Seeing this type of stuff quite a lot originating from legitimate
Microsoft infrastructure, and their abuse desk never seems to take any
action; I suppose dropping any *.onmicrosoft.com envelope-from is
probably the right course of action here?
From: Makita 6-pc Combo Kit Department
<tdycteiqkhwzsqvufjjirdssgsweqfhojtjpnzldvvgjaoa.v0fpgnyfjxscf0uw7krp...@escolalabourecat.onmicrosoft.com>
---
Received: from EUR04-VI1-obe.outbound.protection.outlook.com
(mail-vi1eur04on2128.outbound.protection.outlook.com [40.107.8.128])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by skylane.cscweb.net (Postfix) with ESMTPS id 8B67B1040B
for <REDACTED>; Wed, 20 Mar 2024 16:46:40 -0500 (CDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=idsUVAR9p/oNXc6Lazv8qxhYofR95SRyQmhqomJkK94K5JJdP11aLE54j9HreY2eyUHXhetK8KLnoJe5YvXwTREZuLSisFCONdZZJ+noCyE23vyUoC08pS+ztp+QRmsYPitgqOeFJkcplidrtVv5shy4yrDaPJi7Y6jchdz7IgoHio2FaLB8url9RXoFPxGigEgmRmn2P1H6CMdkZ0LbfNIUSGCBtEN5EdpXZuwocD4hv1lY91vTkCSt9OvTA+B7NAfXMvpBdbP5O/inRsgfOswV4LXgTugaeE4SMcnwIByL0fFXmBNro0mgUtTU3B+2QML1hpch8LQyPRSF7Zx1uQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=sAaO8lM9uT461K+zKpm3mD/wiCUbA7fhEXOyUcdbfrM=;
b=JAI2KqzD2OcZbuasoxfZ51ioHno1U4gTuWXqo84BAmnqH4Jr1eC32ESzLS78lBQcUmkECZz/8AJ0ukC9t2vU8joyvjhqV1NuCR12qi5rIpVW/j4OmbvDAsj+K+i1A/wFVGtSDTGWqbuK4tV5cEIExnjfmB9O7dYv4Ru4AtOdXi+VOQsfR96+mqoENhtUhGJUdYN0+fgQtytZRd1OMl8RL3nT9aXWaKEuIu8UNSm0Y1s/77S7B2R1xQa1CLsbnbBC3fjOwP1A+blPGhzNQcV6GkZhjNh0INbzO5SJ04N0Jf0Mp9vLs2rCDRZxoHJw9JM0aZPVVoq+BOdwkNCK1KCxWQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip
is 65.109.229.141) smtp.rcpttodomain=cscweb.net
smtp.mailfrom=escolalabourecat.onmicrosoft.com; dmarc=none action=none
header.from=escolalabourecat.onmicrosoft.com; dkim=none (message not
signed);
arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=escolalabourecat.onmicrosoft.com;
s=selector1-escolalabourecat-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=sAaO8lM9uT461K+zKpm3mD/wiCUbA7fhEXOyUcdbfrM=;
b=Rsscr1JSIztyOOoZFAs4WCQ5xu65zc4/TOwnM0v02jceH7CZjcNR6W1/SgBEXJm775T2Ae92ieMhJOvYAxaS5Dn0VjaJkCEWsQ2bYeqxWhc7eeL1X0vj/4ckE/lQi7vmKmZCN/2t83OHggdFUC9A5WGiV/wyqz5szLvpx3RcuQ8=
Received: from AS4P191CA0013.EURP191.PROD.OUTLOOK.COM (2603:10a6:20b:5d5::8)
by PR3PR05MB7547.eurprd05.prod.outlook.com (2603:10a6:102:8c::18) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.29; Wed,
20 Mar 2024 21:46:37 +0000
Received: from AMS1EPF00000048.eurprd04.prod.outlook.com
(2603:10a6:20b:5d5:cafe::bf) by AS4P191CA0013.outlook.office365.com
(2603:10a6:20b:5d5::8) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7386.26 via
Frontend
Transport; Wed, 20 Mar 2024 21:46:37 +0000
X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 65.109.229.141)
