Intelcom phish Part 2



This is a multi-part message in MIME format.



--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom









Delivery Update



Your package is currently being processed and requires a small fee for customs handling.



Amount due: 2.96 CAD



Please confirm your delivery details to ensure a smooth delivery experience.

Manage My Delivery







This is an automated message. Please do not reply.



© 2026 Intelcom Express











--1f0035db069faa3de0823b6dc1c6b60cd

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit



















Intelcom











Delivery Update





Your package is currently being processed and requires a small fee for customs handling.





Amount due: 2.96 CAD





Please confirm your delivery details to ensure a smooth delivery experience.



Manage My Delivery








This is an automated message. Please do not reply.





© 2026 Intelcom Express

















--1f0035db069faa3de0823b6dc1c6b60cd--

Intelcom phish Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiePF-00000000K1H-23v0

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:34:37 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:34:37 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from iad1-shared-relay.dreamhost.com ([208.113.156.243]:47518)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wia1T-0000000041L-0x7K

for sales@nk.ca;

Sat, 11 Jul 2026 09:53:57 -0600

Received: from iad1-shared-b7-03.dreamhost.com (iad1-shared-b7-03.dreamhost.com [67.205.27.24])

by iad1-shared-relay.dreamhost.com (Postfix) with ESMTP id 4gyCr12zz4zyb

for ; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Received: by iad1-shared-b7-03.dreamhost.com (Postfix, from userid 6697016)

id 4gyCr12RB5z7pND; Sat, 11 Jul 2026 08:52:01 -0700 (PDT)

Date: Sat, 11 Jul 2026 08:52:00 -0700

To: sales@nk.ca

From: Intelcom

Subject: Intelcom Delivery Notification

Message-ID: <8326dbc5e35ed6d4525234d2b8fd2555@intelcom.com>

List-Unsubscribe: mailto:bounce426-0I5z9GzyDnQBWl9@intelcom.com?subject=list-unsubscribe

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="1f0035db069faa3de0823b6dc1c6b60cd"

Content-Transfer-Encoding: 8bit

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Intelcom Delivery Update



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[208.113.156.243 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

[67.205.27.24 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[208.113.156.243 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[67.205.27.24 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

[208.113.156.243 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[208.113.156.243 listed in bb.barracudacentral.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[208.113.156.243 listed in psbl.surriel.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.6 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)

[208.113.156.243 listed in bl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[208.113.156.243 listed in bl.score.senderscore.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted

Subject: {SPAM?} Intelcom Delivery Notification

Investment spam from Microsoft Outlook Part 2



--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Greetings !



I am Mr. Ammar Hussain from Qatar Petroleum.



I have one hundred million dollars for Investment. Contact me if you are in=

terested. I have all what it will take to move the fund to you as a contrac=

t fund to avoid every query; more details upon the receipt of your response=

.



Regards,

Ammar Hussain.

Qatar Petroleum.

Finance and Accountant.

Email: ammarhussain100@yahoo.com



--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Greetings !



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I am Mr. Ammar Hussain from Qatar Petroleum.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I have one hundred million dollars for Investment. Contact me if you are in=

terested. I have all what it will take to move the fund to you as a contrac=

t fund to avoid every query; more details upon the receipt of your response=

.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Ammar Hussain.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Qatar Petroleum.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Finance and Accountant.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Email: ammarhussain100@yahoo.com








--_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_--

Investment spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 11 Jul 2026 14:35:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wieOy-00000000K0d-3kGo

for dave@doctor.nl2k.ab.ca;

Sat, 11 Jul 2026 14:34:20 -0600

Resent-From: The Doctor

Resent-Date: Sat, 11 Jul 2026 14:34:20 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-westeuropeazolkn19010020.outbound.protection.outlook.com ([52.103.33.20]:25470 helo=AM0PR83CU005.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiZHH-000000001ky-4Acn

for root@nk.ca;

Sat, 11 Jul 2026 09:06:14 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=BcDopXSjwuOxVr5xROD7K/gV36jnvBlzWfMmimvw+QZYlpBgTz0c8RBNzD+ECkioxdu1cMCsE+30M/codDuC+2ZRwZwsWmp4e7PzPbDwGiOAURnpAyxr9zjHbtQzfp8+6AT4ceHAu1nZjWZfkze6tbPStDWlCotAnUqEEgq49mQW/Rk1qKxj3vaoHHm+uIjwh2Zt7I2hi3djsZj+V8Ux1bGscr08/3J9BLG8gRObLJu+Mws22H/Ffv+UHwB5fBapnChbV++zE3noy1sb3nws2sy5x/VHpWQ0lj/7SehMbJvXxTN9bm8GpKdhca9ASEDhrgZldu6PXRA+mALiC3Q7NA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=S2W264i2ZR0HvUDhJ53AQb8ZWk/WeiT3B5duy/1tm6g=;

b=GJEw6TeLT40RLhqMyebisIQ/xnKPE88Z9Xti9eDGIkiLzKx9LOQLIkFEHZqI4m2ljExmp7U13PPpvnG6v2KfNH6iJy98HEsUPZF04jnG2xsVEeg+ezRs2XFnv/WtuEKKrwUXvlxG6nemxCyCWHzXkLgwmgRICMs1Wnu4j14oHXath5KjsfH7nyiAHJn+PZeHZ6zhjHyRiR5be7NLk2DigYRxVGQOXCJ3UxLetzoiya/XxXL2C5QvVyGe4OvFc5LAn9Jo0rXsfD4vfeaRxMEFJdq+DXEVwVddsJMFy/NUjLcJv9MTy+4Hs2OGsA6EULi/4XjElsSt/Kak5rFGerQuUg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=S2W264i2ZR0HvUDhJ53AQb8ZWk/WeiT3B5duy/1tm6g=;

b=pnbQhTmWzrTsshCuoRCu00A3Xy6PICD+XAf/un/KYWoNmzAFCM8Sb6OKAk0YfzGPqHm4cs+I8sSNbp2NvKjiTwuIn2jS6r450OwB40/Fv2H/S15HjWujza4zTJHwInnRC0sEvuaUcWPI8DICRDFsK3wCJcFZ+E7v5rC2SwtFJF0dVyB89RpgrhzrJjb2zPuWNYKCTpTwWVycBqwb2uhM8Zm3CxdanG51QugspMfAJGWDZvnTSp0vd/S48qkPSQp5VUZ8OcFd4ijEwwIJNCQbHttXIAfatA+/lzr6Bf6sZulnCYG2o3Ocb3go26HuHPWxxohXkCue52AsWNam4yfDRQ==

Received: from DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:446::11)

by DU0PR10MB5147.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:343::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.18; Sat, 11 Jul

2026 15:05:00 +0000

Received: from DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

([fe80::85ce:465b:ff36:78c0]) by DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

([fe80::85ce:465b:ff36:78c0%5]) with mapi id 15.21.0181.019; Sat, 11 Jul 2026

15:05:00 +0000

From: Lhnm Hlkk

Subject: =?iso-8859-1?Q?=A0~_Greetings_!?=

Thread-Topic: =?iso-8859-1?Q?=A0~_Greetings_!?=

Thread-Index: AQHdEUYVQ45/6PMpGECyPPARsxKK+g==

Date: Sat, 11 Jul 2026 15:05:00 +0000

Message-ID:



Accept-Language: en-US, en-ZA

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: DU0PR10MB7334:EE_|DU0PR10MB5147:EE_

x-ms-office365-filtering-correlation-id: 68d516a8-876b-405a-0f63-08dedf5dc765

x-microsoft-antispam:

BCL:0;ARA:14566002|24071999003|18010799003|20110799003|39105399006|25010399006|20031999006|19110799012|4140399003|5062599005|8062599012|8060799015|15030799006|12121999013|22091999003|31061999003|24121999003|24021099003|55001999006|15080799012|7071999006|440099028|3412199025|26104999009|102099032|35041999009|43065399003|40105399003|31055399003|26121999007|26131999018;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?TP0BWgI+UhjDxK47I1DgxpHKr1v9uMQsvTYxm/N1GFletdDs9N9Sw0Esan?=

=?iso-8859-1?Q?wbI5uqBElVbljua7hOvOXTcwMlL3f5g43O58MOiWWJy7g/SxzOz5yJ7uHr?=

=?iso-8859-1?Q?XjAmk1rl5UATfIhljwSS/c8xXE89PftMtQnc03iXDNT30WYRKxMN/t2ukJ?=

=?iso-8859-1?Q?aQjyX1DFMuVONEfT1iYr5QajGpPBOgE/dsiEgP60Tz3506Mf0UrEIkKftq?=

=?iso-8859-1?Q?2Dr+x+OOXXxVHVDagJNlf1Ig4OAYHb9SG0GMraDchYKzg8S27nPXvjkUic?=

=?iso-8859-1?Q?QB/RRKKX+Zs4b1YjjEHsrvnp1iu65XjDG3TwM/0rr53op8o86G1X5ZJgbO?=

=?iso-8859-1?Q?1SRdSwhR1nEnNyru7ss7SgGVfQn4HmeFY/ubxuQg+UX8pgs9tg2OX123Fd?=

=?iso-8859-1?Q?qEuHnYo8xNwseuM1Jz54MWzzAusvf8BYu06IF5/GvEnbwICEhHgiNfjKzk?=

=?iso-8859-1?Q?yKx0mMQVpSSKWSST7n00nN/bcKdz9YtBrjKeoLF/aoJgNpfYvQxcQlCuR5?=

=?iso-8859-1?Q?Yu1mh9YLYQ1g5xsyBNoElhb30LRx3EcALSQmi+/9uwMegj/2dy4TlSNPrZ?=

=?iso-8859-1?Q?N6n3+k04IMGCHECtKcMowKGBZETLfc8hcsApavjv519VpdRfZiPcPSdM5/?=

=?iso-8859-1?Q?FkD90VqtvY9heffGublT6qhUif/gf1C+g1Gcnn5Y2KicyKHEbLkcyLZ4Bv?=

=?iso-8859-1?Q?cJmdIedT+UsFg7mggohJlIQ7lPI7kb2j1xLCCkxnENfNRoj5E1kfxOg36U?=

=?iso-8859-1?Q?psIHNi+o+CRVpzol1t57HwiWYn63raatXs8v650oWGbz5zZ4TwREy7oZ3F?=

=?iso-8859-1?Q?L3F+CE8b+QF152fIv8ozW+B+KlHjvYETXahAK/lvjfwQaiKJBflNtKsb+N?=

=?iso-8859-1?Q?zPp+UkqhMxwmoazaljq48XTKcVWwNsgl4df09pz7b0JuVVUG4yw0/uU5Qm?=

=?iso-8859-1?Q?H6cFG8PdRedTALLPj1iF6vjln9BTIrxFMgaP5muIORRnTI7TCeYwca9kLH?=

=?iso-8859-1?Q?GPULMT2/y1C68d3UQ3GiIxZeeTkfIZupkpD0xJWR1TyQGC2vAeMRICaM9K?=

=?iso-8859-1?Q?wVsCAOfa06Y+6L5S/s315efkUQ0fi0USq2C4KBg9MIGzB7CyCNGH7M3/iB?=

=?iso-8859-1?Q?7bDXg4N0/q3EbHHJ1YU2ZFhwu/dH/lt41+9VuG0Q166fiOkf32sw8iB8Hg?=

=?iso-8859-1?Q?t4boUQm3Tuyz7SqvVUjn3plinoQHRtNa7FfvYC6TDgoQ8tj3DLoMlRK0FO?=

=?iso-8859-1?Q?bFoi9I6uDSEoQkbnw2Dv9O7Ontweis54qkEL6xBPej838058jaJJM9Pky3?=

=?iso-8859-1?Q?/CYyIDtZl2LcKMAoupHGv7W3p8enAgX/C6xPVl9z/ZEHEdVuLhqyFIYbUD?=

=?iso-8859-1?Q?LM6RUJmt3xtUwaH6qGfBjm/6GnIHS6tOLv38A6SPWjEmdDFCOUi+tboAfN?=

=?iso-8859-1?Q?kX6Kvbg9D87xJkbQvmyVBx1Vo9/i7DxgGlDyzIHokJnDDZdYE0GMhj0Aq2?=

=?iso-8859-1?Q?m+yod4DnAaL+6FP8D58B9t?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?/m/N10sd4sc0DbCDF9QvJ61MeJ2MLjJDHZ4cgvtk+6CAtAzsFSp1YkLB0/?=

=?iso-8859-1?Q?b8+875gRYHa/+5D8ZHUB9VxgzR0ivSQEWF/wbClGrw+nfjo/W1ZzHS5YYF?=

=?iso-8859-1?Q?lqJr96Pa1UBPKcezctgpJZh8dD24O2MGmauQaJnLkXAn/MJ3OANHRcWbuk?=

=?iso-8859-1?Q?E1/FFXOm014P2dPqzcb6T0ux5Eri5kf8V5Lq/9wayOp4XrlwGS9k6YdY8r?=

=?iso-8859-1?Q?Y8+BZ1VB/9MoyklLHG7d4Ifi+q/dp8pPM3SN2lzWMhh+L7ckImavMIFaC7?=

=?iso-8859-1?Q?bnsauHxMhHN9kkwZ3RpIlaN6u3Bc522I4JMQyRB5XD0OdRpLMM3pWr+mVh?=

=?iso-8859-1?Q?gPQ+8XUiLtkEXv7a2Vcl81dkzQFAzJX3oQ6wEXpj+6RitQJ3nWNGme79Ey?=

=?iso-8859-1?Q?GmbzSkh9P3duHHJGjQGKaD0X6cZScVZ83v3QpFRWu3b0QksE/AWuBcvX8/?=

=?iso-8859-1?Q?THkYvtp3FMbjGgYodYfcmSXymLT9gW4eXp4VsOEFaZIXXxenHAXrWTir4F?=

=?iso-8859-1?Q?QsiTpt//t2iXWo1VPrHnPyiCqUXchGvH1ujnCYPd7G8R9FCA4kFCr9yOVT?=

=?iso-8859-1?Q?GZIMXsY7QCGfIONaE0oAdD3Q8mdcKwPtHjIuNyzWzVIWmC/6SNezWkFEjY?=

=?iso-8859-1?Q?DPHd+Zrigv7X0MSMArkEtalBvhk4NDCLX520CwiuWsipHZoRBEvQKLz8iA?=

=?iso-8859-1?Q?U3pbPsSZSJIeyUj+GJXU6of5LNhF9SjD8Zpgccz7BExk2/6zIr3Sd78LpU?=

=?iso-8859-1?Q?ePZeR9IxHtnXde8l92SjuEkZj23SXEtv0XCMmUAkJTypVT8YHdlMv2GsB2?=

=?iso-8859-1?Q?bB3iuJ0ug6CeNrh1VW7CB6j2Jkf7yaPFSU1dV1HTYvlZnx5/ywHTAPTgWD?=

=?iso-8859-1?Q?9uUqyi5J+y/lACe5/0pCai2GUj9img5SeCgsP2rBvgljoPGSXgrIoUgcdP?=

=?iso-8859-1?Q?Iqvj7zLnwcvZHyaeVp2ycJuFFI1cG1Qvs0mBOQY4O9Iqu8AGdfyxDVVpAO?=

=?iso-8859-1?Q?GT5ZrSFsxoqyT8SCJW3PXoy236uD40IdZvPBZHe6IlP2RMz2AFFXeYR/iw?=

=?iso-8859-1?Q?lHBrJkyvem6oCX+wa+9PbzH9S5bdCJ1nBL8uKNS3P1AUjFwoeNIYDnESML?=

=?iso-8859-1?Q?T8qpjR6IB7GsGGQKWuTTYCAUtgAauJmqOLXfet0bXNnWYM6jj/XDpgMvVJ?=

=?iso-8859-1?Q?qCorvIJnslUnFWcWFUQPeqWdVniF04ED0HATVAU/3BE+Wrrqj5IhZbyNmQ?=

=?iso-8859-1?Q?atw6G14SBVvgsKbEQgoUy0BqZmXVOys2pCjbkG7R9+UEFVrGq2UsjT//76?=

=?iso-8859-1?Q?7av2gHlXjeqU6M699/7fopczWgtyLloRML/Ep9r/0VnEKv7iJBgZKds6n5?=

=?iso-8859-1?Q?2nFW9WHE30tlFeOLD+RiJ/l/V1EKtlkzs1VtdTHjSraY6a31yZ6r7eDVw1?=

=?iso-8859-1?Q?bXRcH5pOCFBa5/iV?=

Content-Type: multipart/alternative;

boundary="_000_DU0PR10MB733474721736BC019FE182CCB0FC2DU0PR10MB7334EURP_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB7334.EURPRD10.PROD.OUTLOOK.COM

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 68d516a8-876b-405a-0f63-08dedf5dc765

X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Jul 2026 15:05:00.2831

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR10MB5147

Chinese Products spam

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 11 Jul 2026 03:05:00 -0600

Received: from out28-89.mail.aliyun.com ([115.124.28.89]:33834)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiTdF-00000000Kzj-0WIL

for dave@nk.ca;

Sat, 11 Jul 2026 03:04:36 -0600

DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;

d=vicreport.com; s=default;

t=1783760604; h=Date:From:Message-ID:Subject:MIME-Version:Content-Type;

bh=pY2ffmBUCVmRvpfQyOvZrzQ9pOp4kBmAzc1kuQwviLg=;

b=NkdIIIW5Bz69Ndu+rApJen+kvS/ddWaP8jJb2XQUt1FxLXpM1AIQyRaRMXIkPixYWoMiyki3hGR7brWLFjiP02uJAeJgRmDf7cCfs6DqNv4bQLvVirvzr3dLwm7x7RGBqICgZ1qo93V3w6AYZQ20Ca1569w8HNX7+FLMXApc+DM83+jBzozkuwLNcMH9Di9P1rJMFHU/fmnJA3JWvubw2WH6HeWxotEn7SPiEpTFlvTd1MsTbkHjTMBaO6uF9wv+UytKvMKQTYoJn1ccZRKMGk9Tf/yTnFV4x+k5/XjBgJfjawYKz6S4eCGwEQVzj956+VYeD/hCJYK7K8lmNohd6Q==

