sam's Club phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 14 Feb 2024 09:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1raI4c-00000000LCi-3u9y

for dave@doctor.nl2k.ab.ca;

Wed, 14 Feb 2024 09:25:26 -0700

Resent-From: The Doctor

Resent-Date: Wed, 14 Feb 2024 09:25:26 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-he1eur04hn2206.outbound.protection.outlook.com ([52.100.18.206]:36418 helo=EUR04-HE1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1raGr5-00000000Ehv-2GQ7

for doctor@doctor.nl2k.ab.ca;

Wed, 14 Feb 2024 08:07:30 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=CAMO6+XrC4E/i7VpMa3t+wxuTPRNcIL+yvGiju5sEWnSlzSK+rkaNFa+++xLJoLAOFxp1CA/PRIYH38aSI+KiHEbJklMAhVKlmGqBUIr2hwMUXB/B5yzCyhPWd0w8fgGjHzZM3JzEHijHDvhKgLxja5zwLGOYzrIS8EFCxCRbOMvHCSoLlCLtvQnIOoLk/tW6ksAabhRqY0A4+1VvcmZ0ZqagESH0Bk5pOcjoCPSpEP7cIh5QjkvKGxk+utW7fo/kChUJ5tyO7ShjJwsq0ySYfxK27gpQtnD4GpOGtxC/CyuZYy4dhdLF232Yl01xK0Lp8+/MwCdJvz08DYn0CUo0A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=8CJH+1hViaKKvkEg3Yn1WYkUX8w00LVoNt2FgkWNYQA=;

b=mzQmS+NY/ST+uLHIhNHLBDthPdDLo80dsnGgRnVecYvg+xCm+y4F+RVbH8771zJ9m3uarNL8/36yx87sx2bNfQJf4ZKaEhhlAnHEhk7rgy33zkJ/Wb/Z9+kK81mqq9xV62atzA7dQm7qBnAWJENiOEMTXKKAAZZvi9cH/5Qugw1JHWDDNnCFZ2MCzvN/eTk3u1rjK57LGET+DCxyb/KDiYDGz3ItmkMHqOkKRqWEcqliyvkOq6GUQs8a+XNVkbbFjBVKulJamxdxUjP7G1cZOq2s49AJf+gQ8+tVrbEIEavxstAunu/ULyZAiYd0QfvIiZP7grVeiQQuFMPIg1AYZw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is

74.6.129.123) smtp.rcpttodomain=marouanekhay.onmicrosoft.com

smtp.mailfrom=yahoo.com; dmarc=pass (p=reject sp=reject pct=100) action=none

header.from=yahoo.com; dkim=pass (signature was verified) header.d=yahoo.com;

arc=none (0)

Received: from AS2PR09MB6630.eurprd09.prod.outlook.com (2603:10a6:20b:59e::15)

by DB8PR09MB3977.eurprd09.prod.outlook.com (2603:10a6:10:12d::13) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.25; Wed, 14 Feb

2024 15:05:01 +0000

Received: from MR1P264CA0179.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:58::9) by

AS2PR09MB6630.eurprd09.prod.outlook.com (2603:10a6:20b:59e::15) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.26; Wed, 14 Feb

2024 15:01:29 +0000

Received: from MR2FRA01FT006.eop-fra01.prod.protection.outlook.com

(2603:10a6:501:58:cafe::4e) by MR1P264CA0179.outlook.office365.com

(2603:10a6:501:58::9) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.26 via Frontend

Transport; Wed, 14 Feb 2024 15:01:29 +0000

Authentication-Results: spf=pass (sender IP is 74.6.129.123)

smtp.mailfrom=yahoo.com; dkim=pass (signature was verified)

header.d=yahoo.com;dmarc=pass action=none header.from=yahoo.com;

Received-SPF: Pass (protection.outlook.com: domain of yahoo.com designates

74.6.129.123 as permitted sender) receiver=protection.outlook.com;

client-ip=74.6.129.123; helo=sonic309-13.consmr.mail.bf2.yahoo.com; pr=C

Received: from sonic309-13.consmr.mail.bf2.yahoo.com (74.6.129.123) by

MR2FRA01FT006.mail.protection.outlook.com (10.152.50.142) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.7292.27 via Frontend Transport; Wed, 14 Feb 2024 15:01:28 +0000

