fadi

Tried to hack my email

Tried to hack my email

Tried to hack my email

Recu 16ème mail(s) d'escroquerie(s) tentatives d’extorsions de fonds, usurpant la Gendarmerie Nationale, Catherine DE BOLLE et signé Jérome BONET avec ENCORE des adresses mails bidons: elheiba0@gmail.com Et dossierjustice88@gmail.com Bonjour Webmasters de LAPOSTE.net, SIGNAL SPAM, et Google, et abuse@ripe.net et hostmaster@ripe.net et alertespam@labanquepostale.fr et abuse@gmail.com et arin-contact@google.com et network-abuse@google.com Et fraude-bretic@interieur.gouv.fr et abuse@actu.fr And FBI Services in hidden copy ( https://complaint.ic3.gov/default.aspx ) Et abuse@microsoft.com et secure@microsoft.com et iphostmaster@microsoft.com Et phish@office365.microsoft.com Et celà continue encore mi-Décembre 2022 ( déjà signalés à SIGNAL SPAM : Jeudi 08 Décembre 2022 à 13h40, et Vendredi 02 Décembre 2022 à 03h00 du matin, et Mardi 01 Novembre 2022 à 16h35, et Samedi 08 Octobre 2022 à 00h21, et Lundi 29 Aout 2022 à 19h01, et Samedi 27 Aout 2022 21h38, et Jeudi 18 Aout 2022 à 18h, et Vendredi 01 Juillet 2022 à 16h38, et Dimanche 24 Avril 2022 à 12h44, et Vendredi 11 Mars 2022 à 09h54, et Vendredi 04 Mars 2022 à 16h14, et Dimanche 30 janvier 2022 à 04h45, et Jeudi 06 Janvier 2022 à 03h15, et Lundi 15 Nov 2021 à 22h54, et Jeudi 09 Sept 2021 à 06h43 ) et ceci depuis de trop nombreux mois ( emails tous archivés complets avec tous leurs codes HTML )( il y a forcément des complicités, du laxisme, des incompétents d’Etats et Services Administratifs chez des fournisseurs d’accès, depuis Sept 2020 que celà dure en France !? Ces hackers ont vraiment la SUPER belle vie pour sévir en France ! Combien de mois encore ( et maintenant d’années depuis 09/2020 ?! ) EUROPOL, la BPM, la Gendarmerie Française, vont ainsi se laisser usurper, ridiculiser, humilier, par ces salopards de hackers ? Ce Mardi 13 Décembre 2022 après 02h13 ( et très souvent les week-ends, ou très souvent les nuits, avant ou après les horaires ouvrés des Bureaux et Administrations en France, méthodes de faux-culs et d’escrocs ) et comme des milliers d’Internautes ( cf le site Internet Signal-Arnaques.com ) j'ai aussi reçu sur ma boite email ce même email d’escroqueries avec fichier PDF et faux contenu usurpant la Gendarmerie Nationale, Catherine DE BOLLE et Jerome BONET venant des adresses emails bidons ou usurpées: elheiba0@gmail.com et dossierjustice88@gmail.com Les adresses IP utilisées par le PC de ce(s) batards de hackers fous, débiles, têtus, butés, et analphabètes ( incapables d’écrire correctement le Français ) et ces mails sont préparés, envoyés en différés qqs heures ou 1 jour avant, pour ne pas être tracés par un logiciel Sniffer sur leurs adresses Mac de cartes réseaux, ou par des commandes Traceroute sur leurs adresses IP en direct ( bandes de poules mouillées, fumiers, trouillards ! ) : 209.85.128.170 Received : from mail-yw1-f170.google.com (mail-yw1-f170.google.com [209.85.128.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mlpnf0114.laposte.net (SMTP Server) with ESMTPS id 4NWL991f4xzjWvl for <@laposte.net>; Tue, 13 Dec 2022 02:13:33 +0100 (CET) Received : by mail-yw1-f170.google.com with SMTP id 00721157ae682-3bfd998fa53so172118847b3.5 for <@laposte.net>; Mon, 12 Dec 2022 17:13:33 -0800 (PST) DKIM-Signature : v=1; a=rsa-sha256; c=relaxed/relaxed; utilisant ENCORE des boites mails Gmail.com ( GOOGLE : Très Gros problèmes de Sécurité ! ) C'est visiblement et clairement une tentative de phishing et fraude ( fautes de grammaire multiples… etc ) C

Return-Path: <bounce@pro2ita.com> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=1.0 required=2.9 tests=BAYES_00,DKIM_SIGNED,     DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_FONT_LOW_CONTRAST,     HTML_IMAGE_RATIO_08,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_NONE,SPF_PASS,     URIBL_ABUSE_SURBL,URIBL_BLACK autolearn=no autolearn_force=no     version=3.4.2 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@de3631.ispfr.net Received: from m10.pro2ita.com (p10.pro2ita.com [83.218.218.10])     by de3631.ispfr.net (Postfix) with ESMTPS id 96B1449A69     for <contact@saga8mm.com>; Tue, 13 Dec 2022 10:00:02 +0100 (CET) Authentication-Results: de3631.ispfr.net;     dkim=pass (1024-bit key; unprotected) header.d=pro2ita.com header.i=postmaster@pro2ita.com header.b="Ui3P9RGr";     dkim-atps=neutral DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=DKIM1; d=pro2ita.com;     h=To:Subject:Message-ID:Date:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding; i=postmaster@pro2ita.com;     bh=ExXDKh9204XKs5Rxo0hz5YIwmdo=;     b=Ui3P9RGrh3WQnCdVKkBm3sTSD2PzIwLLyiZtscVpXDuSvcebkldMYbxeU1a5otZBpEfirWZYtVnz     69BzcCeOuNWTsbHO0suZRX6YH8vHRFS1JXDDM6roqB2o7BMF3wA1W0DmCj6COOm1WGpIzOz4zk/a     xUvjFCYJ9PYANCJVUfI= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=DKIM1; d=pro2ita.com;     b=aZ+pSEHRKInNl/o2q594ldsWLX5fxcWF9qMyD32feGkpWONtpaBdwRf3MeJseAnqXqDuQP1T8GY1     XOvB2X7Ea/aPcoOThUMiXwdH2MJKXy0hyUZlCvB7BrKp88b2z6j3lTKIPs/smM2JHkWW6yE9W4YC     1rKgLaJnvZUkozp84AY=; To: contact@saga8mm.com Subject: =?UTF-8?B?QW3DqWxpb3JleiBsJ2ltYWdlIGRlIHZvdHJlIGVudHJlcHJpc2Ug?= Message-ID: <7b1b5d1b48f3e25b1c10c58f1279a797@pro2ita.com> Date: Tue, 13 Dec 2022 08:21:11 +0000 From: "=?UTF-8?B?U1VWIMOJbGVjdHJpcXVlICE=?=" <info@pro2ita.com> Reply-To: support@pro2ita.com MIME-Version: 1.0 X-Mailer-LID: 6 List-Unsubscribe: <https://pro2ita.com/iem_621/unsubscribe.php?M=771725&C=b46f80e2f0bd02c3aa78be669b7a519a&L=6&N=839> X-Mailer-RecptId: 771725 X-Mailer-SID: 839 X-Mailer-Sent-By: 1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: 8bit

Hello, you have the wrong geolocation for IP 185.68.158.67 We have registered the Subnet 185.68.156.0/22 for Herzo Media. Please check the RIPE Database and update the geolocation harald.hammerl@herzomedia.de

Med

Return-Path: <noreply@revedis.org> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=-2.8 required=2.9 tests=BAYES_00,DKIM_SIGNED,     DKIM_VALID,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,     MAILING_LIST_MULTI,SPF_HELO_PASS,SPF_PASS autolearn=ham     autolearn_force=no version=3.4.2 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@de3631.ispfr.net X-Greylist: delayed 660 seconds by postgrey-1.36 at de3631.ispfr.net; Thu, 15 Dec 2022 11:16:41 CET Authentication-Results: de3631.ispfr.net;     dkim=pass (1024-bit key; unprotected) header.d=revedis.org header.i=@revedis.org header.b="AA5BF1LQ";     dkim-atps=neutral Received: from revedis.org (revedis.org [172.246.14.161])     by de3631.ispfr.net (Postfix) with ESMTPS id F37FE8B020     for <contact@saga8mm.com>; Thu, 15 Dec 2022 11:16:41 +0100 (CET) DKIM-Signature: a=rsa-sha256; bh=5l1DlOGa9fiMHrK+lWvys9PGwN5ZyDrsHOoHNPSrQhY=;     c=relaxed/relaxed; d=revedis.org;     h=to:cc:from:reply-to:subject:date:mime-version:content-type:list-id:list-unsubscribe:x-csa-complaints:list-unsubscribe-post:message-id:sender:x-sib-id:x-mailin-client:x-mailin-campaign:feedback-id;     q=dns/txt; s=mail; t=1671098741; v=1;     b=AA5BF1LQ7ro5OLDB8x6uaaAABbSIVw00PzgAN40C7y2ESnD0ZqEwgtNv2GkWNl8W/gq6B+tN     OHfaTRbdC+F7WmLqTdzvZcL1XL/+00rXAlie7v95ozxEtdhy6oXcnM8ixM/ottwvkDkVIjCaenf     b2fuoewu1RgO5K8HQ39fhodo= To: <contact@saga8mm.com> Subject: =?utf-8?q?No=C3=ABl_Revedis?= Content-Type: multipart/alternative; boundary="-------?=_55093-9564494178865" Date: Thu, 15 Dec 2022 10:05:41 +0000 Feedback-ID: 172.246.14.161:1254111_39:1254111:Sendinblue From: Marie de Revedis <marie@revedis.fr> List-Id: MTI1NDExMS0xNjY3OTctNTg= <MTI1NDExMS0xNjY3OTctNTg=.list-id.revedis.org> List-Unsubscribe: <mailto:unsubscribe@revedis.org?subject=unsub-lgqv07z1w5tjj&body=lgqv07z1w5tjj>,<https://r.revedis.org/mk/un/li/4nqfywvKmKzAOurfbhOPx1eKt6gQvtEsDi4GpPeG1XbbGV7qf4PfO-rR4dVTYwcfqAlKMARUO2xjS8n9ebmXJVGYQ5XKMkALp9MZ0NT7OlhXccu08SpzNBluQc1ZqizNHo17GY8pv9kxlkcjod75GIWJQCY> List-Unsubscribe-Post: List-Unsubscribe=One-Click MIME-Version: 1.0 Message-Id: <202215121005.lgqv07z1w5tjj@revedis.org> Precedence: bulk Reply-To: contact@revedis.fr X-Csa-Complaints: csa-complaints@eco.de X-Mailer: Sendinblue X-Mailin-Campaign: 39 X-Mailin-Client: 1254111 X-sib-id: 5fsRKg7oE6bWfB8uyhzGPf52UDHrHJdktsi6r4GMMFc9lsJpLqpSULgUY3W2vUpNWe_ZgtHVBpTslpLbVKZem2Zpc9BC0SQhsOVoSv97lryQwR9PD7IOP6ucqHRLEosk-r21bhb3Db9Kw5ZssNVUrXwRTqNm4Pa1wx8VbI_EROEhWb1n68s8E4Gxer6lgbOP9iIQ8dGJchzKU7j2iG_yep-qoJlcBvk

Return-Path: <support@getnutritionintuition.com> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=0.7 required=2.9 tests=BAYES_00,     HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,LOTS_OF_MONEY,     RCVD_IN_VALIDITY_RPBL,SPF_HELO_PASS,SPF_NONE,T_KAM_HTML_FONT_INVALID,     URIBL_ABUSE_SURBL autolearn=no autolearn_force=no version=3.4.2 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@de3631.ispfr.net X-Greylist: delayed 432 seconds by postgrey-1.36 at de3631.ispfr.net; Thu, 15 Dec 2022 10:48:15 CET Received: from ds13659.dreamservers.com (ds13659.dreamservers.com [208.97.138.250])     by de3631.ispfr.net (Postfix) with ESMTPS id 4732A8B100     for <contact@saga8mm.com>; Thu, 15 Dec 2022 10:48:15 +0100 (CET) Received: by ds13659.dreamservers.com (Postfix, from userid 22840535)     id 207E43A745; Thu, 15 Dec 2022 01:41:01 -0800 (PST) To: contact@saga8mm.com Subject: =?UTF-8?Q?Mise_=C3=A0_jour?= X-PHP-Originating-Script: 22840535:sQO1bPoC5LM.php Date: Thu, 15 Dec 2022 01:41:01 -0800 From: Credit Agricole <support@getnutritionintuition.com> Message-ID: <5139090ec69fd16d53afe0fb8fc4ecb1@getnutritionintuition.com> MIME-Version: 1.0 Content-Type: multipart/alternative;     boundary="b1_5139090ec69fd16d53afe0fb8fc4ecb1" Content-Transfer-Encoding: 8bit

OrgAbuseHandle: AWC12-ARIN OrgAbuseName: APNIC Whois Contact OrgAbusePhone: +61 7 3858 3188 OrgAbuseEmail: search-apnic-not-arin@apnic.net OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN OrgTechHandle: AWC12-ARIN OrgTechName: APNIC Whois Contact OrgTechPhone: +61 7 3858 3188 OrgTechEmail: search-apnic-not-arin@apnic.net OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN

Numara öğrenme izleme

urenrjrjkvnm

Return-Path: <80340=9aa8e72f-0f83-436b-bcdb-a87833216568=1=213139@e.primeastuce.com> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=-2.0 required=2.9 tests=BAYES_00,DKIM_SIGNED,     DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_MESSAGE,MIME_HTML_ONLY,     SPF_HELO_NONE,SPF_PASS,T_KAM_HTML_FONT_INVALID autolearn=ham     autolearn_force=no version=3.4.2 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@de3631.ispfr.net Received: from ip4.primeastuce.com (ip4.primeastuce.com [185.31.81.156])     by de3631.ispfr.net (Postfix) with ESMTPS id 7A7586830C     for <contact@saga8mm.com>; Sun, 18 Dec 2022 07:25:22 +0100 (CET) Authentication-Results: de3631.ispfr.net;     dkim=pass (1024-bit key; unprotected) header.d=primeastuce.com header.i=@primeastuce.com header.b="SVZ5pfiT";     dkim-atps=neutral Received: by ip4.primeastuce.com id hjqp522ugr8p for <contact@saga8mm.com>; Sun, 18 Dec 2022 06:25:21 +0000 (envelope-from <80340=9aa8e72f-0f83-436b-bcdb-a87833216568=1=213139@e.primeastuce.com>) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; q=dns/txt;     d=primeastuce.com; s=default1k;     h=Date:Subject:From:To;     bh=XimvIqBQDOX6oqTNZbXhH31QlhI6ymKCGG6WNJC+yJk=;     b=SVZ5pfiTOrKYEii7L1kbG0ukqirFWUH3Gh3bP6EkaiCEOxul3P9KxESgpCH4rvmM9m4B     2s9iiDN3kKKt30EzhbpUafHNiir69tukvZ9JVoh1vH6kkGJC9UeaNEDLzEIas4cUjhb4vC     tIjdkAL77/cfWoel24s86h3IOVh/6STHM= MIME-Version: 1.0 Date: Sun, 18 Dec 2022 06:25:21 +0000 Message-ID: <80340=9aa8e72f-0f83-436b-bcdb-a87833216568=1=213139@links.astuceprime.com> Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: =?utf-8?Q?Le_Slip_Fran=C3=A7ais_:_L'occasion_pour_faire_plaisir_et_se_fai?=     =?utf-8?Q?re_plaisir_avec_nos_cadeaux_?= From: "=?utf-8?Q?Unamourdebonplan?=" <info@primeastuce.com> Reply-To: =?utf-8?Q?info@primeastuce.com?= <info@primeastuce.com> To: contact@saga8mm.com List-Unsubscribe: <mailto:nlu=cvh6=c17csw0ewyxf37yqt3irlsmfi=c=b8lf=3c199200@f.primeastuce.com>,     <https://links.astuceprime.com/u/sUI/6uAMJMkrqDEe_8pVkGoTqy/F/Dcs/F/f350fc28> List-Unsubscribe-Post: List-Unsubscribe=One-Click X-Message-Type: newsletter

