ATM Card spam from Microsoft Outlook Part 3

--_000_DU0PR10MB79483C1F1AE6242B61108F4FBA182DU0PR10MB7948EURP_

Content-Type: text/plain; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable





Hello Dear,



Your ATM Visa Card.

Ref. No. SNDCC:74524.



I have been waiting for you since to contact me regarding your winning amou=

nt of $USD2,000,000.00 (Two Million United State Dollars) loaded in your AT=

M Visa Card which we discussed. We are duly interred switched. Therefore, y=

ou can make withdrawals in any location of ATM Machine Centre Cashpoint of =

your choice in any part of the world and the maximum you can withdraw a day=

is $USD4000.00. This money will be in its equivalent in your country's loc=

al currency.



This money has been in an escrow account; hence I did not hear from you sin=

ce then. The South African Reserve Bank (SARB) has issued a directive rega=

rding the payment of money to third parties. This directive, focuses on the=

issuing of ATM VISA CARD.



And then, I went and deposited the ATM VISA CARD with a Diplomatic Courier =

Company, in Johannesburg, South Africa as I travelled out of the country fo=

r a short course and I will not come back till end of first quarter of the =

year 2025. Kindly contact the Diplomatic Courier Security Company as soon a=

s possible to know when they will deliver your package to you because of th=

e expiring date.



Courier Name: Sky Net Diplomatic Courier Company Ltd.

Position: Delivery Department.

Contact Person: Mr. Martins Graham.

WhatsApp/Tel: +270803388010.

E-Mail: martinsgraham@deliveryman.com



The Skynet Express Courier Company will give you a =93tracking number=94 th=

at will enable you track your parcel online till it gets to your destinatio=

n. They have an advanced track and trace technology that lets you keep an e=

ye on your parcel every step of the way via Internet. When you received you=

r ATM Card, the Pin Numbers will be given to you by the (Acting Manager of =

HSBC Bank Limited).



Yours sincerely.

Dr. Georges Elhedery.

Finance and Accountant.

Acting Manager of HSBC Bank Limited, ....



--_000_DU0PR10MB79483C1F1AE6242B61108F4FBA182DU0PR10MB7948EURP_

Content-Type: text/html; charset="Windows-1252"

Content-Transfer-Encoding: quoted-printable








252">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hello Dear,



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Your ATM Visa Card.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Ref. No. SNDCC:74524.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

I have been waiting for you since to contact me regarding your winning amou=

nt of $USD2,000,000.00 (Two Million United State Dollars) loaded in your AT=

M Visa Card which we discussed. We are duly interred switched. Therefore, y=

ou can make withdrawals in any location

of ATM Machine Centre Cashpoint of your choice in any part of the world an=

d the maximum you can withdraw a day is $USD4000.00. This money will be in =

its equivalent in your country's local currency.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">




ATM Card spam from Microsoft Outlook Part 4




nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

This money has been in an escrow account; hence I did not hear from you sin=

ce then.  The South African Reserve Bank (SARB) has issued a directive=

regarding the payment of money to third parties. This directive, focuses o=

n the issuing of ATM VISA CARD.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

And then, I went and deposited the ATM VISA CARD with a Diplomatic Courier =

Company, in Johannesburg, South Africa as I travelled out of the country fo=

r a short course and I will not come back till end of first quarter of the =

year 2025. Kindly contact the Diplomatic

Courier Security Company as soon as possible to know when they will delive=

r your package to you because of the expiring date.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Courier Name: Sky Net Diplomatic Courier Company Ltd.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Position: Delivery Department.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Contact Person: Mr. Martins Graham.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

WhatsApp/Tel: +270803388010.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

E-Mail: martinsgraham@deliveryman.com



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

The Skynet Express Courier Company will give you a =93tracking number=94 th=

at will enable you track your parcel online till it gets to your destinatio=

n. They have an advanced track and trace technology that lets you keep an e=

ye on your parcel every step of the

way via Internet. When you received your ATM Card, the Pin Numbers will be=

given to you by the (Acting Manager of HSBC Bank Limited).



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">







nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Yours sincerely.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Dr. Georges Elhedery.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Finance and Accountant.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Acting Manager of HSBC Bank Limited, ....








--_000_DU0PR10MB79483C1F1AE6242B61108F4FBA182DU0PR10MB7948EURP_--

ATM Card spam from Microsoft Outlook Part 2

Content-Type: multipart/alternative;

boundary="_000_DU0PR10MB79483C1F1AE6242B61108F4FBA182DU0PR10MB7948EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB7948.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 0313d3ef-cc90-4c0e-e20a-08dec856785b

X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Jun 2026 07:44:44.4797

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR10MB3784

X-Spam_score: 15.2

X-Spam_score_int: 152

X-Spam_bar: +++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dear, Your ATM Visa Card. Ref. No. SNDCC:74524. I have

been waiting for you since to contact me regarding your winning amount of

$USD2,000,000.00 (Two Million United State Dollars) loaded in your ATM Visa

Card which we discussed. We are duly interr [...]



Content analysis details: (15.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.33.20 listed in dnsbl.ahbl.org]

[52.103.33.20 listed in dnsbl.ahbl.org]

[52.103.33.20 listed in dnsbl.ahbl.org]

[52.103.33.20 listed in dnsbl.ahbl.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[dnsbl.ahbl.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.33.20 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.33.20 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.33.20 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.33.20 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.33.20 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.33.20 listed in wl.mailspike.net]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[wclza0005(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[wclza0005(at)outlook.com]

2.5 MILLION_USD BODY: Talks about millions of dollars

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:10:311:0:0:0:15 listed in]

[will-spam-for-food.eu.org]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[52.103.33.20 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

1.5 VOWEL_FROM_6 Impronouncable from header (6 consecutive vowels)

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.0 FREEMAIL_REPLY From and body contain different freemails

3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money

Subject: {SPAM?} ~ Your ATM Card.

ATM Card spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1OZ-000000001e7-0wt3

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:53:59 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:53:59 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19010020.outbound.protection.outlook.com ([52.103.33.20]:53883 helo=AM0PR83CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXwaM-00000000MuL-46zQ

for root@nk.ca;

Fri, 12 Jun 2026 01:46:02 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=LvQJnJpUA71/dCQkBZ5k4/Ug+JvBLkw3bdSrVkbh3tnmk4wqRtwruoch/5O1eQM9+bX7txrIYCKcsIUjj9x+aweRNbkj7M0vpkpJJJ4Xl7+TG5/0ej/jcj+Guf66EiPsUZvGHMgcpHGl4aAWtZJ0FCZOTrG1UMXDgWq0sUjd0q/ERRuGonscl5oIJVdY1EsN/jRVlAWvBxdv4Q0tHTfrsshemZCz1eFkid7TPqe35S+ERAbng+6BrTQKDDkWY9OiyWzJkgHi0Yw1buEzpifDi8u3XPqx5zyciGIaE0AiMxLA5XcVIXboVXFni107Fu3/dpeACQSd7l1DtO6aERLUqg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=WIJHuJjXJwyM1eObXMpXFCZ08yH5IvOQ6xJXBHoYs0k=;

b=l6jdFoUzpDavY7hqIP8qSWFS3gxcBHR8GDM5roEVOlJMcC3E2JMItmKEGhKeJu6tweq5giteirCrdeDp/VcHDyzQ3ND1ni791oi5kZWHtBMo6AVcxOAAHfmP2MKZLDLk0n60oka71E5Jcp/qZb6Y1nSCEYIRbACNgw/o7WSJGFEy/RoMHbNTZA3EeiTKdaDcpi81wa/VYo+2CDEXZz70F/1Sfb3EkNEKDgObNNlZR2sJimncMBoMftO8FvpDbrqnpV3FfVjnj9Otohphcaiy6+LSWYhlCJAI0G3w4iWBX7wzGwFn4Oz4RC/zUntlWSjbsxt9aE0TT2oWmMTf6ZBjgQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=WIJHuJjXJwyM1eObXMpXFCZ08yH5IvOQ6xJXBHoYs0k=;

b=tD7ZZAEJsahTvUe5Nlga8fqZ/lnV+bO+cy5RjqH536lAgzLdtvQrswjDJ+xJp5P2PXajP8GB3bPQSjblAJBQGjX0nesbIfnrkKegzNLgoypjYpXlmYnxSf1AnIfo5Vtv2I2nseWpQNFFyuA6mSm6552sWZ6gOAfFDsIoaDnSEJMXUFnWA4STOLhRDgESOrsvdDoND3AcyO4DzTANNg7llio8wF/hXb+UMP1O4RegYcWlUUwvH0bdmdilR/HfhU0knE9Tsa2YMTOCWedPAkA3N6gfwbeZc1yuurABkY3j0rSZE1w0gACsLfm8CKiCFhpqSKu3vcV+jp+4tMv910jmbA==

Received: from DU0PR10MB7948.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:311::15)

by DB8PR10MB3784.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:16d::7) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.14; Fri, 12 Jun

2026 07:44:45 +0000

Received: from DU0PR10MB7948.EURPRD10.PROD.OUTLOOK.COM

([fe80::bab9:b188:ced4:6147]) by DU0PR10MB7948.EURPRD10.PROD.OUTLOOK.COM

([fe80::bab9:b188:ced4:6147%4]) with mapi id 15.21.0113.013; Fri, 12 Jun 2026

07:44:45 +0000

From: uygtrf fcvbng !

