Bonjour,
Voici un mail très supect qui est arrivé hier. (cliquez pour agrandir)
Voyez les en-têtes SMTP de ce mail, ci-dessous.
Il contient notamment une signature DKIM produite par Paypal.com et qui est authentique.
Comment identifier le vrai du faux ?
Received: from NAM11-DM6-obe.outbound.protection.outlook.com (mail-dm6nam11rlnn2055.outbound.protection.outlook.com [40.95.38.55])
by k3.dmmail.eu (Postfix) with ESMTPS id DEA87101781
for <c_________@_______.net>; Tue, 18 Feb 2025 14:10:06 +0000 (UTC)
ARC-Seal: i=4; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;
b=bQhya1C1eFqIUkhBUg1W6PJjx2+eyOQdu+4VRX8QH5uK+RUv0Lk69i/mhcSG1YGV9FZRTj+qQzL9vKpnWMoP6B7n2Z/CSbUPmFlexvI7WywI5aFjiEX81z6MFlCRSqWv5x8Jv8fxFstpsiNIoBxrqsh1D4Mv2/LEye6rdYdJQxAeSj5+4NxeIQ2e+aqyFstlB5CdJ/T+bLAvt08U7cCnIYl4nP4cCGh/wJo3x2TFKLb3ORgmOd5/wi+Aqmv9ND+9TwLRcLLMeERDbPgdoW1IQVTXq0PjqVZHBmsMxZaucMfcnsBcPMVvfXd9NaEnvdeK7Yv94pcqEVaMc/kJf7/2sQ==
ARC-Message-Signature: i=4; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
b=B/Vr0/J9NVu1sYRp2oj/broYMu4JuFZgYBRnEPW94/6hP46p9PLdx87hoZGVyDK1/ub8kZZdjBxXWP1+4DQyupyrYWKOEw0Y0mOt24zsM/1PE5q8lvGrOV68l9julJczrej7MwiJTbo1OYnZ2I96BtyatnPFjB1NQ+9AmCBVYHsVMCYL1HsSZ1RoLRO/B9wzHzkC1SeIz81zS2BaQAXZPfW2fAu/5M/bgLfL+VAyd4GuwIYfYRgBnCXGxlxJS411tsJNHmrCkKhrr8G5hE6orQuxqqA6zLbNpLWenyoM7wZKRU3CKbsoSf3WA91FmLp/BssuKWJckQLhAXBPct/ckw==
ARC-Authentication-Results: i=4; mx.microsoft.com 1; spf=softfail (sender ip
is 2607:f8b0:4864:20::a48) smtp.rcpttodomain=hbunr.onmicrosoft.com
smtp.mailfrom=paypal.com; dmarc=pass (p=reject sp=reject pct=100) action=none
header.from=paypal.com; dkim=pass (signature was verified)
header.d=paypal.com; arc=pass (0 oda=1 ltdi=1
spf=[1,2,smtp.mailfrom=service@paypal.com] dkim=[1,2,header.i=@paypal.com]
dmarc=[1,2,header.from=paypal.com])
Received: from SJ2PR16MB6252.namprd16.prod.outlook.com (2603:10b6:a03:594::20)
by SJ2PR16MB5525.namprd16.prod.outlook.com (2603:10b6:a03:539::5) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8445.13; Tue, 18 Feb
2025 14:09:55 +0000
Received: from MW2PR16MB2185.namprd16.prod.outlook.com (2603:10b6:907:11::30)
by SJ2PR16MB6252.namprd16.prod.outlook.com (2603:10b6:a03:594::20) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8445.19; Tue, 18 Feb
2025 14:08:15 +0000
Received: from MW2PR16MB2185.namprd16.prod.outlook.com
([fe80::8620:1637:75d8:8eef]) by MW2PR16MB2185.namprd16.prod.outlook.com
([fe80::8620:1637:75d8:8eef%3]) with mapi id 15.20.8466.013; Tue, 18 Feb 2025
14:08:15 +0000
ARC-Seal: i=3; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;
b=WlDUTJQE3N/ajWYH67Tk+x+Cgg1+DHZragMvm9hUGXOA612B1/BYsSkW7aGoGSLFeLbQKChdwaiAwyBg+OFNCpgHC/h3tAw9snHN/m2DO0FThI2DLpSOsd5Omn8SnYnyl8s50ddtEnwZIwFEwuy3sCwIaf77cyj+cT/vSJBsFyRBtQ/lOnA9lrfnGEpXoj3dLBYZQw+j/IGnn4vfyIMMZ8gnpNET4dOvmMRWqjD6f/Ui0QxxsqQvX9ta4iyEB+js+5eK7bj2+kCzrxqjZLcMxwbDPCxfQE3YgXjCWT/1BI5n2+VCcpWQODkeYemzjWen7QEdhp4X+eFSfL8eAOv8Jw==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
b=bf+qnTzx6/iQ6pnBG/xtPUDeUqkjEKZU78fbJXQGsMDKvl13saRIJu1hfSyksh5Usx01rH8FsKRXBfWGz6knyHxEheXy/lnFaQxLWeDXfRrO09o6xZI0DX3Zxni6XCrTeBsuvjeyL4gPOqz2I9Bt5GGHLkHedHl3fIzZ1VaiYfsqExybYAR5MnlwzJpNdbwR0yBq3+hkU51Fw/k5/82CcaQLPKcShNO5eyKM5TuoGJq3ufzu4pad6s6QHDTT4AT26X1AQ71J9pNQIFlzmFc6gQ8UrtNjM0pHTwDd7ee8gJPnAKoY0tvru/dp6E1d+h8bCzYvUD31G9LirFf5j1FCSw==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=softfail (sender ip
is 2607:f8b0:4864:20::a48) smtp.rcpttodomain=hbunr.onmicrosoft.com
smtp.mailfrom=paypal.com; dmarc=pass (p=reject sp=reject pct=100) action=none
header.from=paypal.com; dkim=pass (signature was verified)
header.d=paypal.com; arc=pass (0 oda=1 ltdi=1
spf=[1,2,smtp.mailfrom=service@paypal.com] dkim=[1,2,header.i=@paypal.com]
dmarc=[1,2,header.from=paypal.com])
Received: from BN9PR03CA0866.namprd03.prod.outlook.com (2603:10b6:408:13d::31)
by SJ0PR16MB4158.namprd16.prod.outlook.com (2603:10b6:a03:318::7) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8445.19; Tue, 18 Feb
2025 14:07:29 +0000
Received: from BN2PEPF00004FBD.namprd04.prod.outlook.com
(2603:10b6:408:13d:cafe::6) by BN9PR03CA0866.outlook.office365.com
(2603:10b6:408:13d::31) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.8445.19 via Frontend Transport; Tue,
18 Feb 2025 14:07:29 +0000
Authentication-Results:
Received-SPF: SoftFail (protection.outlook.com: domain of transitioning
paypal.com discourages use of 2607:f8b0:4864:20::a48 as permitted sender)
Received: from mail-vk1-xa48.google.com (2607:f8b0:4864:20::a48) by
BN2PEPF00004FBD.mail.protection.outlook.com (2603:10b6:40f:fc02::177) with
Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id
15.20.8466.11 via Frontend Transport; Tue, 18 Feb 2025 14:07:28 +0000
Received: by mail-vk1-xa48.google.com with SMTP id 71dfb90a1353d-520b91205d0so541563e0c.2
for <noreply@hbunr.onmicrosoft.com>; Tue, 18 Feb 2025 06:07:28 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1739887648; cv=pass;
d=google.com; s=arc-20240605;
b=i4iYgSvHB9ce4Tk4iYxHSKJnSmfN7KJEfLw41zU54mASMTsVi9AHjko+BgB0m/BCju
SAQY3s/tUofLp/MIgVJFDYvRolHs3v/BawGV3CkcvP7xIB9T1EZwj+p+OFIOmGBdz7Zr
kTaqPu3QpkwmluNaGlAAF+qNGYmo+8m5pdF4VANegIGp3Cf1g83/o9m03ktyisnGTH7m
N69hBBUCEB1R6QqFXpm7orOdPH4BeVl+FOI9lYCdxmaWFh18zFX+XAHahbqI6cvSderj
YhhNxX2hvudWaCCTLqxDsQOZJKnMqSYxanUPdaLgzsPWQRa/yDhZTg8aBcVAzzF0ciBy
SrbQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=amq-delivery-message-id:pp-correlation-id:subject:to:from
:mime-version:message-id:date:content-transfer-encoding
:dkim-signature;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
fh=8yno9CUwFmBulVw9U+FtQdgo8Wss+ZK4nK22Cdc2MTo=;
b=jlD8DxDicR4gT/hpzV9hVDuIRhCGIID/aQZcTccSEwiRj1Ojasot7wc98tZAW9bmqN
4Z7dMhssteKAmuNmWSUub/0Y6XircOacfy8wdNsNMMNoUpuLdXQhUcuZV9HoUnz7bv9M
cD1M1fxMPQ/nbIMahWNN0EQZDqw5mPpzu3Pr62BssB+IHOLnIwDlcm8zUGfnw2gUXjs8
g0Lc/OM1M4aIfonw6Irbt2XwdencHlsyTCNr2YWy4aszTB72CHrYqhdVWsfJTkigXD+R
pJPiNXhMs2dmERdqeWLoXbeRATyglKx09wv0Vl+1yMQvVM0F+tnnOx7/SwFizItxB/uI
Fz1w==;
dara=google.com
ARC-Authentication-Results: i=2; mx.google.com;
dkim=pass header.i=@paypal.com header.s=pp-dkim1 header.b=iEPoh38V;
spf=pass (google.com: domain of service@paypal.com designates 173.0.84.3 as permitted sender) smtp.mailfrom=service@paypal.com;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=paypal.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1739887648; x=1740492448;
h=amq-delivery-message-id:pp-correlation-id:subject:to:from
:mime-version:message-id:date:content-transfer-encoding
:dkim-signature:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
b=GDh6kopEfyHRGov7bjoUPCDYmhgri1VGb6D8ozitRGWnog4buDISzjfrj/z6iLGshl
5Fwgjk5/27evKyAq4Ku35byQtsChgZ29tcTjWUcyrqu8IaoRHefFF1gUcwSQ+e5DiiuJ
UuMtHNHpCdDEZqzHNKRj8yotSZlDjkKhXS5LKtN54oLVp/BosNWDxa3JwTq+r5MdI7OW
GVAw8pMdlG1xP7rv8lu00B0pGudoEXUhZaqZQ2A+R0XwhWgaNMlSBWknVj3KpLeHcvtA
2DJTko9s2VplduKu6bWyecpHxQU9cZV1ycvdf2zQKtTp/c7vPZ1OeGA36wS8RvxuVVwV
bZyQ==
X-Forwarded-Encrypted: i=2; AJvYcCVmAlId+vgXlZ5ri40EkFd82Ndmt4RTeGYKaLqjjd48hHkySEfa2OX5ALMEOJXvL4lD4v8HSpdM@hbunr.onmicrosoft.com
X-Gm-Message-State: AOJu0YzG1HxTRQ1A+k+50aSdfyXqsBWkWEEoOvTh6P2JoHE+QD/VXUD0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X-Gm-Gg: ASbGncsBRJBCJuQANtW1a44LZpbrkU6tsvUTgt+QHMrlbV/7oVWMcPI4XtDymZmBjJI
BVEeltFimtI4wsBQ/sGvVCWkoykZk1BMJsEL+T1A4+c3CICW8MvfM5tUyG9KFtNDGDDR+U+G747
D2XhEtIeTsQLqpPwZOIlpiARFVtHvQrFg4IDD9VoclxfoUUrDOm1ea3hih0H8EqxGIqFCjHcieb
NRRRUiyiL7g9lryZOXpKN5dADSsvLTELZLxhxEiVCjyVfAzS+PgT9eyhr/eAevxsvHkqImUwPqu
hHyadCZidirflIudlHhGgVg=
X-Received: by 2002:a05:6102:150f:b0:4bb:b809:36c0 with SMTP id ada2fe7eead31-4bd3fde6179mr7804810137.20.1739887648441;
Tue, 18 Feb 2025 06:07:28 -0800 (PST)
X-Google-Smtp-Source: AGHT+IEuxAV8QISnWcbeIelo4IFFnpncE5y1fk+p5Aq5AEcOTbFWxtaAfgZCTVATzjHlVdjWwn3S
X-Received: by 2002:a05:6102:150f:b0:4bb:b809:36c0 with SMTP id ada2fe7eead31-4bd3fde6179mr7804663137.20.1739887647561;
Tue, 18 Feb 2025 06:07:27 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1739887647; cv=none;
d=google.com; s=arc-20240605;
b=DYcnrGVg7JBpLcUiMCPSmk8mSxeP7Rsc2xJe2r1VDb3ldZdK9Z1cC2Hewdg1945rCb
iC1Novfa0j02KwNjbB1DlRfitOkSZ7UlCQmTXq1iluOQAFGSitsgNoYZPQuoZZwCSQK1
YNqFZdboy6zUAUVeQ57jhysRJ0ZZcQwYbn7FJSeC1w2WRbDsFljFQe/F5vAtoWfN/Fq9
YnqRCCa+HeaxIf2Aye3TZs1Hg69KXMrc6phnGX+QTiLo7+4zuv9PON6jVvzFw1QOzTOr
0apezIhO1V1CPG1xqHsy6ek8ZKDapojL3b6NoferFJ9nc0FM71ikSZtI4fFAEs3gc2QE
XsXQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=amq-delivery-message-id:pp-correlation-id:subject:to:from
:mime-version:message-id:date:content-transfer-encoding
:dkim-signature;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
fh=LorrFDFgPcapgxQ7Byh4DdOpYxqBey2mY6BF9wFq/FM=;
b=k8sJcwUCSwF9ZLPtnrpGKOB5o4cJgzyjkoT6Ndsz7Rqjnk2cm615o0S+NLVtUpJ/76
qRnmk4HO827WA7RdLnx09ENIP2onJsZ3ufticN4ys6sglVYZJ6Lb2j353vEBz8/IEoAh
lGAbAVlPTPC+1Et3DDo+i6CTYxmk0UfZGNUSK+R040hOQF6nLbaHT0XkS3Nvp5OCsbtx
gLb2Gpb8dENTRP2MoxmV8O+OjuDEzTg+64mGafsEo6ebKWGd2/c5VxVmh2x1S3LMSvZe
1kY/lijokNqNceMqJBgdQm5Mmql4cKDjNHdqa4qPMrRzwU6FrMrtgPOK01ywfGYGKkJ+
v3hw==;
dara=google.com
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@paypal.com header.s=pp-dkim1 header.b=iEPoh38V;
spf=pass (google.com: domain of service@paypal.com designates 173.0.84.3 as permitted sender) smtp.mailfrom=service@paypal.com;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=paypal.com
Received: from mx14.slc.paypal.com (mx14.slc.paypal.com. [173.0.84.3])
by mx.google.com with ESMTPS id ada2fe7eead31-4be4f0c180csi1125508137.582.2025.02.18.06.07.27
for <noreply_@usaea.institute>
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Tue, 18 Feb 2025 06:07:27 -0800 (PST)
Received-SPF: pass (google.com: domain of service@paypal.com designates 173.0.84.3 as permitted sender) client-ip=173.0.84.3;
Authentication-Results-Original: mx.google.com; dkim=pass
header.i=@paypal.com header.s=pp-dkim1 header.b=iEPoh38V; spf=pass
(google.com: domain of service@paypal.com designates 173.0.84.3 as permitted
