フィッシングメール＠HostPapa

今年の3月くらいから、HostPapaからのフィッシングメールがすごい勢いで送られてくる。すごすぎて逆に楽しくなっちゃったので、ちょっと記録してみた。

HostPapaとは
HostPapa発フィッシングメールの特徴
HostPapaのフィッシング送信IPアドレス帯
Rspamdでの拒否設定
受信ログ
- Rspamdログ
- 送信元IPアドレス一覧
フィッシングサイト
通報窓口

HostPapaとは

HostPapaは、低価格を売りにした米国系のホスティングサービス。

高品質ではなく低価格を売りにしている時点で、色々と察するものがあります。

HostPapa発フィッシングメールの特徴

送信元ドメインは、いずれも「service.[英数字].{cn|cc|top}」の形式で、DNS登録されている。
送信元のIPアドレスは、HostPapaの管轄。
送信元のIPアドレスは多数あり、毎回違うところから送信する。

この「毎回違うIPから送信する」というのがやっかいで、送信元のIPを遮断してもあまり意味がなく、いたちごっこが続きます。

HostPapaのフィッシング送信IPアドレス帯

フィッシングを送信するIPアドレス帯は、現在のところ把握している限りでは次のものです。なお、カッコ内にColoCrossingと書いたものは、HostPapaに買収された会社のものです。

23.94.0.0/15 (ColoCrossing)
23.226.128.0/20
67.215.248.0/21
75.127.0.0/20 (ColoCrossing)
96.8.112.0/20 (ColoCrossing)
104.168.0.0/17 (ColoCrossing)
107.172.0.0/14 (ColoCrossing)
172.245.0.0/16 (ColoCrossing)
192.3.0.0/16 (ColoCrossing)
192.210.128.0/17 (ColoCrossing)
192.227.128.0/17 (ColoCrossing)
198.12.64.0/18 (ColoCrossing)
198.23.128.0/17 (ColoCrossing)
198.46.128.0/17 (ColoCrossing)
204.44.64.0/18

上記はいずれもHostPapa管轄のアドレス帯。

上記IPを遮断すれば、HostPapa発のフィッシングメールはほぼ根絶できます。フィッシング送信元じゃないサイトも全部ひっくるめて遮断しちゃいますが、個人サーバーなら実質的に困らないと思います。

通信できずに送信側にリトライとタイムアウトで無駄に時間をとらせると言う意味で、これが一番ささやかながらも意趣返しできる方法ではないかと。

Rspamdでの拒否設定

Rspamdで拒否する場合には、送信元アドレスが次の正規表現に一致したときスコアを追加するよう設定しておけば、ほぼもれなくrejectできます。

@service\.[a-zA-Z0-9]+\.cn
@service\.[a-zA-Z0-9]+\.cc
@service\.[a-zA-Z0-9]+\.top

具体的には、次のように設定します。

blacklist_sender_regexp.map作成

送信元を正規表現で指定するファイルが存在しなければ、次のように作成する。

# cd /usr/local/etc/rspamd/maps.d/
# sudo touch blacklist_sender_regexp.map
# sudo chown rspamd:rspamd blacklist_sender_regexp.map

multimap.conf変更

/usr/local/etc/rspamd/local.d/multimap.confを編集し、次の行を追加。

# メールアドレス正規表現で、「拒否」
BLACKLIST_SENDER_REGEXP {
        type = "from";
        filter = "email:addr";
        symbol = "BLACKLIST_SENDER";
        one_shot = true;
        regexp = true;
        map = "${LOCAL_CONFDIR}/maps.d/blacklist_sender_regexp.map";
        score = 5.0;
}

scoreの値は、運用次第で適宜変更する。

Rspamd再起動

Rspamdを再起動する。

# sudo service rspamd reload

フィッシング送信元アドレスを登録

/usr/local/etc/rspamd/maps.d/blacklist_sender_regexp.mapを編集し、次の行を追加。

/@service\.[a-zA-Z0-9]+\.cn$/ #HostPapa系フィッシング
/@service\.[a-zA-Z0-9]+\.cc$/ #HostPapa系フィッシング
/@service\.[a-zA-Z0-9]+\.top$/ #HostPapa系フィッシング

Web UIのConfigurationから設定してもよい。

受信ログ

Rspamdログ

参考までに、2025年4月4日16時〜2025年4月17日12時までの約2週間に受信したフィッシングのログは以下のとおり。全156件。気が向いたら更新するかも。

Message-ID: 20250404072447485515@service.pngonv.cn
IP: 107.174.35.87
IP Owner: HostPapa,ColoCrossing
From: user.gas-oppsmif@service.pngonv.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ（自動配信メール）
Date: 2025/4/4 16:27:05

Message-ID: 20250404145126555071@service.gmkc5h.cn
IP: 192.210.140.17
IP Owner: HostPapa,ColoCrossing
From: ana-rsvcvm@service.gmkc5h.cn
Subject: 【重要】ANAマイレージクラブ：マイル加算手続きのご案内
Date: 2025/4/4 16:27:30

Message-ID: 20250404093952081515@service.sbzug.cn
IP: 198.46.226.140
IP Owner: HostPapa,ColoCrossing
From: mail.orico-uinhvk@service.sbzug.cn
Subject: 【eオリコ】カードご利用のお知らせ（確定）
Date: 2025/4/4 16:28:28

Message-ID: 20250404120421075243@service.nfcxz.cn
IP: 107.174.235.242
IP Owner: HostPapa,ColoCrossing
From: user.ana-nyvvwoc@service.nfcxz.cn
Subject: ANAマイレージクラブ マイル加算のお知らせ
Date: 2025/4/4 16:28:29

Message-ID: 20250404115425875635@service.ogncj.cn
IP: 107.174.70.147
IP Owner: HostPapa,ColoCrossing
From: sever.nhk-fnzith@service.ogncj.cn
Subject: 【重要】NHK受信料のお支払いについてのお知らせ
Date: 2025/4/4 16:30:43

Message-ID: 20250404091941136042@service.fufjo.cn
IP: 107.174.247.41
IP Owner: HostPapa,ColoCrossing
From: member.visa-xbttdqh@service.fufjo.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/4 16:31:46

Message-ID: 20250404095723065350@service.xyd22.cc
IP: 107.174.237.26
IP Owner: HostPapa,ColoCrossing
From: user.gas-drwbvnm@service.xyd22.cc
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ（自動配信メール）
Date: 2025/4/4 16:33:35

Message-ID: 20250404065718242207@service.hdntwn.cn
IP: 107.175.53.173
IP Owner: HostPapa,ColoCrossing
From: visajp.cwbqion@service.hdntwn.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/4 16:36:27

Message-ID: 20250404215933134003@service.anook.cn
IP: 107.172.61.243
IP Owner: HostPapa,ColoCrossing
From: nhk-wxyotap@service.anook.cn
Subject: 【重要】NHK受信料のお支払いについてのお知らせ
Date: 2025/4/4 21:59:40

Message-ID: 20250405023552716400@service.xrqzk.cn
IP: 23.226.136.133
IP Owner: HostPapa
From: ana.magazine-qosghq@service.xrqzk.cn
Subject: 【重要】ANAマイレージクラブ：マイル加算手続きのご案内
Date: 2025/4/5 2:35:56

Message-ID: 20250405024027010472@service.gmks2i.cn
IP: 107.175.172.150
IP Owner: HostPapa,ColoCrossing
From: mail.paypay-bwqeta@service.gmks2i.cn
Subject: ご利用可能額が戻りました
Date: 2025/4/5 3:40:29

Message-ID: 20250405104948328062@service.vekmfq.cn
IP: 23.94.95.214
IP Owner: HostPapa,ColoCrossing
From: inf.paypay-pipxjgg@service.vekmfq.cn
Subject: 4月の請求金額のお知らせ
Date: 2025/4/5 11:49:54

Message-ID: 20250405115126810334@service.shykikj.cn
IP: 198.23.136.159
IP Owner: HostPapa,ColoCrossing
From: user.ana-uhmeuia@service.shykikj.cn
Subject: 【重要】ANAマイレージクラブ：マイル加算手続きのご案内
Date: 2025/4/5 11:51:29

Message-ID: 20250405130455230360@service.qpnwe.cn
IP: 107.174.35.91
IP Owner: HostPapa,ColoCrossing
From: my.gas-okdfynlhh@service.qpnwe.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ お客様のお支払い方法が承認されません
Date: 2025/4/5 13:05:02

Message-ID: 20250405141752104556@service.rfrue.cn
IP: 172.245.224.49
IP Owner: HostPapa,ColoCrossing
From: yodobashi-winsmzwn@service.rfrue.cn
Subject: ヨドバシドットコム：「お客様情報」変更依頼受付のご連絡
Date: 2025/4/5 14:17:59

