NetKnow Corporate Blog

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   Remittance phish from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

system, BlinkMacSystemFont, "Helvetica Neue", "Segoe =

UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI =

Emoji", "Segoe UI Symbol";margin:0px;"> 

system, BlinkMacSystemFont, "Helvetica Neue", "Segoe =

UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI =

Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs=

p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   Remittance phish from Google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:12:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOsF-00000000MJm-2ANX for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:11:39 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:11:39 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-pl1-f229.google.com ([209.85.214.229]:48445) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOr3-00000000MDi-3cXD for doctor@mail.nl2k.ab.ca; Mon, 13 Jul 2026 16:10:38 -0600 Received: by mail-pl1-f229.google.com with SMTP id d9443c01a7336-2cce6a0c9c3so32621705ad.1 for ; Mon, 13 Jul 2026 15:09:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783980573; x=1784585373; darn=mail.nl2k.ab.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=OL8gavcHjVsRN7kI1lyeorh5HuPES7VWkVvSgXww7PggHEdhDLj5sXmvlteGu/Q/Ou 1Qf4RdaoLYfUdcU6aipmTiGotGUn2uYvxONtTAQeDRXycRXjUh8lID1Fpnwpc2l3g6Ec qMDXSCfTtUiLFyQahlADjuvs5WSU170OQ6IuA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783980573; x=1784585373; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=mkP9ada4GhnRNu8xsakmZOTcRG8CQfZz6Vs90gwh/CUOhfRJwqX7Mj5lpi1XqvLf4i GWjUGEWDVs3CNvqn7A6CHklX40BI+Ib4UNGu/u9eglfmYenWunHTc3f1bIBRuluIyECd QYCPFxddldjKBQ7ejusdlreUiN2lcJwQSLhIBDU+VrQpgOf+zKaMyJdMEz/CqzFmTSsA zHpuVHq0rsb+RAz/Jb3yzmZC1Z9Rs8xnDMaGyk/q5QzNNmK/DMoPRs4krtIEcO73cQQ4 g9TQCIMGc/Xz6DwgvDzicMjv7FfJaiskp3SF71P78iX4VbvAR6St41Lgm+WPSM7s/lmd pIQQ== X-Gm-Message-State: AOJu0Ywep0EoNluz2JUq/E5Xhg42K53WP1vlh/gSQpoBPuAgChVd4Fqe VbXUDp+Ohef0/iOz5/C8UsBOQ9ETgKAoqe+HbHwbBidm29dJUmgVyunUTKUAVMoHFZ9jYZt98TK 7R4POG84zFhwEn82MrLZHhmJsZOpU1YjO0lBVvlWCdcswtxw= X-Gm-Gg: AfdE7cmGq9YX6jhOe93ZDoceGI50QkQhE7R3wk2vuKV7rLKOKDXvorVTDV3nfHm7AGE hUbVHsP2byYL+y9nCkYMDSBXwwB9yAr+o+sSy/JCSenFpGPfFiFXp0OXaCxo/Hpqu/uQ6MvRc7I Fd75nMdO60ja/Mt5131YFaIhZDbl4+1BImoMcHZHwBOkZzdT8MtSsolp2nqE5QsigTuFUst8yqb s5sa4u4Pk3vEVHnCfqFwsvR0Mw62PcrBeL3oMSMGSI7p5g2xVNuQ8UmprLPFuTg6W4wDtsyjS8j 3nABpn1z+03Ao67u8NMc10PfOyGvd0t+YuAlmujtmjzRlWXRXvii0AEr1EtShJkExeZiB5ugAP8 l7NBASR6gkHzO2LMVGCCeKA== X-Received: by 2002:a17:902:d2ca:b0:2c9:97a8:8c1b with SMTP id d9443c01a7336-2ce9f2948camr100384155ad.46.1783980573226; Mon, 13 Jul 2026 15:09:33 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id d9443c01a7336-2ccc9ccd086sm21273355ad.35.2026.07.13.15.09.