Tupperware spam from microsoft

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 29 Dec 2023 08:32:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJEpV-00000000Pe9-0OXf

for dave@doctor.nl2k.ab.ca;

Fri, 29 Dec 2023 08:31:21 -0700

Resent-From: The Doctor

Resent-Date: Fri, 29 Dec 2023 08:31:21 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam10hn2234.outbound.protection.outlook.com ([52.100.157.234]:44193 helo=NAM10-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

id 1rJETm-000000008ib-3Le6

for doctor@doctor.nl2k.ab.ca;

Fri, 29 Dec 2023 08:08:59 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=KPspQYSH56iyXISoZHolxma819kUkOwvWwjlZIx2bIHtnP48eyo/7J/XWxG5tjfjiCNdroX4CtPAtxzvvAwn/uiX1ZRhKL7Q8NK/zOKQ2ZELLA2rRHjZIWr5F9uwBk4mzzZpELeLaMaMYxJO2JHUpAcAzVMMVazouA0m/PhbFMRwWUGp7ReEQN5NwDEV52UshfPDWKuOcnyUlqvaiSGtWuyjv8VLHtQ6QX8QDTeMKuaE9wq7wyH4fWe5xpXsSFlrEA/HKgqJWroRQoJGAR7DEtRZ71JKzq95eGpklOr37KPbRIcp47DBR+Uqz0RgHpa137UYy9pvFkicFHlme1k0Qg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=SVr6m7fvL+ktP6JNYMDLOJ88i17ep7/UpACNyX7cInw=;

b=URCdL0soqCiPeUt3jmoauJfMctxaVWYFfRbOMcrxKm5IdufXZZyUzmr9ctGKqP+JJX5VEMtOrjzL6pC5towN1X8w0YbR879jhKm1b2CB0OCzlAl5g3JL/WL7inqvmz18ZdcOA5FQ5OAv4uWiykgjmtGQmyj6c6wERORIHp6Yd+NP9e+KOj9J7oqHFwt4Lr98RtiL4ug53okQcvJfhFDLbNOAI/dR9XGDDXQyd4B/ilm1UImoi8WrldINHLZuhHsMQC1q0FYuLGrDOQZxno1BDmtaLigxBwtBTfN5BnE7tCN6C9824cs0l85v1O/ZQXRbcdS9CspDTIANeQ9IdaGOLg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

78.46.149.17) smtp.rcpttodomain=doctor.nl2k.ab.ca smtp.helo=mail.goldner.net;

dmarc=none action=none header.from=1r78099.onmicrosoft.com; dkim=none

(message not signed); arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1r78099.onmicrosoft.com; s=selector1-1r78099-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=SVr6m7fvL+ktP6JNYMDLOJ88i17ep7/UpACNyX7cInw=;

b=foiX0L8WAOUAgoEm0A4TrphNgXyBs1yQqdigcZyaj6OEIx7tFKYH8Dxv8F/jqVxPhFx+wLkCI/zkH+z6MX/TBiBoex+U4quXwMv7vBCDlc0EUXj+Z7hKF0PVvM24eI5S6Jelj0Era+68nQndyGqaEIWbdkZ92b4tow3NOC4LgmG/Cb6ghEHckQ8zKyS9qo9ChryhjLV8IAgX4BqOEWTVI28o1FtBPvxio40te9nzRMf2MYZFKWdBB8QnC8CBZ5D8Ivp1Bhal+nJuIrgH1lhGo1PCAQ1d2joHWJgnWNb0Yg73XF2kSWpIYwUxJzqdhsCaO6Uvv7G5ZVvgdrUFncN27Q==

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 78.46.149.17)

smtp.helo=mail.goldner.net; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=1r78099.onmicrosoft.com;

CC: doctor@doctor.nl2k.ab.ca

In-Reply-To: <6P7k4kQcK3uSbOThAOBnZRHF2WxyOx@tuGLaFqBmQ.1r78099.onmicrosoft.com>

Importance: high

X-TOI-MSGID: <1778809491.C366D21E67D3C.1703861688696@goldner.net>

To: doctor@doctor.nl2k.ab.ca

Content-Transfer-Encoding: 7bit

Date: Fri, 29 Dec 2023 15:54:48 +0100

MIME-Version: 1.0

Subject: =?UTF-8?B?V2luIGEgMzYgUGllY2UgVHVwcGVyd2FyZSBNb2R1bGFyIFNldCBieSBUYWtpbmcgT3VyIFN1cnZleQ==?=

From: =?UTF-8?B?S3JvZ2Vy?=

Content-Type: text/html; charset="UTF-8"

Message-ID:

<43bdcf59-7baa-4d0f-87f1-c98225711ea4@SN1PEPF0002636A.namprd02.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SN1PEPF0002636A:EE_|CO6P222MB0521:EE_

X-MS-Office365-Filtering-Correlation-Id: aea9c1c7-e470-4216-deec-08dc087fc62e

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

BTHWXbAq5WLf4mPgcjoZtCe+kbVX9C3h2GbNbUPBacEGI7xMePPB0wuen+g2md2SfpxdYCDpdGnbLCWZSTLyEkdPaFpR8mUQZjAsqPLLEfJh0wmSrC5KO5pCXL3hFgudh/eCbon+PuBbVWSflerz7zCgOI0Dit6IStrtmdXiXZd1oqz+Do5CEZqiWZmQL8D2U3skhPXG4V4arbt235affO/CB7AO+wx3anUhOkPMd/GwKrIzPCGJoeLvpaS4uCsrGrFalWGjLGD5XU0ddW7CC/LILtkwAIMj2y7jh+Dc57sunce+QPYmYMwg+JHOOuedIFuZB4kwhk90U1NpuuuOYAPkeN76S3Z7EEZq9uEoek4sBRa3Jt0mSAz4UCaoPnduZ0Lyz3M7G/bgjS2Qm6aGee2c9vkr9tvYAPA0R20wMYKc0eb5NHskDy5Pnm+jFERHA/3+u17HKRbWolSijKjSRrGOyGj328XVpd0rOcm1y+8=

X-Forefront-Antispam-Report:

CIP:78.46.149.17;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.goldner.net;PTR:static.17.149.46.78.clients.your-server.de;CAT:NONE;SFS:(13230031)(39860400002)(376002)(136003)(346002)(396003)(230922051799003)(61400799012)(64100799003)(82310400011)(1690799017)(451199024)(7200799017)(46966006)(26005)(9686003)(81166007)(35950700001)(41300700001)(558084003)(2906002)(8400799017)(6916009)(19625305002)(31696002)(5660300002)(70586007)(70206006)(498600001)(40480700001)(17440700003)(42882007)(67280400001)(4326008)(336012)(82740400003)(166002)(47076005)(8676002)(8936002)(78352004)(41320700001)(42186006)(316002)(786003)(3913002);DIR:OUT;SFP:1501;

X-OriginatorOrg: 1r78099.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 15:06:45.4222

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: aea9c1c7-e470-4216-deec-08dc087fc62e

X-MS-Exchange-CrossTenant-Id: d2ae39a8-0ef3-4185-90be-c73d99c9fb7f

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=d2ae39a8-0ef3-4185-90be-c73d99c9fb7f;Ip=[78.46.149.17];Helo=[mail.goldner.net]

X-MS-Exchange-CrossTenant-AuthSource:

SN1PEPF0002636A.namprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6P222MB0521

X-Spam_score: 7.1

X-Spam_score_int: 71

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications



Content analysis details: (7.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: harderto.blob.core.windows.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.157.234 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.157.234 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

1.0 HK_RANDOM_FROM From username looks random

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[tmtakas_dclbgk(at)1r78099.onmicrosoft.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FORGED_SPF_HELO No description available.

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} =?UTF-8?B?V2luIGEgMzYgUGllY2UgVHVwcGVyd2FyZSBNb2R1bGFyIFNldCBieSBUYWtpbmcgT3VyIFN1cnZleQ==?=









(1) Notifications
























I1.21KL0LD384I2.16KwhoissourceRank10.4MPIN0Summary reportDiagnosisDensity00n/a

Fedex Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Dec 2023 22:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ5FK-000000007nL-2yxa

for dave@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 22:17:22 -0700

Resent-From: The Doctor

Resent-Date: Thu, 28 Dec 2023 22:17:22 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam11on2100.outbound.protection.outlook.com ([40.107.236.100]:50935 helo=NAM11-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ2iq-0000000036T-1O7O

for doctor@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 19:35:44 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=NVRpoe9ICOmpnTpiEQDLl34Ucwon/FrCd3nHs15cnDB29Q6MEmdij6IX4608N4Y7xadzZTeHzJGG4q65tEFB+qdnBgvYLkWqx1QlZzW+gjlGkaia6potJOFtCHsjyRQOn4cDCmeHN5MPIml287QXxg8Y8CBko9lZ23lHtq/1DgVK1xam/VQsgoRQTouczN9c9HEpaBMJdUjFWXgbiLM1fWS3W+ULq/ynTOU1YxX36jT0prGnGA6t9PzZ1Y17aJR+x5Wh2EWIlPgrUFjkZsJa/f70ypW0uM0A6a5avKWa535+/Lq/URNI07TZxRken0r+Nb5iQLUhLJz1M0xVMirnKQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=achYhA62g8csa4q4avakf5Q3OH7ny0y3L+GeRV0AeW8=;

b=Bh3vSvyEymyflSbECGR42JoAe3ELVcx/f0bSsGd/oeIGLdhzYk4dOwSbgytjx8BqxbpiauT94Mygjw7LgAwXJWmkKyMqbV09/gyF9jEUlFMMH+n+8zHEX1gZUmDCXs4KEFLUiuDXEGLc0oxlvmepCgUSZ1XRjT3tUfrF0Jdxtj9D6QZguFpuet+3BZLxMnZLpiTnRacMdTIOHD3U3JN5PH379Jk+YX66AIouVbq+4Fdzn8oGi2TVNwqOJv9J7F3AtsHYQ3M18D2FU5UOuAquUo3QzF/CyPsCJLBlQpeG7WrR6GAszQ/qDitumwlshdpVIgDpmmb0QllgflijW+bMLQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.234.36.107) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=vdmtlncw.onmicrosoft.com; dmarc=none action=none

header.from=vdmtlncw.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vdmtlncw.onmicrosoft.com; s=selector1-vdmtlncw-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=achYhA62g8csa4q4avakf5Q3OH7ny0y3L+GeRV0AeW8=;

b=E0snxsX7RLANoZt98xh/t3bbOSZvlBpL9+D0l45v9k79VWkccnInwUBHIgq72/6//RvZGlRN9+YG9IZGD7USO19S30W5NUsDvEs35uVAbUuN3/OTn/CAhGT9zvRlVG7Fih4bm94umdlylbdnlGnlmBd2f67v79r4Bf9wgFJ8SORWsy3PpY+eONZsigFLKv5hS9NIW9DB05LGW0NzV++gamRZ1J0RGPegSnpU5BZBWjM80lBjIdQISrxclfDa4wDYcS3BW+nmw8kNL0MAl3D3RC9lUM9eBxZv9XaSk8u62k2OAxKARmL1TwaNTKcVxbQTljFeq4AYMgCW2cZClzGzRg==

Received: from DS7PR03CA0291.namprd03.prod.outlook.com (2603:10b6:5:3ad::26)

by BN0P223MB0197.NAMP223.PROD.OUTLOOK.COM (2603:10b6:408:147::6) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.8; Fri, 29 Dec

2023 02:33:34 +0000

Received: from SN1PEPF0002BA51.namprd03.prod.outlook.com

(2603:10b6:5:3ad:cafe::c6) by DS7PR03CA0291.outlook.office365.com

(2603:10b6:5:3ad::26) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7135.21 via Frontend

Transport; Fri, 29 Dec 2023 02:33:34 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.234.36.107)

smtp.mailfrom=vdmtlncw.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=vdmtlncw.onmicrosoft.com;

Received: from mail.hirthe.net (172.234.36.107) by

SN1PEPF0002BA51.mail.protection.outlook.com (10.167.242.74) with Microsoft

SMTP Server id 15.20.7159.9 via Frontend Transport; Fri, 29 Dec 2023 02:33:33

+0000

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART.gExQ.teulenry"

Subject: Important for doctor

MIME-Version: 1.0

From: Shipping Department

X-TOI-MSGID: <2001900369.3D9D97E8C4BAD.1703816027541@hirthe.net>

CC: doctor@doctor.nl2k.ab.ca

To: doctor@doctor.nl2k.ab.ca

In-Reply-To:

Importance: high

Date: Fri, 29 Dec 2023 03:13:47 +0100

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: SN1PEPF0002BA51:EE_|BN0P223MB0197:EE_

X-MS-Office365-Filtering-Correlation-Id: 8d05fa9e-5bee-4f38-44c0-08dc08168d9a

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.234.36.107;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hirthe.net;PTR:172-234-36-107.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(136003)(346002)(396003)(39860400002)(230922051799003)(186009)(1690799017)(1800799012)(82310400011)(7200799017)(64100799003)(451199024)(36840700001)(46966006)(40470700004)(2906002)(8400799017)(478600001)(40460700003)(564344004)(34070700002)(66899024)(6486002)(5660300002)(40480700001)(19625305002)(82740400003)(9686003)(33964004)(6666004)(70206006)(70586007)(8936002)(8676002)(7116003)(6506007)(4326008)(6512007)(786003)(6916009)(36736006)(316002)(118246002)(336012)(47076005)(26005)(9316004)(41320700001)(3480700007)(36860700001)(356005)(81166007)(956004)(31696002)(41300700001)(83380400001)(166002)(6082699003)(1406899027)(83022004);DIR:OUT;SFP:1102;

X-OriginatorOrg: vdmtlncw.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 02:33:33.6674

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 8d05fa9e-5bee-4f38-44c0-08dc08168d9a

X-MS-Exchange-CrossTenant-Id: 700fc255-a97f-41f0-bb96-0eacc9d075d1

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=700fc255-a97f-41f0-bb96-0eacc9d075d1;Ip=[172.234.36.107];Helo=[mail.hirthe.net]

X-MS-Exchange-CrossTenant-AuthSource:

SN1PEPF0002BA51.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN0P223MB0197

X-Spam_score: 5.6

X-Spam_score_int: 56

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (6649) Notifications If you no longer wish to receive these

emails, you may unsubscribe by clicking here.



Content analysis details: (5.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.107.236.100 listed in list.dnswl.org]

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: anotherswaytodo.blob.core.windows.net]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.107.236.100 listed in wl.mailspike.net]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid

0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[bounce_cslzgooj(at)vdmtlncw.onmicrosoft.com]

0.7 MPART_ALT_DIFF BODY: HTML and text parts are different

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Important for doctor



--PART.gExQ.teulenry

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(6649) Notifications































































If you no longer wish to receive these emails, you may unsubscribe by

clicking here.




















--PART.gExQ.teulenry--

I1.21KLLD384I2.16KwhoissourceRank10.4MPIN0Summary reportDiagnosisDensity00n/a

Amazon Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Dec 2023 22:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ5Fv-000000007nx-34So

for dave@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 22:17:59 -0700

Resent-From: The Doctor

Resent-Date: Thu, 28 Dec 2023 22:17:59 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11hn2222.outbound.protection.outlook.com ([52.100.173.222]:7425 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ4oK-0000000071Y-2i1w

for root@nk.ca;

Thu, 28 Dec 2023 21:49:32 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=MM7VcjNxiq0aOV8mxuzIqZpWayjNnVGGOGqIVoU0uR5eBXeJ+bvB5JmqDxaIdi85VQOHpiPhtm+tirT9I3o+d7BZZGj0DxPnxRtODXMFfBUkB1iLwlXwxQQJVJmzDdF/5PRDPQanfOuYleQPYt7PzVYXF0JT/EAIvjV0u1cM81Ent5rJTkV14k1lrWfJ8Xkb4zkte94O+u3tTQOkgrdZDc2jQfS6Zh8caryquKgukDdfOQTH3CpH8YJa/GhXZqiJJ5U5A3jzsxxaq9ihlAgM69ydLZo2eV8kG0FVt5793jfOF5pgoEDoP4n7sCPP03VpYbo4nIsxGh8BSxd6Y+Kjlg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=OsAuNSK/RfJVRvIyo1Lt7LrDzmjx1LHCiRtecBIlRFM=;

b=GAnbDbDEIhL3pdmYS4FdU/MS2o87ZBYf2rcAHnGGJEWiNmXAyh/skHJVUKhtZ1wuE8EtkXvEYJUr9xZZJD//UCr4lnfOfIKoWty6TxAuHS59lxapmmTb2LDTzUJge2VJ1VoJ2n/gaFOdRNkEy+GCKv8LsyvkeLLYMNG/nfBMpECAO6Ei5cht5b4BTMwNYzxVbg2IAL3WTwxWBQdFgSrN2TUaOEo7fxMg+0PBHAtFU95OGZmOclcSfmDZKttEJJv+OtPPurgXwLFUQHvUhngiT82nKc1K5B+pMBjt/0SF2dp/lxWVSJ7deq4rxoEUPcQRDSxDodT+vRwl7DEsTSXaXg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=tiktok.villegasadventure.com; dmarc=pass action=none

header.from=tiktok.villegasadventure.com; dkim=pass

header.d=tiktok.villegasadventure.com; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=tiktok.villegasadventure.com;

Received: from CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM (2603:10b6:930:dc::8) by

LV8P222MB0941.NAMP222.PROD.OUTLOOK.COM (2603:10b6:408:203::22) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7135.19; Fri, 29 Dec 2023 04:47:21 +0000

Received: from CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM

([fe80::dfa5:8d49:8a09:5d1]) by CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM

([fe80::dfa5:8d49:8a09:5d1%6]) with mapi id 15.20.7159.006; Fri, 29 Dec 2023

04:47:21 +0000

Date: Fri, 29 Dec 2023 05:47:21 +0100

To: root@nk.ca

From: Technical

Subject: Your Prime membership is Renewing - Fri, December 29, 2023 5:47 AM

Message-ID:

X-Mailer: WebService/1.1.18291 YMailNorrin Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36

Content-Type: text/html; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-ClientProxiedBy: BY5PR17CA0014.namprd17.prod.outlook.com

(2603:10b6:a03:1b8::27) To CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM

(2603:10b6:930:dc::8)

Importance: high

X-Priority: 1

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CYXP222MB1097:EE_|LV8P222MB0941:EE_

X-MS-Office365-Filtering-Correlation-Id: c478b6e7-ac9d-48ea-d260-08dc08293e97

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?VUpZaE92WGNldDFDTFBibzlScmRmblFXVmMvQ3NqTDRJQm5pZWxwV01URmVP?=

