Dewalt Canadian Tire phish from Microsoft Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rpThZ-00000000JGa-2iDe
for dave@doctor.nl2k.ab.ca;
Wed, 27 Mar 2024 07:52:25 -0600
Resent-From: The Doctor
Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rpRyH-00000000AhK-08oB
for root@nk.ca;
Wed, 27 Mar 2024 06:01:38 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;
b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
212.87.212.62) smtp.rcpttodomain=nk.ca
smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none
header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);
arc=none (0)
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)
smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none
header.from=gdfgdg78zrtgh.onmicrosoft.com;
Subject: Get Rewarded for Your Opinion:Take Our Survey!
Date: Wed, 27 Mar 2024 11:59:28 +0000
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="UTF-8"
CC: root@nk.ca
From: "Dewalt-EXTREME-Drill-Unlocked"
MIME-Version: 1.0In-Reply-To:
To: root@nk.ca
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_
X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;
X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02
X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
BL02EPF0001A107.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850
X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message
X-Antivirus-Status: Clean
(1) Notifications
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 27 Mar 2024 07:53:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rpThZ-00000000JGa-2iDe
for dave@doctor.nl2k.ab.ca;
Wed, 27 Mar 2024 07:52:25 -0600
Resent-From: The Doctor
Resent-Date: Wed, 27 Mar 2024 07:52:25 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-bn8nam04on2103.outbound.protection.outlook.com ([40.107.100.103]:23489 helo=NAM04-BN8-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rpRyH-00000000AhK-08oB
for root@nk.ca;
Wed, 27 Mar 2024 06:01:38 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=UWUszyb8qnQQcARf/G+WCu3zzjYW/pbGTWmf6dW4zXusMEcFCJ0unwSa6gmgltdB8em2ZhcdRsxv1bl3yA5DwoV/u17tMM/sSSi0i18HijyxHxUTyW/1a9YBbqtnlR5raC9NJZHZ9ypwOLrFTBTTS8ukDNDt8/uCDYAeBAj4DtQSM2EeycgvnSDeFXDbc7S2Toc0KYoGIhBuiDHynq+lt9YcKcM6fvdwnhwtiPF9g9ueZyCkxmrqewjd8JggyCanwRIRTMdqPxRg7nQ81HlOIXIDcQs4YBidWjWBHIBG9vJY+dtil/Y5dtS69DP+EVMVvRW3iYB9rKQd9ktr5C+xRw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=QK4WPbXjmCK87NX4llDZ2wonTlvxr67DEfbAmliHhtA=;
b=EmgACm03vXNlmLhTZGpiQbN72qovwF1vKVLCDGEwUsNPIFG3Uy8H1XI/lyfSHYGPfT63wUJL5YfudQVruseyRQFSgO8AFUZDPM3T7wqxIi6UykQdBfCdWsW/X9vjT5vILTxPYRMg7TvinkbIPpYR24XsfdUi5xMGARMlVxSRhMl9ZArVrvZ+WF7iro1wV48ufqWN+Bk0uK97PKjME1KhDnlIHmpzPvnufLfKT5X5kjJ9Ucfzqsu6oYaapSJw6JJlMADQFpxWHvw5+Ssa2PNUjq6jV14FbYXbmzwnwAsw9PzeC844cz4cEX9xkjPNnVkW4B7sB9w4rk+ParW0x8dcUg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is
212.87.212.62) smtp.rcpttodomain=nk.ca
smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dmarc=none action=none
header.from=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed);
arc=none (0)
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 212.87.212.62)
smtp.mailfrom=gdfgdg78zrtgh.onmicrosoft.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none
header.from=gdfgdg78zrtgh.onmicrosoft.com;
Subject: Get Rewarded for Your Opinion:Take Our Survey!
Date: Wed, 27 Mar 2024 11:59:28 +0000
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="UTF-8"
CC: root@nk.ca
From: "Dewalt-EXTREME-Drill-Unlocked"
MIME-Version: 1.0In-Reply-To:
To: root@nk.ca
Message-ID:
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL02EPF0001A107:EE_|MW4PR12MB6850:EE_
X-MS-Office365-Filtering-Correlation-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
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
X-Forefront-Antispam-Report:
CIP:212.87.212.62;CTRY:DE;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:gdfgdg78zrtgh.onmicrosoft.com;PTR:mailkhalilo194.infinitygroup.com.ar;CAT:NONE;SFS:(13230031)(82310400014)(36860700004)(376005)(61400799018)(34070700005)(41320700004);DIR:OUT;SFP:1102;
X-OriginatorOrg: gdfgdg78zrtgh.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Mar 2024 11:59:28.3481
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 81b77aa0-d52c-4e5f-3363-08dc4e555b02
X-MS-Exchange-CrossTenant-Id: 4b10c5ae-a8a9-4671-9687-e36fa9732105
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=4b10c5ae-a8a9-4671-9687-e36fa9732105;Ip=[212.87.212.62];Helo=[gdfgdg78zrtgh.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSource:
BL02EPF0001A107.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW4PR12MB6850
X-Antivirus: AVG (VPS 240325-8, 3/25/2024), Inbound message
X-Antivirus-Status: Clean
|
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments