あなたのメールボックスは今日非アクティブとしてマークされました

2024年8月28日

Contents

メッセージ・メタ情報
- メッセージ件名
- 【メッセージ発信日時: 発信者嘘の自称情報】
【解析結果】
- 発信者の推定住所
- メアド入手の推定経路
【メール本文】

メッセージ・メタ情報

メッセージ件名

あなたのメールボックスは今日非アクティブとしてマークされました.8/11/2024 7:49:20 p.m..1.

【メッセージ発信日時: 発信者嘘の自称情報】

発信日時(Header Date:) : 11 Aug 2024 19:49:23 -0400
発信者名(Header From:) : メール管理- ??????.jp <XXXXXXXX@blue.plala.or.jp>
発信者メールアドレスは、詐取した実在のものと思われる

【解析結果】

IPアドレス	69.159.240.71
ホスト名	mtlxpqak-1168109639.sdsl.bell.ca
Return-Path	XXXXXXXX@blue.plala.or.jp
ネットワーク名	Bell Canada BELLNEXXIA-11
IPアドレス範囲	69.156.0.0/14
国	カナダ
地域	Montreal
郵便番号	H2X
緯度、軽度	45.51,-73.5665
X-Mailer
備考

発信者の推定住所

※ 下の推定住所は、
発信者に最も近いプロバイダーの中継基地の住所になるかと思います。

メアド入手の推定経路

過去にインターネットに公開してしまった。

【メール本文】

[Mail Header]

From - Mon Aug 12 12:02:45 2024
X-Account-Key: account9
X-UIDL: UID9-1722932313
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-Path: <XXXXXXXX@blue.plala.or.jp>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on ??????.???????.jp
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=52.3 required=30.0 tests=CMCL_1,HTML_MESSAGE,
	HTTPS_HTTP_MISMATCH,KHOP_HELO_FCRDNS,MIME_HTML_ONLY,SPF_HELO_SOFTFAIL,
	SPF_SOFTFAIL,TVD_SPACE_RATIO_MINFP,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,
	URIBL_ZEN_BLOCKED_OPENDNS autolearn=no autolearn_force=no version=3.4.0
X-Spam-Report: 
	*  0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
	*       See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
	*      for more information.
	*      [URIs: plala.or.jp]
	*  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
	*      dbl.spamhaus.org was blocked due to usage of an open resolver. See
	*      https://www.spamhaus.org/returnc/pub/
	*      [URIs: plala.or.jp]
	*  0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
	*      zen.spamhaus.org was blocked due to usage of an open resolver. See
	*      https://www.spamhaus.org/returnc/pub/
	*      [URIs: blue.plala.or.jp]
	*  1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
	*  0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)
	*  0.1 HTTPS_HTTP_MISMATCH BODY: No description available.
	*  0.0 HTML_MESSAGE BODY: HTML included in message
	*  0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
	*   50 CMCL_1 Cloudmark Authority detected spam
	*  0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
	*  0.0 TVD_SPACE_RATIO_MINFP Space ratio (vertical text obfuscation?)
X-Spam-CMAuthority: v=2.2 cv=G/hsK5s5 c=0 sm=1 tr=0
	p=YgA/ugQrpZdIyfQCLA1/3w==:17
Delivered-To: ???????@??????.jp
X-Virus-Status: clean(F-Secure/fsigk_smtp/521/virusgw12005.???????.jp)
Received: from ??????.jp (mtlxpqak-1168109639.sdsl.bell.ca [69.159.240.71])
	by ??????.???????.jp (Postfix) with ESMTP id 7681E2A606BE33
	for <???????@??????.jp>; Mon, 12 Aug 2024 08:46:05 +0900 (JST)
Authentication-Results: ??????.???????.jp;
	dkim=none;
	dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plala.or.jp (policy=none);
	spf=softfail (??????.???????.jp: 99.999.999.99 is neither permitted nor denied by domain of ????????@blue.plala.or.jp) smtp.mailfrom=????????@blue.plala.or.jp
ARC-Seal: i=1; s=default; d=??????.jp; t=1723419966; a=rsa-sha256;
	cv=none;
	b=NCrcEosUSnp5ZVMusAnzX09pNrtQ/mzFe2ZLRoGd8ISc9eu49tf0bocKEc/rvXJvKgsalh
	X0Z/MH18aEWfmsaHJ1rSs4DW4veXrD4UwCgMIW/tUJfY4e4/8spMkffVKMb2ncTGXEreSl
	GwWJ+AqHWW2foFLVvzAHUHuYOR6KltT+woC3r1hwyzPXGYc2VP7Pw9mEvcKLT+jIKG9p5t
	+3GGSJgbzYAo0hzWjnlou1q1ciOwbU354C6RnyOuasHWhi55BaEHPAGNw32nXqj6arQ6Ui
	O5kh4y4GOcMX1b/weixHjOlveDB0I56/X7W0kI8hmrKmgwfWQhS+5Un9bTrELA==
ARC-Authentication-Results: i=1;
	??????.???????.jp;
	dkim=none;
	dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plala.or.jp (policy=none);
	spf=softfail (??????.???????.jp: 99.999.999.99 is neither permitted nor denied by domain of ????????@blue.plala.or.jp) smtp.mailfrom=????????@blue.plala.or.jp
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=??????.jp;
	s=default; t=1723419966;
	h=from:from:sender:reply-to:subject:subject:date:date:
	 message-id:message-id:to:to:cc:mime-version:mime-version:
	 content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:in-reply-to:
	 references; bh=H/rfoo7aIBHLXN5x5uVxj7oBQD/SWlJpL11uOiFN5y8=;
	b=ZyKup9hI3z/r+4HP8lVz9oRqEmIM4jfGhIge0lUQIXLeZzNmKrxlH5zYZ/jQKsggseiWbE
	mCXYCv65f/3K+kRpnz66B+dIerVqhIg4sljdM1G+WcvbnTeEBS+Erz/BgEwStZs5NeWQ+h
	F04Fk0o/yVgUFxxfkatgdxhS434W1F/0BQ2COIrbqq44VRxG5L7MzOhhwJIiIRZ2RbRG3c
	3nUNINp/r312wuMIrxy+dOTSLMxYja357oGoevZn2xHKtmu49qFGknt2iAf3xb66bmOfOj
	xyN7kWbweg6KizTbdfN3DY6la/OcWwCW9QcCCw4AkvwYWw3egvqrWXNVtTvbCA==
From: =?UTF-8?B?44Oh44O844Or566h55CGLQ==?=??????.jp  <????????@blue.plala.or.jp>
To: ???????@??????.jp
Subject: [SPAM] =?UTF-8?B?44GC44Gq44Gf44Gu44Oh44O844Or44Oc44OD44Kv44K544Gv5LuK5pel6Z2e44Ki44Kv44OG44Kj44OW44Go44GX44Gm44Oe44O844Kv44GV44KM44G+44GX44GfLg==?=8/11/2024 7:49:20 p.m..1.
Date: 11 Aug 2024 19:49:23 -0400
Message-ID: <20240811194920.0015E595791F9205@blue.plala.or.jp>
MIME-Version: 1.0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
XSRV-Filter: ???????@??????.jp
X-Spam-Prev-Subject: =?UTF-8?B?44GC44Gq44Gf44Gu44Oh44O844Or44Oc44OD44Kv44K544Gv5LuK5pel6Z2e44Ki44Kv44OG44Kj44OW44Go44GX44Gm44Oe44O844Kv44GV44KM44G+44GX44GfLg==?=8/11/2024 7:49:20 p.m..1.