X-Alimail-AntiSpam:AC=CONTINUE;BC=0.7021549|0.2639619;BR=01201311R401S80rulernew998_84748_2000303;CH=blue;DM=|AD|false|;DS=CONTINUE|ham_alarm|0.0684978-0.112928-0.818574;FP=13540523820541259926|0|0|0|0|-1|-1|-1;HT=maildocker-contentspam033032053168;MF=daly@vicreport.com;NM=1;PH=DW;RN=251;RT=1;SR=0;TI=W4_0.2.3_v5ForWebDing_21250492_1783760590745_o7001c93d;

Received: from WS-web (daly@vicreport.com[W4_0.2.3_v5ForWebDing_21250492_1783760590745_o7001c93d] cluster:ay29) at Sat, 11 Jul 2026 17:03:11 +0800

Date: Sat, 11 Jul 2026 17:03:11 +0800

From: "Daly"

Cc: "vicresearch"

Reply-To: "Daly"

Message-ID:

Subject: =?UTF-8?B?U2VtaWNvbmR1Y3RvciBQcm9jZXNzIENvbnRyb2wgRXF1aXBtZW50IE1hcmtldCBLZXkgUmVn?=

=?UTF-8?B?aW9uIEFuYWx5c2lzIFJlcG9ydA==?=

X-Mailer: [Alimail-Mailagent][W4_0.2.3][v5ForWebDing][Chrome]

MIME-Version: 1.0

x-aliyun-im-through: {"version":"v1.0"}

x-aliyun-mail-creator: W4_0.2.3_v5ForWebDing_M3LTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzE1MC4wLjAuMCBTYWZhcmkvNTM3LjM2vN

x-aliyun-mailtrack: {"foreign-track":"0"}

Content-Type: multipart/alternative;

boundary="----=ALIBOUNDARY_2346_7f87ac624700_6a5206cf_14313a"



Dear,

Regarding Semiconductor Process Control Equipment, we just published our 2026 latest survey. The following manufacturers are covered in this report:

KLA Corporation

Applied Materials

Hitachi High-Tech

ASML

Onto Innovation

Lasertec

SCREEN Semiconductor Solutions

ZEISS

Camtek

Skyverse Technology

Toray Engineering

RSIC

Wuhan Jingce Electronic Group

Microtronic

Unity Semiconductor SAS

SMEE

TZTEK(Muetec)

DJEL

Nordson Corporation

Bruker

Nearfield Instruments (NFI)

Confovis

Muetec

Nova

……

Reply ""Yes"" if you want to see the executive summary. A sample report will be sent to you.

Best regards / Mit freundlichen Grüßen / 此致敬意,

Daly





Instragram followers spam from Google Gmail

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Jul 2026 17:51:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiKzE-00000000EqY-2qae

for dave@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 17:50:28 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 Jul 2026 17:50:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f197.google.com ([209.85.128.197]:42115)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiKxx-00000000Eeh-1nZ8

for sales@nk.ca;

Fri, 10 Jul 2026 17:49:11 -0600

Received: by mail-yw1-f197.google.com with SMTP id 00721157ae682-81e688de6beso48805327b3.0

for ; Fri, 10 Jul 2026 16:48:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783727297; x=1784332097; darn=nk.ca;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=WD0XtDFLRo2FnyWmjjhF2/2erftLJ/0o0ZGwHqi710/Y/7SzUCyklywQxeP0uoQs98

BgrwGYX9pdSARoeWCvKJipyhKchS3XnxWzamrJIWvwPKmRM3sVgVwJmRU+P6J9vmDS/O

BDv4BEd6EOhhLMxRO3HzObR9fsmUnvvrPXeGY7bV/02ZKT6z1gesbAlnToq56G1DvJQl

fNN4clmS+jMs1TM9xVYiOaRc+P7sa1DPq7kt4/lsFPAZzKJabbn5TYNX2PgGgIVq13/r

aQIyGOCcEZoDs+eJEVPSXxYX8wSZYHkkDE+/w0Ais9nSwVGE+0eXU3k+MyTNJG+r3dmr

SzjQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783727297; x=1784332097;

h=content-transfer-encoding:content-type:to:from:subject:date

:message-id:mime-version:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=hdXdrm3esRZO8s6qEECXhoPlo36E2/rphYZxU8e9dp8=;

b=ZJo/NaeJ/3+FOI6L8uBhxe/e+NUJyTecEOwSbylB7rhoJcZe188cErERrFY7iNaCeC

1FjZjgswuix36PdfFMiKPNEytVD+Z15OLsOD9rCBV9dPfFCJUExHbPAhXJJOz+7LjAqy

Kdj+fUUvC5raD1fJVL7q6JfJpnPeoLS1MMAZukUJL9gwnKGsBjOUBrryrr4y2R9duknF

zW6MVXqTmvDMHtbiM4z6bFlxDLqUZnlJ9Pbgdn7JzWA4hio+3h/VW4vkMtAdlBagQ/Nl

C6dqwyg3+Jr2nA1N98HIpSqQ1cBveCnjaAGkh7+ESIpfs7SIEFxrub8JPF27ItGrLHbd

CKOQ==

X-Gm-Message-State: AOJu0YwZTGE02NfM+u239oXJg5EK8hr2LDdXGfLbrwv2rfoMqyTfYgPQ

z4OwRRJ54LPxEnb6YjqIprCptW3Ifz18rytqxuUVFmKXrwKK6+tEc+FmI4cEMzBcc9Ag9bewGNt

rQYCU9w==

MIME-Version: 1.0

X-Received: by 2002:a53:b112:0:b0:665:1d25:ff6f with SMTP id

956f58d0204a3-667c5ccad8fmr2734894d50.48.1783726862073; Fri, 10 Jul 2026

16:41:02 -0700 (PDT)

Message-ID:

Date: Fri, 10 Jul 2026 23:41:02 +0000

Subject: Netknow Internet Service, Get More 100,000 Instagram Followers

From: yunipuwa1@gmail.com

To: sales@nk.ca

Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes

Content-Transfer-Encoding: base64

X-Spam_score: 8.6

X-Spam_score_int: 86

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time. We offer social media services, If you're interested,

please visit our Website. If you're not interested, please skip this step.





Content analysis details: (8.6 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.128.197 listed in dnsbl.ahbl.org]

2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the DBL blocklist

[URI: instatool.site]

-0.0 SPF_PASS SPF: sender matches SPF record

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[yunipuwa1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[yunipuwa1(at)gmail.com]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.128.197 listed in wl.mailspike.net]

0.0 URIBL_RED Contains an URL listed in the URIBL redlist

[URI: instatool.site]

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} Netknow Internet Service, Get More 100,000 Instagram Followers



Hi, Netknow Internet Service, Get More 100,000 Instagram Followers

Sorry to interrupt your time.



We offer social media services,

If you're interested, please visit our Website.

If you're not interested, please skip this step.



We will help you increase your social media presence to another level.

( Threads, Instagram, Twitter, Youtube, Facebook, etc. )



Are you interested in a free trial ?

Special For You Bonus Extra $2 - $5 FREE BALANCE TODAY SIGNUP NOW..!!!

GET 100K Followers Instagram NOW !!!

Order here :



[ https://instatool.site/store/free/?netknowyeg ]





Take free trial service today only...!!

10 -101K Instagram Followers



- Instant Start

- Safest Methods

- Privacy Protection

- Speed 200K Followers/day

- High Quality Followers

- Drop-Back Guarantee

- Trusted Seller testimony

- Starting get 100K Followers Instagram

- Guaranteed to be the cheapest

Docusign Phish from Google Gmail Part 3









3D"Logo"
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/email-logo.png" width=3D"116" />






3D""
src=3D"https://docucdn-a.akamaihd.net/olive/images/2.76.=

0/email/iconFileWithCheckWhite.png" width=3D"75" />

A document has been sent for your review



target=3D"_blank">View Document








Please review the attached document at your convenience. Contact the =

sender if you have questions.





This invitation is intended only for the recipient and contains secure =

access information.











Confidential: Do not share this email or link with =

others.









About Docusign: Sign securely and legally in minutes, =

from anywhere.





Need help? Contact the sender or visit our support page=

.









Download the app:
.com/features-and-benefits/mobile" target=3D"_blank"> 3D""
height=3D"18" src=3D"https://docucdn-a.akamaihd.net/olive/images/2.62.=

0/global-assets/email-templates/icon-download-app.png" width=3D"18" />Get =

Docusign





Sent by Ashley Allen via Docusign. To unsubscribe, =

contact the sender.





