Ukraine Romance phish from Microsoft outlook Part 1
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 24 Jan 2026 06:53:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vje3i-00000000Amh-2ABA
for dave@doctor.nl2k.ab.ca;
Sat, 24 Jan 2026 06:52:14 -0700
Resent-From: The Doctor
Resent-Date: Sat, 24 Jan 2026 06:52:14 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-southcentralusazolkn19012013.outbound.protection.outlook.com ([52.103.14.13]:60192 helo=SN4PR2101CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vjcf1-0000000024J-1c20
for doctor@nk.ca;
Sat, 24 Jan 2026 05:22:47 -0700
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=oxaPhm4NxVtY0Nur5MQORyhAu1fPFhwq868jNRCkEY0r+W8c79dM7csGZIYypsUZbU+qkKkGQvw0zFkbAI1vfDnQPoP9dStGLedCjxt7QSE2YBFW/xH1v0FiQpr+5mUSturMZGtTfdqCOyBquk1rjyTV2vQpRQYjh/eSUvYcYlDir/Y+e2Sr+XTqX7BkTWuICDchC0YwWdWdhlJCtcnZ9pqKGp8IExyIud1ettCGjwBBM8Jhs1jhpRkQe6zIul8bv3ncCMGIDTZBnjulcNFglzXllZ5Mcy5NqXnrGj4mBj7qVezVujr9csg/EMqerVF2QqhX36bhOxCSHwfrp4aMZw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=owt29ceattqrNCEFRSZ37Nf6qvIUVmEK/BudlayNMwQ=;
b=PXsRyJhtLZnJM82U7h5fUSaGzoUlKwYkK8iM3No8NDodpvpAJSO1gQcg5VTScwAlFt5nlEf5wm78uQMg74/m8yPKzgCMVjfDjOCO47jaj8U43q9NWLfOjZJ7YcQ/2ndQlZ/H9sWYHeZTZWN6IUvifscP/53CXu8OfZkc59s2dmnCpWo87swcEyYFAybB4vGNSTvYU4xUlkp8MCHml5ZPWk/6/eUet1hgHsdO1zvpw0o3qN0Z/znYfgnLJvb/4ZQ7PgI4y8ETFHbSS6sqg0FxyOFR7sd4e/AQNV76X8aMQDR/Fp39ZwCbY/Mv6qalp9FlhkXioOHyKaYJhrVJHqnq2w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=owt29ceattqrNCEFRSZ37Nf6qvIUVmEK/BudlayNMwQ=;
b=Qd5eedJKp5a9qxymxtJaU06RbNA38FN6XPzmAfN47A3Y4tbnpwFqH7OhHooc4gRphaz8K5eGwOF1JVPrgfSQmYq6cRvOCRni6h3TSkoGiajzq0ZZekmd/cl9PX2B9Em2cp6XRwNr71mROdN4jRg2ZgxIfoethyigMhVry68LLUdoElTmnnPqageyBhZlrgqe76ZnO3BivIgyj3dsx7YADwoUbwlxSsMR1z2NfA8FXohKqJXpNmq58SuORTPbKr+AwU3fe+jF7SqaWvULAqr6W6DHZG4jzm9laNq/ufqNa94W/QYnTDnJK7WgqqrAenFQ+Q72N96dr6dHZb/njB5KQw==
Received: from DM6PR01MB5467.prod.exchangelabs.com (2603:10b6:5:150::13) by
IA1PR01MB9172.prod.exchangelabs.com (2603:10b6:208:595::7) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.9542.10; Sat, 24 Jan 2026 12:21:35 +0000
Received: from DM6PR01MB5467.prod.exchangelabs.com
([fe80::4c86:69c6:1646:c2e8]) by DM6PR01MB5467.prod.exchangelabs.com
([fe80::4c86:69c6:1646:c2e8%6]) with mapi id 15.20.9542.008; Sat, 24 Jan 2026
12:21:35 +0000
From: "UkraineGirl"
Subject: A subtle invitation
Reply-To: "romainediez1ku@hotmail.com"
X-Mailer: Apple Mail
Date: Sat, 24 Jan 2026 13:21:31 +0100
Message-ID:
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_BEE6_1667BF4A.50B885E5"
To: Undisclosed recipients:;
X-ClientProxiedBy: MA4P292CA0010.ESPP292.PROD.OUTLOOK.COM
(2603:10a6:250:2d::13) To DM6PR01MB5467.prod.exchangelabs.com
(2603:10b6:5:150::13)
X-Microsoft-Original-Message-ID: <1.3d7d957e806b4166d598@DESKTOP-N0MTKOQ>
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DM6PR01MB5467:EE_|IA1PR01MB9172:EE_
X-MS-Office365-Filtering-Correlation-Id: 4d19e7c5-82ff-4ccc-7cfd-08de5b431d69