=?utf-8?B?d2VOWnEzZHNocWdLK3FCRjRNM05iSXE2ak5HRERwRFZZNEVmOG8yVjhTbVFW?=

=?utf-8?B?T0ZlRFZOZHk4K0VNdEJyUVNGd1gzTTJWck12RmVvdUc5QzNlR0hkTUVvWUZp?=

=?utf-8?B?VG1HcTFoNzVYU3hMdWo5aUpsTTI0YW40V3BEVFAwajQzU1NwMGlYaU5Qb2NL?=

=?utf-8?B?TFJIeXU5ZFNneFBET3BWbG9RNkJOWmN5NFJNWFNnUDI1eTNSZUdsbTBwcklE?=

=?utf-8?B?RVRFWXlCVUphR2FBeDVMQ1JNQ3NMTUNFdkhUeE9COWNFRnJFRGZIRzBtcTBR?=

=?utf-8?B?S2R4Wm45WVBLUUtkM282REdJYWdrNVJZSGRZN3QyTnRvMlNKcXRiOW95emZ1?=

=?utf-8?B?VzJYMEs0aGJFc0Jma2o1NUFQUU9QbDNhZW8wb2hhYnhibE5TZGYvZm1qMThx?=

=?utf-8?B?R0xGMElEVkpDb1N1R0tSSkRUaVQ2d0VRSENvcGl6NlB2Y2dpY2h1K0VUdEI4?=

=?utf-8?B?elMyNW1RMko4cGc5UjhJQUM3RmpQelJRYWRpT3I4emRYWFhNMXMvdWlHRDlR?=

=?utf-8?B?Q3ZIS1JiT1FSWUtZS3V1MGZ5NGVLdjdnL1ZGTmloaHNabXJvSHNPazF6cENa?=

=?utf-8?B?dHo2S043dFVPMTVVTXA3dVFoZ3ZmZU1MbXhTbWNUallhTGNkVDNOblFVS05l?=

=?utf-8?B?NU5iY3gyUkxabmt3UnhsYk1GcUxlSTJxSTREK2Q3U2ovcThYc3NaNnZENWJt?=

=?utf-8?B?dGlKSTlHRGhtMUgrRDNCUWFjTXF2RkI5aGM5VHhMT2VzeWN6YmhYamkvN2o1?=

=?utf-8?B?eWpnNUljbVJ5OFNFSmU5bURGQlpDeFQwVHQ4U1J5endNNDVpNG50cnYwcm1s?=

=?utf-8?B?RXhnaHZZY1J2VVQ3TVAyaUNxcjJVS0N3VUZMcHFNek5qMzFCNFFkQi9CNWc1?=

=?utf-8?B?NitWT2pqRThCZ0Vnb04yaTM2N2hicklrWisxVmU0eTR5WHVURzFJcVFOUkFJ?=

=?utf-8?B?endINFJ6amxLZlh4RWx2dVloNUdBcWU3REU4MEFuNlJCcHJWRXhPeDQvaHBk?=

=?utf-8?B?Qk1XemxUY2VGanFSTzlvbTNQNURVRFlFOXUyYUpYcWorRm0wd3pEUGpYMHBq?=

=?utf-8?B?OTF6YVR0SDJZN0NGNFlrd3lkT2JTOTlwZ1JtR1QrbEp5dkpxd2t3N1VTWWx4?=

=?utf-8?B?L21sMHBuak9MZmlWdEFwU0c0NEdGa0F1YXlQTCtnZzFSalNCb3pZbmtuWCtG?=

=?utf-8?B?dU5RTURvaE5aWUQ3czVWeUptcFhLMWt1TUF4OWhJMHVGdFBCdjVqa3JoMmdK?=

=?utf-8?B?TS9TUGZRR3pCZEYycFQrWHRMTmk4RGtBdmE5RStvVE9ONzBOOFJXaTRvS3Zp?=

=?utf-8?B?eTN0VEx2U2RxN2NvWmd1ZE1kcXpvTFgxdFJIZWl0RDVRS2Fuc3JvWVVzcGoy?=

=?utf-8?B?YVhESEM2My9EcitnRHlZV0l0WVRUbndXeWlJeEtlMVkwbnRFb1ZwOHh4WWIr?=

=?utf-8?B?L2RDKzhVQjh3cWpSR3o3QU5OOHRFeDNRTnhjTU5oN2lWbTJjRDUrdTIzR2Nk?=

=?utf-8?B?WmVHRkJDcDdDZXZvY3RHNnpCL0ZLK2dZNzRLRUJZeC9iaGtRS3MyN2lwOFpn?=

=?utf-8?Q?UFOG8lqYHoQ1O1qEYeWcbMOWFA+u5L9JnuanJEVU4d+A=3D?=

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM;PTR:;CAT:OSPM;SFS:(13230031)(39860400002)(396003)(376002)(366004)(136003)(346002)(230922051799003)(230173577357003)(230273577357003)(64100799003)(186009)(1690799017)(451199024)(1800799012)(76236004)(41320700001)(16799955002)(66556008)(6506007)(6916009)(6512007)(52116002)(66946007)(6486002)(86362001)(66476007)(9686003)(38350700005)(41300700001)(26005)(166002)(38100700002)(4744005)(83380400001)(5660300002)(2906002)(8936002)(478600001)(8676002)(786003)(316002)(51984012)(459424003);DIR:OUT;SFP:1501;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?cWpKbnRMelkvOFltclVjWTdRM2Z0Y1Jydnlaa0FFam9vNkQrbXU3bVd2Rzdm?=

=?utf-8?B?aG01dXg2NksyRytvOWZEL1N3VXp4Y2hYengrN2ZlY3c5NWxmQnNxcW1yekZQ?=

=?utf-8?B?R3oyUHBCenNveERuQU1zMUNRZ0cvclBKdmNUY3lUVTU5dDBORjNiWHo1VERH?=

=?utf-8?B?ZXhLaWtucDVTN1RPZXBmZUh3QitxbUxzSkpkZTNTeVI5Z1hueU8yY21aZFd1?=

=?utf-8?B?S2Q0ZWlKQmFGWjdWQU1ka0UrWXo2N0pxN1d5TWlNWjFrd3BkU2podnkyOWtX?=

=?utf-8?B?cklCdDlhc3BPL1pnTHRtaXcxK3lGNUcwUkJBem0xOFNlaXdQUW1TSU9HcEll?=

=?utf-8?B?MlR1aGlEK09STDQyc0U4RUpEbFg4K0R5TkRkd0RubVBhYlpwK0hka1FuRlFQ?=

=?utf-8?B?aGZSZldxSTlzYk43bENWd0s3QVh5QkZiWEZjSjVwRDFRSVZEdmVzVUxyTW9U?=

=?utf-8?B?dmllQ21TNEttK0pkMTFWQ3BROXhMUUNuVHZwNUZsOGdyT2dydGtRaGRzYVdD?=

=?utf-8?B?U0pNaVlOZjk5YXA0U0w1d2loRVptQkFxNjhDSUNvSDZ4MDBacUQvUGl1Rklz?=

=?utf-8?B?OUdxa1o4WXlQZk1WaEk3SU5ZOWp2R2JaYmFwaThzSDh5SlBEVDB1bTFPNmxU?=

=?utf-8?B?UVhnRVlvSW8vaGU2dXZ5SFdXNXJ1QWZwSFZOV0lSM3NpVWdsdEh4emtQcFpq?=

=?utf-8?B?TlpkQmRIY3JxWjRTdm9lWWtZcWtab3V5Rk01eDBIUkNsdFkrQSs4TlE5ekRx?=

=?utf-8?B?ZDhsSXRpQXNKdFAxUUZTanUzL0djOVp1dE0yczV1bWtLV2xreWRZRDVZSGdl?=

=?utf-8?B?elpoR0piRUdhQkZzTWUwazJ1NXVNcjdUV3BOWFBSTDVBOXVuTXhrNzYyMlB1?=

=?utf-8?B?RUhuS0ExU015YUgwV1F4bUFTRGx4c0ZQd1YxRmpQVGI1K1g4dW5QLzNQV0dW?=

=?utf-8?B?MmdvM2N6VFZqblN5OTNjMjRqa0lobXM1VHpMdDdUQlpLeFJSdVJQMkpYN3pO?=

=?utf-8?B?amtxSTExT0w3cmVqZlZFYzV4MXpuRmlwbFRtWWlaZWR4cU42R0xXM3hUYnRF?=

=?utf-8?B?amdzbFppT3VUc0tIN1VsbGdCWWRZRDBDa1lGUDVlbUdDdXpGcExYblJlSlBJ?=

=?utf-8?B?cWt3MENpdERvd3JsUGsrSHBwQmNzL2xnZ2c3MWc3eFE5aE5COGc5K2ZpRlJu?=

=?utf-8?B?ZVJWbUg5TWkvUjE2TnRtWktxVUZSa1c2UjNQdC9nZ214bnU0R3JIMGF3NkJu?=

=?utf-8?B?TTBIdEVFdFVGM2xhSGVyTDFrUjBPYUpJYjMxbXF3V2pncEMvT3RramY2YXNY?=

=?utf-8?B?dGR0Mm14OGpadGdLcTdya0pCc09JU2ROYlZidXUvUTZaVzhENi81K25wZDVI?=

=?utf-8?B?dmw3VlJ4dXBLOTYwb0V0M3ZlbWZXSTRrSVFYaEdvM005RGpaU0M3ZThKUkUy?=

=?utf-8?B?dTI0b1JvTllKNHpnc0s0NDVrUW5CNTQ1NnNacEZNNmtGT3l6REJBeGxyak15?=

=?utf-8?B?YUIrTEhrSkxqT3dHYXNZZnd5UGFIcW13Vmd6YUxXYnNYZnVOM3BLc2lQTXo2?=

=?utf-8?B?UEU3QjBvMUpxdG1KWkRRYytOR1JrcU5KYzZ0MzRVZGovalhxeTBEU3drRzht?=

=?utf-8?B?czErcE5EWlVNYWQzbDBsS2FhMkV0ZVhRUXc3aHgxUHJ4ZkFqZHBscmtkZXVj?=

=?utf-8?B?d0NGemx6dC93YnRDSE5IcWRnM1FTNk5CT25RZ1hYZTBrUCtleEFNdGk3UWZp?=

=?utf-8?B?ekt5UUtsYTFSeUIwZ1dpS1lIa3lQNUZPS3UwNjZGMFVFSmVBUTBsUGdaRURo?=

=?utf-8?B?ek5oQ0diL0ZNblg4c3pwR0ZvUjV1Y3hVWUJZeVc3VUdFb21IZEVKbGRWKzgy?=

=?utf-8?B?bkNCT1VWaFkybnZWR1BEU2ljQUMvbVJvaTJnQ1ZOR1gyZXlaTDNGdHZrZ051?=

=?utf-8?B?UitNSkJxUWZra3FCWDd5bSt4SjBIMFA1dTE5TGd0dzc0NnUwbVAzdlk5TkM0?=

=?utf-8?B?am9lUVZaaGtsbHJIaWRFU1lDMDEyajJ1WEVNVmdBMm1ZTDl2bW5LdmRDdjFu?=

=?utf-8?B?VGl4cTc1RlAxbkJYdVpwbE1ITTAzd0VZWXU4cUM2L1dWZ0pnd05MRDJTRnpo?=

=?utf-8?B?UThVaFhXZlJMUUYwRGd2WjRoTmNtbGtCM3lzK2ZobVVFejY5WnNaSmRaRFhv?=

=?utf-8?B?YkNPTkNXd2pxcnoyVkNJVW0xMDdPY3d3cDBqVTVqYXJHQTJEQm45ZjRVZUJT?=

=?utf-8?B?QXpKMG8wQWhrOGQ5RFQ1TzIxQVNVbWJZM0VmcUJnLzdObnBTYmpIUkFFQ05Y?=

=?utf-8?Q?J6mkWXsNr6cfiRB9jI?=

X-OriginatorOrg: tiktok.villegasadventure.com

X-MS-Exchange-CrossTenant-Network-Message-Id: c478b6e7-ac9d-48ea-d260-08dc08293e97

X-MS-Exchange-CrossTenant-AuthSource: CYXP222MB1097.NAMP222.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 04:47:21.7611

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: dbbb195f-4a0a-4922-9e6e-e4ae6eb1bf18

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: qIgWGp8y3ujFTkbQ8llNf7lQJEj25vUKpNZ7eBKYqCcHnUyrJN3FDiwcklFt+ns/Sf2YCPmehF/iVIY2hEMnWIBYZpeDX9hRqpH5sl0bA3bqonnGh4D4DLYSi03z20ShmMifao59AZ3H/zvfuyrSlnYpM5eDS23pWPcEj1TAOYSG6k5rFO3uujkpSGyqDuewvGp5voOPKxaLhiMh3FdbtA==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8P222MB0941

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear root@nk.ca, Your Amazon account is temporarily on hold

because of an unusual login. About this change Fri, December 29, 2023 5:47

AM Around Florida, United States Macbook Retina Pro Check Activi [...]