Subject: ~ Your ATM Card.

Thread-Topic: ~ Your ATM Card.

Thread-Index: AQHc+j7z4bjUvP+eBUuJ6NlHb64M7Q==

Date: Fri, 12 Jun 2026 07:44:44 +0000

Message-ID:



Accept-Language: en-US, en-ZA

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU0PR10MB7948:EE_|DB8PR10MB3784:EE_

x-ms-office365-filtering-correlation-id: 0313d3ef-cc90-4c0e-e20a-08dec856785b

x-microsoft-antispam:

BCL:0;ARA:14566002|20110799003|55001999006|39105399006|24071999003|24021099003|41001999006|7071999006|5062599005|15030799006|15080799012|19110799012|12121999013|8062599012|8060799015|31061999003|18010799003|22091999003|24121999003|20031999006|2604032031799003|3412199025|440099028|102099032|40105399003|43065399003|31055399003|26104999009|26131999018|35041999009|26121999007;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?NpV8srhI5BNEmo+Unjer2EfwmdrsPUyZ2SCvqRSdsawHQu2W4V4jtMDF?=

=?Windows-1252?Q?pNMfEnB01GxXuOPrviJmfIErC3cDQOBY18dhIQKkqD9ozOerE89mBiM3?=

=?Windows-1252?Q?HyQGfEdrBI9L4ZIGll+2wFqlrAuNZ3S2N3cbLClu3e6qM7WHy/rrn5Ft?=

=?Windows-1252?Q?lPU8vnqfL0VBZKNyGp4o5oPqxxO+TbWh2CAGhkMjBQI6cEpYTcRbLa8s?=

=?Windows-1252?Q?dfv+B1/lK48J2v9RWZ1jlcwhT2Xg0lKjAlO5w7TcC4m9/Rac1f4NATGF?=

=?Windows-1252?Q?kHOb8usvMyWwyHYndSs+oS7aQmTOEtfSKU2Op+GuPF/kMOxmbzuKYqcu?=

=?Windows-1252?Q?T7UhBzXfPPufd/A4T4UC3KzA0cXED7AhnmyfDTFExx3lNtiiCor6dIVc?=

=?Windows-1252?Q?3AFJJ5gJrN6CqRGvQrVZPQhtzC6OChwiolon3F/TSXFGOqqDZ2J1RwRF?=

=?Windows-1252?Q?+gFfPnmgegiHl8e1b6XdNzvkty0iCXn3Ow9z9txbs4uKZRz8tDuuL3jv?=

=?Windows-1252?Q?BFOo20pSn4RwyeuYBgDt5WYR+XclF4EhxJajwPsr+Ogc/yYhOf72lAv3?=

=?Windows-1252?Q?z/vgY9+huGP2qEGtt1w6mUWDImzkM6OiKhpl87PS5MIY9A6CgHq2SqH2?=

=?Windows-1252?Q?Ek0oZEhQrudX4hr+2TL03rMMUVchFwEySxYPLwTlPS9GAH4WrMjBauP+?=

=?Windows-1252?Q?axqZLQFVIgBdtToms65NrukHBmR2xbsXyuF7IpZLhlO5PX2vJZHaP2gh?=

=?Windows-1252?Q?TmDCviOXCKOyoWRrWHRSz5qOJrE8/cPGW3sXsdz9q0sIGCudLUn/cnkn?=

=?Windows-1252?Q?0mi5WqpEPb47a6cwx5iZiGKtFDHTWRkdnzhvxU7pY1feMHcTwWnf0+P/?=

=?Windows-1252?Q?US3tvFGsqsUrqqzCCDO2B/EKLzigdf5HPg5ZtF+8D6M2UqYwNu16Y91y?=

=?Windows-1252?Q?UdhwJbNkC+xHs/887NTfMQXxquQYpSwo+Mw11jbZrdpG8dbA6EmZ4tiz?=

=?Windows-1252?Q?gwk3hxqN3FhHEnsc5lqmv2hOPTp2X0BqlAAn/R6WlCkTEo9AUyVfAwVJ?=

=?Windows-1252?Q?qS/B44htc94fa4ELdKWZTcf6y8sXpf3dpSpVCLoGEYzoAml5WazH3lzN?=

=?Windows-1252?Q?Ne/MHeLPzNxfS3/Dg+MYQRAz9OKB5wwO2j/RI09WmCt5pWu4yHl7DGmo?=

=?Windows-1252?Q?ctad+2meZZAwk14Vm8lCwx/oO6S+aIZcQ776Yk4gfgBgUKSHi/XjHP3B?=

=?Windows-1252?Q?aDpzCg7c4+mwQXC6s4aQ/s7OAunCKrWzKpuxtVhjc8uJw9lqSr+XDgJY?=

=?Windows-1252?Q?eiGEI7BrCo1fbLgDHGuq2bnRW4IVbOqiZmmrrnN/HHEPdmsjaHd9Xn8J?=

=?Windows-1252?Q?mM0CKVzUk5T/NRFxt+ig8uJeI8kHQ/XoSxw4bMwRqVV6hMk0JMn7NrP6?=

=?Windows-1252?Q?mcUvEQgzS0eVOkpXiBe3In+l8e3mBhttvHrv1DHVKOVIagi6NcMXFrYQ?=

=?Windows-1252?Q?WEtI4zFJ7h3W0n1ka/jhfhGoJWwWnJlncUroOeB9YQNIN3ydT2m9Hl5Z?=

=?Windows-1252?Q?2pW0waZeJgR5VZehT3hvkrxiYK3/UXtWYFzQ6clsr3h9JVTr60RFCGtv?=

=?Windows-1252?Q?TFFgbMdF/wdpbdfNj/0RL4Av?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?Windows-1252?Q?Tr3LqHDKt7Mrn/owO62vjLMwXu89QkC11MltJ+2RTahkut/rP8c23xTO?=

=?Windows-1252?Q?ZoqhXguN/r48GeklFXfwDHyQeO469OVB9agJjaJdZAgObtQZUCm1iNoJ?=

=?Windows-1252?Q?Ptt43EC1+FxljOOL1NnYp0002sRgvaMwxACsYiqDwAJQ76YZrdbHS6bg?=

=?Windows-1252?Q?nDS8Gq9PCU5a0S8Z5z5sIjimPbTWtwnGm/1GagOk+p7W7BKX0EnRhrw8?=

=?Windows-1252?Q?wtz0I4USK7qwOLqfRpww8itDf0X0n2oehFhN26pY+r88j+zTvI7+JBvG?=

=?Windows-1252?Q?xVf5W/FKGfYIYwayeMQkPuqK2MZG2UQLgLi6Oga9l/YdtYtAUlZfKHhn?=

=?Windows-1252?Q?rWbcOApUmrAQHpu9M3Izl9UoRrz33wgReIaZIcbz5olrvSMEwR96x2c0?=

=?Windows-1252?Q?h7Wmb4VpLWKrXLIx8ZFQaxfz/NdtKnTxwi6woEirFyNDP+yZ/DYAn1y9?=

=?Windows-1252?Q?GYaIsLDjBzv8dBcUbR6cDYL1J/VXBlG0JjVbLUFZVdAJVFwWx5V2kAcb?=

=?Windows-1252?Q?GSaugLi5NeeG7Cs73RT5ehW4hJxHiqeYfejcoX+i3iQ9jB6u4e2rRk7+?=

=?Windows-1252?Q?bU6IULMFv5xK4HC524E2CYvGhHRS6Iy7/dNAVd7aJNSogTcs86ZW/3aS?=

=?Windows-1252?Q?iUAyKyjYE2vgJR+fPJg93t2e7fdvC6sBi/wHnCZS2kXXGT9xXvgO/a5U?=

=?Windows-1252?Q?XA/FPSH0ESm+HwLKioLQFJt5I8HDEkUVvGTTMBqkYgcEZYye/rpUgbev?=

=?Windows-1252?Q?1dIEcXU4J5WIslrWxNDUawbkFpucD7nrVYszV4IykB95AlU5MZu9Vewb?=

=?Windows-1252?Q?xW1luqfjNq+grKj0zwzSGoNMN/zvssXrnynsWCOfNeA8yODSmkEsigO1?=

=?Windows-1252?Q?zu3yTyJcCxAUNS01zYqVXft3HoRQbTaHepeMOaJujAYhAheJUF1Hm+PU?=

=?Windows-1252?Q?jeBFWzHtMXNu0ekEFoQhjCBp1ru95Lm8Jw9Frv69346PKwOTMl1YR5AG?=

=?Windows-1252?Q?V0PWR40g60VbAVG7fuG6TkZLUyvOuOGf2DaFPAFmRos32vEW9rAf6//k?=

=?Windows-1252?Q?mwJ6bQYGNFijmCIw8kV4pILO3ZcdjDnwqEYsEWnGOmJa9vhwRAvbGsSp?=

=?Windows-1252?Q?nRg75f4ZZ4031sPmlMcN+zn9hT6Y5bu5XRVTk/c7/j/aeY8uo+HNPAIC?=

=?Windows-1252?Q?JtjbmgZ1RQ/wZU9+w9PYViHmKphvq6Wxj9wDMP45rNB1GdB8JPjQQ7hP?=

=?Windows-1252?Q?p++j29rmJ+vQTmBn8XYbuPfxmxkl4VKw8JjUtay398858IaUR/lcg4Cd?=

=?Windows-1252?Q?6N3iiF4DaKDnErjbWEGE6C2v7XZTDnrirOGKK5ehxqYxXsdsbTSHF+al?=

=?Windows-1252?Q?fyvFa8NcHIYaInzejH3kwKKO1CS6fhbBU0Q5AOdP1k6xYr0O0z2y7RGq?=

=?Windows-1252?Q?5nIZ+kFizyFuC506aPsrg9bJH9rIgf+aAp8T+jHWni4=3D?=

Remote support spam from Google Gmail Part 2

--0000000000006ae318065408c49b

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there,

I wanted to follow up on my previous emai=

l and see if exploring additional remote support resources is currently a p=

riority for your team.

We help businesses scale operations with dedi=

cated remote professionals across administrative support, customer service,=

marketing, technology, and back-office functions.

If you're ope=

n to it, I'd be happy to schedule a brief 15-minute call to learn more =

about your needs and discuss whether there may be a fit.
Please let me k=

now if you'd be interested

Best regards,
Mary,Business Develo=

pment Executive
Oscorm=E2=84=A2 Digital Pvt Ltd.


gmail_quote gmail_quote_container">
On=

Sat, May 23, 2026 at 5:12=E2=80=AFPM Robyn Brown <
ynbrown146@gmail.com">robynbrown146@gmail.com
> wrote:

kquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:=

1px solid rgb(204,204,204);padding-left:1ex">
Hi Dave ,
=


I hope all is well.

At Oscorm=E2=84=A2 Digital Pvt Ltd, we suppo=

rt businesses with cost-effective remote staffing and outsourcing services =

designed to improve efficiency and reduce operational expenses.

Our =

expertise includes BPO & KPO Support, Administrative Services, Billing =

Process Management, AI Automation, Digital Marketing, Talent Development, T=

echnical Support, and Web Development.

Whether you need a dedicated =

remote team or project-based support, we provide flexible solutions tailore=

d to your business requirements.

Benefits of working with us:
=E2=

=80=A2 Lower operational costs
=E2=80=A2 Dedicated remote professionals<=

br>=E2=80=A2 Faster execution and support
=E2=80=A2 Flexible scaling opt=

ions

Please let me know if you would be open to a quick conversation=

.

Best Regards,
Gretchen,Business Development Executive
Oscorm=

=E2=84=A2 Digital Pvt Ltd






--0000000000006ae318065408c49b--

Remote support spam from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1ON-000000000ce-38rn

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:53:47 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:53:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qv1-f49.google.com ([209.85.219.49]:50405)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXvb0-00000000K8o-2flc

for root@nk.ca;

Fri, 12 Jun 2026 00:42:36 -0600

Received: by mail-qv1-f49.google.com with SMTP id 6a1803df08f44-8cebfb15413so7069136d6.0

for ; Thu, 11 Jun 2026 23:41:38 -0700 (PDT)

ARC-Seal: i=1; a=rsa-sha256; t=1781246492; cv=none;

d=google.com; s=arc-20240605;

b=SOlBAfVrKSOmONU7PE+f9kdwGzqgBLtkEa9dZh4jWwxrEcMvQv/i1ngjF1cDjATpbm

4EO26wQqatk2qAfmgdDgVQLlXcqnG8yReHjnIapxnWeG+SajuBpkk+9Ebh0GZ6WDIdJJ

ozekk/DGjKY1ZjXDSTrGx5AMXign5mvIh5HAItJWU8g0RNzqBZdIsiDQ/xfwWDDswVMF

QVj/g5vGn0j2S6/B9a3C/X41UgVyc4q6s/YQA5NMRHeh6HND/jEuhlktu7Qx13RnjALG

sqVB4xID1hpvbB65TK76XDk1b4C9yqsjyaqTGz8UtjHF8Ir6ioYfkAT5Dy6rjKiF71GI

FZAQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:dkim-signature;

bh=xySfb3hSKoNrdS35ZbmRz/BS1ccto4gkdyIJJOK0DLY=;

fh=ny7+SATv4n6lSNl0rVMQyaj6POVJTUZJLShjjgjSTJg=;

b=bYhC/Bp8nG5b+rmzq/F//UXMs9D8/N7jwAgx/xaF03JgcsS4Vs+ddpLJGv3srsAiBQ

S1Ynx0L2cbdzgrn6SMrUeub5UEEVcageNgsj9hcHmBCyIx3csDbtKRm7H1RgwHPHd8DP

dZVZCjSYTuLPNfldaAain79VWWb43vhYQYF2uxllbw/aHMURW36ZcNDRbdbRqn5o3d4O

vXP42u84LwPMd5jaonMcVBYDQMpNZH9F77TT6hjiMwpVsnBcObYKznGYnvKp/h0E2UWA

hJBOuFjUnUz90/25EvQwWxbnQe3xLykDpUpD6UIAlLMtbOO/d9IWTzwYg29nktu9V/WH

j01g==;

darn=nk.ca

ARC-Authentication-Results: i=1; mx.google.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781246492; x=1781851292; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=xySfb3hSKoNrdS35ZbmRz/BS1ccto4gkdyIJJOK0DLY=;

b=flMsFXt/0TR+J+ruXJOS8T9jz0/3Vb74+hAklmpguxATfbc2y007AsDy6PfDUncOAA

/bJVUIvGhmGOWxzomQwBWRTtE+2wkHOmXgQ5kzTYX3NrQK0g0EMz7U6tKNme3a6d/+93

PLQg74ogTcasfSVuQyVkKVawraU2NOsi5aQd6wkJkEtbVS/IjHwZwdghwUlUqP3wfT5S

PW0FNoG18A553r+gn/80/HaDdCQ8nX4XJVUELgMrCgTPL16oDLUXnyoBdaKT6QBrt4NU

NE7aDkUBX/hhDyzT2a9aOi1NPRq2M/9kW2nRTKZokuCr4oXt46ziSSFah4Rtk0iCa4vP

KSVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781246492; x=1781851292;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=xySfb3hSKoNrdS35ZbmRz/BS1ccto4gkdyIJJOK0DLY=;

b=pE7FF/jYfMKUzX6m3K84s61M4nKGS9oe3ZkA9nxz9ohz1Qpu4Qcp9MDxseU4NDZEGj

6cDFTDan1jngtScGA1GJLqAXzqAUhE17+p6qAt3At5Kz3ZCXbK0106xqE8ONE1stNkpZ

hzMe1KmY6EQzOI3LcLHz4BYKEAaXkDjjChlFyewYJ0uBbwBhn8GJmKTuppBaY2H3U6R+

T36/g9NT11aE71SeZfEgwu071Go4d5vK7kRHlKXYpOiCqvqpmra4NJvNsNCSrVJgxR07

RZ4DN+6HCBFAfz310j+PoBneAJUZYQsvlolKzYhRUMpmZGJRt+kI7u0H2UdL2KBy7WZc

HD6w==

X-Gm-Message-State: AOJu0YyAWaAyGrxj7TuuCxcD612KGuz0XyHWFn1rMmgxKmP2uhKKGwED

gJmYvK3TJnnyzZyOYUKEQi/nCFi5WtGunfPcJl5uVUrxG0GSYn07BxqFFBRNstbvjMHoNNt2Y9n

28y9ggXdJPPDxXXacc58NksmMVpuZ7ZeY6zp90epmbQ==

X-Gm-Gg: Acq92OFALXBdvrLRMv1a6ZRia3IKAPO7sIqxl+8jWmJ1KraNsb0Y18TgKlZZ+Ljjd2S

UV1P+pN6ylIQVK2pm2neKVJU9a7KDYt/p4tvjo1v4ZlDY2uziDxRMhE8Ac3h/O13G6uQwCjN0zz

TyTrIEBn/PrbNNe9wr5nQG13CIT8HRU9XAFKET4LPGKgaJaB+ZXI+qJ4vCIX+vXPp0ULNzSH4pr

WRUlBCbTce6Qqjt8OQzg5vB+BUEZ+E+eDH8ZMrUVunroTXonbGqRd6M+l4fHmX9WD69sOM9MEgB

i3hkLJvdnn/urbo2PHhqCLyTVuVHbOcRFSTVHFa5pAsBkkIylULaYu0Wg5wxxyo42kfalnuPOJb

a

X-Received: by 2002:a05:6214:33c4:b0:8ce:ba04:7bc2 with SMTP id

6a1803df08f44-8d32efbc8d8mr29002646d6.38.1781246492073; Thu, 11 Jun 2026

23:41:32 -0700 (PDT)

MIME-Version: 1.0

References:

In-Reply-To:

From: Robyn Brown

Date: Fri, 12 Jun 2026 12:11:22 +0530

X-Gm-Features: AVVi8CcohXYZCmMiS-gQUMG-0GbvdP_ZfhUUPB8vrkaYfZuASPyDKts0D4xmqv4

Message-ID:

Subject: Re: Cost-Effective Outsourcing & Dedicated Remote Support

To: root@nk.ca

Content-Type: multipart/alternative; boundary="0000000000006ae318065408c49b"



--0000000000006ae318065408c49b

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi there,



I wanted to follow up on my previous email and see if exploring additional

remote support resources is currently a priority for your team.



We help businesses scale operations with dedicated remote professionals

across administrative support, customer service, marketing, technology, and

back-office functions.



If you're open to it, I'd be happy to schedule a brief 15-minute call to

learn more about your needs and discuss whether there may be a fit.

Please let me know if you'd be interested



Best regards,

Mary,Business Development Executive

Oscorm=E2=84=A2 Digital Pvt Ltd.



On Sat, May 23, 2026 at 5:12=E2=80=AFPM Robyn Brown
m> wrote:



> Hi Dave ,

>

> I hope all is well.

>

> At Oscorm=E2=84=A2 Digital Pvt Ltd, we support businesses with cost-effec=

tive

> remote staffing and outsourcing services designed to improve efficiency a=

nd

> reduce operational expenses.

>

> Our expertise includes BPO & KPO Support, Administrative Services, Billin=

g

> Process Management, AI Automation, Digital Marketing, Talent Development,

> Technical Support, and Web Development.

>

> Whether you need a dedicated remote team or project-based support, we

> provide flexible solutions tailored to your business requirements.

>

> Benefits of working with us:

> =E2=80=A2 Lower operational costs

> =E2=80=A2 Dedicated remote professionals

> =E2=80=A2 Faster execution and support

> =E2=80=A2 Flexible scaling options

>

> Please let me know if you would be open to a quick conversation.

>

> Best Regards,

> Gretchen,Business Development Executive

> Oscorm=E2=84=A2 Digital Pvt Ltd

>

Co-operation spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:56:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1Pq-000000002Iy-3Jun

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:55:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:55:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f182.google.com ([209.85.222.182]:55788)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY0UJ-000000009O3-3Mu5

for root@nk.ca;

Fri, 12 Jun 2026 05:56:00 -0600

Received: by mail-qk1-f182.google.com with SMTP id af79cd13be357-915671abde5so104704385a.3

for ; Fri, 12 Jun 2026 04:55:04 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=apexlattice.org; s=google; t=1781265298; x=1781870098; darn=nk.ca;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=ncOTaR9s76ihX8zOpSTNt4fpNimFL494yko7HS7C7Ys=;

b=F5k003jG/LThJUq11KmJh35Sm4b4nErRS0Bvy4I482BIModYCe8JspZ5e0KQ3FS++w

qlkH6DEHOCzDJWOquckF1juCYFN/2Hq5CDMot6b7RxMJee4ehziobYkPa1lZ6JZBkK1l

1pUmBIm7QtndgqVcr2Y4Tm009L43+aE2UPXH6ksCgOCRZzzBw06xwHyJO3flLQ0QNre/

4KxUdyv9i7mLxR6ZFwneitAzqcsH+T36a4w5A8HGcEVOO9pRqlE2kPrzfSq2MMOH35Uh

ry5TAu/ZnYWoufBWFK/+ZlB1LYf00Y/+zFCvv69Pln7Q9rEsi7nPz9by39j8C71dhMdy

9hyQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781265298; x=1781870098;

h=mime-version:date:content-transfer-encoding:subject:to:from

:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to;

bh=ncOTaR9s76ihX8zOpSTNt4fpNimFL494yko7HS7C7Ys=;

b=sVWXTlHopTCZdd6z7bd5wvOCyP2SHU2bjcuc3b5XvlD9DJm0/7uQEs07a9fEUJHaCL

8vUq+W4G5fx8glLPgQtnBQepMZpds8cFlnGiPOoGD/r/U81LCspZn20DQZTZIbUM4VzZ

Ph2j7s+DmO/DQcuHWJhiDWjYCl+S1qW4zV6lipM9ENpu3CBAtGZaw8Eq57XXw6YXrILF

EW7pZLWBsr2ISy9vuncqNSRKkXrO8ffyBYZhqlPMaeSSlj1ubmC4RIk6VfmCPq2Qp406

ekYe9blsavsUBiL4G0gC3ufIEaZiEAAVMgMTnPVFHet1nVwwzvuzxhUA42tJmldXRJMW

VuLw==

X-Gm-Message-State: AOJu0YzjL7lzNvqxMOVOMD9uT/byI/ZxrW0jziwKwJJmvaiUEVmLvmPW

dSnprJfMuOGEic3Pg9MvN5H3DP8NIRIucm8dgupSBcdAqwilBj96GBYKPgNpsHOXo5JMGbgpzsm

u+4o=

X-Gm-Gg: Acq92OFEktVyUcF0/Kg/8xNTkuslzHJW66ResJaH+Zk4VtYMorE96NOZEGAXg+U2RqA

pGRD16pYPkzzOTIFXaLbacUCD8DManPskc5yu5H9sSR6nCXbfkC+wFNd4DThNJcKbC3smy0EEUN

IdQiBWfigt7mpH04p8UKkijYv1L2IwvyY0i4DZC6K+Ye8wQjzQXYR0aKAA/B5W8lsZezmcoAr6s

Hqu6mBRKaF5RfyYxULoHrN8j6HG4k80Lfm1gNN+qxgR1ZpaBsicbE/TgBdH3ZX9TU68xspYNbJ0

DmEp8a2SIOoSMyZF36vUBbcojzZonDWWqAqvUvAkkuA7ngAcXD41e+oB94l20NV9MyL/HAXGalD

9eUTmSnqpYEYf1+C2z2Y/6mdeZC83eiOt7crxCBcUmK4C+oi1wvlZ2sKdBLaiTLkllSklOq7GJ5

KHJNHE2a8poUOmNNNgrPPChsSp8/yI1oxtUI5RPkjzspctuH0BQzAaiAEQ9+h/BlxfV4eRmgCWL

RHi1wLMg3viimPR5gP+LO0ptBQPviilBnQnZDCZmNDmnS8PxtU=

X-Received: by 2002:a05:620a:394b:b0:910:87f4:9a26 with SMTP id af79cd13be357-9161bd5b222mr318920585a.41.1781265298366;

