jarl.comフィッシングメール到来状況

めざせワイヤレス人材よりもサイバーセキュリティ人材.


推移

下図は,フィッシングメール「以外」も含めた,スパムの全体です.
20260603praph-longterm.jpg
着弾が
・3月 147通
・4月 243通
・5月 295通
と増えました.


日単位でみますと,5/24以降,劇的に減っています.
20260603praph-202605.jpg
図中「qr.paypay.ne.jp」としたものが,「正しいPayPay送金」に誘導するフィッシングメール――です.



「PayPay送金」に誘導するフィッシングメール

一般報道

『「PayPay」送金に誘導する詐欺メールが急増 注意を』
https://news.web.nhk/newsweb/na/na-k10015111421000

送信元

サルでもフィルタが書けそうな送信元は...(詐称ブランドごと):

・2.59.152.0/24 PayPayカード・楽天カード(稀)・国民健康保険
・2.59.153.100 PayPayカード
・101.47.30.236 PayPayカード
・45.91.227.0/24 PayPayカード(稀)・楽天カード
・34.130.124.119 三菱UFJ信託銀行
・153.51.180.4 日本年金機構

・2.59.152.0/24 VS6国 ALLCLOUD_HK
・45.91.227.0/24 VS6国  KIDC LIMITED

以下,具体例です.

「PayPayカード」を詐称

こんなようなやつ:
20260604phish-paypay.jpg


着弾日誘導先送信元
5/1qr.paypay.ne.jp/p2p01_QG56xp06e9kVxZz8[2.59.152.197]
[2.59.152.186]
[2.59.152.197]
5/1~3qr.paypay.ne.jp/p2p01_mFwBaDljUmNmSCZ0[2.59.152.123]
[2.59.152.24]
[2.59.152.248]
[2.59.152.29]
[2.59.152.102]
[2.59.152.138]
[2.59.152.210]
[2.59.152.139]
[2.59.152.176]
[2.59.152.86]
5/3qr.paypay.ne.jp/p2p01_gOUwxjUVR1NbrLaN[2.59.152.104]
5/4qr.paypay.ne.jp/p2p01_EtkQJ00J9uq8ky4p[2.59.152.32]
5/4qr.paypay.ne.jp/p2p01_GwWK0rPLgqwQKESF[2.59.152.74]
5/4~5qr.paypay.ne.jp/p2p01_as5gpwzQGRKIElKm[2.59.152.125]
[2.59.152.71]
[2.59.152.170]
5/5qr.paypay.ne.jp/p2p01_boPGy0nU54G52BuX[2.59.152.11]
5/6qr.paypay.ne.jp/p2p01_bS37S4OusuFhR2Wr[2.59.152.217]
5/6~7qr.paypay.ne.jp/p2p01_If8ihzUQyIDqSpL0[2.59.152.157]
[2.59.152.200]
5/7qr.paypay.ne.jp/p2p01_r1i5yonjlHIYAxls[2.59.152.150]
5/9qr.paypay.ne.jp/p2p01_DsHadz0BqXSzXeWc[2.59.152.52]
[2.59.152.15]
5/11~12qr.paypay.ne.jp/p2p01_alwPqv9dprs7w1nR[2.59.152.53]
[2.59.152.250]
[2.59.152.236]
[2.59.152.244]
[2.59.152.52]
[2.59.152.12]
[2.59.152.37]
[2.59.152.148]
5/13qr.paypay.ne.jp/p2p01_eUauVJT678BQzycq[101.47.30.236]
5/13~14qr.paypay.ne.jp/p2p01_9bagzyr4Zr9nF8r6[2.59.152.91]
[2.59.152.60]
[2.59.152.61]
[2.59.152.199]
[2.59.152.47]
[2.59.152.18]
5/12~13qr.paypay.ne.jp/p2p01_mP0rCB0KG2fij2Zn[2.59.152.94]
[2.59.152.38]
[2.59.152.35]
[2.59.152.79]
[2.59.152.7]
[2.59.152.71]
[2.59.152.24]
5/14~15qr.paypay.ne.jp/p2p01_UT8mrg5jx4dHo8fw[2.59.152.49]
[2.59.152.194]
[2.59.152.58]
[2.59.152.109]
5/15~16qr.paypay.ne.jp/p2p01_PGxIHiaqWGbpNIzf[2.59.152.31]
[2.59.152.38]
[2.59.152.15]
[2.59.152.189]
[2.59.152.15]
5/16 qr.paypay.ne.jp/p2p01_zeDEwgfyzAR1HdiG[2.59.153.100]
5/16~17qr.paypay.ne.jp/p2p01_yubym8yiygA8GbsS[2.59.152.18]
[2.59.152.140]
[2.59.152.164]
5/18~19qr.paypay.ne.jp/p2p01_9vFeKj7AFQIhT6U4/TD>[2.59.152.81]
[2.59.152.234]
[2.59.152.64]
[2.59.152.72]
[2.59.152.126]
[2.59.152.164]
[2.59.152.158]
[2.59.152.197]
[2.59.152.217]
[2.59.152.248]
[2.59.152.232]
[2.59.152.204]
5/20qr.paypay.ne.jp/p2p01_sJdRfjXjNdAUKG2e[45.91.227.165]
5/21~22qr.paypay.ne.jp/p2p01_i5ptFGjce71iKZ7x[45.91.227.187]
[45.91.227.138]
[45.91.227.233]
[2.59.152.105]
[45.91.227.230]
[45.91.227.189]
5/22~24qr.paypay.ne.jp/p2p01_x5yaJ2H7OS2m0t3m[2.59.152.8]
[45.91.227.146]
[2.59.152.202]
[45.91.227.158]
[45.91.227.111]
[2.59.152.81]
[2.59.152.122]
[45.91.227.212]
[2.59.152.60]
[45.91.227.214]
[45.91.227.104]
[45.91.227.146]
[45.91.227.101]