Return-Path: <msprvs1=193507KPtUCkZ=bounces-11001@eu.quoteslabs.net> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=-0.2 required=2.9 tests=BAYES_00,DKIM_SIGNED,     DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,MIME_HTML_ONLY,SPF_HELO_NONE,     SPF_PASS,T_KAM_HTML_FONT_INVALID,URIBL_BLACK autolearn=no     autolearn_force=no version=3.4.2 X-Original-To: frederic.vdb@saga8mm.com Delivered-To: frederic.vdb-saga8mm.com@de3631.ispfr.net Received: from mta-70-17-11.sparkpostmail.com (mta-70-17-11.sparkpostmail.com [156.70.17.11])     by de3631.ispfr.net (Postfix) with ESMTPS id 108B14A640     for <frederic.vdb@saga8mm.com>; Sat, 17 Dec 2022 15:32:06 +0100 (CET) Authentication-Results: de3631.ispfr.net;     dkim=pass (1024-bit key; unprotected) header.d=eu.quoteslabs.net header.i=@eu.quoteslabs.net header.b="NHtsAV8E";     dkim-atps=neutral X-MSFBL: u6ys440SDH4uinqzPP4y37vdcCMvNE7RRwdI49RxXFE=|eyJzdWJhY2NvdW50X2l     kIjoiMCIsIm1lc3NhZ2VfaWQiOiI2MzkxZTJkMjlkNjNmZWY0NGJlNCIsInRlbmF     udF9pZCI6InNwY2V1IiwiY3VzdG9tZXJfaWQiOiIxMTAwMSIsInIiOiJmcmVkZXJ     pYy52ZGJAc2FnYThtbS5jb20ifQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eu.quoteslabs.net;     s=scph0822; t=1671287522; i=@eu.quoteslabs.net;     bh=2WqO9HSZzSJhyaL0SWRae8cMczjHdn8ll6brwJB8tIQ=;     h=Content-Type:To:Message-ID:Date:From:Subject:List-Unsubscribe:     From:To:Cc:Subject;     b=NHtsAV8EcPq604OQS/oPOUTMJhgcuDFZDLI5R4T7D+EskX2Mi0bceZUbQU+uHOwZY     Zecgaw/dmpwQU1WIbfUb6Fi4/6Cdihjrw3af6+uWWOjvyPyqHlfAxopJw559RLQAeC     UaqKy+lTwpBnpcPuAEjjEX8Ee9AJj+63ZlNsNM78= Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="UTF-8" To: frederic.vdb@saga8mm.com Message-ID: <B4.4E.27665.2E2DD936@gc.mta3vrest.cc.prd.sparkpost> Date: Sat, 17 Dec 2022 14:32:02 +0000 MIME-Version: 1.0 Reply-To: mail@reply.quoteslabs.net From: "Solocal - TTP m&p" <mail@eu.quoteslabs.net> Subject: =?utf-8?B?QW3DqWxpb3JleiB2b3RyZSB2aXNpYmlsaXTDqSBlbiBsaWduZQ==?= X-Report-Abuse: mail@reply.quoteslabs.net List-Unsubscribe: <mailto:unsubscribe@eu.sparkpostmail.com?subject=unsubscribe:jtiphB2uFLpJ7gCnpGgpYUHw7zfd55ybZ114Q5H5yUA~|eyAicmNwdF90byI6ICJmcmVkZXJpYy52ZGJAc2FnYThtbS5jb20iLCAidGVuYW50X2lkIjogInNwY2V1IiwgImN1c3RvbWVyX2lkIjogIjExMDAxIiwgIm1lc3NhZ2VfaWQiOiAiNjM5MWUyZDI5ZDYzZmVmNDRiZTQiLCAic3ViYWNjb3VudF9pZCI6ICIwIiB9> List-Id: <spceu.11001.0.sparkpostmail.com>

Where is teamspeak 3 named wolfet.pl ?

trying to hack our system

Trying to extort money. Using Email address from victim, that is the host. Reported the matter to the ISP.

Air force base must me meet up location for work or !!

Air force base must me meet up location for work or !!

It can also be a masked ip

Return-Path: <meilleure-machine-cafe@emailing-imagine.net> X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on de3631.ispfr.net X-Spam-Level: X-Spam-Status: No, score=-1.6 required=2.9 tests=BAYES_00,     HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,     SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.2 X-Original-To: contact@saga8mm.com Delivered-To: contact-saga8mm.com@de3631.ispfr.net X-Greylist: delayed 343 seconds by postgrey-1.36 at de3631.ispfr.net; Tue, 20 Dec 2022 08:30:26 CET Received: from vm15.imagine-developpement.net (vm15.imagine-developpement.net [81.18.190.98])     by de3631.ispfr.net (Postfix) with ESMTPS id 71D4E76E2E     for <contact@saga8mm.com>; Tue, 20 Dec 2022 08:30:26 +0100 (CET) Received: from RobotImagine (post1.imagine-developpement.net [81.18.190.98])     by vm15.imagine-developpement.net (Postfix) with SMTP id 6625C138364     for <contact@saga8mm.com>; Tue, 20 Dec 2022 08:24:42 +0100 (CET) Subject: =?UTF-8?B?UHJvZml0ZXogZGUgbm90cmUgZXNzYWkgZ3JhdHVpdCBwb3VyIHVuZSBwYXVzZS1jYWbDqSBkJ2V4Y2VsbGVuY2U=?= Date: Tue, 20 Dec 2022 08:24:42 +0100 FROM: "=?UTF-8?B?Q8OpY2lsaWEgQ09OVEkg?=" <offres@meilleure-machine-cafe.fr> TO: " SAGA 8MM" <contact@saga8mm.com> REPLY-TO: "=?UTF-8?B?Q8OpY2lsaWEgQ09OVEkg?=" <offres@meilleure-machine-cafe.fr> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=789854123121321321 Message-Id: <20221220072442.6625C138364@vm15.imagine-developpement.net>

Med

DNS LEAK related to these fuckers.