This message contains =

confidential information. If you are not the intended recipient, please =

delete immediately.











Docusign Phish from Google Gmail Part 2

=EF=BB=BF


name=3D"viewport" />

Docusign Phish from Google Gmail Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Jul 2026 16:09:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiJOV-00000000GoE-2iBP

for dave@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 16:08:27 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 Jul 2026 16:08:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f102.google.com ([209.85.210.102]:43323)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiJB1-000000009Jp-1BTl

for root@nk.ca;

Fri, 10 Jul 2026 15:54:35 -0600

Received: by mail-ot1-f102.google.com with SMTP id 46e09a7af769-7e9dc546f40so1813851a34.1

for ; Fri, 10 Jul 2026 14:53:43 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=sabeng.it; s=google; t=1783720418; x=1784325218; darn=nk.ca;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=xsSnEjMuhKAAplWQmLPsIFUXTJtv8AQO7G79q61VKJc=;

b=h7GqD0/cFHV/jgFg7otbaLHzyMyG/6qqOT7X0m751339Bh0cPp71Y+miOO/4BD4xbf

DYNopM1ATbwxygcJWs2khrrE5gRd4nCwA9LRhyQzEwMqUrLhxyGl48WefXE7XqS+GfgX

GXbslJaThy4VALgff75e55tQtpXTyQnrDyfqg=

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783720418; x=1784325218;

h=content-type:mime-version:date:content-transfer-encoding:message-id

:subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date

:message-id:reply-to:content-type;

bh=xsSnEjMuhKAAplWQmLPsIFUXTJtv8AQO7G79q61VKJc=;

b=EgvFEI7vgkpUZD0u2uvobi7BSuCpme/PtV42Iav+ksY3wai2TItIRTQlch7z6mlkUQ

dbwOi90Slxsxe7mjY/UH5U0xcRWGAqzHUnSPwage77UF1quAyo0kGEIFuLdFT+DXexKL

TaiK92P2bWWdNzx1Ll4M0IQ72yL3GkcNBfDLea/8La+Tj+M/lHYUufvO+PLK6cJLdb+X

Skfh/Hdhh+uIRCMbhEgX6MGvne2X6sUK1t5uDb/JGGYrc85k5g2HMNLmrOUJ9gXz4q/i

12xzm7K2tRqgglXDPYMvs2b7X2IlixP++v5AplaPoJIge/k0XVaLktJzU0t1qmEvZ8Q/

OLJQ==

X-Gm-Message-State: AOJu0Yx2eBHVAVt4e/pZgRAiKFX6iHW4JKoafe8lqGL1B2pDIw5iWl7d

GKH9EQQCCvxEcYQ3DNpbK9pOJQwIXbrHE6ZXVc6tEb5DQuYhaP9bbGgdgggS7V7dTbiGUvzsAV1

GSjoLY5Wn9s+0pafqjf5zYpWJZfLmWUHCgknD/b82wqXoQVI=

X-Gm-Gg: AfdE7cmWK4PhxApIFCZ/ZlzpRTwuaD7XPxNd8xGeY1FLPbVHhvNjrbToxlu7bNSV4FA

wWDyIG9OO55Yl2rB33f/B4C6LibA3rdjASIHrsXF73Bta3FtaQeT3cq/JDjJNIB/RGG7IKFcTTa

jqRkp5UKpqtKage5yoG/3Cm41Fx0fJ3JdwlSG/jKHFQh+kj3/yTdxjAlPWiqYjIFvidXJAfwR7o

ydk2Thtmu7fpjlWtoYAnqobAyMFpauPGmBpWWxBKMUiSu9eoADSUE+Z5QGoL/J/vVFiiGDqAJBT

IGFePJndufdbEyyz3qFoV7ZM0FAuFi2pfVGQ8kXeCEpm/L189lTsjFCOA4BCZI3snzzgSw8zkZF

KtFLqZfeuRUsnPyCu3A==

X-Received: by 2002:a05:6820:f006:b0:6a3:6851:3480 with SMTP id 006d021491bc7-6a38b99dff6mr2767701eaf.24.1783720417999;

Fri, 10 Jul 2026 14:53:37 -0700 (PDT)

Received: from sabprogetti.com ([192.210.236.148])

by smtp-relay.gmail.com with ESMTPS id 586e51a60fabf-451917c9bc1sm579465fac.14.2026.07.10.14.53.37

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Fri, 10 Jul 2026 14:53:37 -0700 (PDT)

X-Relaying-Domain: sabeng.it

From: "Initiating_Payment|Schedule| Sign_Online/OU=EXCHANGE ADMINISTRATIVE

GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-87541"



To: root@nk.ca

Subject: =?UTF-8?Q?Review_the_Attached_Commercial_Invoice_D?=

=?UTF-8?Q?ocuments_=EF=BF=BD_07/10/2026_=EF=BF=BD_?=

=?UTF-8?Q?root=40nk=2Eca?=

Message-ID: <8a2175a5-a98d-ebf9-3113-c15ae3cfa1a3@sabeng.it>

Content-Transfer-Encoding: quoted-printable

Date: Fri, 10 Jul 2026 21:53:36 +0000

MIME-Version: 1.0

Content-Type: text/html; charset=utf-8

X-Spam_score: 8.8

X-Spam_score_int: 88

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview:  A document has been sent for your review View Document

Please review the attached document at your convenience. Contact the sender

if you have questions.



Content analysis details: (8.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[192.210.236.148 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

[209.85.210.102 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[192.210.236.148 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[192.210.236.148 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

[209.85.210.102 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.102 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Review_the_Attached_Commercial_Invoice_D?=

=?UTF-8?Q?ocuments_=EF=BF=BD_07/10/2026_=EF=BF=BD_?=

=?UTF-8?Q?root=40nk=2Eca?=

WEb/SEo/App Spam from Microsoft Outlook

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Fri, 10 Jul 2026 12:42:00 -0600

Received: from mail-japaneastazolkn19013086.outbound.protection.outlook.com ([52.103.43.86]:4650 helo=TYDPR03CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiGAH-000000001nm-3XkS

for dave@nk.ca;

Fri, 10 Jul 2026 12:41:44 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=lycP3dFP56B7OBnXYMokpPTjtYd2jMCbvSZg82YyyXX6CGugICJAPEtokAEiuA9Ov4HIscNJYp1WdAH8RxeG1iWgcEJEiLnc8vkQ9/GtXDLXONsxZnslaX/aVYTdofBZxnzB+F0mCL7oCVkW2UH3GFAZxYakrUPw3PHl7BCFjFe7eQp7XXGZ+SfBNHr0MdEW75XkF8ydLv/P4h84/Zz9krqVjBmt+EX9OSowfJv7FXXlbX1bbKCXwXUtrEo2sR6oJJBhszakVyCwRN0TO8Z5rqyZ/OIx4vJO/W8LQIwp3Ab8/SnCP3MDhuAvaGkA2bj3unt1Ptu1HBbuPJ+o6ijBmw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VoeZTCAAMD0YI2SljC1E/k07He5tt8Bl8fz9VYuvTC0=;

b=Y/HhM0NSJz1vIMmDUEseJr0TKMiRZ0zQRh2xZzBGi2nFJVma3hdP5O7eDZcTJI+n+NrQwRqxW6muzAr2xlHASx6Ct2hVlGPLIgU+4qvCH0T0TZvWUbH9juWC5MD/tgNJHHygDbrZ1dCXisLnnPv27kUKsLbJqoudHA+qRvQb3A+nrIUIS5QbnbrdNL//XHUnPelsV2JVXC4hpDdFnrQNKgvLTj1XjW2V3bvkzkiTwJHx+lErplBtT8dFFt+Qzibf/R7QE8460j/R72SRY7jzj0qBS36zISe1jgUdf5ukqip/eatZs3k046LkI8NFKlJdjD19P186RDHrIJ8nYQD5Zw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VoeZTCAAMD0YI2SljC1E/k07He5tt8Bl8fz9VYuvTC0=;

b=dB8FH2Zi2zk0tWdVuhca37OUb1Ep37pZIYZ1p0Ba4uSrJuDuOeJyT4y5Ef7Qfpdo9ywWOSA1sPmOtRQG/00QI/2fUC2OHbZq2Lfm+KspzcelLc9VfGpQyhA4bMAaZiEY1cXf3nOMGsqChfrc9auEy6kT5D7oYVXw9B23F9yvMz9ppwer4rfhvr3BwaHgmGTR4XC/PT5/2oxd6W3EszvyzbIVq6UehLnNNP18k/PBU00MkIkHS/ubm94kMDm4+2V+/L/BRZNUmjh89+mETpmTIuCYfPrnhTwcH9kdMhDczzN14geGuVNALPb8jJ/oY8RVt9bIEfrgduGgR4BsRid70w==

Received: from KUZPR06MB8058.apcprd06.prod.outlook.com (2603:1096:d10:48::8)

by SEZPR06MB5413.apcprd06.prod.outlook.com (2603:1096:101:64::14) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.17; Fri, 10 Jul

2026 18:40:17 +0000

Received: from KUZPR06MB8058.apcprd06.prod.outlook.com

([fe80::ca33:ceb4:f138:cf14]) by KUZPR06MB8058.apcprd06.prod.outlook.com

([fe80::ca33:ceb4:f138:cf14%5]) with mapi id 15.21.0181.016; Fri, 10 Jul 2026

18:40:17 +0000

From: Helden Thomas

To: Helden Thomas

Subject: =?utf-8?B?UmU6IFllcy1Qb3J0Zm9saW8gYW5kIHByaWNpbmfigKbinKg/?=

Thread-Topic: =?utf-8?B?WWVzLVBvcnRmb2xpbyBhbmQgcHJpY2luZ+KApuKcqD8=?=

Thread-Index: AQHdCyu0LC90DjLhG0+ucWGZ9JYxx7ZcQRtQgAYMhIqAAZkiYYABpcH1gAGUDJA=

Date: Fri, 10 Jul 2026 18:40:17 +0000

Message-ID:



References:















In-Reply-To:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: KUZPR06MB8058:EE_|SEZPR06MB5413:EE_

x-ms-office365-filtering-correlation-id: 12034dc2-66a6-4247-0665-08dedeb2b009

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799012|8062599012|8060799015|20031999006|7071999006|31061999003|22091999003|15030799006|24121999003|15080799012|24071999003|55001999006|25010399006|4140399003|24021099003|39105399006|40105399003|51015399003|35041999009|11120399003|26121999007|102099032|440099028|3412199025|1710799026;

x-microsoft-antispam-message-info:

=?utf-8?B?ODM3YldvUityWTIrN2FxL1JWU0RmTHBWU0VYam5na0g4cmJWVU1CekdQbisr?=

=?utf-8?B?eEpNem9SYy9QRHYwOVpLSlpxSTc5b0xERmN2dTdUWUtRRW1TQVFwcVllWThT?=

=?utf-8?B?b2FPMlh0MTFTZ0VJeUFXQ0VBOG4zTEdXT3lHT2x0VHRvK0JnWDh2M3RnNjdY?=

=?utf-8?B?N2VkMTZ1Rm42bFk1WTVkTUNjOW41Y0tTdFFhamh2b0VBWXpaNWJuT2pwYWFQ?=

=?utf-8?B?ZkFON2hlYitMc1E3ckh1NDh1YXE1RTZYUEdVYkFqaUJpYWFqV1Z1ZDRMckhz?=

=?utf-8?B?V243YmVGK3BFOU5iQk9BdXlhRVF1a1RxTWZMQisyUkhqTGdkN3lYdlYwZTFE?=

=?utf-8?B?ckZwbGZITU9kUXpkbWt6ejJLejJXL2psMlkySEJyZUtlUWg3SVJ2Y0tQaVdW?=

=?utf-8?B?U2JXTHJ5SXNJUGFETGVUYWU3RitsdldSVTZSc040N0dWcTJneFVsK1lSWjI3?=

=?utf-8?B?ZFF5ZVF5S0g4L3FKbjhRelpkUmk3T1RtNXQreXd5dFh0OUp2ZGFLRlh2T0F1?=

=?utf-8?B?T0ovQ25ZVGZLa2I1WDNMNTlGdVJleklUa09ZSUtxaHE1UFBRb21aZnEvSWFH?=

=?utf-8?B?b21nYWt5em1qV3pRN2p3RkZpWE1TK01JcHlkRXNEVDQzMmtZQ3k3YjBtalF3?=

=?utf-8?B?Vk1YdHV6R2xES0NzYWhYR05KL29aaHRTTnBTR3RKU2oycnB5bmZDbkU3Q1Ju?=

=?utf-8?B?L2xGaHRBN21JSmVLNmUxbnh5b1k4Q3ZiaEFrSHpWMjBwdzVxZ0RZekhWSWdp?=

=?utf-8?B?SjhuTXdJNldYT3g4TTFnNWlITVVUU2ttYkhnRVZIU0prR3ZUeStvL1dvbWxk?=

=?utf-8?B?dmVha0lWL0Fta0RpcDM0d2FQZTdZNjUrMEVBU3ZUUlh2M2liZGNyT21aTWJQ?=

=?utf-8?B?SVk5TWwzUTZJMG81MkFaWWNKcTlLd1IrV0UwZGo1QWlkbUNJRURBUWI1MG9M?=

=?utf-8?B?L3ZqcVM3Si8rZmFyQWU1RndyaU1iSzJFY1BLekVodlMxZ0QrOWRkdmhoU0FK?=

=?utf-8?B?S1N4UWNPM1pkVENDQjI1MWIyV0FSODh5eWMyOWp3RVpva2Jjd2pQOWJERDhM?=

=?utf-8?B?bUM0RFdVaFk2QWl3S2wrWmk4NUxuNlpjcjQyV3RJTXZ6MkZCY1NYWko1MmJw?=

=?utf-8?B?Q0FXQ3FBMTFVNlcwa1MzSXRFRDd5aHc3TXZ2aldzdGRIUUFIVGJGbG8vd0gz?=

=?utf-8?B?b0ZUL0Mzc0hFTk5KWTJBSzVzM0ZBdDhTblZ4aWpRVjZIam95QUNRTUhVTlVq?=

=?utf-8?B?REFKUGlQaGxKenFhUWtSdll1U0gzWStzNlVibmJveTRMQzVJVVpkSm1iZU5Q?=

=?utf-8?B?ci82ck5HT1NJMDF4K2lsdCtOMHc2RHZnNm1xQldibllrelRaSi9lLytzSjh3?=

=?utf-8?B?MG1heWs3cFRiQ1hpRUltaFN3ekVlUUtOR29wVWZlSWFUSk5zRk5sQ2VFZFQw?=

=?utf-8?B?VjRzeGNlYUY3UGY4LzV1aFdYVmZOdnVDVU5tMG5Oc3B5ektWTUlPRnlyT1pJ?=

=?utf-8?B?dHhPMlAxVmhmbWxNV3hMWE5JTVR5WkVxSDZxZGN6S25hNCtGeUlpcUw4TS93?=

=?utf-8?B?OUlneUpjanhXa2tFenl2YWM1Y0JVd0sxQ0xBRzJzeXRBd3pJVVU4ZGJZOGNG?=

=?utf-8?B?anc5NXUvT3lid05aR3p2UXVrN1dSYXBQVG9SQ3VZKzk3YWVCQ3JhSWRlcmVW?=

=?utf-8?B?TkZmWW1pY0U2NXMwcThxKzhML0k3NkJYTURRRXVFZnRBSHFhbnpPYzRnPT0=?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?utf-8?B?RWdBVFhCeW9xeFRROW1DK2NYYmZ0cGpVcVErMFZFMzBnZTQ1SGYvdE95UkdB?=

=?utf-8?B?K1pNNWw1NTF5RVEweTNxeXBSbUhYM0cvMGFkZHo1bjdaYktXMHIwdlNtMndO?=

=?utf-8?B?UDVwSEZFSkJVVEtxSWxwcnVOSG4yeE9oajcvUlNPVWpucTNqdk8vZVd0UGJn?=

=?utf-8?B?UDJlZ1I0ZVRHaEIwUEtZeXBXMTh5QUh4cDczQkZxaVdqWkIvbzl1eXFJdDQr?=

=?utf-8?B?dEFFaWpUdWtWb3FoaXFZUUR4V0hjM0t6MWRDZ01XclVjbHJuWDRUVzFLc3ZB?=

=?utf-8?B?OHRFTGwxeHJIbzR3YnpKR3pSQ2oxZGU3cDk4NXJZdHZpQTJnbEtZWEw5bEJl?=

=?utf-8?B?QWMvaW02V0tINS9tb21FNzBxN1krVnpJeXllRU4vQVc5L1RVY1I5NU5hM0hW?=

=?utf-8?B?T0FyRWRLMkJ1UE9jWUE2S3ZBOFROQ0c1ZmlrTFNvSi9wckpuRFR2ZXpxUEx4?=

=?utf-8?B?bjNmSDBSdnRFa2Y4OTh2OUdBOFBkd1k5UzdNeEhGZ1lxbWZXUW9mM28xWkZh?=

=?utf-8?B?blpUSS9oeUc2emI3UVByTnhXTE5ES0ZnbzVlVjRrRjc4YXRiSmxtQmZ3eE1Z?=

=?utf-8?B?ZFA2TlRCeDVxTHRvOW51Y3NxSjRoNXpjZkMzMlBJRXpKTGJwKzdXZVBnTjJY?=

=?utf-8?B?cTlsamMwZWJtSmFMRnN5TVJvVTduZk51cFc5UUV3VzdQZnE0V20yTzcrK2wz?=

=?utf-8?B?MHR0dmtFRlJrcXBmbjRqVk9Qb0R3Z04rMHhnMVZEdWtVOVBSN2EvS2s1QlNK?=

=?utf-8?B?SHJvOHJMYjBNa3lOUVFLTTdnWUFQbU9MUEFOQkZWaDRaUDRjY20rYjh0aHFJ?=

=?utf-8?B?K25yVEtoVk9Eb01SYkcvQVdJbE9heFhva3dGcXpsWHV4cFBxREVueFU3NUJR?=

=?utf-8?B?aFY5c2h2VmwxZGhuOGtlQUxUK012NnhucGtXUDIzT1BWNDlUZ2xhZStEeG1h?=

=?utf-8?B?SlVqV0tHTUwrRDhQUUN2VzBwdjA5Zkl6Q3FwdTRaczNIM0EvZGcvbDcvY1RY?=

=?utf-8?B?bWx4OHI2Q2Nua1lKV1FrV3FGcUFJR09BOFFOTGhQQ2JucUorUVFpdVRsNFJm?=

=?utf-8?B?VHVkK3ZLQ2ZhUU5MSDc1UXZOOWJ6Z0NRK042ZExNMlM5MFh2TjQ1UkpHdmN4?=

=?utf-8?B?a29pWTRwVFlnNm15eFVvRWVRaUxJdmd2RDN5L2h4cm55TCtxYzQxVEtwS1hx?=

=?utf-8?B?cUx3QjJrRHlocmQ3T2IxLzkwRGdiZll4SUVPVEpsSFFOcXJud2JXTy9iT2JF?=

=?utf-8?B?OUFOcHJwMk1uUy9WTlh4UE9VaE9KemZnTzE2SFVPejE1ZEJrdGd3YnZKd2xY?=

=?utf-8?B?WFVaVzA3UGVSKy9DWXZ0bzkxZXFkN3ZIZksvZUtqd1dlQXVkMEoyUE9OSmo5?=

=?utf-8?B?Mk9UVWJLUUJ0bXlWb0xseWtZZ1pVTEI3c2c0dDZJQWxZUXIxOFJ6WmJJSlRR?=

=?utf-8?B?ci8rbVhqeGZ6cllWZHE4TFRrVVlIVWdLRGZHYXVRWEhIWFZoUG81Y1RWbDlG?=

=?utf-8?B?b0JTZy9JR0N1TzIrS0trZ1crMm84V2E1UGk0YWNVS0VsYWthSktyZHlCeUlZ?=

=?utf-8?B?cGFVMm5VQ1IxUHFMeHVEM0ZZSGoxMDJhdHJzQk9pd1RQbW5EeFI2c2hyeld1?=

=?utf-8?B?R0hmUCs4YlJJaUx4UUFsakJnSDlEUEJQRkpsUFpra0t6bkZHZlFFZndDakVP?=

=?utf-8?B?akxPOENEeklpRjhZQXBpRGpvMC9FUzFuem5QNk1UdGVBODFsTExZeEdHc0w2?=

=?utf-8?B?SlNzZ0F1c2djZzZraHEvYzRDQkppOUQzc2tUTE4weStkRjBocEZTR3VBODdm?=

=?utf-8?B?OThIMXBFZ08zSThEY3pET01oNnBhTm8wU3lDZEd3czVKVGZqa1RUZHVJUFA5?=

=?utf-8?B?VnhGYnBDbnZVN3FpME8xb1JmVFpFazkyT05BM2JvamRwMndLQnFxeFJYakhO?=

=?utf-8?Q?HigKuTnPtwTH69KN98qOBSTkVV39Dvpx?=

Content-Type: multipart/alternative;

boundary="_000_KUZPR06MB80584B1725D28A5A9069B3FD94FD2KUZPR06MB8058apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: KUZPR06MB8058.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 12034dc2-66a6-4247-0665-08dedeb2b009

X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Jul 2026 18:40:17.1693

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR06MB5413







Hello,



I reviewed your website and noticed some opportunities to improve your search rankings and online visibility.



I’d like to share a short SEO proposal with recommendations and pricing details.



Please let me know if you are interested! I would be happy to provide you with more information and a pricing list.



Best regards,



Helden



Bitcoin PAypal Phish from Microsoft Outlook Part 4







Haresasz Nxysarwsa has invited you to PayPal Payment Received – Bitcoin Order Processing

Title: PayPal Payment Received – Bitcoin Order Processing

When: July 11, 2026

Organizer:

Haresasz Nxysarwsa

Description: Dear Customer,



We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.



Transaction Summary:

Order Type: Bitcoin (BTC)

Payment Method: PayPal

Amount Charged: $700.00

Status: Processing



Your order is currently undergoing verification and will be completed shortly.



If you did not authorize this transaction, please contact our support team immediately at +1 813 934 5533.



Thank you for choosing our service.



Sincerely,

Billing Department

Attendees:



cynthiaperez389903@groups.outlook.com





Dear Customer,



We are pleased to confirm that your PayPal payment has been received successfully. Your Bitcoin (BTC) purchase request is now being processed by our system.



Transaction Summary:

Order Type: Bitcoin (BTC)

Payment Method: PayPal

Amount Charged: $700.00

Status: Processing



Your order is currently undergoing verification and will be completed shortly.



If you did not authorize this transaction, please contact our support team immediately at +1 813 934 5533.



Thank you for choosing our service.



Sincerely,

Billing Department

Kedy

sobota 11. júl 2026

Organizátor

Haresasz Nxysarwsa

haressaznzxrrsxaxz321@gmail.com

Hostia

(Zoznam hostí bol na žiadosť organizátora skrytý)

Odpoveď na cynthiaperez389903@groups.outlook.com

Áno



Nie



Možno

Ďalšie možnosti



Pozvánka z Kalendára Google



Túto správu ste dostali, pretože ste účastníkom danej udalosti.



Ak túto pozvánku prepošlete, ktorýkoľvek jej príjemca bude môcť odoslať odpoveď organizátorovi, byť pridaný do zoznamu hostí, pozývať iných bez ohľadu na ich vlastný stav pozvánky alebo meniť vaše potvrdenie účasti. Ďalšie informácie

Bitcoin PAypal Phish from Microsoft Outlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?ZmF1dUFxSjZFeCtXU1ZaL2hmMGdiRUY0ZEl0RC80SHRiTlY4MkVUZUZMNURq?=

