Hacklenme değil spoof mail yani o mailden geliyormuş gibi mail atilabiliyor. Fake mail.
Hocam şimdi cpanel mailinden inceledim. Olabilir hocam aşağıdaki durumda farklı mail adreslerinden yönlendirilmiş gibi duruyor.
Return-Path: <bilgilendirme@ileti.isbank.com.tr>
Delivered-To: benimmailadresim
Received: from asral.veridyen.com
by asral.veridyen.com with LMTP
id YDdEC5KCXmINEAAAIiR0gw
(envelope-from <bilgilendirme@ileti.isbank.com.tr>)
for <benimmailadresim>; Tue, 19 Apr 2022 12:36:18 +0300
Return-path: <bilgilendirme@ileti.isbank.com.tr>
Envelope-to: benimmailadresim
Delivery-date: Tue, 19 Apr 2022 12:36:18 +0300
Received: from mail.moodisthastanesi.com ([92.45.117.61]:59032)
by asral.veridyen.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from <bilgilendirme@ileti.isbank.com.tr>)
id 1ngkHQ-0000t9-G1
for benimmailadresim;
Tue, 19 Apr 2022 12:36:18 +0300
Received: from localhost (localhost [127.0.0.1])
by mail.moodisthastanesi.com (Postfix) with ESMTP id 4D849869515B
for <benimmailadresim>; Tue, 19 Apr 2022 12:25:20 +0300 (+03)
Received: from mail.moodisthastanesi.com ([127.0.0.1])
by localhost (mail.moodisthastanesi.com [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id 0U77LaITaoQ4 for <benimmailadresim>;
Tue, 19 Apr 2022 12:25:20 +0300 (+03)
Received: from [45.137.22.104] (unknown [45.137.22.104])
by mail.moodisthastanesi.com (Postfix) with ESMTPSA id 22A038695154
for <benimmailadresim>; Tue, 19 Apr 2022 12:25:20 +0300 (+03)
Content-Type: multipart/mixed; boundary="===============1321863625=="
MIME-Version: 1.0
Subject: =?utf-8?b?xLDFnyBCYW5rYXPEsS0xOC4wNC4yMDIyIDAwOjAwLTE5LjA0LjIwMjIgMDg6?=
=?utf-8?q?14_2202-0238965_Numaral=C4=B1_Vadesiz_Hesap_-_TL_=C3=96zeti?=
To: benimmailadresim
From: "Turkiye Is Bankasi A.S" <bilgilendirme@ileti.isbank.com.tr>
Date: Tue, 19 Apr 2022 11:25:18 +0200
Reply-To: "Turkiye Is Bankasi A.S"<halkbank.e-ekstre@tacritekstil.com>
Message-Id: <20220419092520.22A038695154@mail.moodisthastanesi.com>
X-Spam-Status: No, score=4.0
X-Spam-Score: 40
X-Spam-Bar: ++++
X-Ham-Report: Spam detection software, running on the system "asral.veridyen.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Say1n MFterimiz, 18.04.2022 00:00-19.04.2022 08:14 aras1nda
2202-0238965 (Vadesiz Hesap - TL) numaral1 hesab1n1za ait hesap zeti
ekte yer almaktad1r. Sayg1lar1m1zla, Trkiye 0F Bankas1
Content analysis details: (4.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=bilgilendirme%40ileti.isbank.com.tr;ip=92.45.117.61;r=asral.veridyen.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
X-Spam-Flag: NO