--1c23d2005fd7209eb478b800b6c95c7bf--