NetKnow Corporate Blog

system, BlinkMacSystemFont, "Helvetica Neue", "Segoe =

UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI =

Emoji", "Segoe UI Symbol";margin:0px;"> 

system, BlinkMacSystemFont, "Helvetica Neue", "Segoe =

UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI =

Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs=

p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   REmittance Phish from google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:12:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOsJ-00000000MJz-1ZFG for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:11:43 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:11:43 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-oo1-f102.google.com ([209.85.161.102]:47606) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOr3-00000000MDf-3bke for doctor@nk.ca; Mon, 13 Jul 2026 16:10:38 -0600 Received: by mail-oo1-f102.google.com with SMTP id 006d021491bc7-6a379b68f76so1166886eaf.3 for ; Mon, 13 Jul 2026 15:09:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783980573; x=1784585373; darn=nk.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=iO+mMTpXGEFU5WgDsXuvUCE/Tc7sANOq5EJhmTJMIqhVUfQCkNq6tUWXPPpUgT40Tc roQgPE9cqRZHBiYhnwLV23KAVq5waRCrPAYWMuIfLpGRqYSpSHt97I6uDR+29JVOgrrx fR8j9xSpap7kaiqt+qIwJhKt1UK3FDOgSDlYE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783980573; x=1784585373; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=dPk6E7ScQcODGcovvLaMrYZYpaL4Z7H/yxYlLHvIWAfS8+H+YatmbWxDu7GsHUEfox Hed1nWpFAogK40a83iryzVqzesVcOHuU1bcT7BpsTEpkUcAFsTI4K6PE2kHkIJNx9FQR MoP+q+6aUc5Y3kQnmC0SikWt89d9PYoDjcYq9ijtvdlvDGzqYSIzfZmPwDP6ewSMBXvy ePcfN1GXt3KFBT+/y3qB6aIKNuGG+55GfVXrEjS0urRL4lsxMiaL0oJWyRQhGqumxcHu J1PvPeah9sUimV3JnGfOcrqo2TF80MYSRLRK12/f0iC3SW4kKVgk60ohOTARDXjKWda9 Ihww== X-Gm-Message-State: AOJu0Yw1vBnquknUJ+Hid81hjCKxWEX9grIeojATSR6RbaGzUu0KWYpL iVNZXd8BAMVlGSlsQg+3giu86U5gDbYShMJMD6dRExTIE1uaP3GRoPPR+1RhDHIyeNLLCCmSYw5 bJJQOSD1m4tzcX2jZP0HsdS3eLAtoJy6tC63OkG1nvdk752A= X-Gm-Gg: AfdE7cmxJ9C4x760S2YmCiKYxyOh+UpaEFNgnUdeMoXKk9naS5klfVA7VEafJw8YShO IQGRonP+xFOIf9RMFNJ/yNyYZnqotKdbcn0oy5I/KQBOcQ7SjcPv2W6IilfC3srsboda/CKUyO7 DNi4loqGz+IYAwXFU+lCOYryWKuXAdHQxFl4vrRPF/L/qufUsKUBv1+chzphzbc6nthIMIFUj28 9exKHGC2/jISYzD6nZyh2Gkq0DAA0SWa6w6beKSp1FqspnkKDeoPNQntN/LK/NH5xkltTymCJgH cMsuv+rugtruWnsvqTkIB+251qGuvcBk4YZRi1q8BjGYXbQ8P12EqROzC+JcM8D0QVSH33bHQzw Lpunwb6WuxuNq7tOUL8dt3dc= X-Received: by 2002:a05:6820:4b88:b0:6a3:cff:f0e3 with SMTP id 006d021491bc7-6a39a55bfe1mr5783628eaf.5.1783980573201; Mon, 13 Jul 2026 15:09:33 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id 006d021491bc7-6a36a7e5d64sm846650eaf.26.2026.07.13.15.09.33 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 15:09:33 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "e-Remittance| Scheduled | Online/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-57596" To: doctor@nk.ca Subject: =?UTF-8?Q?ACH_Funds_Transfer_Notification_?= =?UTF-8?Q?=EF=BF=BD_July_9=2C_2026_=EF=BF=BD_07/13?= =?UTF-8?Q?/2026_=EF=BF=BD_doctor=40nk=2Eca?= Message-ID: <224e8757-4b2b-1edf-4ef0-e215ec1fbcd7@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 22:09:31 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.3 X-Spam_score_int: 63 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] [209.85.161.102 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] [209.85.161.102 listed in will-spam-for-food.eu.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.161.102 listed in list.dnswl.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.161.102 listed in bl.score.senderscore.com] -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.161.102 listed in wl.mailspike.net] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NO_RDNS2 Sending MTA has no reverse DNS -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Subject: {SPAM?} =?UTF-8?Q?ACH_Funds_Transfer_Notification_?= =?UTF-8?Q?=EF=BF=BD_July_9=2C_2026_=EF=BF=BD_07/13?= =?UTF-8?Q?/2026_=EF=BF=BD_doctor=40nk=2Eca?= PAyment phishing from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   PAyment phishing from Google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 15:32:00 -0600 Received: from mail-vs1-f101.google.com ([209.85.217.101]:49275) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOEy-000000007pg-1VII for dave@nl2k.ab.ca; Mon, 13 Jul 2026 15:31:12 -0600 Received: by mail-vs1-f101.google.com with SMTP id ada2fe7eead31-745659c70ccso387398137.2 for ; Mon, 13 Jul 2026 14:30:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783978211; x=1784583011; darn=nl2k.ab.