Message-ID: 20250405144259706155@service.jocae.cn
IP: 172.245.205.185
IP Owner: HostPapa,ColoCrossing
From: visa.gfwchqwo@service.jocae.cn
Subject: 【VISAカード】重要なお知らせ
Date: 2025/4/5 14:43:07

Message-ID: 20250405162643078677@service.isiqv.cn
IP: 204.44.70.111
IP Owner: HostPapa
From: applestoer-krygd@service.isiqv.cn
Subject: ご利用中のサービス継続に必要な情報をご確認ください
Date: 2025/4/5 16:26:53

Message-ID: 20250405170146005062@service.zgivz.cn
IP: 23.95.189.180
IP Owner: HostPapa,ColoCrossing
From: mail.apple-yseuu@service.zgivz.cn
Subject: サービス中断のおそれに関するご連絡
Date: 2025/4/5 17:01:52

Message-ID: 20250405171522845164@service.gmky2m.cn
IP: 192.3.157.75
IP Owner: HostPapa,ColoCrossing
From: user.viewcard-wwjtvddh@service.gmky2m.cn
Subject: ご利用明細更新のお知らせ
Date: 2025/4/5 17:15:28

Message-ID: 20250405182155208116@service.cezitpleh.top
IP: 192.3.53.85
IP Owner: HostPapa,ColoCrossing
From: user.apple-sfalxiun@service.cezitpleh.top
Subject: ご注文の変更確認
Date: 2025/4/5 18:22:01

Message-ID: 20250406033116333022@service.gmku8u.cn
IP: 192.227.212.33
IP Owner: HostPapa,ColoCrossing
From: amazon-gdslz@service.gmku8u.cn
Subject: amazon.co.jp：パスワード回復
Date: 2025/4/6 4:31:19

Message-ID: 20250406062056831464@service.jjopk.cn
IP: 216.144.229.116
IP Owner: HostPapa
From: user.paypay-wuapyd@service.jjopk.cn
Subject: 4月の請求金額のお知らせ
Date: 2025/4/6 6:21:11

Message-ID: 20250406064029438325@service.jwkgg.cn
IP: 23.94.84.114
IP Owner: HostPapa,ColoCrossing
From: member.viewcard-dthajxm@service.jwkgg.cn
Subject: 【ビューカード】次回お引落日は4月11日（金）です。
Date: 2025/4/6 6:40:40

Message-ID: 20250406073648850214@service.fmky9c.cn
IP: 172.245.185.103
IP Owner: HostPapa,ColoCrossing
From: visajp.cblzkqg@service.fmky9c.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/6 7:36:51

Message-ID: 20250406091242407120@service.jnrys.cn
IP: 23.94.84.113
IP Owner: HostPapa,ColoCrossing
From: info.sbisec-zwsqzz@service.jnrys.cn
Subject: 【重要】SBI証券オンラインサービスご利用条件変更のご案内 – ご確認ください
Date: 2025/4/6 9:12:47

Message-ID: 20250406095206462083@service.hvahknagf.top
IP: 107.173.86.25
IP Owner: HostPapa,ColoCrossing
From: user.visa-dltixnl@service.hvahknagf.top
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/6 9:52:11

Message-ID: 20250406103739086213@service.tytnri.cn
IP: 198.46.248.125
IP Owner: HostPapa,ColoCrossing
From: user.amazon-bcoje@service.tytnri.cn
Subject: Amazon.co.jp お客様のご注文がキャンセルされたことをお知らせいたします
Date: 2025/4/6 11:37:47

Message-ID: 20250406123328312844@service.laikr.cc
IP: 172.245.196.186
IP Owner: HostPapa,ColoCrossing
From: user.visa-juxzqhay@service.laikr.cc
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/6 12:33:31

Message-ID: 20250406144224408863@service.xhvzv.cn
IP: 23.95.91.145
IP Owner: HostPapa,ColoCrossing
From: sever.apple-bmdlljm@service.xhvzv.cn
Subject: ご注文の変更確認
Date: 2025/4/6 14:42:45

Message-ID: 20250406165654846614@service.hmkn1m.cn
IP: 192.3.194.181
IP Owner: HostPapa,ColoCrossing
From: info.saisoncard-pyveztxp@service.hmkn1m.cn
Subject: 口座取引制限のご案内：セゾンカード情報を更新してください
Date: 2025/4/6 16:56:59

Message-ID: 20250406175746241840@service.rowzv.cn
IP: 198.12.108.124
IP Owner: HostPapa,ColoCrossing
From: visajp.naxrnqm@service.rowzv.cn
Subject: 【重要なお知らせ】VISAカード本人情報緊急確認
Date: 2025/4/6 17:57:49

Message-ID: 20250406202010413283@service.vekmfq.cn
IP: 23.94.95.214
IP Owner: HostPapa,ColoCrossing
From: mail.sbisec-voneupba@service.vekmfq.cn
Subject: 【重要】オンラインサービスご利用条件の変更について（要確認）
Date: 2025/4/6 20:20:20

Message-ID: 20250406213556513472@service.lrgii.cn
IP: 107.172.0.10
IP Owner: HostPapa,ColoCrossing
From: paypay.uojxjg@service.lrgii.cn
Subject: ご利用可能額が戻りました
Date: 2025/4/6 21:36:34

Message-ID: 20250406231845031317@service.laikr.cc
IP: 172.245.196.186
IP Owner: HostPapa,ColoCrossing
From: mail.sbisec-incxxqrn@service.laikr.cc
Subject: 【重要】オンラインサービスご利用条件の変更について（要確認）
Date: 2025/4/6 23:18:49

Message-ID: 20250407033724813000@service.hgnihe.cn
IP: 107.175.115.55
IP Owner: HostPapa,ColoCrossing
From: user.visa-vuxtwlsk@service.hgnihe.cn
Subject: 【VISAカード】重要なお知らせ
Date: 2025/4/7 3:37:29

Message-ID: 20250407014150568586@qinquanmy.com
IP: 107.174.159.20
IP Owner: HostPapa,ColoCrossing
From: no-reply@qinquanmy.com
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/7 3:41:53

Message-ID: 20250407090144446607@service.hcfza.cn
IP: 192.227.252.114
IP Owner: HostPapa,ColoCrossing
From: applestoer-hqogni@service.hcfza.cn
Subject: ご利用中のサービス継続に必要な情報をご確認ください
Date: 2025/4/7 9:01:50

Message-ID: 20250407093956806225@service.drsyk.cn
IP: 107.174.121.147
IP Owner: HostPapa,ColoCrossing
From: eki-net.krilgkh@service.drsyk.cn
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/7 9:40:00

Message-ID: 20250407171545656421@service.kqmrz.cn
IP: 107.173.135.86
IP Owner: HostPapa,ColoCrossing
From: mail.gas-wccuvlx@service.kqmrz.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ
Date: 2025/4/7 17:15:49

Message-ID: 20250407171605173080@service.ptota.cn
IP: 172.245.154.40
IP Owner: HostPapa,ColoCrossing
From: visa.askpxb@service.ptota.cn
Subject: 【VISAカード】重要なお知らせ
Date: 2025/4/7 17:16:12

Message-ID: 20250407180601142457@service.lcqrn.cn
IP: 23.95.246.132
IP Owner: HostPapa,ColoCrossing
From: info.mastercard-ogvmge@service.lcqrn.cn
Subject: 【重要】セキュリティ認証に関する重要なお知らせ
Date: 2025/4/7 18:06:04

Message-ID: 20250407191433252645@service.gmkb9h.cn
IP: 172.245.95.216
IP Owner: HostPapa,ColoCrossing
From: visa.robyzb@service.gmkb9h.cn
Subject: 【VISAカード 】現在カードのご利用が一時停止されました
Date: 2025/4/7 19:14:38

Message-ID: 20250408034115785757@service.gujyq.cn
IP: 192.210.140.9
IP Owner: HostPapa,ColoCrossing
From: sbi-sec.snwmlzz@service.gujyq.cn
Subject: 【重要】4月6日以降のオンラインサービスログイン時の確認画面表示について【SBI証券】
Date: 2025/4/8 3:41:18

Message-ID: 20250408044624804755@service.eitxd.cn
IP: 107.174.66.195
IP Owner: HostPapa,ColoCrossing
From: mail.etcnet-diouuz@service.eitxd.cn
Subject: 【ETC】決済方法の確認が必要です
Date: 2025/4/8 4:46:30

Message-ID: 20250408050932215108@service.agchf.cn
IP: 104.168.64.122
IP Owner: HostPapa,ColoCrossing
From: mail.etcnet-iyrafgip@service.agchf.cn
Subject: 【ETC】決済方法の確認が必要です
Date: 2025/4/8 5:09:35

