ENGLISH: RECEIPT lots of emails stolen Society AMAZON and using again emails boxes of Society teliasonera.net For Webmasters : FOR YOUR ACTIONS against these bastards hackers ! VERSION FRANÇAISE : RECEPTION mêmes emails d’escroqueries usurpant ENCORE AMAZON.fr vers les boites emails à LAPOSTE.net utilisant encore des boites emails SENDGRID.net : Bonjour Webmasters de SIGNAL SPAM, LA POSTE.net ( alertespam@labanquepostale.fr ) et AMAZON.com, et SENDGRID.net, et Signal Arnaques, ec2-abuse@amazon.com , stop-spoofing@amazon.com , abuse@ripe.net , hostmaster@ripe.net And FBI Services in hidden copy ( https://complaint.ic3.gov/default.aspx ) Et celà continue encore fin Janvier 2022 et ceci depuis au moins +16 années ( emails tous archivés complets avec tous leurs codes HTML depuis 2007 )( il y a forcément des complicités, du laxisme, des incompétents d’Etats et Services Administratifs chez des fournisseurs d’accès, depuis toutes ces +16 années que celà dure ! Ces escrocs ont la belle vie pour sévir en France ! Jeudi 27 Janvier 2022 après 11h23 ( et très souvent aussi les nuits, les week-ends ) j'ai ENCORE reçu sur ma boite mail LA POSTE.net ces nouveaux emails ci-dessous d’escroqueries usurpant AMAZON.com et venant cette fois-ci des adresses emails d’escroqueries: wilt6i2lik.wzybdd@FREE.FR Et newsletters@email.businessoffashion.com Les adresses IP utilisées par le PC ou smartphone de ces hackers fous sont multiples pour brouiller les pistes : 193.233.177.68 en RUSSIE et 223.165.112.138 en AUSTRALIE Received : from ts201-smtpin78.ddc.teliasonera.net (macdonald.custommetro.co.uk [193.233.177.68]) by mlpnf0108.laposte.net (SMTP Server) with ESMTP id 4JkxVB08C5znTfH for <ele.lemoine@laposte.net>; Thu, 27 Jan 2022 11:22:25 +0100 (CET) Original-recipient : rfc822;zakariae.atrari@icloud.com Received : from st11p00im-ztav05242001.me.com by p37-mailgateway-smtp-687bc68b96-kk2t6 (mailgateway 2207B140) with SMTP id 032767ad-63f7-46f9-bf2b-a23bbd175185 for <zakariae.atrari@icloud.com>; Wed, 26 Jan 2022 06:28:02 GMT X-Apple-MoveToFolder : INBOX X-Apple-Action : MOVE_TO_FOLDER/INBOX X-Apple-UUID : 032767ad-63f7-46f9-bf2b-a23bbd175185 Received : from 223.165.112.138.jfk.braze.com (223.165.112.138.jfk.braze.com [223.165.112.138]) by st11p00im-ztav05242001.me.com (Postfix) with ESMTPS id 8E808461E0D for <zakariae.atrari@icloud.com>; Wed, 26 Jan 2022 06:28:00 +0000 (UTC) IP Lookup Details: IP Information - 193.233.177.68 Host name: macdonald.custommetro.co.uk Country: Russian Federation Country Code: RU Region: 30 City: Khabarovsk Latitude: 48.4808 Longitude: 135.0928 IP Lookup Details: IP Information - 223.165.112.138 Host name: 223.165.112.138.jfk.braze.com Country: Australia Country Code: AU Region: City: Latitude: -33.494 Longitude: 143.2104 Utilisant ENCORE des boites emails chez teliasonera.net ( 193.233.177.68 ) et jfk.braze.com [223.165.112.138] Je n’ai rien chez AMAZON. C'est clairement une tentative d’escroquerie ! ( fautes d’orthographes, etc ) ************************** CODES HTML ci-dessous ************************************** Return-Path : <wilt6i2lik.wzybdd@FREE.FR> Received : from mlpnf0108.laposte.net (mlpnf0108.sys.meshcore.net [10.94.128.87]) by mlpnb0108 with LMTPA; Thu, 27 Jan 2022 11:23:36 +0100 X-Cyrus-Session-Id : cyrus-123883-1643279016-5-17404987973724733756 X-Sieve : CMU Sieve 3.0 X-mail-filterd : {"version":"1.3.4","queueID":"4JkxW64mzRznV8G","contextId":"78282a03-f09e-49c4-874c-1d80c274377a"} X-ppbforward : {"queueID":"4JkxW64mzRznV8G","server":"mlpnf0108"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0108.laposte.net (SMTP Server) with ESMTP id 4JkxW64mzRznV8G for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Thu, 27 Jan 2022 11:23:14 +0100 (CET) X-mail-filterd : {"version":"1.3.4","queueID":"4JkxVB08C5znTfH","contextId":"13caa203-cc69-47fd-a786-b50fd744b75e"} X-lpn-mailing : SPAM X-lpn-spamrating : 62 X-lpn-spamlevel : low Authentication-Results : laposte.net; spf=neutral smtp.mailfrom=wilt6i2lik.wzybdd@FREE.FR smtp.helo=ts201-smtpin78.ddc.teliasonera.net; dkim=fail reason="bad signature" header.d=email.businessoffashion.com header.s=scph1220 header.b=giYkWV; dmarc=fail reason="SPF is not aligned, DKIM is not aligned" X-List-Unsubscribe : <https://clicks.businessoffashion.com/f/a/8eNjr_8ykmZsU43fR6-7jQ~~/AAAHagA~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~> X-lpn-spamcause : OK, (150)(1000)gggruggvucftvghtrhhoucdtuddrgedvvddrfeefgdduhecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfntefrqffuvffgpdggtfgfnhhsuhgsshgtrhhisggvnecuuegrihhlohhuthemuceftddtnecuufhprghmkfhppfgvthifohhrkhgprhhtucdludehtddmnecujfgurhepvffkffgtgghruffhsegrtderredttdejnecuhfhrohhmpedfffgvqdfnohhnghhhihdfuceonhgvfihslhgvthhtvghrshesvghmrghilhdrsghushhinhgvshhsohhffhgrshhhihhonhdrtghomheqnecuggftrfgrthhtvghrnhepkeekvdfgteeufeejgfdujeduvedvueevtdeuhfeugeejfeetvddtjedtveehleefnecuffhomhgrihhnpehkihhnughlvghmohhvvgdruhhknecukfhppeduleefrddvfeefrddujeejrdeikedpvddvfedrudeihedrudduvddrudefkeenucevlhhushhtvghrufhiiigvpeejfeefjeenucfrrghrrghmpehinhgvthepudelfedrvdeffedrudejjedrieekpdhhvghlohepthhsvddtuddqshhmthhpihhnjeekrdguuggtrdhtvghlihgrshhonhgvrhgrrdhnvghtpdhmrghilhhfrhhomhepfihilhhtiehivdhlihhkrdifiiihsgguugeshfftgffgrdfhtfdpnhgspghrtghpthhtohepuddprhgtphhtthhopegvlhgvrdhlvghmohhinhgvsehlrghpohhsthgvrdhnvght Received : from ts201-smtpin78.ddc.teliasonera.net (macdonald.custommetro.co.uk [193.233.177.68]) by mlpnf0108.laposte.net (SMTP Server) with ESMTP id 4JkxVB08C5znTfH for <ele.lemoine@laposte.net>; Thu, 27 Jan 2022 11:22:25 +0100 (CET) Original-recipient : rfc822;zakariae.atrari@icloud.com Received : from st11p00im-ztav05242001.me.com by p37-mailgateway-smtp-687bc68b96-kk2t6 (mailgateway 2207B140) with SMTP id 032767ad-63f7-46f9-bf2b-a23bbd175185 for <zakariae.atrari@icloud.com>; Wed, 26 Jan 2022 06:28:02 GMT X-Apple-MoveToFolder : INBOX X-Apple-Action : MOVE_TO_FOLDER/INBOX X-Apple-UUID : 032767ad-63f7-46f9-bf2b-a23bbd175185 Received : from 223.165.112.138.jfk.braze.com (223.165.112.138.jfk.braze.com [223.165.112.138]) by st11p00im-ztav05242001.me.com (Postfix) with ESMTPS id 8E808461E0D for <zakariae.atrari@icloud.com>; Wed, 26 Jan 2022 06:28:00 +0000 (UTC) X-ICL-SCORE : 3.3330332300 X-ICL-INFO : GAtbVUseBVFGSVVESgMGUldZCh4MXUMRSFsIVVhDQ19XFwkZHRIWBxFERBoLQEQUBkhbRkEABFc5 PQJCDXxCEkgbCQIWU1MRWEheTkAdBVQ1HAsWEVwYAAAKDxkdQ0UNEx8HBBBZWQxbGgkaWhBQBkhb AxoZWVpMFwwVHhZVRREaHwAWC1hfDRtXBRgVEhYRHAlbVUoCBUxET1NZSQEETERKXlVYWFMOGkRE RUoDGFNDTEhGSQIYU0ZBSB0eWxgABxgcElZTWQ9XWRYDCg0UUEdKSEZOBRhTREtIRksIGAgTEkgV ClFMB1saCRpaEFIGSFsDGhlZWkwXDBUeFlVFERofABYLWF8NG1cFGBUSFg8cHVtVRAIDTEBJSEZM BwVRW0kgTj0AcFNDOQcfVl1CA0YPFBILRBgBFlcWBRweRRIUCw0HF0NCXFdZFBRFEkwDHhgUHhlV GAMBCwcFEXBfARkWExNWU1kPVw== Authentication-Results : dmarc.icloud.com; dmarc=pass header.from=email.businessoffashion.com x-dmarc-info : pass=pass; dmarc-policy=none; s=r1; d=r1 x-dmarc-policy : v=DMARC1; p=none; sp=none; rua=mailto:re+222b013434df@inbound.dmarcdigests.com; pct=100 Authentication-Results : dkim-verifier.icloud.com; dkim=pass (1024-bit key) header.d=email.businessoffashion.com header.i=@email.businessoffashion.com header.b=giYkWV73 Authentication-Results : spf.icloud.com; spf=pass (spf.icloud.com: domain of msprvs1=19025LDd5uLtp=bounces-1898-36@email.businessoffashion.com designates 223.165.112.138 as permitted sender) smtp.mailfrom="msprvs1=19025LDd5uLtp=bounces-1898-36@email.businessoffashion.com" Received-SPF : pass (spf.icloud.com: domain of msprvs1=19025LDd5uLtp=bounces-1898-36@email.businessoffashion.com designates 223.165.112.138 as permitted sender) receiver=spf.icloud.com; client-ip=223.165.112.138; helo=223.165.112.138.jfk.braze.com; envelope-from="msprvs1=19025LDd5uLtp=bounces-1898-36@email.businessoffashion.com" X-MSFBL : WcIxsoND4pA0GaIpKCH/82CKDzk6OlfD7e+YJov/ZDA=|eyJtZXNzYWdlX2lkIjo iNjFlMWYwZTlmMDYxY2M2YjUyMDUiLCJyIjoiemFrYXJpYWUuYXRyYXJpQGljbG9 1ZC5jb20iLCJ0ZW5hbnRfaWQiOiJzcGNldSIsInN1YmFjY291bnRfaWQiOiIzNiI sImN1c3RvbWVyX2lkIjoiMTg5OCJ9 DKIM-Signature : v=1; a=rsa-sha256; c=relaxed/relaxed; d=email.businessoffashion.com; s=scph1220; t=1643178480; i=@email.businessoffashion.com; bh=/T429KyzSpGUI5ALh9CwzY0/Cv6pLtCR4Fg8FC6i++A=; h=To:Message-ID:Date:Content-Type:Subject:From; b=giYkWV739B91Z9qzQaNvDDr7lo1cHtLEq7kq/93c+c+rSWPautyAkJMYiJMBwO8st vSTkCuaWpM+6wUh5hg1QWKxBDu3QV8qv11uyluBPq9z9iq2e2igJYgZNGvAvb9TZbm Q0QKpsjuzYivwXArspQEhMp6D0KccZ+86sBpal2c= To : ele.lemoine@laposte.net Message-ID : <25.50.14733.0F9E0F16@ah.mta3vrest.cc.prd.sparkpost> Date : Wed, 26 Jan 2022 06:28:00 +0000 Content-Type : multipart/alternative; boundary="_----VzWExtE4IroIwPy4YboM+g===_05/50-14733-0F9E0F16" MIME-Version : 1.0 Reply-To : newsletter@businessoffashion.com Subject : Re: Courez la chance de prendre un De-longhi G R A T U I T From : "De-Longhi" <newsletters@email.businessoffashion.com> X-MANTSH : 1TEIXWV4bG1oaGkNHB1BeSF8aHBsTHhIaGxEKTEMXGxoEHRwEGxMTBBIQGx4aHxo RCkxZFxIcEQpZRBdia1xfG1h/eBh4UhEKWU0XZEVETxEKWUkXGnEaEBp3BhwccRsaHB4QGBkZd wYYGgYaEQpZXhdsbHkRCkNOF0JzZx1jBWZpXx14fx5tfXNlH0ZgaW9jckhYfx0ZcB9ZEQpYXBc ZBBoEHh8HSxsbGxwaTxwFGxoEGxIYBBgbGQQbHRAbHhofGhEKXlkXcGBFHGYRCk1cFxoRCkxaF 3hlXUFNEQpFWRdoa3MRCkxfF3oFBQUFBQUFBRNGEQpMRhdja2sRCkNaFxgYGQQbHB8EGxsYBBs ZEhEKQl4XGxEKQlwXGxEKQksXelBtHGUdewFaQQERCkJJF2tZeHodbVh+ex54EQpCRRdsH2d5U mRbbRtaAREKQk4Xa1l4eh1tWH57HngRCkJMF2tJR3AfSE9ieHgZEQpCbBdiT2tEZ25HZEcZfhE KQkAXbWZLf1xQEm9FQWgRCkJYF2RjXntFaEZCf11fEQpNXhcbEQpaWBcbEQpwZxdoRx9Qf0kcY gUdbRAcGhEKcGgXbl1mX21nbUldblAQGhEKcGgXZx1Of2EYAUR8ZVwQGhEKcGgXZXwcbF5mU1t 5a0MQGhEKcGgXZVJuc0BAZGUFHUYQGhEKcGgXaFBSGX4bHH4TE1IQGhEKcH0XZEdgYkBvQWlZR RgQGhEKcH0XbUtLcBh5c1pYTHsQGhEKcH0XbGttRwFzehtsY0YQGhEKcH0XYx97WAV7TllSbEI QGhEKcH0XbmUfR29BfwF5TWsQGhEKcH0Xbn9IZmdgWgEeGWcQGhEKcH0XYnlGGEdsZHBfAV0QG hEKcH0XZl0abV9ySRlSf1IQGhEKcH0XY1BCGkJ6aV8eH2kQGhEKcH0XYBNsUBh7R3wScmQQGhE KcH0Xek5gHW95bFJ8UlwQGhEKcH0Xb29jaUwBHHlzbHwQGhEKcH0XbUIaZG5dWEtsQEgQGhEKc H0XZEx/HRkFGU8eTxoQGhEKcH0XbRtQfFlDW2BPZxMQGhEKcH0Xb0ZjR2d8YnoZWE4QGhEKcH0 XelsZTmh9Zll/EkAQGhEKcH0XZ3BAbF18HRJbZG0QGhEKcH0Xb0ZubFpMc3sSEmEQGhEKcH0XY HhYSBJ7WmEcYQUQGhEKcH8XY1NbHUFtf3lhZ0cQGBgRCnBfF2tJb0REYVBzWVt9EBoRCnBfF21 raW1neGFJUEB9EBoRCnBfF2Jnex1SYR0eb0F8EBoRCnBfF2lMU3p8ZRMSa3JjEBoRCnBfF25NH 2QaenwbHRoZEBoRCnBfF21zaX8bXm8TZRsTEBoRCnBfF21BfRt9aVpwRkFAEBoRCnBfF29EWG5 wYk1mckRoEBoRCnBfF2ZOZBJ/QxhSGE4TEBoRCnBfF2IZfRJHe3l4GFxbEBoRCnBfF2dDARoZH XhgH39AEBoRCnBfF2lOZX9+H2gbZxlmEBoRCnBfF2EcWU9yHUtZfF9PEBoRCnBfF2tScE9MZ2B PARl+EBoRCnBfF3pkARxGe0FHUHABEBoRCnBfF29iAXlyfhpHARkYEBoRCnBfF2F4UB8FUEEZB VseEBoRCnBfF2IBGh5QARJmGGB7EBoRCnBfF3pQE159Y3JDa2BuEBoRCnBfF2lYEhljb0F8Zkh oEBoRCnBsF2F8fkEZcnNOYhseEB4SEQptfhcbEQpYTRdLEQ== X-CLX-Shades : None