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 15:09:33 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "alert@remittance.com | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-78448" To: doctor@mail.nl2k.ab.ca Subject: =?UTF-8?Q?ACH_Payment_Status_Update_=EF=BF=BD_July?= =?UTF-8?Q?_9=2C_2026_=EF=BF=BD_07/13/2026_?= =?UTF-8?Q?=EF=BF=BD_doctor=40mail=2Enl2k=2Eab=2Eca?= Message-ID: <7a9d77a6-dcc5-5e6b-29c9-a3104bfc1d24@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 22:09:31 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.3 X-Spam_score_int: 63 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.214.229 listed in dnsbl.ahbl.org] [209.85.214.229 listed in dnsbl.ahbl.org] [209.85.214.229 listed in dnsbl.ahbl.org] [209.85.214.229 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] [209.85.214.229 listed in will-spam-for-food.eu.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.229 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.214.229 listed in bl.score.senderscore.com] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 NO_RDNS2 Sending MTA has no reverse DNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.214.229 listed in wl.mailspike.net] -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders Subject: {SPAM?} =?UTF-8?Q?ACH_Payment_Status_Update_=EF=BF=BD_July?= =?UTF-8?Q?_9=2C_2026_=EF=BF=BD_07/13/2026_?= =?UTF-8?Q?=EF=BF=BD_doctor=40mail=2Enl2k=2Eab=2Eca?= Remittance phish from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   Remittance phish from Google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:12:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOsM-00000000MK8-43at for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:11:46 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:11:46 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-ot1-f104.google.com ([209.85.210.104]:51418) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOr5-00000000MDj-0coY for doctor@netknow.ca; Mon, 13 Jul 2026 16:10:42 -0600 Received: by mail-ot1-f104.google.com with SMTP id 46e09a7af769-7e9ecb1e13bso1485244a34.2 for ; Mon, 13 Jul 2026 15:09:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783980573; x=1784585373; darn=netknow.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=KkvVwGFP4PxoOUOp0Xyvtj/4CQDNUIytBZVMXgUbWsyHVmLyxxLW04NMM6aDHq2Enm ldF5EgARKXNQEqNlmlp/Rpet/917NKlOIcXaz3D3jkQz3vuv5Yu/J1sx/ixB/ibEG+pv OjZ3BR5nohddOB16fgaG8uA8/5zAJG5kPtmCE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783980573; x=1784585373; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=RuwWvKNydUG9Y2/8UokJ/eKrxLVqgSIgBeEI9m9PwUOZIx7omiOJ9wL05WXb4VAr+0 K0F6gagSYcLZGHj5BJC2OMQn5WzuV77y7jSFTRVTmCQQtIh3TODqQEX6o5Zx9llhXUB6 uUrz1DuBRULuwOMhn5M9XcLGppefrUXhTwWO/KPWcwK809CFYRuY0hY7oUgb7jPqedvt T0zYGg9eeZSrkM4nHgAavwoqLlBZf7YxF9qBdE7ShQKfw3/RsKSBncrWV52Ez92tdN8O FpKvJvp5+wYsziS12JJhf0AKTLWEoWlWaocWSnzyxiuuJmue1BodqLIbjXLgA6hHNrpP UjYQ== X-Gm-Message-State: AOJu0YyDrY3uXOMZHlqYZzQD3kLloMWFPHHaJ9RJgWu3j/l+h3VBKgsD