0% found this document useful (0 votes)
119 views3 pages

Original Message

The document is an email message containing headers that indicate it was sent from a Gmail account to a PayPal account. The body of the email is in French and appears to be requesting that a PayPal account restriction be removed so that funds in the account can be used. Authentication results in the headers show the message passed SPF and DKIM checks.

Uploaded by

idrus.lakkaicho
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
119 views3 pages

Original Message

The document is an email message containing headers that indicate it was sent from a Gmail account to a PayPal account. The body of the email is in French and appears to be requesting that a PayPal account restriction be removed so that funds in the account can be used. Authentication results in the headers show the message passed SPF and DKIM checks.

Uploaded by

idrus.lakkaicho
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

X-CSE-ConnectionGUID: RzUaVvS7QFa5C04Pfa+/IQ==

X-CSE-MsgGUID: JPT9E0cpS82KSHwiFbmFKg==
Received-SPF: None ([Link]: no sender authenticity
information available from domain of [Link]@[Link])
identity=pra; client-ip=[Link];
receiver=[Link];
envelope-from="[Link]@[Link]";
x-sender="[Link]@[Link]";
x-conformance=sidf_compatible
Received-SPF: Pass ([Link]: domain of
[Link]@[Link] designates [Link] as permitted
sender) identity=mailfrom; client-ip=[Link];
receiver=[Link];
envelope-from="[Link]@[Link]";
x-sender="[Link]@[Link]";
x-conformance=sidf_compatible; x-record-type="v=spf1";
x-record-text="v=spf1 ip4:[Link]/24 ip4:[Link]/19
ip4:[Link]/20 ip4:[Link]/20 ip4:[Link]/18
ip4:[Link]/16 ip4:[Link]/21 ip4:[Link]/16
ip4:[Link]/17 ip4:[Link]/19 ip4:[Link]/19
~all"
Received-SPF: None ([Link]: no sender authenticity
information available from domain of
postmaster@[Link]) identity=helo;
client-ip=[Link]; receiver=[Link];
envelope-from="[Link]@[Link]";
x-sender="postmaster@[Link]";
x-conformance=sidf_compatible
Authentication-Results: [Link]; spf=None
[Link]=[Link]@[Link]; spf=Pass [Link]=[Link]@[Link];
spf=None [Link]=postmaster@[Link]; dkim=pass (signature
verified) header.i=@[Link]; dmarc=pass (p=none dis=none) d=[Link]
IronPort-SDR: 6598751d_A1SQ9h17iMBSsq+bnX9VI4CfUD3sfUNtniOTpX+hdX/MHr6
1uGi6+r779aQRtFMWA/SGFe1Zimr3ynvAcrC62Q==
X-IronPort-AV: E=McAfee;i="6600,9927,10944"; a="222618738"
X-IronPort-AV: E=Sophos;i="6.04,334,1695686400";
d="scan'208,217";a="222618738"
X-Amp-Result: SKIPPED(no attachment in message)
X-Amp-File-Uploaded: False
Received: from [Link] ([[Link]])
by [Link] with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Jan 2024
[Link] +0000
Received: by [Link] with SMTP id 38308e7fff4ca-
2cd1ca52f31so23967581fa.3
for <spoof@[Link]>; Fri, 05 Jan 2024 [Link] -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=[Link]; s=20230601; t=1704490267; x=1705095067; darn=[Link];
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:from:to:cc:subject:date:message-id:reply-to;
bh=OfKv8i6d0pzkitbmFyz2YorzHian/VmATDD3L55FYr8=;
