API tools faq
paste
Advertisement
DarthInvader

Fake destination link in Outlook

DarthInvader
Jul 30th, 2018
813
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.36 KB | None | 0 0
raw download clone embed print report
  1.  
  2. An interesting email message which was able to hide the destination of the link and make it show a fake link. I am not sure how it did this, I do notice the target statement with the fake destination link.
  3.  
  4. <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
  5. o\:* {behavior:url(#default#VML);}
  6. w\:* {behavior:url(#default#VML);}
  7. .shape {behavior:url(#default#VML);}
  8. </style><![endif]--><style><!--
  9. /* Font Definitions */
  10. @font-face
  11. {font-family:"Cambria Math";
  12. panose-1:2 4 5 3 5 4 6 3 2 4;}
  13. @font-face
  14. {font-family:Calibri;
  15. panose-1:2 15 5 2 2 2 4 3 2 4;}
  16. @font-face
  17. {font-family:Tahoma;
  18. panose-1:2 11 6 4 3 5 4 4 2 4;}
  19. /* Style Definitions */
  20. p.MsoNormal, li.MsoNormal, div.MsoNormal
  21. {margin:0in;
  22. margin-bottom:.0001pt;
  23. font-size:11.0pt;
  24. font-family:"Calibri",sans-serif;}
  25. h3
  26. {mso-style-priority:9;
  27. mso-style-link:"Heading 3 Char";
  28. mso-margin-top-alt:auto;
  29. margin-right:0in;
  30. mso-margin-bottom-alt:auto;
  31. margin-left:0in;
  32. font-size:13.5pt;
  33. font-family:"Calibri",sans-serif;
  34. font-weight:bold;}
  35. a:link, span.MsoHyperlink
  36. {mso-style-priority:99;
  37. color:#0563C1;
  38. text-decoration:underline;}
  39. a:visited, span.MsoHyperlinkFollowed
  40. {mso-style-priority:99;
  41. color:#954F72;
  42. text-decoration:underline;}
  43. p
  44. {mso-style-priority:99;
  45. mso-margin-top-alt:auto;
  46. margin-right:0in;
  47. mso-margin-bottom-alt:auto;
  48. margin-left:0in;
  49. font-size:12.0pt;
  50. font-family:"Times New Roman",serif;}
  51. span.Heading3Char
  52. {mso-style-name:"Heading 3 Char";
  53. mso-style-priority:9;
  54. mso-style-link:"Heading 3";
  55. font-family:"Calibri",sans-serif;
  56. font-weight:bold;}
  57. p.msonormal0, li.msonormal0, div.msonormal0
  58. {mso-style-name:msonormal;
  59. mso-style-priority:99;
  60. mso-margin-top-alt:auto;
  61. margin-right:0in;
  62. mso-margin-bottom-alt:auto;
  63. margin-left:0in;
  64. font-size:11.0pt;
  65. font-family:"Calibri",sans-serif;}
  66. p.xdata, li.xdata, div.xdata
  67. {mso-style-name:x_data;
  68. mso-style-priority:99;
  69. mso-margin-top-alt:auto;
  70. margin-right:0in;
  71. mso-margin-bottom-alt:auto;
  72. margin-left:0in;
  73. font-size:11.0pt;
  74. font-family:"Calibri",sans-serif;}
  75. span.EmailStyle21
  76. {mso-style-type:personal;
  77. font-family:"Calibri",sans-serif;
  78. color:windowtext;}
  79. span.EmailStyle22
  80. {mso-style-type:personal;
  81. font-family:"Calibri",sans-serif;
  82. color:#1F497D;}
  83. span.EmailStyle24
  84. {mso-style-type:personal-reply;
  85. font-family:"Calibri",sans-serif;
  86. color:#1F497D;}
  87. span.msoIns
  88. {mso-style-type:export-only;
  89. mso-style-name:"";
  90. text-decoration:underline;
  91. color:teal;}
  92. .MsoChpDefault
  93. {mso-style-type:export-only;
  94. font-size:10.0pt;}
  95. @page WordSection1
  96. {size:8.5in 11.0in;
  97. margin:1.0in 1.0in 1.0in 1.0in;}
  98. div.WordSection1
  99. {page:WordSection1;}
  100. --></style><!--[if gte mso 9]><xml>
  101. <o:shapedefaults v:ext="edit" spidmax="1027" />
  102. </xml><![endif]--><!--[if gte mso 9]><xml>
  103. <o:shapelayout v:ext="edit">
  104. <o:idmap v:ext="edit" data="1" />