o3skSLqEzO8B3eNjAGKBgfIiUElfpqX09TV/+N77N5iCaeZhM+qbfvr9YzxBYONaonu8TjwxQTa na8u2enGaVdaABCS3/O8U4Sene+R0uLUwWxSbTgNBIoNWuS8= X-Gm-Gg: AfdE7clu4JfV75LVRPLTT0xldomL5+MzCgIx14+zLf0miDiv8c0TBK70dL/IW1eEHKc BhfGBzg+3/8nz/e/sArCllVXw8S/GV77hgA/xkX2sHSk0/D9N2RaD7zEHfb51ogxlP+9lH6sCVp vACwM7o9cbaTTU8oSEffSG2tu1/dPj38JSy8as6ukVFej7jKwP5cW7fP6Hnw0h38iX7jclUwTtd cIlqr8kdBAfMLtmBTrkd3Lh+oECD0dW6ICKHCEDZLLDOyf5OyEsyRQMUhjXAvu7XD++/yOcPBc9 DTyrTM2BRib9z3xJ/2kUh2qcAcBR76lPUmg4cdFZBGdkIlHHVREf+2mIyIpXOHL8BVPo7UjRnCW q3TXV4NM5M3VacUVfdGNFiw== X-Received: by 2002:a05:6820:16a8:b0:6a3:992f:f047 with SMTP id 006d021491bc7-6a39a5d9b02mr6043501eaf.27.1783980573164; Mon, 13 Jul 2026 15:09:33 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id 006d021491bc7-6a387892d32sm542134eaf.25.2026.07.13.15.09.32 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 15:09:33 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "alert@remittance.com | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-86665" To: doctor@netknow.ca Subject: =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Th?= =?UTF-8?Q?u=2C_July_9=2C_2026_=EF=BF=BD_07/13/2026?= =?UTF-8?Q?_=EF=BF=BD_doctor=40netknow=2Eca?= Message-ID: <6db0db7b-4dbe-de7b-cd1e-00eebe0dfd04@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 22:09:31 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.3 X-Spam_score_int: 63 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.210.104 listed in dnsbl.ahbl.org] [209.85.210.104 listed in dnsbl.ahbl.org] [209.85.210.104 listed in dnsbl.ahbl.org] [209.85.210.104 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] [209.85.210.104 listed in will-spam-for-food.eu.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.210.104 listed in list.dnswl.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.210.104 listed in wl.mailspike.net] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.210.104 listed in bl.score.senderscore.com] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NO_RDNS2 Sending MTA has no reverse DNS 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Subject: {SPAM?} =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Th?= =?UTF-8?Q?u=2C_July_9=2C_2026_=EF=BF=BD_07/13/2026?= =?UTF-8?Q?_=EF=BF=BD_doctor=40netknow=2Eca?= REmittance Phish from google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   REmittance Phish from google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:12:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOsJ-00000000MJz-1ZFG for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:11:43 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:11:43 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-oo1-f102.google.com ([209.85.161.102]:47606) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOr3-00000000MDf-3bke for doctor@nk.ca; Mon, 13 Jul 2026 16:10:38 -0600 Received: by mail-oo1-f102.google.com with SMTP id 006d021491bc7-6a379b68f76so1166886eaf.3 for ; Mon, 13 Jul 2026 15:09:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783980573; x=1784585373; darn=nk.