How to see ASCII.jp Apple, Rakuten, etc.?

My new year starts with "lie"!

We started in 2018, but how are you all going?Although it is for me, almost the day, "What is a lie?" (Serialized six times), and I was spending my days busy with my friends and readers' impressions and questions.。

My job is magic, which is said to be a "allowed lie" in the general public.Recently, it is a "fraudulent email" that encounters familiarity with "unacceptable lies".The method itself has been around for a long time, but in recent years the tricks have become more sophisticated.

If the magician of "Professional who deceives people" is "deceived by fake email", the laughter of the public.I'm talking about IT in ASCII ... (sweat).For that reason, I usually check emails while I'm sick.

Therefore, this time, I will introduce the points of how to see the inch chimer that I am doing.

Suspicious emails see the email header

"Mail header" is the part where the sentiment came.It is usually hidden and invisible, but the header can be viewed in the menu "Display"> "Message"> "All Headers" (for MacOS, email).There are various things like spells, but if you hold down the points, the view is easy.

Below is the header of the spoofing email that arrived at the author.

A heder with a fake email pretending to be Apple.There are many suspicious parts

What is "Received: from" in the mail header?

The point in the mail header is the "Received: from" part.It describes which mail server sent / passed through.In the above email, there is no IP number (address) of the source server via two email servers and is disguised.In the above header, there are two "received: from", but it is in the order from the bottom to the top.

"User-Agent" was made by the OS and apps?

"User-Agent" is the part that describes which OS and app the emails were created.This is an example of leaving the evidence of Windows, despite the email from Apple.

About 10 years ago, a fake email in the Diet had a topic of email headers in the case (later the Democratic Executive Department resigned).Experts immediately pointed out the differences in the app version from the description of "X-Mailer" similar to the "User-Agent" in the mail header.I saw through the situation evidence that it was not real.However, overconfidence is forbidden because "user-agent" can be false (deceive the mail server).

There are other suspicious parts, but I will not explain it here because it must be referred to for fake email production.sorry.

The following is a real email from Apple.The correct header looks like this.

A header of an email from a real Apple (part).It is completely different from fake email

"Google" part of the text that is a little easier

The way to find out from the email header may be for intermediate players.So, here are some more casual methods.It's spoiled by headline (laughs), but it's about copy and paste a part of the email text and search.

For example, below is the text of fake emails that pretend to be Rakuten.

If you look closely, the link domain is also "cojp".For the time being, google a part

For the time being, if you copy and paste part of "Rakuten Card Co., Ltd. Castama Center Phone Number: 0570-083-6" in the text, it is as follows.

In search results, sites that warns fake emails from Rakuten appear one after another

Generally, I don't have a Rakuten card, and when I follow the link, I can see that the phone number of Rakuten's voice guide is different.(Furthermore, part of the address linked to the fake mail is "co".Not "JP", but "cojp" (period from period) ...).

However, it is important to note that this method does not appear in the search results in the case of a new fake email.

How to check the communication protocol

In addition, it is quite dangerous if the link in the email is "HTTP" despite sites such as login.The communication protocol is the "HTTP" part in front of the domain.In most cases, the encrypted "HTTPS" is used on pages such as login pages, credit card information, and address names.

The clever thing is that, despite the "HTTPS", the link in the email is almost always skipped to another link that starts with "HTTP".The link display of the "Fake Rakuten Mail" introduced above is "https: // www.rakuten-card.cojp/***** (*is added by the author), but it is actually guided to an dubious site in the United States that starts with "HTTP".

On the PC, you can right -click and select "Copy Link" and put it on the text editor, so you can see the embedded link destination by selecting the link display and "shared to the memo" on the iPhone.

Graduated from Tokyo Denki University.His graduation paper is artificial intelligence (expert system).One of the "Claus -Up Magician" who plays a small number of spectators at a close range.Appeared on more than 100 TV programs and TV commercials, including special prime time special programs.He was appointed brand ambassador by the LVMH (Mohehennessy Louis Vuitton) group, and performed magic to ambassadors and business people, including successive prime ministers.He is a gold star member of The Magic Circle London, a member of the British Prince Charles, who has appeared overseas.

He has authored "Intellectual Distance" (Kankuki Publishing), "Secret Words to Move People" (Nippon Business Publisher), "Brain to Create Art" (co -author, the University of Tokyo Publishing), and "One of the new employeesThere are books (co -authored, Nippon Keidanren Publishing) and others.