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=LK9WJB+EZx58ROgpFo+eYtF/HmUoAV6oKD9Jyko570QTYuQAkLoIb3aO7yEnKcNtA4 PVr/EW/zB5cBRTZ4ap6Hbs/qO7/7ZErCsKRIy1HHk2ZbY8p78X3WK6H9blGwUpoIaOW1 Z9Gv3AgWq1X+od+zuc+qA7+i/2bEG+8QJJueQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783978211; x=1784583011; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=TWBloQWuP4oe9D5tvkkFiXJ9SaqyDtMcjo9uxcdFiHcPhpeKaB1jVmosnrTrNl4qdh OScj2DAomxLLKog3LdrNBlzHMeUnAM2z4nRlo0eOBu+s8cqJ1+EcBG+WotpHhvsAhHJ2 trR+Po8QkP/ManwVXviuhYfnAJvbcbFG1bev7Y7ylMG5KZeQrbnAOfHU1SBW///sM2Jz akFrxhybCr7KioCkbuplSDHJqyYrWYRWUT1SXNH2rkFuTeIjVat8RKk3VC0KGXHsfjx3 vle84QJhIqdoPjByet1TpgPmLlda1vzb7jP/JMkb8YlldqpICa2LHsToVFg4pGiJE8dm kXyQ== X-Gm-Message-State: AOJu0YznxephDue77P4/H61enoCTN7oLDW2Yj3+Y1M8MfFT40hkBW0P0 lsnwIU4TWbEF3gKsrjYZF8xH3NAuRo1JXj2J0pT9U3UQFb8WTPBL7q56lCn0tEQDNII1fBVcGxW Ngq0XTW9naZxotqQ6acdgJsMa1BjufdESq/3gxqofdcEJ82s= X-Gm-Gg: AfdE7ckoQIo0dgY/WWxwks+mlOjR54m3z/czW9IIXXXuL9QFtpZ0NvA3h51tprhTONR iraur8TCzx7L/d39nO9gHIxmufwUECNdhFZ7kjcJP+OwpzW96XdmvSNmnzOX2d7pYmK1/phq89B RAZZfLeOWgizRSkYkgB/sF4Dm5b9fdu4O3JrPOUFWKyGwmkPRoyF28PYbZ2J9/6iP9kuHtVt5T8 mcqJEYHhGKF5bH5DKMKunCBDUSPRD2tIbMCL7AjXcj3TdF7Ep9V4rzFuiED1otYy6Z2S1Pvt8Fs klEJPum2UVefeW3nTHFsgokTWddsvqy77FjOZds3Bewu1R6osgk48rxkk0afIBqJ6tmwY93MN1O h+B5MOXBy0QxX7rsRBw== X-Received: by 2002:a05:6102:5a9a:b0:6f0:3ba3:7d84 with SMTP id ada2fe7eead31-74533b51e71mr5827912137.5.1783978211039; Mon, 13 Jul 2026 14:30:11 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id ada2fe7eead31-744d6a90d3fsm1502630137.7.2026.07.13.14.30.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 14:30:11 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "alert@remittance.com | EFT Portal/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-33679" To: dave@nl2k.ab.ca Subject: =?UTF-8?Q?Notice_of_ACH_Payment_=EF=BF=BD_July_9?= =?UTF-8?Q?=2C_2026_=EF=BF=BD_07/13/2026_=EF=BF=BD_?= =?UTF-8?Q?dave=40nl2k=2Eab=2Eca?= Message-ID: <29af450d-c685-ca9b-4579-d5d7874c9157@sabeng.it> Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 21:30:09 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.1 X-Spam_score_int: 61 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] [209.85.217.101 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] [209.85.217.101 listed in will-spam-for-food.eu.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.217.101 listed in bl.score.senderscore.com] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.217.101 listed in list.dnswl.org] -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.217.101 listed in wl.mailspike.net] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 LOTS_OF_MONEY Huge... sums of money 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NO_RDNS2 Sending MTA has no reverse DNS 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid Subject: {SPAM?} =?UTF-8?Q?Notice_of_ACH_Payment_=EF=BF=BD_July_9?= =?UTF-8?Q?=2C_2026_=EF=BF=BD_07/13/2026_=EF=BF=BD_?= =?UTF-8?Q?dave=40nl2k=2Eab=2Eca?= PAyment phishing from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">
92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">	n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   PAyment phishing from Google Gmail Part 1 Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@nk.ca Delivery-date: Mon, 13 Jul 2026 15:32:00 -0600 Received: from mail-qt1-f232.google.com ([209.85.160.232]:50213) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOEy-000000007pn-1Cj0 for dave@nk.ca; Mon, 13 Jul 2026 15:31:12 -0600 Received: by mail-qt1-f232.google.com with SMTP id d75a77b69052e-51c05dcdf49so39611371cf.0 for ; Mon, 13 Jul 2026 14:30:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sabeng.it; s=google; t=1783978211; x=1784583011; darn=nk.ca; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:from:to:cc:subject:date:message-id:reply-to :content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=L/zwVG0QTabYp5mtckTK4tdEhFupdz6eG5LWQV6agjsznwgAd09lKtZM5uZaY03xvs dW9UizquE0cyXYT9rqCeACiImd5oosp6RsEkLdizb05cJxMrkmYNx63rbfXoOcNFHphs PIR+oLeShtPrqLBt/M3QMBXuQpROO76itPDCU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783978211; x=1784583011; h=content-type:mime-version:date:content-transfer-encoding:message-id :subject:to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=SQeYhuGtuot8NB4/jQiU1QF7G5cKOkSJgl7Tik7+V1Q=; b=ceTLun3VvhWDOFT3rfDUYC05J681tjffx7n2SuwosJ0AkyHOfJLMmaswo4odnYJcXk cRIZRsVa1Noir90sobxzVks980gYOL7XzChLuLhsG0Si3wAr7zztQOQZTjKINijPIioi ZuwDnzbn6HcnmnCbJXScHtvJMx++5M5h+NvqcKXPDLaFNQxZ0uwEXLEPiRxKXOB2vWMq Vpkcpls+LIn4kAlY00DEO3ggcHqnwJWfha3nKmykqsAUhXRxqkvkOecNN6M+1jheZZNs STxAjqGsRmQdopZFJX1u58YaKQmZHO+kanQSc3Nm2iXvurC4yyqv8hbkcCaD+/ar1c86 AVdA== X-Gm-Message-State: AOJu0Yz70Smv4jnj0mmZjfMXik4v5IYGbazXcqVQu7w71IQOhDQqlq8Y SZ0rX+I2AzmqXfSt8i8iIQOXc9G6fXS4E1L/ZEFfezjWA3x2owJucenq5VrbHvI9A4k8Up8XAke BgIfmS4vaSJsPsALrtwGNjVPbxH8F65yr+AC7Yrb7pRe1jHU= X-Gm-Gg: AfdE7cmFPXf25Yn0bvCLzz/G/KOb0Rg0tCDsko3cvCFZ383gv2Pt0f0BBQNo+XPuu2y jeWlf6KbxfyU9s0YKemYIMMJjnxuGB7ZU0qfueurI8d9dC6EDLlLPxa0C1XLBiU1GAz+guwfec+ s/ygd5Kytfaja20GCpQzfmeHfcMmYs/DkIEz4/2bTD9vlpR19FiLiLdxeWHUxWLDK6Fl5WnPY3Y Ix22VyYjUmNta1igfcTYumyL0w370Zt+32GyM1xooH/K/zIaHNIFe41myvZx1nQbH/Cor8Qowxs QNtBgXGVPYQPizrxwRbUcYNS33aVerGCt6jH/SHvCzo9osdrnMDoQsQQ4Z01U9xLnZbbLcn7fji xggCqG7OoDFDn4rFOpA== X-Received: by 2002:ac8:5a0a:0:b0:517:9095:c31b with SMTP id d75a77b69052e-51cbf24a07emr98350151cf.42.1783978211019; Mon, 13 Jul 2026 14:30:11 -0700 (PDT) Received: from sabprogetti.com ([192.210.236.148]) by smtp-relay.gmail.com with ESMTPS id 6a1803df08f44-8ffd63b043asm7614726d6.9.2026.07.13.14.30.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 13 Jul 2026 14:30:11 -0700 (PDT) X-Relaying-Domain: sabeng.it From: "Payroll@remittance.com|Schedule| Sign_Online/OU=EXCHANGE ADMINISTRATIVE GROUP (FYDIBOHF23SPDLT)/CN=RECIPIENTS/CN=B7A707497B564FD-47386" To: dave@nk.ca Subject: =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Th?= =?UTF-8?Q?u=2C_July_9=2C_2026_=EF=BF=BD_07/13/2026?= =?UTF-8?Q?_=EF=BF=BD_dave=40nk=2Eca?= Message-ID: Content-Transfer-Encoding: quoted-printable Date: Mon, 13 Jul 2026 21:30:09 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 X-Spam_score: 6.1 X-Spam_score_int: 61 X-Spam_bar: ++++++ X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview:  Payment Due: 13/07/2026 033747 Amount Paid: $3,378.00 Content analysis details: (6.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [192.210.236.148 listed in dnsbl.ahbl.org] [209.85.160.232 listed in dnsbl.ahbl.org] [209.85.160.232 listed in dnsbl.ahbl.org] [209.85.160.232 listed in dnsbl.ahbl.org] [209.85.160.232 listed in dnsbl.ahbl.org] 1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org [192.210.236.148 listed in dnsbl.ahbl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [192.210.236.148 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] [209.85.160.232 listed in will-spam-for-food.eu.org] -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Excessive Number of Queries | ] -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Excessive Number of Queries | ] -0.0 SPF_PASS SPF: sender matches SPF record -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.160.232 listed in list.dnswl.org] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [209.85.160.232 listed in bl.score.senderscore.com] -0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.160.232 listed in wl.mailspike.net] 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 0.0 NO_RDNS2 Sending MTA has no reverse DNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars Subject: {SPAM?} =?UTF-8?Q?ACH_Payment_Activity_Report_=EF=BF=BD_Th?= =?UTF-8?Q?u=2C_July_9=2C_2026_=EF=BF=BD_07/13/2026?= =?UTF-8?Q?_=EF=BF=BD_dave=40nk=2Eca?= PAyment phishing from Google Gmail Part 3 Posted by Dave Yadallee on Tuesday, July 14. 2026 system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;">  style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0" = width=3D"549"> style=3D"border-width:0px;margin:0px;padding:0in;vertical-align:top;"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-bottom-style:solid;border-bottom-width:3pt;border-collapse:= collapse;border-color:initial;border-left-style:none;border-left-width:medi= um;border-right-style:none;border-right-width:medium;border-top-style:none;= border-top-width:medium;font-family:-apple-system, BlinkMacSystemFont, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";font-feature-settings:"liga" 0;line-height:normal;" = cellspacing=3D"0" width=3D"549"> = = = = = = = = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Hello  style=3D"font-family:Arial, Helvetica, sans-serif;font-size:small;">Dear = Customer, sans-serif;font-size:10.5pt;">, = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Payment has been remitted into your = account with receipt for your reference. = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> (110, 139, 168);border-radius:4px;color:white;display:inline-block;font-fam= ily:Helvetica, sans-serif;font-size:10.5pt;padding:8px = 16px;text-decoration-line:none;" href=3D"https://distropical.com/th.= php">VIEW PAYMENT RECEIPT = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;">  = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";line-height:12pt;margin:0px;"> tica, sans-serif;font-size:10.5pt;">Thank you for your business.= Sincerely, Finance Department = = class=3D"table"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0"> = = = = = = =	92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">
1, 50, 70);border-width:0px;margin:0px;padding:0in;" colspan=3D"3"> system, BlinkMacSystemFont, "Helvetica Neue", "Segoe = UI", Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";margin:0px;text-align:right;">&nbs= p;

, 255, 255);color:rgb(34, 34, 34);font-family:Arial, Helvetica, =

sans-serif;font-size:small;font-style:normal;font-variant-caps:normal;font-=

variant-ligatures:normal;font-weight:400;letter-spacing:normal;orphans:2;te=

xt-align:start;text-decoration-color:initial;text-decoration-style:initial;=

text-decoration-thickness:initial;text-indent:0px;text-transform:none;white=

-space:normal;widows:2;word-spacing:0px;" type=3D"cite">

t;" id=3D"m_-2910760642012011069m_467061415371348611m_4273285105508718137m_=

-599886662404354667editbody1">

7061415371348611m_4273285105508718137m_-599886662404354667v1editbody1">

m_467061415371348611m_4273285105508718137m_-599886662404354667v1v1editbody1=

">

-width:0px;font-family:Arial, Helvetica, sans-serif;font-feature-settings:&=

quot;liga" 0;font-size:small;line-height:normal;" cellspacing=3D"0" =

width=3D"553">

10, 139, 168);border-width:0px;margin:0px;padding:0in;vertical-align:top;" = colspan=3D"3"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"height:5.25pt;"> style=3D"border-width:0px;height:5.25pt;margin:0px;padding:0in;">  > style=3D"border-width:0px;margin:0px;padding:0in;width:0.25in;" = width=3D"24">  style=3D"border-width:0px;margin:0px;padding:0in;"> style=3D"font-family:-apple-system, BlinkMacSystemFont, "Helvetica = Neue", "Segoe UI", Arial, sans-serif, "Apple Color = Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> sans-serif;font-size:13.5pt;">

92, 208, 228);border-width:0px;margin:0px;padding:0in;width:1.5pt;" = width=3D"2">

