Canada Post PHish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 May 2024 09:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s9o8w-000000009r3-1tCT
for dave@doctor.nl2k.ab.ca;
Wed, 22 May 2024 09:44:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 22 May 2024 09:44:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout02-ext4.partage.renater.fr ([194.254.241.31]:50690)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1s9mZs-00000000O3H-1ucx
for root@nk.ca;
Wed, 22 May 2024 08:04:42 -0600
Received: from zmtaauth04.partage.renater.fr (zmtaauth04.partage.renater.fr [194.254.241.26])
by smtpout20.partage.renater.fr (Postfix) with ESMTP id 93904C03F5
for; Wed, 22 May 2024 16:02:21 +0200 (CEST)
Received: from zmtaauth04.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTPS id 8DF711C00CA
for; Wed, 22 May 2024 16:02:21 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTP id 74EF21C0546
for; Wed, 22 May 2024 16:02:21 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth04.partage.renater.fr 74EF21C0546
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=univ-orleans.fr;
s=FD5FCC58-2F14-4662-A438-82EB3740C7CC; t=1716386541;
bh=Usd47n25Y56yL4FHL+WfDA45VkK794YxlbsCkUcH3Lk=;
h=MIME-Version:From:To:Date:Message-Id;
b=mT8CUCNY9RKjUq+plgUm9PuuUSwZP0OVUEDi4FvXffcXNBTOOLeI7zvKilHNGQgXB
JsdxOF2S64HRF0DNcSpGPH5PP+fIRgOxzrMbPDf2wTkeqNBV9DApXj+qJmzmnaiqaK
QCbg33KxkXs8FEWi1AUb5QsdNkQ/gwoo7olKHtZM64Ffsz/r2ivby53nHTFo1AS1wo
kZNUR+5BL/K+DCbSgVyrhj6k5YJxOui4kTGkRbObrytTsjDFui19SDkFnTwBaUBgd7
IKBT2hF2F3Eeyr96G2w1/THpT9b3W01cY3wKr3uEARPdSFdeQS19saOdl7ZDPhaI34
h8sWlC73oW5Hw==
Received: from zmtaauth04.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth04.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id uthNBkCEONEI for;
Wed, 22 May 2024 16:02:21 +0200 (CEST)
Received: from 197.14.18.154 (unknown [194.254.241.250])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTPA id 010BA1C00CA
for; Wed, 22 May 2024 16:02:20 +0200 (CEST)
MIME-Version: 1.0
From: "lnfo Services"
To: root@nk.ca
Date: 22 May 2024 10:02:21 -0400
Subject: You have (2) unread notifications
Content-Type: multipart/alternative;
boundary=--boundary_7040_6dc0d629-5700-4b13-9507-cd669f42aad1
Message-Id: <20240522140221.010BA1C00CA@zmtaauth04.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav03
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: phishing
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrvdeigedgudeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucdnrfhhihhshhhinhhgqdhfrhdqghgvnhculdeftddtmdenucfjughrpegghffvfffutgfksegrtdefredttdejnecuhfhrohhmpedflhhnfhhoucfuvghrvhhitggvshdfuceoshholhgrsggrlhhouddvfeesuhhnihhvqdhorhhlvggrnhhsrdhfrheqnecuggftrfgrthhtvghrnheptdfgheehleetvdehleeuheduheefteetteegvdfhgfefheelfeegfedvueethedunecuffhomhgrihhnpegtrghnrggurghpohhsthdqphhoshhtvghstggrnhgruggrrdgtrgdpughjrdhrrgguihhordgsrhenucfkphepudelgedrvdehgedrvdeguddrvdehtdenucevlhhushhtvghrufhiiigvpeefnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedtpdhhvghlohepudeljedrudegrddukedrudehgedpmhgrihhlfhhrohhmpehsohhlrggsrghlohduvdefsehunhhivhdqohhrlhgvrghnshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggr
X-Spam_score: 12.9
