Bitcoin Paypal Phish from Microsoft Outlook Part 2
Posted by Dave Yadallee on
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?blJLY3JUajhwcHhqbGMxSEZzb2JNZ01SNnpTL05maHJ4WVRXbTBXVmFJeEdz?=
=?utf-8?B?TEppU21ORExReko3S3VhVllTYXYzM2x4ZUNsTkRZUGtEaEZqOVBqWmVjTzI0?=
=?utf-8?B?RWRGSnhnMURiMGY3Zm9ORG03NWF1OWFrNzFITCtwVTc0K2d5aXhab2xmOC9z?=
=?utf-8?B?ZDVkWEZaQXo5MHE4RitPWTFNKzAzdEpUUEVaOWdJbExyREdwSmZGbmVrRUlR?=
=?utf-8?B?SGpWZlBvVFZKbTlGYmx1VGZlbnRueHFOK1FaMVV2YWdkQndONlFBYkJ6Tk1o?=
=?utf-8?B?U0ROcXdBRGh5MEhzdlViL00rNG4ybWVnbUdYQzh2MHlBcTB2eXdZRGtRWC9x?=
=?utf-8?B?WjVvT2srdXFkWXlEUGQ4NEM0S1dmU1k0WU9zMHZjRENLWi9hT1UyeEVkSFVx?=
=?utf-8?B?M29lSFBtd2lzbUppL1F2SnhXTUsrQXhjTGpVOTllSFhCSkQwVDVHbkx4UVk0?=
=?utf-8?B?YXJtblZISllWdGFRci9melZVbTN3cDNLZks1WDdZYnE5YVFpZzljdlZ5N3V1?=
=?utf-8?B?b0txUkNLRTlicWhBYUJSWTZhRWp5S2l4ekthbEk4aGZWSW5pd1VPVXdNVUtm?=
=?utf-8?B?LzhrZjFYR3VmQnl6anJzdFFwY0lzNktIUUNMWWEyR3NOd1oweit1RWEyNHFR?=
=?utf-8?B?NnVpN3RCYTFEdGNpNGhJcEdLVXlQcFZCZ2UyeUt5R251SXp6QWZQVlJNUEFR?=
=?utf-8?B?WnkwWThteWpkRkFKVEZHZytyRjBZVGE2dngwSzRJU0hDSmhWNVluYVdOWDBz?=
=?utf-8?B?K0QwaVpPRXpsaWRvd0w0WmlCd2ZVV2M1ZWdoN2tkSm5pRHhCd25pTWhaeVBv?=
=?utf-8?B?TkZWZ2o2ZUNCNXl1SHBzazRaTk9IS21Deml5aDNQMlQ3eXdCM2ZzdnpzWm9E?=
=?utf-8?B?c2tseUw5NUgraFcwcmp3bG11b2FWVnZQNVpPREtnVXJ6SmMzTVNENDBNZWMr?=
=?utf-8?B?bERma2w0MFdxWXF2M1pLamxnSFZkM2dteUdJQTg0TGZhVGJDRGMxUmp3aEpC?=
=?utf-8?B?NWFkSVYyMXdnZ21aTTlTRmV2RnhlbTkwWnpQY1BYYU95ZHV1bjJ3alBUT3dT?=
=?utf-8?B?RE9VdG9vcUhkQlY0RmRjekJTZER1R2l0TGNLYW9jcEwvUVBzWXlKTm9FbklG?=
=?utf-8?B?Ty9RVU5EajUyeHJEK1VycHdCMmhhWWJ5VjBJbnpyUHNiME9Pakdxa2FGN1ZQ?=
=?utf-8?B?ZWZublNMZ3JkdklKNFdrWW1VRzNmNjRkL3ljcDQvb3F2VURvaUNuNWM2SS9P?=
=?utf-8?B?U09FTTFGTWxTOTZGY0lZbUdYdzBBSnd1cS9uOW1ONm03ODc1Z1lUZkUyUHpl?=
=?utf-8?B?K1NIdkthNWFTTlhqZWtCQXo0cXNzenNuL2VRWitTSkhnREY3QkJxWFNtZ1FI?=
=?utf-8?B?bGtPMHRwOEM2R2dZempqSGcwcG9xblI4cEpFanZTcWZTTHFQMTNnV2V1NnlW?=
=?utf-8?B?RHQwVFRXQisrNWsvc3JENzBOQi9IdDZBMGZxYk1ydm96bUFiMkVxcHl2NnpL?=
=?utf-8?B?NnZZZ3BGMEZCeUlkZW9DblFFcndrcWhCMzRsWnM1RzAzL0w3bmN0eGNLRmhS?=
=?utf-8?B?QktnaENMY1NTUUpzVVlKbWNXemdsUHZwZEtFSUFhQTJVYnZXK1pRNUgzVmtJ?=
=?utf-8?B?YlQrdEFnZzZEdnBsakpFVnZaUks0SEtoK1VrN1dvd0xKMXBQR0tZR1NKU3RU?=
=?utf-8?B?R0Vsc3hxbUsreDBkR2k4amgzaUVGTC94ZFFXcFlrN2ZLK0RJU2FqN09rdG1Z?=
=?utf-8?B?dHlQNEpFL0tleXpyWmhMOWV4KzdOV0hMK25SS0JYVElrTjdUblNPSTlBcVpM?=
=?utf-8?B?cW8vWW54VHlPSk82UGx3ZUpGYksyUUlzUlRKbG02cTUzS2NBem01cnNIZDJ3?=
=?utf-8?B?USt3NnJwaXhhOXpRWkNkaXozLzhZU0RBUzIrbHNIYjI2b3FNTGwxcGEyL2Ny?=
=?utf-8?B?L2MvK2M1eVdsR01ZYzNFemxLc1pFL29oWExkeUo2MlNWUG9GNDFJeWF6czNO?=
=?utf-8?B?OXFKajRIOWpoNjV4TmJ2L0kySFpwaTZrZzYwVGtyeGJJeUs1eE85QUVXNDBH?=
=?utf-8?B?dmZ3MnZ2ZlJ6TUpOYXIweC92S0dXL0pZd1BHeWcxOVIvaGZMYkpNSU1LYlFB?=
=?utf-8?B?d3ZZYWtqQkt2VlBXNUFQS0FDVkNWOU5uMllOcXkwL3MySiszeVk5UWlOYmJV?=
=?utf-8?B?bTV6c2JqREhSaVRMVy9BamlKeFRUZ3VoNkN2dXlsT3REdTJqemNEV21KMTFS?=
=?utf-8?B?TmN1NG92ZUdSTkxDdlEybDNONWp3b0d6TlRCZHVEWmthNU5NbzVad2hDcGFI?=
=?utf-8?B?dVRoc2JORVhKRXpHUlBJeFBMSnp2NXF1NUQwRERiaE50MEg2TVlVbFVObmJy?=
=?utf-8?B?STdHTHFTUnc0amV4TGkxTzJadHdCblhIUVlpREtVNHdEdmZ6dGxneStCd1hF?=
=?utf-8?B?b0ZYOElYMHQ1M0tJY0tNVTFnalN1dERxdlUzMTZwTWtwb2QyM2hUNnM5MXRI?=
=?utf-8?B?aXpUZUk5MnFBK2M2clh4dHhKODQzcDdLS0RSWGpiS0tvZ3FDK1c5R3Nkc3Z1?=
=?utf-8?B?TlNjR2xndHRhRXVmNDRZekt6RGtBaUlyQ0t0cHNpbW9QdzY4UndsQjhpckpy?=
=?utf-8?B?ZTQ4SExtV3g3UktJVUpLSGdqQnJHa3NhOUgzdVZJNU41RHNYNndVNkJzNDVa?=
=?utf-8?B?d09yTWJwbTEwWXI4cmdYMHJpRGhPRkd2Y1Z1TlNKSTkyb2FOTnBtTlg3cTdH?=
=?utf-8?B?VGtPYjcwT2E0a2JHbVdFMU81SEY1MVIzMHhSZ2tlYkN0cGc5eFEwZmdRczJ6?=
=?utf-8?B?QlN1a2pROGN2UFVkVzAySzFtMkRLbEJPVW9ZaTZaVFdpRHpIU0hFU1RXdW1N?=
=?utf-8?B?MGtxQ05naDdlNkVPcmVJQnhxT3pBUDlhcUt2MlB2c3RoMXdLZmxFQW43RWo4?=
=?utf-8?B?TDMwSEl1Rm1RWG5WUWFScVFPcCtTQWtHaFh6SFFncW9GOUFBVHlVQTZFQ1hS?=
=?utf-8?B?QmJOSFJKRUJFSHk0T0V0OUtnaGdJQTFrcG13YmlCWWprV3ZJUS94eWNRMW5G?=
=?utf-8?B?Rm5IaGFmRGNHTEgvTFREV3NLc210dlZITkkvMmNjU3FuV2dqMHMyZmRPVW85?=
=?utf-8?B?dklvWGdlcVZYNTZtYW1uVG9xdzJ4d09nZWhoZ3FLS2NiRTdGQ0pvVzc1aTJU?=
=?utf-8?B?VHFPL3NtVkhDM3hBaHBOMVcwRkRGRmdnOWhlTm82b1p0ZkhVdmJyTnpUTjJB?=
=?utf-8?Q?/+3ckOnPD5y2k9uLvXeuDtIiY19giPcSkMq+7FOqcqu9Z72?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jun 2026 14:34:19.8468
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c4af5ba4-748c-4f3f-5587-08ded3900231
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF00022574.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR18MB3624
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Transaction Alert – Bitcoin Purchase Request Received piatok
26. jún 2026 Dear Customer, Your PayPal payment for Bitcoin has been received
and securely logged in our system.
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
=?utf-8?B?blJLY3JUajhwcHhqbGMxSEZzb2JNZ01SNnpTL05maHJ4WVRXbTBXVmFJeEdz?=
=?utf-8?B?TEppU21ORExReko3S3VhVllTYXYzM2x4ZUNsTkRZUGtEaEZqOVBqWmVjTzI0?=
=?utf-8?B?RWRGSnhnMURiMGY3Zm9ORG03NWF1OWFrNzFITCtwVTc0K2d5aXhab2xmOC9z?=
=?utf-8?B?ZDVkWEZaQXo5MHE4RitPWTFNKzAzdEpUUEVaOWdJbExyREdwSmZGbmVrRUlR?=
=?utf-8?B?SGpWZlBvVFZKbTlGYmx1VGZlbnRueHFOK1FaMVV2YWdkQndONlFBYkJ6Tk1o?=
=?utf-8?B?U0ROcXdBRGh5MEhzdlViL00rNG4ybWVnbUdYQzh2MHlBcTB2eXdZRGtRWC9x?=
=?utf-8?B?WjVvT2srdXFkWXlEUGQ4NEM0S1dmU1k0WU9zMHZjRENLWi9hT1UyeEVkSFVx?=
=?utf-8?B?M29lSFBtd2lzbUppL1F2SnhXTUsrQXhjTGpVOTllSFhCSkQwVDVHbkx4UVk0?=
=?utf-8?B?YXJtblZISllWdGFRci9melZVbTN3cDNLZks1WDdZYnE5YVFpZzljdlZ5N3V1?=
=?utf-8?B?b0txUkNLRTlicWhBYUJSWTZhRWp5S2l4ekthbEk4aGZWSW5pd1VPVXdNVUtm?=
=?utf-8?B?LzhrZjFYR3VmQnl6anJzdFFwY0lzNktIUUNMWWEyR3NOd1oweit1RWEyNHFR?=
=?utf-8?B?NnVpN3RCYTFEdGNpNGhJcEdLVXlQcFZCZ2UyeUt5R251SXp6QWZQVlJNUEFR?=
=?utf-8?B?WnkwWThteWpkRkFKVEZHZytyRjBZVGE2dngwSzRJU0hDSmhWNVluYVdOWDBz?=
=?utf-8?B?K0QwaVpPRXpsaWRvd0w0WmlCd2ZVV2M1ZWdoN2tkSm5pRHhCd25pTWhaeVBv?=
=?utf-8?B?TkZWZ2o2ZUNCNXl1SHBzazRaTk9IS21Deml5aDNQMlQ3eXdCM2ZzdnpzWm9E?=
=?utf-8?B?c2tseUw5NUgraFcwcmp3bG11b2FWVnZQNVpPREtnVXJ6SmMzTVNENDBNZWMr?=
=?utf-8?B?bERma2w0MFdxWXF2M1pLamxnSFZkM2dteUdJQTg0TGZhVGJDRGMxUmp3aEpC?=
=?utf-8?B?NWFkSVYyMXdnZ21aTTlTRmV2RnhlbTkwWnpQY1BYYU95ZHV1bjJ3alBUT3dT?=
=?utf-8?B?RE9VdG9vcUhkQlY0RmRjekJTZER1R2l0TGNLYW9jcEwvUVBzWXlKTm9FbklG?=
=?utf-8?B?Ty9RVU5EajUyeHJEK1VycHdCMmhhWWJ5VjBJbnpyUHNiME9Pakdxa2FGN1ZQ?=
=?utf-8?B?ZWZublNMZ3JkdklKNFdrWW1VRzNmNjRkL3ljcDQvb3F2VURvaUNuNWM2SS9P?=
=?utf-8?B?U09FTTFGTWxTOTZGY0lZbUdYdzBBSnd1cS9uOW1ONm03ODc1Z1lUZkUyUHpl?=
=?utf-8?B?K1NIdkthNWFTTlhqZWtCQXo0cXNzenNuL2VRWitTSkhnREY3QkJxWFNtZ1FI?=
=?utf-8?B?bGtPMHRwOEM2R2dZempqSGcwcG9xblI4cEpFanZTcWZTTHFQMTNnV2V1NnlW?=
=?utf-8?B?RHQwVFRXQisrNWsvc3JENzBOQi9IdDZBMGZxYk1ydm96bUFiMkVxcHl2NnpL?=
=?utf-8?B?NnZZZ3BGMEZCeUlkZW9DblFFcndrcWhCMzRsWnM1RzAzL0w3bmN0eGNLRmhS?=
=?utf-8?B?QktnaENMY1NTUUpzVVlKbWNXemdsUHZwZEtFSUFhQTJVYnZXK1pRNUgzVmtJ?=
=?utf-8?B?YlQrdEFnZzZEdnBsakpFVnZaUks0SEtoK1VrN1dvd0xKMXBQR0tZR1NKU3RU?=
=?utf-8?B?R0Vsc3hxbUsreDBkR2k4amgzaUVGTC94ZFFXcFlrN2ZLK0RJU2FqN09rdG1Z?=
=?utf-8?B?dHlQNEpFL0tleXpyWmhMOWV4KzdOV0hMK25SS0JYVElrTjdUblNPSTlBcVpM?=
=?utf-8?B?cW8vWW54VHlPSk82UGx3ZUpGYksyUUlzUlRKbG02cTUzS2NBem01cnNIZDJ3?=
=?utf-8?B?USt3NnJwaXhhOXpRWkNkaXozLzhZU0RBUzIrbHNIYjI2b3FNTGwxcGEyL2Ny?=
=?utf-8?B?L2MvK2M1eVdsR01ZYzNFemxLc1pFL29oWExkeUo2MlNWUG9GNDFJeWF6czNO?=
=?utf-8?B?OXFKajRIOWpoNjV4TmJ2L0kySFpwaTZrZzYwVGtyeGJJeUs1eE85QUVXNDBH?=
=?utf-8?B?dmZ3MnZ2ZlJ6TUpOYXIweC92S0dXL0pZd1BHeWcxOVIvaGZMYkpNSU1LYlFB?=
=?utf-8?B?d3ZZYWtqQkt2VlBXNUFQS0FDVkNWOU5uMllOcXkwL3MySiszeVk5UWlOYmJV?=
=?utf-8?B?bTV6c2JqREhSaVRMVy9BamlKeFRUZ3VoNkN2dXlsT3REdTJqemNEV21KMTFS?=
=?utf-8?B?TmN1NG92ZUdSTkxDdlEybDNONWp3b0d6TlRCZHVEWmthNU5NbzVad2hDcGFI?=
=?utf-8?B?dVRoc2JORVhKRXpHUlBJeFBMSnp2NXF1NUQwRERiaE50MEg2TVlVbFVObmJy?=
=?utf-8?B?STdHTHFTUnc0amV4TGkxTzJadHdCblhIUVlpREtVNHdEdmZ6dGxneStCd1hF?=
=?utf-8?B?b0ZYOElYMHQ1M0tJY0tNVTFnalN1dERxdlUzMTZwTWtwb2QyM2hUNnM5MXRI?=
=?utf-8?B?aXpUZUk5MnFBK2M2clh4dHhKODQzcDdLS0RSWGpiS0tvZ3FDK1c5R3Nkc3Z1?=
=?utf-8?B?TlNjR2xndHRhRXVmNDRZekt6RGtBaUlyQ0t0cHNpbW9QdzY4UndsQjhpckpy?=
=?utf-8?B?ZTQ4SExtV3g3UktJVUpLSGdqQnJHa3NhOUgzdVZJNU41RHNYNndVNkJzNDVa?=
=?utf-8?B?d09yTWJwbTEwWXI4cmdYMHJpRGhPRkd2Y1Z1TlNKSTkyb2FOTnBtTlg3cTdH?=
=?utf-8?B?VGtPYjcwT2E0a2JHbVdFMU81SEY1MVIzMHhSZ2tlYkN0cGc5eFEwZmdRczJ6?=
=?utf-8?B?QlN1a2pROGN2UFVkVzAySzFtMkRLbEJPVW9ZaTZaVFdpRHpIU0hFU1RXdW1N?=
=?utf-8?B?MGtxQ05naDdlNkVPcmVJQnhxT3pBUDlhcUt2MlB2c3RoMXdLZmxFQW43RWo4?=
=?utf-8?B?TDMwSEl1Rm1RWG5WUWFScVFPcCtTQWtHaFh6SFFncW9GOUFBVHlVQTZFQ1hS?=
=?utf-8?B?QmJOSFJKRUJFSHk0T0V0OUtnaGdJQTFrcG13YmlCWWprV3ZJUS94eWNRMW5G?=
=?utf-8?B?Rm5IaGFmRGNHTEgvTFREV3NLc210dlZITkkvMmNjU3FuV2dqMHMyZmRPVW85?=
=?utf-8?B?dklvWGdlcVZYNTZtYW1uVG9xdzJ4d09nZWhoZ3FLS2NiRTdGQ0pvVzc1aTJU?=
=?utf-8?B?VHFPL3NtVkhDM3hBaHBOMVcwRkRGRmdnOWhlTm82b1p0ZkhVdmJyTnpUTjJB?=
=?utf-8?Q?/+3ckOnPD5y2k9uLvXeuDtIiY19giPcSkMq+7FOqcqu9Z72?=
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jun 2026 14:34:19.8468
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c4af5ba4-748c-4f3f-5587-08ded3900231
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF00022574.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR18MB3624
X-Spam_score: 13.7
X-Spam_score_int: 137
X-Spam_bar: +++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Transaction Alert – Bitcoin Purchase Request Received piatok
26. jún 2026 Dear Customer, Your PayPal payment for Bitcoin has been received
and securely logged in our system.
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[209.85.221.69 listed in will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
[40.93.12.21 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[40.93.12.21 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[209.85.221.69 listed in dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:cafe:0:0:98 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]
[2603:10b6:208:559:0:0:0:7 listed in]
[dnsbl.ahbl.org]