n:0px;padding:0in;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;font-size:13px;line-height:normal;" cellspacing=3D"0"> style=3D"background-color:rgb(230, 236, 244);border-width:0px;margin:0px;pa= dding:0in;width:411.75pt;" width=3D"549"> class=3D"table" style=3D"width:411.75pt;"> style=3D"border-collapse:collapse;border-width:0px;font-family:-apple-syste= m, BlinkMacSystemFont, "Helvetica Neue", "Segoe UI", = Arial, sans-serif, "Apple Color Emoji", "Segoe UI = Emoji", "Segoe UI Symbol";font-feature-settings:"liga&q= uot; 0;line-height:normal;" cellspacing=3D"0" width=3D"549"> = = = = = = = = = = = = = = = width=3D"24">  p;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;"> 64);font-family:Helvetica, sans-serif;font-size:13.5pt;">Payment&nb= sp;    style=3D"color:rgb(231,123,7);font-family:Helvetica, sans-serif;font-size:7= .5pt;">Due: 13/07/2026 168);font-family:Helvetica, sans-serif;font-size:10.= 5pt;">033747 = ttom;"> = "Helvetica Neue", "Segoe UI", Arial, sans-serif, = "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI = Symbol";margin:0px;text-align:right;"> 62);font-family:Helvetica, sans-serif;font-size:10.5pt;">Amount = Paid:   62);font-family:Helvetica, sans-serif;font-size:22.5pt;">$3,378.= 00 = width=3D"24">  =   =   =   =   Chinese products spam Posted by Dave Yadallee on Tuesday, July 14. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:11:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOrM-00000000MHG-2b1j for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:10:44 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:10:44 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from mail-m4785125127.xmail.ntesmail.com ([47.85.125.127]:14314) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjKyn-000000006un-2h05 for sales@nk.ca; Mon, 13 Jul 2026 12:02:23 -0600 Content-Type: multipart/alternative; BOUNDARY="=_Part_33398_294669893.1783965670429" To: sales Reply-To: huangyi@nmtbiotech.com Subject: =?UTF-8?B?SW5xdWlyeSBSZWdhcmRpbmcgTmF0dXJhbCBBS0cgUHJvZHVjdHM=?= X-Priority: 3 MIME-Version: 1.0 Received: from td@nmtbiotech.com( [10.139.0.42] ) by ajax-webmail ( [127.0.0.1] ) ; Tue, 14 Jul 2026 02:01:10 +0800 (GMT+08:00) From: Vivian Date: Tue, 14 Jul 2026 02:01:10 +0800 (GMT+08:00) X-WM-Tid: 0a9f5ca3dc15d068kusy9fb0e49ca444 DKIM-Signature: a=rsa-sha256; b=KaHqUrMo0573ApTbLUxZLQ+Ha4B0rM9kthWo3jiyrpxTTW3WVFVcYkdoCPpvbqscVokDfZEcWL5q7DR1rHffc7HV4nMqxT8+IUFyd9Sfa2FjwcBEnpIKzA0naTtRp70P6OD641oaKxCp5F9kDBzVq+6nEWw7S9t8VxWH5NWpJws=; s=default; c=relaxed/relaxed; d=nmtbiotech.com; v=1; bh=m+KKC6f+ZRQ7Xc5fVBb+RulLdf8dCzi25dMdH1qrljA=; h=date:mime-version:subject:message-id:from; Message-ID: Greetings Sales， I hope this message finds you well. This is Adam from NMT Biotech. NMT Biotech is a multinational company based in Hong Kong, specializing in a global biochemicals business. We leverage an extensive production supply chain in mainland China alongside cutting-edge biotechnology from the United States, Japan, and Europe. This enables us to produce high-quality pharmaceutical ingredients, food supplement ingredients, cosmetic ingredients, flavor and fragrance ingredients, feed additives, and fertilizer additives that meet diverse industry standards worldwide. We have established or are in the process of establishing