Image spam from outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 20 Sep 2023 19:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qj8Aw-0008Yn-31

for dave@doctor.nl2k.ab.ca;

Wed, 20 Sep 2023 19:08:14 -0600

Resent-From: The Doctor

Resent-Date: Wed, 20 Sep 2023 19:08:14 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-bn8nam12on2042.outbound.protection.outlook.com ([40.107.237.42]:41184 helo=NAM12-BN8-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qj6E1-0002oW-0L

for root@mail.nl2k.ab.ca;

Wed, 20 Sep 2023 17:03:23 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=FnZjpK/obyi3bO2VTa13Zr/OJltBUFSgkjeFC+97bu9d1kALkTYrXwGMgLjtdU0ltt3jAe6n1zzwjEZc0e3DD9v+TRkRfBFqex1t3qRpyMcuFuQBTu7d7/BmBCrOanGk6BnGHDJ65XzpbJB434LbkRWgOd2o76xyic8qCwbxT/RWXGBORSSLDB7Ponx1wQ511hR33GCPJfjjLBJjkaI5HJUehQKfixVuzbGXhDXHRXvl661U8n+5Oz9OZgytC+NKCsYgiVpvdb1KGXLUFB6bRu0FIBSaWZnvK91MD+/EOu8ohQ8adsEq4SFJtcdpWKyGI5jgP8eXDkmWek2yscPdbQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=O3LwNMoLW3Mw8u5xLv1lMVQDSnxsQVBsiu82rjcz//w=;

b=nHPywswHs12mAUYmLilPP9+AQYAE6xvOw0scTE/FunMUqrF+c5GRE4o3YzAOnh3M6OJZZ7O62MNn/HJYKuEVvvFEaNWCkitZmRYZVmyrFGm/VBphG1gWZeBVgpg8XMy3j5ZlPIQEm4blkJS37xTyXm2VCxZscPURPZ/QxO9VTyme3w/I/XnNjB44QOPYlywe/6YKIwBgrrCxW/njDEIjrMK/aVOjuFpTTIV6qnANOyUewAbDFcqmuR6N5IrPaP139dS51fVKFnpojS4zLVjIIcrpZi9PI26m03WpxosxBt+F0qh1WMbFe6y7Y7TtJxcIO+Yv2Ty2sec1D8nFOSAEqg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

65.21.157.50) smtp.rcpttodomain=mail.nl2k.ab.ca

smtp.mailfrom=dftyfghdfhf4.onmicrosoft.com; dmarc=none action=none

header.from=dftyfghdfhf4.onmicrosoft.com; dkim=none (message not signed);

arc=none

Received: from DM6PR14CA0046.namprd14.prod.outlook.com (2603:10b6:5:18f::23)

by SJ0P222MB0316.NAMP222.PROD.OUTLOOK.COM (2603:10b6:a03:3fe::24) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6813.20; Wed, 20 Sep

2023 23:01:11 +0000

Received: from DM6NAM12FT011.eop-nam12.prod.protection.outlook.com

(2603:10b6:5:18f:cafe::52) by DM6PR14CA0046.outlook.office365.com

(2603:10b6:5:18f::23) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6792.30 via Frontend

Transport; Wed, 20 Sep 2023 23:01:11 +0000

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 65.21.157.50)

smtp.mailfrom=dftyfghdfhf4.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none

header.from=dftyfghdfhf4.onmicrosoft.com;

Received-SPF: Fail (protection.outlook.com: domain of

dftyfghdfhf4.onmicrosoft.com does not designate 65.21.157.50 as permitted

sender) receiver=protection.outlook.com; client-ip=65.21.157.50;

helo=dftyfghdfhf4.onmicrosoft.com;

Received: from dftyfghdfhf4.onmicrosoft.com (65.21.157.50) by

DM6NAM12FT011.mail.protection.outlook.com (10.13.179.171) with Microsoft SMTP

Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.6838.9 via Frontend Transport; Wed, 20 Sep 2023 23:01:10 +0000

From: "Titan"

To: "root@mail.nl2k.ab.ca"

Subject: Re: WELCOME!