sender) smtp.mailfrom=service@paypal.com; dmarc=pass (p=REJECT
sp=REJECT dis=NONE) header.from=paypal.com
DKIM-Signature: v=1; a=rsa-sha256; d=paypal.com; s=pp-dkim1; c=relaxed/relaxed;
q=dns/txt; i=@paypal.com; t=1739887646;
h=From:From:Subject:Date:To:MIME-Version:Content-Type;
bh=gTWbDt+lAC/1Ok0bC8YamzUCaORTk58acPLMkXtyAC4=;
b=iEPoh38Vobpr3ulJPMdVA5djOZzomINNMB4Up0tDoWSg3RM49jYTKLj+K37LWpk8
1HouV5EtEuEhsKFmUKEx0WdHFea78HMNSK5p3n2kfKbtnFmt7lpj+zUiz0/oOpYE
hTELtMnOyu5keQxHSTQPqzWz/ezOT7b91evGaAn5Ska4bTnW9PFcKQKhZGOWeBsB
I6hwqShT/+MhltsbS1n/ImAHYDnd6i0kF9UAuM/VNJtVGxF+XpiJWUO5GaapGUWj
xhCfTGd90sa2ZKYmzkh+plCcCv1dumG2eEaP6pPGO6cU/m4vnTPf/+N7Y/g70zZf
6roVJ9JM/DZ/E4bfHmHe6w==;
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="UTF-8"
Date: Tue, 18 Feb 2025 06:07:26 -0800
Message-ID: <8F.F6.46733.E1494B76@ccg14mail03>
MIME-Version: 1.0
From: "service@paypal.com" <service@paypal.com>
To: Billing Team <noreply_@usaea.institute>
Subject: You added a new address
X-MaxCode-Template: RT000542
X-PP-Priority: 0-paypal-false
PP-Correlation-Id: f100319a4b50f
X-PP-Email-transmission-Id: aed0ebcf-ee01-11ef-b5a8-6bf5ff143f28
X-PP-REQUESTED-TIME: 1739887642555
X-Email-Type-Id: RT000542
AMQ-Delivery-Message-Id: nullval
X-XPT-XSL-Name: nullval
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: b48e8744-0f23-4792-a47b-4311bde28b19:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
BN2PEPF00004FBD:EE_|SJ0PR16MB4158:EE_|SJ2PR16MB6252:EE_|SJ2PR16MB5525:EE_
X-MS-Office365-Filtering-Correlation-Id: 167fc394-e902-40a0-3b4e-08dd5025949c
X-Moderation-Data: 2/18/2025 2:08:12 PM
X-LD-Processed: b48e8744-0f23-4792-a47b-4311bde28b19,ExtAddr,ExtAddr
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 1
X-Microsoft-Antispam:
BCL:0;ARA:13230040|48200799018|1032899013|376014|7416014|61400799027|41320700013|43022699015|69100299015|10070799003|8096899003|2066899003|13003099007;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?b0g4ajZQbDJLQVZLSjNxeVNGMlo4MEpwcEZWRFBSL0g1T0dPeHU1Vmg5Y0ZY?=
=?utf-8?B?amlXaSt5SGZiTnJnczBqNmY3WDdEZlc1MS9QWmdheFZuMloxYUdzWS82MjJ6?=
=?utf-8?B?eXFETmUzb0ZlUE41b25zNkk5aFVBY2VoTFQrMUp5TXFqeUJKWEkzR2VKM3Yr?=
=?utf-8?B?NWFxQ0t0ZnpXU0Y2b09EOGFnaW9pQUl1R0xpMm96VXRDeFRzTHVhSXo0RmFS?=
=?utf-8?B?bEYrRWs5M0RDVVV1Q05iNmVpYlAwTlpmVEg0ZXR0eTlMd1hHako4OUgwelZB?=
=?utf-8?B?Q2w0cUxQWkxsQlBlK1JTbUQ2cVJrbkpibDBaOXl2U2NmYUpwSXVOdk5BeFVP?=
=?utf-8?B?WDdaSDg3enQ1dDVZamNOL0IwMGhqU01peDVmaHpITjM1YnpCelYvMkZCZVpS?=
