Car shipping phish from Google Gmail Part 4



=3D"noopener" data-start=3D"1290" data-end=3D"1364">https://www.canadiancar=

shipping.com

=0A =0A
able>
ble>
" width=3D"100%" style=3D"border-collapse: collapse; width: 100%;" class=3D=

"tnpc-row tnpc-row-block ui-sortable-handle" data-id=3D"footer">=0A<=

tr>

=3D"tnpc-block-content" border=3D"0" cellpadding=3D"0" align=3D"center" cel=

lspacing=3D"0" width=3D"100%" style=3D"width: 100%!important; max-width: 60=

0px!important">=0A

er; line-height: normal !important; letter-spacing: normal; mso-line-height=

-rule: exactly; outline: none; padding: 15px 15px 15px 15px;background-colo=

r: #ffffff;" bgcolor=3D"#ffffff">
=0A
: 13px;font-family: Verdana, Geneva, sans-serif;font-weight: normal;color: =

#222222; text-decoration: none; line-height: normal;" href=3D"https://click=

.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZ=

CU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVj=

dF9pZCU1RD04MzMzMjkwJmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5=

jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qdG=

9kSFJ3Y3pvdkwyTnNhV05yTG1OaGJtRmthV0Z1WTJGeWMyaHBjSEJwYm1jdVkyTXZQMjVoUFhVb=

WJtczlNVE01TkRRMU1pMWhOREkyTnprellqTXdKbTVsYXoweE55MDdPelJrT1RGbVpUVmpaVEpp=

TWpreFlXVXdaak14WldRMFlUVmxOemhqTXpsbSZoYXNoPWU5OWU3YjFiZGMxZTA0ODRlYmJjNjR=

jMWZhNjE5MmE2NmExMjcwYzZhZGRhYTM1ZTMwNTA2NzJhMzkyZDQ5ODM=3D" target=3D"_bla=

nk">Unsubscribe

eva, sans-serif;font-weight: normal;color: #222222; text-decoration: none; =

line-height: normal;">   |   

=3D"font-size: 13px;font-family: Verdana, Geneva, sans-serif;font-weight: n=

ormal;color: #222222; text-decoration: none; line-height: normal;" href=3D"=

https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVt=

YWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF=

0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjkxJmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJT=

I1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNV=

E01TkRRMU1qdG9kSFJ3Y3pvdkwyTnNhV05yTG1OaGJtRmthV0Z1WTJGeWMyaHBjSEJwYm1jdVky=

TXZQMjVoUFhBbWJtczlNVE01TkRRMU1pMWhOREkyTnprellqTXdKbTVsYXoweE55MDdPemhqT0d=

FeFl6SXdORGxtTUdNNU5HSTVNamxrWlRaa05HTXdOak00WmpCaSZoYXNoPWNkNmI2NGVjZWViNz=

hlZWM0ZWVjMmIzY2E3MmJhMzI5OTczYjVlZDAzNGUxNThlNGQ3MTRjNTMwNWQwYjhiZGU=3D" t=

arget=3D"_blank">Manage your subscription

;font-family: Verdana, Geneva, sans-serif;font-weight: normal;color: #22222=

2; text-decoration: none; line-height: normal;">   | &n=

bsp; 

sans-serif;font-weight: normal;color: #222222; text-decoration: none; line-=

height: normal;" href=3D"https://click.canadiancarshipping.cc/wp-json/wp-ma=

il-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eX=

BlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjkyJmRhdGElNUJ1cmwlN=

UQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYl=

MjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qdG9kSFJ3Y3pvdkwyTnNhV05yTG1OaGJtRmthV0Z=

1WTJGeWMyaHBjSEJwYm1jdVkyTXZQMjVoUFhZbWJtczlNVE01TkRRMU1pMWhOREkyTnprellqTX=

dKbWxrUFRFM096c3lZVEV4T0RFMk1XUmlPVEprTUdVNVpqQmxZV1ZrWkRjeU5qYzNOR1V3T1ElM=

jUyNTNEJTI1MjUzRCZoYXNoPWY2YjJlMjRhOGE0NWRjMjU0OWU5NjJmMzNlOTM5ZmM3M2M2YWFj=

YjBkMDQ0NWFkYjVmZDg4ZjRkZDc0ZDhmZTA=3D" target=3D"_blank">View online

div>
=0A=0A=0A=0A=0A=0A=0A
table>=0A=0A3D""
adiancarshipping.cc/?noti=3DMTc7MTM5NDQ1MjtjMjgxMTQ0OGQzMzMxOWY3OTI3ZWExMzl=

hYzJjMjdmZg%3D%3D"/>=0A
json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNUJl=

dmVudF90eXBlJTVEPW9wZW4tZW1haWwmaGFzaD02MDFlMTRiY2QyZTU0YmEyN2UwNzVkNDBkOTh=

iN2M2ODU1NDM1Y2RlMWFlMjY1MjJiNDkyZmE4N2Q4ZmVjNzM2" alt=3D""/>=0A=0A<=

/html>



--b1=_GMpimkQGjXeFWB2aGetmUcCMHaUBpABZkOaA8U3MT6Y--

Car shipping phish from Google Gmail Part 3

=0A=0A/ Html /=0A.html-td-global p {

font-family: Helvetica, Arial, sans-serif;

font-size: 16px;

}

=0A=0A=0A
normal; word-spacing: normal;" dir=3D"ltr">=0A=0A
ellspacing=3D'0' border=3D'0' width=3D'100%'>=0A=0A<=

/tbody>

ff' valign=3D'top'>=0A=0A =0A=0A
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" align=3D"center" width=

=3D"100%" style=3D"border-collapse: collapse; width: 100%;" class=3D"tnpc-r=

ow tnpc-row-block ui-sortable-handle" data-id=3D"image">=0A

lign=3D"center" style=3D"padding: 0;" class=3D"edit-block">
block-content" border=3D"0" cellpadding=3D"0" align=3D"center" cellspacing=

=3D"0" width=3D"100%" style=3D"width: 100%!important; max-width: 600px!impo=

rtant">=0A=


-height: normal !important; letter-spacing: normal; mso-line-height-rule: e=

xactly; outline: none; padding: 15px 0px 15px 0px;background-color: #ffffff=

;" bgcolor=3D"#ffffff">
=3D"0" border=3D"0">

k.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19p=

ZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamV=

jdF9pZCU1RD04MzMzMjg4JmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay=

5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qd=

G9kSFJ3Y3pvdkwzZDNkeTVqWVc1aFpHbGhibU5oY25Ob2FYQndhVzVuTG1OdmJUczdNek5rTVdW=

aE5qTTRZek5qTURWaE9ESXlZbVUxWVRFME5HSXhOVGRpTWpNJTI1MjUzRCZoYXNoPTgzZmJiZWI=

1MGY5NmY1YjZmZDNjYzZkYTY4M2Y4ODM4MTg4YTg2OTY0ODQ4Zjg4ZTYwYmMxYWRkNjE0OTI4ZG=

M=3D" target=3D"_blank" rel=3D"noopener nofollow" style=3D"display: block; =

font-size: 0; text-decoration: none; line-height: normal!important">
c=3D"https://click.canadiancarshipping.cc/wp-content/uploads/2025/07/Canadi=

an-logo.png" width=3D"354" height=3D"115" alt=3D"" border=3D"0" style=3D"di=

splay: block; height: auto; max-width: 354px !important; width: 100%; paddi=

ng: 0; border: 0; font-size: 12px">

n=3D"center" width=3D"100%" style=3D"border-collapse: collapse; width: 100%=

;" class=3D"tnpc-row tnpc-row-block ui-sortable-handle" data-id=3D"text">=

=0A

k">
ions" class=3D"tnpc-block-content" border=3D"0" cellpadding=3D"0" align=3D"=

center" cellspacing=3D"0" width=3D"100%" style=3D"width: 100%!important; ma=

x-width: 600px!important">=0A

align: center; line-height: normal !important; letter-spacing: normal; mso-=

line-height-rule: exactly; outline: none; padding: 20px 15px 20px 15px;back=

ground-color: #ffffff;" bgcolor=3D"#ffffff">
width: 100%!important" border=3D"0" cellpadding=3D"0" cellspacing=3D"0">=0A=

=0A

ext" style=3D"mso-line-height-rule: exactly; font-size: 16px;font-family: V=

erdana, Geneva, sans-serif;font-weight: normal;color: #222222; line-height:=

1.5;">=0A

Looking to ship your vehi=

cle from the US to Canada?
At
g data-start=3D"447" data-end=3D"472">Canadian Car Shipping, we sp=

ecialize in fast, secure, and affordable cross-border vehicle transport.
>=0A

Whether you=E2=80=99re relocatin=

g, purchasing a car from the US, or managing fleet logistics, our expert te=

am ensures a smooth and hassle-free experience every time.

=0A


art=3D"712" data-end=3D"885">Wh=

at we offer:

=E2=9C=94 Door=

-to-door vehicle transport
=E2=9C=

=94 Full customs documentation assistance

"810">=E2=9C=94 Licensed and insured carriers

d=3D"844">=E2=9C=94 Transparent pricing and timely delivery

=0A


tart=3D"887" data-end=3D"1026">We=E2=80=99ve helped thousands of individual=

s and businesses transport vehicles safely between the US and Canada =

=E2=80=94 and we=E2=80=99re ready to help you too.

=0A


028" data-end=3D"1133">=F0=9F=91=89 Get a free quote today:
ref=3D"https://click.canadiancarshipping.cc/wp-json/wp-mail-smtp/v1/e/ZGF0Y=

SU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNUJldmVudF90eXBlJTVEPWNsaWNrLWxp=

bmsmZGF0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjg5JmRhdGElNUJ1cmwlNUQ9aHR0cHMlMjUzQSU=

yNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5nLmNjJTI1MkYlMjUzRm5sdHIlMjUzRE=