「楽天カード」を詐称

こんなようなやつ:20260604phish-rakuten.jpg

着弾日誘導先送信元
5/1~2qr.paypay.ne.jp/p2p01_ZsZoJMRL7LIKOsbB[45.91.227.170]
[45.91.227.199]
[45.91.227.76]
[45.91.227.203]
[45.91.227.38]
[45.91.227.58]
[45.91.227.121]
5/2~3qr.paypay.ne.jp/p2p01_MHLJT2HGkPdJdHt2[45.91.227.165]
[45.91.227.64]
[45.91.227.212]
[45.91.227.121]
[45.91.227.113]
[45.91.227.54]
[45.91.227.161]
[45.91.227.80]
5/4qr.paypay.ne.jp/p2p01_as5gpwzQGRKIElKm[45.91.227.154]
5/4qr.paypay.ne.jp/p2p01_EtkQJ00J9uq8ky4p[45.91.227.96]
5/4qr.paypay.ne.jp/p2p01_ewC1atlCBl24r5Oi[45.91.227.104]
[45.91.227.119]
5/5qr.paypay.ne.jp/p2p01_boPGy0nU54G52BuX[45.91.227.28]
[45.91.227.242]
[45.91.227.136]
5/5~6qr.paypay.ne.jp/p2p01_XWDZu37pFA22eTvO[45.91.227.134]
[45.91.227.57]
[45.91.227.67]
5/6qr.paypay.ne.jp/p2p01_k6gqU6by0Un8IuPB[45.91.227.33]
[45.91.227.75]
5/7qr.paypay.ne.jp/p2p01_6sOvCE2vOSLTvEa6[45.91.227.162]
[45.91.227.84]
[45.91.227.227]
5/7qr.paypay.ne.jp/p2p01_If8ihzUQyIDqSpL0[45.91.227.110]
[45.91.227.150]
5/7qr.paypay.ne.jp/p2p01_K0xyrMBvi64ALIdA[45.91.227.135]
5/9qr.paypay.ne.jp/p2p01_C2fpDQ8z2BFcfZoU[45.91.227.160]
[45.91.227.236]
[45.91.227.110]
[45.91.227.121]
[45.91.227.27]
[45.91.227.195]
5/9qr.paypay.ne.jp/p2p01_DsHadz0BqXSzXeWc[2.59.152.113]
5/10qr.paypay.ne.jp/p2p01_NNBMJT8JtXZFKvKh[45.91.227.237]
[45.91.227.239]
[45.91.227.136]
5/12~13qr.paypay.ne.jp/p2p01_5xY8eHfpfy5DM8nN[45.91.227.134]
[45.91.227.226]
[45.91.227.247]
[45.91.227.212]
5/15qr.paypay.ne.jp/p2p01_hqMbYLWHhHx9DVSZ[45.91.227.204]
5/16qr.paypay.ne.jp/p2p01_hqMbYLWHhHx9DVSZ[45.91.227.240]
[45.91.227.56]
5/16~17qr.paypay.ne.jp/p2p01_JaWhP8tKyq1gdo7S[45.91.227.90]
[45.91.227.111]
[45.91.227.173]
[45.91.227.18]
[45.91.227.226]
[45.91.227.108]
[45.91.227.26]
[45.91.227.113]
5/18~19qr.paypay.ne.jp/p2p01_H81dgClpsuviRVkt[45.91.227.66]
[45.91.227.12]
[45.91.227.153]
[45.91.227.129]
[45.91.227.75]
[45.91.227.221]
[45.91.227.79]
[45.91.227.64]
[45.91.227.234]