processing plants and warehouses in the United States, Europe, Japan, and other regions to facilitate global distribution. I would like to explore opportunities to collaborate with you regarding our Natural (Alpha Ketoglutaric Acid / AKG) series products. I look forward to hearing from you soon. For further details about our company, kindly explore our website: www.nmtbiotech.net. Linkedin Thank you for your attention. Best regards, Vivian NMT Biotech Email: sales@nmtbiotech.com WhatsApp: 8615806215916 Web/SEO/APp spam from Microsoft OutLook Part 2 Posted by Dave Yadallee on Monday, July 13. 2026 --_000_TYSPR02MB77610E1A7597F6EACCD694F5ABFA2TYSPR02MB7761apcp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable 1"> Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Hi, nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);">   nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);"> I found that your website isn't doing well and has customers in Google sear= ch results. nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);">   nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);"> We can place your website on Google's first page. nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);">   nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);"> May I send an SEO proposal and price? nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c= olor: rgb(0, 0, 0);">   Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Thank you. --_000_TYSPR02MB77610E1A7597F6EACCD694F5ABFA2TYSPR02MB7761apcp_-- Web/SEO/APp spam from Microsoft OutLook Part 1 Posted by Dave Yadallee on Monday, July 13. 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-path: Envelope-to: dave@doctor.nl2k.ab.ca Delivery-date: Mon, 13 Jul 2026 16:11:00 -0600 Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjOrC-00000000MH2-14r9 for dave@doctor.nl2k.ab.ca; Mon, 13 Jul 2026 16:10:34 -0600 Resent-From: The Doctor Resent-Date: Mon, 13 Jul 2026 16:10:34 -0600 Resent-Message-ID: Resent-To: Dave Yadallee Received: from [52.103.74.84] (port=9274 helo=SEYPR02CU001.outbound.protection.outlook.com) by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.99.3 (FreeBSD)) (envelope-from ) id 1wjKvw-000000006a1-1P5t for sales@nk.ca; Mon, 13 Jul 2026 11:59:22 -0600 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HSCj/a31gC/taqQzZwAoMExumYgquRbP05JiO3sqkpUnnIiAOz3VRfFSAcnu5hE+C76TjD0+7hfSC6xEtZVTqxBbU2FcZ3pfl1FLE8jOpbIWPD74xQxwuqROW4MCQ4Ew6+X7ONP7bwb0+4aU2Bxpw2P4ovtWUOX4T55B8Dt5pQjOmegDYI+G8zqkwUCvwKavRMaA5HJR4JOigiuGNIn0PQfGBI7PpICKHVnmwCCZnto0YfmsHiNc2E4SrlSmojhw2EI/gELmvsIUPd+xdYmKC+R1ketXvjgfDCFiCL1L/mrTAtcHm5IUJ2TnjccFG8tyFhHteeaDU1MjQ6YZnoKmjg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8kPAvS45uhuAToe0v36tHMvfPY5YlDL6d2Es4JBA3Bo=; b=RqDB7TkpmVxP8l1Htr+x19LJSYlp+cNNKhI1b3k8pYA51OmOCe9hulPHP0GwkL7cI8z+6FmtbIQFhNhrccGuA4ovaNrsK3K23IEXqJd/nY3kBvFjk6/0uMn51QHzNo2npQIBABxnYZk05i//gZbEED7XfWCRfPjqPoxgZgGto19snqJL8zBTwA/XPyjSUWeat6RhK4P59ee4MU7oenO8JZiJa0RaAJFyyehNO3l1tCI0Mi1XRTEWrmPNXY46qQ+BJt/OK3mK4ldmCl8eXrbWpaJn5awDTHHErKWlQEs4PR/aijsihEzILIpluMbKHM+WIeShAHf3Vwb8r9hOMplpsg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8kPAvS45uhuAToe0v36tHMvfPY5YlDL6d2Es4JBA3Bo=; b=cxx5I4lp6DNuVHlyc+Pd+qokhmeh+AXTVtcM2WQVu1wC0ZkKlTJNWCJJf79d2ajsUXhiNjhzxmjcozetCcNbdxVsGXMhjl1tZ0cB0b0U0njPE5YksW4T44Z8C1gCq8PC1Zxmt+zbCebHHaFW3SudoiISsJhYsTJe0jgSoD+ss5jRwEME7uz58hFZME0gK4681fJHi0yW4CwTTUP93e1AUc0Elf1KliUU/OnJoN0LMPpAOytEBKJDACxUJ2cx8RzFFO+K6E5ayVoBBMpKdYna2PRinz3KQFdoOoFlFt9kzTaMX67VLplVdZ/j+fZFl+o9HYb3iNL5KR/KlcNyhn2WJA== Received: from TYSPR02MB7761.apcprd02.prod.outlook.com (2603:1096:405:50::12) by SI1PPF9002B6152.apcprd02.prod.outlook.com (2603:1096:f:fff6::75c) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.13; Mon, 13 Jul 2026 17:57:33 +0000 Received: from TYSPR02MB7761.apcprd02.prod.outlook.com ([fe80::4a27:7eec:7dca:f1ba]) by TYSPR02MB7761.apcprd02.prod.outlook.com ([fe80::4a27:7eec:7dca:f1ba%4]) with mapi id 15.21.0202.018; Mon, 13 Jul 2026 17:57:33 +0000 From: Steven Hessil To: Steven Hessil Subject: Cost? Thread-Topic: Cost? Thread-Index: AQHdEvC0x6qh7XH5VEi6shICtdQW1A== Date: Mon, 13 Jul 2026 17:57:32 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: TYSPR02MB7761:EE_|SI1PPF9002B6152:EE_ x-ms-office365-filtering-correlation-id: 4fd68bc4-a4d0-4cd9-1b84-08dee1083690 x-ms-exchange-slblob-mailprops: 2xtDbzDEsjLHy/zW1UT+TKXSYW1I/uQ3aKA0teSJVdVq9OJY7fc/iZc5eD7ReffjiI7Q384IFFeLEDOJncIWJW5IvTclq/SHhfr9cXSCrNcqaqo5O/lMbhFsYidPa1Ax2agVaVrv2op2mnu/FBIsOY2YJNnqp7pNQcy6BTQ2jBRAWQh6IUI/nsFqmf2LmPDDm2b2gAGekQHpwQ+02COfhSGYvEf/UoORAzj1CwwnMsvgU3j5i2BivfyagxrrCpoofns0V4BanwYVvg1QG8iLjSeakrM0LISjkyS1nftuv/+VxU+wPkkZN7GH2a30H3ZsLGmyGuy6nhIf06wNrvK58HMRH+9XexTcZ/C76nRQbgbdRfPa2MMmTm2rqRAsBlPlDfpnrgzLQQDZBBTyzUqP1I+r3ZrNeSE46aCqzXlgmQAuE5v+7uMxf98GZbUUszvldQZpx9CVSG+OWFsBedemzSYqFXELMS+mpvsUWhCq0MR6htcHQu8s5fpOjLuKVKhqZsgZnDYMSdDtUYthtVbVeBLqoPu5DWFSgYLg9+YtLG58lMsTF9lN2mEvrFHpxDtqG2E0pGe1FXFjNQJBr2909g== x-microsoft-antispam: BCL:0;ARA:14566002|16051099003|704163111799003|2604032031799003|25010399006|4140399003|31061999003|37011999003|22091999003|39105399006|15030799006|15080799012|24121999003|19101099003|55001999006|8062599012|19110799012|8060799015|3412199025|440099028|102099032|41105399003|40105399003|39145399003|11120399003|18071099003|26121999007|1710799026; x-microsoft-antispam-message-info: =?iso-8859-1?Q?evEUxsR9Kc44/XCvTrpF3697BCUctZbkKkkB0EQSiZ2a0Z922SHDER6/JE?= =?iso-8859-1?Q?Bk1C36gJ2TDdrrXKAdcC89cwciwrNVrfyFNIp0F2fTPTOZTPcLZM+Rs+rg?= =?iso-8859-1?Q?BFMzbkJZE5CQJLl/k0BgpPC5jDEgB91RRev+4cBRrd/XLA69Wtqf+E5RIJ?= =?iso-8859-1?Q?1X8HZTD6mHRT6cSG+qOSI1Bil4iB77DrujCrxr6dHt0fJ9Z/uCwsk1xKr9?= =?iso-8859-1?Q?DMiOcDmkY+NUzqOsrrxXiyZmWpfK5BV/Aki04MFZWV5Sp9xS+0/8HZhOxo?= =?iso-8859-1?Q?keabY9HY0Y3fpndkcD1HmrRUE75r3PmloeFXHKpW5+BJXhruVeEZqffz4L?= =?iso-8859-1?Q?SBiRKJaZKnVBAO6Vt4IWhUl98vYslb8Yperppl76CrGh6mFJBIlT3m57g1?= =?iso-8859-1?Q?OrwiSSmIdUgTL0VWRtsxih2AwocL8Ysp+iUgpnLZHRJj2LrhVc3s2b8Lqf?= =?iso-8859-1?Q?RBsntUvkBO3BaFzxIeqJPAg1/vBqKkRseamrY3n+JfTjh4jBfzcseS/ZXh?= =?iso-8859-1?Q?NQVGPJwGlcJThDUF27TF583Znze5cSM5cc/gWoYSjFNfBXLM4MtYbtGK/D?= =?iso-8859-1?Q?fSTvqFvnH15qpHQlAoD83f47iXvSN2F4TjrDlxUYuK2DJYnmF+AnaJaiGU?= =?iso-8859-1?Q?fkya6lHa0y9MGhPxWSPd+FkrJMymB+zSlj2VdDvlSgJfPFzaQtPkPjMjRp?= =?iso-8859-1?Q?Gjazrpivv6s3/KM3Pt/2UaYKZ4FvdRPPzbr/6lTRQ7us6Pjw0Yr4SdyAqb?= =?iso-8859-1?Q?3XCEJU+W/l2OPfRUMIv1XFOuHuSGLgDcizf0kaoo2J5LvWli63NH9mb6oL?= =?iso-8859-1?Q?4FaqITW7S91h5ORQBhoy4NXbishUBE5j/+Znt0fzry5SNLoPmgjrD8/tjm?= =?iso-8859-1?Q?kliIYDbPZ+TSeSWHHNajbBMjKb2VnU7XOsicdiP73NeyabLV8k0gmK96B8?