X-Spam_score_int: 129
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 22 May 2024 09:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s9o8w-000000009r3-1tCT
for dave@doctor.nl2k.ab.ca;
Wed, 22 May 2024 09:44:42 -0600
Resent-From: The Doctor
Resent-Date: Wed, 22 May 2024 09:44:42 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout02-ext4.partage.renater.fr ([194.254.241.31]:50690)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1s9mZs-00000000O3H-1ucx
for root@nk.ca;
Wed, 22 May 2024 08:04:42 -0600
Received: from zmtaauth04.partage.renater.fr (zmtaauth04.partage.renater.fr [194.254.241.26])
by smtpout20.partage.renater.fr (Postfix) with ESMTP id 93904C03F5
for
Received: from zmtaauth04.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTPS id 8DF711C00CA
for
Received: from localhost (localhost [127.0.0.1])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTP id 74EF21C0546
for
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth04.partage.renater.fr 74EF21C0546
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=univ-orleans.fr;
s=FD5FCC58-2F14-4662-A438-82EB3740C7CC; t=1716386541;
bh=Usd47n25Y56yL4FHL+WfDA45VkK794YxlbsCkUcH3Lk=;
h=MIME-Version:From:To:Date:Message-Id;
b=mT8CUCNY9RKjUq+plgUm9PuuUSwZP0OVUEDi4FvXffcXNBTOOLeI7zvKilHNGQgXB
JsdxOF2S64HRF0DNcSpGPH5PP+fIRgOxzrMbPDf2wTkeqNBV9DApXj+qJmzmnaiqaK
QCbg33KxkXs8FEWi1AUb5QsdNkQ/gwoo7olKHtZM64Ffsz/r2ivby53nHTFo1AS1wo
kZNUR+5BL/K+DCbSgVyrhj6k5YJxOui4kTGkRbObrytTsjDFui19SDkFnTwBaUBgd7
IKBT2hF2F3Eeyr96G2w1/THpT9b3W01cY3wKr3uEARPdSFdeQS19saOdl7ZDPhaI34
h8sWlC73oW5Hw==
Received: from zmtaauth04.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth04.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id uthNBkCEONEI for
Wed, 22 May 2024 16:02:21 +0200 (CEST)
Received: from 197.14.18.154 (unknown [194.254.241.250])
by zmtaauth04.partage.renater.fr (Postfix) with ESMTPA id 010BA1C00CA
for
MIME-Version: 1.0
From: "lnfo Services"
To: root@nk.ca
Date: 22 May 2024 10:02:21 -0400
Subject: You have (2) unread notifications
Content-Type: multipart/alternative;
boundary=--boundary_7040_6dc0d629-5700-4b13-9507-cd669f42aad1
Message-Id: <20240522140221.010BA1C00CA@zmtaauth04.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav03
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: phishing
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrvdeigedgudeiucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucdnrfhhihhshhhinhhgqdhfrhdqghgvnhculdeftddtmdenucfjughrpegghffvfffutgfksegrtdefredttdejnecuhfhrohhmpedflhhnfhhoucfuvghrvhhitggvshdfuceoshholhgrsggrlhhouddvfeesuhhnihhvqdhorhhlvggrnhhsrdhfrheqnecuggftrfgrthhtvghrnheptdfgheehleetvdehleeuheduheefteetteegvdfhgfefheelfeegfedvueethedunecuffhomhgrihhnpegtrghnrggurghpohhsthdqphhoshhtvghstggrnhgruggrrdgtrgdpughjrdhrrgguihhordgsrhenucfkphepudelgedrvdehgedrvdeguddrvdehtdenucevlhhushhtvghrufhiiigvpeefnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedtpdhhvghlohepudeljedrudegrddukedrudehgedpmhgrihhlfhhrohhmpehsohhlrggsrghlohduvdefsehunhhivhdqohhrlhgvrghnshdrfhhrpdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggr
X-Spam_score: 12.9
X-Spam_score_int: 129
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">