Message-ID: 20250408051154064551@service.iuiwc.cn
IP: 204.44.70.112
IP Owner: HostPapa
From: mail.eki-net-mplqzyi@service.iuiwc.cn
Subject: 【見逃し厳禁】必要な手続きが未完了です
Date: 2025/4/8 5:11:59

Message-ID: 20250408054817368028@service.ogncj.cn
IP: 107.174.70.147
IP Owner: HostPapa,ColoCrossing
From: member.gas-btvodyxj@service.ogncj.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ（自動配信メール）
Date: 2025/4/8 5:48:20

Message-ID: 20250408061057861684@service.gmkw1g.cn
IP: 192.227.249.151
IP Owner: HostPapa,ColoCrossing
From: user.mastercard-neafs@service.gmkw1g.cn
Subject: 【重要】セキュリティ認証に関する重要なお知らせ
Date: 2025/4/8 6:11:00

Message-ID: 20250408063057068411@service.uemiu.cn
IP: 192.210.186.167
IP Owner: HostPapa,ColoCrossing
From: mail.visa-vckbcpp@service.uemiu.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/8 6:31:01

Message-ID: 20250408075001287740@service.ujenb.cn
IP: 204.44.101.128
IP Owner: HostPapa
From: info.sbisec-fzevhon@service.ujenb.cn
Subject: 【重要】SBI証券オンラインサービスご利用条件変更のご案内 – ご確認ください
Date: 2025/4/8 7:50:08

Message-ID: 20250408074322202710@service.iaufi.cn
IP: 172.245.89.54
IP Owner: HostPapa,ColoCrossing
From: mail.rakuten-crcuawc@service.iaufi.cn
Subject: [楽天証券]現在ご利用が制限されています
Date: 2025/4/8 8:43:25

Message-ID: 20250408110114716466@service.zgivz.cn
IP: 23.95.189.180
IP Owner: HostPapa,ColoCrossing
From: visajp.tcnaz@service.zgivz.cn
Subject: 【重要なお知らせ】VISAカード本人情報緊急確認
Date: 2025/4/8 11:01:18

Message-ID: 20250408120932802752@service.zdyto.cn
IP: 75.127.13.144
IP Owner: HostPapa,ColoCrossing
From: eki-net.rpcud@service.zdyto.cn
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/8 12:09:38

Message-ID: 20250408112005450335@service.cdonm.cn
IP: 107.173.125.105
IP Owner: HostPapa,ColoCrossing
From: info.rakuten-nqtmsioc@service.cdonm.cn
Subject: 重要なお知らせ｜2025年3月31日以降のログイン時に《サイトご利用にあたってのご留意事項》の確認が必要です
Date: 2025/4/8 12:20:08

Message-ID: 20250408122053578822@service.qpsjn.cn
IP: 172.245.180.231
IP Owner: HostPapa,ColoCrossing
From: member.gas-eejcoxz@service.qpsjn.cn
Subject: 【myTOKYOGAS】ご請求料金確定
Date: 2025/4/8 12:21:03

Message-ID: 20250408131202735484@service.sheow.cn
IP: 107.174.37.107
IP Owner: HostPapa,ColoCrossing
From: uesr.sbisec-bzmtxehvy@service.sheow.cn
Subject: 【重要】オンラインサービスご利用条件の変更について（要確認）
Date: 2025/4/8 13:12:06

Message-ID: 20250408131836543535@service.xlljo.cn
IP: 216.144.233.127
IP Owner: HostPapa
From: mail.rakuten-qixmny@service.xlljo.cn
Subject: [楽天証券]現在ご利用が制限されています
Date: 2025/4/8 14:18:43

Message-ID: 20250408144527462424@service.dkbid.cn
IP: 107.173.51.210
IP Owner: HostPapa,ColoCrossing
From: etc-net.ypigcops@service.dkbid.cn
Subject: 【ETC】重要なお知らせ
Date: 2025/4/8 14:45:33

Message-ID: 20250408145135845610@service.xgior.cn
IP: 107.172.8.47
IP Owner: HostPapa,ColoCrossing
From: info.gas-fqojiktp@service.xgior.cn
Subject: 【myTOKYOGAS】ご請求料金確定
Date: 2025/4/8 14:51:48

Message-ID: 20250408150440553770@service.xgxba.cn
IP: 216.144.233.126
IP Owner: HostPapa
From: user.visa-fvdgurb@service.xgxba.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/8 15:04:43

Message-ID: 20250408151606452253@service.fmkx7f.cn
IP: 172.245.185.100
IP Owner: HostPapa,ColoCrossing
From: mastercard-txglsq@service.fmkx7f.cn
Subject: 【MasterCardカード】:ご利用状況確認のお願い
Date: 2025/4/8 15:16:10

Message-ID: 20250408152943433008@service.emqqq.cn
IP: 107.174.69.141
IP Owner: HostPapa,ColoCrossing
From: user.mastercard-pxiaiko@service.emqqq.cn
Subject: 【重要】セキュリティ認証に関する重要なお知らせ
Date: 2025/4/8 15:29:47

Message-ID: 20250408181057313467@service.wotsx.cn
IP: 204.44.87.124
IP Owner: HostPapa
From: info.eki-net-udbtjtgef@service.wotsx.cn
Subject: 【見逃し厳禁】必要な手続きが未完了です
Date: 2025/4/8 18:11:00

Message-ID: 20250409015627780482@service.lopjx.cn
IP: 104.168.57.111
IP Owner: HostPapa,ColoCrossing
From: eki-net.trnyjyp@service.lopjx.cn
Subject: 【見逃し厳禁】必要な手続きが未完了です
Date: 2025/4/9 1:56:35

Message-ID: 20250409031008304823@service.ezrpt.cn
IP: 107.174.71.148
IP Owner: HostPapa,ColoCrossing
From: mail.amazon-wubclpmb@service.ezrpt.cn
Subject: お支B方法に?}があり、プライム特典をご利用いただけない状rです。
Date: 2025/4/9 4:10:12

Message-ID: 20250409042952784810@service.yqzld.cn
IP: 23.94.84.5
IP Owner: HostPapa,ColoCrossing
From: visa.twqrib@service.yqzld.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/9 4:29:59

Message-ID: 20250409045229885425@service.jjyxz.cn
IP: 192.227.212.37
IP Owner: HostPapa,ColoCrossing
From: mail.eki-net-wmiukot@service.jjyxz.cn
Subject: カード連携で「えきねっと」利用時のポイント2倍！お得な特典をゲット
Date: 2025/4/9 4:52:33

Message-ID: 20250409052649365751@service.khgiz.cn
IP: 216.144.229.121
IP Owner: HostPapa
From: info.etc-jadtd@service.khgiz.cn
Subject: ETCマイレージポイントの有効期限が切れます。
Date: 2025/4/9 5:26:53

Message-ID: 20250409062402615261@service.lcqrn.cn
IP: 23.95.246.132
IP Owner: HostPapa,ColoCrossing
From: mail.etcnet-gajafjjoq@service.lcqrn.cn
Subject: ETCマイレージポイントの有効期限が切れます。
Date: 2025/4/9 6:24:05

Message-ID: 20250409062533673413@service.cuetn.cn
IP: 107.173.15.220
IP Owner: HostPapa,ColoCrossing
From: sever.mastercard-qzjwcub@service.cuetn.cn
Subject: 【MasterCardカード】:会費に関する緊急のお知らせ
Date: 2025/4/9 6:25:44

Message-ID: 20250409060506586518@service.gmiyr.cn
IP: 172.245.81.159
IP Owner: HostPapa,ColoCrossing
From: amazon-iqejrjc@service.gmiyr.cn
Subject: お支B方法に?}があり、プライム特典をご利用いただけない状rです。
Date: 2025/4/9 7:05:10

Message-ID: 20250409080228185726@service.fmkz5m.cn
IP: 172.245.208.164
IP Owner: HostPapa,ColoCrossing
From: info.etc-zgkllfm@service.fmkz5m.cn
Subject: ETCマイレージポイントの有効期限が切れます。
Date: 2025/4/9 8:02:57

Message-ID: 20250409081726561815@service.vbwtx.cn
IP: 192.227.232.113
IP Owner: HostPapa,ColoCrossing
From: mail.gas-picawpm@service.vbwtx.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ
Date: 2025/4/9 8:17:30

Message-ID: 20250409082607368432@service.x1196.cn
IP: 107.173.118.186
IP Owner: HostPapa,ColoCrossing
From: visa.ndbmct@service.x1196.cn
Subject: 【VISAカード】重要なお知らせ
Date: 2025/4/9 8:26:11

Message-ID: 20250409092108778857@service.kqmrz.cn
IP: 107.173.135.86
IP Owner: HostPapa,ColoCrossing
From: sever.eki-net-pcsvydkiy@service.kqmrz.cn
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/9 9:21:36

Message-ID: 20250409095628888016@service.lmzof.cn
IP: 67.215.249.113
IP Owner: HostPapa
From: mail.mastercard-depmiwgt@service.lmzof.cn
Subject: 【至急】Mastercardセキュリティ認証手続きのご案内
Date: 2025/4/9 9:56:34

Message-ID: 20250409104732217446@service.iaufi.cn
IP: 172.245.89.54
IP Owner: HostPapa,ColoCrossing
From: amazon-xiqihqvluv@service.iaufi.cn
Subject: お支B方法に?}があり、プライム特典をご利用いただけない状rです。
Date: 2025/4/9 11:47:38

Message-ID: 20250409114828173628@service.spduz.cn
IP: 192.227.191.40
IP Owner: HostPapa,ColoCrossing
From: user.visa-fguoqgyb@service.spduz.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/9 11:48:32

Message-ID: 20250409115210464183@service.psnjx.cn
IP: 172.245.154.188
IP Owner: HostPapa,ColoCrossing
From: info.gas-gsmsriw@service.psnjx.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ（自動配信メール）
Date: 2025/4/9 11:52:19

Message-ID: 20250409130523484368@service.sheow.cn
IP: 107.174.37.107
IP Owner: HostPapa,ColoCrossing
From: user.gas-ntkivopx@service.sheow.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ お客様のお支払い方法が承認されません
Date: 2025/4/9 13:05:41

Message-ID: 20250409131829245852@service.gyisb.cn
IP: 107.175.189.223
IP Owner: HostPapa,ColoCrossing
From: mastercard-bcmilxwz@service.gyisb.cn
Subject: 【MasterCardカード】:ご利用状況確認のお願い
Date: 2025/4/9 13:18:39

Message-ID: 20250410040827166005@service.vewesl.cn
IP: 23.94.139.139
IP Owner: HostPapa,ColoCrossing
From: sever.eposcard-mwlhosu@service.vewesl.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/10 4:08:31

Message-ID: 20250410041458174533@service.sntvk.cn
IP: 192.227.172.179
IP Owner: HostPapa,ColoCrossing
From: user.jcb-gyitjqg@service.sntvk.cn
Subject: 【再掲】本人確認認証のご案内について
Date: 2025/4/10 5:15:26

Message-ID: 20250410044533680764@service.xyd22.cc
IP: 107.174.237.26
IP Owner: HostPapa,ColoCrossing
From: user.jcb-ronpxco@service.xyd22.cc
Subject: セキュリティ審査結果とカード利用制限について
Date: 2025/4/10 5:45:40

Message-ID: 20250410060518610153@service.xyd28.cc
IP: 107.174.39.194
IP Owner: HostPapa,ColoCrossing
From: eposcard-ltqcbvkz@service.xyd28.cc
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/10 6:05:28

Message-ID: 20250410054706631465@service.jjopk.cn
IP: 216.144.229.116
IP Owner: HostPapa
From: info.my.jcb-fojicowkb@service.jjopk.cn
Subject: 【再掲】本人確認認証のご案内について
Date: 2025/4/10 6:47:11

Message-ID: 20250410070055831844@service.fyrnx.cn
IP: 107.174.241.124
IP Owner: HostPapa,ColoCrossing
From: info.eposcard-tbummdm@service.fyrnx.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/10 7:00:59

Message-ID: 20250410150914687723@service.xyd36.cc
IP: 107.174.88.166
IP Owner: HostPapa,ColoCrossing
From: jaccs.nhgqqam@service.xyd36.cc
Subject: <JACCS>2025年4月度お支払い金額確定のご案内
Date: 2025/4/10 16:09:18

Message-ID: 20250410160538302360@service.etibo.cn
IP: 107.174.70.133
IP Owner: HostPapa,ColoCrossing
From: jaccs3.mail-svrlefk@service.etibo.cn
Subject: <JACCS>2025年4月度お支払い金額確定のご案内
Date: 2025/4/10 17:05:42

Message-ID: 20250410161917158451@service.teyzr.cn
IP: 192.3.231.165
IP Owner: HostPapa,ColoCrossing
From: user-jaccs.qvbhbx@service.teyzr.cn
Subject: <JACCS>2025年4月度お支払い金額確定のご案内
Date: 2025/4/10 17:19:26

Message-ID: 20250412234953233747@service.bfwez.cn
IP: 107.172.142.36
IP Owner: HostPapa,ColoCrossing
From: sever.eposcard-jjrtzfpp@service.bfwez.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/13 0:50:03

Message-ID: 20250413010105454844@service.ejint.cn
IP: 107.174.66.202
IP Owner: HostPapa,ColoCrossing
From: use.eki-net.mfma@service.ejint.cn
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/13 1:01:10

Message-ID: 20250413001333656813@service.frbbd.cn
IP: 107.174.35.57
IP Owner: HostPapa,ColoCrossing
From: eposcard-hdcsrq@service.frbbd.cn
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/13 1:13:41

Message-ID: 20250413024936415378@service.iuiwc.cn
IP: 204.44.70.112
IP Owner: HostPapa
From: eposcard-pdmmu@service.iuiwc.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/13 3:49:42

Message-ID: 20250413042534757624@service.drsyk.cn
IP: 107.174.121.147
IP Owner: HostPapa,ColoCrossing
From: eki-net.ebya@service.drsyk.cn
Subject: お支払い情報のご確認と更新のお願い【えきねっと】
Date: 2025/4/13 4:25:39

Message-ID: 20250413055950148655@service.xpbas.cn
IP: 216.144.233.128
IP Owner: HostPapa
From: mail.etc-kvfjr@service.xpbas.cn
Subject: 【ETC】決済方法の確認が必要です
Date: 2025/4/13 6:00:13

Message-ID: 20250413063641647638@service.ltwuv.cn
IP: 172.245.72.131
IP Owner: HostPapa,ColoCrossing
From: etc-net.mspsvkf@service.ltwuv.cn
Subject: ＥＴＣマイレージサービス仮登録完了
Date: 2025/4/13 6:36:47

Message-ID: 20250413075105282823@service.txtan.cn
IP: 198.46.228.219
IP Owner: HostPapa,ColoCrossing
From: mastercard-ntdymv@service.txtan.cn
Subject: 【MasterCardカード】:ご利用状況確認のお願い
Date: 2025/4/13 7:51:15

Message-ID: 20250413082908616020@service.tgaf.cn
IP: 23.94.40.136
IP Owner: HostPapa,ColoCrossing
From: user-etc.uzifq@service.tgaf.cn
Subject: 【ETC】重要なお知らせ
Date: 2025/4/13 8:29:14

Message-ID: 20250414065247352801@service.nfcxz.cn
IP: 107.174.235.242
IP Owner: HostPapa,ColoCrossing
From: info.eposcard-alpdfvt@service.nfcxz.cn
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/14 6:52:57

Message-ID: 20250414065734678062@service.zygtq.cn
IP: 67.215.249.12
IP Owner: HostPapa
From: info.eposcard-encinuip@service.zygtq.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/14 6:57:47

Message-ID: 20250414070236618860@service.neenv.cn
IP: 107.173.25.113
IP Owner: HostPapa,ColoCrossing
From: info.sbisec-pgfxhtab@service.neenv.cn
Subject: 【重要】オンラインサービスご利用条件の変更について（要確認）
Date: 2025/4/14 7:02:43

Message-ID: 20250414074450416558@service.lwbuj.cn
IP: 192.3.1.30
IP Owner: HostPapa,ColoCrossing
From: no-reply.tkhads@service.lwbuj.cn
Subject: 【重要】SBI証券オンラインサービスご利用条件変更のご案内 – ご確認ください
Date: 2025/4/14 7:44:56

Message-ID: 20250414070914186462@service.iaufi.cn
IP: 172.245.89.54
IP Owner: HostPapa,ColoCrossing
From: no-reply.sftuhxk@service.iaufi.cn
Subject: ご利用環境の事前確認と制度運用について
Date: 2025/4/14 8:09:22

Message-ID: 20250414082304511637@service.rdkgf.cn
IP: 172.245.208.170
IP Owner: HostPapa,ColoCrossing
From: eposcard-xxtkuyib@service.rdkgf.cn
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/14 8:23:13

Message-ID: 20250414105854847763@service.qcryp.cn
IP: 172.245.180.225
IP Owner: HostPapa,ColoCrossing
From: mail.sbisec-ifqiff@service.qcryp.cn
Subject: 【重要】SBI証券オンラインサービスご利用条件の変更について
Date: 2025/4/14 10:59:00

Message-ID: 20250414110014102466@service.jckkn.cn
IP: 192.227.212.36
IP Owner: HostPapa,ColoCrossing
From: no-reply.zhgldlauk@service.jckkn.cn
Subject: 【野村證券】制度変更に関するご確認のお願い
Date: 2025/4/14 12:00:21

Message-ID: 20250414114626512745@service.whqju.cn
IP: 204.44.70.119
IP Owner: HostPapa
From: info.nomura-hgyflm@service.whqju.cn
Subject: 【野村證券】制度変更に関するご確認のお願い
Date: 2025/4/14 12:46:32

Message-ID: 20250415022145175287@service.fmkx1c.cn
IP: 107.175.178.218
IP Owner: HostPapa,ColoCrossing
From: eposcard-xyyczdwv@service.fmkx1c.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/15 2:21:57

Message-ID: 20250415032708316737@service.tffxo.cn
IP: 198.23.134.111
IP Owner: HostPapa,ColoCrossing
From: info.nomura-agsnfrao@service.tffxo.cn
Subject: ご利用環境の事前確認と制度運用について
Date: 2025/4/15 4:27:14

Message-ID: 20250415033026757733@service.tdmfe.cn
IP: 192.3.158.250
IP Owner: HostPapa,ColoCrossing
From: mail.nomura-umrhimrv@service.tdmfe.cn
Subject: 【野村證券】制度変更に関するご確認のお願い
Date: 2025/4/15 4:30:32

Message-ID: 20250415051432264410@service.svgej.cn
IP: 192.227.249.98
IP Owner: HostPapa,ColoCrossing
From: visajp.tpmmowg@service.svgej.cn
Subject: 【重要なお知らせ】VISAカード本人情報緊急確認
Date: 2025/4/15 5:14:40

Message-ID: 20250415060000814226@service.agchf.cn
IP: 104.168.64.122
IP Owner: HostPapa,ColoCrossing
From: inf.orico-bcgwhi@service.agchf.cn
Subject: 【eオリコ】銀行振込支払い内容確認のご案内
Date: 2025/4/15 6:00:07

Message-ID: 20250415064613055176@service.sbzug.cn
IP: 107.174.37.106
IP Owner: HostPapa,ColoCrossing
From: jaccs3.mail-nfoxigi@service.sbzug.cn
Subject: 分割・リボ変更締切せまる！受付は4/25(金)12時まで！
Date: 2025/4/15 6:46:20

Message-ID: 20250415064905646558@service.vkzyr.cn
IP: 204.44.123.128
IP Owner: HostPapa
From: user.visa-zeqlfr@service.vkzyr.cn
Subject: 【VISAカード 】現在カードのご利用が一時停止されました
Date: 2025/4/15 6:49:15

Message-ID: 20250415083302686226@service.hfwtnt.cn
IP: 172.245.246.47
IP Owner: HostPapa,ColoCrossing
From: no-reply.ykihxwlv@service.hfwtnt.cn
Subject: 【重要】オンラインサービスご利用条件の変更について（要確認）
Date: 2025/4/15 8:33:11

Message-ID: 20250415090501332166@service.aemlp.cn
IP: 104.168.102.227
IP Owner: HostPapa,ColoCrossing
From: e-servic.yzwymmdua@service.aemlp.cn
Subject: 【eオリコ】カードご利用のお知らせ（確定）
Date: 2025/4/15 9:05:07

Message-ID: 20250415092154330555@service.czkek.cn
IP: 107.173.202.212
IP Owner: HostPapa,ColoCrossing
From: jaccs.mail-vkcctmqdo@service.czkek.cn
Subject: <JACCS>2025年4月度お支払い金額確定のご案内
Date: 2025/4/15 9:22:12

Message-ID: 20250415110959645115@service.vnmtu.cn
IP: 198.23.136.17
IP Owner: HostPapa,ColoCrossing
From: no-reply.pslghqjk@service.vnmtu.cn
Subject: 【重要】SBI証券オンラインサービスご利用条件変更のご案内 – ご確認ください
Date: 2025/4/15 11:10:12

Message-ID: 20250415115539406056@service.ezrpt.cn
IP: 107.174.71.148
IP Owner: HostPapa,ColoCrossing
From: jaccs.wuwjxyfs@service.ezrpt.cn
Subject: 分割・リボ変更締切せまる！受付は4/25(金)12時まで！
Date: 2025/4/15 11:55:47

Message-ID: 20250415112237824413@service.vggrt.cn
IP: 198.23.134.108
IP Owner: HostPapa,ColoCrossing
From: uesr.nomura-xfjte@service.vggrt.cn
Subject: 【NOMURA】お客様の登録情報に関する重要な更新確認のお願い
Date: 2025/4/15 12:22:44

Message-ID: 20250415124629877582@service.lhwmc.cn
IP: 192.210.136.188
IP Owner: HostPapa,ColoCrossing
From: e-servic.fzinbni@service.lhwmc.cn
Subject: ご利用明細更新のお知らせ
Date: 2025/4/15 12:46:35

Message-ID: 20250415150121357002@service.epcq.cn
IP: 107.174.170.146
IP Owner: HostPapa,ColoCrossing
From: mail.eposcard-ulifvjf@service.epcq.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/15 15:01:28

Message-ID: 20250415151113843141@service.vkvwv.cn
IP: 198.23.136.166
IP Owner: HostPapa,ColoCrossing
From: mail.eposcard-fahkdsv@service.vkvwv.cn
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/15 15:11:20

Message-ID: 20250415163730662008@service.nmeuh.cn
IP: 107.173.25.114
IP Owner: HostPapa,ColoCrossing
From: uesr.sbisec-gnqdcuq@service.nmeuh.cn
Subject: 【重要】4月6日以降のオンラインサービスログイン時の確認画面表示について【SBI証券】
Date: 2025/4/15 16:37:59

Message-ID: 20250415173809370730@service.qpsjn.cn
IP: 172.245.180.231
IP Owner: HostPapa,ColoCrossing
From: info.visa-myzaj@service.qpsjn.cn
Subject: 【重要なお知らせ】VISAカード本人情報緊急確認
Date: 2025/4/15 17:38:16

Message-ID: 20250416062645732260@service.hfwtnt.cn
IP: 172.245.246.47
IP Owner: HostPapa,ColoCrossing
From: mail.orico-macxitt@service.hfwtnt.cn
Subject: 【eオリコ】カードご利用のお知らせ（確定）
Date: 2025/4/16 7:26:54

Message-ID: 20250416074533568715@service.zgivz.cn
IP: 23.95.189.180
IP Owner: HostPapa,ColoCrossing
From: visa.momxfwfl@service.zgivz.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/16 7:45:41

Message-ID: 20250416065121806763@service.jekin.cn
IP: 204.44.87.116
IP Owner: HostPapa
From: user.orico-tpucn@service.jekin.cn
Subject: ご利用明細更新のお知らせ
Date: 2025/4/16 7:51:28

Message-ID: 20250416100156714251@service.enteh.cn
IP: 107.174.170.145
IP Owner: HostPapa,ColoCrossing
From: member.gas-sfxgchrmb@service.enteh.cn
Subject: 【myTOKYOGAS】ご請求料金確定
Date: 2025/4/16 10:02:05

Message-ID: 20250416103407681431@service.sdve7.com
IP: 204.44.70.171
IP Owner: HostPapa
From: mail.viewsnet-voctqq@service.sdve7.com
Subject: ご利用明細更新のお知らせ
Date: 2025/4/16 10:34:38

Message-ID: 20250416151158788082@service.fgira.cn
IP: 107.174.71.149
IP Owner: HostPapa,ColoCrossing
From: sever.eposcard-flsbhw@service.fgira.cn
Subject: 【感謝の気持ちを込めて】10,000エポスポイントをプレゼント！
Date: 2025/4/16 15:12:14

Message-ID: 20250416155443715615@service.tgiawa.cn
IP: 198.46.233.32
IP Owner: HostPapa,ColoCrossing
From: mail.eposcard-uailyxwe@service.tgiawa.cn
Subject: 【祝】EPOSポイント当選者様！ポイント受け取り方法を確認！
Date: 2025/4/16 15:54:52

Message-ID: 20250416161133313752@service.mzirehbq.cn
IP: 172.245.228.166
IP Owner: HostPapa,ColoCrossing
From: visajp.xsovebdjql@service.mzirehbq.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/16 16:11:41

Message-ID: 20250416182637667366@service.shykikj.cn
IP: 198.23.136.159
IP Owner: HostPapa,ColoCrossing
From: mail.visa-ivjbyai@service.shykikj.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/16 18:26:49

Message-ID: 20250416191615710816@service.whqju.cn
IP: 204.44.70.119
IP Owner: HostPapa
From: mail.viewsnet-fxbnalw@service.whqju.cn
Subject: ご利用明細更新のお知らせ
Date: 2025/4/16 19:16:23

Message-ID: 20250416191716448144@service.psnjx.cn
IP: 172.245.154.188
IP Owner: HostPapa,ColoCrossing
From: info.gas-izytzk@service.psnjx.cn
Subject: 【myTOKYOGAS】ご請求料金確定
Date: 2025/4/16 19:17:24

