http://www.notredame.ac.jp/~tyoshida/check/mai lcheck.html
Subject To, Cc, From To(?) HTML
....@ au....e/ 0 http://help.jp.msn.com/announce.aspx#20080810 4
To: From: From: Masato Masuya <k9320801@kadai.jp> To: Masato Masuya <k9320801@kadai.jp> From: From: <k9320801@kadai.jp> To: <k9320801@kadai.jp> To: <k9320801@kadai.jp> To: k9320801@kadai.jp or
HTML Web
HTML
OutlookOutlook Express DoS Exploit 8
X Message Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0x X Message Status: n:0 X SID PRA: k9999999@kadai.jp X Message Info: JGTYoYF78jHgSoyUVw8OIzMQtmeEJ2IlhrCEpJY0e3cY9GaWUK4Z9/s6+frIGbg7UU0Fpnd1mg9ARVrb62GYxORTM/IHNoEj Received: from bay0 omc2 s10.bay0.hotmail.com ([65.54.246.146]) by bay0 pamc1 f10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Sun, 18 May 2008 19:17:15 0700 Received: from BAY118 W2 ([207.46.8.165]) by bay0 omc2 s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 18 May 2008 19:17:14 0700 Message ID: <BAY118 W2517E8B7281E21B3781DCFEC50@phx.gbl> X Message Routing: srcvtzo7lvkohx4aauzvia7nfdetcrtj4gbfc0msj8pcmtxtrdqbyco1zqtnb8oa9akhsfvmljzr1ctduydi3asl73itjebr5cp0pj7mnpj+r3p5kqhyimq1vwa== Return Path: k9999999@kadai.jp X Originating IP: [163.209.230.11] From: <k9999999@kadai.jp> To: <k9320801@kadai.jp> Subject: =?iso 2022 jp?b?gyrcpnbkcyvhjucliyuijegljcvzjt8hpcvnjumlsbsoqg==?= Date: Mon, 19 May 2008 11:17:14 +0900 Importance: Normal Content Type: text/plain; charset="iso 2022 jp" Content Transfer Encoding: 7bit MIME Version: 1.0 X OriginalArrivalTime: 19 May 2008 02:17:14.0505 (UTC) FILETIME=[7407BF90:01C8B956] $BCO5e4D6 2J3X2J(B 2200000000 $B@nLn!!M&5$(B $B$+$o$N!!$f$&$ (B
7bit JIS 7bit=ASCII0127 8bit(1)1bit () 7bit Shift JIS8bit UNIX/LinuxEUC8bit UnicodeUTF-88bit ISO-2022-JP Content Type: text/plain; charset="iso 2022 jp" Content Transfer Encoding: 7bit
Content-Type: multipart/alternative; boundary="_63b24681-6e7a-40e6-b258-246e90b8dfd3_" X-Originating-IP: [163.209.230.11] From: <k9999999@kadai.jp> To: <k9320801@kadai.jp> Subject: =?iso-2022- jp?b?gyrcpnbkcyvhjucliyuijegljcvzjt8hpcvnjumlsbsoqg==?= Date: Mon, 19 May 2008 11:07:02 +0900 Importance: Normal MIME-Version: 1.0 X-OriginalArrivalTime: 19 May 2008 02:07:02.0598 (UTC) FILETIME=[074E2660:01C8B955] --_63b24681-6e7a-40e6-b258-246e90b8dfd3_ Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit $BJ*M}2J3X2J(B 2200000000 $B?eLn!!$$$E$_(B $B$_$:$N!!$$$E$_(B --_63b24681-6e7a-40e6-b258-246e90b8dfd3_ Content-Type: text/html; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit <html> <head> <style>.hmmessage P { margin:0px; padding:0px } body.hmmessage { FONT-SIZE: 10pt; FONT-FAMILY:Tahoma } </style> </head> <body class='hmmessage'> $BJ*M}2J3X2J(B<BR> 2200000000<BR> $B?eLn!!$$$E$_(B<BR> $B$_$:$N!!$$$E$_(B<BR> <BR></body> </html> --_63b24681-6e7a-40e6-b258-246e90b8dfd3_--
multipart/mixed multipart/alternative HTML multipartrfc2046 RFC= boundary= ---- -
multipart/alternative HTML 70
Windows Live Hotmail HTML HTMLHTML Windows Live Gmail
SMTP POP IMAP Web Web SMTP(+IMAP)
SMTP SMTP MTA(Mail Transfer Agent) sendmailqmailpostfix (MUA=Mail User Agent) TCP25
SMTP TCP587 OP25B(Outbound Port 25 Blocking)TCP25 TCP25 SMTP POP before SMTP POPPC SMTP-AUTH
POPIMAP SMTPPC POP(POP3) TCP110 qpopper IMAP(IMAP4) TCP143 UW IMAP, Courier-IMAP, Cyrus IMAP
SMTPPC SSL 2 over SSL STARTTLS TCP SMTP over SSL = TCP465 STARTTLS(SMTP) = TCP25,587 POP over SSL = TCP995 STARTTLS(POP3) = TCP110 IMAP over SSL = TCP993 STARTTLS(IMAP4) = TCP143
Windows Live Hotmail : pop3.live.com : POP3 over SSL : 995 : smtp.live.com : STARTTLS(SMTP) + SMTP-AUTH : 587 Windows Live HTTP
ID PC
IBM HAL S/MIMEPGP
SSL ()
k9320801@kadai.jp 201166 12:00