= =?iso-8859-1?Q?jsL0+3omxyMq4THXvLjPA5U/s2AFsV3LxpxKPJ2wYKcFrUspHClfPEq7LZ?= =?iso-8859-1?Q?swMYU3i2Dg8U4Lz17R2JdiD4S1dl8WDfPB/zvSZgHOGTN9suLuf4YHRWBx?= =?iso-8859-1?Q?OCHJU8EI4D6377TYqGiUEv+Zj+Ds641taac9SCmHz3PxCIV9p7ombPsIaQ?= =?iso-8859-1?Q?xI+6WM2l/NbSK+tZQGlD1Z5XUDFgyPjY//YA8ZHngKCYWcDtGBEOP5N7ZX?= =?iso-8859-1?Q?PSUwcQu6I0SqrTrrodlnAOZkfrM3rHz08HQ1swjhkachX/wq6LpBEx+ZdO?= =?iso-8859-1?Q?J0py70pngJg9UZPocVMfhIZgRObnLtCJqIR2uUA8YxzGT+tnVBCTzk2Q0B?= =?iso-8859-1?Q?RPrnk+wLeJ/SzUq1QCbBkWLLuA5BTQz3VMghb8UEVuuxUlDYMnlapXEBWw?= =?iso-8859-1?Q?x4r9erfgUMxnm+a/4fcUm9IdWQxxNVH9NWuo0fp1o9JCOiYsq7s+8=3D?= x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?0Zb6qc+2yF95MAQxxQwj5HVWCKqC/4Eyc28NdoFQhy5z2UPUAOs8nfj0DT?= =?iso-8859-1?Q?deuD5bqIb9Jjc3t/WNjaQ4JUB3ZS+8eA1ACTIXkl3FYMmRl2ZkaHno0xBz?= =?iso-8859-1?Q?tglnWRJwEZ51XjxhuN8/pclqNK0xr/YlxA/iiFk8PcOLTojijBKSTQzJBY?= =?iso-8859-1?Q?EyMFav9HrHdp5hrwhEiJ437BdhemHberu3umvqh+mMSR8TbylTi6kHQULO?= =?iso-8859-1?Q?GaQyOQVtqnL+zFdJ2mTYgPKoRZ43c3yj3pQtNwiO0syfVnZg7bJpG6aDDn?= =?iso-8859-1?Q?AXKIkW3XcHMOJe9QsH0wJ0zaO6pvUivGkODBQimr4vUTObNUAYfnp+aU3O?= =?iso-8859-1?Q?VH0WGvvYpW/KrFrTj+PouvAPTW0gJVBR8Wh5cJncMQ0qVTxwSSQwRNJPyw?= =?iso-8859-1?Q?cpw9sFEDGKZNTCKF5P0kBm24KnGYDfYRIVPV5NJdFmbhvcv4RJmYxLQ2V0?= =?iso-8859-1?Q?Dc8hjIgS2a7VqJJoB4MH70iaOxA579sV4j8fLDBFgNBWv5YByscNl5/mS0?= =?iso-8859-1?Q?0N7T2L1RJYWd7G+3A/4+UNgDn9HYzrzsN6ekcWqb23bh5R9G96MYCmLmVT?= =?iso-8859-1?Q?X6ZPwC2xESiIMkhO/8esBdbmfYTMBKze5zh3V+44E375vR+ankQXrFFyP6?= =?iso-8859-1?Q?nM4KNesamI9uOvRTEnRXEmiUIVB4Lbd52C9c7fN03vkwC23z74pPcNw0Sz?= =?iso-8859-1?Q?W3pc8jHsm3xq1w9sPDU4HbPbKsv59ZpCOlt2wCJBf9mPRWqBCBsNaSmrs+?= =?iso-8859-1?Q?wSSlVtLwytc2KPMsIS93tESpxRtfqKhvehK1xDSdFYyyLCdOlyPnzCMJbG?= =?iso-8859-1?Q?7JXH524LpvAo4VABe3gEpMO/dcXKQbSM8tIhJDycwmpv1db0YueGW1mfFu?= =?iso-8859-1?Q?0Q+FLaGATobAdlqAFjQzbm17CeVF0SzLmsLFeNP5hUpNAOUO4Djat5+Y8I?= =?iso-8859-1?Q?r+ArGObigspKMB/pL0aBXsPkPsCg9adg9fRYxYP/SRTzuN0oRbAiGtJsPq?= =?iso-8859-1?Q?pZO8sXyFcRgnfjAYStZA+TAVKVP4dwitY8oPlW2xI+l4tN8WhthhHeUjew?= =?iso-8859-1?Q?Qbvh3EMO/rn5ehJGI598fKW8w622GpIO8G1pnQbMAdzsP99LicnS2D8bHa?= =?iso-8859-1?Q?CPm9DtrLnm9XeD5Xm5cpXbkGwAweJm0Lj5JFV8BHFdImYvQ7jjTW9LPL/Y?= =?iso-8859-1?Q?FY7EvtbfqF9hhyQ1xKEg4oRkYpnP+zZdTzyNObvacxlFAWQHstLFz2dceI?= =?iso-8859-1?Q?qVKF9VFwJSFU1U58DjQvJylWlwC5ho8P1jvqoYlkIckgQsGuUFFwj33Jrh?= =?iso-8859-1?Q?BccRPZ1xU7un73ytTA9D8CS2ZkGeKLLXyyMlWBVI8KFnank+zN0OTyZjdZ?= =?iso-8859-1?Q?MJqtC90db3x5sIDGMqr8BSEeDefOlzGIxeewrRnvGUDNHKbfaKutPwbZxk?= =?iso-8859-1?Q?vt+CQKp+ZkfZajiJ5M8myLTT0ozy9YsKORBbdChrP8u7cr2bC9uDny3dRa?= =?iso-8859-1?Q?g=3D?= Content-Type: multipart/alternative; boundary="_000_TYSPR02MB77610E1A7597F6EACCD694F5ABFA2TYSPR02MB7761apcp_" MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: TYSPR02MB7761.apcprd02.prod.outlook.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-CrossTenant-Network-Message-Id: 4fd68bc4-a4d0-4cd9-1b84-08dee1083690 X-MS-Exchange-CrossTenant-originalarrivaltime: 13 Jul 2026 17:57:32.3568 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SI1PPF9002B6152 --_000_TYSPR02MB77610E1A7597F6EACCD694F5ABFA2TYSPR02MB7761apcp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, I found that your website isn't doing well and has customers in Google sear= ch results. We can place your website on Google's first page. May I send an SEO proposal and price? Thank you.