RECEIPT emails stolen French BANK LA POSTE using emails boxes and IP adress of Society healthclinics.com RECEPTION emails d'escroqueries aux faux Bulletins de Paiements usurpant LA POSTYE avec adresses emails bidons : Bonjour Webmasters de LAPOSTE.net, Signal Spam, Signal Arnaques.com, Et celà continue encore Fin Juillet 2021 et ceci depuis au moins +15 années emails tous archivés complets avec tous leurs codes HTML depuis 2007 )( il y a forcément des complicités, des incompétents, et du laxisme d’Etats et Services Administratifs chez des fournisseurs d’accès, depuis toutes les +15 années que celà dure ! Ces escrocs ont la belle vie ! Ce Samedi 31 Juillet 2021 après 00h46 ( très souvent les week-ends, et très souvent aussi les nuits, après les horaires des Bureaux et Administrations en France, méthodes de faux-culs et d’escrocs ) j'ai reçu sur ma boite email cet email d’escroquerie avec faux Bulletin de Paiement et venant de l'adresse email bidon : myacu@comprehensivehealthclinics.com Les adresses IP utilisées par le PC ou le smartphone de ce(s) hacker(s) fou(s) en cause sont : 15.20.4352.29 et 15.20.4373.025 Received : from BYAPR03MB4725.namprd03.prod.outlook.com (2603:10b6:a03:13d::12) by BYAPR03MB3607.namprd03.prod.outlook.com (2603:10b6:a02:b8::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4352.29; Fri, 30 Jul 2021 22:46:54 +0000 Received : from BYAPR03MB4725.namprd03.prod.outlook.com ([fe80::c5c9:533b:8081:2ed2]) by BYAPR03MB4725.namprd03.prod.outlook.com ([fe80::c5c9:533b:8081:2ed2%3]) with mapi id 15.20.4373.025; Fri, 30 Jul 2021 22:46:54 +0000 Et utilisant les boites emails des Sociétés healthclinics.com Et les serveurs IP de ces Sociétés. C'est visiblement et clairement une tentative de phishing et fraude ( fautes de grammaire ) Ci-dessous cet email d’escroquerie avec ces en-têtes complets : *********** CONTENU du mail d’escroquerie *************** 1 pièce jointe • 30.07.2021.png [605Ko] o o Télécharger Télécharger Bonjour, Via la présente correspondance,nous vous adressons la bonne nouvelle : Vous trouverez ci-annexé, le détail du bulletin pour bénéficier de vos fonds. Cordialement ****************** Codes HTML complets ci-dessous **************************** Return-Path : <myacu@comprehensivehealthclinics.com> Received : from mlpnf0111.laposte.net (mlpnf0111.sys.meshcore.net [10.94.128.90]) by mlpnb0108 with LMTPA; Sat, 31 Jul 2021 00:46:57 +0200 X-Cyrus-Session-Id : cyrus-234070-1627685217-1-13197860821894067449 X-Sieve : CMU Sieve 3.0 X-mail-filterd : {"version":"1.2.2","queueID":"4Gc2Zn3rPNzTgC3","contextId":"08942781-1603-4db3-a833-7e8c5ae888ef"} X-ppbforward : {"queueID":"4Gc2Zn3rPNzTgC3","server":"mlpnf0111"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0111.laposte.net (SMTP Server) with ESMTP id 4Gc2Zn3rPNzTgC3; Sat, 31 Jul 2021 00:46:57 +0200 (CEST) X-mail-filterd : {"version":"1.2.2","queueID":"4Gc2Zm4yBTzTgCN","contextId":"bb325247-d01b-4a71-9f5c-8a86c841acce"} X-lpn-mailing : BLACKLISTED X-lpn-spamrating : 60 X-VR-State : 1 X-lpn-spamlevel : low Authentication-Results : laposte.net; dkim=none; dmarc=none reason="No policy found" Received : from NAM12-DM6-obe.outbound.protection.outlook.com (mail-dm6nam12hn2226.outbound.protection.outlook.com [52.100.166.226]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mlpnf0111.laposte.net (SMTP Server) with ESMTPS id 4Gc2Zm4yBTzTgCN; Sat, 31 Jul 2021 00:46:56 +0200 (CEST) ARC-Seal : i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kZKj38mog8uIh3lkBIHzivz7W2cqHQFRPWbnVBpwMkXMfnZIhQpz3+OZJUtmLycT+MAxqQc2N++5MmIdr3XSM1ehFhdmiJpTp8mvi/S0/6S/qWPA9payIbt51+USJhD+GZFOUphI3Jb4SFAQOck3yR727+QvD6EQ2Uzk5XOLKOum/PMHptLSUTZSdwuXBDr+L6+/iHNlUl2ZqTCzhpwR+xarUldzBFe1/4ShCz3wWlAC2lCld9QucqXZ/+PULpukG/t+LPOdwWGEPHATWHzCJUOIyEfhDmUM6uDhQREmAYaAETvwzZQdbLz+Jg9bU0xbFLVfDWQWITsgNB0ffA42GQ== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=j2GM6V2dciU9f0OAiyMGaPVqLUn+04hThPSQu01FMvo=; b=fCCDTesqmAzeEnxPNeDeBjTRGaKln5fSyyzF+MOu8zPKWldATn8udR90PgWVBGD+Hy9t5+fgqDhT5ArqfBijRXbals9QlyyzvulgLC/SIWkp4oqESjs3qE/2fsnpnskH7ysYeDghTH5Ml3fhtJABTnP/NFuZBto+ZcrSAgDKdQT4HJ3WZ19H69oLSa8cMeFIf7r+IZIRK6VAJRwXq89nOVFzKAW/bS2zaXYXUlRZhptUifXk4ho5P57cIoWOQ9yInTboNz4ghlrkZyf+1GDvAVbgfImyp4EqvGLRiyVu4Lk7h2u67Jj/SXIUlddqK54sFjPyQIJ6sB+eBDM/NQPG3g== ARC-Authentication-Results : i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=comprehensivehealthclinics.com; dmarc=pass action=none header.from=comprehensivehealthclinics.com; dkim=pass header.d=comprehensivehealthclinics.com; arc=none Received : from BYAPR03MB4725.namprd03.prod.outlook.com (2603:10b6:a03:13d::12) by BYAPR03MB3607.namprd03.prod.outlook.com (2603:10b6:a02:b8::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4352.29; Fri, 30 Jul 2021 22:46:54 +0000 Received : from BYAPR03MB4725.namprd03.prod.outlook.com ([fe80::c5c9:533b:8081:2ed2]) by BYAPR03MB4725.namprd03.prod.outlook.com ([fe80::c5c9:533b:8081:2ed2%3]) with mapi id 15.20.4373.025; Fri, 30 Jul 2021 22:46:54 +0000 From : myacu comprehensivehealthclinics.com <myacu@comprehensivehealthclinics.com> Subject : Re: -BULLETIN DE PAIEMENT- Thread-Topic : -BULLETIN DE PAIEMENT- Thread-Index : AQHXhZJ9WFcxsKpuWUu49RXixxSgFKtcGn3I Date : Fri, 30 Jul 2021 22:46:52 +0000 Message-ID : <MN2PR03MB473609F806503960E3913346D7EC9@MN2PR03MB4736.namprd03.prod.outlook.com> References : <MN2PR03MB473676A56871EAD482F1B123D7EC9@MN2PR03MB4736.namprd03.prod.outlook.com> In-Reply-To : <MN2PR03MB473676A56871EAD482F1B123D7EC9@MN2PR03MB4736.namprd03.prod.outlook.com> Accept-Language : fr-FR, en-US Content-Language : fr-FR X-MS-Has-Attach : yes X-MS-TNEF-Correlator : authentication-results : hotmail.com; dkim=none (message not signed) header.d=none;hotmail.com; dmarc=none action=none header.from=comprehensivehealthclinics.com; x-ms-publictraffictype : Email x-ms-office365-filtering-correlation-id : 3cca38da-09f2-415c-ed20-08d953abedd5 x-ms-traffictypediagnostic : BYAPR03MB3607: x-microsoft-antispam-prvs : <BYAPR03MB3607F464BA7387B3BDCDE793D7EC9@BYAPR03MB3607.namprd03.prod.outlook.com> x-ms-oob-tlc-oobclassifiers : OLM:1728; x-ms-exchange-senderadcheck : 1 x-ms-exchange-antispam-relay : 0 x-microsoft-antispam : BCL:0; x-microsoft-antispam-message-info : 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 x-forefront-antispam-report : CIP:255.255.255.255;CTRY:;LANG:fr;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BYAPR03MB4725.namprd03.prod.outlook.com;PTR:;CAT:NONE;SFS:(39830400003)(396003)(366004)(346002)(376002)(136003)(6512007)(9686003)(76116006)(2940100002)(86362001)(71200400001)(38100700002)(66446008)(66946007)(91956017)(64756008)(66556008)(38070700005)(99936003)(122000001)(316002)(8676002)(558084003)(66476007)(6486002)(66616009)(76576003)(88732003)(89122003)(186003)(478600001)(7366002)(7416002)(26005)(6506007)(5660300002)(109986005)(7336002)(19627405001)(52536014)(2906002)(7276002)(33656002)(8936002)(7406005)(17020700006);DIR:OUT;SFP:1501; x-ms-exchange-antispam-messagedata-chunkcount : 1 x-ms-exchange-antispam-messagedata-0 : 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 x-ms-exchange-transport-forked : True Content-Type : multipart/mixed; boundary="_004_MN2PR03MB473609F806503960E3913346D7EC9MN2PR03MB4736namp_" MIME-Version : 1.0 X-OriginatorOrg : comprehensivehealthclinics.com X-MS-Exchange-CrossTenant-AuthAs : Internal X-MS-Exchange-CrossTenant-AuthSource : BYAPR03MB4725.namprd03.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id : 3cca38da-09f2-415c-ed20-08d953abedd5 X-MS-Exchange-CrossTenant-originalarrivaltime : 30 Jul 2021 22:46:52.9837 (UTC) X-MS-Exchange-CrossTenant-fromentityheader : Hosted X-MS-Exchange-CrossTenant-id : d364daf4-03db-45f3-bb35-b3700ed88c1c X-MS-Exchange-CrossTenant-mailboxtype : HOSTED X-MS-Exchange-CrossTenant-userprincipalname : 0RhsDCBf7NRbeJCPj6vCjytv3ePoxAp93bxjcA8EMobxpzrA8VHJv1oSKvjf35NovGqY6QUctkpaPjrOepCjd/32mxDVT0afTIO0HrTNMq9Dm1zPE+lB2hvw4+AnVru9 X-MS-Exchange-Transport-CrossTenantHeadersStamped : BYAPR03MB3607