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=iO+mMTpXGEFU5WgDsXuvUCE/Tc7sANOq5EJhmTJMIqhVUfQCkNq6tUWXPPpUgT40Tc roQgPE9cqRZHBiYhnwLV23KAVq5waRCrPAYWMuIfLpGRqYSpSHt97I6uDR+29JVOgrrx fR8j9xSpap7kaiqt+qIwJhKt1UK3FDOgSDlYE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783980573; x=1784585373; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=dPk6E7ScQcODGcovvLaMrYZYpaL4Z7H/yxYlLHvIWAfS8+H+YatmbWxDu7GsHUEfox Hed1nWpFAogK40a83iryzVqzesVcOHuU1bcT7BpsTEpkUcAFsTI4K6PE2kHkIJNx9FQR MoP+q+6aUc5Y3kQnmC0SikWt89d9PYoDjcYq9ijtvdlvDGzqYSIzfZmPwDP6ewSMBXvy ePcfN1GXt3KFBT+/y3qB6aIKNuGG+55GfVXrEjS0urRL4lsxMiaL0oJWyRQhGqumxcHu J1PvPeah9sUimV3JnGfOcrqo2TF80MYSRLRK12/f0iC3SW4kKVgk60ohOTARDXjKWda9 Ihww== X-Gm-Message-State: AOJu0Yw1vBnquknUJ+Hid81hjCKxWEX9grIeojATSR6RbaGzUu0KWYpL iVNZXd8BAMVlGSlsQg+3giu86U5gDbYShMJMD6dRExTIE1uaP3GRoPPR+1RhDHIyeNLLCCmSYw5 bJJQOSD1m4tzcX2jZP0HsdS3eLAtoJy6tC63OkG1nvdk752A= X-Gm-Gg: AfdE7cmxJ9C4x760S2YmCiKYxyOh+UpaEFNgnUdeMoXKk9naS5klfVA7VEafJw8YShO IQGRonP+xFOIf9RMFNJ/yNyYZnqotKdbcn0oy5I/KQBOcQ7SjcPv2W6IilfC3srsboda/CKUyO7 DNi4loqGz+IYAwXFU+lCOYryWKuXAdHQxFl4vrRPF/L/qufUsKUBv1+chzphzbc6nthIMIFUj28 9exKHGC2/jISYzD6nZyh2Gkq0DAA0SWa6w6beKSp1FqspnkKDeoPNQntN/LK/NH5xkltTymCJgH cMsuv+rugtruWnsvqTkIB+251qGuvcBk4YZRi1q8BjGYXbQ8P12EqROzC+JcM8D0QVSH33bHQzw Lpunwb6WuxuNq7tOUL8dt3dc= X-Received: by 2002:a05:6820:4b88:b0:6a3:cff:f0e3 with SMTP id 006d021491bc7-6a39a55bfe1mr5783628eaf.5.1783980573201; Mon, 13 Jul 2026 15:09:33 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id 006d021491bc7-6a36a7e5d64sm846650eaf.26.2026.07.13.15.09.33 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 15:09:33 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "e-Remittance| Scheduled | Online/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-57596" To: doctor@nk.ca Subject: =?UTF-8?Q?ACH_Funds_Transfer_Notification_?= =?UTF-8?Q?=EF=BF=BD_July_9=2C_2026_=EF=BF=BD_07/13?= =?UTF-8?Q?/2026_=EF=BF=BD_doctor=40nk=2Eca?= Message-ID: <224e8757-4b2b-1edf-4ef0-e215ec1fbcd7@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 22:09:31 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.3 X-Spam_score_int: 63 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.161.102 listed in list.dnswl.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.161.102 listed in bl.score.senderscore.com] -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.161.102 listed in wl.mailspike.net] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NO_RDNS2 Sending MTA has no reverse DNS -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Subject: {SPAM?} =?UTF-8?Q?ACH_Funds_Transfer_Notification_?= =?UTF-8?Q?=EF=BF=BD_July_9=2C_2026_=EF=BF=BD_07/13?= =?UTF-8?Q?/2026_=EF=BF=BD_doctor=40nk=2Eca?= PAyment phishing from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">