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.173.222 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.173.222 listed in list.dnswl.org]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 AMAZON_IMG_NOT_RCVD_AMZN Amazon hosted image but message not from

Amazon

1.0 FORGED_SPF_HELO No description available.

1.6 FORGED_MUA_MOZILLA Forged mail pretending to be from Mozilla

Subject: {SPAM?} Your Prime membership is Renewing - Fri, December 29, 2023 5:47 AM




body>
g=3D"0" cellpadding=3D"0" align=3D"center" style=3D"border-collapse:collaps=

e">

30px;margin:0 auto" dir=3D"ltr" bgcolor=3D"#ffffff">
lspacing=3D"0" cellpadding=3D"0" align=3D"center" id=3D"m_-4190993533000013=

413email_table" style=3D"border-collapse:collapse;max-width:630px;margin:0 =

auto">

nt-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-=

serif;background:#ffffff">
"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
r>=


ght=3D"20" style=3D"line-height:20px" colspan=3D"3">

t=3D"1" colspan=3D"3" style=3D"line-height:1px">

15" style=3D"display:block;width:15px">
=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:coll=

apse">
>

>

eight:32;line-height:0px">
com/images/G/01/authportal/tiv/amazon_logo_RGB._CB424887820_.png" height=3D=

"32" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit">
"15" style=3D"display:block;width:15px">
=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial=

,sans-serif;font-size:19px;line-height:32px;color:#ffffff">

ine-height:15px" colspan=3D"3">

15" style=3D"display:block;width:15px">

=3D"display:block;width:15px">
ellspacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse">
y>
>

class=3D"m_-4190993533000013413mb_text" style=3D"font-family:Helvetica Neue=

,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;font-size:16px;lin=

e-height:21px;color:#141823">Dear root@nk.ca,

t=3D"15" style=3D"line-height:15px">

0993533000013413mb_text" style=3D"font-family:Helvetica Neue,Helvetica,Luci=

da Grande,tahoma,verdana,arial,sans-serif;font-size:16px;line-height:21px;c=

olor:#141823">Your Amazon account is temporarily on hold because of an unus=

ual login.

>

ont-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans=

-serif;font-size:16px;line-height:21px;color:#141823">About this ch=

ange

px">

cellpadding=3D"0" style=3D"border-collapse:collapse">
ight:44px">
x;vertical-align:center">
=3D"height:44px">

x65E4RmTqKykmV3ZESDvtDZa063Q387S4JJDlv5ub6VqoVeS8Twy8uQSO5xKCYxd4hEZHRUPTgf=

b0OlMBoo7Lvu0WCB9CvCQng=3Ds0-d-e1-ft#https://static.xx.fbcdn.net/rsrc.php/v=

3/yD/r/KJyTP_2W_qx.png" style=3D"border:0" class=3D"CToWUd" data-bit=3D"iit=

">		Fri, December 29, 2023 5:47 AM

proxy/c9KFiortacut7caoUURGRlkeLOtIp-GtyR_GZqDr1gYQwFrxxbpoOsCWFXS_-DQ_T_Eem=

JBcB1g5k9jMZpGgtFUMhwPTIVTc3OCSWTmjZQ=3Ds0-d-e1-ft#https://static.xx.fbcdn.=

net/rsrc.php/v3/yK/r/EYwma6hBA2v.png" style=3D"border:0" class=3D"CToWUd" d=

ata-bit=3D"iit">		Around Florida, United States

b8OTowRc5zsA9QcEyU2xGsDy8nYud4_uHcFrJ0zo-wdBgU12ZNIsSTsA8KjsPhHmc3gKMvy0F2B=

9weZzpAEwgCTZhh9d9BNLRQTfl9MA=3Ds0-d-e1-ft#https://static.xx.fbcdn.net/rsrc=

.php/v3/yC/r/Ve5FEXFHw7A.png" style=3D"border:0" class=3D"CToWUd" data-bit=

=3D"iit">		Macbook Retina Pro

er=3D"0" width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" style=3D"border=

-collapse:collapse">
<=

/td>

le=3D"color:#1b74e4;text-decoration:none" target=3D"_blank" data-saferedire=

cturl=3D"https://www.facebook.com/">
spacing=3D"0" cellpadding=3D"0" style=3D"border-collapse:collapse"><=

tr>

r;display:block;background:#f1c65D;padding:8px 20px 8px 20px">
tps://google.federicogaon.com/RoUXQE" style=3D"color:#1b74e4;text-decoratio=

n:none;display:block" target=3D"_blank" data-saferedirecturl=3D"">
<=

font size=3D"3">
Grande,tahoma,verdana,arial,sans-serif;white-space:nowrap;font-weight:bold;=

vertical-align:middle;color:#ffffff;font-weight:500;font-family:Roboto-Medi=

um,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida =

Grande,tahoma,verdana,arial,sans-serif;font-size:17px">Check Activity
>

=3D"8" style=3D"line-height:8px">

ine-height:13px">

style=3D"line-height:15px">

0013413mb_text" style=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande=

,tahoma,verdana,arial,sans-serif;font-size:16px;line-height:21px;color:#141=

823">Please verify and change your password to reactivate your Amazon accou=

nt. If we are unable to complete this action within 24 hours, all pending o=

rders will be canceled, and you won't be able to access your account until =

this process is complete.

ne-height:15px">

ext" style=3D"font-family:Helvetica Neue,Helvetica,Lucida Grande,tahoma,ver=

dana,arial,sans-serif;font-size:16px;line-height:21px;color:#141823">Thank =

You,
Security Team

eight:15px">

y:block;width:15px">

idth:15px">
llpadding=3D"0" align=3D"left" style=3D"border-collapse:collapse">
r style=3D"border-top:solid 1px #e5e5e5">
y>

ight:19px">

ple-system,BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma=

,verdana,arial,sans-serif;font-size:11px;color:#8a8d91;line-height:16px;fon=

t-weight:400">
=3D"border-collapse:collapse;color:#8a8d91;text-align:center;font-size:12px=