Content-Type: multipart/mixed;

boundary="_005_0350f87a16b74ebb964e244a9deaba34wilsonncorg_"

X-Mailer: null

MIME-Version: 1.0

Message-ID:



Date: Wed, 20 Sep 2023 23:01:10 +0000

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: DM6NAM12FT011:EE_|SJ0P222MB0316:EE_

X-MS-Office365-Filtering-Correlation-Id: 191ef2f0-879a-4eaa-3a2c-08dbba2d7b43

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

QlpqzCQZ8skz6gt0UzXsYKvTGwWLj5AuEE76NBwympgPk1MHhbAmvq2smTaEa9yO48Yp43Q8ErwqkGyT96WCVWyY947B8IOv6AJirfhWW93fZ6PxKgEWrQJcDj6tiRQAkB7n/pRoweS9fhcR2OmSSEfAfKjHjUlIhIFxKUpxnbgw+02HpB6OyatwUjRKtl1Z/VVVszSimbX3pGyui7KTK2/AqDDgZqOApVGykdD7qoW3+Bk9+yvkjB0iDYm7ErbTbmHZ9PfHKDkql94LCvB0HGyl8shNdjfmZxQxr+u7gxQEK4LfI7fDJbhJxHLQ60ckf9jlAmbWIdrl7QViyT7FauOrK3szBoi9PfETW5GPxK0bZt+0SJkEaAQEqI9grgoMIKaQNazrY+137pYusJViJIp2DRm704wHMzgFg9h3rU+gGmVdxWbQMKrT4s8sdXdrhrgj8ClZ3QC6sYd1uTwI1U6IMjvyj3+sFLSuwXQaBmf3Xv7EvZ5U7QBQPutRRS1TnZDRf4EUGZKXXHha9Yb/cM0eUXs+XdZuO66jTDUMvr5vYzoEPykCypyJpsISJbOtrPLHlu8uT2GGM+5lQsmxMx5cnlKcuOWvmNIEO3dzeymRAkJyH1lceSBwod1tr9C/J+DTWU535AxrjKcCxpK76JW3LzpJXnGKT3dSd7yZBf+YGFdAzZSkh2fakfcvjLXztwOT2n67R7ITWoxUK8Is7g114R9az3lPji21KRRwEFWvNlHtpB4ejsf/XXyV9TPlcbLhdiRQ2+pqSwBbWBT7wb6QEDWmx3XuQuIojL/z5A20xFFiKaC2nyuP3bfHzRxkb8UO9mIossW0eiebipD7ybmcYVmB3N3QV8k7JFQaIEk=

X-Forefront-Antispam-Report:

CIP:65.21.157.50;CTRY:FI;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:dftyfghdfhf4.onmicrosoft.com;PTR:static.50.157.21.65.clients.your-server.de;CAT:NONE;SFS:(13230031)(376002)(136003)(396003)(346002)(39860400002)(451199024)(1690799017)(82310400011)(7200799017)(61400799006)(186009)(36840700001)(40470700004)(46966006)(8400799017)(19627405001)(31686004)(118246002)(2906002)(7116003)(5660300002)(8936002)(41300700001)(8676002)(70206006)(26005)(336012)(36736006)(6916009)(70586007)(508600001)(40460700003)(6512007)(166002)(9686003)(6486002)(83380400001)(956004)(47076005)(36860700001)(41320700001)(3480700007)(82740400003)(34070700002)(356005)(81166007)(9316004)(40480700001)(31696002)(32826004)(19607625013);DIR:OUT;SFP:1101;

X-OriginatorOrg: dftyfghdfhf4.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Sep 2023 23:01:10.3292

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 191ef2f0-879a-4eaa-3a2c-08dbba2d7b43

X-MS-Exchange-CrossTenant-Id: ddd68439-1018-4708-a57b-edeb781f4d76

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ddd68439-1018-4708-a57b-edeb781f4d76;Ip=[65.21.157.50];Helo=[dftyfghdfhf4.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

DM6NAM12FT011.eop-nam12.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0P222MB0316



--_005_0350f87a16b74ebb964e244a9deaba34wilsonncorg_

Content-Type: multipart/alternative; boundary="_000_0350f87a16b74ebb964e244a9deaba34wilsonncorg_"



--_000_0350f87a16b74ebb964e244a9deaba34wilsonncorg_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable











Pursuant to North Carolina General Statutes, Chapter 132,et.seq., this el=

ectronic mail message and any attachment hereto, as well as any electroni=

c mail message(s) that may be sent in response to it may be considered pu=

blic record and as such are subject to requests for review.





--_000_0350f87a16b74ebb964e244a9deaba34wilsonncorg_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable











/?LinkId=3D550986">



3D"image"/





3D"image"/





3D"image"/






















osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =

xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=

//www.w3.org/TR/REC-html40">


>











 








Roman"; font-size: medium;">
Pursuant to North Carolina General St=

atutes, Chapter 132,et.seq., this electronic mail message and any attachmen=

t hereto, as well as any electronic mail message(s) that may be sent in res=

ponse to it may be considered public record and as such are subject to requ=

ests for review.








--_000_0350f87a16b74ebb964e244a9deaba34wilsonncorg_--



--_005_0350f87a16b74ebb964e244a9deaba34wilsonncorg_--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA