Canada Post Phish from France
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 24 Apr 2024 12:46:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rzhcD-000000009zT-2DeY
for dave@doctor.nl2k.ab.ca;
Wed, 24 Apr 2024 12:45:09 -0600
Resent-From: The Doctor
Resent-Date: Wed, 24 Apr 2024 12:45:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout02-ext4.partage.renater.fr ([194.254.241.31]:48318)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rzesi-00000000Awa-01l6
for root@nk.ca;
Wed, 24 Apr 2024 09:50:17 -0600
Received: from zmtaauth02.partage.renater.fr (zmtaauth02.partage.renater.fr [194.254.241.25])
by smtpout20.partage.renater.fr (Postfix) with ESMTP id F009BC01B6
for; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
Received: from zmtaauth02.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTPS id EB82CA016F
for; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTP id D1B61A0765
for; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth02.partage.renater.fr D1B61A0765
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=etu.univ-orleans.fr;
s=75C661D4-E48C-49B6-AFC7-D2E4031D8F72; t=1713973671;
bh=qMd6gglLjB7C4q+gmSbybN9OFBepQfW+6tKH0ZoFdZU=;
h=MIME-Version:From:To:Date:Message-Id;
b=WS1s8jSvsZpimlj/L7EUtxYbgt4DsthISmUp/j3M7H9qMSwKDVjPE9ESSPCV6vYBU
9eT7wiFCbIhGkP+tkF3T23jydfYftwyIe6QeQ1w0L9o48RzbEgDYBacaC287rNEPZA
TglIpFiNXeSdsuUh0/5vEXxhuUabUrGfmam6xYyY+sfY8qW/P1dQiGl2kMuqgbLxIH
FmHBFFazKNE5F6Z76Esmk/mXY6LyEo6mr+MRipl0qwuX7NB7emTQ/ZimNaeryNw4Z0
1TXEM8yuOcuoRb4jwPOImTUDjgfXBfN/86jJbGKSC3X1zuubZpQKM2GM8VHx3AqOWK
8ZfwVqSOYVDgw==
Received: from zmtaauth02.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth02.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id 8wGoV1W-fxWO for;
Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
Received: from 18.223.180.249 (unknown [194.254.241.251])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTPA id 30609A0752
for; Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
MIME-Version: 1.0
From: "Services"
To: root@nk.ca
Date: 24 Apr 2024 15:47:51 +0000
Subject: You have notification
Content-Type: multipart/alternative;
boundary=--boundary_1935_3012c203-105d-4c15-bb39-8a5ada64abed
Message-Id: <20240424154751.30609A0752@zmtaauth02.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav04
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: spam:medium
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrudelhedgfeefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucgoufhprghmffhomhgrihhnucdlfedttddmnecujfgurhepggfhvfffufgtkfesrgdtfeertddtjeenucfhrhhomhepfdfuvghrvhhitggvshdfuceonhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrheqnecuggftrfgrthhtvghrnhepudfggeettefgudfhkeeuveeugfeuudeifedvtdfgvedvieeijeeujefgffevgeefnecuffhomhgrihhnpegtrghnrggurghpohhsthdqphhoshhtvghstggrnhgruggrrdgtrgdptghffigvsghrrgguihhordhnvghtnecukfhppeduleegrddvheegrddvgedurddvhedunecuufhprghmffhomhgrihhnpedukedrvddvfedrudektddrvdegleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedupdhhvghlohepudekrddvvdefrddukedtrddvgeelpdhmrghilhhfrhhomhepnhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehrohhothesnhhkrdgtrg
X-Spam_score: 15.1
X-Spam_score_int: 151
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 24 Apr 2024 12:46:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rzhcD-000000009zT-2DeY