92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">

n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   PAyment phishing from Google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 15:32:00 -0600 Received: from mail-vs1-f101.google.com ([209.85.217.101]:49275) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOEy-000000007pg-1VII for dave@nl2k.ab.ca; Mon, 13 Jul 2026 15:31:12 -0600 Received: by mail-vs1-f101.google.com with SMTP id ada2fe7eead31-745659c70ccso387398137.2 for ; Mon, 13 Jul 2026 14:30:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783978211; x=1784583011; darn=nl2k.ab.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=LK9WJB+EZx58ROgpFo+eYtF/HmUoAV6oKD9Jyko570QTYuQAkLoIb3aO7yEnKcNtA4 PVr/EW/zB5cBRTZ4ap6Hbs/qO7/7ZErCsKRIy1HHk2ZbY8p78X3WK6H9blGwUpoIaOW1 Z9Gv3AgWq1X+od+zuc+qA7+i/2bEG+8QJJueQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783978211; x=1784583011; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=TWBloQWuP4oe9D5tvkkFiXJ9SaqyDtMcjo9uxcdFiHcPhpeKaB1jVmosnrTrNl4qdh OScj2DAomxLLKog3LdrNBlzHMeUnAM2z4nRlo0eOBu+s8cqJ1+EcBG+WotpHhvsAhHJ2 trR+Po8QkP/ManwVXviuhYfnAJvbcbFG1bev7Y7ylMG5KZeQrbnAOfHU1SBW///sM2Jz akFrxhybCr7KioCkbuplSDHJqyYrWYRWUT1SXNH2rkFuTeIjVat8RKk3VC0KGXHsfjx3 vle84QJhIqdoPjByet1TpgPmLlda1vzb7jP/JMkb8YlldqpICa2LHsToVFg4pGiJE8dm kXyQ== X-Gm-Message-State: AOJu0YznxephDue77P4/H61enoCTN7oLDW2Yj3+Y1M8MfFT40hkBW0P0 lsnwIU4TWbEF3gKsrjYZF8xH3NAuRo1JXj2J0pT9U3UQFb8WTPBL7q56lCn0tEQDNII1fBVcGxW Ngq0XTW9naZxotqQ6acdgJsMa1BjufdESq/3gxqofdcEJ82s= X-Gm-Gg: AfdE7ckoQIo0dgY/WWxwks+mlOjR54m3z/czW9IIXXXuL9QFtpZ0NvA3h51tprhTONR iraur8TCzx7L/d39nO9gHIxmufwUECNdhFZ7kjcJP+OwpzW96XdmvSNmnzOX2d7pYmK1/phq89B RAZZfLeOWgizRSkYkgB/sF4Dm5b9fdu4O3JrPOUFWKyGwmkPRoyF28PYbZ2J9/6iP9kuHtVt5T8 mcqJEYHhGKF5bH5DKMKunCBDUSPRD2tIbMCL7AjXcj3TdF7Ep9V4rzFuiED1otYy6Z2S1Pvt8Fs klEJPum2UVefeW3nTHFsgokTWddsvqy77FjOZds3Bewu1R6osgk48rxkk0afIBqJ6tmwY93MN1O h+B5MOXBy0QxX7rsRBw== X-Received: by 2002:a05:6102:5a9a:b0:6f0:3ba3:7d84 with SMTP id ada2fe7eead31-74533b51e71mr5827912137.5.1783978211039; Mon, 13 Jul 2026 14:30:11 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id ada2fe7eead31-744d6a90d3fsm1502630137.7.2026.07.13.14.30.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 14:30:11 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "alert@remittance.com | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-33679" To: dave@nl2k.ab.ca Subject: =?UTF-8?Q?Notice_of_ACH_Payment_=EF=BF=BD_July_9?= =?UTF-8?Q?=2C_2026_=EF=BF=BD_07/13/2026_=EF=BF=BD_?= =?UTF-8?Q?dave=40nl2k=2Eab=2Eca?= Message-ID: <29af450d-c685-ca9b-4579-d5d7874c9157@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 21:30:09 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.1 X-Spam_score_int: 61 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.217.101 listed in bl.score.senderscore.com] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.217.101 listed in list.dnswl.org] -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.217.101 listed in wl.mailspike.net] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NO_RDNS2 Sending MTA has no reverse DNS 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Subject: {SPAM?} =?UTF-8?Q?Notice_of_ACH_Payment_=EF=BF=BD_July_9?= =?UTF-8?Q?=2C_2026_=EF=BF=BD_07/13/2026_=EF=BF=BD_?= =?UTF-8?Q?dave=40nl2k=2Eab=2Eca?=