よくできたフィッシングメール
が来たので、晒してみる。
元メールは、mimeで、PayPalのロゴを表示したり、かなりそれっぽい
。
でもね・・・
> PayPal
>
>
> Security Center Advisory!
>
>
> We recently noticed one or more attempts to log in to your PayPal
> account from a foreign IP address and we have reasons to belive that
> your account was hijacked by a third party without your authorization.
> If you recently accessed your account while traveling, the unusual log
> in attempts may have been initiated by you.
>
> If you are the rightful holder of the account you must *click the link
> below* and then complete all steps from the following page as we try to
> verify your identity.
>
> Click here to verify your account
> <http://218.199.102.***/www.paypal.com/webscr_cmd=_login-run****/>
>
>
>
>
>
> If you choose to ignore our request, you leave us no choise but to
> temporaly suspend your account.
>
> Thank you for using PayPal!
> ------------------------------------------------------------------------
> PayPal Email ID PP051
リンク先のURLがIPアドレスじゃあねえ。バレバレです
。
ちなみに、ヘッダをみると、
Received: from amlk.com ([211.59.141.**])
by xxx.xx.xxxxxx.ne.jp with ESMTP id ~~~~~~~~~~~~~~~;
Thu, 1 Mar 2007 18:07:37 +0900 (JST)
となっていて、PayPalじゃあないですね。
ホンモノは、例えばこんな感じ。
Received: from mx39.sjc.ebay.com (mxpool20.ebay.com [66.135.197.26])
![ブログランキング・にほんブログ村へ](http://www.blogmura.com/img/www468_60.gif)
↑Clickしてみてみて。
![](https://blogimg.goo.ne.jp/img_emoji/mail.gif)
元メールは、mimeで、PayPalのロゴを表示したり、かなりそれっぽい
![](https://blogimg.goo.ne.jp/img_emoji/hiyo_shock2.gif)
でもね・・・
> PayPal
>
>
> Security Center Advisory!
>
>
> We recently noticed one or more attempts to log in to your PayPal
> account from a foreign IP address and we have reasons to belive that
> your account was hijacked by a third party without your authorization.
> If you recently accessed your account while traveling, the unusual log
> in attempts may have been initiated by you.
>
> If you are the rightful holder of the account you must *click the link
> below* and then complete all steps from the following page as we try to
> verify your identity.
>
> Click here to verify your account
> <http://218.199.102.***/www.paypal.com/webscr_cmd=_login-run****/>
>
>
>
>
>
> If you choose to ignore our request, you leave us no choise but to
> temporaly suspend your account.
>
> Thank you for using PayPal!
> ------------------------------------------------------------------------
> PayPal Email ID PP051
リンク先のURLがIPアドレスじゃあねえ。バレバレです
![](https://blogimg.goo.ne.jp/img_emoji/hiyo_shock1.gif)
ちなみに、ヘッダをみると、
Received: from amlk.com ([211.59.141.**])
by xxx.xx.xxxxxx.ne.jp with ESMTP id ~~~~~~~~~~~~~~~;
Thu, 1 Mar 2007 18:07:37 +0900 (JST)
となっていて、PayPalじゃあないですね。
ホンモノは、例えばこんな感じ。
Received: from mx39.sjc.ebay.com (mxpool20.ebay.com [66.135.197.26])
![ブログランキング・にほんブログ村へ](http://www.blogmura.com/img/www468_60.gif)
↑Clickしてみてみて。