for dave@doctor.nl2k.ab.ca;
Wed, 24 Apr 2024 12:45:09 -0600
Resent-From: The Doctor
Resent-Date: Wed, 24 Apr 2024 12:45:09 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from smtpout02-ext4.partage.renater.fr ([194.254.241.31]:48318)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rzesi-00000000Awa-01l6
for root@nk.ca;
Wed, 24 Apr 2024 09:50:17 -0600
Received: from zmtaauth02.partage.renater.fr (zmtaauth02.partage.renater.fr [194.254.241.25])
by smtpout20.partage.renater.fr (Postfix) with ESMTP id F009BC01B6
for
Received: from zmtaauth02.partage.renater.fr (localhost [127.0.0.1])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTPS id EB82CA016F
for
Received: from localhost (localhost [127.0.0.1])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTP id D1B61A0765
for
DKIM-Filter: OpenDKIM Filter v2.10.3 zmtaauth02.partage.renater.fr D1B61A0765
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=etu.univ-orleans.fr;
s=75C661D4-E48C-49B6-AFC7-D2E4031D8F72; t=1713973671;
bh=qMd6gglLjB7C4q+gmSbybN9OFBepQfW+6tKH0ZoFdZU=;
h=MIME-Version:From:To:Date:Message-Id;
b=WS1s8jSvsZpimlj/L7EUtxYbgt4DsthISmUp/j3M7H9qMSwKDVjPE9ESSPCV6vYBU
9eT7wiFCbIhGkP+tkF3T23jydfYftwyIe6QeQ1w0L9o48RzbEgDYBacaC287rNEPZA
TglIpFiNXeSdsuUh0/5vEXxhuUabUrGfmam6xYyY+sfY8qW/P1dQiGl2kMuqgbLxIH
FmHBFFazKNE5F6Z76Esmk/mXY6LyEo6mr+MRipl0qwuX7NB7emTQ/ZimNaeryNw4Z0
1TXEM8yuOcuoRb4jwPOImTUDjgfXBfN/86jJbGKSC3X1zuubZpQKM2GM8VHx3AqOWK
8ZfwVqSOYVDgw==
Received: from zmtaauth02.partage.renater.fr ([127.0.0.1])
by localhost (zmtaauth02.partage.renater.fr [127.0.0.1]) (amavis, port 10026)
with ESMTP id 8wGoV1W-fxWO for
Wed, 24 Apr 2024 17:47:51 +0200 (CEST)
Received: from 18.223.180.249 (unknown [194.254.241.251])
by zmtaauth02.partage.renater.fr (Postfix) with ESMTPA id 30609A0752
for
MIME-Version: 1.0
From: "Services"
To: root@nk.ca
Date: 24 Apr 2024 15:47:51 +0000
Subject: You have notification
Content-Type: multipart/alternative;
boundary=--boundary_1935_3012c203-105d-4c15-bb39-8a5ada64abed
Message-Id: <20240424154751.30609A0752@zmtaauth02.partage.renater.fr>
X-Virus-Scanned: clamav-milter 0.103.8 at clamav04
X-Virus-Status: Clean
X-Renater-Ptge-SpamState: spam:medium
X-Renater-Ptge-SpamScore: 300
X-Renater-Ptge-SpamCause: gggruggvucftvghtrhhoucdtuddrgedvledrudelhedgfeefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecutffgpfetvffgtfenuceurghilhhouhhtmecufedttdenucgoufhprghmffhomhgrihhnucdlfedttddmnecujfgurhepggfhvfffufgtkfesrgdtfeertddtjeenucfhrhhomhepfdfuvghrvhhitggvshdfuceonhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrheqnecuggftrfgrthhtvghrnhepudfggeettefgudfhkeeuveeugfeuudeifedvtdfgvedvieeijeeujefgffevgeefnecuffhomhgrihhnpegtrghnrggurghpohhsthdqphhoshhtvghstggrnhgruggrrdgtrgdptghffigvsghrrgguihhordhnvghtnecukfhppeduleegrddvheegrddvgedurddvhedunecuufhprghmffhomhgrihhnpedukedrvddvfedrudektddrvdegleenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeduleegrddvheegrddvgedurddvhedupdhhvghlohepudekrddvvdefrddukedtrddvgeelpdhmrghilhhfrhhomhepnhhorhgvphhlhieifedtjedvfeehgeeffeesvghtuhdruhhnihhvqdhorhhlvggrnhhsrdhfrhdpnhgspghrtghpthhtohepuddprhgtphhtthhopehrohhothesnhhkrdgtrg
X-Spam_score: 15.1
X-Spam_score_int: 151
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
aria-label="Corps du message" class="x_XbIp4 x_jmmB7 x_GNqVo x_yxtKT x_allowTextSelection">