Hays Canada Phish from han-solo.net
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from)
id 1rGSOZ-00000000Arf-1gG8
for dave@doctor.nl2k.ab.ca;
Thu, 21 Dec 2023 16:24:03 -0700
Resent-From: The Doctor
Resent-Date: Thu, 21 Dec 2023 16:24:03 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from sinida.han-solo.net ([83.138.84.113]:58150)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from)
id 1rGRHQ-000000002eH-12OD
for doctor@nk.ca;
Thu, 21 Dec 2023 15:12:40 -0700
X-KSD:
Received: from [127.0.0.1] (188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged))
(authenticated bits=0)
by sinida.han-solo.net (8.15.2/8.15.2) with ESMTPSA id 3BLM17vR000585
(version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT)
for; Thu, 21 Dec 2023 23:10:31 +0100 (CET)
(envelope-from leon.wilke@digitalart-media.de)
X-Authentication-Warning: sinida.han-solo.net: Host 188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged) claimed to be [127.0.0.1]
Date: Thu, 21 Dec 2023 22:10:30 +0000
Subject: New Document Delivered
Message-ID:
From: "Hays Canada"
To: doctor@nk.ca
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_com.android.email_0530168086351"
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, this email is to notify you that new documents have
been delivered to your Docusign (HAYS)PremiumsFilesTransfersToolinbox: joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he
[...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
Subject: {SPAM?} New Document Delivered
X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
----_com.android.email_0530168086351
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=20
=20
Hello,
this email is to notify you that new documents have been delivered to =
your Docusign (HAYS)PremiumsFilesTransfersToolinbox:
joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=
alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf
There are a total of 8 documents. Log in below to read these documents=
=2E
Best regards,
Hays
=20
Your documents have been completed and sent to you
https://quebecart.org/realm/?a=3DID2119
Hays sent this email to:doctor@nk.ca
=20
=20
Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share thi=
s email, link, or access code with others.
About DocuSign
Sign documents electronically in just minutes. It's safe, secure, and =
legally binding. Whether you're in an office, at home, on-the-go -- or=
even across the globe -- DocuSign provides a professional trusted sol=
ution for Digital Transaction Management=E2=84=A2.
Questions about the Document?
If you need to modify the document or have questions about the details=
in the document, please reach out to the sender by emailing them dire=
ctly.
This message was sent to you by Hays who is using the DocuSign Electro=
nic Signature Service. If you would rather not receive email from this=
sender you may contact the sender with your request.
=20
----_com.android.email_0530168086351
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
pe" />
Hays job offer
ca,Arial,Sans Serif;">
0" dir=3D"" role=3D"presentation" width=3D"100%">
llapse:collapse;background-color:#ffffff;max-width:640px;">
ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=
:#FFFFFF;" width=3D"100%">
der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=
ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=
img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=
es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=
h=3D"75" />
"presentation" width=3D"100%">
6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=
er;color:#FFFFFF">Your documents have been completed and sent to you
td>
"presentation" width=3D"100%">
16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">
presentation">
ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=
s email to:
ght:18px;font-size:15px;color:#666666;">doctor@nk.ca
rial,Sans Serif;line-height:20px;">
;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=
>
A;">
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email
This email contains a secure link to DocuSign. Please do not sha=
re this email, link, or access code with others.
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign
Sign documents electronically in just minutes. It's safe, se=
cure, and legally binding. Whether you're in an office, at home, o=
n-the-go -- or even across the globe -- DocuSign provides a profession=
al trusted solution for Digital Transaction Management™.
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?
If you need to modify the document or have questions about the d=
etails in the document, please reach out to the sender by emailing the=
m directly.
erif;font-size:13px;color:#666666;line-height:18px;">This message was =
sent to you by Hays who is using the DocuSign Electronic Signature Ser=
vice. If you would rather not receive email from this sender you may c=
ontact the sender with your request.
A;">
p=3D"text" />
/>
----_com.android.email_0530168086351--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Dec 2023 16:36:13 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))
(envelope-from
id 1rGSOZ-00000000Arf-1gG8
for dave@doctor.nl2k.ab.ca;
Thu, 21 Dec 2023 16:24:03 -0700
Resent-From: The Doctor
Resent-Date: Thu, 21 Dec 2023 16:24:03 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from sinida.han-solo.net ([83.138.84.113]:58150)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97 (FreeBSD))
(envelope-from
id 1rGRHQ-000000002eH-12OD
for doctor@nk.ca;
Thu, 21 Dec 2023 15:12:40 -0700
X-KSD:
Received: from [127.0.0.1] (188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged))
(authenticated bits=0)
by sinida.han-solo.net (8.15.2/8.15.2) with ESMTPSA id 3BLM17vR000585
(version=TLSv1 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT)
for
(envelope-from leon.wilke@digitalart-media.de)
X-Authentication-Warning: sinida.han-solo.net: Host 188.146.116.120.mobile.internet.t-mobile.pl [188.146.116.120] (may be forged) claimed to be [127.0.0.1]
Date: Thu, 21 Dec 2023 22:10:30 +0000
Subject: New Document Delivered
Message-ID:
From: "Hays Canada"
To: doctor@nk.ca
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--_com.android.email_0530168086351"
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, this email is to notify you that new documents have
been delivered to your Docusign (HAYS)PremiumsFilesTransfersToolinbox: joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he
[...]
