Received: from 127.0.0.1 by
atlas-production.v2-mail-prod1-gq1.omega.yahoo.com pod-id
atlas--production-gq1-6679dd665b-nr48z.gq1.yahoo.com with https; Sat, 19 Jul
2025 20:03:22 +0000
Return-Path: <serveradmin@aurens.or.jp>
X-Originating-Ip: [157.7.137.58]
Received-SPF: pass (domain of aurens.or.jp designates 157.7.137.58 as
permitted sender)
Authentication-Results: atlas-production.v2-mail-prod1-gq1.omega.yahoo.com;
dkim=pass Quelltext.i=@aurens.or.jp Quelltext.s=default
arc_overridden_status=NOT_OVERRIDDEN; spf=pass smtp.mailfrom=aurens.or.jp
arc_overridden_status=NOT_OVERRIDDEN; dmarc=pass(p=NONE)
Quelltext.from=aurens.or.jp arc_overridden_status=NOT_OVERRIDDEN;
X-Apparently-To: xxx; Sat, 19 Jul 2025 20:03:22 +0000
X-YMailISG: PelYj7oWLDvPFZ_QVarJYx5tYImC2WxV2bGTVqd._uC9MeZ5
vXqQMJs2tCDrLwrt1CfP2t.roj2nVNK0tp4VhHCnUoQOmkKyqd6qDIi4nlfZ
RrGrXU7733SzyjXnUiVbC.xyOlWTY6IogWq5chCO7AlcbumU46GkXDTIR4Gu
AzDe2gr7F_r_1VBNnoSIlqKwUnumGy6nPKjbn9z9BoXAjMOIT2mLfyATVdLr
q6nVNFF51tFwvBVmxGLVmgE19cLlrYEmGYybkltWT.JiwDhyIqom8bDj.bCM
SCl7oLzPGyLubza90UJZsj9W7JjxN0b4i3ukzU0QvwrcnDue0Mt94jpjCnLa
chi2rnqwZWdu8uRLxiZZVxxf97NnmXFUH4pO5RwcwiO30iPSbp5h1XneEtVl
64_SZeExwki.PPM75HwnEXue_Fs5rPSZKt9CBSn2DEXLx.j_wudC.dXxfzsf
T3v5fp915bQxjU9vU8D9VNOWfdyUhQCQf_z97.Cu32jur9oSFq9Fqkfvl.I3
8OV_HTNCXTGUU4HdAzL3VFhL4JXELZlKxcL88auR6.yf3.al.U.1igXHALF6
stBlTlD0J4YHZpIm1aLZ7AaNHi73tqFauqFlhE2CHNL2dWYKx4wTrTGBIxah
xR6aQsxIxi.7xxmNDPFjohszoQNL5uC3wyDqmIJWoAk47WSlQhOM2A4_s5Yg
SkJykeFaFX9bbbEL9LkvmFgwgao1f6Hx4vQgHDDbwhJBw9JYJb_Av3vCtU5B
TItukimwNif5AcLzeUGwDL9Oyl4RbC33F5K0QWCfXFM9hbTpQgzX1p1E2_qe
UVURSNqq1qNHPOMh48t1LR7E6PWeAbCsqMHaCXGU1pqmD_k5c4xy0kG7bios
ZXmon62_YdEMeOT4cXveX8Nkvb05pz9XMdFTXXs8DkNf0dVz4Y3hM8KcAFjQ
cvIA3PR_156HTZm4k9TnEIwE4IWXKbYethB85hmKMmfTv5O8HEROinRJhREV
5p5qhpwmHqQOSaHVZVnRl4rk9iElQ4C.B9szf5hyX35usKZc6unv4usNyJyt
P__O0iUWptEw6YY3CuUElXHoyt1nVIS6CDPjdqX6mk.GFB8zsrw1Zhxgfz0U
X52rnPvp15KVTCm1vzMIoj8UZxHXX8PRF2tgiIQVHLkVZ5RywTerfhwKTRFP
SIKdYXgAHSRvPBdwWlPYp5S1Ffe.sIggl63U49TEEyZOGc_E7TOAY6J3EVc6
Hpqnrz8J1Q3qx_bGnGRMbYpwtYskc15viIdOaIYWL0yuMsr6K5sLkgL1aP4f
GIdS5Ud5lqhsBpbStxyEjJeGOneIrnxfK0HLimUXb5Li00hm5LwmqSGT3qZL
fOQbCXror9VZNur.OQ--
Received: from 157.7.137.58 (EHLO omail.aurens.or.jp)
by 10.253.230.153 with SMTPs
(version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256);
Sat, 19 Jul 2025 20:03:22 +0000
Received: from mail.aurens.or.jp (f16bf02-0060.sta.din.or.jp
[210.173.226.60]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384
(256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)
server-digest SHA256) (No client certificate requested) by
omail.aurens.or.jp (Postfix) with ESMTPS id 2D756181B8B19; Sun, 20 Jul 2025
05:03:20 +0900 (JST)
Received: by mail.aurens.or.jp (Postfix, from userid 65534)
     id B77734158843; Sun, 20 Jul 2025 05:02:12 +0900 (JST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.aurens.or.jp B77734158843
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aurens.or.jp;
     s=default; t=1752955399;
     bh=KjLnflyHcU3MWzZhGc/aSqYr6M8A2h1/QA2fTdg5hpk=;
     h=Reply-To:From:Subject:Date:From;
     b=n9cjEPmls1OOpX/zveSDVtQPSgE7TyVc5BsxEuZLmQ4Wg6SYaMwnJCJyzQHNPtCJ1
      5PRxiVLJOSUauMMqYUlfwbNQYStFrJUc8gSPTJ7I4Cex2oV93eVZTuQcBWTJa4MzNy
      dOpkS/Dwx3tTfUTgjZdLGr5XRIdY1ELI/6LRUff8=
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mail.aurens.or.jp
X-Spam-Flag: YES
X-Spam-Level: ***********************
X-Spam-Status: Yes, score=23.3 required=10.0
     tests=AXB_XMAILER_MIMEOLE_OL_1ECD5,CONTENT_TYPE_PRESENT,
     CTE_8BIT_MISMATCH,DOS_OE_TO_MX,EMRCP,FORGED_MUA_OUTLOOK,
     FREEMAIL_FORGED_REPLYTO,FROM_MISSP_MSFT,FROM_MISSP_REPLYTO,
     FROM_MISSP_USER,FSL_CTYPE_WIN1251,FSL_HELO_NON_FQDN_1,
     FSL_NEW_HELO_USER,HELO_NO_DOMAIN,KHOP_HELO_FCRDNS,LOTS_OF_MONEY,
     MIMEOLE_DIRECT_TO_MX,MISSING_HEADERS,MISSING_MID,MONEY_FREEMAIL_REPTO,
     MONEY_NOHTML,NG_BDY_REGARDS00,NSL_RCVD_FROM_USER,OK_AURENS,
     RDNS_DYNAMIC,REPLYTO_WITHOUT_TO_CC,SUBJ_ALL_CAPS,TO_NO_BRKTS_MSFT,
     WINDOWS_CHARSET,X_MAILER_PRESENT autolearn=no autolearn_force=no
     version=3.4.6
X-Spam-Report: 
     *  5.0 WINDOWS_CHARSET Windows-1252 message
     *  0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
     * -0.1 CONTENT_TYPE_PRESENT exists:Content-Type
     *  0.0 NSL_RCVD_FROM_USER Received from User
     *  0.1 X_MAILER_PRESENT exists:X-Mailer
     *  0.0 FSL_HELO_NON_FQDN_1 No description available.
     * -1.0 OK_AURENS No description available.
     *  1.2 MISSING_HEADERS Missing To: Quelltext
     *  0.5 SUBJ_ALL_CAPS Subject is all capitals
     *  0.5 NG_BDY_REGARDS00 BODY: No description available.
     *  1.0 EMRCP BODY: "Excess Maximum Return Capital Profit" scam
     *  0.6 CTE_8BIT_MISMATCH Quelltext says 7bits but body disagrees
     *  0.0 LOTS_OF_MONEY Huge... sums of money
     *  0.0 FSL_NEW_HELO_USER Spam's using Helo and User
     *  0.1 MISSING_MID Missing Message-Id: Quelltext
     *  0.4 RDNS_DYNAMIC Delivered to internal network by host with
     *      dynamic-looking rDNS
     *  0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
     *  1.9 REPLYTO_WITHOUT_TO_CC No description available.
     *  2.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X Quelltext trait
     *  0.0 FROM_MISSP_USER From misspaced, from "User"
     *  0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly
     *  1.8 MONEY_NOHTML Lots of money in plain text
     *  0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
     *  0.2 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
     *  0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
     *      email?
     *  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
     *  3.1 DOS_OE_TO_MX Delivered direct to MX with OE headers
     *  0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS
     *  0.3 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
     *  2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from User (k162213.ppp.asahi-net.or.jp [218.45.162.213])
     by mail.aurens.or.jp (Postfix) with SMTP id B831841B8D03;
     Sun, 20 Jul 2025 05:01:57 +0900 (JST)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.aurens.or.jp B831841B8D03
Reply-To: <phil003jo@gmail.com>
From: "Philip Johnson"<serveradmin@aurens.or.jp>
Subject: [SPAM] INVESTMENT PLAN //
Date: Sun, 20 Jul 2025 04:02:09 +0800
MIME-Version: 1.0
Content-Type: text/plain;
     charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Spam-Prev-Subject: INVESTMENT PLAN //
Message-Id: <20250719200319.B77734158843@mail.aurens.or.jp>
Content-Length: 2048
X-Evolution-Source: 7fd9e7af143430d958f825dbb1d87d0f9af5f680