その他 を詐称


被詐称ブランド着弾日誘導先送信元
三菱UFJ信託銀行5/3qr.paypay.ne.jp/p2p01_JA7gcP4WEB8SiHjk92j86v25.com [34.130.124.119]
国民健康保険5/7qr.paypay.ne.jp/p2p01_DsHadz0BqXSzXeWc[2.59.152.182]
日本年金機構5/9qr.paypay.ne.jp/p2p01_ptnonPpMVgDGAg8e[153.51.180.4]



「PayPay送金」以外

テイクダウンされていない,稼働中のフィッシングサイトが多いです.
被詐称ブランドごとにまとめます.


誘導先
(メール本文中)
転送先送信元
●AAA
www.emeraldedenyj.pro/9tgt4.phantomvictory.su/aff_c?offer_id=759&aff_id=1889&aff_sub=aa-caremkit&aff_sub2=7axf23&aff_sub3=&aff_sub4=&aff_sub5=lily.brightleafav.com [197.11.156.91]
●Amazon
carrosseriedelpippo.com/mmjfhye-pinoypinay.com/signin/openid.returnv160-251-231-136.m6tz.static.cnode.jp [160.251.231.136]
●Apple (iCloud)
dlr-design.com/KCuj2I5Aelectro-fri.com/verify-update/hwsrv-1326185.hostwindsdns.com [104.168.136.206]
erp-specialists.com/sd/df/e/df47erp-specialists.com/sd/df/e/df47/hwsrv-1327108.hostwindsdns.com [192.236.146.141]
jacksonpaper-nc.com/verify-updatehwsrv-1326787.hostwindsdns.com [23.254.215.18]
lpiwebsuccess.com/dmmfeurosoccertips.com/icloud-update/v133-117-76-67.fnys.static.cnode.jp [133.117.76.67]
minisitemarketing.com/quOQKkMNhwsrv-1328011.hostwindsdns.com [23.254.228.93]
miracle-superstore.com/dmmfv133-88-116-211.tkpp.static.cnode.jp [133.88.116.211]
mobile-watertreatment.com/verify-updatemobile-watertreatment.com/verify-update/hwsrv-1326380.hostwindsdns.com [23.254.209.226]
mutual-fund-trader.com/dmmfi-chateaux.com/uf/fgf/sd/e/dsf/rt/gfg104/v160-251-203-88.szhz.static.cnode.jp [160.251.203.88]
pharmacy-24hour-canadian.com/KCuj2I5A404 Not Foundhwsrv-1326338.hostwindsdns.com [104.168.146.245]
virginiacollisioncenter.com/dmmfvip-ayxsports.com/icloud-update/v163-44-103-155.hv5q.static.cnode.jp [163.44.103.155])
●Cloud
translatorenence.com/articles/japan-tech/?&vndr=evf&evf=1&uid=5605&offid=4&affiliate_id=2564&subid=3079&subid2=e32f32ecb95c439ebe2a5dfbbde1625dtranslatorenence.com/articles/japan-tech/?&vndr=evf&evf=1&uid=5605&offid=4&affiliate_id=2564&subid=3079&subid2=e32f32ecb95c439ebe2a5dfbbde1625d150.203.221.35.bc.googleusercontent.com [35.221.203.150]
●Costco
www.mnsafetycenter.com/signalsfeed/junction/f284e0fd76bfd14b6c6/opensummaryprimehaven.kelzhoop.com [103.24.246.164]
●iTunes
www.buycbdoil10.com/www.buycbdoil10.com/tysender05.toyoutletstore.com [136.110.67.22]
●jarl.com
