Return-Path: Received: from vps.transocean.com by vps.transocean.com with LMTP id +JUHKQmrJloODwAAInt2oQ ; Tue, 05 Dec 2017 06:19:53 -0800 Return-path: Envelope-to: oscar@transocean.com Delivery-date: Tue, 05 Dec 2017 06:19:53 -0800 Received: from mtaout-205-ewr.sendlabs.com ([216.146.33.205]:13878) by vps.transocean.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89) (envelope-from ) id 1eME4T-0001SC-PT for oscar@transocean.com; Tue, 05 Dec 2017 06:19:53 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dyn; d=payerexpress.com; h=MIME-Version:From:To:Date:Subject:Content-Type:Message-ID:Sender; i=Oxford@payerexpress.com; bh=eZG21sD6WQrtt2gsK14mpfXImE1q8HjaKP8wia2l1vI=; b=y2OSSNQnSV/xFSuM+G/ugflxEakk/WBRBGSAxI+dqcuD1CWwPPH2VfkvJFdtz93JpD+klI8niPE8 qUadsRrAO/F+xQhWBg3j83421wDJzyFSIAPDNDnowLVu6E4qnduse2SaEbbdEd/LrR5T/6hw/+lD rkCtKz4gO4uzmqqRSO0= X-MailingID: PNC::Oxford::payerexpress.com::12557371::15::prod_pnc_ucb MIME-Version: 1.0 From: Oxford@payerexpress.com To: oscar@transocean.com Date: 5 Dec 2017 09:19:00 -0500 Subject: Your single Enrolled Payment to United Healthcare Oxford has been initiated Content-Type: multipart/alternative; boundary=--boundary_1372_67c3e4bb-db22-4f27-9e1d-631f7c349787 Message-ID: X-OriginalArrivalTime: 05 Dec 2017 14:18:59.0732 (UTC) FILETIME=[FE633D40:01D36DD3] Sender: Oxford@payerexpress.com X-DynectEmail-Msg-Hash: Lrd3dAbO10uGQW/gJlVwXjl6cEoqyFv8D2a5mVnyDxxWvGvKA5cWE9se6bs/qMwvECUUz3NaOwHc1Q76Oo20WOsx5uJmLe9KqM0OTu7LiyX8zufsUW7LcQ== X-DynEmail-Meta: 5t8ESPPDMNiYx4bK7eqK9EUdCMrXV9mKMjNcECa5l4YY5VNQMzSfjl2+I2c cgY6+LBUGO1RBG/07JIgccZCvHRd+jBc0KZ3qesnK6gJBy+DynkFRH1kEB126Fn1Ilh0LoTT0dB e7GjNLFdOd8QYIgGIDQ82u7vbJi7+yV6XuIPDrxzCp9cY4jdkrUcUPkTG0PZzFiW58IB8McT3SH JmMcOb2xht5VoMjTUgYnNwT4vezSGzW3hcFiFsW50+wPFPq3IOgdUvP+hxX0mpWu76ZjIJ9DmOH D/57Y+6XQypVlic= X-DynectEmail-Msg-Key: 20171205141900.0000055808dd@mail6-45-usnbn1 X-DynectEmail-X-Headers: MHwxMDIwODgyOlBOQyUzQSUzQU94Zm9yZCUzQSUzQXBheWVyZXhwcmVzcy5jb20lM0ElM0ExMjU1NzM3MSUzQSUzQTE1JTNBJTNBcHJvZF9wbmNfdWNiOw== X-Feedback-ID: R29sZFRyYW4xM1ZNVEFz:475972:281341:dyn06 X-Spam-Status: No, score=1.6 X-Spam-Score: 16 X-Spam-Bar: + X-Ham-Report: Spam detection software, running on the system "vps.transocean.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your single Enrolled Payment to United Healthcare Oxford has been initiated .tButtonColor { color: #FFFFFF; background-color: #003399; } .tButtonColorFg { color: #FFFFFF; } .tButtonColorBg { background-color: #003399; } .tHeaderColor { color: #0033CC; background-color: #FFFFFF; } .tHeaderColorFg { color: #0033CC; } .tHeaderColorBg { background-color: #FFFFFF; } .tHeaderLineColor { color: #FFFFFF; background-color: #003399; } .tHeaderLineColorFg { color: #FFFFFF; } .tHeaderLineColorBg { background-color: #003399; } .tHeaderTitleColor { color: #FFFFFF; background-color: #003399; } .tHeaderTitleColorFg { color: #FFFFFF; } .tHeaderTitleColorBg { background-color: #003399; } .MainTable { margin-left: auto; margin-right: auto; background-color: #F5F5F5; border: solid 1px #B4B4B4; /* #003399; */ padding: 1 1 1 1; } .MainFrame { margin-left: auto; margin-right: auto; border: solid 1px