Dewalt Canadian Tire phish from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpThZ-00000000JGa-2iDe

for dave@doctor.nl2k.ab.ca;

Wed, 27 Mar 2024 07:52:25 -0600

Resent-From: The Doctor

Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rpRyH-00000000AhK-08oB

for root@nk.ca;

Wed, 27 Mar 2024 06:01:38 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;

b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

212.87.212.62) smtp.rcpttodomain=nk.ca

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);

arc=none (0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)

smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=gdfgdg78zrtgh.onmicrosoft.com;

Subject: Get Rewarded for Your Opinion:Take Our Survey!

Date: Wed, 27 Mar 2024 11:59:28 +0000

Content-Transfer-Encoding: 8bit

Content-Type: text/html; charset="UTF-8"

CC: root@nk.ca

From: "Dewalt-EXTREME-Drill-Unlocked"

MIME-Version: 1.0In-Reply-To:

To: root@nk.ca

Message-ID:

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_

X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;

X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02

X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

BL02EPF0001A107.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850

X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message

X-Antivirus-Status: Clean









(1) Notifications























































ミ★ Canadian Tire Department ★彡







꧁ Order confirmation #064282 ꧂