From - Mon Aug 12 12:02:45 2024

X-Account-Key: account9

X-UIDL: UID9-1722932313

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path: <XXXXXXXX@blue.plala.or.jp>

X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on ??????.???????.jp

X-Spam-Flag: YES

X-Spam-Level: **************************************************

X-Spam-Status: Yes, score=52.3 required=30.0 tests=CMCL_1,HTML_MESSAGE,

HTTPS_HTTP_MISMATCH,KHOP_HELO_FCRDNS,MIME_HTML_ONLY,SPF_HELO_SOFTFAIL,

SPF_SOFTFAIL,TVD_SPACE_RATIO_MINFP,URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS,

URIBL_ZEN_BLOCKED_OPENDNS autolearn=no autolearn_force=no version=3.4.0

X-Spam-Report:

* 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

* See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block

* for more information.

* [URIs: plala.or.jp]

* 0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

* dbl.spamhaus.org was blocked due to usage of an open resolver. See

* https://www.spamhaus.org/returnc/pub/

* [URIs: plala.or.jp]

* 0.0 URIBL_ZEN_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to

* zen.spamhaus.org was blocked due to usage of an open resolver. See

* https://www.spamhaus.org/returnc/pub/

* [URIs: blue.plala.or.jp]

* 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

* 0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)

* 0.1 HTTPS_HTTP_MISMATCH BODY: No description available.

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

* 50 CMCL_1 Cloudmark Authority detected spam

* 0.3 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

* 0.0 TVD_SPACE_RATIO_MINFP Space ratio (vertical text obfuscation?)

