Demeshin 's Personal Weblog

超怪しいメール

件名:新しいアプリからの不正なログイン。
差出人:"Amazon.co.jp"
本文:
[Amazon]




重要なお知らせ
ケースID: 503-7581460-9349437




こんにちは
Amazon.co.jpを利用していただきありがとうございます。
今日、私は私のシステムからilegalログインを受け取りました。

※182.89.10.17場所南寧市、中国18/09/2017 12:09 PM。
※182.89.10.17場所南寧市、中国23/09/2017 10:15 PM。

お客様のアカウントを保護するため、請求先住所が同じデビットカードでお支払いを変更するように求められます。
私のシステムがあなたのアカウントを30日間中断する前に、あなたのアカウントに署名してください。



[符号]







ご注文の配送状況はAmazon Appアプリでもご確認いただけます。
返品をご希望の場合はオンライン返品受付センターでお手続きください。


またのご利用をお待ちしております。
Amazon



このEメールアドレスは配信専用です。このメッセージに返信しないようお願いいたします。


---------------------ここまで------------------

あまりに怪しさ満開で思わず笑っちゃいそうになったフィッシングメールを紹介。
差出人にしろ本文にしろ、ここまでひどいのは久しぶり。
もちろん引っかかる人はいませんよね〜〜
例によってメールヘッダーさらし。

