Lowe's Phish from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 09 Jan 2024 08:35:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rNE7C-00000000MmN-0trr
for dave@doctor.nl2k.ab.ca;
Tue, 09 Jan 2024 08:34:06 -0700
Resent-From: The Doctor
Resent-Date: Tue, 9 Jan 2024 08:34:06 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-mw2nam12on2045.outbound.protection.outlook.com ([40.107.244.45]:43124 helo=NAM12-MW2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rND9J-00000000LDr-1vln
for doctor@doctor.nl2k.ab.ca;
Tue, 09 Jan 2024 07:32:19 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=mRcfqETb5kAYfxGvlmvL6n2yOMRTvpCDVKdctbGKmexbhYk4fStIAY0MH/oULUuB6hZW2VaFbZhkZK4Ae/dsF2AhJiP167bcd9lTrFXL+T7k6cIQ2XnTwV+FHLjfmv74AzoTte7OISuE2uOvsjL7MeErBSunMB4D4+JhdvbClDHY0AqLkp3IwfAq36TAOcVVO1uExk/bi/9X5pWq5ZPJBy4BSTUSnA+jnjsrmDkVPnLz7RVL4vAbLTWqXjolQedUmU574OQ6YcUJPNBOIfRCX7FE53pVZa+u30PcRoKNECXBt4WUzQvuyL0hwUyZfJPBPWK/7wuR/U1/7Q7f2qo9Fg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=CDeHrv9z5gZdI9XJIw5bNDZIxuGYVZYtjsVWoUbchiw=;
b=LCPR0G6AbHMaV5aI4LJQemYr0pJovm+6/twXUrYtyKdDkul06lYgjYJi7j7sVkz+BYurb42SYYlRTcWOnnBHn0UVyHRUT5qsBXbP+Y93AARGw0WdUYEagY7PlBRJBnLj++wqP0fGIduFVsFxZt8gge4WCjg8zzNblZTHor7nHooXdn/6oGkhcAqNSHkCb5/WNfQwXfvOLGpjpGmQ7Swu8KZejtB8DBouZwSYm7ke3M0MR4O+uEVsbKipf6oaPGi5K/WyVXPIxs7Wg4pVHUAqlRAybrI7qsDiT3qvzaW26AWpiidYTjHaWM6N2cRjPk3v0lDs6mwPt1CHzcDhvV9DDg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
172.232.25.55) smtp.rcpttodomain=doctor.nl2k.ab.ca
smtp.mailfrom=xc2h60z.onmicrosoft.com; dmarc=none action=none
header.from=xc2h60z.onmicrosoft.com; dkim=none (message not signed); arc=none
(0)
Received: from BL1PR13CA0015.namprd13.prod.outlook.com (2603:10b6:208:256::20)
by CO6PR10MB5619.namprd10.prod.outlook.com (2603:10b6:303:14a::9) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.23; Tue, 9 Jan
2024 14:30:41 +0000
Received: from BL6PEPF0001AB78.namprd02.prod.outlook.com
(2603:10b6:208:256:cafe::3) by BL1PR13CA0015.outlook.office365.com
(2603:10b6:208:256::20) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7181.16 via Frontend
Transport; Tue, 9 Jan 2024 14:30:41 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.232.25.55)
smtp.mailfrom=xc2h60z.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=xc2h60z.onmicrosoft.com;
Received-SPF: Fail (protection.outlook.com: domain of xc2h60z.onmicrosoft.com
does not designate 172.232.25.55 as permitted sender)
receiver=protection.outlook.com; client-ip=172.232.25.55;
helo=mail.vnexpress.net;
Received: from mail.vnexpress.net (172.232.25.55) by
BL6PEPF0001AB78.mail.protection.outlook.com (10.167.242.171) with Microsoft
SMTP Server id 15.20.7181.14 via Frontend Transport; Tue, 9 Jan 2024 14:30:40
+0000
MIME-Version: 1.0
Importance: high
Date: Tue, 09 Jan 2024 15:26:13 +0100
In-Reply-To: <33V3RpVx00hTUvmSezIsBiZXV1qHE5gyAxw92bQEP@NQxQjaD.DG.com>
X-TOI-MSGID: <50507222.A932199F81442.1704810373797@vnexpress.net>
Sender: adm_GIxeLwtfrtV@xc2h60z.onmicrosoft.com
Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_Kqlm.rwajpqob"
CC: doctor@doctor.nl2k.ab.ca
From: Lowe's_Rewards_!!!
To: doctor@doctor.nl2k.ab.ca
Subject: notice_for_doctor_!!
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB78:EE_|CO6PR10MB5619:EE_
X-MS-Office365-Filtering-Correlation-Id: 9049941b-e84d-464b-36c5-08dc111f8e34
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:172.232.25.55;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.vnexpress.net;PTR:172-232-25-55.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(396003)(39860400002)(346002)(136003)(230922051799003)(451199024)(61400799012)(7200799017)(1690799017)(82310400011)(186009)(64100799003)(36840700001)(46966006)(40470700004)(34020700004)(40460700003)(36860700001)(336012)(47076005)(40480700001)(26005)(5660300002)(7116003)(19625305002)(33964004)(9686003)(4326008)(6506007)(7846003)(8400799017)(956004)(6512007)(166002)(82740400003)(81166007)(356005)(6486002)(31696002)(6666004)(478600001)(6916009)(41320700001)(36736006)(70206006)(316002)(786003)(70586007)(8676002)(8936002)(9316004)(118246002)(41300700001)(2906002)(564344004)(43852003)(19607625013);DIR:OUT;SFP:1101;
X-OriginatorOrg: xc2h60z.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jan 2024 14:30:40.5493
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 9049941b-e84d-464b-36c5-08dc111f8e34
X-MS-Exchange-CrossTenant-Id: 79432332-f417-43e7-84a8-8203b4e26f73
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=79432332-f417-43e7-84a8-8203b4e26f73;Ip=[172.232.25.55];Helo=[mail.vnexpress.net]
X-MS-Exchange-CrossTenant-AuthSource:
BL6PEPF0001AB78.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR10MB5619
X-Antivirus: AVG (VPS 240109-2, 1/9/2024), Inbound message
X-Antivirus-Status: Clean
--PART_Kqlm.rwajpqob
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
(2380) Notifications
--PART_Kqlm.rwajpqob--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 09 Jan 2024 08:35:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rNE7C-00000000MmN-0trr
for dave@doctor.nl2k.ab.ca;
Tue, 09 Jan 2024 08:34:06 -0700
Resent-From: The Doctor
Resent-Date: Tue, 9 Jan 2024 08:34:06 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-mw2nam12on2045.outbound.protection.outlook.com ([40.107.244.45]:43124 helo=NAM12-MW2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rND9J-00000000LDr-1vln
for doctor@doctor.nl2k.ab.ca;
Tue, 09 Jan 2024 07:32:19 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=mRcfqETb5kAYfxGvlmvL6n2yOMRTvpCDVKdctbGKmexbhYk4fStIAY0MH/oULUuB6hZW2VaFbZhkZK4Ae/dsF2AhJiP167bcd9lTrFXL+T7k6cIQ2XnTwV+FHLjfmv74AzoTte7OISuE2uOvsjL7MeErBSunMB4D4+JhdvbClDHY0AqLkp3IwfAq36TAOcVVO1uExk/bi/9X5pWq5ZPJBy4BSTUSnA+jnjsrmDkVPnLz7RVL4vAbLTWqXjolQedUmU574OQ6YcUJPNBOIfRCX7FE53pVZa+u30PcRoKNECXBt4WUzQvuyL0hwUyZfJPBPWK/7wuR/U1/7Q7f2qo9Fg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=CDeHrv9z5gZdI9XJIw5bNDZIxuGYVZYtjsVWoUbchiw=;
b=LCPR0G6AbHMaV5aI4LJQemYr0pJovm+6/twXUrYtyKdDkul06lYgjYJi7j7sVkz+BYurb42SYYlRTcWOnnBHn0UVyHRUT5qsBXbP+Y93AARGw0WdUYEagY7PlBRJBnLj++wqP0fGIduFVsFxZt8gge4WCjg8zzNblZTHor7nHooXdn/6oGkhcAqNSHkCb5/WNfQwXfvOLGpjpGmQ7Swu8KZejtB8DBouZwSYm7ke3M0MR4O+uEVsbKipf6oaPGi5K/WyVXPIxs7Wg4pVHUAqlRAybrI7qsDiT3qvzaW26AWpiidYTjHaWM6N2cRjPk3v0lDs6mwPt1CHzcDhvV9DDg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
172.232.25.55) smtp.rcpttodomain=doctor.nl2k.ab.ca
smtp.mailfrom=xc2h60z.onmicrosoft.com; dmarc=none action=none
header.from=xc2h60z.onmicrosoft.com; dkim=none (message not signed); arc=none
(0)
Received: from BL1PR13CA0015.namprd13.prod.outlook.com (2603:10b6:208:256::20)
by CO6PR10MB5619.namprd10.prod.outlook.com (2603:10b6:303:14a::9) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7159.23; Tue, 9 Jan
2024 14:30:41 +0000
Received: from BL6PEPF0001AB78.namprd02.prod.outlook.com
(2603:10b6:208:256:cafe::3) by BL1PR13CA0015.outlook.office365.com
(2603:10b6:208:256::20) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7181.16 via Frontend
Transport; Tue, 9 Jan 2024 14:30:41 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.232.25.55)
smtp.mailfrom=xc2h60z.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=xc2h60z.onmicrosoft.com;
Received-SPF: Fail (protection.outlook.com: domain of xc2h60z.onmicrosoft.com
does not designate 172.232.25.55 as permitted sender)
receiver=protection.outlook.com; client-ip=172.232.25.55;
helo=mail.vnexpress.net;
Received: from mail.vnexpress.net (172.232.25.55) by
BL6PEPF0001AB78.mail.protection.outlook.com (10.167.242.171) with Microsoft
SMTP Server id 15.20.7181.14 via Frontend Transport; Tue, 9 Jan 2024 14:30:40
+0000
MIME-Version: 1.0
Importance: high
Date: Tue, 09 Jan 2024 15:26:13 +0100
In-Reply-To: <33V3RpVx00hTUvmSezIsBiZXV1qHE5gyAxw92bQEP@NQxQjaD.DG.com>
X-TOI-MSGID: <50507222.A932199F81442.1704810373797@vnexpress.net>
Sender: adm_GIxeLwtfrtV@xc2h60z.onmicrosoft.com
Content-Type: multipart/alternative; charset="UTF-8";boundary="PART_Kqlm.rwajpqob"
CC: doctor@doctor.nl2k.ab.ca
From: Lowe's_Rewards_!!!
To: doctor@doctor.nl2k.ab.ca
Subject: notice_for_doctor_!!
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB78:EE_|CO6PR10MB5619:EE_
X-MS-Office365-Filtering-Correlation-Id: 9049941b-e84d-464b-36c5-08dc111f8e34
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:172.232.25.55;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.vnexpress.net;PTR:172-232-25-55.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(376002)(396003)(39860400002)(346002)(136003)(230922051799003)(451199024)(61400799012)(7200799017)(1690799017)(82310400011)(186009)(64100799003)(36840700001)(46966006)(40470700004)(34020700004)(40460700003)(36860700001)(336012)(47076005)(40480700001)(26005)(5660300002)(7116003)(19625305002)(33964004)(9686003)(4326008)(6506007)(7846003)(8400799017)(956004)(6512007)(166002)(82740400003)(81166007)(356005)(6486002)(31696002)(6666004)(478600001)(6916009)(41320700001)(36736006)(70206006)(316002)(786003)(70586007)(8676002)(8936002)(9316004)(118246002)(41300700001)(2906002)(564344004)(43852003)(19607625013);DIR:OUT;SFP:1101;
X-OriginatorOrg: xc2h60z.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Jan 2024 14:30:40.5493
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 9049941b-e84d-464b-36c5-08dc111f8e34
X-MS-Exchange-CrossTenant-Id: 79432332-f417-43e7-84a8-8203b4e26f73
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=79432332-f417-43e7-84a8-8203b4e26f73;Ip=[172.232.25.55];Helo=[mail.vnexpress.net]
X-MS-Exchange-CrossTenant-AuthSource:
BL6PEPF0001AB78.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO6PR10MB5619
X-Antivirus: AVG (VPS 240109-2, 1/9/2024), Inbound message
X-Antivirus-Status: Clean
--PART_Kqlm.rwajpqob
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
--PART_Kqlm.rwajpqob--