=?utf-8?B?UnRITjVuVDFPSVhnQm5XZjVHY0dTMGxXSWRlY2pxaXozVEpXNUJicWlBRWta?=

=?utf-8?B?bkgrbFpUREJHR0xQVTJBdlZBNEVwaUxoaWs2Y2JkbTJXQVhmUHd5VlNOdWZ1?=

=?utf-8?B?Tnd1QjlRWkpqNUN1bnNQd2VaUXFaaHA0aHdDSkJSNnFad0ozTVFWZ0RablE1?=

=?utf-8?B?Tnk1OEVJT0FtSmdZM09TWURxMEsrcHlreHp2MDV1aWVPSlhDODZrWGdaTU9Q?=

=?utf-8?B?Qm51WkllT2RJQ1JrMmw0VDMwRlpReVZIdXI3bUFHK3lkVHA2L2o3Z2JJZnJV?=

=?utf-8?B?K1d1bVVWYXJqZ1BRYk1IVFR2RUVIQmFSTEFYOElxL1o5M212SnpLMG9tSXZL?=

=?utf-8?B?WXRpY2ZRa3FUMTE4ajEvZzA2TW1ZRzBkbGdXYk9QbXlWb3BPL1ZDdW8wNkNu?=

=?utf-8?B?QWh0RnV0WU9LN1hONUlOSTlGZWJocnpSbkpQajU3YlpZQzJsYktaeHlFakpH?=

=?utf-8?B?VFBXcTdwZFBMWVM0TWJOcXRSTVNZcVJHKzluUjBxU1djUHJaTTloTlZiRVU0?=

=?utf-8?B?a2txWjBJZDFCQUkwMVBLUEpLeG5SVTVtSTlxcmxRNm1YL240ZmFpTFNBampU?=

=?utf-8?B?UlNKa052U0Z1VDhTRXFOQjBEamdZUzZGd3pJOGxLRW5KRGFpcDlWYVJLOGtX?=

=?utf-8?B?U29MSDRkNWhybWdGZjh3NytTS1VPdHp5MVFCUUF0MlNvLy9QdVFiNXRycGIz?=

=?utf-8?B?dHo1YnAyT2pWZml5bGovdllqSVBBWE1PdzNUSExUTmt1Y0NvZ1UwWmZoVVR6?=

=?utf-8?B?L3gzUStBZzhjZ1N6RUVvY010VkNINlFxVmg2T29RSlQ4dGhCYllaR01Nd0Jj?=

=?utf-8?B?b3lwZWJpQmQ1SnJmTHJIaWcrMXJBSElSekluNjB1NmVnYWdMYTBhbTlYdDhu?=

=?utf-8?B?ZVdMUnlGWU9QOXRmdzVMeHU5Tm54UXkzalNwMTB1QTdWaWg5NEtIZjRhUGpY?=

=?utf-8?B?RGpiTGZVWXBKakI4dG9QdFdvTnRUTEhMeHFOc2NLRVQxc2RWSC9NcG8yQUZB?=

=?utf-8?B?SHN5TDBHdmlIK1I0TjA3RzVCUzh5bWNZMFBGb2VUaVlTa21rajkyZE53OVRK?=

=?utf-8?B?cWQyMkZ4djZxZitwVW1JaUxXcjdWU2Q3MFNaeklWS2dFUDhEZ2tjbmt2SkdR?=

=?utf-8?B?WnZ5RVhsbSt4RzdpWnphUVpkbUgxYmlKdFFKbTZVb1ZCK29LQTBqR2lBVXV1?=

=?utf-8?B?c2Nmbkc3OUoxbUxtSDlwU2NNT09qVldacG42OGFCU0lEOExSV01hWm9ZNE13?=

=?utf-8?B?YXBjYUd2UlBoSzNwZ0g3SHE1K0pqWmdscEJkOTVMa3grVlVYU1M5Qjd4VldB?=

=?utf-8?B?SzJsMS9LcXBFY3d2d2JhMFdPQWRIRzdJWXpHbm1EQXZ0TDQ3eWRZT2Q4Tmtp?=

=?utf-8?B?ZlFkUGRQWFE2VmsrWlBrQVRkNjBmQ1M4bjQwL2Z1M0owWHRTOEFPWi9xd0V5?=

=?utf-8?B?bzVacTlEV3hCYmI4TG9pcEN4V0hmMnBzc1ZRMmhDQjRuNEI3QmV0YjdNVk9K?=

=?utf-8?B?aXpRdUhXTlRqZVp2NHpncVZTNGdMbjVxTnpRMUQ5dXlmWCtWT2tQOHBDT3hi?=

=?utf-8?B?QjN6U3pxa1c2OHdUR2RqUWJHQ0k0MmtTSUhTKzUyRlFQbHBIbUlaNk1LK2Vp?=

=?utf-8?B?dnhHeXFIbkd3NzZKbjF0cmhBeTVrdlVRVWpaS00rMTdINEpucGYwOVd2d3gx?=

=?utf-8?B?WFFSN2JyV1ZDTy9UNTFuVTFid0tWdVJ4N3U1ZjBrS2I4OGRnVi9iQUxaY0dl?=

=?utf-8?B?V0kxTWpUd3pyQjQ5RE9ValBSMklJaWljWjVFMEdvZGFnTWs2QmZGQVY5WjF2?=

=?utf-8?B?VkpZVk05bnRhM1hJenZjbWd4RlFXSEVHYXZ2TC8xUlAvSUZ0eVkxejE0MmNq?=

=?utf-8?B?anZnOENjV05TcFJUS1d5eXYyQkJaZmdCRkVsd3A1T1BIaVdFbHpKQTlsSXRD?=

=?utf-8?B?d09COGFWejhFL3k5TmZQNlRGMnJ0U3h0WGQxM1A1SmdiTXNGYndxZnJWaDNm?=

=?utf-8?B?UXZuMnAvWElqeEhETDRKTitjQkNqNXJUZEdGZXNrQkh3RFlTZFJTYjRjN25E?=

=?utf-8?B?NEZ3Nk8vR05HcHJSaG93WUdHenhpU3FUK2lFQlFzL2REMHl5Nk90ejhKZ3Nl?=

=?utf-8?B?MUZaRDZYcVBiZFFNeHpraDVqV2hvUXJlcGR4YnNzM3Q1R0g1UHloM2o4RFhq?=

=?utf-8?B?ak1QUEJYaGNQVDUyaVFncVRzNGs2UGZtT0lzK0l6S01VOHJQaWF3S2hJdjJ2?=

=?utf-8?B?bFgyT3ZPRXUzbTVKNUdaR2pqbS9kVnY3SVZjZXJMQmNPSk51UTkxN0YrUVU2?=

=?utf-8?B?a21tVzRJNlNCR2lzbnVtRDVPU0lVNENleE9Ed2J3YThkRlJKU3ZsQTlHNGk5?=

=?utf-8?B?OUk1a2xRSmlKS0JNb24xRW05cWkwTmxYYU9NeEJVZnU0em9LMURjdFZCVnJT?=

=?utf-8?B?WlBzRG5JNGE1aUxxT3Ivb290b3Q1VW0wb2lnRXdMbjNGNlA3aWZaM0Y5NmZ6?=

=?utf-8?B?R3dEc0FzTU13WkNRL3FDRGFvYnZRRTFwWmVKNGVpK3BhUWx6Ky9Mdi94MDk0?=

=?utf-8?B?bUNLcWNzalE5UFdlSmpPd1YyQnhHbXo3TUthRGdHZTlnNVl6cWVtTzNyR0Yy?=

=?utf-8?B?c3RaYkdTenlXVGF2V0xqOFZSOGpOWTcvRm84MXhFOVFEUWVSTHpKcXZoWSs2?=

=?utf-8?B?ckpyNFFPWGFjQy9MRVcyQkludlZrU0g3MUUySTlNMlRzYkhJK3dZcENuTUpX?=

=?utf-8?B?S2g4Y1EvQTluektyc3lGS2FPOHdiTmR2cVZHVzN3MEVnZ3B3ZW1SaG9wS29W?=

=?utf-8?B?OWljQy83K1BsYWpWZFI1azFZWVM0RmVPZFpHZ2lrSXdRL0hHTDcydjYvNENs?=

=?utf-8?B?NU1nVDMvTEhKWWcyMkdvYTlMUFV4NFlDdFBzMzU2SWgzdjhySmlkb2k2eUU2?=

=?utf-8?B?U3Rra0dlL0k4RGQ0WGVLWnJOZFR6RFI4YjliKzB2WXpvRGZnTFQ3MHpCZHV0?=

=?utf-8?B?d2gzVzQ1UjhUUVFSRyt3a2I2dVhzTlFIeloyZ0s0RnJPQTc1Um13MVk2V0gr?=

=?utf-8?B?REdrOG9uSFVSVDgwbXVxMS9LVGdFUzUxL1dDQkRjaWIxL3FKa29YOUZDSExo?=

=?utf-8?B?TVhOTVVKbU5GVUsxN00yNmhLR00vaFlmOWN6ak9WdE90OWZ1cE1mK0Z5djBh?=

=?utf-8?B?TWliSHFNdHhDcFpQVnA2bExSZC9lalpYRGNpOW0wdTNRTm1qTlp6cEJzUDJr?=

=?utf-8?B?UExDMVVPWC9yYWJjbi9neHBLK3pVeXN6UXZoNWxPQ05pNU9WdVlEVDlubytG?=

=?utf-8?B?TkpPU01PQktuUFdGRHhIZVB1Rk5kdWdnVHFzYk02T0loMUoxV0VoMnkrclI2?=

=?utf-8?Q?VjLyQszE3s6ugfbnasU0zRRTJJkpbv52pLJXkuE8?=

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-090a5.templateTenant

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Jul 2026 18:14:29.6488

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 627097d9-cc7e-488a-6089-08dedeaf159e

X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-AuthSource: AMS1EPF00000046.eurprd04.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV1PR18MB988755

X-Spam_score: 13.7

X-Spam_score_int: 137

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: PayPal Payment Received – Bitcoin Order Processing sobota

11. júl 2026 Dear Customer, We are pleased to confirm that your PayPal payment

has been received successfully. Your Bitcoin (BTC) purchase request is now

being processed by our system.



Content analysis details: (13.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.93.12.10 listed in dnsbl.ahbl.org]

[40.93.12.10 listed in dnsbl.ahbl.org]

[40.93.12.10 listed in dnsbl.ahbl.org]

[40.93.12.10 listed in dnsbl.ahbl.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[dnsbl.ahbl.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[dnsbl.ahbl.org]

[209.85.221.69 listed in dnsbl.ahbl.org]

[209.85.221.69 listed in dnsbl.ahbl.org]

[209.85.221.69 listed in dnsbl.ahbl.org]

[209.85.221.69 listed in dnsbl.ahbl.org]

Bitcoin PAypal Phish from Microsoft Outlook Part 3



0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.93.12.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.93.12.10 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.93.12.10 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.93.12.10 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[209.85.221.69 listed in will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:cafe:0:0:3 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[2603:10a6:20b:218:0:0:0:18 listed in]

[will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

[40.93.12.10 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.93.12.10 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.93.12.10 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[40.93.12.10 listed in bl.score.senderscore.com]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

1.0 HK_RANDOM_FROM From username looks random

1.0 HK_RANDOM_REPLYTO Reply-To username looks random

0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters

3.5 VOWEL_FROM_7 Impronouncable from header (7+ consecutive vowels)

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[haressaznzxrrsxaxz321(at)gmail.com]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.6 MEGALONGWORD BODY: Uses really overlong words