Phishing email. DO SOMETHING! From Received: from offtak.co.jp ([116.80.14.214]:38788) admin@offtak.co.jp Whois WHOIS search results [ JPRS database provides information on network administration. Its use is ] [ restricted to network administration purposes. For further information, ] [ use 'whois -h whois.jprs.jp help'. To suppress Japanese output, add'/e' ] [ at the end of command, e.g. 'whois -h whois.jprs.jp xxx/e'. ] Domain Information: [ドメイン情報] a. [ドメイン名] OFFTAK.CO.JP e. [そしきめい] ゆうげんがいしゃおふぃすたかはし f. [組織名] 有限会社オフィス高橋 g. [Organization] office takahashi k. [組織種別] 有限会社 l. [Organization Type] Limited Company m. [登録担当者] KF1582JP n. [技術連絡担当者] KF1583JP p. [ネームサーバ] ns3.sphere.ad.jp p. [ネームサーバ] ns4.sphere.ad.jp s. [署名鍵] [状態] Connected (2023/07/31) [登録年月日] 2000/07/27 [接続年月日] 2000/08/08 [最終更新] 2022/08/01 01:02:19 (JST) From: ®MyUPS-Quantum_View <admin@offtak.co.jp> Sent: December 21, 2022 3:25 PM To: rob@hbns.ca Subject: MyUPS Shipment Notification 1ZY5484856551641702 Dear rob@hbns.ca, We are unable to complete the delivery process. Your package is on hold. Global Shipping & Logistics Services | UPS - Canada Missed Delivery 12/21/2022 8:24:58 PM Track Your Package › ®UPS Private Package 1ZGW54848565516417022 You will be prompted to accept Terms and Conditions to change delivery. 2022 United Parcel Service of Canada, Inc. UPS, the UPS brandmark, and the color brown are trademarks of United Parcel Service of Canada, Inc. All rights reserved. Please do not reply to this email. Manage Delivery Alerts | Privacy Notice | Service Terms | Opt Out Header info: Return-Path: <admin@offtak.co.jp> Delivered-To: rob@hbns.ca Received: from vshare12.ezp.net by vshare12.ezp.net with LMTP id QOrxKc1ro2NMnAUAHY5Arg (envelope-from <admin@offtak.co.jp>) for <rob@hbns.ca>; Wed, 21 Dec 2022 12:25:49 -0800 Return-path: <admin@offtak.co.jp> Envelope-to: rob@hbns.ca Delivery-date: Wed, 21 Dec 2022 12:25:49 -0800 Received: from offtak.co.jp ([116.80.14.214]:38788) by vshare12.ezp.net with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from <admin@offtak.co.jp>) id 1p85er-001XmF-IH for rob@hbns.ca; Wed, 21 Dec 2022 12:25:49 -0800 Received: (qmail 20197 invoked by VF by uid 0); 22 Dec 2022 05:25:02 +0900 Received: from unknown (HELO WIN-2OQOF74PG2V) (admin@offtak.co.jp@13.208.43.233) by dc105.etius.jp (116.80.14.214) with ESMTPA; 22 Dec 2022 05:25:02 +0900 MIME-Version: 1.0 From: =?utf-8?Q?=C2=AEMyUPS=2DQuantum=5FView?= <admin@offtak.co.jp> To: rob@hbns.ca Date: 21 Dec 2022 20:25:01 +0000 Subject: MyUPS Shipment Notification 1ZY5484856551641702 Content-Type: multipart/alternative; boundary=--boundary_8757_aee83d39-3702-4e72-aaa0-7befe60f0e25 X-Spam-Status: No, score=4.0 X-Spam-Score: 40 X-Spam-Bar: ++++ X-Ham-Report: Spam detection software, running on the system "vshare12.ezp.net", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root@localhost for details. Content preview: <P> <TABLE id=WrapperTable class="mktoContainer container responsive-table" style="BORDER-COLLAPSE: collapse; PADDING-BOTTOM: 20px; MARGIN: 20px auto; BORDER-SPACING: 0; BACKGROUND-COLOR: rgb(255,255, [...] Content analysis details: (4.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.5 MPART_ALT_DIFF_COUNT BODY: HTML and text parts are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 KAM_SHORT Use of a URL Shortener for very short URL 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years X-Spam-Flag: NO