jarl.com詐称フィッシングメール

ともにLY国発ですが,おそらく別系列で2通:
(1) スパマー扱いで止められているよ
(2) リニューアルがいるよ

うち(2)は,「背景がホンモノのjarl.comのWeb」系列です.


(1) 2025-09-10 着弾

誘導先: inglogem.com.co (→ 3.212.64.25・52.205.62.228,AWS)
送信元: [62.60.130.53] (→ LY国)
20250910mail.jpg
From: WebAdmin <〓〓〓@jarl.com>
Subject: IMPORTANT: For 〓〓〓@jarl.com: (Your Email is blocked due to complaints)
Date: 09 Sep 2025 22:42:04 -0700

USER: 〓〓〓@jarl.com

Your email is blocked temporarily due to complaints because too many recipients marked your messages as spam, resulting in a poor sender reputation or a blacklisted IP address.

This 550 5.7.26 unauthenticated sender error will continue if the problem is not fixed. See below:
FIX THE ERROR

Attention: SPF, DKIM will be validated
DMARC and DNS is confirmed.

Mail Support
© 2023 jarl.com
You have received an automatic, mandatory email to update you about important changes to the Cpanel Webmail Platform or your account.
「FIX THE ERROR」のリンク先
https://inglogem.com.co/z/orangenews/ressources/jsquery.html#〓〓〓@jarl.com
に飛んでみましょう(よいこはまねしないように).
...真っ白でした:
20250910web.jpg


(2) 2025-09-26 着弾

誘導先: membersarea.thecouragetowin.com (→ 104.198.1.84,Google)
送信元:  [62.60.130.165] (→ LY国)
20250926mail.jpg
From: Email Renewal <〓〓〓@jarl.com>
Subject: Notice: Your Email Account is Due for Renewal
Date: 26 Sep 2025 07:03:39 -0700

Renew Your Email Account
Dear 〓〓〓,

Our system administrator has detected that your email account 〓〓〓@jarl.com is due for renewal on 26 Sep 2025.

To ensure uninterrupted access to your email services, please complete the renewal process before the deadline:

?? [Renew My Account]

If your account is not renewed by the date above, it may be suspended or closed, and you could lose access to your emails, contacts, and files.

Thank you for your prompt attention to this matter.

Sincerely,
www.jarl.com / [Support

「Renew My Account」のリンク先
http://membersarea.thecouragetowin.com/wp-includes/js/jsquery.html#〓〓〓@jarl.com
に飛んでみましょう.
下図のような 偽のjarl.com に行きつきます:
20250926web.jpg
てきとーなEmail Address・Passwardを入力して,Sign Inすると,
20250926web2.jpg
Password is incorrect, please try again!
と返ってきます(or 返ってくるだけです).



過去ログ

jarl.com詐称フィッシングメール
(1) https://jj1wtl.seesaa.net/article/202203article_31.html
(2) https://jj1wtl.seesaa.net/article/202206article_14.html
(3) https://jj1wtl.seesaa.net/article/202207article_19.html
(4) https://jj1wtl.seesaa.net/article/202207article_26.html
(5) https://jj1wtl.seesaa.net/article/498501532.html
(6) https://jj1wtl.seesaa.net/article/500006425.html
(7) https://jj1wtl.seesaa.net/article/500259856.html
(8) https://jj1wtl.seesaa.net/article/500713263.html
(9) https://jj1wtl.seesaa.net/article/501069583.html
(10) https://jj1wtl.seesaa.net/article/501344227.html
(11) https://jj1wtl.seesaa.net/article/501425073.html
(12) https://jj1wtl.seesaa.net/article/501676015.html
(13) https://jj1wtl.seesaa.net/article/502710889.html
(14) https://jj1wtl.seesaa.net/article/502731882.html
(15) https://jj1wtl.seesaa.net/article/503087968.html
(16) https://jj1wtl.seesaa.net/article/503135904.html
(17) https://jj1wtl.seesaa.net/article/510138487.html
(18) https://jj1wtl.seesaa.net/article/510310515.html
(19) https://jj1wtl.seesaa.net/article/511696434.html
(20) https://jj1wtl.seesaa.net/article/513480970.html
(21) https://jj1wtl.seesaa.net/article/514247996.html
(22) https://jj1wtl.seesaa.net/article/514928639.html
(23) https://jj1wtl.seesaa.net/article/516318993.html
(24) https://jj1wtl.seesaa.net/article/516864515.html
(25) https://jj1wtl.seesaa.net/article/517061124.html
(26) https://jj1wtl.seesaa.net/article/517651632.html
(27) https://jj1wtl.seesaa.net/article/517973251.html

この記事へのコメント