stanley tumbler phish from Microsoft outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Jan 2024 09:08:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rLmjQ-00000000A8g-30zW
for dave@doctor.nl2k.ab.ca;
Fri, 05 Jan 2024 09:07:36 -0700
Resent-From: The Doctor
Resent-Date: Fri, 5 Jan 2024 09:07:36 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-am6eur05on2098.outbound.protection.outlook.com ([40.107.22.98]:52448 helo=EUR05-AM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rLmel-000000007C0-0Xu0
for root@nk.ca;
Fri, 05 Jan 2024 09:02:51 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=P3o2tRQtijZNU34VH7m2dsak6nB4TSn5qm4QUErRynolShW+X97McDCWU3QDPotvWLlUj1i5nmWn8X9fBZujR9z442lsveADS6OGuPsDLerFRINUyUGY2OoNDkBELxb8nHRAQf5Qu0xV3JYhn2O2/npO3PBmsLfiOAgulpcSA7utbqu8/S+IYca9oWN+aGlKAKa5p9NGRSqVedP8TygD/RS7ee27MGOxhuKe7jesrHiTR/dNfqtTPgT5s+jI+WPT+3Ucut5PLNxYNCA1wO+brduPWAuRfrg6IgcLWnZLyX9tpuGQtCKw9+weYCxszsESWBplRXy7cIqbsshMX82yHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=zr7cpWExbYE/CDZBS8KR+2Q7otiHe9b6r6dBbrLwDWQ=;
b=Jm48f3dd1F3IBeWXvommNhtPx/pnf/SIXNqBWttE31vtyQPcDVt50HVgGSmyZf/WKaPpIs/03rvusULZ7qeu1CJxWh9ixNmeTgRlD079yp+2OpU8uBY7to6APkWuNSE3gpnQ2PZMkvks/DU6uC/qBJ+5CHEJCuv/nk2XVERyMnrwXiWR7tyPeBZgAiiRwAYrS65lD5udW2TvaHqdRdmomMLf6BY7sZJ2BBbkcf4q3mhGXtEcHxlPwUOBr2FrKyIjtt8x1BIYABuMBOm/1W49D6q0fmoonoWQkZzUERm0xHiPo6Bd7SoL7QryJlQ612WE1qdn2TmjXB+CcP4kSPZy6w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
74.207.229.146) smtp.rcpttodomain=nk.ca smtp.mailfrom=or07ms.onmicrosoft.com;
dmarc=none action=none header.from=or07ms.onmicrosoft.com; dkim=none (message
not signed); arc=none (0)
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 74.207.229.146)
smtp.mailfrom=OR07MS.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=OR07MS.onmicrosoft.com;
In-Reply-To: <1dqjm3QhRDq3GrDfCXcrWu5ZI0xVGR4xvtcYyidrj@RDG.OR07MS.onmicrosoft.com>
From: Stanley Tumbler Rewards
MIME-Version: 1.0
Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_K5rR.staeoude"
Subject: Order Verification - Stanley Tumbler
Date: Fri, 05 Jan 2024 16:52:37 +0100
To: root@nk.ca
CC: root@nk.ca
X-TOI-MSGID: <574985055.3674436EA0F62.1704469957523@hudson.com>
Importance: high
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM4PEPF00027A62:EE_|GV1PR10MB5987:EE_
X-MS-Office365-Filtering-Correlation-Id: af58b2b9-1c3c-470f-ee28-08dc0e078afb
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:74.207.229.146;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hudson.com;PTR:74-207-229-146.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(396003)(346002)(376002)(39860400002)(230922051799003)(186009)(64100799003)(82310400011)(1690799017)(7200799017)(61400799012)(451199024)(40470700004)(36840700001)(46966006)(8400799017)(40480700001)(40460700003)(33964004)(41320700001)(336012)(26005)(31696002)(82740400003)(564344004)(166002)(81166007)(34020700004)(47076005)(5660300002)(9686003)(36860700001)(4326008)(70206006)(6916009)(8936002)(70586007)(786003)(8676002)(41300700001)(316002)(42186006)(2906002)(478600001);DIR:OUT;SFP:1102;
X-OriginatorOrg: OR07MS.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Jan 2024 16:01:13.6906
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: af58b2b9-1c3c-470f-ee28-08dc0e078afb
X-MS-Exchange-CrossTenant-Id: 66ce73b2-a56c-4bde-b217-1edd2ee11102
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=66ce73b2-a56c-4bde-b217-1edd2ee11102;Ip=[74.207.229.146];Helo=[mail.hudson.com]
X-MS-Exchange-CrossTenant-AuthSource:
AM4PEPF00027A62.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB5987
X-Antivirus: AVG (VPS 240105-4, 1/5/2024), Inbound message
X-Antivirus-Status: Clean
--PART_K5rR.staeoude
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
(6049) Notifications For YOU
--PART_K5rR.staeoude--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Jan 2024 09:08:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rLmjQ-00000000A8g-30zW
for dave@doctor.nl2k.ab.ca;
Fri, 05 Jan 2024 09:07:36 -0700
Resent-From: The Doctor
Resent-Date: Fri, 5 Jan 2024 09:07:36 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-am6eur05on2098.outbound.protection.outlook.com ([40.107.22.98]:52448 helo=EUR05-AM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rLmel-000000007C0-0Xu0
for root@nk.ca;
Fri, 05 Jan 2024 09:02:51 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=P3o2tRQtijZNU34VH7m2dsak6nB4TSn5qm4QUErRynolShW+X97McDCWU3QDPotvWLlUj1i5nmWn8X9fBZujR9z442lsveADS6OGuPsDLerFRINUyUGY2OoNDkBELxb8nHRAQf5Qu0xV3JYhn2O2/npO3PBmsLfiOAgulpcSA7utbqu8/S+IYca9oWN+aGlKAKa5p9NGRSqVedP8TygD/RS7ee27MGOxhuKe7jesrHiTR/dNfqtTPgT5s+jI+WPT+3Ucut5PLNxYNCA1wO+brduPWAuRfrg6IgcLWnZLyX9tpuGQtCKw9+weYCxszsESWBplRXy7cIqbsshMX82yHw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=zr7cpWExbYE/CDZBS8KR+2Q7otiHe9b6r6dBbrLwDWQ=;
b=Jm48f3dd1F3IBeWXvommNhtPx/pnf/SIXNqBWttE31vtyQPcDVt50HVgGSmyZf/WKaPpIs/03rvusULZ7qeu1CJxWh9ixNmeTgRlD079yp+2OpU8uBY7to6APkWuNSE3gpnQ2PZMkvks/DU6uC/qBJ+5CHEJCuv/nk2XVERyMnrwXiWR7tyPeBZgAiiRwAYrS65lD5udW2TvaHqdRdmomMLf6BY7sZJ2BBbkcf4q3mhGXtEcHxlPwUOBr2FrKyIjtt8x1BIYABuMBOm/1W49D6q0fmoonoWQkZzUERm0xHiPo6Bd7SoL7QryJlQ612WE1qdn2TmjXB+CcP4kSPZy6w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
74.207.229.146) smtp.rcpttodomain=nk.ca smtp.mailfrom=or07ms.onmicrosoft.com;
dmarc=none action=none header.from=or07ms.onmicrosoft.com; dkim=none (message
not signed); arc=none (0)
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 74.207.229.146)
smtp.mailfrom=OR07MS.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=OR07MS.onmicrosoft.com;
In-Reply-To: <1dqjm3QhRDq3GrDfCXcrWu5ZI0xVGR4xvtcYyidrj@RDG.OR07MS.onmicrosoft.com>
From: Stanley Tumbler Rewards
MIME-Version: 1.0
Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_K5rR.staeoude"
Subject: Order Verification - Stanley Tumbler
Date: Fri, 05 Jan 2024 16:52:37 +0100
To: root@nk.ca
CC: root@nk.ca
X-TOI-MSGID: <574985055.3674436EA0F62.1704469957523@hudson.com>
Importance: high
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM4PEPF00027A62:EE_|GV1PR10MB5987:EE_
X-MS-Office365-Filtering-Correlation-Id: af58b2b9-1c3c-470f-ee28-08dc0e078afb
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
CEgYGtTEy+7Hb7JHWpFmlzrM8rHc0tqd8ubPEyl6J5vDPzVyZPILuuwDv0rv7cFsKljn+kxxiy0nmsYP69eTy4JrWG2iXfykA+MuUMlCBH1Cxmqmtpa1Ub+270sJCIqAg+k4oW30GPiUqf8gah4VPybzU3SvEVsVlYbPgr1W8487UPXg5XSGMmcByleKrSWXNvTXnQ1loHHfnXfkqAuhZci7QCv3728kW+XlaDyyuTyoKAgu1uzloxXiHaPTUeLlAPFlUPAIg/lddkHLCtIUWlxx9uVnev+wn4Mq0tpxcKixN5lfW1o9+kXb6/bakoVCjjvObJc+7k8/kyPU5EQ0/7UYg4Pk0nSaKYks8okfXKkM3zrPgfkbeo2sOKE9Oc0Vumad80ntTOxrRds0DlRrtpQgXH7h/bNWjPY5/o+QRr/sXIdlYzV8vdpse6PyWX1KVzbnIuMhvZmubwgHlQz9AohUP22Qv2SShh6z4QEGP0ienJYkmtmAhho8QZDS2guUYkhlZ9mCclQmWrP0gas1Cw==
X-Forefront-Antispam-Report:
CIP:74.207.229.146;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.hudson.com;PTR:74-207-229-146.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(396003)(346002)(376002)(39860400002)(230922051799003)(186009)(64100799003)(82310400011)(1690799017)(7200799017)(61400799012)(451199024)(40470700004)(36840700001)(46966006)(8400799017)(40480700001)(40460700003)(33964004)(41320700001)(336012)(26005)(31696002)(82740400003)(564344004)(166002)(81166007)(34020700004)(47076005)(5660300002)(9686003)(36860700001)(4326008)(70206006)(6916009)(8936002)(70586007)(786003)(8676002)(41300700001)(316002)(42186006)(2906002)(478600001);DIR:OUT;SFP:1102;
X-OriginatorOrg: OR07MS.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Jan 2024 16:01:13.6906
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: af58b2b9-1c3c-470f-ee28-08dc0e078afb
X-MS-Exchange-CrossTenant-Id: 66ce73b2-a56c-4bde-b217-1edd2ee11102
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=66ce73b2-a56c-4bde-b217-1edd2ee11102;Ip=[74.207.229.146];Helo=[mail.hudson.com]
X-MS-Exchange-CrossTenant-AuthSource:
AM4PEPF00027A62.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV1PR10MB5987
X-Antivirus: AVG (VPS 240105-4, 1/5/2024), Inbound message
X-Antivirus-Status: Clean
--PART_K5rR.staeoude
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
|
--PART_K5rR.staeoude--