1UYzdNVE01TkRRMU1qdG9kSFJ3Y3pvdkwzZDNkeTVqWVc1aFpHbGhibU5oY25Ob2FYQndhVzVuT=

G1OdmJTOTFjeTEwYnkxallXNWhaR0V2T3pzMU9UYzRPVFF6WWpGbFlUUTVZelEwTjJJMU56bG1P=

VFJqTlRRNE5tWXpaUSUyNTI1M0QlMjUyNTNEJmhhc2g9YTc5MWMzMTI5N2UzNzIwMWE0YjhkMzl=

jMDlkYjViZjJiMmNlYzcyMDU0ZDI0YjA4OTI3OGI3ZmI3OTVkMDI2OQ=3D=3D" target=3D"_n=

ew" rel=3D"noopener" data-start=3D"1055" data-end=3D"1133">Click here to ge=

t started

=0A

Best regards,<=

br data-start=3D"1148" data-end=3D"1151">
nd=3D"1185">The Canadian Car Shipping Team

=0A

"1187" data-end=3D"1190">=0A

 

=0A


=3D"1364">Canadian Car Shippi=

ng

860 Boardman Canfield =

Rd.
Youngstown, Ohio 44512

-start=3D"1270" data-end=3D"1273">(800) 381-6907

a-end=3D"1290">
p-json/wp-mail-smtp/v1/e/ZGF0YSU1QmVtYWlsX2xvZ19pZCU1RD0xNjY4NTM0JmRhdGElNU=

JldmVudF90eXBlJTVEPWNsaWNrLWxpbmsmZGF0YSU1Qm9iamVjdF9pZCU1RD04MzMzMjg4JmRhd=

GElNUJ1cmwlNUQ9aHR0cHMlMjUzQSUyNTJGJTI1MkZjbGljay5jYW5hZGlhbmNhcnNoaXBwaW5n=

LmNjJTI1MkYlMjUzRm5sdHIlMjUzRE1UYzdNVE01TkRRMU1qdG9kSFJ3Y3pvdkwzZDNkeTVqWVc=

1aFpHbGhibU5oY25Ob2FYQndhVzVuTG1OdmJUczdNek5rTVdWaE5qTTRZek5qTURWaE9ESXlZbV=

UxWVRFME5HSXhOVGRpTWpNJTI1MjUzRCZoYXNoPTgzZmJiZWI1MGY5NmY1YjZmZDNjYzZkYTY4M=

2Y4ODM4MTg4YTg2OTY0ODQ4Zjg4ZTYwYmMxYWRkNjE0OTI4ZGM=3D" target=3D"_new" rel=

Car shipping phish from Google Gmail Part 2

1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist

[URI: canadiancarshipping.cc]

[URI: click.canadiancarshipping.cc]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.167.229 listed in list.dnswl.org]

-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact

cert-sa@returnpath.net

[Excessive Number of Queries | ]

0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in sa-accredit.habeas.com]

0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The

query to Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in sa-trusted.bondedsender.org]

-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact

safe-sa@returnpath.net

[Excessive Number of Queries | ]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.167.229 listed in wl.mailspike.net]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[209.85.167.229 listed in bl.score.senderscore.com]

0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to

Validity was blocked. See

https://knowledge.validity.com/hc/en-us/articles/20961730681243

for more information.

[209.85.167.229 listed in bl.score.senderscore.com]

1.5 MR_STRANGE_QUESTION URI: No description available.

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} =?UTF-8?Q?Canadian_Car_Shipping_=E2=80=93_Reliable_Vehicle_Transport_from_the_US_to_Canada?=



--b1=_GMpimkQGjXeFWB2aGetmUcCMHaUBpABZkOaA8U3MT6Y

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit



Looking to ship your vehicle from the US to Canada?

At Canadian Car Shipping , we specialize in fast, secure, and affordable cross-border vehicle transport.



Whether you’re relocating, purchasing a car from the US, or managing fleet logistics, our expert team ensures a smooth and hassle-free experience every time.



What we offer:

✔ Door-to-door vehicle transport

✔ Full customs documentation assistance

✔ Licensed and insured carriers

✔ Transparent pricing and timely delivery



We’ve helped thousands of individuals and businesses transport vehicles safely between the US and Canada — and we’re ready to help you too.



👉 Get a free quote today: Click here to get started (https://www.canadiancarshipping.com/us-to-canada/)



Best regards,

The Canadian Car Shipping Team



Â



Canadian Car Shipping

860 Boardman Canfield Rd.

Youngstown, Ohio 44512

(800) 381-6907

https://www.canadiancarshipping.com (https://www.canadiancarshipping.com)



Unsubscribe (https://click.canadiancarshipping.cc/?na=u&nk=1394452-a426793b30&nek=17-) Â Â Â |Â Â Â Manage your subscription (https://click.canadiancarshipping.cc/?na=p&nk=1394452-a426793b30&nek=17-) Â Â Â |Â Â Â View online (https://click.canadiancarshipping.cc/?na=v&nk=1394452-a426793b30&id=17)





--b1=_GMpimkQGjXeFWB2aGetmUcCMHaUBpABZkOaA8U3MT6Y

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable



=0A
urn:schemas-microsoft-com:office:office">=0A=0ACanadian Car Sh=<br /><br /> ipping =E2=80=93 Reliable Vehicle Transport from the US to Canada=

=0A=0A
vice-width, initial-scale=3D1">=0A
ent=3D"IE=3Dedge">=0A
o">=0A=0A
ame=3D"format-detection" content=3D"email=3Dno">=0A
sable-message-reformatting">=0A=0A






_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">

Hi,



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

A quick follow-up. I help founders save time by managing admin tasks, inbox=

es, and scheduling.



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

If this could support you, just reply with your contact info and I=92ll con=

nect with you directly.



ily: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sa=

ns-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Regards,


Adbrd



_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb=

(0, 0, 0);">












--_000_SEZPR04MB79038843008E7502E6FBC3C4D190ASEZPR04MB7903apcp_--

Virtual Assistant spam from Microsoft Outlook Part 1

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 27 Jan 2026 10:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vkmZV-00000000Mc4-1ijm

for dave@doctor.nl2k.ab.ca;

Tue, 27 Jan 2026 10:09:45 -0700

Resent-From: The Doctor

Resent-Date: Tue, 27 Jan 2026 10:09:45 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-japanwestazolkn19012062.outbound.protection.outlook.com ([52.103.66.62]:42124 helo=OS8PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98.2 (FreeBSD))

(envelope-from )

id 1vklMJ-00000000Nt3-2H2H

for sales@nk.ca;

Tue, 27 Jan 2026 08:52:14 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=hnCtwd1nfVlrVFm/LCXZN680avH+pzmrtWipXKzRU584H9OVfiDVPpZvTB+KNKWORInVMkisygth5coG518NMxqbm9SyCUpjpyAujLnGpc7Q+fSioRdHGcOz6bMAz08KUXA4YxQBDOsQT2VDLJSrmLPrajo6DIq+cls5eM0KpVWqzluEv9fHEsb3nqw5JPyDYHTdrbNzStNvh6f5Z9S7rw1QmDPH0QTOFx8A6TFJZYkySViCH5/MtXqCQdJ6B+Z7D0eAv/bDt7XiW+u4nljS2AaKSQ76Rbo10Y+y6jE4pG2FWMlt9Odw7nCISwK3tm9XUaBrf9QTzWb9hX3jXjCFOA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=Nv9BUVrhvlAgZhwJws8QVpU1hM6GmvOECBqkLQqCKlk=;

b=nqEn9EHx3sJMutRuPW9k9LR3I434YINq0ky/KJzw/rEUqU79SpBBrboEEpcqFxwOcARKPDdXC5xDIMtsdBw0Up8K9co3dYSLC+9fRs22RHBJlNU766VR7ZO8LKdU+QIdTS6ewgRqjI3sHNsfewE79yQrb39+t+ETZKLNDtKVYhgxw7tpgXWCwSlQK28LTOJBZgMtpAlpAeiGFHGEgbcxVe0TcJTCLC30bVS8wyNPep4zk/pi9/XjwukPuJo09FjdB0AFB8FF92XG+nHxcrb3bXXnRNJ1IysI2SO5xO3S71aU50dhXHuXsp5IASuKTxALuGVNVL1FVDaAfyJpyF2/8w==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=Nv9BUVrhvlAgZhwJws8QVpU1hM6GmvOECBqkLQqCKlk=;

b=CNIRm2raiq0ZIW8NvKi6J8SppnLmOGsKkw37tpAJLUJhVXvKmVE+2hVKZXW/JcbzVIO+o2jEu35OSohFkIGjIHnydo6FSbHvPk13MHUE6JrQMdBZc6BP6bdoR77vB9F9unCHvkz/2Z0R7VwPbOPzIHiEIU6AW1jlGGukkEMXZCmK/Nu6bgORHZOxD89pNP3UrEb5k7XYaOuydh8fsfasH08UrheiOzCrHtmJurVX5q+rbxtuA4AeXopuKtKItCD2b+boRJ48s4/q8U7XnOwWFc+YuaCroDoiOFwXUmGb14Zp8xoIPL/yCmmzP74u/LMvNSbfLepqBnEERnzN3CqRrw==

Received: from SEZPR04MB7903.apcprd04.prod.outlook.com (2603:1096:101:234::8)

by TYZPR04MB6280.apcprd04.prod.outlook.com (2603:1096:400:289::8) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.11; Tue, 27 Jan

2026 15:50:39 +0000

Received: from SEZPR04MB7903.apcprd04.prod.outlook.com

([fe80::661b:b942:45f:e37c]) by SEZPR04MB7903.apcprd04.prod.outlook.com

([fe80::661b:b942:45f:e37c%6]) with mapi id 15.20.9542.010; Tue, 27 Jan 2026

15:50:39 +0000

From: adbard miton

To: adbard miton

Subject: Re: Virtual Assistant Support

Thread-Topic: Virtual Assistant Support

Thread-Index:

AQHchteVvFHnZFynPUeRDdUIZWFXVLVWGrofgAIFVLqAAtrmboAE5FJ7gAFvOieAAaqp6oABRZC/gAH8yFo=

Date: Tue, 27 Jan 2026 15:50:38 +0000

Message-ID:



References:

















In-Reply-To:



Accept-Language: en-GB, en-US

Content-Language: en-GB

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: SEZPR04MB7903:EE_|TYZPR04MB6280:EE_

x-ms-office365-filtering-correlation-id: 043e1d07-20ef-4817-96b4-08de5dbbd194

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|15080799012|8062599012|461199028|8060799015|31061999003|15030799006|19110799012|39105399006|3412199025|440099028|39145399003|40105399003|41105399003|12091999003|102099032|19061999003|1710799026;

x-microsoft-antispam-message-info:

=?Windows-1252?Q?1BnmVrbom65q+acD11Q8mY67jDB54nNwdQ2jzaJ7ymd+r9qq0XukW14B?=

=?Windows-1252?Q?TzOzjxul0HEt3Ctv+84b7FB0B4973Q+Q4Mjmkner8RlFwpHDIYS4ndEj?=

=?Windows-1252?Q?tf/Z515rIIz5tZcV+hrFqoR5rBpj00YjrX6XUoe77OChXHx9jinO815P?=

=?Windows-1252?Q?Dc8i22ePnDfaEbg2+wOe8L2Fu0BJrt7XWj/fBKrIAGyyu4huJB0CDbDc?=

=?Windows-1252?Q?jbiGT+vAWH2L8UWPQQVkGMqOrvOQ680kopQdd+LHeDpbitGbAR2Wt/Fq?=

=?Windows-1252?Q?qoGYZT0RDBhY5kXBh01RYQZ3ygOZVUoIbC7WDY0mdH+dhTAO5s4Q7E2G?=

=?Windows-1252?Q?otl8/eddTnpeZodQbwPDXtSWHpFM4lsAtJvyFhuJ51fQ/hK4jUhvxf7j?=

=?Windows-1252?Q?m+tgYI/B4DvdYYHir/BYbuuAb5cSdRZh9DeudKWBBWGj3MU/WctcAkzD?=

=?Windows-1252?Q?/eVPKxqlwLS2qn2B8MOKURNm/aw2P3CwNMsP+PA0yiK+Btop3PAgeYwi?=

=?Windows-1252?Q?+J7I/LWr+HmTmToHxP3pFa6JJe7JwJw+c020jaWznHLsP0LuNHNKyAxr?=

=?Windows-1252?Q?fZ3zQpUHLsNhGYL7+gvm34zwDTLks3DmV6GClMXu89yRr/FobAv0V0BA?=

=?Windows-1252?Q?0A2wAChf1R6A/As+xKFalyPPRGLVknuibI3QXXjEsUlzoGytgdhsmBXu?=

=?Windows-1252?Q?cfxOntoYGjQp4BAaBiqHXBL00cS23j21qi9iTbOLR0GbE/rXxENfPdIk?=

=?Windows-1252?Q?KooK8Gvoi6lRp4Ec62BRgm2BCVGis+s3p0B56KP3NgGgV44b5wUdSW+6?=

=?Windows-1252?Q?PQDSy/e/I2C4feOI4yee1S1aRX7HOhar2CQfmUtDESR7hYgBGvcqdFN5?=

=?Windows-1252?Q?1GYKWEj2Ur3FrvIoklkcyp0gG+7+pIsX82yS7h1yl2b2Ya85GOzV7svg?=

=?Windows-1252?Q?hNVmY+4PpjoSjshn93U8T5UX0L1Z3+CZLgDT/Xo6Rr3OlKCKHNtpbMY1?=

=?Windows-1252?Q?fj0N/mWudPOHzWz0oV5IBgZ7MRKiTdYDnTDDMdibSfSVdXU4g4KKE3r2?=

=?Windows-1252?Q?aAQ6NcpwutnGk7IdVPbnZrGZqTkx+D4rZVJGO7ECtSUauKVNTsj88g4X?=

=?Windows-1252?Q?Oq9ZoDXJBHzS0u1JKhqHNrQ3ZUFCCRD4Qan3gzatf7fFVlHCIcJaAvcN?=

=?Windows-1252?Q?Acl26xrxYW2tkiq8rim6sNCL2KM2MTahUoSa72AInWU4CJ08AqXKY0Ie?=

=?Windows-1252?Q?KVG2ZtQI/Ga3tLUjWu6k0ahc0cP9uuHhWHyMMSev70hPnhDLL2/2ccKl?=

=?Windows-1252?Q?q18FPB2X272Phyfwho02nKR06+HPfkfecr9S1eR8DfZ5jxRH+JHPTKrP?=

=?Windows-1252?Q?UGMqrfZjv/zU9pvPpt5x3wEPztdk69/rH0jbS3E48OZByNe7fNp/oEto?=

=?Windows-1252?Q?pQzXwNftuS+q8hDbzmnuDTchk7S/caZfAiCQKQH5ldQ=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

Zoom Phish from Microsoft Outlook Part 3



1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[159.183.151.213 listed in will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

[52.102.149.0 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.102.149.0 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender

Subject: {SPAM?} Zoom Invitation from Your iPhone 17 Order Has Been Completed PayPal

Account Alert. Payment Alert =?UTF-8?B?4oCT?= Call +1(828) 407-9068












=3D1.0, maximum-scale=3D1.0, user-scalable=3D0" />

















<br
=3D"zoom logo" />








4px;">

Hi there,





Your iPhone 17 Order Has Been Completed PayPal Account =

Alert. Payment Alert =E2=80=93 Call +1(828) 407-9068 (efrerr@virgilian.com)=

is inviting you to chat and meet on Zoom Workplace.

"Your payment of $1,099.99 for iPhone 17 has been=

completed through PayPal. If you do not recognize this charge, please cont=

act us at +1(828) 407-9068."



Please click the link to view invitation. Invitation li=

nk expires in 30 days. By accepting the invitation, you will be able to mes=

sage and call each other.







If the button above does not work, please copy and open the=

link below in your browser.







Thank you,





Zoom












enter; color:#6e7680;">


g: 0.5px;">+1.888.799.9666


©2026 Zoom Video Communications, Inc.





or: #0D6BDE;" href=3D"https://www.zoom.com">Zoom.com


55 Almaden Blvd


San Jose, CA 95113
















Zoom Phish from Microsoft Outlook Part 2

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?dkdaNjlVYVNqeUZhQ29BY3RpY3BkcjFYb1d1TFNzQ1JvdXNWeWtJWGJYQkZW?=

=?utf-8?B?ODNxaHFDekZZQ1QxeTAwRTZkWTlwdkZKOFVYODNXVTQ4UGlUaHJFazhpUHdJ?=

=?utf-8?B?K2FaYkJLa3hUR0I5M2Y3eGFGamU2dU1tV2NhQ3A3RERpTGZnZFE4K1lJQ3Fy?=

=?utf-8?B?b1lZYnV1dks5cUJTWk1QNzB5ZUdCTXRSN2VySFhCUXZUSld3VGV0K0pXc09P?=

=?utf-8?B?eWNCM3BmMFZ3aGhUSUh6VngwaEpMK1czOUNXa1h3VFJvVW41MDBpZWJzUjk1?=

=?utf-8?B?ZXFUSHpvYmd4ZmgwZGhUSmJxOS9hSXRTL2JWMk1zczlRUkpRbmg0UndpUUZ4?=

=?utf-8?B?ZnV5VzFhYnErNjY3ckJtNG1GZnVZUkJOMTZ0T3h5a20wcDUvc1BDdWM3M0Zq?=

=?utf-8?B?WjcxTlhvUEJKR2lIa1dHWEQ2UW5pWlJ6cXFnVVN0RSs0YWJMaXlZR0hBazdY?=

=?utf-8?B?WGtFQnp4M05xNTVNSEY1YXVLbjVYY3RaamwzTldFZXMyY2I1Sjd6RUtpV2ZW?=

=?utf-8?B?OXBJeXZzM2Z5N0hKMVhUZmRHcTBzMGV6N3lqclVyWGF3ZHR1Q28yUjFPeENW?=

=?utf-8?B?RTJNa1VUbnBKRnFVQldDNzRjWnFESkxiUTF4aE9SK0VYblVkNjZvWUhFTjIw?=

=?utf-8?B?OUllV3oyOWU1STU0MCtTVDM0L2NYdEpwVzNmamYwUVQ2N2dSWktoWUZJSFhI?=

=?utf-8?B?WE5SN0dOdjkxcmh3UmFacnRudCtRbk9Ba2QrOTNDc0hOL1ZuMWhtMzZucFJr?=

=?utf-8?B?QVc0Ly9CZ3dNUHpHS0tZbjFoenF0V0tzV2JEWHN0Z0VHTXhCRkt1dUxVMnEr?=

=?utf-8?B?cWxrZ2Q4RXRqUmd4K2Rsemtqb2tyc0ppNlRXOFdTRktCRkFrTHZjU2N3cDJz?=

=?utf-8?B?bEZtQTVDeVloNEdqZFhrbGM0dWJRU1R4TVVhMlFHcTlZdktwbWRXQk9NdGlI?=

=?utf-8?B?Q0tsOU8rMC9VamZjVXg3NzdGMzBSSzMrTlo0ek8rVlh5SlgxbU16d0ZSVUtE?=

=?utf-8?B?Rm1wNzR0bFZkaXhxWFZOdTVGcVA0TjNHZlNmOFdpNGNGNDI1MjAxQlQzRExn?=

=?utf-8?B?Yi9mOWxhSFJTaS8xZFd6WTE2YWg1Mk1aYUxqMGJFRFBzRHU5cUpkc1NIOXRy?=

=?utf-8?B?OGQ4d0JzUGgxTXkwRTE5ZDdEWHJVcUxnaFliU1NTWkVGVmFhS0VzOG55a2Ru?=

=?utf-8?B?U2VRQ2dCUFVhcE5kN0pNY3lxYUwrdnVNaUxxYm0zMDNtOGNhSW1HdG5EKzZs?=

=?utf-8?B?SW5tbldUaWkvMmIya2VMSDFka3hXRFpqRUhUNTV6ZVVmbnMvdFJ1MzJPY2M0?=

=?utf-8?B?VzZ3Z3pCRHVsUXNVUzEyNTRoTlkzcGlMNjBYNWpRTE1PNjBOVFV2WkV4THJW?=

=?utf-8?B?YnVKbTlBWmhISnpZRUZoOE1kVC95azQ0NVU3OGdWTS9CSXkyMnUzZ0xFMDlk?=

=?utf-8?B?QWlLY2h6bjVvV2d3b1hDNzBXRWhjdXVINUdWTzllYnQ1QnRDSVRWbGJwN0ZS?=

=?utf-8?B?Nlh6TDBTT0Uzam9ERkpxNjlBWjZ2UGJPREJESURIQXlyT2NqclVnQkRCcHR5?=

=?utf-8?B?cmNybHB3aklxb3RJN25JQ01oRGpEV0hPSEgyRG1UV0lXV3pPUHMySGV4L2xJ?=

=?utf-8?B?OWdLS0oyaWdVdTFuNmxERUVIMHNLenBvcmwrbklDUDdmQWdLajFoeFZjdkJz?=

=?utf-8?B?L2phYjFHaWxHZ21OUGdVUUJvaU8rVzY0eC9vMTdudzVXdExKSWVVZVNaZStP?=

=?utf-8?B?Sjd2RXZJMEdDVm5INU1mME9Nd3BLT295NVlFU0FsSEM4SXFibkJiRzJwR0FH?=

=?utf-8?B?RnFBdXgvV3BMcEphMmpkc0tPdnM0c3Z5bTgrVTNRdWV1QWoyRm9LQktac29H?=

=?utf-8?B?eExPNmxKbEtHUU13NGNHb3Bnam1ZbzN6ZkN0YWJYc0xHUXl0eDYxUEs0aU53?=

=?utf-8?B?ZXRqUkRocmRlcldURmlHT2JwMG5lOTdjZkhZdlpQRm1rTHliUHFwZ2lUUjE0?=

=?utf-8?B?ZHFBVGxlQXlZaDdLaXZoVnoxVWxidXBxaHA0TzdGK3czNng0T21vNzQreGJP?=

=?utf-8?B?RGludktBa05yOGMwbVY4cHhjcXZXekEwdTYxRkFSemRsbGt1R1pGOHRrb3cr?=

=?utf-8?B?Q0pMUzNmWGFhamRnZXFpaEJpVFA0TlFFZHRBSHlIc2wyOG50ODJGUWhCRHhO?=

=?utf-8?B?eTRkVFJhUy9yZEYwdTJKaFdUMlVjVmJVTytoZ1dSNCtxSWJpaUhWd2Z5SENi?=

=?utf-8?B?ZWwyYTBHdklVRjMyVUM2QUxXVlYzUkNXNXpNT3RvOTY1UnRLaFJ4THcyVmQz?=

=?utf-8?B?Tkk1M2V1NVYwTlhHbXBYNGFlSHZ3OE5rTGdybTNwVUhnR3VZbFg2b2hTcHh3?=

=?utf-8?B?ZHRxSS9lamNIcUtWMytEMnBESW9Jdld5eGJkdVFEVHJUUEtac25uc1h3UkVQ?=

=?utf-8?B?KyszcVNKLzhwbDIxSzI1NkQvS3MyOFhvSk5lMVJYYVk0QTZuMjhXUEdTZlQ1?=

=?utf-8?B?cXgyM3B0aTgzWkxUZ3NnMTZzcTVBS1phc2VHTVZidS9OTjVtOWJTd2dnVW41?=

=?utf-8?B?UnhyaXRlZEVyNm53QjNOdmxJQVBzbDFMYXAxc3NJeGlRVmdFVFZpQ1FqYlBu?=

=?utf-8?B?SU1mdXZMNGgreEl1QVdtQUNTeHI1bDIvdEp1bXdUdjJnWHBZQUczUXY2eFAx?=

=?utf-8?B?bnpsYnhGUnZ1dzAySGdDRmRNYXoyeUYwWUZrSThVeVpOUXU2Tng4NXp3dG1G?=

=?utf-8?B?aE1GbkltQW41UFQwWGJ2ZlBsOWpxYnZWNEVQZzcydW9HM29VRGY3ejNQdWoy?=

=?utf-8?B?T0lIOVVBVVhsWGcwbkxlYjdkK2QxN1oyVVQrNkZNeHU2U3pObjUxRmRoZUsw?=

=?utf-8?B?SVhpTVlOUHFIY2Z5cWhSSmN5T1R1NkNpZ0JLV3hwSmhMU0xFRGlNckM1eDVo?=

=?utf-8?B?SWJZTy9nNTZLK1pMSFR4Z0V2aGF6ZVlTVEtvNTBHVHRGRU1jUlhmeTFlc0xF?=

=?utf-8?B?U0JSZmlYMDZQR1daMndNYXROcnFmVzN3ZXBjdUtHWTVwZmhWY0VFdVlDSVg3?=

=?utf-8?B?S1JtK0FRQ1F3Z045RC9PMTdWVzk3Y0pFMmUxYndmOEpDSjREaE5EeGpGRUE5?=

=?utf-8?B?OVp4S2lEalFvWjI0RVNnd1h4dk9ubU1Ia2hvSXBOWDFLSmdSWWNEM1NpdFVj?=

=?utf-8?B?RWVJaE1jeE1zVXl2NzIyVi90aXE0YjZBNXZ1OEJ3RlJ4VlBudEpFbUpadmFx?=

=?utf-8?B?MTJWZ2VGS0l1OS9raVd5SCtKa1Z1ekpkWWlaVkxJMHRLWDI4TUVja2VTYUkz?=

=?utf-8?B?Q1NVbEVFZC9EVDVCUkY5TmJyTkJ0R2VpanJ0SzRhTXk5UWhWK09FV25PU3dm?=

=?utf-8?B?aE96NHkzbkp2SzJYbm5OaVcwTm0zTnN1TFlmRGptdjZadWZaMkJRYjVOaWlh?=

=?utf-8?B?NjFZdVJTNXQ2M29JVlVlRGFtQlRtazVoTnB2WGdweHR0dExhbGZSUnk1aW9u?=

=?utf-8?B?Z3FkblJTazlHalFFZ2trMlFKRlMxc3l5bERyS2lzT1VXODRzUHV3YUVBQUJw?=

=?utf-8?B?cEJDVjVReHArb2NOK0dreWZzdWlpdm5sNjBxc3JxOEpDSUQ4bGpFeDRBdHNH?=

=?utf-8?B?aUxBS0QvQkxHOGlHM0dRcW43Mll5S1NFU09WTVdMMnRlOVFWVEpwWHZIVEZZ?=

=?utf-8?B?Unl6TElJenlseDJiM0htY0prMHRiYmtsSVNxQWlNZ1BEak96cS8weEdiaG5D?=

=?utf-8?B?RjdTL1dpNCsxdTNMVlJ5dEJmUC9LZEVLdXFYeEFCU2xGRFNBM01kOTJBY2N4?=

=?utf-8?B?eW5vc245amRseHVVbzA2WDZkb1gxbitLTXhSQmVINm9PRzVMZGRYWDJVR3NV?=

=?utf-8?B?RUhzK01Cb3Q3dGVpZkNZM0NkVVZJSm1ydG01RStkNkdadnJaNjloL2VMYThu?=

=?utf-8?B?YTZrMVZCakZrVTJ4WXUwK21MeStaVnJaVS9CS3NzYWppeDlSNm1NSWI0MTRF?=

=?utf-8?B?dk5EcU00NlNmM3p6OWd1SHBMMzIzTGR2MFVtek50dWhOUUtiVDlwZ0IrcnRO?=

=?utf-8?B?Ky9oOGRMYXVLMjFadWd3QUYzMjdoeFc3SWI3VmhKT0xUODJQOCsvb2w4UHpa?=

=?utf-8?B?V2s3bXh1Y2JkUjNMNU50bXhweWJwMGZ1NzJFWU15VDNqS0FKOTk1UmowaEdO?=

=?utf-8?B?US9HZ3M4VkliR3V3bEU3ejRpaWFMRkYwblNFU203UGFINTk0N25jMUF6WE9U?=

=?utf-8?B?YTJ2akFGL0NJV2FrdnhRcnJ0RHZCeEVFZTBJZm93RyswcStEY0xMUGViVkdO?=

=?utf-8?B?ZXJ2L1ZaTU5kUC9xK2o5emRtQVNZYmdZN0prb0NpRy9MdWlWelZxeU55bmVD?=

=?utf-8?B?dHFENENxZG8reWI2ZWk0QzAzdGtlZGFYMnRXNnN4MjFKb1NzN2wxbkY2L2RP?=

=?utf-8?B?OHZjRFo5SEpPWkpZN0xXMDBtamV5bnh3aHo1TjdKVWVnWlpNY3lhOWhaelVB?=

=?utf-8?B?RGQvaFFiUTV0cW8zTVphU2s3czh2eGZyOE9WZ2FXaGxyVzJISVlMWDNNNEl5?=

=?utf-8?B?MjVFZ1NVbjR1K0lNZTVnSWRoTksybWpkZnlJSzh0bHR0UThITlI5L1dqdk5B?=

=?utf-8?Q?s6qEpbJZS8QlOomUD?=

X-Forefront-Antispam-Report:

CIP:159.183.151.213;CTRY:US;LANG:en;SCL:8;SRV:;IPV:NLI;SFV:SPM;H:o31.sg.zoom.us;PTR:o31.sg.zoom.us;CAT:OSPM;SFS:(13230040)(48200799018)(69100299015)(5083199021)(376014)(34036016)(586017)(29132699027)(7416014)(61400799027)(41320700013)(8075299003)(3613699012)(4076899003)(8096899003)(13003099007)(102250200026);DIR:OUT;SFP:1501;

X-Auto-Response-Suppress: DR, OOF, AutoReply

X-OriginatorOrg: Jacobd066.onmicrosoft.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 2d2d1b52-3c18-4141-8dbd-08de5db53586

X-MS-Exchange-CrossTenant-Id: 54651c30-dc9d-4efd-b60a-edb9fb8967e0

X-MS-Exchange-CrossTenant-AuthSource: SJ1PEPF00002310.namprd03.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Jan 2026 15:09:42.0380

(UTC)

X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV1P223MB1339

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi there, Your iPhone 17 Order Has Been Completed PayPal

Account Alert. Payment Alert – Call +1(828) 407-9068 (efrerr@virgilian.com)

is inviting you to chat and meet on Zoom Workplace.



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[52.102.149.0 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[159.183.151.213 listed in dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:930:29:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:0:0:0:31 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

[2603:10b6:a03:2c0:cafe:0:0:76 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.102.149.0 listed in dnsbl.ahbl.org]