X-Mark-Virus-Check: checked
X-Mark-Recipient: <********>
Return-Path:
Received: from mx04.cm01.cloud-mail.jp (mx04-fbp.cm01.cloud-mail.jp [10.32.68.11]) by store011-fbp.cm01.cloud-mail.jp (3.10pn) with ESMTP id v8N5MHnf025722 for <********>; Sat, 23 Sep 2017 14:22:17 +0900 (JST)
Received: from scpa306.cm01.cloud-mail.jp ([10.236.147.1]) by mx04.cm01.cloud-mail.jp (3.11g) with ESMTP id v8N5MHRE006749 for <********>; Sat, 23 Sep 2017 14:22:17 +0900 (JST)
Received: from pps.filterd (scpa306.cm01.cloud-mail.jp [127.0.0.1])
by scpa306.cm01.cloud-mail.jp (8.15.0.59/8.15.0.59) with SMTP id v8N5DCx5009481
for <********>; Sat, 23 Sep 2017 14:22:17 +0900
Received: from jpn01-os2-obe.outbound.protection.outlook.com (mail-os2jpn01hn0227.outbound.protection.outlook.com [104.47.92.227])
by scpa306.cm01.cloud-mail.jp with ESMTP id 2d57v0afbs-1
for <********>; Sat, 23 Sep 2017 14:22:17 +0900
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hk899.onmicrosoft.com;
s=selector1-jpamazun-com0e;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=Rz/f2kNSqHoGaXaRzgA2kTx5m3TdS60Dpkm3nDcU7bo=;
b=ZManIYk8aICCci6gqQjYcy/wZugyaORGV9trNejRxG/rjGbrB9c1R6qKTuh4iterVRpZ1CX74NAyLEGgavi/JtwnOczoU/QlmZ1vSR9DuxibV8pcvYBU24e8osQQGmdPl5dgK6B3NtFIyUcyrQI+AcqOQtjtJ4A8A31oGhV9HR0=
Received: from OS2PR01MB0153.jpnprd01.prod.outlook.com (10.161.77.149) by
OS2PR01MB1066.jpnprd01.prod.outlook.com (10.174.153.16) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id
15.20.77.7; Sat, 23 Sep 2017 05:22:07 +0000
Received: from OS2PR01MB0153.jpnprd01.prod.outlook.com ([10.161.77.149]) by
OS2PR01MB0153.jpnprd01.prod.outlook.com ([10.161.77.149]) with mapi id
15.20.0077.011; Sat, 23 Sep 2017 05:22:07 +0000
From: "Amazon.co.jp"
To: "service2@amazon.co.jp"
Subject: =?iso-2022-jp?B?GyRCPzckNyQkJSIlVyVqJCskaSROSVRANSRKJW0lMCUkJXMhIxsoQg==?=
Thread-Topic: =?iso-2022-jp?B?GyRCPzckNyQkJSIlVyVqJCskaSROSVRANSRKJW0lMCUkJXMhIxsoQg==?=
Thread-Index: AQHTNCvU1vnbxCQmK0OXQWDzGdJ6CQ==
Date: Sat, 23 Sep 2017 05:22:07 +0000
Message-ID:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is )
smtp.mailfrom=support90sys@jp-amazun.com;
x-originating-ip: [36.71.19.86]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;OS2PR01MB1066;6:64GQ8lOYSb2VAtITcwNui4PXbWVq7ETGUtM0nE3fvGNwqYFNr3tJE6RzbAm3Pn9NFMdGkjqJwUlsmEhCuuUizwIHd2yukCLxOQNcuHIEOIv/OlweoFtoI/ZgbaXbmNwaRzkbOz4PVynlmq5QFP12Ej4W2Hf40PuaVYeo/SopDsBWk86dgUgqFB6F0ml2DqsArdSIufcsfEkRnFoS3r/Arlpgwg9xDfM1zukkKJ/92LE+VW+3txYT5eE4/5DVyXGg3KWAOjWX+v6n54jmuYEesTtml1zrLzAJ1I1qfnuWuqHfpovKxGn71/bLowbnBnDwSWPctDdd/tF6miWr0yeK1A==;5:q3fxnS3YbbLuyCZbHRJHlyLoAOqYRsneKwVUmxQjd5WhJOIcRAbWS1UeVIyEcAVfnEXIfgRsCDq6cQeqST0lNvDSjJUqVHFtqTfwo9WooaUGJuBDzsSls8s+ltCoG8GQeDYfKvUqVaNjxIihgEmQhQ==;24:Uezz3Sguz4oz3elJWkzEJrzpcILjdpo6tvW9pQFz6Ye9Qo1h+5A1TUmVzWqexNpbVJ9WfbtuOWqLnDPhOgmlyg==;7:VfG6EQt41VrHM7gTdT068xul/+QyMxYfCQ3rpuBUTHaVuLbTn66B7LPkjk048BEZzxkk2PgA8m75j6+FNXxhZtEZRex/t9kgJY75z/LhAIyT6KRn47J1zwd+RpponurrEQtOpdBmFQItfhllrafA+XhSpGtYUq9ZFStDflUfqXvXd6dbi9E7RXPcoZb8CMIqiE3V3s86DC3HOee2mE+aFfn3LDEYbM51nPs8MwYvCpE=
x-ms-office365-filtering-correlation-id: 00f4d552-658e-44d8-154c-08d5024308fa
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(2017082002075)(300000503095)(300135400095)(2017052603199)(201703131423075)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:OS2PR01MB1066;
x-ms-traffictypediagnostic: OS2PR01MB1066:
x-exchange-antispam-report-test: UriScan:(15306859212206)(267392333724022);
x-microsoft-antispam-prvs:
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(93006095)(93001095)(3002001)(10201501046)(2002001)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123564025)(20161123555025)(20161123560025)(20161123562025)(2016111802025)(6072148)(6043046)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:OS2PR01MB1066;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:OS2PR01MB1066;
x-forefront-prvs: 0439571D1D
x-forefront-antispam-report: SFV:SPM;SFS:(10009020)(346002)(376002)(47630400002)(199003)(377454003)(189002)(7406005)(7336002)(7736002)(74316002)(81156014)(33656002)(7276002)(7696004)(7066003)(5660300001)(6606003)(8666007)(861006)(316002)(14454004)(97736004)(7416002)(50986999)(101416001)(4500500003)(2900100001)(86362001)(2501003)(102836003)(7366002)(81166006)(6116002)(3846002)(18926415007)(54356999)(76576003)(5640700003)(478600001)(89122003)(189998001)(3660700001)(8936002)(6436002)(3280700002)(733005)(6916009)(6506006)(2351001)(106356001)(88732003)(66066001)(39060400002)(224303003)(19627405001)(105586002)(77096006)(8656003)(606006)(99286003)(2906002)(68736007)(55016002)(54896002)(53936002)(9686003)(236005)(79362002)(25786009)(6306002)(53366004)(53376002)(50929005)(4154615005);DIR:OUT;SFP:1501;SCL:5;SRVR:OS2PR01MB1066;H:OS2PR01MB0153.jpnprd01.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:0;MX:1;LANG:ja;
received-spf: None (protection.outlook.com: jp-amazun.com does not designate
permitted sender hosts)
spamdiagnosticoutput: 1:22
Content-Type: multipart/alternative;
boundary="_000_OS2PR01MB0153FB2EEDECDF58088F0B9A91640OS2PR01MB0153jpnp_"
MIME-Version: 1.0
X-OriginatorOrg: jp-amazun.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2017 05:22:07.1964
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: c199912d-583f-445b-82a5-8bdd09e606b2
X-MS-Exchange-Transport-CrossTenantHeadersStamped: OS2PR01MB1066
X-Antivirus: AVG (VPS 170915-2, 2017/09/15), Inbound message
X-Antivirus-Status: Clean


またもやcloud-mail.jpがらみ。ゴミをまき散らすのはほんと勘弁してほしい。

2017/09/23(Sat) 23:25:39 [2544] demeshin

投稿パス:

名前:  題名:


パスワード: 
ひとよひとよに(半角数字で) : 

Next >> [iTunesが起動しない!]
Back >> [WingWeb今月号発刊!]