Phish source.
Problem started around Mon, 22 Nov 2021 13:20 UTC.
44.247.166.188.in-addr.arpa. 852 IN PTR bizcloud-power.asahiseiko.co.jp.
Does not resolve forward because they do not own that domain, it is a forgery.
=============================================================================
Return-Path: <mail@altech.co.jp>
Received: from bizcloud-power.asahiseiko.co.jp (HELO mta0.asahiseiko.co.jp) (188.166.247.44)
by x (x) with ESMTP; Mon, 22 Nov 2021 xx:xx:xx +0000
From: «x» <mail@altech.co.jp>
To: x
Subject: ✉️ATTN: UPDATE YOUR EMAIL BOX
Date: 22 Nov 2021 xx:xx:xx -0800
Message-ID: <x@altech.co.jp>
MIME-Version: 1.0
Content-Type: text/html;
charset=»iso-8859-1″
Content-Transfer-Encoding: quoted-printable
[…]