=?utf-8?B?WTNoNWttc0NRV1RhM254VHRBbU50TWVQUzdSRWZ2T2NzbW5iV3J0c3drbHBx?=
=?utf-8?B?Z0FLWWk2WHBjNExQRVJRSUdndWh4NVErcTRjcnZyWm8xM25XOWlidUR1akR3?=
=?utf-8?B?YXdLOFh0UzZPeUFSeEhrUGczaEJCZG1TMm92TGJyS21rMDVxbnJ5VnRGTnN1?=
=?utf-8?B?Wjh4U0dsbjI2QjZaeEM5T0NwS0VSRUdKYzJoRUdWbGNaMHRhcG54V2FkOVNU?=
=?utf-8?B?UkZPVWNJa01DamJKa0FwRE9rUThmdXZ5bE16MzFlTlhmODNKNERLbDRwZkpY?=
=?utf-8?B?Zk5IdzYxVEJsRHZPUlpGVFNHT2R1d2FpbkJ2RlczS1hVUFk3NnZlTk1NazI5?=
=?utf-8?B?MDAwNmtMSlB1QXNObWM5NjRkRDZDWTVHQ0pzNFZCVXZWcEpaaDJ2REpaWGVn?=
=?utf-8?B?SUFvcXpPaWJXSGtJVldjL0ZISUhIMGFSUzVNMHV0cHRNMHg3WkdibjRTQTg1?=
=?utf-8?B?T0hKS2JGZmJaMkxUa0txQ1llUC9vUFJUUFJmL2hJQ0RNNHBBZXRObjRKT1Na?=
=?utf-8?B?MUZjY2k4UGFGSU11YmV1UTBTUzN6aFJxdEgyR2MyUStwaEpTY0hFUFBoNjdr?=
=?utf-8?B?L292VE5FWnowdGg0SCs1L2tVeGxNci90U2hSMjZMb1Y5bCtCRkNOVFFGaEJU?=
=?utf-8?B?b2lFNnRSVzlCRWdJNFJ3czJMMjNjdy9Yc0ZMcmdwbTNveHdlSFFpc1RoK2Ur?=
=?utf-8?B?VzU4a0FqSTZGWE1ZUGxmbisvVzZsaWJzVktNZ1RQL0QrZzYrL29vNEtGcDBm?=
=?utf-8?B?RVZRaDk1K21oWk5yejVvNzZ0WHFUcUJDTEZzSytiRWRHdkl2NEpSMWV0ekNN?=
=?utf-8?B?eXRRVW9KTUZ6YjBHOUl6aVZ4bzd5amhEWjluVWZMNU9HK3p4Um5JbThML0Zy?=
=?utf-8?B?SlMzM1c2T3R0RnJoSDNES2JKOHo4V2hvWEpreHkrenh0TXNOTGpYL2V5MW5U?=
=?utf-8?B?eGhwMzBkK3VTcXlNMnpxcUdlTzVPbm0yalo4SWlyV1BGMWRpTExmOE5nMUR6?=
=?utf-8?B?TDM1cXlrRjZVSzYwaE5NRUpRZ3FYZVUzWkppbVI4WVpRRlF2Q0E3Z0x1RzBY?=
=?utf-8?B?YnBjVloweVlVYjQ4ZUZaeERQV3hZRlM0c012Y2hGNC9LbkVmRWIveXZLQUt1?=
=?utf-8?B?Z1RYY1ZiZFZnQ1VOYWwzMmRtSVh2dXRTRmY5NzR5Q0lWY09xTGpWZFRiUUR6?=
=?utf-8?B?cTFMSDJDV05rUEljY1lYaEUxUlgvcXRCaktCMjNBbnBiZjdHcTZXd1MyL21o?=
=?utf-8?B?dzV5QklCR1BmN1JydUdSd3NzKzFhSC9SWGYvMlVUWlE2YVJQM1ZmNy91UTho?=
=?utf-8?B?MURhM0pJUmVEZlRDaGZWcmJxRmk0dmN2emNJN0lnMng5azJGR25WSkpGZnFw?=
=?utf-8?Q?Hyzt4kB6xyqaB5Kc2DK0r4jzNvf7ZyK4GYw3Y=3D?=
X-Forefront-Antispam-Report:
CIP:2607:f8b0:4864:20::a48;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail-vk1-xa48.google.com;PTR:mail-vk1-xa48.google.com;CAT:NONE;SFS:(13230040)(48200799018)(1032899013)(376014)(7416014)(61400799027)(41320700013)(43022699015)(69100299015)(10070799003)(8096899003)(2066899003)(13003099007);DIR:OUT;SFP:1022;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: nhnnext.org
X-MS-Exchange-CrossTenant-Network-Message-Id: 167fc394-e902-40a0-3b4e-08dd5025949c
X-MS-Exchange-CrossTenant-Id: b48e8744-0f23-4792-a47b-4311bde28b19
X-MS-Exchange-CrossTenant-AuthSource: BN2PEPF00004FBD.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Feb 2025 14:08:15.0123
(UTC)
