PDf attachment spam from Microsoft Outlook
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 21 Apr 2026 03:11:00 -0600
Received: from mail-norwayeastazolkn19013082.outbound.protection.outlook.com ([52.103.51.82]:12745 helo=OSPPR02CU001.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1wF77J-00000000BjR-0jMW
for dave@doctor.nl2k.ab.ca;
Tue, 21 Apr 2026 03:10:14 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=xL4CfoQrtXpX644UZ8XjPAQdax+V7rDKeW6CFCHZUwutWaR67OV2DN1CZTyfsa79etv2aCLKrAXvBmrjl6nXjNwSYjVXEdN6fh6j4jqVdd8iftlrNvVf132I36PjmCQjZEp9+yNCWrp/eroOxW51YhtZzvwV4ofb2k79Bt6+CLlghDij4EbuKr5EgxFjRp/QukbnoDEURaM1rOLMWHifYLV9Gje8h69TjecA7Ajkjnig8DAVV1uwbPEkZofa2XYwHPZfja/fIb028RryICI6pCO/6xDkST4s0890W+e9aF+ybb2HwMPSOnSkRpZsURTYqZOU7J3sSVcjC6Uyilzv4w==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=D72v6QAICF1l/FI6wCku72RvcXeSN8glM9wqsn7RGL8=;
b=xaBeKMfAM6Xkt7q5zldHnIfXD3ZfTbKjYlEK6KCOshfpYxag3mos/N4fSXOtJ1F22E2sumOJREZ4ELw5Axi/fJSXNKxlqJiNb5MmC7tQkB2oh4OWjfkGF+wJLIvetrBgzjMFbxWrHzdbBZjcKWaXHQjyJRz1EYF4+8APRyjla6P/nr8rng3Cgh36Xw5gLrtfYurJAKwLDMuEGiaxjI0WS3txvumAUH1jHrlEHiphGBfuUO+jqyah4DsoH2VPUdb9DmgjULlfp1gdgHFq5YF1lQrupDYhxJnenSNRlav+XVHJZ9PZdjf9DhFNImwL3hPu0bTvKlHi3u05/hawE8P9mg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=D72v6QAICF1l/FI6wCku72RvcXeSN8glM9wqsn7RGL8=;
b=Aoa7NgocWlwaLxao9th0MCcBfEMj9jQF7EZhYjLi5aj1EKh81gSukeJ28ClalmdzKjkCa6carug4EE0c6Dvo7gK5l3d0S7PD1jpdyw/lnmOin4G9BlgTw8TWZylenz/ubexrOtunEscqMeFPR0vleto59u0yIOuw0JdBE5LotZ3e6nDkq3y7ZiKAfR+ZIFELk0epTRtdfrPOfOVVMTUz4t4tMm8QFj8xP0Ar/JAHSCGeR1puPDy2iYS9U0Z6fg/3244SHh8Qtxrp8qlU4ttRbQU4tUJIX7MnEMLuUScY5e37MmJ9d3zfTJAxQvOLm5gdldHK9c8kBZvzryBjsjTMhA==
Received: from DU7PPFEA8CCD8FD.EURP250.PROD.OUTLOOK.COM (2603:10a6:18:3::b66)
by PRAP250MB0514.EURP250.PROD.OUTLOOK.COM (2603:10a6:102:291::7) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9818.32; Tue, 21 Apr
2026 09:09:07 +0000
Received: from DU7PPFEA8CCD8FD.EURP250.PROD.OUTLOOK.COM
([fe80::c1d5:ff8e:2fa0:457a]) by DU7PPFEA8CCD8FD.EURP250.PROD.OUTLOOK.COM
([fe80::c1d5:ff8e:2fa0:457a%6]) with mapi id 15.20.9818.023; Tue, 21 Apr 2026
09:09:07 +0000
From: PAYMENT APPROVED
Subject: (Payment Approved 2026)
Thread-Topic: (Payment Approved 2026)
Thread-Index: AQHc0W59TZZiYQOspkquwD/W6wbNxg==
Date: Tue, 21 Apr 2026 09:09:07 +0000
Message-ID:
Accept-Language: en-ZA, en-US
Content-Language: en-ZA
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
msip_labels:
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: DU7PPFEA8CCD8FD:EE_|PRAP250MB0514:EE_
x-ms-office365-filtering-correlation-id: 29f382e4-9d23-45b6-edc2-08de9f85a484
x-microsoft-antispam:
BCL:0;ARA:14566002|19110799012|8060799015|21061999006|3025599003|24071999003|12121999013|20031999006|31061999003|15080799012|6092099016|11091999009|15030799006|24121999003|39105399006|22091999003|7071999006|8062599012|20110799003|461199028|41105399003|39145399003|40105399003|26131999018|26121999007|440099028|3412199025|29041999003|102099032|26104999006;
x-microsoft-antispam-message-info:
=?iso-8859-1?Q?7MTKtBfnZeiHyHcoa7mTq4qT4+xTPZbzlV4lH52oW8VzBiBr+JhcrVJp4I?=
=?iso-8859-1?Q?imxe/wKUwXKl08y+9FqF3YIK2lArPBoIbY3Xc0zDnw6BearVHTdeKaUy0M?=
=?iso-8859-1?Q?dS8nve0oSEB6xLdlIeLesy2/UBF0MsjV03h5WmueSVKsUOjI1mQuXj1JFw?=
=?iso-8859-1?Q?X6opn+RMyAhNtVYorhq47fJB0PawshGm+Xz1rv1izD1zYkDrw9geSzVgul?=
=?iso-8859-1?Q?KYjOuoNxqJqqMftNUrEDoHebOnnzasZZTZQBUa9pQNrOpwPNEOJcNlGico?=
=?iso-8859-1?Q?J+rgMD7IMSt/6nhNKId0rZ0PFJOx5y2iF/C8Hax9+6yeOv0xLrt1bjWjX0?=
=?iso-8859-1?Q?IXZ1XwFKfq1Izaje++0xtLVUt220qi+DL8qSZ9oiYOS+POC91khkz2V08a?=
=?iso-8859-1?Q?O5X/+6OQPtXB0FalXF96HpMxg/L/iCchUSyJWJkJx3OlkoONdVu9CpCbGJ?=
=?iso-8859-1?Q?vwz8CTyobmxjZ3dn7GSGS3T48r0xn9x/iUku4NysynCfnPhn+uHnev2Xp8?=
=?iso-8859-1?Q?4pnVtbE3+K79mPcOerVOvJd1IoSw9+b5J0tnBBzs2xs7PACNDlUqrGlK/w?=
=?iso-8859-1?Q?Riwsr0sJRYAoZ52dEAdCn9Iourgkm1hSiq4ew6ONvX/GVX/ZGILKfdkOAc?=
=?iso-8859-1?Q?M5JsloPS0LcjS3/XgnFdTUSOxak6njwxQVgfXln4H5Q2gCvyN/zbKUpinH?=
=?iso-8859-1?Q?mc/2483lSApcjNVfknjAxz85KWA4h3PqayW0Yd4WRvsGkRGvqcQOL1b3vT?=
=?iso-8859-1?Q?xqTDMqS1/tXAlDzTpOFvtOw5k6P/G6WgbJAiofKoEfJyp3CKVvMS8bfYgl?=
=?iso-8859-1?Q?72A6PGmyd878c/wHrGge7oFelnzSUPuvOCtlcHWM14gcZGivovU4aUdhqG?=
=?iso-8859-1?Q?1VKupzvqq+eNL50NXN6RCcKu++wi/PzQrQ+rxyeH35Gm+pvY00aKurG2T5?=
=?iso-8859-1?Q?CTF6Vwmb5WpPrHRxvO/q/F4n3Twkx+oyAYeERBudvbmSp0mtgg60hxDcv/?=
=?iso-8859-1?Q?xmPd1/+sgqz0rbP2MU+twJowm6cL86vb41DhiV+lXi5X4++GQdHiJv/Wpe?=
=?iso-8859-1?Q?/6GEIKzX52COHE038t8opbb9rjSZwCI6e1Q42hFhKrvwkhhwm8S31SUGzT?=
=?iso-8859-1?Q?6IXc0gD70s6hB9BVXi49heHEgOxBYVZpZbAjIJC2HZRwUvBLztGe+skIsw?=
=?iso-8859-1?Q?0HyPDmTvARaH5SoRZs7cpaumoejBVV+I3BFlylt5SzF7ZLP19VkhMPFgar?=
=?iso-8859-1?Q?uxIVGKMWKxrlS/TTrOrZ9L3hLEWYrs/1BCyhgX8xy91ukYqidtMqJZ+lij?=
=?iso-8859-1?Q?WHBXCvfPeb+xetvoYMwPb6Q59EG74FwPGX+BxKCBf458rRVMblBndpniQB?=
=?iso-8859-1?Q?+DEi+gH/go84aB3cvuuarZo8I8Vb3oV9anOdQLngu4Ggb9/MUE3NQovmg3?=
=?iso-8859-1?Q?RLUHWqoH8419pWI0bdNimAafOOx7VmkLf4ybQA=3D=3D?=
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?iso-8859-1?Q?95kyFFyqrXDx94FHTLycfBGd35fZ4Vw96HfRKCwPISXidINFOd1dIT12tM?=
=?iso-8859-1?Q?tR0DaO20bP7uur2Exn4bLJTrpKho6ifQIPZJdC4Awys8K3UsDH036z+m4E?=
=?iso-8859-1?Q?mCkDdi70auMfJdatgckqV23vNuIPQmzfay0hS6igWNb3L7n6n+Qp6Y55pl?=
=?iso-8859-1?Q?RK7AGJBSog1bAcB801YvDN40y/llMmZvcr5p5bkfduOEcialQiq1bEGz98?=
=?iso-8859-1?Q?vQfQmGhog9P/g2yN3PXO/8pJ5KDRA2wrIi5p71RnOxPid1mlfT4vXgUrLZ?=
=?iso-8859-1?Q?gXQVN0ncc2JmK2uYmDGkBQrPXJHZKTTbWjMYsJH/mvfnDr3Md7hrUir4b1?=
=?iso-8859-1?Q?kcdjKsF6GPDtJfZJC0MVLLzK+pDSUObTutJZkZw+5gmiorwnywcjnODoZO?=
=?iso-8859-1?Q?WqcJ/QMRvNhzklhXCkaWr5GYKDvFctiTWTSFJmVCwkZVJum/wVorr4tqXc?=
=?iso-8859-1?Q?PtnFqXypON89SBOyfBChyqtKFw34/Wipx0Rli/j5hrhp+0GNU+KC6SYiWm?=
=?iso-8859-1?Q?bgZ9JRr+LlQZdQwxXc48JN2LOhCJGREGRItM/Ek9rVeUTrQ8Q+zMbHWZmG?=
=?iso-8859-1?Q?3X5Vjf4mqLEeI0R7R+F9INK3N0U3oj7QMPncqsTIGIrcxEhj0bfgFvrybM?=
=?iso-8859-1?Q?XQxBQgU+X5dY58Y1l/4Ws01JgmCsU8Nt/Y0th0lKVl3IHMxSDkD3pxk4c4?=
=?iso-8859-1?Q?jIrsvD/lfNGXi0zUrjceGey8GfCuBVLvtgiKFJfdvqmFruMVarLJ0tHTyY?=
=?iso-8859-1?Q?X6rPizKqbb7RTId/O7iCQuOf9pMDz/zzUN5urXnrAwidlc2svlG7Qif9Mj?=
=?iso-8859-1?Q?TLNBJrqTYh9YOhYO1VrSQttH9k62sctVRtyjcAWRuswcjE9sz7q3Ofs4Dq?=
=?iso-8859-1?Q?GAaxZhB0tgzZx2flKTj/9afTZrldJYJrZrch4UQCnglKfkXIMQ04OWscJB?=
=?iso-8859-1?Q?C/qnUil7932McMJmbT31AerVFkqRrOjFsQyk07B14ErNQrT3hgsmKIOieA?=
=?iso-8859-1?Q?2o81gTfuf7HAyUfIIuI4VI4wbx2lji8FzIhlfYEy4fv1FmvIPRqe0UQxYZ?=
=?iso-8859-1?Q?v0pqiOKpx2hpXS77k8j/qtKOEDMl6sZvV4G72tmcxqzlHfvmewRDJWWRo7?=
=?iso-8859-1?Q?HDz1a5tOYW28Ts7Qkh4uNW18glgsZIdaWjNgwzkMTRDIhYIe+3aa6EeihZ?=
=?iso-8859-1?Q?LJ63bWiktHnL+HCQLgSXxXJnwrSHGvTQu8XeanElTRHa2sxxRZgNM2GTiI?=
=?iso-8859-1?Q?x8+WZigFsiwzHqeO/vKjFqaeFCD9wj7rQTF6KsdD0V+84QBlz+6aL4cwhG?=
=?iso-8859-1?Q?opZ8uKogBvaw7o6RRui7iGs8CimVZdoFl+0cesmrZ5VGGH8bd8OC0aapkf?=
=?iso-8859-1?Q?8OzrN5Wm3U0F8g5RYy6mO8WUf7TpwJVIJTcSMaJRagV2TXbQrxYbA=3D?=
Content-Type: multipart/mixed;
boundary="_004_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_"
MIME-Version: 1.0
X-OriginatorOrg: sct-15-20-9412-4-msonline-outlook-6108c.templateTenant
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU7PPFEA8CCD8FD.EURP250.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 29f382e4-9d23-45b6-edc2-08de9f85a484
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Apr 2026 09:09:07.2763
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PRAP250MB0514
--_004_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_
Content-Type: multipart/alternative;
boundary="_000_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_"
--_000_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Payment Approved
--_000_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
1">
-serif; font-size: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
-serif; font-size: 12pt; color: rgb(0, 0, 0);">
color: rgb(0, 0, 0);">
Payment Approved
--_000_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_--
--_004_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_
Content-Type: application/pdf; name="Discovery Funds.pdf"
Content-Description: Discovery Funds.pdf
Content-Disposition: attachment; filename="Discovery Funds.pdf"; size=61450;
creation-date="Tue, 21 Apr 2026 09:09:00 GMT";
modification-date="Tue, 21 Apr 2026 09:09:06 GMT"
Content-Transfer-Encoding: base64
--_004_DU7PPFEA8CCD8FDC689EDF8A6166F46B080DD2C2DU7PPFEA8CCD8FD_--
