PHISHING from wdhtrjrt.atlassian.net

[fc]

Nespresso Phishing

sent from

with references to the usual bmetrack.net redirects and

616 Corporate Way Ste.2-9092
Valley Cottage, NY 10989

X-MSFBL: NbP05vOPzV7EEhoSpjGozgK+6B5lTwTKgk2nhlnI6Uk=|eyJtZXNzYWdlX2lkIjo
	iNjFmOTgyMDYwMTYyN2Y2ZWQzNDYiLCJjdXN0b21lcl9pZCI6IjEiLCJ0ZW5hbnR
	faWQiOiJhdGxhc3NpYW51cyIsInIiOiJzYWlkaWxha21hbGk2NEBnbWFpbC5jb20
	iLCJzdWJhY2NvdW50X2lkIjoiNCJ9
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=mail-us.atlassian.net; s=atl201805; t=1644234370;
	i=@mail-us.atlassian.net;
	bh=92hh6I/yCHX2yJu7Dj6LDYOEoaM+27FIffwhVK9bABY=;
	h=From:Subject:Message-ID:Date:Content-Type;
	b=V6p5rg+Zza8LTQcI2CYdWnJkm0vHbLj8GNbflR0geCqINpz/Dm9rhw2+6ouQgG364
	 Jxj51IFjRXjRKQNMvLthQAdlNNz3AWlv8XdFAF451yLixp71jPFr1W2LSewOL2R2l/
	 aLrm2wFu9XqYbWDut/Tk+O5d/qoL4jCnd2TPDdOM=
From: "Nespresso" <jira@wdhtrjrt.atlassian.net>
Reply-To: <jira@wdhtrjrt.atlassian.net>
Subject: =?UTF-8?b?W0pJUkFdIEFWT0lSIExBIENIQU5DRSBERSBHQUdORVIgSlVTUVUnw4AgMjEg?=
	=?UTF-8?b?Q0FQU1VMRVMgRVQgVU5FIENPTExFQ1RJT04gREUgVEFTU0VTIQ==?=
Message-ID: <110254441.2.1644234368574@926a07953085>
AtlassianMail-Meta-Transaction-ID: 01FVA02SNQ4RM0PKY9JYBX7PMB
AtlassianMail-Meta-Obsolete-ID: 01FVA02SNQ4RM0PKY9JYBX7PMB
Precedence: bulk
Delivered-To: saidilakmali64@d7e4bc8883d8
X-Atl-Mail-Meta: cloud_id="f6d5908a-abd2-4fd3-be6f-bba8cde4fcf1",product="jira",tenant="https://wdhtrjrt.atlassian.net",fe="jira@wdhtrjrt.atlassian.net"
Received: from 926a07953085 (926a07953085  [10.106.64.85]) by gmail.com with SMTP id 98c015c9976ac60e833a6eb92ee11e81@gmail.com; Mon, 07 Feb 2022 11:46:08 +0000
Auto-Submitted: auto-generated
X-Jira-Fingerprint: 908474f9fe78fb1b0091d665fe813ff6
X-Atl-Queueid: DABB11C6-8D58-4503-A195-710B2162F3E1
Date: Mon, 7 Feb 2022 11:46:07 +0000 (UTC)
MIME-Version: 1.0

[Andy Heinzer]

Thanks for reporting this.  I have flagged this issue to my abuse team to investigate further.

[Jack Brickey]

Something to raise with Atlassian Support

[Nic Brough -Adaptavist-]

Yep, there's been a lot of abusive servers spun up with free Cloud services.

See https://community.atlassian.com/t5/Confluence-questions/How-to-report-phishing-attacks-using-Confluence/qaq-p/1864584

There's also a couple of things Atlassian have done recently:

• They're tweaking the email systems for Cloud so that free/starter systems won't be able to send emails until there's some evidence that they are not abusive
• You can forward suspect mails (or lists of suspect Cloud systems) on to abuse@atlassian.com now, instead of having to raise a support request.