;font-weight:400;font-family:Roboto-Regular,Roboto,-apple-system,BlinkMacSy=

stemFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-s=

erif">

oboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,Helvet=

ica,Lucida Grande,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-align:=

center;font-weight:400;padding-bottom:6px">

r" style=3D"font-size:12px;font-family:Roboto-Regular,Roboto,-apple-system,=

BlinkMacSystemFont,Helvetica Neue,Helvetica,Lucida Grande,tahoma,verdana,ar=

ial,sans-serif;color:#8a8d91;text-align:center;font-weight:400;padding-top:=

6px;padding-bottom:6px">3D"Meta"
ttps://ci4.googleusercontent.com/proxy/d3D_pwZxEfzej1l0yE5VCB7hNnHBxmwllq0R=

GTLQMQjNiyMQILxq8jnUO-Q6Wss8zCSYPdVqCSFHrlVWX8fj7LCw=3Ds0-d-e1-ft#https://f=

acebook.com/images/email/meta_logo.png" style=3D"border:0" class=3D"CToWUd"=

data-bit=3D"iit">

x;font-family:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvet=

ica Neue,Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;color:#8a8=

d91;text-align:center;font-weight:400;padding-top:6px;padding-bottom:6px">=

=C2=A9 Amazon, Inc., Attention: Community Support, 1 Prime Way, Menlo Park,=

CA 94025

mily:Roboto-Regular,Roboto,-apple-system,BlinkMacSystemFont,Helvetica Neue,=

Helvetica,Lucida Grande,tahoma,verdana,arial,sans-serif;color:#8a8d91;text-=

align:center;font-weight:400;padding-top:6px">This message was sent to
tyle=3D"color:#1b74e4;text-decoration:none" href=3D"mailto:root@nk.ca" targ=

et=3D"_blank">root@nk.ca.
To help keep your account safe, please do=

not forward this email.
ef=3D"https://www.facebook.com/help/213481848684090/" target=3D"_blank" dat=

a-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://www.facebook.co=

m/help/213481848684090/&source=3Dgmail&ust=3D1687171260017000&u=

sg=3DAOvVaw32Uqlt33nD2sLieoXk0L9E">Learn more
=


Ldq7kKHZQeCUx4ryG6ANcWwQV1hcSPrfRMEmwu_mFvKaq7uX-QVBqFUXSMBovxmOxe3GwHX0eQx=

raYK-R8LTHez7x2jOWrVbTUDcuN-0JHqQkTCe_QFo5Mm7TeZPcmEiZIuxOHBWN0-T5vXN23VazH=

JwA=3Ds0-d-e1-ft#https://www.facebook.com/email_open_log_pic.php?mid=3D5fe1=

3a3f4faaeG5b0581311d19G5fe13ed8afd80G18e" style=3D"border:0;width:1px;heigh=

t:1px" class=3D"CToWUd" data-bit=3D"iit">
<=

/div>


I1.21KL0LD384I2.16KwhoissourceRank10.4MPIN0Summary reportDiagnosisDensity00n/a

Fedex Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Dec 2023 18:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ1cz-000000001kt-1OnO

for dave@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 18:25:33 -0700

Resent-From: The Doctor

Resent-Date: Thu, 28 Dec 2023 18:25:33 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur04on2051.outbound.protection.outlook.com ([40.107.7.51]:29440 helo=EUR04-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ1ZD-000000001ZS-1yHh

for doctor@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 18:21:43 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=N0z53eUK9+j4CpGovBeHApu8ItU3ZzPKwT5iqNDE46IotjI1/RMRbP0XQUI261chpT6KprKzvduQ6jWe11AiKbOIbBWQOPfSLLy6z1Bt93W17/lv+h9GisIf5DEezjeuzKYkdKmzTziEO8XjVQojvhC4jq8u9+x6depjFq7jqXo4k+JTBcxJP/rAEQBE22VMbzo6WljM2WCnwug4FlKuiO+26aCnpDK3uyjVyItdiDTZ0kmKcNGe0+42mhLB4PCR5BNTXA3bxjOsZceyXHUcSccf6zaVe1aE3w3aUi3qVQbTk1t5nHeHE7y1vOQC5A79WeWtR69m7GoxD3DixNlfzw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=5EDXwmwMLlZJEwQ8nMsnUIAZB1fIUKGBVPZQVKFGHeY=;

b=OLFKvUSWKqxM4hGjW9IVmEfbV5i0/pgxpfAPDKBlB/UVKa1TC35VOZtrPRbs+ZWgUrgl6h37rQWXAj13ZMrMAJZ89i92EivvK/bItAstrIkMXCzNdPP10GN8LAKUoxcwF6XDVo8SowLSfw+NOvqjjcKnftEFrlzUad9rOYg+BclVxh/up5ITtGuVJJLOuNVz8IqZV/QBwS2fL1OKXjg7NCD5gL1xfGzBkkp6oYay9noJx0Yc8or4ElcEmFSgmWstGMZ/J4EOZjXpCsBkNkk8TpQpTKIZP0wiuu3ZVb1igkWtaBbz1WuPYHBrrbvlI96EOk2HR9ZoPV4u1nqJUbkO6w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.222.135) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=es02ms.onmicrosoft.com; dmarc=none action=none

header.from=es02ms.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.222.135)

smtp.mailfrom=ES02MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=ES02MS.onmicrosoft.com;

From: =?UTF-8?B?U2hpcHBpbmcgRGVwYXJ0bWVudA==?=

MIME-Version: 1.0

Importance: high

Date: Fri, 29 Dec 2023 02:16:50 +0100

In-Reply-To:

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_b7GI.mytqqnhi"

Subject: Important for doctor

To: doctor@doctor.nl2k.ab.ca

CC: doctor@doctor.nl2k.ab.ca

X-TOI-MSGID: <492523584.502521A1F3D1C.1703812610053@hudson.com>

Message-ID:

<14d76994-1228-41af-89aa-8f0e76009331@AMS0EPF000001B3.eurprd05.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AMS0EPF000001B3:EE_|DU0PR10MB6509:EE_

X-MS-Office365-Filtering-Correlation-Id: ed9bdf76-e66f-49c2-59d3-08dc080c356f

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.222.135;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hudson.com;PTR:172-233-222-135.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(39860400002)(346002)(396003)(136003)(376002)(230922051799003)(82310400011)(61400799012)(64100799003)(451199024)(186009)(1690799017)(7200799017)(46966006)(36840700001)(40470700004)(3480700007)(40460700003)(40480700001)(41320700001)(81166007)(478600001)(36860700001)(8400799017)(9686003)(42186006)(31696002)(41300700001)(82740400003)(70586007)(33964004)(316002)(6916009)(70206006)(786003)(47076005)(34020700004)(8936002)(8676002)(2906002)(166002)(4326008)(564344004)(7116003)(336012)(19625305002)(6082699003)(5660300002)(26005);DIR:OUT;SFP:1101;

X-OriginatorOrg: ES02MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 01:19:30.6543

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ed9bdf76-e66f-49c2-59d3-08dc080c356f

X-MS-Exchange-CrossTenant-Id: ac42b354-6a08-466b-af44-99b0968edd61

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ac42b354-6a08-466b-af44-99b0968edd61;Ip=[172.233.222.135];Helo=[mail.hudson.com]

X-MS-Exchange-CrossTenant-AuthSource:

AMS0EPF000001B3.eurprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB6509



--PART_b7GI.mytqqnhi

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(9159) Notifications For YOU









































































































--PART_b7GI.mytqqnhi--

I1.21KL0LD384I2.16KwhoissourceRank10.4MPIN0Summary reportDiagnosisDensity00n/a

Fedex Phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 28 Dec 2023 18:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ1d4-000000001lE-4A07

for dave@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 18:25:38 -0700

Resent-From: The Doctor

Resent-Date: Thu, 28 Dec 2023 18:25:38 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur04on2051.outbound.protection.outlook.com ([40.107.7.51]:29440 helo=EUR04-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97 (FreeBSD))

(envelope-from )

id 1rJ1ZD-000000001ZS-1yHh

for doctor@doctor.nl2k.ab.ca;

Thu, 28 Dec 2023 18:21:43 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=N0z53eUK9+j4CpGovBeHApu8ItU3ZzPKwT5iqNDE46IotjI1/RMRbP0XQUI261chpT6KprKzvduQ6jWe11AiKbOIbBWQOPfSLLy6z1Bt93W17/lv+h9GisIf5DEezjeuzKYkdKmzTziEO8XjVQojvhC4jq8u9+x6depjFq7jqXo4k+JTBcxJP/rAEQBE22VMbzo6WljM2WCnwug4FlKuiO+26aCnpDK3uyjVyItdiDTZ0kmKcNGe0+42mhLB4PCR5BNTXA3bxjOsZceyXHUcSccf6zaVe1aE3w3aUi3qVQbTk1t5nHeHE7y1vOQC5A79WeWtR69m7GoxD3DixNlfzw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=5EDXwmwMLlZJEwQ8nMsnUIAZB1fIUKGBVPZQVKFGHeY=;

b=OLFKvUSWKqxM4hGjW9IVmEfbV5i0/pgxpfAPDKBlB/UVKa1TC35VOZtrPRbs+ZWgUrgl6h37rQWXAj13ZMrMAJZ89i92EivvK/bItAstrIkMXCzNdPP10GN8LAKUoxcwF6XDVo8SowLSfw+NOvqjjcKnftEFrlzUad9rOYg+BclVxh/up5ITtGuVJJLOuNVz8IqZV/QBwS2fL1OKXjg7NCD5gL1xfGzBkkp6oYay9noJx0Yc8or4ElcEmFSgmWstGMZ/J4EOZjXpCsBkNkk8TpQpTKIZP0wiuu3ZVb1igkWtaBbz1WuPYHBrrbvlI96EOk2HR9ZoPV4u1nqJUbkO6w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

172.233.222.135) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=es02ms.onmicrosoft.com; dmarc=none action=none

header.from=es02ms.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.233.222.135)

smtp.mailfrom=ES02MS.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=ES02MS.onmicrosoft.com;

From: =?UTF-8?B?U2hpcHBpbmcgRGVwYXJ0bWVudA==?=

MIME-Version: 1.0

Importance: high

Date: Fri, 29 Dec 2023 02:16:50 +0100

In-Reply-To:

Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_b7GI.mytqqnhi"

Subject: Important for doctor

To: doctor@doctor.nl2k.ab.ca

CC: doctor@doctor.nl2k.ab.ca

X-TOI-MSGID: <492523584.502521A1F3D1C.1703812610053@hudson.com>

Message-ID:

<14d76994-1228-41af-89aa-8f0e76009331@AMS0EPF000001B3.eurprd05.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AMS0EPF000001B3:EE_|DU0PR10MB6509:EE_

X-MS-Office365-Filtering-Correlation-Id: ed9bdf76-e66f-49c2-59d3-08dc080c356f

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:172.233.222.135;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hudson.com;PTR:172-233-222-135.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(39860400002)(346002)(396003)(136003)(376002)(230922051799003)(82310400011)(61400799012)(64100799003)(451199024)(186009)(1690799017)(7200799017)(46966006)(36840700001)(40470700004)(3480700007)(40460700003)(40480700001)(41320700001)(81166007)(478600001)(36860700001)(8400799017)(9686003)(42186006)(31696002)(41300700001)(82740400003)(70586007)(33964004)(316002)(6916009)(70206006)(786003)(47076005)(34020700004)(8936002)(8676002)(2906002)(166002)(4326008)(564344004)(7116003)(336012)(19625305002)(6082699003)(5660300002)(26005);DIR:OUT;SFP:1101;

X-OriginatorOrg: ES02MS.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Dec 2023 01:19:30.6543

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ed9bdf76-e66f-49c2-59d3-08dc080c356f

X-MS-Exchange-CrossTenant-Id: ac42b354-6a08-466b-af44-99b0968edd61

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ac42b354-6a08-466b-af44-99b0968edd61;Ip=[172.233.222.135];Helo=[mail.hudson.com]

X-MS-Exchange-CrossTenant-AuthSource:

AMS0EPF000001B3.eurprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB6509



--PART_b7GI.mytqqnhi

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset="UTF-8"











(9159) Notifications For YOU









































































































--PART_b7GI.mytqqnhi--

I1.21KL0LD384I2.16KwhoissourceRank10.4MPIN0Summary reportDiagnosisDensity00n/a