accessmail10active1.vercel.app/#〓〓〓@JARL.comaccessmail10active1.vercel.app/#4O$yB=L$edbC7sb@1eIof6atzzPVqN&Mon-May-11-2026-23:45:29-GMT+0900-(%E6%97%A5%E6%9C%AC%E6%A8%99%E6%BA%96%E6%99%82)&BQq%vN6Qh=WMauS&23:45:29,GMT+0900,(%E6%97%A5%E6%9C%AC%E6%A8%99%E6%BA%96%E6%99%82)&N1Y=-6JbsW8UqZ&F9JH1GTA$Hj@eUKuaetdTtTdSso5BdaO6LBfgD33mXgfi#〓〓〓@JARL.comhost.212-19-23-205.broadband.redcom.ru [212.19.23.205]
●JR東日本
login.heibaita.com/?2c6TSySe3MCM&type=jrepointwww.zhengdajiadian.cn/homehutwn.com [35.212.94.164]
qzszywl.com/jpqzszywl.com/jps.wfbtzbpn.outbound-mail.sendgrid.net [159.183.235.50]
www.hyyywl.com/?tXXc2TiEmT8B&type=jrepointwww.zhengdajiadian.cn/homekmhztq.com [35.212.50.134]
www.whggbd.com/?j7k4bvxMhsp4&type=jrepointwww.zhengdajiadian.cn/homehbaxco.com[35.212.33.72]
●LINEヤフー
login.nlxfml.com/?TVb3fNvePO22&type=linewww.fqwez.com/homegzlzs88.com [35.217.69.207]
www.fsozxg.com/?ujVSAHRxa1Qz&type=linelogin.kvpoau.com/homejzgiz.com [35.215.81.138]
www.pabxcx.com/?jVnPEit7UDKl&type=linewww.fqwez.com/homeynwygd.com [35.215.109.223]
●Lowe's
www.hockeyun.garden/au/ncurdfklowgutpanel3230.bougiebarks.com [103.24.247.200]
●Marriott
www.reddockmz.blog/boutisfvalley.crisppondpd.com [197.11.156.207]
●Netflix
flowcode.com/p/e7xr3YI3HT?fc=0movement.pt/secure/auth/login.php32.255.231.8.bc.googleusercontent.com [8.231.255.32]
flowcode.com/p/e7xr3YI3HT?fc=0upvault.pt/secure/auth/login.php9.51.231.8.bc.googleusercontent.com [8.231.51.9]
●Pairs
pairs.fujifindjp.com/login-81b7-45adpairs.fujifindjp.com/128.204.146.34.bc.googleusercontent.com [34.146.204.128]
pairs.okinyaku.com/login-cb33-4baf处理请求失败[140.238.45.238]
●PayPay
[QRコード]cmealsprep.com [34.125.206.68]
[QRコード]tmdtzttt.com [34.106.246.23]
login.grtnhi.com/?yHs8VFLmLShe&type=paypaysxrsfw.com [35.212.209.217]
oen-toreca.com/?email=hiznmrスマートフォン専用ページになりますmail-westus3azolkn19011083.outbound.protection.outlook.com [52.103.23.83]
●PayPay銀行
paypay-card.wbwueae.cn/?auynith=Umgq7gAA3apaypay-card.wbwueae.cn/loginv133-117-74-186.4ooa.static.cnode.jp [133.117.74.186]
●Ponta
login.aumaple.com/?Vt49KJWOkWS5&type=pontawww.sdyjgg.cn/homeihsmqc.com [35.212.210.214]
●Walmart
www.dandystonerq.online/switchbackz0news.google.com/home?hl=ja&gl=JP&ceid=JP:ja
www.pccchoanghuyvu.com/calendar/series/hkpftvxxgwww.pccchoanghuyvu.com/calendar/series/hkpftvxxgfleetzone.stmparkersburg.com [5.175.179.78]