  105. </o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p>&nbsp;</o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma",sans-serif'> Hoogsteen, Shannon [<a href="mailto:[email protected]">mailto:[email protected]</a>] <br><b>Sent:</b> Monday, July 30, 2018 12:25 PM<br><b>Subject:</b> SAP Concur Expense Reimbursement <o:p></o:p></span></p></div></div><p class=MsoNormal><o:p>&nbsp;</o:p></p><div><p class=MsoNormal style='line-height:12.0pt;background:#FFC1C5'><strong><span style='font-size:10.0pt;font-family:"Calibri",sans-serif;color:#8F191C'>EXTERNAL SENDER: Verify links, attachments and sender before taking action</span></strong><span style='font-size:10.0pt;color:black'><o:p></o:p></span></p></div><p>&nbsp;<o:p></o:p></p><div><table class=MsoNormalTable border=1 cellspacing=0 cellpadding=0 summary=outerWrapper width=0 style='width:6.25in;background:white;border:solid #B5D7E6 1.0pt'><tr><td style='border:none;padding:0in 0in 0in 0in'><p class=MsoNormal><a href="https://pkgconnect.sharepoint.com/travel/" target="_blank"><span style='color:blue;text-decoration:none'><img border=0 width=123 height=40 style='width:1.2812in;height:.4166in' id="Picture_x0020_1" src="cid:[email protected]" alt="http://www.concursolutions.com/Images/sap-concur-logo.png"></span></a><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
  106. <v:stroke joinstyle="miter" />
  107. <v:formulas>
  108. <v:f eqn="if lineDrawn pixelLineWidth 0" />
  109. <v:f eqn="sum @0 1 0" />
  110. <v:f eqn="sum 0 0 @1" />
  111. <v:f eqn="prod @2 1 2" />
  112. <v:f eqn="prod @3 21600 pixelWidth" />
  113. <v:f eqn="prod @3 21600 pixelHeight" />
  114. <v:f eqn="sum @0 0 1" />
  115. <v:f eqn="prod @6 1 2" />
  116. <v:f eqn="prod @7 21600 pixelWidth" />
  117. <v:f eqn="sum @8 21600 0" />
  118. <v:f eqn="prod @7 21600 pixelHeight" />
  119. <v:f eqn="sum @10 21600 0" />
  120. </v:formulas>
  121. <v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
  122. <o:lock v:ext="edit" aspectratio="t" />
  123. </v:shapetype><v:shape id="Picture_x0020_2" o:spid="_x0000_s1026" type="#_x0000_t75" alt="SAP Concur" href="https://pkgconnect.sharepoint.com/travel/" target="&quot;_blank&quot;" style='position:absolute;margin-left:28.65pt;margin-top:0;width:60.75pt;height:30pt;z-index:251658240;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:0;mso-wrap-distance-top:0;mso-wrap-distance-right:0;mso-wrap-distance-bottom:0;mso-position-horizontal:right;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page' o:allowoverlap="f" o:button="t">
  124. <v:imagedata src="cid:[email protected]" o:title="SAP Concur" />
  125. <w:wrap type="square"/>
  126. </v:shape><![endif]--><![if !vml]><a href="https://pkgconnect.sharepoint.com/travel/" target="&quot;_blank&quot;"><img border=0 width=81 height=40 style='width:.8437in;height:.4166in' src="cid:[email protected]" align=right alt="SAP Concur" v:shapes="Picture_x0020_2"></a><![endif]><o:p></o:p></p></td></tr><tr><td style='border:none;padding:0in 22.5pt 0in 22.5pt'></td></tr><tr><td style='border:none;padding:0in 22.5pt 0in 22.5pt'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 summary=configurable width="100%" style='width:100.0%' id="x_emailbody"><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><span class=msoIns><ins>&nbsp;</ins></span><o:p></o:p></p></td></tr><tr><td style='padding:0in 0in 0in 0in'><p class=MsoNormal><span class=msoIns><ins>SAP Concur Expense Reimbursement <o:p></o:p></ins></span></p><div><div><div class=MsoNormal><span class=msoIns><ins><hr size=2 width="50%" align=left></ins></span></div></div></div><p class=MsoNormal><span class=msoIns><ins><br></ins></span>Your Concur Expense has been approved.<o:p></o:p></p><p class=MsoNormal>Please Provide ACH Information for remittance<span class=msoIns><ins><o:p></o:p></ins></span></p></td></tr><tr><td style='padding:7.5pt 22.5pt 11.25pt 22.5pt' id="x_links"><table class=MsoNormalTable border=0 cellpadding=0 width="100%" style='width:100.0%'><tr><td width="60%" valign=top style='width:60.0%;padding:.75pt .75pt .75pt .75pt'><h3 style='mso-margin-top-alt:2.25pt;margin-right:0in;margin-bottom:6.75pt;margin-left:0in;line-height:14.4pt'><span class=msoIns><ins>Link To Expense<o:p></o:p></ins></span></h3><p class=MsoNormal><span class=msoIns><ins><a href="https://linkageinc.us18.list-manage.com/track/click?u=e8873bfa2009165e2418a2ba3&amp;id=7ed98f7177&amp;e=13e992d5ba" target="_blank">https://sap.sharepoint.com/travel/</a><o:p></o:p></ins></span></p></td></tr></table></td></tr></table></td></tr></table><p class=MsoNormal><o:p>&nbsp;</o:p></p></div></div></body></html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!