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1707922887; bh=8CJH+1hViaKKvkEg3Yn1WYkUX8w00LVoNt2FgkWNYQA=; h=Date:From:To:Subject:References:From:Subject:Reply-To; b=E6dMvo4WjKoKzRY/XIqA5zEW/yYAX4wQSidkX72tr35Nfi7099a3rsr7lvJqnnwHWJlzURRu9ooQA46EaKKSJEgwjsS3LGDvFc+Z5wePn9VtSY8h1hDyrH4zNW1DI4+tE5+QuUZog9IH7filSNKdjRtH72m5FNbV69736qPP7uN6RhztSBiZSZCBSMBEvzPHCUJgJx0YXtMuwveY2CBPjIy/O5kFg3EenxVP817nG16RGi3G+ubZ/LBdBuk9qCYtTnA4GeHZOktEz4/wrOrFDt1SVRRmNapQlJUlL1KIYqoLsp+gf3t2LBZuyWtAMeMq59j/5z8aQLjakWcfPWvxPQ==

X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1707922887; bh=Ze0/dmwuHxdoZYBmttO5DuBEwEAjqIN70mUYAZwgqTc=; h=X-Sonic-MF:Date:From:To:Subject:From:Subject; b=YHywHtnnY2rFL3tZR0Wk9a1jtl5jdui2lR3g1dOCHMKYdGdpODWOghAOI5+L7WOIdf0c7QN1MuUT5tKRYUo7Xf/sbb3RcjCPnMryMn4VNYVGdrBPW01C+4fZUpj9BfM+LDFl14+tkVa7hih6QFDANbZJyO8AHHgturyfwumSq/b24JZNOBTQqrQLJxDtGOEYBAlSlIURv4glac8giZ7Px2bZsLiFD0mB7e9sgR0RPjWgWEE5f0lPMZd84Z/gyrxGf6Y11Wem5ZJDJDaQ+3fSRZ/FFZDzJf1T+npXq41c2AIXnSOTf3kgGy6wQ5pHyXog89UsUet8Mg09nkVdS0pLTA==