www.requirementinstantly.world/docs/trackview-fast/b19a789c352a19f30c1a/signalchamberdock.kingreward.com [103.27.249.243]
●WAON
login.zovkj.com/?vKLli3IAa61Z&type=waonwww.dnmkj.com/homeurl-panda.com [35.217.121.171]
●第一生命
www.fywzjz.com/?oEIOMGRM7CaK5DrCvdslXYOze-stat.b8no2fhz.shop/homezx2517.com [35.213.59.230]
www.yxchao.com/?mpRdlcxC55MmI7ACb3DGh2UMdai-ichi-life.m-ch-pg.com/home[161.33.84.95]
●みずほ証券
mnc-mizuho-sc.qyhyba.com/?web=Hyqzc9DGRExnRFd3KmDqO1tw Non-existent domainmsc-cabins.com [35.215.108.60]
●楽天
login.hbjhlb.com/?G3VlNm7FrtPB&type=rakutenwww.rddnzz.com/homeqytckj.com [35.217.68.198]
www.ryxlb.com/?k2tlcDc3CriJ&type=rakutenwww.83dl.cn/homeklgbbc.com [35.219.172.228]
login.tcwtdz.com/?pR7EPOZe7llv&type=rakutenlogin.bzzldz.cn/hometaqmg.com [34.0.145.159]
●国勢調査
cdn.rex.contents.rakuten.co.jp/webcx-redirect-module/index.html?version=2.52.0&accountId=1007&sessionId=5ae9b876-45a7-4ca1-9ea0-a8465489a356&clientId=0fe39b99b379952df916ed88c169ec63757291bf0c3db2881a4e0e9bf84b1463&origin=https://www.rakuten-life.co.jp/medical/super_medical_return/example.html&issueId=F01063-001165&screen=WP&isRatSecure=true&campaignId=2c685b0d-43ac-4086-86d6-83b2074ed32f&contentId=767e8c80-6eae-4393-bc3c-4c840173164b&action=CLICK_ACTION_BUTTON&redirect=https%3A%2F%2Fe-stat.f58vo5v9.shop%2F?HmpMuTose-stat.8mpf2yml.shop/homezh-online-xinqiusports.com [136.118.82.76]
cdn.rex.contents.rakuten.co.jp/webcx-redirect-module/index.html?version=2.52.0&accountId=1007&sessionId=5ae9b876-45a7-4ca1-9ea0-a8465489a356&clientId=0fe39b99b379952df916ed88c169ec63757291bf0c3db2881a4e0e9bf84b1463&origin=https://www.rakuten-life.co.jp/medical/super_medical_return/example.html&issueId=F01063-001165&screen=WP&isRatSecure=true&campaignId=2c685b0d-43ac-4086-86d6-83b2074ed32f&contentId=767e8c80-6eae-4393-bc3c-4c840173164b&action=CLICK_ACTION_BUTTON&redirect=https%3A%2F%2Fe-stat.8dkxylvs.shop%2Fe-stat.26rni3t0.shop/homegrcekul.com [34.94.227.121]
cdn.rex.contents.rakuten.co.jp/webcx-redirect-module/index.html?version=2.52.0&accountId=1007&sessionId=5ae9b876-45a7-4ca1-9ea0-a8465489a356&clientId=0fe39b99b379952df916ed88c169ec63757291bf0c3db2881a4e0e9bf84b1463&origin=https://www.rakuten-life.co.jp/medical/super_medical_return/example.html&issueId=F01063-001165&screen=WP&isRatSecure=true&campaignId=2c685b0d-43ac-4086-86d6-83b2074ed32f&contentId=767e8c80-6eae-4393-bc3c-4c840173164b&action=CLICK_ACTION_BUTTON&redirect=https%3A%2F%2Fe-stat.f58vo5v9.shop%2Fe-stat.8mpf2yml.shop/homepyfigkw.com [34.102.95.56]