X-Microsoft-Antispam:
BCL:0;ARA:14566002|461199028|12050799012|15080799012|39105399006|8060799015|12121999013|19110799012|23021999003|20031999003|5072599009|9400799043|42300799018|4601999015|3412199025|10035399007|440099028|39145399003|34005399003|40105399003|41105399003|35041999009|19111999003|56899033|2406899039;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?cCs5Ymh1RzljRlI5N0J4UEFQdDl1dGxEY2ZpUGR5SFd4ams3Yk5IMHhRR0c5?=
=?utf-8?B?VGNuYWJvb3BTRlZwcks5dXVXRjIxcnlKYXRWbkhSSFFMY2pEYjN0VGFRaG9S?=
=?utf-8?B?am9icE1GeWdMSjcxYWpwQkJMU3Q3VGYyT28vRFRrUi9LT1JmY1N2UzFMTUpl?=
=?utf-8?B?YlB6enU0b2JwRHh6Mk50cUZ4dE5CT01xeUsrSnN4bmo3cXg4TWcyc24yTHg1?=
=?utf-8?B?ZlVhdDJ4Rm4xaEpUdGxyOXpHRVY2TEkrdFg5VVhFUG5icktTd0RhUlZsem1P?=
=?utf-8?B?MzIydlJydUphejhiWGlWZCtMK0NYUmYwVXRkVTJEQ1NYTWJXSzRacXhJKzU5?=
=?utf-8?B?dzhqdDV3ek13Qm5TU3lPOWVFWkgxRzZwZ09INHY3cnFPOTJLME1rZ3BxRHEw?=
=?utf-8?B?RmVHaEpvY1h6WmFNWlhZMmlQTklyV1F2eC9zQkVVRWZnMm1ITThSYWw3dE5L?=
=?utf-8?B?V2VxelQ5RmlLTHd6Y0hqSXFVcGVtTjI3QjZzVy9VM0xIeDIyOFRMb1diNFlq?=
=?utf-8?B?YkVBQWlyeU1DdTJoK2NBOFMvODl4U3VFTmxiQUVXM2p6K3ZiV1JhRG5yV25V?=
=?utf-8?B?WndlSnpTTTdyTVpMUWVocWtzZUprWlZLTzk1WmVoVDBjMUFNQzhsNDgyVVAz?=
=?utf-8?B?NGJOamwvSFQ1VzdYait5Y0s2TjgwRU82aXl5aUhvbElOaU9EelBQNUNrcGJX?=
=?utf-8?B?b1VDRDk3dHp4SWp0ZHgrVWtnRWJpQWxJVFRRSkdyR2YyU3RnSFpQMXg3eTBK?=
=?utf-8?B?N3lSd2RRcy9hM0l6amhEa2tBYkgyMnIxalB5d2dqTG5xY21vbTcxWkVpZkxL?=
=?utf-8?B?MkhtYjVXcGFDK3dJSjhzek5oOUF4SXl5eW1UWHhSWnhtM0JDZVpvTEl4UDhm?=
=?utf-8?B?cEI2SXFQeHFsN3h4YUFPUWFGN3BBV3pyakhCbjg5Q09xWjg1ZWQyZG1RaG1r?=
=?utf-8?B?TnBRYmdVYWFueFRod0syd3ZzVGVTMTI4ZzJRZTZnSmwzYTZhU2N1Q3MvY2FL?=
=?utf-8?B?UGNNRWVkeWVDcVJ4QzBCMmVhbzZ0Q1JZSFdLdzkvdHZuKy91MnlRWVpMS2pP?=
=?utf-8?B?aWExbUdKeDM3MEJQWDFENHdLeWpvN0dBZUp3ZS9HNzVCa3pxTEx1aVNJNGw2?=
=?utf-8?B?WlkrM0UrbkVjRTVIMzhlM0VFd1BzTkM5cnJicG5xb3pLcnU2YVIwM1NXV01Q?=
=?utf-8?B?aGNyQm9zVTZSUjdhUmxyVTlkbFNJT1ZjSCtZd29TYWV3Z01kSDB3VWh0dndF?=
=?utf-8?B?TGp5RVpZZ3NpMXRkNHJYQjFUNHIyYitLTjZhdGxDb2h2S3hzUnpFNGZ5Z291?=
=?utf-8?B?MGQ1TVhrc1JYWG4yNVdvcjUySWxwY2RFSXlXc210T2x6WmxOQzh4VW45eE1G?=
=?utf-8?B?RDQyWUR0a2dqWlJjTENZQS9lL0J4SGhUcWttb1YzZVNsWFJPd3d5ZFcrNlhI?=
=?utf-8?B?a1lZTW5tWThrbnFIaSsySGNzNHRaeWpxYVV4STh0N01aMkJzSzRSa0VNbU9H?=
=?utf-8?B?R09LNlZzOGwwWjdTOWRaZW82TXVSU2V5Z3ZlQnMvalh5bDlJcElmQlU3emV1?=
=?utf-8?B?VU1NYm1RNmNWRG9OT3piQm56Wjg1bWJxUUJCTVZlQ0NKelhTTHZQQ2lObFJ1?=
=?utf-8?B?OGhrd2FqODN6WkRkVWRMZThBRVBhdlV5dWlDRExqSzB3MDlvY3cvMzcvSXNj?=
=?utf-8?B?cXgza1hEaUxTOEtUSU10YjZLalZjRlo2VXBHTXV3Vm52RmhhbDFkQlpmNDhw?=
=?utf-8?B?U3AwUXBCeWgxd3Y3TmFVeWFrTm4xU0ZMR2s0YVlTeE0zR044V1VnODRjRmZE?=
=?utf-8?B?R1VWT3JCRlgvTUJYY293VmorbUZOZFNMNmlNQUI5eG5jeS9KcU5XOC9hOG5J?=
=?utf-8?B?Q21TTGdxcjlSTEE4cUl6anN3czA2cWFHU1F4WjRXeHMyS0J3aEN6Mjhsd3cy?=
=?utf-8?B?SjZTZjdBajV0dmRsUWRLN0pJdU9FMnNYL1dPbWd2UHFYMTM3ZDM4MlJRVHJS?=
=?utf-8?B?NjBYMG5HOU9zUUZITVkra0xvaHIxS0ovckRlWkVYQWs0RWk1ZE05RVpwRlBE?=
=?utf-8?B?VCtPajcwQzYvZFZmN0F6Wm4zNDdmUFBCREdydz09?=
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
