Canada Post Phish from France
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 13 Mar 2024 17:47:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rkYJ7-000000003IC-3B93
for dave@doctor.nl2k.ab.ca;
Wed, 13 Mar 2024 17:46:49 -0600
Resent-From: The Doctor
Resent-Date: Wed, 13 Mar 2024 17:46:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout01-ext2.partage.renater.fr ([194.254.240.33]:58274)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rkY0Y-000000000S4-1CfV
for root@nk.ca;
Wed, 13 Mar 2024 17:27:51 -0600
Received: from zmtaauth01.partage.renater.fr (zmtaauth01.partage.renater.fr [194.254.240.25])
by smtpout10.partage.renater.fr (Postfix) with ESMTP id 876C46D372
for; Thu, 14 Mar 2024 00:25:35 +0100 (CET)
Received: from zmtaauth01.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTPS id 63D98140011
for; Thu, 14 Mar 2024 00:25:35 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTP id 2C656140077
for; Thu, 14 Mar 2024 00:25:35 +0100 (CET)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth01.partage.renater.fr 2C656140077
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=univ-orleans.fr;
s=FD5FCC58-2F14-4662-A438-82EB3740C7CC; t=1710372335;
bh=2QG+9SkslA1YIGvirmTDrFqXzGnwJ9ytBhjibHpi9Pc=;
h=MIME-Version:From:To:Date:Message-Id;
b=wAZf7HleTovV6Y7JMqH/lgRWVUDlKtfwFtPMBq1b5ET9cdzKgKVjMsCMqhXPYeVE8
VHDLp6UiNBnzTrEmXpJ2tWcJZx2byjteWbNrw+ceoago7gBzFTSnqYwsv6i+BFwaHM
PZtPAd9G+DLe9+2qQ/6r7lhlqxtzBoGooUhIkVMnx+FuMg0/Tina/rBB++qrxwDsTR
FOXHRKFAd2Wrb/982Nr/wPvALaiWpJokTIRmngC9gGJM7HiWSylrOM33XqQzSTzgZ9
KcUAD1BT5ZNGYlV0U+bzUQHQ7yptCc/YvnS+7Yt9sQRjSvkO69mY30kSPBcY/EA0jC
QFJ3El4ws1COQ==
Received: from zmtaauth01.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth01.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id TUdwwEbE7_9d for;
Thu, 14 Mar 2024 00:25:35 +0100 (CET)
Received: from 3.97.203.81 (unknown [194.254.241.249])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTPA id 62BCD140011
for; Thu, 14 Mar 2024 00:25:34 +0100 (CET)
MIME-Version: 1.0
From: "FAQ"
To: root@nk.ca
Date: 13 Mar 2024 23:25:34 +0000
Subject: NOTIFICATION : 4
Content-Type: multipart/alternative;
boundary=--boundary_33332_b5afc54b-ce68-4cbf-b852-a89f5deaa608
Message-Id: <20240313232534.62BCD140011@zmtaauth01.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav04
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: phishing
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrjeeigddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucftgffptefvgfftnecuuegrihhlohhuthemuceftddtnecuogfrhhhishhhihhnghdqtehlphhhrgetlhhirghsucdlfedttddmnecujfgurhepggfhvfffufgtkfesrgdtfeertddtjeenucfhrhhomhepfdfhtefsfdcuoegthhhrihhsthgrfhgrrhhisehunhhivhdqohhrlhgvrghnshdrfhhrqeenucggtffrrghtthgvrhhnpeehueevtdelleeltddukeegudefvdeikeffkeejtdevjeelffduudffiedvhefgueenucffohhmrghinheptggrnhgruggrphhoshhtqdhpohhsthgvshgtrghnrggurgdrtggrpdhshhhtrdgrtgenucfkphepudelgedrvdehgedrvdeguddrvdegleenuceurggutfgvphhuthfkphepudelgedrvdehgedrvdeguddrvdegleenucfrhhhishhhihhnghetlhhphhgrufhusghjvggtthepnhhothhifhhitggrthhiohhngdenucfrhhhishhhihhnghetlhhphhgrtehlihgrshepfhgrqhenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvgeelpdhhvghlohepfedrleejrddvtdefrdekuddpmhgrihhlfhhrohhmpegthhhrihhsthgrfhgrrhhisehunhhivhdqohhrlhgvrghnshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggr
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 13 Mar 2024 17:47:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rkYJ7-000000003IC-3B93
for dave@doctor.nl2k.ab.ca;
Wed, 13 Mar 2024 17:46:49 -0600
Resent-From: The Doctor
Resent-Date: Wed, 13 Mar 2024 17:46:49 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout01-ext2.partage.renater.fr ([194.254.240.33]:58274)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rkY0Y-000000000S4-1CfV
for root@nk.ca;
Wed, 13 Mar 2024 17:27:51 -0600
Received: from zmtaauth01.partage.renater.fr (zmtaauth01.partage.renater.fr [194.254.240.25])
by smtpout10.partage.renater.fr (Postfix) with ESMTP id 876C46D372
for
Received: from zmtaauth01.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTPS id 63D98140011
for
Received: from localhost (localhost [127.0.0.1])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTP id 2C656140077
for
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth01.partage.renater.fr 2C656140077
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=univ-orleans.fr;
s=FD5FCC58-2F14-4662-A438-82EB3740C7CC; t=1710372335;
bh=2QG+9SkslA1YIGvirmTDrFqXzGnwJ9ytBhjibHpi9Pc=;
h=MIME-Version:From:To:Date:Message-Id;
b=wAZf7HleTovV6Y7JMqH/lgRWVUDlKtfwFtPMBq1b5ET9cdzKgKVjMsCMqhXPYeVE8
VHDLp6UiNBnzTrEmXpJ2tWcJZx2byjteWbNrw+ceoago7gBzFTSnqYwsv6i+BFwaHM
PZtPAd9G+DLe9+2qQ/6r7lhlqxtzBoGooUhIkVMnx+FuMg0/Tina/rBB++qrxwDsTR
FOXHRKFAd2Wrb/982Nr/wPvALaiWpJokTIRmngC9gGJM7HiWSylrOM33XqQzSTzgZ9
KcUAD1BT5ZNGYlV0U+bzUQHQ7yptCc/YvnS+7Yt9sQRjSvkO69mY30kSPBcY/EA0jC
QFJ3El4ws1COQ==
Received: from zmtaauth01.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth01.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id TUdwwEbE7_9d for
Thu, 14 Mar 2024 00:25:35 +0100 (CET)
Received: from 3.97.203.81 (unknown [194.254.241.249])
by zmtaauth01.partage.renater.fr (Postfix) with ESMTPA id 62BCD140011
for
MIME-Version: 1.0
From: "FAQ"
To: root@nk.ca
Date: 13 Mar 2024 23:25:34 +0000
Subject: NOTIFICATION : 4
Content-Type: multipart/alternative;
boundary=--boundary_33332_b5afc54b-ce68-4cbf-b852-a89f5deaa608
Message-Id: <20240313232534.62BCD140011@zmtaauth01.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav04
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: phishing
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrjeeigddtkecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucftgffptefvgfftnecuuegrihhlohhuthemuceftddtnecuogfrhhhishhhihhnghdqtehlphhhrgetlhhirghsucdlfedttddmnecujfgurhepggfhvfffufgtkfesrgdtfeertddtjeenucfhrhhomhepfdfhtefsfdcuoegthhhrihhsthgrfhgrrhhisehunhhivhdqohhrlhgvrghnshdrfhhrqeenucggtffrrghtthgvrhhnpeehueevtdelleeltddukeegudefvdeikeffkeejtdevjeelffduudffiedvhefgueenucffohhmrghinheptggrnhgruggrphhoshhtqdhpohhsthgvshgtrghnrggurgdrtggrpdhshhhtrdgrtgenucfkphepudelgedrvdehgedrvdeguddrvdegleenuceurggutfgvphhuthfkphepudelgedrvdehgedrvdeguddrvdegleenucfrhhhishhhihhnghetlhhphhgrufhusghjvggtthepnhhothhifhhitggrthhiohhngdenucfrhhhishhhihhnghetlhhphhgrtehlihgrshepfhgrqhenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvgeelpdhhvghlohepfedrleejrddvtdefrdekuddpmhgrihhlfhhrohhmpegthhhrihhsthgrfhgrrhhisehunhhivhdqohhrlhgvrghnshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggr
X-Spam_score: 9.6
X-Spam_score_int: 96
X-Spam_bar: +++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">