X-YMail-OSG: 8l7DgQ4VM1kl7WQeZNDtVZcNTk7Ns7WRgww3O6LQuXQPuy7xvaHsXcu17PuGyZZ

czjUNgUBzLcQ_MfdOJFtWWhQRKwxXbhZFX6oFzS0xcgsP6gVR1zGTUoutHCbUoNIrCHTtbu3p3QH

vg1evbyiJppRZ8CzVsjMfJ1XVq55Ff4uGN.RUR0hhJlCahUJz5I0323Tp.nz5VkIz8SBGWRONlFl

lYFeDXOL9LikRWNo5zJju4OJ3B2V8K6QC7oLrX1W4QW6hFBH9JgWu2OefdxfzHYcBxTEtdOgyOll

v_5jVboQSi8LdvVaOitFkdy3uMQGfWkG2oNLxwDizHX0a1aOTixzQj9pHYZZrR5BDj.2nVI83y50

TKbK1MIibOwKCj6qq2VS.t7jN_Pcq0GFfY6khrdlKWHJQ1zghybyOHQvmKLGpYU6PLNOaM9Qk2bJ

3PjkRKOeE6ffInKv2GeQbiZzl.wyh0.YFTj5yyHxip9NMhnhDlX2Y9mU5AvDuDxaOKBoiDO7kLCI

BZcEMoQ2W65TQPJqVl.peoLNzBT2FJoI6XBsszUEBVaxkbY.Qlc.kUKxr9E7PGx7P5pQSqm8zWtI

jPFrD_sN9abdN4HQpEfduiIUAcNOpuFKvQK6HeizeklSVJHpiVNsQl0uJtk7rHqO51YidNhLiESP

IisN1gJ4Ymc8f9udnBXyB8hOArp5HBwy2vddOZJver10BihaQVQg8Xa0hHzALmG9DJ33cG.TjLF1

eFi5sbGwuj6rSF6cAM8Sg85cI_rRG.u_I3YxWino2XCgN1mZsK2_ADm1_cc3N4BUmy28dJ_zDbp2

ANpMugrhgJwds1Yv_oUNFWVYywpsu93C9vLP5eGEywtx4T0Dc2AgbizTags.ms8iUM0LYD71sspF

HaaU1Bisqe62dV7GRpna8o1xXomH3usZUDiZCmdrAHrMtxKuoNi2PaWdVlqR0eaPnoRD6bTktsd5

aPwOjFlLIHXXCe0F7VrMLCxs8bbWt7Eyh39tJ_VMRW7L9MwRSRu5GDLqaG7ZK1QLxTel9HHc2Jm5

d1nv__U.ColbMAb8wIdsIFk6PdzPrr.tKGK84AYe7aA_Jzx5fhA3y7QzO1_yARyKt9EtR7UJpIaM

6xLLej5DGvFonw5vSCu4U3fTfw0.S9XQwRyi_wn3O8pEsmYeypN36JbD7pTFp_3xx2zIDONkANNK

uBRcYwSl.wJsdkXOokFFDjP0vtZxv.Zt.xyZhTW9srHjwQ1dDtFd1eZcW23ZLebwQdWm0JK9HtVs

x5kG8PLu.HRIrAg_0ItJD3pzbmuy5LWzSW6tR9f4qbFZiwZKG_6LbjHVnRRY3cwuRtUK3ug20hIM

GeY5yuHtPxuWXkNMvQeiTNiUoqhoIYvvopAEwiQiJTWgmm9ASKZtPAyUBv_JKpsAH2wl4g3cPJ9m

5fkqCa84yMmuONr4dBLerL9Z6O_SxKIllY96mGBuV0NLLaAbhi5AAe_lD_fwUlrmFpZTDwoKvHEg

ysG1SX6be_vZvDtskVDnD8E6byQ.1Vh8wfHK1lSppIoAdvvx0cdWvYKh6MaEZl9WVYJS3vW9tUpS

TBEhZmfa7UB.sSnKk4RkRBehYeoDOrydqblSTH3WQcbkNM5XpI8cWX5I6Jm1DImVSIrbIUseUngp

qeQ.Rtz7aB1a5dN.k1BvgAr63KCoNOFit9pmdRmxOzcFygiFP6QKlQc_zBTPy0uEjRmE33MvR5BI

7TfD6f79y4vjENBAvjw2YG.1.PrAzCfN9fBL7Tij5k4_bxfXvEWQ2HxoSq3JnC12.c1ZyGkeantv

Sz8io9QFNaETvquu0aU3t9BM_o2SR4Lmilf7cLWyagzF34xK5sBtA59zVncwaoCiIr4sEiigQYZ7

KbvsxwkS7p7C8bsnTrLwtrYrNwoFAVTWMIFIK3uutRluEfC5e57w_WyNXDdcRYuJTkzVkrUoVLVC

0LP94rLP4HCMw1tWTPwLGw1Sd9lDmST9oXbruscuAGkAHhu7Y9mpZa4ew_dyXJrrhHqse0cQNr6f

L8yPo5Tv_OXveWsi4_5wCZ64gJi2.aGNgsmIZjGQZpj0bk9X9Ph1V1MpbiZDKbhub2rttYtlBbVM

OOzpo9kRmO5nuSPY5Bn6uSbLAJ6zuFPzFcTZE1QrKnhtHCE_BcAsYI5Ebs1O0wlpTEv5jIbdblGH

4_wtQBPyHcMzSy4gm9H3ypq9CaUCibnl9iZyuowvyo5yQi0l5B2Pczxny3lL9A_YJMt6nk1owS_R

AofnKZw--

X-Sonic-MF:

X-Sonic-ID: b3a4dc34-26f6-49c5-8c68-d45afe448e76

Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.bf2.yahoo.com with HTTP; Wed, 14 Feb 2024 15:01:27 +0000

Date: Wed, 14 Feb 2024 15:01:24 +0000 (UTC)

From: "alae.sanji@yahoo.com"

To: "senkiete@marouanekhay.onmicrosoft.com"

Message-ID: <341440861.1275866.1707922884326@mail.yahoo.com>

Subject: You've been chosen

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_1275865_1612944364.1707922884325"

References: <341440861.1275866.1707922884326.ref@mail.yahoo.com>

X-Mailer: WebService/1.1.22077 YMailNorrin

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 35a4a197-3567-4339-a32b-e60fb77e40a6:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic:

MR2FRA01FT006:EE_|AS2PR09MB6630:EE_|DB8PR09MB3977:EE_

X-MS-Office365-Filtering-Correlation-Id: 4e5cda0b-ef4f-4f92-81ba-08dc2d6dd2c3

X-LD-Processed: 35a4a197-3567-4339-a32b-e60fb77e40a6,ExtAddr

X-MS-Exchange-SenderADCheck: 0

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?ZjJUcTZtUmtqejY0aVJ6MHV3VnJZekVsNUswYUE2TXlROGhmcmVRTUcxMWJD?=