cdn.rex.contents.rakuten.co.jp/webcx-redirect-module/index.html?version=2.52.0&accountId=1007&sessionId=5ae9b876-45a7-4ca1-9ea0-a8465489a356&clientId=0fe39b99b379952df916ed88c169ec63757291bf0c3db2881a4e0e9bf84b1463&origin=https://www.rakuten-life.co.jp/medical/super_medical_return/example.html&issueId=F01063-001165&screen=WP&isRatSecure=true&campaignId=2c685b0d-43ac-4086-86d6-83b2074ed32f&contentId=767e8c80-6eae-4393-bc3c-4c840173164b&action=CLICK_ACTION_BUTTON&redirect=https%3A%2F%2Fe-stat.f58vo5v9.shop%2Fe-stat.8mpf2yml.shop/homecardeetsautocare.com [34.94.39.95]
cdn.rex.contents.rakuten.co.jp/webcx-redirect-module/index.html?version=2.52.0&accountId=1007&sessionId=5ae9b876-45a7-4ca1-9ea0-a8465489a356&clientId=0fe39b99b379952df916ed88c169ec63757291bf0c3db2881a4e0e9bf84b1463&origin=https://www.rakuten-life.co.jp/medical/super_medical_return/example.html&issueId=F01063-001165&screen=WP&isRatSecure=true&campaignId=2c685b0d-43ac-4086-86d6-83b2074ed32f&contentId=767e8c80-6eae-4393-bc3c-4c840173164b&action=CLICK_ACTION_BUTTON&redirect=https%3A%2F%2Fe-stat.75lcvzk6.shop%2Fe-stat.27vs83nl.shop/homejd6630.com [35.212.211.121]
command-f.com/link/cutlinks/rank.php?url=https%3A%2F%2Fe-stat.8391yei4.shop%2F?kt4pP5N1e-stat.27vs83nl.shop/homeuqmtjvm.com [34.19.141.163]
command-f.com/link/cutlinks/rank.php?url=https%3A%2F%2Fe-stat.dwhqfs28.shop%2Fe-stat.b9l6kfqw.shop/homef4tlxi44.com [35.212.235.9]
mcrane.jp/?wptouch_switch=desktop&redirect=https%3A%2F%2Fe-stat.9g4icuky.shop%2Foo6z309q%2Fe-stat.9g4icuky.shop/home0t676vhq.com [35.217.113.74]
mcrane.jp/?wptouch_switch=desktop&redirect=https%3A%2F%2Fe-stat.9g4icuky.shop%2Foo6z309q%2F?LqR6f8bSe-stat.9g4icuky.shop/homegobzxnp.com [35.203.99.182]
okaidokinet.xsrv.jp/taiyoko/?wptouch_switch=desktop&redirect=https%3A%2F%2Fe-stat.26rni3t0.shop%2F2xj3nsrm%2Fe-stat.26rni3t0.shop/homejwknfln.com [34.101.139.127]



おつかれさまでした

スパムの全体.
20260603gamen6.jpg
20260603gamen2.jpg
20260603gamen3.jpg
20260603gamen4.jpg
20260603gamen5.jpg
20260603gamen6.jpg
20260603gamen7.jpg

この記事へのコメント