FOR YOUR INFORMATIONS and ACTIONS against these HACKERS USING your servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, LOGOS, comptes et boites mails ! Recu Dimanche 16 Mars 2025 après 19h15 (envoyés toujours les nuits, ou les week-ends ) 9ème même mail escroc usurpant encore SNCF CONNECT et venant de l’adresse mail usurpée: From SNCF newsletter@marketing.hindustantimes.com Et adresse IP 193.35.16.161 gérée par abuse@ripe.net et hostmaster@ripe.net Utilisant des serveurs mails mta-16.161.netcmail04.com Received : from mta-16.161.netcmail04.com (mta-16.161.netcmail04.com [193.35.16.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0101.laposte.net (SMTP Server) with ESMTPS id 4ZG5rB6dL6z1BFM0 ************************* Codes HTML des hackers ********************* Return-Path : <17420643735537514-145911-1-laposte.net@ncdelivery.hindustantimesnewletter.com> Received : from mlpnf0101.laposte.net (mlpnf0101.sys.meshcore.net [10.94.128.80]) by mlpnb0108 with LMTPA; Sun, 16 Mar 2025 19:15:39 +0100 X-Cyrus-Session-Id : cyrus-250917-1742148939-1-14132679599445367373 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=1; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1742148939; cv=none; b=r2xFWQgTv2YMRotMC2sVUC3tw3YuwePy+LyTdKH7c2h3uOz0r9mugATXNy9bJZogdgghEojn3zT GOVjIo2y6o98JwJ3AJWzNagYYUQxfGEbc+DQGf+Qu/4ey6vaHkZqKsEzSDxwJqioHT5bqUPzK5WV xs+jHLMOgCeyNND3vQpJkfQOZxOCCyx9c9Xh699/5KQgTK2AECBKUqSaC0DzGicCf1RybC8ohr/g zbDUUDdoK5XSBobVTvmfblUNVgqPwZOed70FCCvPLuj+sHLh9uZEzP9f/N3j61L4o65lI+5eordV Nqq6Fx9QYqHe+t51Eybhb0gDEQk9iFh+CBRATFQ== ARC-Message-Signature : i=1; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1742148939; h=DKIM-Signature:DKIM-Signature:Date:To:From:Subject: List-Unsubscribe; bh=rFPb48XBzZo4OBxelZwDopI7jOPvjKu4domgJoEs8bM=; b=mPv+E91 F/Q5HzE/aVjRZ+EodSRd9dSil6V+C1Ps6zAwlIyTn1fg+Ng+MEZN9vSNSiiEhD967bpHT57WeFFq JLIvoq1aewbnHZB3UcIyXsAHxoT4O+e/A4uSGlRpfVvoVVGm71H4HzAiHzDI9/Pn442ntEI1lv08 rkBzxalId/1X+iccqxK0q+djB3VX8DQetzdSF45xu7xd2i/JBbXIHAfK/h7XvCadfuZOVUdPCcDN pMWy7dvdi0Cg9VeK3QPGId3BH33oYi0KFRzQzY4rLDoR6qcA3fTQ8SU4AFSsT/X4WFFWlRyFEN8h 3X9lb1m67CG+dijQZCsM9dFxsxkVSpA== ARC-Authentication-Results : i=1; laposte.net; spf=pass smtp.helo=mta-16.161.netcmail04.com smtp.mailfrom=17420643735537514-145911-1-laposte.net@ncdelivery.hindustantimesnewletter.com; dkim=pass reason="good signature" header.b=MDMPBC header.d=marketing.hindustantimes.com header.s=nce2048; dkim=pass reason="good signature" header.b=saYiNC header.d=env.etransmail.com header.s=fnc; dmarc=pass reason="SPF is not aligned, DKIM is aligned"; arc=none smtp.remote-ip=193.35.16.161; bimi=skipped reason="non-compliant DMARC" X-mail-filterd : {"version":"1.8.0","queueID":"4ZG5rC2h5Qz1BFLp","contextId": "1ca10225-b948-4bf1-9789-afa97cb745f2"} X-ppbforward : {"queueID":"4ZG5rC2h5Qz1BFLp","server":"mlpnf0101"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0101.laposte.net (SMTP Server) with ESMTP id 4ZG5rC2h5Qz1BFLp for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Sun, 16 Mar 2025 19:15:39 +0100 (CET) X-mail-filterd : {"version":"1.8.0","queueID":"4ZG5rB6dL6z1BFM0","contextId": "92d80aeb-95d5-4794-a3c2-fa333a99daaf"} X-lpn-mailing : MCE X-lpn-spamrating : 43 X-lpn-spamlevel : not-spam Authentication-Results : laposte.net; spf=pass smtp.mailfrom=17420643735537514-145911-1-laposte.net@ncdelivery.hindustantimesnewletter.com smtp.helo=mta-16.161.netcmail04.com; dkim=pass reason="good signature" header.d=marketing.hindustantimes.com header.s=nce2048 header.b=MDMPBC; dkim=pass reason="good signature" header.d=env.etransmail.com header.s=fnc header.b=saYiNC; dmarc=pass reason="SPF is not aligned, DKIM is aligned"; arc=none smtp.remote-ip=193.35.16.161; bimi=skipped reason="non-compliant DMARC" X-List-Unsubscribe : <https://unsub-api.netcorecloud.net/YHNMJN?id=145911=NB4HCAIFDgBTGkURRUZBFkUXFUYRGEFEQkIWFhEQRRBBQhcZFhAXEUJGRRFFRkEWRQdJA11dTwgHD1lfX1UlXAASWEpCVRlfBxIZAFJSUwZTAwZRAg1UV1VXBwJNWBFEERENFhlFWUIXBEhQFQ9PWABDVglDXQIIDRdSGF9VER84Knl0fH4IWAYaEwI=>, <mailto:17420643735537514-145911-fncunsub@usub.ftrans03.com?subject=Unsubscribe> X-lpn-spamcause : OK, (17)(11000)gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddufeejvdelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecunfetrffquffvgfdpggftfghnshhusghstghrihgsvgenuceurghilhhouhhtmecufedtudenucdnofetkffnkffpifculddujedmnecujfgurhepfffvhffukfggtgfgjffosegrihfsreertdejnecuhfhrohhmpefumjfpmjevmjfhuceonhgvfihslhgvthhtvghrsehmrghrkhgvthhinhhgrdhhihhnughushhtrghnthhimhgvshdrtghomheqnecuggftrfgrthhtvghrnhepheeukeekueejiedugeeijefgvdehudehkeelieegfeeifefgudejffeghefhieffnecuffhomhgrihhnpehhihhnughushhtrghnthhimhgvshhnvgiflhgvthhtvghrrdgtohhmnecukfhppeduleefrdefhedrudeirdduiedunecuvehluhhsthgvrhfuihiivgepgeeinecurfgrrhgrmhepihhnvghtpeduleefrdefhedrudeirdduiedupdhhvghlohepmhhtrgdqudeirdduiedurdhnvghttghmrghilhdtgedrtghomhdpmhgrihhlfhhrohhmpedujeegvddtieegfeejfeehheefjeehudegqddugeehleduuddquddqlhgrphhoshhtvgdrnhgvthesnhgtuggvlhhivhgvrhihrdhhihhnughushhtrghnthhimhgvshhnvgiflhgvthhtvghrrdgtohhmpdhnsggprhgtphhtthhopedupdhrtghpthhtohepvghlvgdrlhgvmhhoihhnvgeslhgrphhoshhtvgdrnhgvthdpshhpfh epphgrshhspdgukhhimhepphgrshhspdgumhgrrhgtpehprghsshdprhgvvhfkrfepmhhtrgdqudeirdduiedurdhnvghttghmrghilhdtgedrtghomhdpghgvohfkrfepfgfu Received : from mta-16.161.netcmail04.com (mta-16.161.netcmail04.com [193.35.16.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0101.laposte.net (SMTP Server) with ESMTPS id 4ZG5rB6dL6z1BFM0