hxxp://Received[:] from PARP264MB4615[.]FRAP264[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]102[:]42f[::]12) by PAZP264MB3149[.]FRAP264[.]PROD[.]OUTLOOK[.]COM with HTTPS; Thu, 16 Jul 2026 07[:]22[:]43 +0000 Received[:] from PA7P264CA0183[.]FRAP264[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]102[:]376[::]15) by PARP264MB4615[.]FRAP264[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]102[:]42f[::]12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]21[.]223[.]12; Thu, 16 Jul 2026 07[:]22[:]42 +0000 Received[:] from PA3PEPF000089B9[.]FRAP264[.]PROD[.]OUTLOOK[.]COM (2603[:]10a6[:]102[:]376[:]cafe[::]a1) by PA7P264CA0183[.]outlook[.]office365[.]com (2603[:]10a6[:]102[:]376[::]15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15[.]21[.]223[.]12 via Frontend Transport; Thu, 16 Jul 2026 07[:]22[:]42 +0000 Authentication-Results[:] spf=fail (sender IP is 143[.]196[.]159[.]101) smtp[.]mailfrom=aviation-civile[.]gouv[.]fr; dkim=none (message not signed) header[.]d=none;dmarc=fail action=oreject header[.]from=aviation-civile[.]gouv[.]fr; Received-SPF[:] Fail (protection[.]outlook[.]com[:] domain of aviation-civile[.]gouv[.]fr does not designate 143[.]196[.]159[.]101 as permitted sender) receiver=protection[.]outlook[.]com; client-ip=143[.]196[.]159[.]101; helo=a-vga-rvega-3-x[.]dc[.]aviation; Received[:] from a-vga-rvega-3-x[.]dc[.]aviation (143[.]196[.]159[.]101) by PA3PEPF000089B9[.]mail[.]protection[.]outlook[.]com (10[.]167[.]242[.]21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15[.]21[.]245[.]5 via Frontend Transport; Thu, 16 Jul 2026 07[:]22[:]42 +0000 Received[:] from relais-vega[.]lfpo[.]aviation-civile[.]gouv[.]fr (unknown [172[.]16[.]212[.]31]) by a-vga-rvega-3-x[.]dc[.]aviation (Relais VEGA PROD (Postfix)) with ESMTPS id 491042000D for <didier[.]gamiette@aviation-civile[.]gouv[.]fr>; Thu, 16 Jul 2026 09[:]22[:]42 +0200 (CEST) Received[:] from relais-vega[.]lfpo[.]aviation-civile[.]gouv[.]fr (a-vga-relais-02-x[.]sigp[.]aviation [172[.]16[.]212[.]31]) by relais-vega[.]lfpo[.]aviation-civile[.]gouv[.]fr (ESMTP All_to_VEGA) with ESMTP id 4094E60140 for <didier[.]gamiette@vega[.]aviation-civile[.]gouv[.]fr>; Thu, 16 Jul 2026 09[:]22[:]42 +0200 (CEST) Received[:] from mail[.]sigp[.]aviation-civile[.]gouv[.]fr (nexthop-to-vom-10[.]lfpo[.]aviation-civile[.]gouv[.]fr [172[.]16[.]108[.]116]) (using TLSv1[.]2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by relais-vega[.]lfpo[.]aviation-civile[.]gouv[.]fr (ESMTP Aiguilleur_VEGA) with ESMTPS id 3ED316013E for <didier[.]gamiette@aviation-civile[.]gouv[.]fr>; Thu, 16 Jul 2026 09[:]22[:]42 +0200 (CEST) Received[:] from a-vga-mbxdb-1-x[.]dgac[.]aviation (172[.]16[.]108[.]116) by a-vga-mbxdb-1-x[.]dgac[.]aviation (172[.]16[.]108[.]116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]2[.]2562[.]17; Thu, 16 Jul 2026 09[:]07[:]40 +0200 Received[:] from 172[.]16[.]148[.]97 (172[.]16[.]148[.]97) by a-vga-mbxdb-1-x[.]dgac[.]aviation (172[.]16[.]108[.]116) with Microsoft SMTP Server id 15[.]2[.]2562[.]17 via Frontend Transport; Thu, 16 Jul 2026 09[:]07[:]40 +0200 Date[:] Thu, 16 Jul 2026 07[:]06[:]58 +0000 To[:] <didier[.]gamiette@aviation-civile[.]gouv[.]fr> From[:] Surete CANA <sna-rp-cdg-lb-csd@aviation-civile[.]gouv[.]fr> Subject[:] =?UTF-8?Q?[SURETE_du_CANA]_D=C3=A9tails_de_connexion?= Message-ID[:] <5CiL6iDo2yZ21AcAvUeL3Ahnr9ix6XYYISm1OdLs@172[.]16[.]148[.]97> X-Mailer[:] WPMailSMTP/Mailer/smtp 4[.]7[.]1 MIME-Version[:] 1[.]0 Content-Type[:] text/plain; charset="UTF-8" Content-Transfer-Encoding[:] 8bit X-CrossPremisesHeadersFilteredBySendConnector[:] a-vga-mbxdb-1-x[.]dgac[.]aviation X-OrganizationHeadersPreserved[:] a-vga-mbxdb-1-x[.]dgac[.]aviation Return-Path[:] sna-rp-cdg-lb-csd@aviation-civile[.]gouv[.]fr X-MS-Exchange-Organization-ExpirationStartTime[:] 16 Jul 2026 07[:]22[:]42[.]4557 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason[:] OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval[:] 1[:]00[:]00[:]00[.]0000000 X-MS-Exchange-Organization-ExpirationIntervalReason[:] OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id[:] f693799c-7df6-4d57-1892-08dee30b0664 X-EOPAttributedMessage[:] 0 X-MS-Exchange-Organization-MessageDirectionality[:] Originating X-MS-PublicTrafficType[:] Email X-MS-TrafficTypeDiagnostic[:] PA3PEPF000089B9[:]EE_|PARP264MB4615[:]EE_|PAZP264MB3149[:]EE_ X-MS-Exchange-Organization-AuthSource[:] PA3PEPF000089B9[.]FRAP264[.]PROD[.]OUTLOOK[.]COM X-MS-Exchange-Organization-AuthAs[:] Anonymous X-OriginatorOrg[:] dgaviationcivile[.]onmicrosoft[.]com X-MS-Office365-Filtering-Correlation-Id[:] f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-Organization-SCL[:] -1 X-Microsoft-Antispam[:] BCL[:]0;ARA[:]13230040|82310400026|23010399003|56012099006|19002099009|10067099003|18002099003|19620135002; X-Forefront-Antispam-Report[:] CIP[:]143[.]196[.]159[.]101;CTRY[:]FR;LANG[:]fr;SCL[:]-1;SRV[:];IPV[:]NLI;SFV[:]SKA;H[:]a-vga-rvega-3-x[.]dc[.]aviation;PTR[:]gate[.]crna-n[.]aviation-civile[.]gouv[.]fr;CAT[:]NONE;SFS[:](13230040)(82310400026)(23010399003)(56012099006)(19002099009)(10067099003)(18002099003)(19620135002);DIR[:]INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime[:] 16 Jul 2026 07[:]22[:]42[.]4055 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id[:] f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-CrossTenant-Id[:] daacc3b1-3ef7-4603-9782-9b495f0e9313 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp[:] TenantId=daacc3b1-3ef7-4603-9782-9b495f0e9313;Ip=[143[.]196[.]159[.]101];Helo=[a-vga-rvega-3-x[.]dc[.]aviation] X-MS-Exchange-CrossTenant-AuthSource[:] PA3PEPF000089B9[.]FRAP264[.]PROD[.]OUTLOOK[.]COM X-MS-Exchange-CrossTenant-AuthAs[:] Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader[:] HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped[:] PARP264MB4615 X-MS-Exchange-Transport-EndToEndLatency[:] 00[:]00[:]01[.]0681839 X-MS-Exchange-Processed-By-BccFoldering[:] 15[.]21[.]0223[.]005 X-MS-Exchange-ExternalInOutlookResult[:] NotEnabled X-Microsoft-Antispam-Mailbox-Delivery[:] ucf[:]0;jmr[:]0;auth[:]0;dest[:]I;ENG[:](910005)(944506478)(944626604)(4710232)(4999285)(920097)(930201)(20251009189)(140003); X-Microsoft-Antispam-Message-Info[:] =?us-ascii?Q?iWG4NLcD2GUlJHZfugHR2p/F+Jn2gDXP/OVzkghnCJNZLoTS0EL/z3mXRr5r?= =?us-ascii?Q?uybf+f18Wcy/dBOTEgnX00p60Irebo20TLxkevbuurpEMz8WEeOixbQBYouf?= =?us-ascii?Q?yfJVEZyWWiuQ5nUCZaPX22lOo4uvV5kfX17UM+1oRoomyzQDUtTR2Zl56l8W?= =?us-ascii?Q?fmh2bE4fcf0JOcGs2dpPyJ4wvyqmjFvrd3NA5Tqu2/GfOzOD2ZfCvGmdilG8?= =?us-ascii?Q?tfgsj2gTuvUJ7GGQ62xJbi54XBAo3SedcvGJeLlR8mbKarSb1mgZ2pTdIqSo?= =?us-ascii?Q?XA0hbIDBkAhailuQKV5L4z/UFMoVJi9Yl+CwmGmJsoCR1IsfQWHgqsoE9LBL?= =?us-ascii?Q?Cuutl1wuNPNzbLb8/B7d/4qsCr0wn/8Kzv0ZdhH4kIHKwJlNqFD8IJ8n5zcj?= =?us-ascii?Q?9iAXU+WDdNniNM0KUvtWEjPfg8A4vB/dkuJXQ62Zu9DL9+4YE42ZNjk2NHDd?= =?us-ascii?Q?EHFp5x36C5fLcrIFtANzD3n7AI5iJyvEjZhTpdft+R+NXvVeSYv3Gx6xQ2mU?= =?us-ascii?Q?5RHbBsPXYjoV1tqVfyOdbFy0OFdmfuzFFHJXQf3ti9MOlRb35pQWDi7438Wn?= =?us-ascii?Q?wFEb1rEkpIzm5cLwelNyQTxQpnQvForw/OOSdp2c16cU0FWoEk42cceJs7oA?= =?us-ascii?Q?k9RvIuQmIHya6RaeZv06nNDWibevbuW+yXjmvYPwKIPqkG+t8P9dRVjJFuyB?= =?us-ascii?Q?LGuNYDkamRO7SS0R0sKS0+eUzM/576PzgOpCjCnksvSZkVtuQgKSh4P6XLpd?= =?us-ascii?Q?0/5vV6LjcIYaTLXiJLgJ6eTl0dsqNBn/q/I1Ks+wC5UuXiFy5cJ++QA3cgiS?= =?us-ascii?Q?6+cQHw98fvBTZ4V5zG9jFirgmgfujfQumKnzpTWUZvuRZUBmY6oQzKVEpEKc?= =?us-ascii?Q?94kk05Qfhf/tslbaFBf2zx1XfcIf9l2+sZEI3U8Hc+12MyiuFtvLy7X5W6zZ?= =?us-ascii?Q?WlEwg+ggaPLzuVr6gmukjEbXZp5KiIsZypRofxCyQvFX2GkXda6DfQcIWopK?= =?us-ascii?Q?T7G19Zr3NGCmerEY0YRVwrwo/+Se15ejh7LH/k1hPD/gzrXKqD1UeyhAEXb6?= =?us-ascii?Q?sPZVM0wU7ZPnt9LIIBEJXd4ftAfmgRGm0k9U4bmnWB3lEM/0GMCf/yVuVzWg?= =?us-ascii?Q?iKQgKqhvAFRYP4ofVnlBmMPUienpwg3FwSUItMsKD25XRsyRc2AwmUy+qFKD?= =?us-ascii?Q?izAyum18DSqWJfRBOVxquuudxGm9xc2B932ZO9khN69gYHk3rFMP0NRjjnIc?= =?us-ascii?Q?yqbVemZL9iS0+loyKoXHVYknpqV2HnyTpml9cpl3B0SsmHlVXxfdRSzqFtLf?= =?us-ascii?Q?t3icke7gsCBiQ6zyLzkCFWRD5iu+7YHpq4UQqFW35B2GF5HsCxAOsPrrqvl5?= =?us-ascii?Q?V4VPfHWfSEHOJJ+RRtSHXXbaBPxt5rfk9P+19OjWfq/MJpT3/csDZarmvFC0?= =?us-ascii?Q?C3cqPlVjm/5aWMH4qD6DGYYPjvvuAHs8fdhLmiiwDREE0907MDkR42dRGPAm?= =?us-ascii?Q?cREzXtY9QJKHEUKVXGeD7QpGTKzVgNgNmW1SEjMivzC+BMFMIXmq7lq3ihSo?= =?us-ascii?Q?Qkzghogd4ul/s5qLjCFat/JLQln8/nLpPus4J0MovXoOmvhFE77mRgm+eJrJ?= =?us-ascii?Q?yKH+8XSTPF935Xs5VF97gJr2URklJhxgaYfVsuZS34R53h5lACIcrh04xbD5?= =?us-ascii?Q?j6ylUM6LWA/UjgSORydMp6KsG1A/7gSX/lGxwfm9VTvo6j39oyAlh0tinck+?= =?us-ascii?Q?HLxcZh2/NSbmpIK9czuC1A3Hri9oKm0tf+OqWw9M9YzdY9oy9eJshfhR0f8O?= =?us-ascii?Q?d/pRUulzE+Xt/iRhXp3XYybiVE+st9BZbdiSb/KJRIkxd6AobJvlR26eydcQ?= =?us-ascii?Q?DmxzCWiy1+kzbJLkXXzC2XEXC9jDbtSTrWxeIFO9YIMfARugiBSGbVUBJ2md?= =?us-ascii?Q?jvNWSWZ0qT1FKtC5fLdD3W3oWIdm5EAsSy63zDTVXMTqTx+oq69yZYx9kabW?= =?us-ascii?Q?w9T6nENgSLtTWVXFXQjCwIXOMzoCtLU+8K7FQei8aHlOt95Sq7kj4sy296dm?= =?us-ascii?Q?dLRahBLEGwjTqIDm1UOBw0jHAZnM3G6bZf7qHCEwBZPu+sg4ZBKYqQfmnWM2?= =?us-ascii?Q?mQ4CzxKpDBAx1A5hbuuS3QSlKNnuRL15yoSrxHsUm7CGwhx5ewBeUwZtb8Su?= =?us-ascii?Q?drgr1aIr7WJ4HYy3dQAHUZQDYeWTGdeFwhrPB0F80W9MeXJcchmZ3AMv8Mkr?= =?us-ascii?Q?BTv1CtGw2Q623yGim3oIFPdHsS/Q12hovhJVC2F2n1UvdgqUkHlLWbuz+lpu?= =?us-ascii?Q?umP4PG3j8TNwEuMve2h64wxhJVQlIZokwgdHFXj+yI7hOANvcFe8abQ5wFJ8?= =?us-ascii?Q?62pNEYXZ6/21Tv+jk3xaOGqXEr+tKMJ/UoT2GS9pguwNmIFHIVeN+tnjB8pw?= =?us-ascii?Q?lHQFQK6J752jzhgh0/Y5FwiQQQw3sxEtHkxiZGJUNwf2Cb75DfHO4fpZ4QYH?= =?us-ascii?Q?DZGPn9R+hVy/RRI49xNujdMVshOlXJZNrZNEGixfXh9Of+mlovqC83aZsN9X?= =?us-ascii?Q?TaMEyE7x+IEGbNqQb/A=3D?=

Sharing

Copy URL Twitter E-mail

General

Target
http://Received: from PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) by PAZP264MB3149.FRAP264.PROD.OUTLOOK.COM with HTTPS; Thu, 16 Jul 2026 07:22:43 +0000 Received: from PA7P264CA0183.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376::15) by PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Thu, 16 Jul 2026 07:22:42 +0000 Received: from PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376:cafe::a1) by PA7P264CA0183.outlook.office365.com (2603:10a6:102:376::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.12 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Authentication-Results: spf=fail (sender IP is 143.196.159.101) smtp.mailfrom=aviation-civile.gouv.fr; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=aviation-civile.gouv.fr; Received-SPF: Fail (protection.outlook.com: domain of aviation-civile.gouv.fr does not designate 143.196.159.101 as permitted sender) receiver=protection.outlook.com; client-ip=143.196.159.101; helo=a-vga-rvega-3-x.dc.aviation; Received: from a-vga-rvega-3-x.dc.aviation (143.196.159.101) by PA3PEPF000089B9.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Received: from relais-vega.lfpo.aviation-civile.gouv.fr (unknown [172.16.212.31]) by a-vga-rvega-3-x.dc.aviation (Relais VEGA PROD (Postfix)) with ESMTPS id 491042000D for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from relais-vega.lfpo.aviation-civile.gouv.fr (a-vga-relais-02-x.sigp.aviation [172.16.212.31]) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP All_to_VEGA) with ESMTP id 4094E60140 for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from mail.sigp.aviation-civile.gouv.fr (nexthop-to-vom-10.lfpo.aviation-civile.gouv.fr [172.16.108.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP Aiguilleur_VEGA) with ESMTPS id 3ED316013E for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.17; Thu, 16 Jul 2026 09:07:40 +0200 Received: from 172.16.148.97 (172.16.148.97) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server id 15.2.2562.17 via Frontend Transport; Thu, 16 Jul 2026 09:07:40 +0200 Date: Thu, 16 Jul 2026 07:06:58 +0000 To: <[email protected]> From: Surete CANA <[email protected]> Subject: =?UTF-8?Q?[SURETE_du_CANA]_D=C3=A9tails_de_connexion?= Message-ID: <[email protected]> X-Mailer: WPMailSMTP/Mailer/smtp 4.7.1 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-CrossPremisesHeadersFilteredBySendConnector: a-vga-mbxdb-1-x.dgac.aviation X-OrganizationHeadersPreserved: a-vga-mbxdb-1-x.dgac.aviation Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 16 Jul 2026 07:22:42.4557 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-EOPAttributedMessage: 0 X-MS-Exchange-Organization-MessageDirectionality: Originating X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PA3PEPF000089B9:EE_|PARP264MB4615:EE_|PAZP264MB3149:EE_ X-MS-Exchange-Organization-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-Organization-AuthAs: Anonymous X-OriginatorOrg: dgaviationcivile.onmicrosoft.com X-MS-Office365-Filtering-Correlation-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-Organization-SCL: -1 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|23010399003|56012099006|19002099009|10067099003|18002099003|19620135002; X-Forefront-Antispam-Report: CIP:143.196.159.101;CTRY:FR;LANG:fr;SCL:-1;SRV:;IPV:NLI;SFV:SKA;H:a-vga-rvega-3-x.dc.aviation;PTR:gate.crna-n.aviation-civile.gouv.fr;CAT:NONE;SFS:(13230040)(82310400026)(23010399003)(56012099006)(19002099009)(10067099003)(18002099003)(19620135002);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jul 2026 07:22:42.4055 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-CrossTenant-Id: daacc3b1-3ef7-4603-9782-9b495f0e9313 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=daacc3b1-3ef7-4603-9782-9b495f0e9313;Ip=[143.196.159.101];Helo=[a-vga-rvega-3-x.dc.aviation] X-MS-Exchange-CrossTenant-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PARP264MB4615 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0681839 X-MS-Exchange-Processed-By-BccFoldering: 15.21.0223.005 X-MS-Exchange-ExternalInOutlookResult: NotEnabled X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(4710232)(4999285)(920097)(930201)(20251009189)(140003); X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?iWG4NLcD2GUlJHZfugHR2p/F+Jn2gDXP/OVzkghnCJNZLoTS0EL/z3mXRr5r?= =?us-ascii?Q?uybf+f18Wcy/dBOTEgnX00p60Irebo20TLxkevbuurpEMz8WEeOixbQBYouf?= =?us-ascii?Q?yfJVEZyWWiuQ5nUCZaPX22lOo4uvV5kfX17UM+1oRoomyzQDUtTR2Zl56l8W?= =?us-ascii?Q?fmh2bE4fcf0JOcGs2dpPyJ4wvyqmjFvrd3NA5Tqu2/GfOzOD2ZfCvGmdilG8?= =?us-ascii?Q?tfgsj2gTuvUJ7GGQ62xJbi54XBAo3SedcvGJeLlR8mbKarSb1mgZ2pTdIqSo?= =?us-ascii?Q?XA0hbIDBkAhailuQKV5L4z/UFMoVJi9Yl+CwmGmJsoCR1IsfQWHgqsoE9LBL?= =?us-ascii?Q?Cuutl1wuNPNzbLb8/B7d/4qsCr0wn/8Kzv0ZdhH4kIHKwJlNqFD8IJ8n5zcj?= =?us-ascii?Q?9iAXU+WDdNniNM0KUvtWEjPfg8A4vB/dkuJXQ62Zu9DL9+4YE42ZNjk2NHDd?= =?us-ascii?Q?EHFp5x36C5fLcrIFtANzD3n7AI5iJyvEjZhTpdft+R+NXvVeSYv3Gx6xQ2mU?= =?us-ascii?Q?5RHbBsPXYjoV1tqVfyOdbFy0OFdmfuzFFHJXQf3ti9MOlRb35pQWDi7438Wn?= =?us-ascii?Q?wFEb1rEkpIzm5cLwelNyQTxQpnQvForw/OOSdp2c16cU0FWoEk42cceJs7oA?= =?us-ascii?Q?k9RvIuQmIHya6RaeZv06nNDWibevbuW+yXjmvYPwKIPqkG+t8P9dRVjJFuyB?= =?us-ascii?Q?LGuNYDkamRO7SS0R0sKS0+eUzM/576PzgOpCjCnksvSZkVtuQgKSh4P6XLpd?= =?us-ascii?Q?0/5vV6LjcIYaTLXiJLgJ6eTl0dsqNBn/q/I1Ks+wC5UuXiFy5cJ++QA3cgiS?= =?us-ascii?Q?6+cQHw98fvBTZ4V5zG9jFirgmgfujfQumKnzpTWUZvuRZUBmY6oQzKVEpEKc?= =?us-ascii?Q?94kk05Qfhf/tslbaFBf2zx1XfcIf9l2+sZEI3U8Hc+12MyiuFtvLy7X5W6zZ?= =?us-ascii?Q?WlEwg+ggaPLzuVr6gmukjEbXZp5KiIsZypRofxCyQvFX2GkXda6DfQcIWopK?= =?us-ascii?Q?T7G19Zr3NGCmerEY0YRVwrwo/+Se15ejh7LH/k1hPD/gzrXKqD1UeyhAEXb6?= =?us-ascii?Q?sPZVM0wU7ZPnt9LIIBEJXd4ftAfmgRGm0k9U4bmnWB3lEM/0GMCf/yVuVzWg?= =?us-ascii?Q?iKQgKqhvAFRYP4ofVnlBmMPUienpwg3FwSUItMsKD25XRsyRc2AwmUy+qFKD?= =?us-ascii?Q?izAyum18DSqWJfRBOVxquuudxGm9xc2B932ZO9khN69gYHk3rFMP0NRjjnIc?= =?us-ascii?Q?yqbVemZL9iS0+loyKoXHVYknpqV2HnyTpml9cpl3B0SsmHlVXxfdRSzqFtLf?= =?us-ascii?Q?t3icke7gsCBiQ6zyLzkCFWRD5iu+7YHpq4UQqFW35B2GF5HsCxAOsPrrqvl5?= =?us-ascii?Q?V4VPfHWfSEHOJJ+RRtSHXXbaBPxt5rfk9P+19OjWfq/MJpT3/csDZarmvFC0?= =?us-ascii?Q?C3cqPlVjm/5aWMH4qD6DGYYPjvvuAHs8fdhLmiiwDREE0907MDkR42dRGPAm?= =?us-ascii?Q?cREzXtY9QJKHEUKVXGeD7QpGTKzVgNgNmW1SEjMivzC+BMFMIXmq7lq3ihSo?= =?us-ascii?Q?Qkzghogd4ul/s5qLjCFat/JLQln8/nLpPus4J0MovXoOmvhFE77mRgm+eJrJ?= =?us-ascii?Q?yKH+8XSTPF935Xs5VF97gJr2URklJhxgaYfVsuZS34R53h5lACIcrh04xbD5?= =?us-ascii?Q?j6ylUM6LWA/UjgSORydMp6KsG1A/7gSX/lGxwfm9VTvo6j39oyAlh0tinck+?= =?us-ascii?Q?HLxcZh2/NSbmpIK9czuC1A3Hri9oKm0tf+OqWw9M9YzdY9oy9eJshfhR0f8O?= =?us-ascii?Q?d/pRUulzE+Xt/iRhXp3XYybiVE+st9BZbdiSb/KJRIkxd6AobJvlR26eydcQ?= =?us-ascii?Q?DmxzCWiy1+kzbJLkXXzC2XEXC9jDbtSTrWxeIFO9YIMfARugiBSGbVUBJ2md?= =?us-ascii?Q?jvNWSWZ0qT1FKtC5fLdD3W3oWIdm5EAsSy63zDTVXMTqTx+oq69yZYx9kabW?= =?us-ascii?Q?w9T6nENgSLtTWVXFXQjCwIXOMzoCtLU+8K7FQei8aHlOt95Sq7kj4sy296dm?= =?us-ascii?Q?dLRahBLEGwjTqIDm1UOBw0jHAZnM3G6bZf7qHCEwBZPu+sg4ZBKYqQfmnWM2?= =?us-ascii?Q?mQ4CzxKpDBAx1A5hbuuS3QSlKNnuRL15yoSrxHsUm7CGwhx5ewBeUwZtb8Su?= =?us-ascii?Q?drgr1aIr7WJ4HYy3dQAHUZQDYeWTGdeFwhrPB0F80W9MeXJcchmZ3AMv8Mkr?= =?us-ascii?Q?BTv1CtGw2Q623yGim3oIFPdHsS/Q12hovhJVC2F2n1UvdgqUkHlLWbuz+lpu?= =?us-ascii?Q?umP4PG3j8TNwEuMve2h64wxhJVQlIZokwgdHFXj+yI7hOANvcFe8abQ5wFJ8?= =?us-ascii?Q?62pNEYXZ6/21Tv+jk3xaOGqXEr+tKMJ/UoT2GS9pguwNmIFHIVeN+tnjB8pw?= =?us-ascii?Q?lHQFQK6J752jzhgh0/Y5FwiQQQw3sxEtHkxiZGJUNwf2Cb75DfHO4fpZ4QYH?= =?us-ascii?Q?DZGPn9R+hVy/RRI49xNujdMVshOlXJZNrZNEGixfXh9Of+mlovqC83aZsN9X?= =?us-ascii?Q?TaMEyE7x+IEGbNqQb/A=3D?=
Sample260721-jrwpaaas4m

Score

6^/10

discovery

Behavioral task

behavioral1

Sample

http://Received: from PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) by PAZP264MB3149.FRAP264.PROD.OUTLOOK.COM with HTTPS; Thu, 16 Jul 2026 07:22:43 +0000 Received: from PA7P264CA0183.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376::15) by PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Thu, 16 Jul 2026 07:22:42 +0000 Received: from PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376:cafe::a1) by PA7P264CA0183.outlook.office365.com (2603:10a6:102:376::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.12 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Authentication-Results: spf=fail (sender IP is 143.196.159.101) smtp.mailfrom=aviation-civile.gouv.fr; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=aviation-civile.gouv.fr; Received-SPF: Fail (protection.outlook.com: domain of aviation-civile.gouv.fr does not designate 143.196.159.101 as permitted sender) receiver=protection.outlook.com; client-ip=143.196.159.101; helo=a-vga-rvega-3-x.dc.aviation; Received: from a-vga-rvega-3-x.dc.aviation (143.196.159.101) by PA3PEPF000089B9.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Received: from relais-vega.lfpo.aviation-civile.gouv.fr (unknown [172.16.212.31]) by a-vga-rvega-3-x.dc.aviation (Relais VEGA PROD (Postfix)) with ESMTPS id 491042000D for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from relais-vega.lfpo.aviation-civile.gouv.fr (a-vga-relais-02-x.sigp.aviation [172.16.212.31]) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP All_to_VEGA) with ESMTP id 4094E60140 for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from mail.sigp.aviation-civile.gouv.fr (nexthop-to-vom-10.lfpo.aviation-civile.gouv.fr [172.16.108.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP Aiguilleur_VEGA) with ESMTPS id 3ED316013E for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.17; Thu, 16 Jul 2026 09:07:40 +0200 Received: from 172.16.148.97 (172.16.148.97) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server id 15.2.2562.17 via Frontend Transport; Thu, 16 Jul 2026 09:07:40 +0200 Date: Thu, 16 Jul 2026 07:06:58 +0000 To: <[email protected]> From: Surete CANA <[email protected]> Subject: =?UTF-8?Q?[SURETE_du_CANA]_D=C3=A9tails_de_connexion?= Message-ID: <[email protected]> X-Mailer: WPMailSMTP/Mailer/smtp 4.7.1 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-CrossPremisesHeadersFilteredBySendConnector: a-vga-mbxdb-1-x.dgac.aviation X-OrganizationHeadersPreserved: a-vga-mbxdb-1-x.dgac.aviation Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 16 Jul 2026 07:22:42.4557 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-EOPAttributedMessage: 0 X-MS-Exchange-Organization-MessageDirectionality: Originating X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PA3PEPF000089B9:EE_|PARP264MB4615:EE_|PAZP264MB3149:EE_ X-MS-Exchange-Organization-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-Organization-AuthAs: Anonymous X-OriginatorOrg: dgaviationcivile.onmicrosoft.com X-MS-Office365-Filtering-Correlation-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-Organization-SCL: -1 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|23010399003|56012099006|19002099009|10067099003|18002099003|19620135002; X-Forefront-Antispam-Report: CIP:143.196.159.101;CTRY:FR;LANG:fr;SCL:-1;SRV:;IPV:NLI;SFV:SKA;H:a-vga-rvega-3-x.dc.aviation;PTR:gate.crna-n.aviation-civile.gouv.fr;CAT:NONE;SFS:(13230040)(82310400026)(23010399003)(56012099006)(19002099009)(10067099003)(18002099003)(19620135002);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jul 2026 07:22:42.4055 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-CrossTenant-Id: daacc3b1-3ef7-4603-9782-9b495f0e9313 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=daacc3b1-3ef7-4603-9782-9b495f0e9313;Ip=[143.196.159.101];Helo=[a-vga-rvega-3-x.dc.aviation] X-MS-Exchange-CrossTenant-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PARP264MB4615 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0681839 X-MS-Exchange-Processed-By-BccFoldering: 15.21.0223.005 X-MS-Exchange-ExternalInOutlookResult: NotEnabled X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(4710232)(4999285)(920097)(930201)(20251009189)(140003); X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?iWG4NLcD2GUlJHZfugHR2p/F+Jn2gDXP/OVzkghnCJNZLoTS0EL/z3mXRr5r?= =?us-ascii?Q?uybf+f18Wcy/dBOTEgnX00p60Irebo20TLxkevbuurpEMz8WEeOixbQBYouf?= =?us-ascii?Q?yfJVEZyWWiuQ5nUCZaPX22lOo4uvV5kfX17UM+1oRoomyzQDUtTR2Zl56l8W?= =?us-ascii?Q?fmh2bE4fcf0JOcGs2dpPyJ4wvyqmjFvrd3NA5Tqu2/GfOzOD2ZfCvGmdilG8?= =?us-ascii?Q?tfgsj2gTuvUJ7GGQ62xJbi54XBAo3SedcvGJeLlR8mbKarSb1mgZ2pTdIqSo?= =?us-ascii?Q?XA0hbIDBkAhailuQKV5L4z/UFMoVJi9Yl+CwmGmJsoCR1IsfQWHgqsoE9LBL?= =?us-ascii?Q?Cuutl1wuNPNzbLb8/B7d/4qsCr0wn/8Kzv0ZdhH4kIHKwJlNqFD8IJ8n5zcj?= =?us-ascii?Q?9iAXU+WDdNniNM0KUvtWEjPfg8A4vB/dkuJXQ62Zu9DL9+4YE42ZNjk2NHDd?= =?us-ascii?Q?EHFp5x36C5fLcrIFtANzD3n7AI5iJyvEjZhTpdft+R+NXvVeSYv3Gx6xQ2mU?= =?us-ascii?Q?5RHbBsPXYjoV1tqVfyOdbFy0OFdmfuzFFHJXQf3ti9MOlRb35pQWDi7438Wn?= =?us-ascii?Q?wFEb1rEkpIzm5cLwelNyQTxQpnQvForw/OOSdp2c16cU0FWoEk42cceJs7oA?= =?us-ascii?Q?k9RvIuQmIHya6RaeZv06nNDWibevbuW+yXjmvYPwKIPqkG+t8P9dRVjJFuyB?= =?us-ascii?Q?LGuNYDkamRO7SS0R0sKS0+eUzM/576PzgOpCjCnksvSZkVtuQgKSh4P6XLpd?= =?us-ascii?Q?0/5vV6LjcIYaTLXiJLgJ6eTl0dsqNBn/q/I1Ks+wC5UuXiFy5cJ++QA3cgiS?= =?us-ascii?Q?6+cQHw98fvBTZ4V5zG9jFirgmgfujfQumKnzpTWUZvuRZUBmY6oQzKVEpEKc?= =?us-ascii?Q?94kk05Qfhf/tslbaFBf2zx1XfcIf9l2+sZEI3U8Hc+12MyiuFtvLy7X5W6zZ?= =?us-ascii?Q?WlEwg+ggaPLzuVr6gmukjEbXZp5KiIsZypRofxCyQvFX2GkXda6DfQcIWopK?= =?us-ascii?Q?T7G19Zr3NGCmerEY0YRVwrwo/+Se15ejh7LH/k1hPD/gzrXKqD1UeyhAEXb6?= =?us-ascii?Q?sPZVM0wU7ZPnt9LIIBEJXd4ftAfmgRGm0k9U4bmnWB3lEM/0GMCf/yVuVzWg?= =?us-ascii?Q?iKQgKqhvAFRYP4ofVnlBmMPUienpwg3FwSUItMsKD25XRsyRc2AwmUy+qFKD?= =?us-ascii?Q?izAyum18DSqWJfRBOVxquuudxGm9xc2B932ZO9khN69gYHk3rFMP0NRjjnIc?= =?us-ascii?Q?yqbVemZL9iS0+loyKoXHVYknpqV2HnyTpml9cpl3B0SsmHlVXxfdRSzqFtLf?= =?us-ascii?Q?t3icke7gsCBiQ6zyLzkCFWRD5iu+7YHpq4UQqFW35B2GF5HsCxAOsPrrqvl5?= =?us-ascii?Q?V4VPfHWfSEHOJJ+RRtSHXXbaBPxt5rfk9P+19OjWfq/MJpT3/csDZarmvFC0?= =?us-ascii?Q?C3cqPlVjm/5aWMH4qD6DGYYPjvvuAHs8fdhLmiiwDREE0907MDkR42dRGPAm?= =?us-ascii?Q?cREzXtY9QJKHEUKVXGeD7QpGTKzVgNgNmW1SEjMivzC+BMFMIXmq7lq3ihSo?= =?us-ascii?Q?Qkzghogd4ul/s5qLjCFat/JLQln8/nLpPus4J0MovXoOmvhFE77mRgm+eJrJ?= =?us-ascii?Q?yKH+8XSTPF935Xs5VF97gJr2URklJhxgaYfVsuZS34R53h5lACIcrh04xbD5?= =?us-ascii?Q?j6ylUM6LWA/UjgSORydMp6KsG1A/7gSX/lGxwfm9VTvo6j39oyAlh0tinck+?= =?us-ascii?Q?HLxcZh2/NSbmpIK9czuC1A3Hri9oKm0tf+OqWw9M9YzdY9oy9eJshfhR0f8O?= =?us-ascii?Q?d/pRUulzE+Xt/iRhXp3XYybiVE+st9BZbdiSb/KJRIkxd6AobJvlR26eydcQ?= =?us-ascii?Q?DmxzCWiy1+kzbJLkXXzC2XEXC9jDbtSTrWxeIFO9YIMfARugiBSGbVUBJ2md?= =?us-ascii?Q?jvNWSWZ0qT1FKtC5fLdD3W3oWIdm5EAsSy63zDTVXMTqTx+oq69yZYx9kabW?= =?us-ascii?Q?w9T6nENgSLtTWVXFXQjCwIXOMzoCtLU+8K7FQei8aHlOt95Sq7kj4sy296dm?= =?us-ascii?Q?dLRahBLEGwjTqIDm1UOBw0jHAZnM3G6bZf7qHCEwBZPu+sg4ZBKYqQfmnWM2?= =?us-ascii?Q?mQ4CzxKpDBAx1A5hbuuS3QSlKNnuRL15yoSrxHsUm7CGwhx5ewBeUwZtb8Su?= =?us-ascii?Q?drgr1aIr7WJ4HYy3dQAHUZQDYeWTGdeFwhrPB0F80W9MeXJcchmZ3AMv8Mkr?= =?us-ascii?Q?BTv1CtGw2Q623yGim3oIFPdHsS/Q12hovhJVC2F2n1UvdgqUkHlLWbuz+lpu?= =?us-ascii?Q?umP4PG3j8TNwEuMve2h64wxhJVQlIZokwgdHFXj+yI7hOANvcFe8abQ5wFJ8?= =?us-ascii?Q?62pNEYXZ6/21Tv+jk3xaOGqXEr+tKMJ/UoT2GS9pguwNmIFHIVeN+tnjB8pw?= =?us-ascii?Q?lHQFQK6J752jzhgh0/Y5FwiQQQw3sxEtHkxiZGJUNwf2Cb75DfHO4fpZ4QYH?= =?us-ascii?Q?DZGPn9R+hVy/RRI49xNujdMVshOlXJZNrZNEGixfXh9Of+mlovqC83aZsN9X?= =?us-ascii?Q?TaMEyE7x+IEGbNqQb/A=3D?=

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery

Malware Config

Targets

- Target
  http://Received: from PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) by PAZP264MB3149.FRAP264.PROD.OUTLOOK.COM with HTTPS; Thu, 16 Jul 2026 07:22:43 +0000 Received: from PA7P264CA0183.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376::15) by PARP264MB4615.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:42f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.223.12; Thu, 16 Jul 2026 07:22:42 +0000 Received: from PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:376:cafe::a1) by PA7P264CA0183.outlook.office365.com (2603:10a6:102:376::15) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.223.12 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Authentication-Results: spf=fail (sender IP is 143.196.159.101) smtp.mailfrom=aviation-civile.gouv.fr; dkim=none (message not signed) header.d=none;dmarc=fail action=oreject header.from=aviation-civile.gouv.fr; Received-SPF: Fail (protection.outlook.com: domain of aviation-civile.gouv.fr does not designate 143.196.159.101 as permitted sender) receiver=protection.outlook.com; client-ip=143.196.159.101; helo=a-vga-rvega-3-x.dc.aviation; Received: from a-vga-rvega-3-x.dc.aviation (143.196.159.101) by PA3PEPF000089B9.mail.protection.outlook.com (10.167.242.21) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.245.5 via Frontend Transport; Thu, 16 Jul 2026 07:22:42 +0000 Received: from relais-vega.lfpo.aviation-civile.gouv.fr (unknown [172.16.212.31]) by a-vga-rvega-3-x.dc.aviation (Relais VEGA PROD (Postfix)) with ESMTPS id 491042000D for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from relais-vega.lfpo.aviation-civile.gouv.fr (a-vga-relais-02-x.sigp.aviation [172.16.212.31]) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP All_to_VEGA) with ESMTP id 4094E60140 for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from mail.sigp.aviation-civile.gouv.fr (nexthop-to-vom-10.lfpo.aviation-civile.gouv.fr [172.16.108.116]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by relais-vega.lfpo.aviation-civile.gouv.fr (ESMTP Aiguilleur_VEGA) with ESMTPS id 3ED316013E for <[email protected]>; Thu, 16 Jul 2026 09:22:42 +0200 (CEST) Received: from a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.17; Thu, 16 Jul 2026 09:07:40 +0200 Received: from 172.16.148.97 (172.16.148.97) by a-vga-mbxdb-1-x.dgac.aviation (172.16.108.116) with Microsoft SMTP Server id 15.2.2562.17 via Frontend Transport; Thu, 16 Jul 2026 09:07:40 +0200 Date: Thu, 16 Jul 2026 07:06:58 +0000 To: <[email protected]> From: Surete CANA <[email protected]> Subject: =?UTF-8?Q?[SURETE_du_CANA]_D=C3=A9tails_de_connexion?= Message-ID: <[email protected]> X-Mailer: WPMailSMTP/Mailer/smtp 4.7.1 MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-CrossPremisesHeadersFilteredBySendConnector: a-vga-mbxdb-1-x.dgac.aviation X-OrganizationHeadersPreserved: a-vga-mbxdb-1-x.dgac.aviation Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 16 Jul 2026 07:22:42.4557 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-EOPAttributedMessage: 0 X-MS-Exchange-Organization-MessageDirectionality: Originating X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: PA3PEPF000089B9:EE_|PARP264MB4615:EE_|PAZP264MB3149:EE_ X-MS-Exchange-Organization-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-Organization-AuthAs: Anonymous X-OriginatorOrg: dgaviationcivile.onmicrosoft.com X-MS-Office365-Filtering-Correlation-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-Organization-SCL: -1 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|23010399003|56012099006|19002099009|10067099003|18002099003|19620135002; X-Forefront-Antispam-Report: CIP:143.196.159.101;CTRY:FR;LANG:fr;SCL:-1;SRV:;IPV:NLI;SFV:SKA;H:a-vga-rvega-3-x.dc.aviation;PTR:gate.crna-n.aviation-civile.gouv.fr;CAT:NONE;SFS:(13230040)(82310400026)(23010399003)(56012099006)(19002099009)(10067099003)(18002099003)(19620135002);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jul 2026 07:22:42.4055 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f693799c-7df6-4d57-1892-08dee30b0664 X-MS-Exchange-CrossTenant-Id: daacc3b1-3ef7-4603-9782-9b495f0e9313 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=daacc3b1-3ef7-4603-9782-9b495f0e9313;Ip=[143.196.159.101];Helo=[a-vga-rvega-3-x.dc.aviation] X-MS-Exchange-CrossTenant-AuthSource: PA3PEPF000089B9.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PARP264MB4615 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.0681839 X-MS-Exchange-Processed-By-BccFoldering: 15.21.0223.005 X-MS-Exchange-ExternalInOutlookResult: NotEnabled X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(4710232)(4999285)(920097)(930201)(20251009189)(140003); X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?iWG4NLcD2GUlJHZfugHR2p/F+Jn2gDXP/OVzkghnCJNZLoTS0EL/z3mXRr5r?= =?us-ascii?Q?uybf+f18Wcy/dBOTEgnX00p60Irebo20TLxkevbuurpEMz8WEeOixbQBYouf?= =?us-ascii?Q?yfJVEZyWWiuQ5nUCZaPX22lOo4uvV5kfX17UM+1oRoomyzQDUtTR2Zl56l8W?= =?us-ascii?Q?fmh2bE4fcf0JOcGs2dpPyJ4wvyqmjFvrd3NA5Tqu2/GfOzOD2ZfCvGmdilG8?= =?us-ascii?Q?tfgsj2gTuvUJ7GGQ62xJbi54XBAo3SedcvGJeLlR8mbKarSb1mgZ2pTdIqSo?= =?us-ascii?Q?XA0hbIDBkAhailuQKV5L4z/UFMoVJi9Yl+CwmGmJsoCR1IsfQWHgqsoE9LBL?= =?us-ascii?Q?Cuutl1wuNPNzbLb8/B7d/4qsCr0wn/8Kzv0ZdhH4kIHKwJlNqFD8IJ8n5zcj?= =?us-ascii?Q?9iAXU+WDdNniNM0KUvtWEjPfg8A4vB/dkuJXQ62Zu9DL9+4YE42ZNjk2NHDd?= =?us-ascii?Q?EHFp5x36C5fLcrIFtANzD3n7AI5iJyvEjZhTpdft+R+NXvVeSYv3Gx6xQ2mU?= =?us-ascii?Q?5RHbBsPXYjoV1tqVfyOdbFy0OFdmfuzFFHJXQf3ti9MOlRb35pQWDi7438Wn?= =?us-ascii?Q?wFEb1rEkpIzm5cLwelNyQTxQpnQvForw/OOSdp2c16cU0FWoEk42cceJs7oA?= =?us-ascii?Q?k9RvIuQmIHya6RaeZv06nNDWibevbuW+yXjmvYPwKIPqkG+t8P9dRVjJFuyB?= =?us-ascii?Q?LGuNYDkamRO7SS0R0sKS0+eUzM/576PzgOpCjCnksvSZkVtuQgKSh4P6XLpd?= =?us-ascii?Q?0/5vV6LjcIYaTLXiJLgJ6eTl0dsqNBn/q/I1Ks+wC5UuXiFy5cJ++QA3cgiS?= =?us-ascii?Q?6+cQHw98fvBTZ4V5zG9jFirgmgfujfQumKnzpTWUZvuRZUBmY6oQzKVEpEKc?= =?us-ascii?Q?94kk05Qfhf/tslbaFBf2zx1XfcIf9l2+sZEI3U8Hc+12MyiuFtvLy7X5W6zZ?= =?us-ascii?Q?WlEwg+ggaPLzuVr6gmukjEbXZp5KiIsZypRofxCyQvFX2GkXda6DfQcIWopK?= =?us-ascii?Q?T7G19Zr3NGCmerEY0YRVwrwo/+Se15ejh7LH/k1hPD/gzrXKqD1UeyhAEXb6?= =?us-ascii?Q?sPZVM0wU7ZPnt9LIIBEJXd4ftAfmgRGm0k9U4bmnWB3lEM/0GMCf/yVuVzWg?= =?us-ascii?Q?iKQgKqhvAFRYP4ofVnlBmMPUienpwg3FwSUItMsKD25XRsyRc2AwmUy+qFKD?= =?us-ascii?Q?izAyum18DSqWJfRBOVxquuudxGm9xc2B932ZO9khN69gYHk3rFMP0NRjjnIc?= =?us-ascii?Q?yqbVemZL9iS0+loyKoXHVYknpqV2HnyTpml9cpl3B0SsmHlVXxfdRSzqFtLf?= =?us-ascii?Q?t3icke7gsCBiQ6zyLzkCFWRD5iu+7YHpq4UQqFW35B2GF5HsCxAOsPrrqvl5?= =?us-ascii?Q?V4VPfHWfSEHOJJ+RRtSHXXbaBPxt5rfk9P+19OjWfq/MJpT3/csDZarmvFC0?= =?us-ascii?Q?C3cqPlVjm/5aWMH4qD6DGYYPjvvuAHs8fdhLmiiwDREE0907MDkR42dRGPAm?= =?us-ascii?Q?cREzXtY9QJKHEUKVXGeD7QpGTKzVgNgNmW1SEjMivzC+BMFMIXmq7lq3ihSo?= =?us-ascii?Q?Qkzghogd4ul/s5qLjCFat/JLQln8/nLpPus4J0MovXoOmvhFE77mRgm+eJrJ?= =?us-ascii?Q?yKH+8XSTPF935Xs5VF97gJr2URklJhxgaYfVsuZS34R53h5lACIcrh04xbD5?= =?us-ascii?Q?j6ylUM6LWA/UjgSORydMp6KsG1A/7gSX/lGxwfm9VTvo6j39oyAlh0tinck+?= =?us-ascii?Q?HLxcZh2/NSbmpIK9czuC1A3Hri9oKm0tf+OqWw9M9YzdY9oy9eJshfhR0f8O?= =?us-ascii?Q?d/pRUulzE+Xt/iRhXp3XYybiVE+st9BZbdiSb/KJRIkxd6AobJvlR26eydcQ?= =?us-ascii?Q?DmxzCWiy1+kzbJLkXXzC2XEXC9jDbtSTrWxeIFO9YIMfARugiBSGbVUBJ2md?= =?us-ascii?Q?jvNWSWZ0qT1FKtC5fLdD3W3oWIdm5EAsSy63zDTVXMTqTx+oq69yZYx9kabW?= =?us-ascii?Q?w9T6nENgSLtTWVXFXQjCwIXOMzoCtLU+8K7FQei8aHlOt95Sq7kj4sy296dm?= =?us-ascii?Q?dLRahBLEGwjTqIDm1UOBw0jHAZnM3G6bZf7qHCEwBZPu+sg4ZBKYqQfmnWM2?= =?us-ascii?Q?mQ4CzxKpDBAx1A5hbuuS3QSlKNnuRL15yoSrxHsUm7CGwhx5ewBeUwZtb8Su?= =?us-ascii?Q?drgr1aIr7WJ4HYy3dQAHUZQDYeWTGdeFwhrPB0F80W9MeXJcchmZ3AMv8Mkr?= =?us-ascii?Q?BTv1CtGw2Q623yGim3oIFPdHsS/Q12hovhJVC2F2n1UvdgqUkHlLWbuz+lpu?= =?us-ascii?Q?umP4PG3j8TNwEuMve2h64wxhJVQlIZokwgdHFXj+yI7hOANvcFe8abQ5wFJ8?= =?us-ascii?Q?62pNEYXZ6/21Tv+jk3xaOGqXEr+tKMJ/UoT2GS9pguwNmIFHIVeN+tnjB8pw?= =?us-ascii?Q?lHQFQK6J752jzhgh0/Y5FwiQQQw3sxEtHkxiZGJUNwf2Cb75DfHO4fpZ4QYH?= =?us-ascii?Q?DZGPn9R+hVy/RRI49xNujdMVshOlXJZNrZNEGixfXh9Of+mlovqC83aZsN9X?= =?us-ascii?Q?TaMEyE7x+IEGbNqQb/A=3D?=
Score

6^/10

discovery
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1