X-Spam-CMAuthority: v=2.2 cv=G/hsK5s5 c=0 sm=1 tr=0

p=YgA/ugQrpZdIyfQCLA1/3w==:17

Delivered-To: ???????@??????.jp

X-Virus-Status: clean(F-Secure/fsigk_smtp/521/virusgw12005.???????.jp)

Received: from ??????.jp (mtlxpqak-1168109639.sdsl.bell.ca [69.159.240.71])

by ??????.???????.jp (Postfix) with ESMTP id 7681E2A606BE33

for <???????@??????.jp>; Mon, 12 Aug 2024 08:46:05 +0900 (JST)

Authentication-Results: ??????.???????.jp;

dkim=none;

dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plala.or.jp (policy=none);

spf=softfail (??????.???????.jp: 99.999.999.99 is neither permitted nor denied by domain of ????????@blue.plala.or.jp) smtp.mailfrom=????????@blue.plala.or.jp

ARC-Seal: i=1; s=default; d=??????.jp; t=1723419966; a=rsa-sha256;

cv=none;

b=NCrcEosUSnp5ZVMusAnzX09pNrtQ/mzFe2ZLRoGd8ISc9eu49tf0bocKEc/rvXJvKgsalh

X0Z/MH18aEWfmsaHJ1rSs4DW4veXrD4UwCgMIW/tUJfY4e4/8spMkffVKMb2ncTGXEreSl

GwWJ+AqHWW2foFLVvzAHUHuYOR6KltT+woC3r1hwyzPXGYc2VP7Pw9mEvcKLT+jIKG9p5t

+3GGSJgbzYAo0hzWjnlou1q1ciOwbU354C6RnyOuasHWhi55BaEHPAGNw32nXqj6arQ6Ui

O5kh4y4GOcMX1b/weixHjOlveDB0I56/X7W0kI8hmrKmgwfWQhS+5Un9bTrELA==

ARC-Authentication-Results: i=1;

??????.???????.jp;

dkim=none;

dmarc=fail reason="No valid SPF, No valid DKIM" header.from=plala.or.jp (policy=none);

spf=softfail (??????.???????.jp: 99.999.999.99 is neither permitted nor denied by domain of ????????@blue.plala.or.jp) smtp.mailfrom=????????@blue.plala.or.jp

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=??????.jp;

s=default; t=1723419966;

h=from:from:sender:reply-to:subject:subject:date:date:

message-id:message-id:to:to:cc:mime-version:mime-version:

content-type:content-type:

content-transfer-encoding:content-transfer-encoding:in-reply-to:

references; bh=H/rfoo7aIBHLXN5x5uVxj7oBQD/SWlJpL11uOiFN5y8=;

b=ZyKup9hI3z/r+4HP8lVz9oRqEmIM4jfGhIge0lUQIXLeZzNmKrxlH5zYZ/jQKsggseiWbE

mCXYCv65f/3K+kRpnz66B+dIerVqhIg4sljdM1G+WcvbnTeEBS+Erz/BgEwStZs5NeWQ+h

F04Fk0o/yVgUFxxfkatgdxhS434W1F/0BQ2COIrbqq44VRxG5L7MzOhhwJIiIRZ2RbRG3c

3nUNINp/r312wuMIrxy+dOTSLMxYja357oGoevZn2xHKtmu49qFGknt2iAf3xb66bmOfOj

xyN7kWbweg6KizTbdfN3DY6la/OcWwCW9QcCCw4AkvwYWw3egvqrWXNVtTvbCA==

From: =?UTF-8?B?44Oh44O844Or566h55CGLQ==?=??????.jp <????????@blue.plala.or.jp>

To: ???????@??????.jp

Subject: [SPAM] =?UTF-8?B?44GC44Gq44Gf44Gu44Oh44O844Or44Oc44OD44Kv44K544Gv5LuK5pel6Z2e44Ki44Kv44OG44Kj44OW44Go44GX44Gm44Oe44O844Kv44GV44KM44G+44GX44GfLg==?=8/11/2024 7:49:20 p.m..1.

Date: 11 Aug 2024 19:49:23 -0400

Message-ID: <20240811194920.0015E595791F9205@blue.plala.or.jp>

MIME-Version: 1.0

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

XSRV-Filter: ???????@??????.jp

X-Spam-Prev-Subject: =?UTF-8?B?44GC44Gq44Gf44Gu44Oh44O844Or44Oc44OD44Kv44K544Gv5LuK5pel6Z2e44Ki44Kv44OG44Kj44OW44Go44GX44Gm44Oe44O844Kv44GV44KM44G+44GX44GfLg==?=8/11/2024 7:49:20 p.m..1.

フィッシングメール

Posted by dotいが