smtp.mailfrom=escolalabourecat.onmicrosoft.com; dkim=none (message not
signed) header.d=none;dmarc=none action=none
header.from=escolalabourecat.onmicrosoft.com;
Received-SPF: Fail (protection.outlook.com: domain of
escolalabourecat.onmicrosoft.com does not designate 65.109.229.141 as
permitted sender) receiver=protection.outlook.com;
client-ip=65.109.229.141;
helo=mail.rosenbaum.com;
Received: from mail.rosenbaum.com (65.109.229.141) by
AMS1EPF00000048.mail.protection.outlook.com (10.167.16.132) with Microsoft
SMTP Server id 15.20.7409.10 via Frontend Transport; Wed, 20 Mar 2024
21:46:36 +0000
Date: Wed, 20 Mar 2024 22:34:26 +0100
Subject: Shipment Pending - Makita 6-pc Combo Kit
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="_dfaf74e7-9375-4435-a721-d5d85087d65c_";
type="multipart/alternative"
To: <REDACTED>
x-originating-ip: 65.109.229.141
Thread-Topic: Shipment Pending - Makita 6-pc Combo Kit
sZ3rGhlkXu5mtR77ELkGgGE15nzX6xr
x-priority: 1
msip_labels:
From: Makita 6-pc Combo Kit Department
<rtdeycteiqkhwzsqvufjjirdssgsweqfhojtjpnzldvvgjaoa.v0fpgnyfjxscf0uw7krpy9kmcqzi...@escolalabourecat.onmicrosoft.com>
Message-ID:
<6bec9133-4829-46b6-bfb1-f359b0584...@ams1epf00000048.eurprd04.prod.outlook.com>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AMS1EPF00000048:EE_|PR3PR05MB7547:EE_
X-MS-Office365-Filtering-Correlation-Id:
d5a14708-0142-4f52-9ec6-08dc492737b1
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
vZdxrjOdWo8Ktq8+0C2PwWQebcOL9coyzSdtSK5EfRSlPtt8w15ZMuF4LxD0U/B5CnnB6qmUuMRn52k19L1UHUnLiszEtVbTmqPijZicRImax+bfATU5BrN6RZU0BbxXaw0EZx9VTr28H36tBcR5qMo+oONWdaKicCgl6qVo39O2f0jJg/OFJblAhe8UaStmXDeSnvm4y8g/LYs4FZ/6sf4kTtbrOFs9Smjbzy8JiPjaUOkjFo25T5b4/ZUqFeYkN9zaCA4HziSvvnqYT1QBDl9GgXB9bBVglwn5SfT050v8F4Qd7y7D68uexYG5lEFH9BfOikK/DQZQi6R0U6LjmMKtRN/hiayk3Ot7eoBODFywucy4wzxFDXV0ln/u9jMtg6qZ0oZHYyal0gCTxM5d5cNarUDtECYH3W7LRoeMhmEV4TEBp8rd7tyFghqTK+Fv
X-Forefront-Antispam-Report:
CIP:65.109.229.141;CTRY:FI;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.rosenbaum.com;PTR:static.141.229.109.65.clients.your-server.de;CAT:NONE;SFS:(13230031)(36860700004)(82310400014)(34020700007)(41320700004)(61400799018)(376005);DIR:OUT;SFP:1102;
X-OriginatorOrg: escolalabourecat.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Mar 2024 21:46:36.5769
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id:
d5a14708-0142-4f52-9ec6-08dc492737b1
X-MS-Exchange-CrossTenant-Id: 52858225-3af1-432f-93ce-d6e29dd822f5
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp:
TenantId=52858225-3af1-432f-93ce-d6e29dd822f5;Ip=[65.109.229.141];Helo=[mail.rosenbaum.com]
X-MS-Exchange-CrossTenant-AuthSource:
AMS1EPF00000048.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR05MB7547
<spam redacted>
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