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to
background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 MAY_BE_FORGED Relay IP's reverse DNS does not resolve to IP
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
Subject: {SPAM?} New Document Delivered
X-Antivirus: AVG (VPS 231221-4, 12/21/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
----_com.android.email_0530168086351
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=20
=20
Hello,
this email is to notify you that new documents have been delivered to =
your Docusign (HAYS)PremiumsFilesTransfersToolinbox:
joboffer.pdf,conditionaloffer_proj.pdf,salary_g.pdf,calculation.pdf,he=
alth_safety.pdf,legisl_req.pdf, policies.pdf,recruitm_agent.pdf
There are a total of 8 documents. Log in below to read these documents=
=2E
Best regards,
Hays
=20
Your documents have been completed and sent to you
https://quebecart.org/realm/?a=3DID2119
Hays sent this email to:doctor@nk.ca
=20
=20
Do Not Share This Email
This email contains a secure link to DocuSign. Please do not share thi=
s email, link, or access code with others.
About DocuSign
Sign documents electronically in just minutes. It's safe, secure, and =
legally binding. Whether you're in an office, at home, on-the-go -- or=
even across the globe -- DocuSign provides a professional trusted sol=
ution for Digital Transaction Management=E2=84=A2.
Questions about the Document?
If you need to modify the document or have questions about the details=
in the document, please reach out to the sender by emailing them dire=
ctly.
This message was sent to you by Hays who is using the DocuSign Electro=
nic Signature Service. If you would rather not receive email from this=
sender you may contact the sender with your request.
=20
----_com.android.email_0530168086351
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
pe" />
ca,Arial,Sans Serif;">
0" dir=3D"" role=3D"presentation" width=3D"100%">
llapse:collapse;background-color:#ffffff;max-width:640px;">
ok/assets/img/svg/logo.svg" style=3D"border: medium; width: 150px;" />=
Hello,
this email is to notify you that new documents have been deli=
vered to your Docusign (HAYS)
lass=3D"d-inline font-weight-bold">Premium
;">sFilesTransfer
yle=3D"color:#FFFFFF;">sTool inbox:
joboffer.pdf, conditionaloffer_proj.=
pdf, salary_g.pdf, c=
alculation.pdf, health_safety.pdf,
s=3D"pdf-name">legisl_req.pdf, policies.pdf,
an>recruitm_agent.pdf
There are a total of 8 documents. Log in below to read these =
documents.
Best regards,
Hays
email/Email_Logo.png" style=3D"width: 116px; height: 34px; float: righ=
t;" />
![3D""](3D"https://www.docusign.net/Signing/Images/=<br)
ng=3D"0" role=3D"presentation" style=3D"background-color:#1e4ca1;color=
:#FFFFFF;" width=3D"100%">
der-radius:2px;background-color:#1e4ca1;color:#FFFFFF;font-size:16px;f=
ont-family:Helvetica,Arial,Sans Serif;width:100%;text-align:center;"><=
img alt=3D"" height=3D"75" src=3D"https://www.docusign.net/member/Imag=
es/email/docComplete-white.png" style=3D"width:75px;height:75px;" widt=
h=3D"75" />
"presentation" width=3D"100%">
6px;font-family:Helvetica,Arial,Sans Serif;border:none;text-align:cent=
er;color:#FFFFFF">Your documents have been completed and sent to you
td>
"presentation" width=3D"100%">
16px;font-family:Helvetica,Arial,Sans Serif;background-color:white;">
presentation">
ght:bold;line-height:18px;font-size:15px;color:#333333;">Hays sent thi=
s email to:
ght:18px;font-size:15px;color:#666666;">doctor@nk.ca
rial,Sans Serif;line-height:20px;">
;font-family:Helvetica,Arial,Sans Serif;font-size:11px;color:#666666;"=
>
A;">
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Do Not Share This Email
This email contains a secure link to DocuSign. Please do not sha=
re this email, link, or access code with others.
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">About DocuSign
Sign documents electronically in just minutes. It's safe, se=
cure, and legally binding. Whether you're in an office, at home, o=
n-the-go -- or even across the globe -- DocuSign provides a profession=
al trusted solution for Digital Transaction Management™.
erif;font-size:13px;color:#666666;line-height:18px;">
3" role=3D"heading">Questions about the Document?
If you need to modify the document or have questions about the d=
etails in the document, please reach out to the sender by emailing the=
m directly.
erif;font-size:13px;color:#666666;line-height:18px;">This message was =
sent to you by Hays who is using the DocuSign Electronic Signature Ser=
vice. If you would rather not receive email from this sender you may c=
ontact the sender with your request.
A;">
p=3D"text" />
/>
----_com.android.email_0530168086351--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments