Kohl's Kitchen Aide Phish from Microsoft outlook
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 12 Jan 2024 09:34:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rOKSw-00000000DdM-0mXX
for dave@doctor.nl2k.ab.ca;
Fri, 12 Jan 2024 09:33:06 -0700
Resent-From: The Doctor
Resent-Date: Fri, 12 Jan 2024 09:33:06 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-am6eur05on2130.outbound.protection.outlook.com ([40.107.22.130]:65121 helo=EUR05-AM6-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rOK3a-00000000CTO-2JsP
for root@nk.ca;
Fri, 12 Jan 2024 09:06:59 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=gtOpUbPDF4xPNpBmljvYPRVeHyq/Hfa7zCHtS4Bsz8rlEtA4khoNpamwl9DmR2jvZ7Opb/rWeE+8Hn9N+BkEtKGAuFAaYXhWVsQQ+2qPd63aYvarSj4fVJH4l5nPtnlPE1jpkFKGVU2PtGWl1f3Zhaxc8ObB2s72w6NKNtvWnikTt2U5ox6YWW2lhfH8bOTM0KOvVfqvGFXigeRZWZgAdpNGuuILuVWGPDJX/nRp2lPfzeN0vu8NaI/HgwC/54JFqDqMXQyBs5Y5Vik3OqRmg20S5EXn4EJRtfDuPBlOV+i3NNrMlTigXDZ/b7pjv0i8VdTTKZkw6xuIGfTvAf7D/w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=TClo+y805BvDndVabQ7BnPDBDnt3nbql0MsldEvQeUo=;
b=mxt40UmNnpEc1JZjHfk4qMA2gIczp/NgM62Mhw25CMGG7f0j+cyxaxK55XRPxjouwyDyCqa9jmFonphMdZlwyhyWRs7I94Ix3MUHyxlP9uUro0tjPbJ05p0mhYHwXGZU1Dviskig6jM3QMdaFxUNOf/y2iSNJz8pIgnqriS+5BAntknw2UDNbCQ11VQZsgUJG52vJg4j0z81oNClwZ+SzwSPACAzwY0YuaaRjyEcESmO7zMRbe/6gjDYomjQhFcLPvc+GzOiNLaew40Xs3c2euxLFIomt3MwOSdFZU2b05ffF1oiJ+J9zlJwOsBc5y1DT+eeBCkkGJ43dT6x/Qhylg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
172.105.150.195) smtp.rcpttodomain=nk.ca
smtp.mailfrom=es03ms.onmicrosoft.com; dmarc=none action=none
header.from=es03ms.onmicrosoft.com; dkim=none (message not signed); arc=none
(0)
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 172.105.150.195)
smtp.mailfrom=ES03MS.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=ES03MS.onmicrosoft.com;
In-Reply-To:
Content-Type: text/html; charset="UTF-8"
CC: root@nk.ca
Importance: high
From: Kohls Confirmation
Date: Fri, 12 Jan 2024 16:59:30 +0100
MIME-Version: 1.0
To: root@nk.ca
Content-Transfer-Encoding: 7bit
Subject: Complete Our Survey for a Chance to Win Big
Message-ID:
<6d630203-3a8d-41e9-b70c-2169df0281e3@DB5PEPF00014B9A.eurprd02.prod.outlook.com>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB5PEPF00014B9A:EE_|PR3P191MB1389:EE_
X-MS-Office365-Filtering-Correlation-Id: a99238d3-c2e4-49fe-fab8-08dc13883261
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
z+cUIu+V6pRcDD6bUS8miqlexcmSGMDhSbTjVjb7ECvpEWphvXuwrRecfmf8a4Hf26zz2AIeIXkgx+kAxLNLINwFrLNE0ACaeak4aXgsHvjmPwX9d++pMe4HuABsG2bOfzlRpYPOeWfyv5KyCXKdhNU1f8vyfB/MT+EhJNNByeuvCUCaqpzM+9gADKrUIxnD2om3jHm7UPQjSMt5IklO7vPhlYP1SKneyqnGh46TWzLoRlwAnB4fXSQ/F3BOpfQJcVHiurCbW3RIE525PKuoXFNe2fuXX8ajhlnqnl+Duzd1Ls1cQ0ODZrSUU+J0Xlz2E4avZxcmjVqKqbaluifEGZS+9dcErGg3KdPlmB+T1NffogoSFHki1Wim7nGIaYULaFm5La+XGIXIg5HGx3E/LS6MU1BK95kQw/KgKHsb+KDbrIwcDtP+1i0SEsoHo4pKH0Ni9bDA+7dmaO+yVR0b60fwZLYh/OQ8UFnJeH9dE+HcPkezzFeGHCg41dt5MOGFxEDko8fmvukO5ZjWJAnuBg==
X-Forefront-Antispam-Report:
CIP:172.105.150.195;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.schinner.com;PTR:172-105-150-195.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(136003)(346002)(39860400002)(396003)(376002)(230922051799003)(61400799012)(7200799017)(1690799017)(186009)(82310400011)(64100799003)(451199024)(36840700001)(40470700004)(46966006)(47076005)(40460700003)(34020700004)(40480700001)(336012)(26005)(9686003)(41300700001)(478600001)(86362001)(31696002)(558084003)(81166007)(8400799017)(82740400003)(166002)(36860700001)(8936002)(70206006)(70586007)(4326008)(6916009)(8676002)(67280400001)(41320700001)(2906002)(316002)(786003)(42186006)(5660300002);DIR:OUT;SFP:1102;
X-OriginatorOrg: ES03MS.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jan 2024 16:04:45.8873
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a99238d3-c2e4-49fe-fab8-08dc13883261
X-MS-Exchange-CrossTenant-Id: 107d7460-d343-4f2e-a108-46a7e1d31671
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=107d7460-d343-4f2e-a108-46a7e1d31671;Ip=[172.105.150.195];Helo=[mail.schinner.com]
X-MS-Exchange-CrossTenant-AuthSource:
DB5PEPF00014B9A.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3P191MB1389
I1.17KL0LD35.4KI2.16KwhoissourceRank10.8MPIN0Summary reportDiagnosisDensity00n/a