Message-ID: 20250416203236251266@service.ymphl.cn
IP: 23.94.92.167
IP Owner: HostPapa,ColoCrossing
From: info.mastercard-eilrzlds@service.ymphl.cn
Subject: 【MasterCardカード】:ご利用状況確認のお願い
Date: 2025/4/16 20:32:49

Message-ID: 20250416204243383541@service.fmkx7f.cn
IP: 172.245.185.100
IP Owner: HostPapa,ColoCrossing
From: mail.mastercard-drqyei@service.fmkx7f.cn
Subject: 【Mastercard】マスター カード認証通知
Date: 2025/4/16 20:42:56

Message-ID: 20250416205623355310@service.mtvmb.cn
IP: 192.210.207.109
IP Owner: HostPapa,ColoCrossing
From: mastercard-lamjcmo@service.mtvmb.cn
Subject: 【Mastercard】マスター カード認証通知
Date: 2025/4/16 20:56:31

Message-ID: 20250416221525721506@service.hsolg.cn
IP: 204.44.101.121
IP Owner: HostPapa
From: jaccs.info-fqpihb@service.hsolg.cn
Subject: 分割・リボ変更締切せまる！受付は4/25(金)12時まで！
Date: 2025/4/16 22:15:35

Message-ID: 20250416223654180561@service.mecuq.cn
IP: 107.172.1.39
IP Owner: HostPapa,ColoCrossing
From: member.gas-zdtmba@service.mecuq.cn
Subject: 【myTOKYOGAS】ご請求料金確定
Date: 2025/4/16 22:37:03

Message-ID: 20250417042741537316@service.nmeuh.cn
IP: 107.173.25.114
IP Owner: HostPapa,ColoCrossing
From: user.gas-jzqxeny@service.nmeuh.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ お客様のお支払い方法が承認されません
Date: 2025/4/17 5:27:55

Message-ID: 20250417053103331427@service.mqcplsbt.cn
IP: 172.245.226.207
IP Owner: HostPapa,ColoCrossing
From: user.visa-plnrpbh@service.mqcplsbt.cn
Subject: 【VISAカード】重要なお知らせ
Date: 2025/4/17 5:31:17

Message-ID: 20250417054843563176@service.qyrgsd.cn
IP: 204.44.110.176
IP Owner: HostPapa
From: use.eki-net.ulxozx@service.qyrgsd.cn
Subject: 【見逃し厳禁】必要な手続きが未完了です
Date: 2025/4/17 5:48:51

Message-ID: 20250417060238011811@service.oqyyx.cn
IP: 107.173.25.118
IP Owner: HostPapa,ColoCrossing
From: info.gas-prgavtk@service.oqyyx.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ お客様のお支払い方法が承認されません
Date: 2025/4/17 7:02:48

Message-ID: 20250417071358007453@service.vfsat.cn
IP: 204.44.110.130
IP Owner: HostPapa
From: user.eposcard-onyqzxw@service.vfsat.cn
Subject: 取引異常に関する確認とお願い
Date: 2025/4/17 7:14:06

Message-ID: 20250417081603561664@service.shyligs.cn
IP: 198.23.136.16
IP Owner: HostPapa,ColoCrossing
From: info.visa-poqculu@service.shyligs.cn
Subject: 【重要なお知らせ】VISAカード本人情報緊急確認
Date: 2025/4/17 8:16:11

Message-ID: 20250417082437552271@service.uqnqp.cn
IP: 204.44.101.130
IP Owner: HostPapa
From: user.mastercard-jksjfopf@service.uqnqp.cn
Subject: 【至急】Mastercardセキュリティ認証手続きのご案内
Date: 2025/4/17 8:24:45

Message-ID: 20250417092246622067@service.fmkz9l.cn
IP: 107.173.80.237
IP Owner: HostPapa,ColoCrossing
From: visa.krqhtomppb@service.fmkz9l.cn
Subject: Visaの特典メール認証のお知らせ
Date: 2025/4/17 9:23:11

Message-ID: 20250417100318087888@service.otqxx.cn
IP: 107.175.111.112
IP Owner: HostPapa,ColoCrossing
From: mail.eki-net.cgtol@service.otqxx.cn
Subject: 【見逃し厳禁】必要な手続きが未完了です
Date: 2025/4/17 10:03:29

Message-ID: 20250417103121171505@service.gmkz9i.cn
IP: 192.3.211.156
IP Owner: HostPapa,ColoCrossing
From: user.mastercard-asbpk@service.gmkz9i.cn
Subject: 【MasterCardカード】:会費に関する緊急のお知らせ
Date: 2025/4/17 10:31:29

Message-ID: 20250417103300376448@service.moswfv.cn
IP: 192.210.141.218
IP Owner: HostPapa,ColoCrossing
From: user.eposcard-ujvzaqxc@service.moswfv.cn
Subject: エポスカードからのお知らせ[Visaデビットカード返金]
Date: 2025/4/17 10:33:09

Message-ID: 20250417105355205467@service.tdmfe.cn
IP: 192.3.158.250
IP Owner: HostPapa,ColoCrossing
From: user.mastercard-xwidkwwg@service.tdmfe.cn
Subject: 【MasterCardカード】:会費に関する緊急のお知らせ
Date: 2025/4/17 10:54:03

Message-ID: 20250417111707687736@service.oocxu.cn
IP: 107.174.71.16
IP Owner: HostPapa,ColoCrossing
From: info.gas-tcoiyqx@service.oocxu.cn
Subject: 【myTOKYOGAS】ご請求料金確定のお知らせ お客様のお支払い方法が承認されません
Date: 2025/4/17 12:17:19

Message-ID: 20250417131631502103@service.fmky9c.cn
IP: 172.245.185.103
IP Owner: HostPapa,ColoCrossing
From: inf.rakutenu-nkraiuz@service.fmky9c.cn
Subject: カード利用のお知らせ(本人ご利用分)
Date: 2025/4/17 13:16:40

送信元IPアドレス一覧

上記からIPアドレスの行だけ抜き出してuniqした結果は、次のとおり。

   1 IP: 104.168.102.227
   1 IP: 104.168.57.111
   1 IP: 107.172.0.10
   1 IP: 107.172.1.39
   1 IP: 107.172.142.36
   1 IP: 107.172.61.243
   1 IP: 107.172.8.47
   1 IP: 107.173.118.186
   1 IP: 107.173.125.105
   1 IP: 107.173.15.220
   1 IP: 107.173.202.212
   1 IP: 107.173.25.113
   1 IP: 107.173.25.118
   1 IP: 107.173.51.210
   1 IP: 107.173.80.237
   1 IP: 107.173.86.25
   1 IP: 107.174.159.20
   1 IP: 107.174.170.145
   1 IP: 107.174.170.146
   1 IP: 107.174.241.124
   1 IP: 107.174.247.41
   1 IP: 107.174.35.57
   1 IP: 107.174.35.87
   1 IP: 107.174.35.91
   1 IP: 107.174.37.106
   1 IP: 107.174.39.194
   1 IP: 107.174.66.195
   1 IP: 107.174.66.202
   1 IP: 107.174.69.141
   1 IP: 107.174.70.133
   1 IP: 107.174.71.149
   1 IP: 107.174.71.16
   1 IP: 107.174.88.166
   1 IP: 107.175.111.112
   1 IP: 107.175.115.55
   1 IP: 107.175.172.150
   1 IP: 107.175.178.218
   1 IP: 107.175.189.223
   1 IP: 107.175.53.173
   1 IP: 172.245.154.40
   1 IP: 172.245.180.225
   1 IP: 172.245.205.185
   1 IP: 172.245.208.164
   1 IP: 172.245.208.170
   1 IP: 172.245.224.49
   1 IP: 172.245.226.207
   1 IP: 172.245.228.166
   1 IP: 172.245.72.131
   1 IP: 172.245.81.159
   1 IP: 172.245.95.216
   1 IP: 192.210.136.188
   1 IP: 192.210.140.17
   1 IP: 192.210.140.9
   1 IP: 192.210.141.218
   1 IP: 192.210.186.167
   1 IP: 192.210.207.109
   1 IP: 192.227.172.179
   1 IP: 192.227.191.40
   1 IP: 192.227.212.33
   1 IP: 192.227.212.36
   1 IP: 192.227.212.37
   1 IP: 192.227.232.113
   1 IP: 192.227.249.151
   1 IP: 192.227.249.98
   1 IP: 192.227.252.114
   1 IP: 192.3.1.30
   1 IP: 192.3.157.75
   1 IP: 192.3.194.181
   1 IP: 192.3.211.156
   1 IP: 192.3.231.165
   1 IP: 192.3.53.85
   1 IP: 198.12.108.124
   1 IP: 198.23.134.108
   1 IP: 198.23.134.111
   1 IP: 198.23.136.16
   1 IP: 198.23.136.166
   1 IP: 198.23.136.17
   1 IP: 198.46.226.140
   1 IP: 198.46.228.219
   1 IP: 198.46.233.32
   1 IP: 198.46.248.125
   1 IP: 204.44.101.121
   1 IP: 204.44.101.128
   1 IP: 204.44.101.130
   1 IP: 204.44.110.130
   1 IP: 204.44.110.176
   1 IP: 204.44.123.128
   1 IP: 204.44.70.111
   1 IP: 204.44.70.171
   1 IP: 204.44.87.116
   1 IP: 204.44.87.124
   1 IP: 216.144.229.121
   1 IP: 216.144.233.126
   1 IP: 216.144.233.127
   1 IP: 216.144.233.128
   1 IP: 23.226.136.133
   1 IP: 23.94.139.139
   1 IP: 23.94.40.136
   1 IP: 23.94.84.113
   1 IP: 23.94.84.114
   1 IP: 23.94.84.5
   1 IP: 23.94.92.167
   1 IP: 23.95.91.145
   1 IP: 67.215.249.113
   1 IP: 67.215.249.12
   1 IP: 75.127.13.144
   2 IP: 104.168.64.122
   2 IP: 107.173.135.86
   2 IP: 107.173.25.114
   2 IP: 107.174.121.147
   2 IP: 107.174.235.242
   2 IP: 107.174.237.26
   2 IP: 107.174.37.107
   2 IP: 107.174.70.147
   2 IP: 107.174.71.148
   2 IP: 172.245.154.188
   2 IP: 172.245.180.231
   2 IP: 172.245.185.100
   2 IP: 172.245.185.103
   2 IP: 172.245.196.186
   2 IP: 172.245.246.47
   2 IP: 192.3.158.250
   2 IP: 198.23.136.159
   2 IP: 204.44.70.112
   2 IP: 204.44.70.119
   2 IP: 216.144.229.116
   2 IP: 23.94.95.214
   2 IP: 23.95.246.132
   3 IP: 172.245.89.54
   3 IP: 23.95.189.180

