Received: from relay.example.org (relay.example.org [192.0.2.10])
	by mx.example.org with ESMTP id abc123
	for <you@example.org>; Mon, 07 Sep 2026 09:12:44 +0000
Received: from sender.invalid (sender.invalid [203.0.113.42])
	by relay.example.org with ESMTP id def456
	for <you@example.org>; Mon, 07 Sep 2026 09:12:40 +0000
Return-Path: <bounce@sender.invalid>
Authentication-Results: mx.example.org; spf=fail; dkim=none; dmarc=fail
Received-SPF: fail (mx.example.org: domain of sender.invalid does not designate 203.0.113.42)
From: "Example Bank" <phish@sender.invalid>
To: victim@example.org
Cc: colleague@example.org
Delivered-To: victim@example.org
X-Original-To: victim@example.org
Reply-To: "Support" <reply@sender.invalid>
Subject: Your account requires verification
Date: Mon, 07 Sep 2026 09:12:40 +0000
Message-ID: <case-one@sender.invalid>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8

Please verify at http://login.sender.invalid/verify?id=abc123