Ryobi one phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 20 Jan 2024 18:18:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rRMT8-00000000FXh-0gFk

for dave@doctor.nl2k.ab.ca;

Sat, 20 Jan 2024 18:17:50 -0700

Resent-From: The Doctor

Resent-Date: Sat, 20 Jan 2024 18:17:50 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-db3eur04on2079.outbound.protection.outlook.com ([40.107.6.79]:54858 helo=EUR04-DB3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rRLn9-00000000ETF-35e9

for doctor@doctor.nl2k.ab.ca;

Sat, 20 Jan 2024 17:34:31 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=O71ocpanLZpDz0iQilMVMkzE/cTwFgsrxJD90mftbDztbzbKHRm+VjPeaKugGjxVQ+15dHgObpYQIKPUGoOaGWrVPZ+swr8/THte1XLsr+WMc7lpn5xGZH5LOQ6cI1/c70qK/BNQJTkqWw12efedceVKespjru1+26Q9Uk5Upu+U3eR3q+BkjaKcrXk7YO7gYMznq/9zRdTxEnFce21D1oHYDHVb/AjBU2UcQJzO2pVsdq1+nydmszqNNqIdADxkBmStFru8Xs0McyYtnM7XUwJggBc/ulQP+sWq/IgPI/nn/ltUEZWYT6SuNoEzmn8/rVxomdnnlfjvq6+yZbDykA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=ZstVPg6G5IA6nLOsL0zdKZZx0tnhS4ZQ9s3VaONI9v0=;

b=H7KC15QAvZoIcXNQ8hFLVWz3jb0OUo2uqXF6ddaz4fi5M3z7F5lNb9pxxWRJwuulLbOhHR45i1qgc9N6ABjanNGzRXyFmx7+CTuAYEzvfRYeYN06i9L67yUL8o8uQyco71HSZlFQCP1jNWH5BFf//6O1WCUwJX5xkib+SdTgkbWxoJsW7djChaG+uIKnpDmuj9U/BNQJiAq+Kcq9JNPsma8xsutliK0s2IG9OxtYJqTG4XKNfbKthFn4rLZs5viH52lbusQS6A5RmaJtSmrtzfPLWnKHE6n838xO6Sr6PqehaECQ+H8xnD8zHs2FqYnU3UOqR6yCp00URmwMJTepKg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

192.155.80.227) smtp.rcpttodomain=doctor.nl2k.ab.ca

smtp.mailfrom=oklandcity.onmicrosoft.com; dmarc=none action=none

header.from=oklandcity.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=oklandcity.onmicrosoft.com; s=selector1-oklandcity-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=ZstVPg6G5IA6nLOsL0zdKZZx0tnhS4ZQ9s3VaONI9v0=;

b=gZxS/RRWUR7tQM3n2FSMKTO6kGFEZFwOJ8sBj9gKlf9TGZh1aKuX/J8CoraPhZupORcYxFmmf8BtqYlDEC80J1kH/hn8khOucLQYHFUrhoPrAPJHk0gU0hDRBZ/YWLVZcJcY/WEbWxWtgOFFE2yE9/cdFFO1PoIIi7Eo6um0eHcuITM6iIW62pYZV+xAEgHiO+j2lAyDfzmOBVY3+9GlFeQfiAgbIlh+jJeBgpw6H3gw9IdVZRQtEtSufgNDtCGH62IAM6U+Bxw9X9OtYsGPVNYFEodWJL+KhDqidPfCsEV+5Pe17kVXAahfE54tp1pGW14uc9dmn+MgezlzqpUzww==

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 192.155.80.227)

smtp.mailfrom=oklandcity.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=oklandcity.onmicrosoft.com;

To: doctor@doctor.nl2k.ab.ca

CC: doctor@doctor.nl2k.ab.ca

Date: Sun, 21 Jan 2024 01:21:43 +0100

MIME-Version: 1.0

Content-Transfer-Encoding: 7bit

Importance: high

In-Reply-To:

Subject: Ryobi One Chainsaw - Your order has shipped!

Content-Type: text/html; charset="UTF-8"

From: MemberSurveyPanel

Message-ID:

<7db2e0e9-6cfa-4aba-b7c4-e26e20f150f5@DB1PEPF0003922D.eurprd03.prod.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DB1PEPF0003922D:EE_|AS5PR10MB8102:EE_

X-MS-Office365-Filtering-Correlation-Id: 41a28197-e25c-4828-b266-08dc1a186e56

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

fXxJ5IZR9VQe2IHAHiGaegxrpVvs9clE5QHmLIDr3Mf5TlLgr/6PuaVYr+eAsdjPoJsMlDlWJm0T4alcN0QRHSaWnrRLBYdSinUJxy1fILGM7SVsjn2+sUmq6kfW+NvNWxrRs/ExiorntTlTz6+mZn5tMwylUGcn599jfJMKcCBaAfMB6BuozkXKl9R7TY9mLwAJyA7iWCBMkMzSss/Sl9Xmv4IPM9Vf65xcN9Vv7NWRr4T1KQWtcHeKg+Vu0HIC9jNGqtKoyNHiLHy9A+dcO9Ud7QVXXUpS4MUJ4IZE4Y4M7Oppa6kYXAfiCDdAjCub/RPampjTZuXhuAzbiSNRazc/5niR03KIb9dKY/hjRLzEDR1i9IRWbV3K3qeqZifFPePwk8FEMqbNMI4U/8RzD6+saEoR8HfylTrT0otP+jEd3uPNCfUmVGV6v1z2Qy2ImJJdofkeLY/COxwDnJVF0pz7HFK74h8OPjzWxpxuEWHqDvzmeHkEapr1Ox/bTkH8NbZ4HRIqrsPH2ZjE/DgGYw==

X-Forefront-Antispam-Report:

CIP:192.155.80.227;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.beatty.com;PTR:192-155-80-227.ip.linodeusercontent.com;CAT:NONE;SFS:(13230031)(39860400002)(346002)(396003)(136003)(376002)(230922051799003)(64100799003)(61400799012)(1690799017)(7200799017)(451199024)(82310400011)(186009)(40470700004)(46966006)(36840700001)(41320700001)(47076005)(26005)(336012)(82740400003)(36860700001)(34020700004)(4326008)(8676002)(8936002)(41300700001)(2906002)(5660300002)(478600001)(9686003)(46730400001)(42186006)(6916009)(70206006)(70586007)(67280400001)(316002)(786003)(166002)(81166007)(31696002)(558084003)(86362001)(8400799017)(40480700001)(40460700003);DIR:OUT;SFP:1101;

X-OriginatorOrg: oklandcity.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2024 00:32:20.9511

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 41a28197-e25c-4828-b266-08dc1a186e56

X-MS-Exchange-CrossTenant-Id: 628c5619-7900-419d-8543-45e4034ca1e0

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=628c5619-7900-419d-8543-45e4034ca1e0;Ip=[192.155.80.227];Helo=[mail.beatty.com]

X-MS-Exchange-CrossTenant-AuthSource:

DB1PEPF0003922D.eurprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS5PR10MB8102









(1) Notifications