130個以上。いったいどれだけスパマーに優しいホスティングサービスなのか。

大量のIPを使い回すことにより、IPを遮断しても簡単には防げなくしているところが、とても嫌らしい。もうHostPapa全体を遮断するのが一番簡単だと思う。

フィッシングサイト

ちなみに、このフィッシングメールに利用されているフィッシングサイトは、大半がCloudflareに置かれていた。

------------------------------
Target URL: https://mastercard-amongish.msobk.cn/features-benefits/
Extracted Hostname: mastercard-amongish.msobk.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/2e5d7bf94d98afb43ad9c538cd6d692b5450bd8f70fbc7c00018996ca2bd9ac4
------------------------------
Target URL: https://etc-maiosei-result.uenqmv.cn/etc/Rfuncc1013000000extfunc
Extracted Hostname: etc-maiosei-result.uenqmv.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/d2b3b2e7c9ced5c5e805def9aaea049379705cea1cc110493d04ec8a11a341de
------------------------------
Target URL: https://sbisec-sylozk.wylff18.cn/ETGate/loge/
Extracted Hostname: sbisec-sylozk.wylff18.cn
IP Address(es): 104.21.13.100, 172.67.199.209
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/98c84034badb13763f27ffbdf5768582ebc3bb4a16d781696f47de607d07dccd
------------------------------
Target URL: https://nomura-novenast.kkpt24.cn/web/login-dialog/
Extracted Hostname: nomura-novenast.kkpt24.cn
IP Address(es): 104.21.25.218, 172.67.134.200
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/c40f8dd0ef57518b779a8db82f10cb8a332bd2fafe26f7aaaf48bafc7f7b8e3f
------------------------------
Target URL: https://visa-angsome.ygwtt35.cn/pay-with-featured
Extracted Hostname: visa-angsome.ygwtt35.cn
IP Address(es): 104.21.58.30, 172.67.155.76
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/ab8c0c9c48044afc39d023fa65b54b33a99f499c359746826af7ad65b3357f99
------------------------------
Target URL: https://orico-gradfic.dhkz55.cn/eorico/login/
Extracted Hostname: orico-gradfic.dhkz55.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/f2aab35d0c452c34f0e3d10a8b915738175bce03fbfbbc6f77bfd29b01c4e4de
------------------------------
Target URL: https://visa-carrylet.yhw511.cn/pay-with-featured
Extracted Hostname: visa-carrylet.yhw511.cn
IP Address(es): 104.21.38.122, 172.67.222.162
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/bb79e3da843c79b5dab9b2ba42aa95e7d12db4464f8fadca86ca915981bddba4?nocache=1
------------------------------
Target URL: https://orico-linearium.fswf6.com/eorico/login/
Extracted Hostname: orico-linearium.fswf6.com
IP Address(es): 104.21.76.54, 172.67.188.175
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/e9ce05c20cf8e4419717ff532b454264ab06b06c46b21e3fe7597feb600d354b
------------------------------
Target URL: https://sbisec-fullwise.uke39.com/ETGate/loge/
Extracted Hostname: sbisec-fullwise.uke39.com
IP Address(es): 104.21.65.96, 172.67.161.151
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/a1ce336aa28836df42d67e8a69e42e40e59bf2f26b4f4c6f55dca57b801d9514
------------------------------
Target URL: https://jaccs-phylac.ywkd0.com/icmclub-icm_login/
Extracted Hostname: jaccs-phylac.ywkd0.com
IP Address(es): 104.21.82.235, 172.67.209.8
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/1432e6d27ede612d9b48333441cd5205d3a40c1b9c68e8e6cb26ca45e264b1c0
------------------------------
Target URL: https://orico-houratic.2dycz36.cn/eorico/login/
Extracted Hostname: orico-houratic.2dycz36.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/42f4fafef45c2417adc209d02c3791905b54a718b52180277c9c1be099cfac70
------------------------------
Target URL: https://visa-ommnew.xdkk583.cn/pay-with-featured
Extracted Hostname: visa-ommnew.xdkk583.cn
IP Address(es): 104.21.74.163, 172.67.204.67
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/b8735a2430e6f0cffe73252586e7d2dedc3808b9a77b3c79a7609ba2522f10bc
------------------------------
Target URL: https://orico-lyster.kztm1.com/eorico/login/
Extracted Hostname: orico-lyster.kztm1.com
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/a27b3cc166311b1f5493241510009c2b478169b419d8e7213a24377111dcbf78
------------------------------
Target URL: https://visa-taskety.ggyu28.cn/pay-with-featured
Extracted Hostname: visa-taskety.ggyu28.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/582b4bfd5f21bdd30012f82aeb7f1995ae586bc637eb60451468bdbc50fcb137
------------------------------
Target URL: https://orico-cratet.gmyyuz93.cn/eorico/login/
Extracted Hostname: orico-cratet.gmyyuz93.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/765d77c7677c08303c3cfced5074006200150d2a884e660271d59c1ffabff83d
------------------------------
Target URL: https://mytokayogas-teloothe.vboo0.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-teloothe.vboo0.com
IP Address(es): 104.21.60.54, 172.67.192.117
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/413afe0a8b0aa319c953d12831849814e6c728eb3d97dcc7bb4539985da29205
------------------------------
Target URL: https://viewsnet-voicean.ykz46.com/first_jalsuica-default/
Extracted Hostname: viewsnet-voicean.ykz46.com
IP Address(es): 104.21.20.239, 172.67.194.222
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/2586efa1c72626775559f71b80a2cef70ee9877664445e96464c21f7e9863c7b
------------------------------
Target URL: https://eposcard-lifely.dddzzd.com/login_preload-do/
Extracted Hostname: eposcard-lifely.dddzzd.com
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/1ab1fc13884ff84dfdffb17927eaba3d1fde9d2fd768cd6597daa1483e2de1a2
------------------------------
Target URL: https://visa-behindad.xddqb76.cn/pay-with-featured
Extracted Hostname: visa-behindad.xddqb76.cn
IP Address(es): 104.21.84.89, 172.67.190.147
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/8d63b3e114d6ef16dac09a09cad28b79cbbf5a3310fd739af883aa80b3fe5f78
------------------------------
Target URL: https://visa-carrylet.yhw511.cn/pay-with-featured
Extracted Hostname: visa-carrylet.yhw511.cn
IP Address(es): 104.21.38.122, 172.67.222.162
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/bb79e3da843c79b5dab9b2ba42aa95e7d12db4464f8fadca86ca915981bddba4
------------------------------
Target URL: https://viewsnet-voicean.ykz46.com/first_jalsuica-default/
Extracted Hostname: viewsnet-voicean.ykz46.com
IP Address(es): 104.21.20.239, 172.67.194.222
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/2586efa1c72626775559f71b80a2cef70ee9877664445e96464c21f7e9863c7b
------------------------------
Target URL: https://mytokayogas-herorium.irq42.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-herorium.irq42.com
IP Address(es): 104.21.23.50, 172.67.209.51
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/d728cf586961c41eec2cc633cfe869aaa42a7ee3469b3c4964e1b85bbb98ff5a
------------------------------
Target URL: https://mastercard-perioda.cnx92.com/features-benefits/
Extracted Hostname: mastercard-perioda.cnx92.com
IP Address(es): 104.21.13.202, 172.67.133.21
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/fd8a64c0e86653ba206ee3bee06208e97e434000cfd166d534632ff6f754008a
------------------------------
Target URL: https://mastercard-offices.ctb82.com/features-benefits/
Extracted Hostname: mastercard-offices.ctb82.com
IP Address(es): 104.21.19.154, 172.67.186.203
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/5767d915814c88f43291f46d17df120606793d74a18181c26d71d0584610c91e
------------------------------
Target URL: https://mastercard-hadrtic.mtiv6.com/features-benefits/
Extracted Hostname: mastercard-hadrtic.mtiv6.com
IP Address(es): 104.21.17.252, 172.67.178.244
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/68eba61c116bd3e709d99b23afb2b788aa55d769fd5b3ddb7bd7fbb17ab3feb6?nocache=1
------------------------------
Target URL: https://jaccs-bulliho.szj20.com/icmclub-icm_login/
Extracted Hostname: jaccs-bulliho.szj20.com
IP Address(es): 104.21.6.245, 172.67.135.128
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/203af5b27317aa631d1d317c2d8d5bc643c9cf415441dd911d47b090156c168d
------------------------------
Target URL: https://mytokayogas-century.kkak6.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-century.kkak6.com
IP Address(es): 104.21.72.154, 172.67.151.209
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/23548e034c7a0d607b9b15e5fdd6bd7aa59de10478b5da10fe1dfdc433f01ee6
------------------------------
Target URL: https://mytokayogas-creasage.bux72.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-creasage.bux72.com
IP Address(es): 104.21.47.49, 172.67.144.138
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/16ac93c88e79e72feedcb172c5fd0bc7ccd40cc6a0476ea058582ca8c860cd7a
------------------------------
Target URL: https://visa-halister.ttgwu59.cn/pay-with-featured
Extracted Hostname: visa-halister.ttgwu59.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/a8dcb04644e54d8656f46617d8aa94b5fa468ff1958e5fa091ee48ce88fdb0fc
------------------------------
Target URL: https://mytokayogas-teloothe.vboo0.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-teloothe.vboo0.com
IP Address(es): 104.21.60.54, 172.67.192.117
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/413afe0a8b0aa319c953d12831849814e6c728eb3d97dcc7bb4539985da29205
------------------------------
Target URL: https://eposcard-oncoenn.czi96.com/?token=yGWFrxXS/
Extracted Hostname: eposcard-oncoenn.czi96.com
IP Address(es): 104.21.43.95, 172.67.177.153
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/0dc17c79b656e47036189f70349261a8ba4b149718c286427bd0f7f06b8e8562?nocache=1
------------------------------
Target URL: https://eki-net-cruarium.awfq8.com/Perosnal_member/
Extracted Hostname: eki-net-cruarium.awfq8.com
IP Address(es): 104.21.12.157, 172.67.132.48
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/9fe38dc3abb264bd8a6cd7cd4567bd2ab6e02e9c8bd45a5afac8970230999c57
------------------------------
Target URL: https://mastercard-angture.hsoy0.com/features-benefits/
Extracted Hostname: mastercard-angture.hsoy0.com
IP Address(es): 104.21.79.225, 172.67.149.72
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/9e822cb659e87765dec804012c684d8b089462aad7fdd79eb2be3e132ea76200:w
------------------------------
Target URL: https://visa-halister.ttgwu59.cn/pay-with-featured
Extracted Hostname: visa-halister.ttgwu59.cn
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/a8dcb04644e54d8656f46617d8aa94b5fa468ff1958e5fa091ee48ce88fdb0fc
------------------------------
Target URL: https://eki-net-cruarium.awfq8.com/Perosnal_member/
Extracted Hostname: eki-net-cruarium.awfq8.com
IP Address(es): 104.21.12.157, 172.67.132.48
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/9fe38dc3abb264bd8a6cd7cd4567bd2ab6e02e9c8bd45a5afac8970230999c57
------------------------------
Target URL: https://mastercard-crevan.cio00.com/features-benefits/
Extracted Hostname: mastercard-crevan.cio00.com
IP Address(es): 104.21.18.233, 172.67.183.226
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/0c10cb4f219a9eaf741233831792a638f8ae5854656d0af409e9f70ffb74857d
------------------------------
Target URL: https://eposcard-tegster.nmhf5.com/?token=yGWFrxXS/
Extracted Hostname: eposcard-tegster.nmhf5.com
IP Address(es): 104.21.58.125, 172.67.204.11
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/d4d48eb6c5986c2fd5033e85dad746561d1aa2d447f012b7e10eb0d5c905b372
------------------------------
Target URL: https://mastercard-perioda.cnx92.com/features-benefits/
Extracted Hostname: mastercard-perioda.cnx92.com
IP Address(es): 104.21.13.202, 172.67.133.21
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/fd8a64c0e86653ba206ee3bee06208e97e434000cfd166d534632ff6f754008a
------------------------------
Target URL: https://mytokayogas-drapel.dqq78.com/api/mtgas/auth/login/
Extracted Hostname: mytokayogas-drapel.dqq78.com
IP Address(es): 104.21.112.1, 104.21.16.1, 104.21.32.1, 104.21.48.1, 104.21.64.1, 104.21.80.1, 104.21.96.1
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/506dbc54ce5b85cf04aa8c7fa8c913ea28cc47babc281e9cc24daaaf7adb4825
------------------------------
Target URL: https://rakutein-tersher.hir43.com/registration/input.xhtml/
Extracted Hostname: rakutein-tersher.hir43.com
IP Address(es): 104.21.12.109, 172.67.152.57
IP Owner: Cloudflare
VirusTotal Result: https://www.virustotal.com/gui/url/27fd89ab132a31abe4c0dc4a054bcd4db54aeab08108db969cbf0b8429f89734?nocache=1