b=JQ7z4QvLycc9mB1fDusdRjhNY0eqvZ4g5j3alSND2dOB6Hsih7YbHvDVGdFiuOvsEu
TWvH+PKrkISyKnpmiDzMg3llgvkhruMVgRqWI9HzCBpy+WdFKxFR7O50Y7l4c9S37gXM
V/HmUlxGTfLtL32x63E1SXWRZbVh7JQjkOkRiC+P8eBsW32mrP6Hacfq4/oRuPK/SSQF
cKkS43zTZFQ8/RzugCrvT4ptA9NoJxrMYLV+INc9RAoGyNeF6eb3CHZc9EIV3m48ZTep
OBQdvxX0W21sYuOXziLsXlslSq6AATMx2l11WTiwdagBCBjrexWKEx9oCxZGLQ+G7UbR
vEyg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=[Link]; s=20230601; t=1704490267; x=1705095067;
h=to:subject:message-id:date:from:in-reply-to:references:mime-version
:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;
bh=OfKv8i6d0pzkitbmFyz2YorzHian/VmATDD3L55FYr8=;
b=JKtEHeNkR67Q5v9PoTnLUzYV2RyNyF7Z3PyxsXE6xB5+6u9LNuzVWW5/pBbMOcR8Ei
A8R8vjDqABmu0gdjrCZ3qepR2J842hm6lRc7ZKhol1PQ2iHl5oPm4a4LqnlA5/I6ueqH
5TclzvgQPFaB6wp4xKOJCZv9xwgBK5M/o/lCeO1qXHVy2gubVEaWNzrnTW6Pecgo5S6x
QhV5VyexSoc4uAgYvjL0lW6wTHeQdHMTSUeP8w5uc6sPAssiYu8kjw3SqeENoVuXm2Kc
zoemNhw0r3QOZSBHOUqJG1Cj3cB8ehHrSwiCOFvAL+C8RoxCtHx3NmCtbM6xydGjk79p
HlKQ==
X-Gm-Message-State: AOJu0YyOcOTjINXi0uEdt+9fJpcQneN0G4LMTKEmCFVPH5qz4cKY3uEF
fLCcIDS4Ufw16zjxZOzZ5Mi+qQeYarN+zKoOsEhUEhoQ
X-Google-Smtp-Source:
AGHT+IHjyCg6Bx7NmNuzvKHTI0hL7BEPhA6GysgtcMiPygXNfDpZ0AADF5T06YD8w+mXAd5kFm82bA0SyPW
bS2kBfcw=
X-Received: by [Link] with SMTP id
m8-20020a2e97c8000000b002cccc7b5d55mr2156ljj.69.1704490266984; Fri, 05 Jan
2024 [Link] -0800 (PST)
MIME-Version: 1.0
References: <CABmWS-xeXTjS-MMv-JusdiR91ascW+WhqudNnojuq1ny+9C1ZQ@[Link]>
In-Reply-To: <CABmWS-xeXTjS-MMv-JusdiR91ascW+WhqudNnojuq1ny+9C1ZQ@[Link]>
From: marc dumoi <[Link]@[Link]>
Date: Fri, 5 Jan 2024 [Link] +0100
Message-ID: <CABmWS-w6rjAQkVq3cgwRa3PQyRLsrMEM9WfZPj-dc5q6rh6LjA@[Link]>
Subject: =?UTF-8?Q?Re=3A_Bonjour_mon_compte_paypal_a_=C3=A9t=C3=A9_restreins_a_ca?=
=?UTF-8?Q?use_d=27un_carte_bancaire_trouver_sur_internet_car_je_n=27en_n=27a?
=
=?UTF-8?Q?i_pas_pour_payer_je_suis_vraiment_d=C3=A9soler_de_l=27avoir_mis_su?
=
=?UTF-8?Q?r_mon_compte_pourriez_vous_svp_d=C3=A9bloquer_mon_compte_car_26_?=
=?UTF-8?Q?
euro_son_dans_mon_compte_je_suis_d=C3=A9soler_du_d=C3=A9rangement_co?=
=?UTF-8?Q?rdialement_nabi?=
To: "spoof@[Link]" <spoof@[Link]>
Content-Type: multipart/alternative; boundary="000000000000e3094b060e3990c6"

--000000000000e3094b060e3990c6
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

bien sur la carte =C3=A9tait =C3=A0 personne d'apr=C3=A8s le site qui la ge=
nner=C3=A9e et
l'achat serait depitee de mon solde

Le ven. 5 janv. 2024 =C3=A0 22:16, marc dumoi <[Link]@[Link]> a =C3=


=A9crit :

>

--000000000000e3094b060e3990c6
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">bien sur la carte =C3=A9tait =C3=A0=C2=A0personne d&#39;ap=


r=C3=A8s=C2=A0le site qui la genner=C3=A9e et l&#39;achat serait depitee=C2=
=A0de mon solde</div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=
=3D"gmail_attr">Le=C2=A0ven. 5 janv. 2024 =C3=A0=C2=A022:16, marc dumoi &lt=
;<a href=3D"[Link] a =
=C3=A9crit=C2=A0:<br></div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><div dir=3D"ltr"></div>
</blockquote></div>

--000000000000e3094b060e3990c6--

You might also like