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: nmyvWXp59vbhfnEz40agnhBZfunXZg+mR7Unkxg6Okzvx44dtz+Dwron0GQFrpiyY91Nah++81hyogTdxrAEItl7tUzZcfgKlfo9Fjct5HZfhgcgAkw0GLmjZjzCUEh9NXZ6h0Zg66ZzSJiF3Lndf/cDZKFNnn1NZv9w2ynPMEHrtidm2D0g25lGpPVnY1AplxbJhir3Sx54/BZtQK4OFZrAraIrcCIQ78O0IrQ7AGk=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR16MB5525
Mon impression est qu’aucune de ces lignes n’est falsifiée. Paypal a vraiment envoyé ce mail à une adresse hébergée chez Google, qui l’a transféré à une adresse microsoft365 et peut-être y avait-il une distribution list à cette adresse.
La signature DKIM est validée
Impossible de contacter un être humain ou même un zombie chez Paypal pour leur tirer les vers du nez.
Le texte de l’e-mail est reproduit ci-dessous, débarrassé du formattage html. Les mots Apple Store sont des caractères unicode différents du latin.
Hello, Billing Team PayPal You added a new address This is just a quick confirmation that you added an address in your PayPal account. Here are the details: Name: Billing Team Address Updated: 7535 Dadeland Mall, 𝐀𝐩𝐩𝐥𝐞 𝐒𝐭𝐨𝐫𝐞 Confirmation: Your shipping address for the MacBook M4 Max 1 TB ($1098.94) has been changed. If you did not authorize this update, please reach out to PayPal at +𝟏-𝟖𝟖𝟖-𝟑𝟒𝟑-𝟏𝟏𝟗𝟐. Miami, FL United States If you want to link your credit card to this address, or make it your primary address, log in to your PayPal account and go to your Profile. Since this address is a gift address, you can send packages to it with just a click. Please note that you can't link your credit card to a gift address. If you'd like to make this your primary address, log in to your PayPal account and go to your Profile. If you didn't make this change, let us know right away. It's important to let us know because it helps us make sure no one is getting into your account without your knowledge. PayPal Help & Contact | Security | Apps Twitter Instagram Facebook LinkedIn PayPal is committed to preventing fraudulent emails. Emails from PayPal will always contain your full name. Learn to identify phishing Please don't reply to this email. To get in touch with us, click Help & Contact. Not sure why you received this email? Learn more Copyright © 1999-2025 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131. PayPal RT000542:en_US(en-US):1.0.0:f100319a4b50f
J’ai demandé à ChatGPT et honnêtement il m’a bluffé.
Voici la transcription: https://chatgpt.com/share/67b6438a-feb0-8004-9fe3-5fb4e04e0989