こちらもなかなかすごい。いったいどれだけのホストをフィッシングに提供しているのか。

今のところ50個以上。このまま観測を続けたら遠からず100個を超えると思うけど、面倒になったので打ち切り。

通報窓口

IPアドレスのwhois情報を確認すると、次のようになっている。

OrgName:        HostPapa
OrgId:          HOSTP-7
Address:        325 Delaware Avenue
Address:        Suite 300
City:           Buffalo
StateProv:      NY
PostalCode:     14202
Country:        US
RegDate:        2016-06-06
Updated:        2024-04-26
Ref:            https://rdap.arin.net/registry/entity/HOSTP-7


OrgAbuseHandle: NETAB23-ARIN
OrgAbuseName:   NETABUSE
OrgAbusePhone:  +1-905-315-3455
OrgAbuseEmail:  net-abuse-global@hostpapa.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/NETAB23-ARIN

OrgTechHandle: NETTE9-ARIN
OrgTechName:   NETTECH
OrgTechPhone:  +1-905-315-3455
OrgTechEmail:  net-tech-global@hostpapa.com
OrgTechRef:    https://rdap.arin.net/registry/entity/NETTE9-ARIN

RTechHandle: NETTE11-ARIN
RTechName:   NETTECH-COLOCROSSING
RTechPhone:  +1-800-518-9716
RTechEmail:  support@colocrossing.com
RTechRef:    https://rdap.arin.net/registry/entity/NETTE11-ARIN

RAbuseHandle: NETAB27-ARIN
RAbuseName:   NETABUSE-COLOCROSSING
RAbusePhone:  +1-800-518-9716
RAbuseEmail:  abuse@colocrossing.com
RAbuseRef:    https://rdap.arin.net/registry/entity/NETAB27-ARIN

そこで、net-abuse-global@hostpapa.com宛てにログを添えて、フィッシングの通報をしてみた。数日経過した現在のところ、応答なし。やる気なさそう。

全然応答がないので、上記にあるColoCrossingの連絡窓口にあるReport Abuseから情報を送ってみた。やはり応答はない。

何度送っても何の応答も返さないし、スパムも減らない。ここはスパマー大歓迎なホスティングサービスなのかも。通報したところでどうせ対処されないし、面倒になったので観測も中止した。

なお、同じ時期に迷惑メール送信元となっていた日本のサービスKAGOYAは、すごかった。通報すると、ほぼ即日でサーバー停止したとの返事がくる。もぐら叩きを一週間ほど続けた結果、毎日のように受信していたKAGOYA発の迷惑メールが今のところとまっている。