=?utf-8?B?YWF6WDQzOUlXbU1FNnlLcHJ4RkJoWGZBYUdjQTdHZ1gyMTRkSy9ndXlsQTVQ?=

=?utf-8?B?Zitoa3ZjRmR6Q3dCNS9SOXhyYjlYSXZMV1JaeE0rTnV6WVdITy9hL3BwdWF1?=

=?utf-8?B?dmZhR0FQOC9JZllGUUFLbzJLZ3l5OHEyTEdjbVRsMjdrQWhWd3Q3WHh4RWpv?=

=?utf-8?B?bFc5UUZNc3VsRkxLR01KQ1dtYTFVekdWRTBzU2d5YndsUGthVzU2QXVjU3VQ?=

=?utf-8?B?REVZcU5Vc2V5OVpsazBzS1lkL3NzNnBnc3FSUUFiaDdXMGJmMU9UU2prc1hF?=

=?utf-8?B?Z0FXbTB6em01OFJLVWJRS2FjZ1FPNXBOMWlGN0pxSUxIcHRwUGhkWWk5TTZN?=

=?utf-8?B?WnZlZ2tiNU85VHNUcFVrb1NoQ2w4VmJMcCtQZDNjVU5ma0o2YVRnTUpaWlFU?=

=?utf-8?B?NEF5ZWprMHJ0Q1VWeVB6dWFBUDBRNG11blI3cnBuWlFOS0t3T3V6SXliMWsv?=

=?utf-8?B?cDRIL3hGU2dsR0FDT3VaTnNzZlZRNkxPSzRSeGRlRnkwVFJKeVFGa0RFVVFo?=

=?utf-8?B?QnVoK3p2VmZrWDA1QUNFUmhwbWQ5NXJ4MWUwVjBXUDBDcXRtTU5qeHRCdlB5?=

=?utf-8?B?SGE4a3NPL1JJM0djcUNFVHZ4NEthUWNDcFBEOUlDQ2xUTHJwaC84cXc5TXJu?=

=?utf-8?B?ZlNvbVNBTEt5N05GNktHQys0OHRadFA4ZUdoMEVxTDEzWktOeWtucTVGRStB?=

=?utf-8?B?RFJLWE9CZFhzVUhFNkU5SnYxcnRMNXJqSmRvVUVpRllnTXVsbGtISEEwVVY1?=

=?utf-8?B?eFlEdHFKWmhzWUFVeWRrektFWXBPU1hncmc3Z216Rm5McTVudlhScXJKTjE2?=

=?utf-8?B?dXlqd3A5d3VlRHU5L0JsMjFJZVdRRkt4b0Y2L25ZZFk5ckpKUHRyRU90WDdt?=

=?utf-8?B?Y3JlOTB5OUhuYm9kUldJWkVhQUdpSlBTRlpjOStFbWxMckZkaTVtRWVFMlFu?=

=?utf-8?B?R2VnSkc2YzdOQ3J5MDVjdFd3TUwrVGFzL0p2NklpTHgvZDBUZjNmUFpYWEFv?=

=?utf-8?B?eFFhNGxRcHcySzl0dUpTYjlZTlE2QmgvNUtIWTJGdVFvZFhMYXUwaHFVWW9U?=

=?utf-8?B?cExxZkhuNGIyRVE5M3piaW45UVRUZUZlaGV0SGJKUUhnaGNjRkwwdzhvLzJp?=

=?utf-8?B?bE1JYThSZmxXblZ1b0NvZ3I3Z2NoOVoyQ1VRQ1JsZS9hM1pMTEZ5UFRVQ3Yx?=

=?utf-8?B?Q3M0a0poNE55c0NsbVQ2RmVSb2NWdFYxbHZNMi9FVDFuY20xdlJDaXNscnU1?=

=?utf-8?B?RWdtMjRWTU5DQjZEZGREckJYUmJiNkkwTTgybGV5OXR0Y3VYSWZpbmRSOE0z?=

=?utf-8?B?bEwxRTMwYzZKNmM2ejdRUnE0bGN2dEsrOEpXektBazkyUTJsNzM3bnJ1cE42?=

=?utf-8?B?TEU3WU9VaUErWUVxZzBLRU4vSyt2bWhJRVFrZElLTDRIcXBjMm5ibGRRZmlB?=

=?utf-8?B?NE5zNk5KZFA4UkJSNHIzenFmTHpxZ0VWK3VmdmJFcTZpR3B3UjRySW5oUkdm?=

=?utf-8?B?SjlRUT09?=

X-Forefront-Antispam-Report:

CIP:74.6.129.123;CTRY:US;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:sonic309-13.consmr.mail.bf2.yahoo.com;PTR:sonic309-13.consmr.mail.bf2.yahoo.com;CAT:OSPM;SFS:(13230031)(136003)(34096005)(39830400003)(376002)(346002)(396003)(84050400002)(230922051799003)(48200799006)(16100799010)(451199024)(64100799003)(6862004)(8676002)(786003)(70586007)(68406010)(2906002)(5660300002)(7276002)(7366002)(7416002)(7596003)(7406005)(7636003)(2023103011699009);DIR:OUT;SFP:1501;

X-ExternalRecipientOutboundConnectors: 35a4a197-3567-4339-a32b-e60fb77e40a6

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: tkh.edu.pk

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Feb 2024 15:01:28.7200

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 4e5cda0b-ef4f-4f92-81ba-08dc2d6dd2c3

X-MS-Exchange-CrossTenant-Id: 35a4a197-3567-4339-a32b-e60fb77e40a6

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-AuthSource:

MR2FRA01FT006.eop-fra01.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR09MB3977



------=_Part_1275865_1612944364.1707922884325

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=20

| =C2=A0 |

| =20

| =20

Special Offer!

|

| |

| =20

Congratulations!

|

| =20

You've been selected to receive an EXCLUSIVE OFFER!

|

| =20

Complete this short 30-second survey about your experiences with

|

| =20

SAM'S CLUB

|

| =20

and recieve your exclusive reward offer for participating.

|

| Start Now |

| |

| =C2=A0 |



|

| =20

If you no longer wish to receive these emails, you may unsubscribe by clic=

king here or by writing to

|



=20

------=_Part_1275865_1612944364.1707922884325

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




=3D"ydp9c2d5806yahoo-style-wrap" style=3D"font-family:Helvetica Neue, Helve=

tica, Arial, sans-serif;font-size:16px;">



ss=3D"ydp83e2d0c6yahoo_quoted">

Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">

"ydp83e2d0c6yiv3385177034">

elvetica, Arial, sans-serif;font-size:16px;" class=3D"ydp83e2d0c6yiv3385177=

034ydpb4e2cb6fyahoo-style-wrap">

er=3D"0" align=3D"center" cellpadding=3D"0" cellspacing=3D"0" bgcolor=3D"#f=

ff" style=3D"border:0;font-size:12px;">
y>

=3D"center" valign=3D"top" style=3D"font-size:50px;line-height:50px;"> =

;

le=3D"background-repeat:no-repeat;background-size:350px;">
600" border=3D"0" align=3D"center" cellpadding=3D"0" cellspacing=3D"15" cla=

ss=3D"ydp83e2d0c6yiv3385177034ydpb4e2cb6fwrapper"> =


=3D"left" valign=3D"top">


rong>Special Offer!


ight=3D"6" bgcolor=3D"#0067a0" style=3D"display:block;max-width:240px;">
d>


;">Congratulations!


" valign=3D"top">

You've been selected to rece=

ive an EXCLUSIVE OFFER!


center" valign=3D"top">

Complete this short 30=

-second survey about your experiences with


=3D"center" valign=3D"top">


ong>SAM'S CLUB


"top">

and recieve your exclusive reward offer=

for participating.


">


40/1425/0/0" class=3D"ydp83e2d0c6yiv3385177034ydpb4e2cb6fcta" rel=3D"nofoll=

ow" target=3D"_blank"> Start Now

ight=3D"6" bgcolor=3D"#0067a0" style=3D"display:block;margin-top:30px;max-w=

idth:100%;">

p" style=3D"font-size:85px;line-height:25px;">  


;color:#797979;max-width:550px;line-height:1.4;"> If you no longer wish to =

receive these emails, you may unsubscribe by


3340/1425/0/0" style=3D"color:#666;text-decoration:none;" rel=3D"nofollow" =

target=3D"_blank">clicking here
or by writing to



------=_Part_1275865_1612944364.1707922884325--

I1.02KLLD35.6KI2.16KwhoissourceRank13.5MPINSummary reportDiagnosisDensity00n/a