Fri, 12 Jun 2026 04:54:58 -0700 (PDT)

Received: from 019ebbae-cf09-75dc-add5-809b8fa305c2.local (ec2-52-0-99-245.compute-1.amazonaws.com. [52.0.99.245])

by smtp.gmail.com with ESMTPSA id af79cd13be357-9161a00598fsm185979085a.31.2026.06.12.04.54.57

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 12 Jun 2026 04:54:58 -0700 (PDT)

Message-ID: <019ebbae-cf09-75dc-add5-809b8fa305c2@apexlattice.org>

X-Mail-Abuse-Inquiries:

https://app.instantly.ai/privacy/report-abuse/019ebbae-cf09-75dc-add5-809b8fa305c2

From: Olivia Flores

To: root@nk.ca

Subject: NK new clients

Content-Transfer-Encoding: quoted-printable

Date: Fri, 12 Jun 2026 11:54:57 +0000

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8



Hi =C2=A0



I came across NK online and wanted to reach out because we're =

working with other internet providers that are offering internet services.=

=E2=80=8D



I=E2=80=99m currently working with a few internet providers on =

campaigns that are getting their sales teams meetings with warm leads every=

month. We=E2=80=99re targeting people who need internet services using =

personalized email sequences.=C2=A0



If I could help you connect with =

potential clients like this, would that be helpful to you?=E2=80=8D



Thanks,

Olivia

422 Richards St, Suite 170. Vancouver, BC V6B 2Z4

P.S. Please let me know if you don't want to hear from me =

again

Investment phish from Microsoft Outlook Part 3

This is a multi-part message in MIME format



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0

Content-Type: text/plain ; charset="ISO-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I=92m Peter Densen, CEO of AGP Global Capital. We provide fast, busine=

ss-purpose funding for companies and principals who need capital witho=

ut bank delays.



We fund:



=20

Bridge loans



=20

Working capital



=20

Asset-backed and structured financing



Recent closings include:



=20

$12.5M bridge funded in 14 days



=20

$2M working capital for a logistics firm



=20

$4.8M asset-backed liquidity loan



You=92re on our outreach list because your profile indicates active ca=

pital needs.



If you have a real transaction you=92re looking to close in Q1, let=92=

s speak briefly and see if we=92re a fit. Calls are straightforward an=

d decision-driven.



Reply here, and we=92ll take it from there



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0

Content-Type: text/html ; charset="ISO-8859-1"

Content-Transfer-Encoding: quoted-printable









Hi,



I=92m Peter Densen=

, CEO of AGP Global Capital=

. We provide fast, business=

-purpose funding
for companies and principals wh=

o need capital without bank delays.



We fund:







  • Bridge loans





  • Working capital





  • Asset-backed and structured financing
    SPAN>



Recent closings include:







  • $12.5M bridge funded in 14 days=





  • $2M working capital for a logis=

    tics firm





  • $4.8M asset-backed liquidity lo=

    an



You=92re on our outreach list because y=

our profile indicates active capital needs.



If you have a real=

transaction
you=92re looking to close in Q1, le=

t=92s speak briefly and see if we=92re a fit. Calls are straightforwar=

d and decision-driven.



Reply here, and we=92ll take it from there

<=

/HTML>



--CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0--

Investment phish from Microsoft Outlook Part 2

Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[66.235.168.164 listed in will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

[40.93.198.101 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[40.93.198.101 listed in dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:0:0:0:19 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:52d:cafe:0:0:12 listed in]

[dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

[66.235.168.164 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.198.101 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.198.101 listed in list.dnswl.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.8 MY_DSL I could use a BL for this.

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.198.101 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.198.101 listed in bl.score.senderscore.com]

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

1.0 FORGED_SPF_HELO No description available.

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Opportunities with AGP Global Capital

Investment phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 06:54:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY1Nr-00000000Pbq-3kON

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 06:53:15 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 06:53:15 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westcentralusazon11020101.outbound.protection.outlook.com ([40.93.198.101]:53099 helo=CY7PR03CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXtVW-00000000DSL-0hkl

for root@nk.ca;

Thu, 11 Jun 2026 22:28:48 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=ub+6hWFw4iiwk9nER0AhYUFWdm42I/RRLtmk/toLC3sQwdqCKQO2mEbi3Ps2+o2Z9efc9IZxz35ZHQLmidrC4wVkj4i0IrR9CBepRjRH5ANDVZjFL5G2fxAijJQqVUJ8yClUY0cmz61F7lklU6sQgYxEmexd4CQSoa972/hOErsHVp4ydvMCJ6kXOI4eL/sNpQE3/ciSEtnIzjY+ileJXg/ZMEaiW8a/31VFjjUIO6x9rBlSltTjcXVfO4FbWQc3Y1/3KEZIAinfFDPvRwpz4BTMW20C0jcbNXDRx0ZVA4m2qMsiZDds7egHEb9/jBAEt5iy3ucN7FIFR3QGVPLjeA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Aqgx5b7X7M0N/06RfWj2Eplj1Z0hTBx95Ehu2+xycGs=;

b=ECQxqZKDEWThIqpTakH+RowBhjCuvR0YRpMABsyduAj3p+LXetb/uIuomNymLkAqsFUC24bo2R4ZkAtB42xWXIc0ZJOPd+2dMqouulcWNugU8d+MaB5K8eWwAtPSZtfJlzD3ll1c2FRXad6YzW2iJq1Usg9UO0dve+eTnH6veJ8IIZCsolndHdsPgqni4ICfNpSNSOsIHkJybQPlf0dzjRa4M7pp4y3w0jA3IuLGms1vaIeBzydBHG6w6WKmy/M3wGe8r9YjNVtPswIXd44JkOu/ytRcL/xNpxpTrbGCBBw4KkbByJVfzvRxw8E1u+1hZG6wtz3Wt0Fh/VvLtbqxtA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is

66.235.168.164) smtp.rcpttodomain=nk.ca

smtp.mailfrom=securefinancesolutions.com; dmarc=none action=none

header.from=securefinancesolutions.com; dkim=none (message not signed);

arc=none (0)

Received: from MN0PR04CA0020.namprd04.prod.outlook.com (2603:10b6:208:52d::19)

by LV8PR03MB7517.namprd03.prod.outlook.com (2603:10b6:408:185::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.113.14; Fri, 12 Jun

2026 04:26:41 +0000

Received: from BN3PEPF0000B06F.namprd21.prod.outlook.com

(2603:10b6:208:52d:cafe::12) by MN0PR04CA0020.outlook.office365.com

(2603:10b6:208:52d::19) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.14 via Frontend Transport; Fri,

12 Jun 2026 04:26:41 +0000

X-MS-Exchange-Authentication-Results: spf=none (sender IP is 66.235.168.164)

smtp.mailfrom=SecureFinanceSolutions.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=SecureFinanceSolutions.com;

Received-SPF: None (protection.outlook.com: SecureFinanceSolutions.com does

not designate permitted sender hosts)

Received: from WIN-OEM8GK9H1E8 (66.235.168.164) by

BN3PEPF0000B06F.mail.protection.outlook.com (10.167.243.74) with Microsoft

SMTP Server id 15.21.139.1 via Frontend Transport; Fri, 12 Jun 2026 04:26:40

+0000

From: "PETER DENSE"

Subject: Opportunities with AGP Global Capital

To: root@nk.ca

Content-Type: multipart/alternative; charset="ISO-8859-1"; boundary="CyWOgAEIHMdjrw2jSrmfrVwZjNjIjyJO=_0"

MIME-Version: 1.0

Reply-To: peterdensen@outlook.com

Date: Thu, 11 Jun 2026 21:26:40 -0700

Message-ID:

<50601137021251329@SecureFinanceSolutions-com.mail.protection.outlook.com>

X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN3PEPF0000B06F:EE_|LV8PR03MB7517:EE_

X-MS-Office365-Filtering-Correlation-Id: 871f8602-99a8-40e3-5ccf-08dec83accfa

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam:

BCL:0;ARA:13230040|1800799024|376014|23010399003|36860700016|82310400026|56012099006|8096899003|18002099003;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:66.235.168.164;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:WIN-OEM8GK9H1E8;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1800799024)(376014)(23010399003)(36860700016)(82310400026)(56012099006)(8096899003)(18002099003);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

E3auQ2z1A0DVM6192ItNKkyYBRboTL4BPEnt71emKSTvaqG4KM0TtFYsNtHO788julUMg31aJRzvKYZcfihuPZoNr9tGwrj+6MSWBigpN9U4M5aTqsKOfe/+PlGYwi53cwm8OAHSXDlf6pbTR74TeX2ae4TjzQt8i9Wz/qL3xRY9dPwhwqnChUjsVmemrMSTtyZDvAlwZZvy82gFx0FIM2swkLWkVA/ZrD0RnAarwk2sIheT6CiF2L/yUfMpJE8DQabi4mdEe1IA9nkZJ4tz2dWM86gJqh9ApU5UUS6HRASICoxlxfSeJe6AFMvb5S3g7mJPUGECkvOyaLwWKyi9cL6Lvr0ktkGKUq25nyHLrQH2P/IYiw+Z0mhGSn/NQfRTHlbCunyP4sIiluPxbW23vCQ4hmwrcJGwQZtjdOp6LVY19ltrCQQLjqERAJ+6SC0X

X-OriginatorOrg: SecureFinanceSolutions.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Jun 2026 04:26:40.3456

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 871f8602-99a8-40e3-5ccf-08dec83accfa

X-MS-Exchange-CrossTenant-Id: 59deaa40-bef6-411c-b65a-c8ed36f4cc85

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=59deaa40-bef6-411c-b65a-c8ed36f4cc85;Ip=[66.235.168.164];Helo=[WIN-OEM8GK9H1E8]

X-MS-Exchange-CrossTenant-AuthSource:

BN3PEPF0000B06F.namprd21.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR03MB7517

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I’m Peter Densen, CEO of AGP Global Capital. We provide

fast, business-purpose funding for companies and principals who need capital

without bank delays. We fund:

Nigerian Lottery spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 12 Jun 2026 09:16:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY3bA-00000000IbI-1KyQ

for dave@doctor.nl2k.ab.ca;

Fri, 12 Jun 2026 09:15:08 -0600

Resent-From: The Doctor

Resent-Date: Fri, 12 Jun 2026 09:15:08 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [142.132.158.170] (port=41104 helo=server12.mediapartner.cz)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wY2yx-00000000CTV-3tkI

for sales@nk.ca;

Fri, 12 Jun 2026 08:35:49 -0600

Received: from [10.100.0.2] (unknown [185.228.19.248])

(Authenticated sender: info-dcuu@judita.cz)

by server12.mediapartner.cz (Postfix) with ESMTPSA id 193D947C38B9;

Fri, 12 Jun 2026 16:01:56 +0200 (CEST)

Authentication-Results: server12.mediapartner.cz;

auth=pass smtp.auth=info-dcuu@judita.cz smtp.mailfrom=info-dcuu@judita.cz

Content-Type: multipart/alternative; boundary="===============2124114047=="

MIME-Version: 1.0

Subject: Good News, FOR YOU!

To: Recipients

From: "Charlotte Phoenix"

Date: Fri, 12 Jun 2026 15:01:44 +0100

Reply-To: charlottefoundationphoenix@gmail.com

X-Spam: Yes

X-Spam_score: 10.8

X-Spam_score_int: 108

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Kindly confirm ownership of your email, It was randomly selected,

after an electronic computer Spinball draw, to receive a Grant Donation of

$1,250,000.00 USD from Phoenix Foundation. Send a confirmat [...]



Content analysis details: (10.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.1 MISSING_MID Missing Message-Id: header

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[185.228.19.248 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

[142.132.158.170 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[142.132.158.170 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

[185.228.19.248 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[142.132.158.170 listed in dnsbl.ahbl.org]

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[142.132.158.170 listed in bb.barracudacentral.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[142.132.158.170 listed in bl.score.senderscore.com]

-0.0 SPF_PASS SPF: sender matches SPF record

0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

0.0 LOTS_OF_MONEY Huge... sums of money

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

Subject: {SPAM?} Good News, FOR YOU!



You will not see this in a MIME-aware mail reader.

--===============2124114047==

Content-Type: text/plain; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body



Kindly confirm ownership of your email, It was randomly selected, after an =

electronic computer Spinball draw, to receive a Grant Donation of $1,250,00=

0.00 USD from Phoenix Foundation. Send a confirmation Email to ( grace@char=

lottephoenixfou.com ) or reply for more details.

--===============2124114047==

Content-Type: text/html; charset="iso-8859-1"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body




=3Diso-8859-1"/>Kindly confirm ownership of your email, It was rando=

mly selected, after an electronic computer Spinball draw, to receive a Gran=

t Donation of $1,250,000.00 USD from Phoenix Foundation. Send a confirmatio=

n Email to ( grace@charlottephoenixfou.com ) or reply for more details.
ml>

--===============2124114047==--

Bitcoin Paypal phish from Microsoft Outlook Part 3

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[40.93.1.6 listed in dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

[209.85.221.71 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.1.6 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.1.6 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

1.0 HK_RANDOM_FROM From username looks random

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.1.6 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.1.6 listed in bl.score.senderscore.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.3 LONGWORD BODY: Uses overlong words

0.6 MEGALONGWORD BODY: Uses really overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_Bitcoin_Purchase_Confirmation_=2D_PayPal_Tr?=

=?UTF-8?Q?ansaction_Succes=2E=2E=2E_=40_=C5=A1t_11=2E_j=C3=BAn_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=





Haresasz Nxysarwsa has invited you to Bitcoin Purchase Confirmation – PayPal Transaction Successful

Title: Bitcoin Purchase Confirmation – PayPal Transaction Successful

When: June 11, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request.



Payment Details:

Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount Charged: $750.00

Current Status: Under Verification



Your transaction is currently under review as part of our routine security and processing procedures. Please allow a short period for final confirmation and completion.



If you do not recognize this transaction or did not initiate this purchase, please contact our support team immediately at +1 806 466 7708.



We appreciate your prompt attention.



Best Regards,

Transaction Review Team

Attendees:



cynthiaperez389903@groups.outlook.com



Bitcoin Purchase Confirmation – PayPal Transaction Successful

Dear Customer, Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request. Payment Details: Asset Purchased: Bitcoin (BTC) Payme



Dear Customer,



Thank you for your recent payment. We have successfully received your PayPal transaction for your Bitcoin (BTC) purchase request.



Payment Details:

Asset Purchased: Bitcoin (BTC)

Payment Method: PayPal

Total Amount Charged: $750.00

Current Status: Under Verification



Your transaction is currently under review as part of our routine security and processing procedures. Please allow a short period for final confirmation and completion.



If you do not recognize this transaction or did not initiate this purchase, please contact our support team immediately at +1 806 466 7708.



We appreciate your prompt attention.



Best Regards,

Transaction Review Team

Kedy

štvrtok 11. jún 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin Paypal phish from Microsoft Outlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UVkweVNsRTNURHRzQjI0T1VkbnlaRjRnN2VmcnZjU0QxVllMcU8ybXBFTU84?=

=?utf-8?B?cmNqc1NBMUFmTmVFQ1daZU1CMmtmaEhRRkNaOVZrL1VUMlo4eUdBNWdiUndO?=

=?utf-8?B?ZnJXbzhvT0JQR3FJVHN4MFhDSDNBb0EwYnZlVGpOZFFyREE0OGJmM0tpTUtE?=

=?utf-8?B?T2h1VTcrNmRZWkY1NDhWVlh6dlRON2VuSzhPUDkwRnFwUmY2bzRuREhDVWsx?=

=?utf-8?B?RnBxRzNuMWsyTEx4TjZodkRUVUF2cG1sNUlGZ25ZVHhrd09hQTZIQytDR2My?=

=?utf-8?B?UXJYZ0Q1VlZlbS9MSVIvWG1uZmRUanJmRmtaUGFyMzI0K2VxajhYSEwyRlFG?=

=?utf-8?B?NlllbVRYYzBMeXVCOGRxb2FmbTRqN05EYllGV1VVb0J2OWZiaFowWUdteGJK?=

=?utf-8?B?dlAxc09KRXUzcVdLb2lzUEZva1Z6Z1plYnpmNzFPbHhqRGY4MUFmN2VkaGg5?=

=?utf-8?B?R3JLdGgrWVF6WSs3UUU4Vk1seDJYV2w2TFJFNHR4VXhSRjk3bEQ1Vmw0R1NP?=

=?utf-8?B?d0ZvcVRNVWJHMGJUQldBeHhabndIRkhmVENGaDQrQVZIQkh6d0FkZUxGbG9U?=

=?utf-8?B?QVQ3dmVwTllIRmJudHJZVVdLNHBtcVhuejZRZjR4SFFSSmFRdzhlTlR1V3ZU?=

=?utf-8?B?R29SYW5KMnBGNVI2UUgyYUpETVFwcmRQYWVSTU1nSXBSRWwxOHFmOXBsTmdL?=

=?utf-8?B?ak54ZWpvNnRISnRtUzdienQ5ZklQQTNheHFFUjRRdldSNVdwTFJGdXpZYU9x?=

=?utf-8?B?UTYrczhyWUtDOUxvMVM4TURuZDVNanR3cDU2ZUhRT3hWdStpVlQyMEpOTWdR?=

=?utf-8?B?ZlgrQ0ZTbHQxUDVZSU5oeU5yN2FxMTZpZmRtaC9DRVVxaXhmOUpEOG9YRVJu?=

=?utf-8?B?cldNTEFYMnB3clRvY3BkN2VJTVZJZjNab0xjVTUydmQ0bXFxT0xOcjFRUTQz?=

=?utf-8?B?YktISksrQ0lSaVBpTUpRUWJQZFh5aUVaWmFPckhYMjY3U1lVbnZocnd2TGFP?=

=?utf-8?B?dDh1UXRORWkzZzlHa0dtSUZ3NFgvTzJWakw5dlgwUVNBVG9pT2FRd0Z2UjZU?=

=?utf-8?B?eVA2c1dqd01rR09VZktVUTFNRzVMWFJpVjljSmhXOUc2T3MvK3hOd3AyYlph?=

=?utf-8?B?RFpkY2VEQjk0bnNYR0wxQnNiOG1FTTNhY1BJYVNsUUtpZXlyeCtXTVRRV2Rs?=

=?utf-8?B?TElxU2hwZU5OY1o3UnJHOG0yYVQ4TlVzbTlZcUxER21yOVRuWjVUMjRRdk94?=

=?utf-8?B?V21zMCtXQ1pyelJURUl1enE0MnF1eXNHRnFxYXcrRVRvcDJWYU5MbUZxZmw0?=

=?utf-8?B?SXRLNlF2eHh5MFRielZwQ1doU0hxNW5xeXdkYzkyLzQ1Y1IrU0ZaVk9uaGVI?=

=?utf-8?B?aVBtOUpWTUtkR1V6VmFCYkhOUjVVaW1oQjhQRFh6Wkw5MW9WWTZORFl1MCtw?=

=?utf-8?B?ZnRsWmIycFFQbi9jbEhycWh5Q3BaYml6NGl6eURyeW1oR25TTnQ3R1hEdXVr?=

=?utf-8?B?MHB6NjAvOGI5bTBidlZ6UWY4NCtvcnduRHU3MlVkQWpKdzMvdGRld2JYeGR6?=

=?utf-8?B?WHp3dkpubnpDM01Rdjc5RnVSNk5RWmtBbk81dEhidnNELzdtYkg0QUh4cnZC?=

=?utf-8?B?T2tPNUdBWDZ0a0pYL2lzNFBiSHYvNGZucWx0TEsvWkp6VTdURlFFNHBxWCti?=

=?utf-8?B?WFpuS1IrZFVjR1NvU01RK2h3Rm9GMUN0U0Fsc2c1U1pRS0ZuWk5yMG84ejFh?=

=?utf-8?B?NWFpdHVLNWlZczdzRCs1T1MxZEV1RDRvM25zWUZDcTRoaGNpTU5qL1J6aThG?=

=?utf-8?B?cTRZS2NuQUFDN1dHazZwSzBRV2tucHVxWUhqZVMySWszYkNLeG8raWdKRmMx?=

=?utf-8?B?SnZLeTU4TmlTZGtHTWZSRW9ldUFHRnVnSjdHQklOc2RmejJoOFdya2svbHoy?=

=?utf-8?B?ajZQSkJpeEZWQ2F4QjB5VmY3bFlvWFUvUE1xZUpvcTJKV1BnWW9qWFYvaXpJ?=

=?utf-8?B?VmFKMnZzMzRXQXo3RjBMOGZaRUFYTEhkeWVlK3NDWm94R2o5N2swT2grb0F6?=

=?utf-8?B?OTg2dVZkajBSZ2w4Q3BndEdoSVk0djNVcDhLMG1zM0dmdWlsRExIY01CdzhS?=

=?utf-8?B?VVcyczZvbWdnbkFHa3BSVmIzcEhaM2I3Z1YzaDF1blRvSmVEeThhVmoxcFh6?=

=?utf-8?B?SnBXTDdRYitncmlGK2luU0JjenFxbmdOenF1TjdGRFlwZnFlbUY5WmpFS0Jv?=

=?utf-8?B?dXcyRHpFNFhLZzlWOUc2RkFDVEs1cXYybTVxNHlVTmdRU3FOVnZ2RCtqcmxw?=

=?utf-8?B?YnJBWjVxZmd0S3ljYVBtVExocTg0aHdNQjc2a1I0N1RmRk13TlRZUllsamJn?=

=?utf-8?B?QUE0ZjRvV2YwRE02djFwL0tUU09URUpJSGR3M21YQWRmdG5pQXlXZ3BuQk9Y?=

=?utf-8?B?OXV4ejhDZDlqcm1VZWJPM3pKUHlQa0RCOUJFMlBtN0VDdjdSd3lRcFExN3FX?=

=?utf-8?B?eTdnMnp4aDNwc2xmSmhpSzM2dzhqRjE2eE5HUXUra0c4RisvOWpBbXNYS2VD?=

=?utf-8?B?dzVJeGlUZ2ZrU3NYNEcranFrd21yWHd5Nkh3SDc4S2dvd1pnSU9YVVVNRGQv?=

=?utf-8?B?RGJBdnVGMWNIZWJlb245UERIR3I1NlBFVCsxdDRaUTlhYW55YWtPZktyektt?=

=?utf-8?B?NHQvNStjSHVQM1J6clpQa1ZlaFpjcXU5aTdQUmxQamhRMDFYakl2K2VnOSt5?=

=?utf-8?B?L296clcyci9HZkhYd25zTXNJSS9CNG5vamZ2Rmdoa1Boa2pPY0p6OHBWS3Bq?=

=?utf-8?B?OGRNTFgxWFJHbWNsV1JCb3Nzb3FDMWtqdlljMTNUQlNqd3dJdlpPUjRkMzhx?=

=?utf-8?B?YU1IODRiaVJ2UTBjaVNLZFc5NmpZMWE2ZDQxR3piYXhUM01YVUFESERkSmZ3?=

=?utf-8?B?ZzJzOCtjSEVmK1N1WGNNYWJJRzFCbVNiWlgydkdpVmFWL0JvOWNvY3hTbWI5?=

=?utf-8?B?UVdBUjlGVVJ5cWhzeFpreWlXbkdvZXkzNXIwSmgrc1E1YXBwMGd4SDFGQWxX?=

=?utf-8?B?dlpxamducFRZbDhXYktDWE02NG1vQmpiM1JuOU5jaWRFS0d3eGUvQ3BFMUNS?=

=?utf-8?B?U05PUi9rZGlFdHN3U1dMK21sZnMrYlQ5Y3ZQS1krNXVBbzhyYkdIV3EyYWR1?=

=?utf-8?B?ZmQrZkgrN3dFdEVadG1qMFZ4aGQzSzg2L3p3d21ndUJ3V3Ryc1dwa0hHQ3NK?=

=?utf-8?B?L0hjVFFKbUhjSnpxWnU0K2x1cUFYMzNGTVBtUmtTY01makFBdVdEbkdJRnRp?=

=?utf-8?B?V3I4ZTcyYjlPTko0MGNJQjcrN2hqRktPUzFuQ1N0d2VucmVxRkZtN3R1NHVN?=

=?utf-8?B?b0FONGVIMVBrN3h5RTc1NW5ha29hOGlXQnZMZXhWb1FmVzlFMThaK0RRd1FI?=

=?utf-8?B?bisrSkMwc1NMWlR1d1d0RS9xVk5BTHFPLzFlM3o1VXczQkpYQ0wvdmxBSFlO?=

=?utf-8?B?clBIWXdSNWZ0WXdkRTU2dzZZOVFaeUMxYnpzVmN4ZXFOOTYyYzJHNXBtdGw2?=

=?utf-8?B?TjlLV2NIdm94bFphQ3VDZDQrR0tqNC9VUStFN1JETUE4b0ZMT1ZYUHhUM01I?=

=?utf-8?Q?5nT6oeRKfTPc=3D?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jun 2026 16:36:43.0986

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: e1296726-3aed-4de1-74a4-08dec7d79eeb

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: BN1PEPF0000468A.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA0PR18MB3517

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Bitcoin Purchase Confirmation – PayPal Transaction Successful

štvrtok 11. jún 2026 Dear Customer, Thank you for your recent payment.

We have successfully received your PayPal transaction for your Bitcoin (BTC)

purchase request.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[209.85.221.71 listed in will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:cafe:0:0:4a listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:235:0:0:0:23 listed in]

[will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

[40.93.1.6 listed in will-spam-for-food.eu.org]

Bitcoin Paypal phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 11 Jun 2026 10:59:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXijB-000000007gR-3PJG

for dave@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:58:01 -0600

Resent-From: The Doctor

Resent-Date: Thu, 11 Jun 2026 10:58:01 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westusazlp17010006.outbound.protection.outlook.com ([40.93.1.6]:42745 helo=BYAPR05CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wXiPX-0000000062n-0T7B

for doctor@doctor.nl2k.ab.ca;

Thu, 11 Jun 2026 10:37:56 -0600

Received: from MN2PR20CA0054.namprd20.prod.outlook.com (2603:10b6:208:235::23)

by SA0PR18MB3517.namprd18.prod.outlook.com (2603:10b6:806:95::20) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.18; Thu, 11 Jun

2026 16:36:43 +0000

Received: from BN1PEPF0000468A.namprd05.prod.outlook.com

(2603:10b6:208:235:cafe::4a) by MN2PR20CA0054.outlook.office365.com

(2603:10b6:208:235::23) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.13 via Frontend Transport; Thu,

11 Jun 2026 16:36:43 +0000

Authentication-Results: spf=pass (sender IP is 209.85.221.71)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.221.71 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.221.71; helo=mail-wr1-f71.google.com; pr=C

Received: from mail-wr1-f71.google.com (209.85.221.71) by

BN1PEPF0000468A.mail.protection.outlook.com (10.167.243.135) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.113.7

via Frontend Transport; Thu, 11 Jun 2026 16:36:43 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:46C9143CAB819CA7906F3F808002D081E33F02325ED7C2FE27DAAD1F5C5839A3;UpperCasedChecksum:714EC9B1A3BE7E296A989DA9A6BDA2E9C2B06CC92FB630886D5AD07D6D71D6D0;SizeAsReceived:3428;Count:15

Received: by mail-wr1-f71.google.com with SMTP id ffacd0b85a97d-45ef9437b7aso21770f8f.0

for ; Thu, 11 Jun 2026 09:36:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1781195802; x=1781800602; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=a7IPI/x9r1Q8E8HxM8W5a2Jgpjpvlr4Tg6TYIkSl87cko7RoEbk5V6QGgVMYYQn+y8

nzFMSjcvntQRTM4AZ7VtZAgyVZpfgD3K86nQkKWxjcLa7A7p0f2IiwXVzFPfGmmrgZzN

pp7t4tarBeygoHU09ka0OUHYAZ9kWoHLx5eXOsB/6GuucbDSPEmhSUQljJPNlCEyJ/We

hfq8xcIpXNoVUsUZ6XhQCjxVvRT496K7Z8zcXIS/iGItO10nYj+wdnr6A/r8iOu5Qq90

ANSRsd1rMTZZF1pH1Sv3MuNx9o0ED2bf1BZQeGi6D7NfVKn4J7ND2IyZHbjG+R/2RMEZ

jNwg==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1781195802; x=1781800602; darn=groups.outlook.com;

h=to:from:subject:date:message-id:sender:reply-to:mime-version:from

:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=AMjNFfwdGkZWqmUEM+lCRRTjSx++Ocs5dUxBa1aNrwCTRcMLRaXhdLRWosnauLc1MS

UdnkVr8Oq9S45AzXCTCU6qALh+2EUbHpqGESneyvqpAu6Tf+u5xYczPQGSrT4XSamMJ0

yqdTOTpCVL1dulEyq+vmZP1zHTZR6CvvpMw0H87LhophBeJQBoq2UMxHbt7F4SSyXuGV

NIrRdi4wKt5f26lI7NvHXdNhLievjLemr+MKq5Wrgh/2GGt9Fevud3zGUG1Tjc26evim

RfiUBQEceSH9BAVxm/di5ey9vzt4RBIH9cp/yt1jcEagA+sIsEShPvjz2yZu1d2XRodu

sIlw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1781195802; x=1781800602;

h=to:from:subject:date:message-id:sender:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=rTAYtedL/31r8kwCOaBddK2TvXTyUvqhV1O1/uLQf6A=;

b=ptJWisrQtWXlRGsBAWXrayu+byuOBfWTAcDQZ09Ie9gHLh+7EGwPdKczwkFIcaUNg9

aDS9L4QahU0U1ZChhyTQbWRNbDifHfFuvCxxjvWkxh+LFiem61ZoqGamtqw02ieUCgsH

tInNI6K1x64GkqObDqKoGnA9fNgv8pMj/BXxHwIePIjJKntBnekmql7gxHm5EDqGVbRO

VqksJZYKxiuqAVVKU3gxuHefQN82QON9uD/CCLvfPmICslx2mmtnTScmB/Nd8+AbXEuv

GQCsnPRXHP7bpFGtAk31DRcmRgQCzRkjLRgwS4kfPTCvGOhmetWkTmQyM1UzwoGmkdW8

zDvQ==

X-Gm-Message-State: AOJu0YxzSkXSaTLiYPwPb4xcgFPj9e3uqA99Sz2dUpiDpxUkGvCflDM2

pW5WqSi5t7W53uPf3UkTMsRzOvDSRvta5DqHn4DQABslFzk/hOIPYeE6QQaxv0jrMOEhBagkVou

zt2gCJQ2+d9amBFe119ZwxxVyvvJLy1dXN+g=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:b8d:b0:490:be8e:c890 with SMTP id

5b1f17b1804b1-490e55dbecamr55499035e9.13.1781195802100; Thu, 11 Jun 2026

09:36:42 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Thu, 11 Jun 2026 16:36:42 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_Bitcoin_Purchase_Confirmation_=2D_PayPal_Tr?=

=?UTF-8?Q?ansaction_Succes=2E=2E=2E_=40_=C5=A1t_11=2E_j=C3=BAn_2026_=28cynthiaperez389903=40?=

=?UTF-8?Q?groups=2Eoutlook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="0000000000000f483c0653fcf733"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: BN1PEPF0000468A:EE_|SA0PR18MB3517:EE_

X-MS-Office365-Filtering-Correlation-Id: e1296726-3aed-4de1-74a4-08dec7d79eeb

X-MS-Exchange-EOPDirect: true

X-Sender-IP: 209.85.221.71

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|9020799019|6149299003|24102599021|6092099016|3151999006|9000799056|9400799043|41010799006|1680799066|16200799027|5139299004|26000799027|22000799015|29080799009|970799063|32020799003|4040799016|26130799012|34130799006|440099028|4302099013|3412199025|18021999003|30041999003|2145499017|21002599022;

Web/SEO/App spam from Microsoft Outlook Part 2





--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable



Hi,



I am a professional Web Design & Mobile App Developer, with 14 years of exp=

erience. I will create an amazing, beautiful and unique website for you. I =

can upgrade, rebuild and redesign your website.



May I send you previous work examples & price, if interested?



Thanks,





--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_

Content-Type: text/html; charset="us-ascii"

Content-Transfer-Encoding: quoted-printable








>













Hi,


 


I am a professional Web Design & Mobile Ap=

p Developer, with 14 years of experience. I =

will create an amazing, beautiful and unique website for you. I can =

upgrade, rebuild and redesign

your website.


 


May I send you previous work examples &=

price, if interested?
b>


 


Thanks,



t;"> 










--_000_TY0PR04MB5910F47DA456CB552238A3A3851B2TY0PR04MB5910apcp_--