0.3 LONGWORD BODY: Uses overlong words

0.1 TW_RW BODY: Odd Letter Triples with RW

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars

3.0 LONG_INVISIBLE_TEXT Long block of hidden text - bayes poison?

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom

freemail headers are different

0.1 TO_IN_SUBJ To address is in Subject

Subject: {SPAM?} =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=

=?UTF-8?Q?rocessing_=40_so_11=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutl?=

=?UTF-8?Q?ook=2Ecom=29?=

Bitcoin PAypal Phish from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Jul 2026 12:44:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiGCM-000000001zP-0ynS

for dave@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 12:43:42 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 Jul 2026 12:43:42 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastus2azlp17011010.outbound.protection.outlook.com ([40.93.12.10]:14844 helo=BN8PR05CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.99.3 (FreeBSD))

(envelope-from )

id 1wiFl7-00000000OAv-1UZK

for doctor@doctor.nl2k.ab.ca;

Fri, 10 Jul 2026 12:15:45 -0600

Received: from AM8P189CA0013.EURP189.PROD.OUTLOOK.COM (2603:10a6:20b:218::18)

by LV1PR18MB988755.namprd18.prod.outlook.com (2603:10b6:408:3f6::22) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.17; Fri, 10 Jul

2026 18:14:30 +0000

Received: from AMS1EPF00000046.eurprd04.prod.outlook.com

(2603:10a6:20b:218:cafe::3) by AM8P189CA0013.outlook.office365.com

(2603:10a6:20b:218::18) with Microsoft SMTP Server (version=TLS1_3,

cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.13 via Frontend Transport; Fri,

10 Jul 2026 18:14:29 +0000

Authentication-Results: spf=pass (sender IP is 209.85.221.69)

smtp.mailfrom=gmail.com; dkim=pass (signature was verified)

header.d=google.com;dkim=pass (signature was verified)

header.d=gmail.com;dmarc=pass action=none header.from=gmail.com;compauth=pass

reason=100

Received-SPF: Pass (protection.outlook.com: domain of gmail.com designates

209.85.221.69 as permitted sender) receiver=protection.outlook.com;

client-ip=209.85.221.69; helo=mail-wr1-f69.google.com; pr=C

Received: from mail-wr1-f69.google.com (209.85.221.69) by

AMS1EPF00000046.mail.protection.outlook.com (10.167.16.43) with Microsoft

SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6

via Frontend Transport; Fri, 10 Jul 2026 18:14:29 +0000

X-IncomingTopHeaderMarker:

OriginalChecksum:6288D22F971163AF4F0BE21FF6EF77966FF35ACEE9A184F3721F567D7B984A58;UpperCasedChecksum:55652DDA61830DC49991C33EAD84AE18B4BACF7A44EAA6A243B3FF23F5A2A297;SizeAsReceived:3522;Count:15

Received: by mail-wr1-f69.google.com with SMTP id ffacd0b85a97d-47127ee7e07so804609f8f.2

for ; Fri, 10 Jul 2026 11:14:29 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=google.com; s=20251104; t=1783707269; x=1784312069; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Y4ol3c+sIJHgg+mkH0GQPrGXhajd3uhb/e3BGt1Q0yU=;

b=n4pTjJQ3Egp682t9EgLgCzcblmg6fRlZMBR+WDe3zGscIg3Fw7X6L1Umlr4Ky1b5vi

cDyZ4mz/ar5TPumAQMsMUFCSC/yytWpui9DTSBbKrO/b89CXHAUgiZH04bmHGKrghUKg

qmJ4o6BGaDX86Aw1Dk+JiaVMBclsCATfwDY7wzGsE+C4EsLcbrX5AZA4TdsCdEBAX/z3

fiIUgpBnXAAcyUZBNyDuGDIlCuBbPsBPRyfJMdwbDF4pq78xY8Jy/ZyZd/rdrarNNhe3

drBM0emWxOC7EhONFn4cLNFXxZ9GdMBLBccu3GAvQ43QZc6t4qW3t1RxyAmiEdhlfGKO

XQFA==

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20251104; t=1783707269; x=1784312069; darn=groups.outlook.com;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to

:content-type;

bh=Y4ol3c+sIJHgg+mkH0GQPrGXhajd3uhb/e3BGt1Q0yU=;

b=ErOP7J9m5w2j+wzmbs89bBeJoI6sJ944vePpa7xt0Pz6ZLekVOXJwFFQmXLTkM1xIh

BTP95qk362oIqRMnfaGJ+AYbFmEsaoGMp5vguVTUgKyDKUHl3kHhBTAq8Zs/nt2AUxHo

10RVkShyywIoQcETa+KnBDQjuyAt/ELdaNo7NA/rY/CgtusphhiiatD2d7HhJuQa+/VJ

0+wv6II+pBREalU+yGoB1S/E2Jp95qiOriZbd3etZOF/hNaMAIor7RA7b9ETXiO0GngW

4oqBG0fapY62/5PL8qEAMsc7GsrOLtdfr8gTYUugW31HKWG560Mj6sC3+CfNKyh8uUv3

ZwBA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20251104; t=1783707269; x=1784312069;

h=content-type:to:from:subject:date:message-id:sender:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to:content-type;

bh=Y4ol3c+sIJHgg+mkH0GQPrGXhajd3uhb/e3BGt1Q0yU=;

b=Ql8Zthrj5qiIJrvdK5LfK8aZ2sMP0D2h1SqSWY8GvXR8Z6koMBltYx5GTapVOd7nAG

OI3aZKrXL6bpHLSS2KvW1v+xgeNqXRgq+S9RSg/EXaaYV4m/JniPVIDZJyqZ1CxKqwwg

7tUx7R7lPKcOPu7X8BQDb7Y7LU0CovDGLOX55OH6v0GXBr2D3k+Yi5WqlBcuAGYI7XYg

GS0JLVJRCSa5w7+Jd5/XuxF9xncbuJL+SzG32aotX4+CB1R9E+1xZqRYrzsdIZpiCGZC

bNCV9jwpjxxdrpeaeT7s6TlDFXtie37nZBa1zZDGujF4N/B3Op+SWAon12w1UYiTvwhJ

GvVQ==

X-Gm-Message-State: AOJu0Yynir8xFuAXQ/n7x9gpN0cbc+AlRmKTrX8C42MT7P0K0kbs9ekB

h10pdhxtqri/ajvY3hW5P2J+DHho3myAnL5NrF1G49eTtUTsrQJcy+Mp0z2uoH+62fAfc7Cmjxe

h9/JWs8rSjLJAWkAYvNc32OrvPE/XsiWTExg=

MIME-Version: 1.0

X-Received: by 2002:a05:600c:c3dc:10b0:493:a6b7:cae5 with SMTP id

5b1f17b1804b1-493e689a981mr97928095e9.28.1783707269262; Fri, 10 Jul 2026

11:14:29 -0700 (PDT)

Reply-To: Haresasz Nxysarwsa

Sender: =?UTF-8?Q?Kalend=C3=A1r_Google?=

Message-ID:

Date: Fri, 10 Jul 2026 18:14:29 +0000

Subject: =?UTF-8?Q?Pozv=C3=A1nky=3A_PayPal_Payment_Received_=2D_Bitcoin_Order_P?=

=?UTF-8?Q?rocessing_=40_so_11=2E_j=C3=BAl_2026_=28cynthiaperez389903=40groups=2Eoutl?=

=?UTF-8?Q?ook=2Ecom=29?=

From: Haresasz Nxysarwsa

To: cynthiaperez389903@groups.outlook.com

Content-Type: multipart/mixed; boundary="0000000000002af236065645b601"

X-IncomingHeaderCount: 15

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: AMS1EPF00000046:EE_|LV1PR18MB988755:EE_

X-MS-Office365-Filtering-Correlation-Id: 627097d9-cc7e-488a-6089-08dedeaf159e

X-Sender-IP: 209.85.221.69

X-MS-Exchange-EOPDirect: true

X-SID-PRA: HARESSAZNZXRRSXAXZ321@GMAIL.COM

X-SID-Result: PASS

X-MS-Consumer-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-MS-Exchange-Group-Expansion-Loop: cynthiaperez389903@groups.outlook.com

X-Microsoft-Antispam:

BCL:0;ARA:1444111002|29080799009|24102599021|32020799003|9000799056|34130799006|6092099016|26000799027|26130799012|970799063|4040799016|5139299004|16200799027|1680799066|6019299003|9020799019|6149299003|22000799015|3151999006|9400799043|1041999012|1602099012|18021999003|22062799003|2145499017|30041999003|1360799030|1370799030|1380799030|3412199025|4302099013|440099028|26104999009;

Instagram folower spam from Microsoft outlook Part 4



Invite-only. Limited openings this month. ✨

Logo



VIP-Followers

Is Your Instagram Being Ignored?



Does your Instagram still seem small?

Increase your followers, likes and views today.

Real growth, delivered safely and gradually.



Discover VIP-Followers and get the results your profile deserves. ✨

BOOST MY INSTAGRAM



Use code SUMMER10 and get 10% OFF today only.



© 2014–2026 VIP-Followers. All rights reserved.

Don't want these emails? You can unsubscribe here.