gray; padding: 1 1 1 1; } [...] Content analysis details: (1.6 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dynect.net] -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [216.146.33.205 listed in wl.mailspike.net] 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror) -0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5% [score: 0.0122] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously huge http urls -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty lines -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_REMOTE_IMAGE Message contains an external image 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) X-Spam-Flag: NO ----boundary_1372_67c3e4bb-db22-4f27-9e1d-631f7c349787 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 DQoNCg0KICAgIFlvdXIgc2luZ2xlIEVucm9sbGVkIFBheW1lbnQgdG8gVW5pdGVkIEhl YWx0aGNhcmUgT3hmb3JkIGhhcyBiZWVuIGluaXRpYXRlZA0KICAgICAgICANCiAgICAg ICAgLnRCdXR0b25Db2xvcg0KICAgICAgICB7DQogICAgICAgICAgICBjb2xvcjogJiMz NTtGRkZGRkY7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAmIzM1OzAwMzM5 OTsNCiAgICAgICAgfQ0KICAgICAgICAudEJ1dHRvbkNvbG9yRmcNCiAgICAgICAgew0K ICAgICAgICAgICAgY29sb3I6ICYjMzU7RkZGRkZGOw0KICAgICAgICB9DQogICAgICAg IC50QnV0dG9uQ29sb3JCZw0KICAgICAgICB7DQogICAgICAgICAgICBiYWNrZ3JvdW5k LWNvbG9yOiAmIzM1OzAwMzM5OTsNCiAgICAgICAgfQ0KICAgICAgICAudEhlYWRlckNv bG9yDQogICAgICAgIHsNCiAgICAgICAgICAgIGNvbG9yOiAmIzM1OzAwMzNDQzsNCiAg ICAgICAgICAgIGJhY2tncm91bmQtY29sb3I6ICYjMzU7RkZGRkZGOw0KICAgICAgICB9 DQogICAgICAgIC50SGVhZGVyQ29sb3JGZw0KICAgICAgICB7DQogICAgICAgICAgICBj b2xvcjogJiMzNTswMDMzQ0M7DQogICAgICAgIH0NCiAgICAgICAgLnRIZWFkZXJDb2xv ckJnDQogICAgICAgIHsNCiAgICAgICAgICAgIGJhY2tncm91bmQtY29sb3I6ICYjMzU7 RkZGRkZGOw0KICAgICAgICB9DQogICAgICAgIC50SGVhZGVyTGluZUNvbG9yDQogICAg ICAgIHsNCiAgICAgICAgICAgIGNvbG9yOiAmIzM1O0ZGRkZGRjsNCiAgICAgICAgICAg IGJhY2tncm91bmQtY29sb3I6ICYjMzU7MDAzMzk5Ow0KICAgICAgICB9DQogICAgICAg IC50SGVhZGVyTGluZUNvbG9yRmcNCiAgICAgICAgew0KICAgICAgICAgICAgY29sb3I6 ICYjMzU7RkZGRkZGOw0KICAgICAgICB9DQogICAgICAgIC50SGVhZGVyTGluZUNvbG9y QmcNCiAgICAgICAgew0KICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogJiMzNTsw MDMzOTk7DQogICAgICAgIH0NCiAgICAgICAgLnRIZWFkZXJUaXRsZUNvbG9yDQogICAg ICAgIHsNCiAgICAgICAgICAgIGNvbG9yOiAmIzM1O0ZGRkZGRjsNCiAgICAgICAgICAg IGJhY2tncm91bmQtY29sb3I6ICYjMzU7MDAzMzk5Ow0KICAgICAgICB9DQogICAgICAg IC50SGVhZGVyVGl0bGVDb2xvckZnDQogICAgICAgIHsNCiAgICAgICAgICAgIGNvbG9y OiAmIzM1O0ZGRkZGRjsNCiAgICAgICAgfQ0KICAgICAgICAudEhlYWRlclRpdGxlQ29s b3JCZw0KICAgICAgICB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAmIzM1 OzAwMzM5OTsNCiAgICAgICAgfSANCiAgICAgICAgLk1haW5UYWJsZQ0KICAgICAgICB7 DQogICAgICAgICAgICBtYXJnaW4tbGVmdDogYXV0bzsNCiAgICAgICAgICAgIG1hcmdp bi1yaWdodDogYXV0bzsgDQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjRjVG NUY1Ow0KICAgICAgICAgICAgYm9yZGVyOiBzb2xpZCAxcHggI0I0QjRCNDsgLyogJiMz NTswMDMzOTk7ICovDQogICAgICAgICAgICBwYWRkaW5nOiAxIDEgMSAxOw0KICAgICAg ICB9DQogICAgICAgIC5NYWluRnJhbWUNCiAgICAgICAgew0KICAgICAgICAgICAgbWFy Z2luLWxlZnQ6IGF1dG87DQogICAgICAgICAgICBtYXJnaW4tcmlnaHQ6IGF1dG87IA0K ICAgICAgICAgICAgYm9yZGVyOiBzb2xpZCAxcHggZ3JheTsgICAgICAgICAgICANCiAg ICAgICAgICAgIHBhZGRpbmc6IDEgMSAxIDE7DQogICAgICAgIH0NCg0KICAgICAgICB0 YWJsZS5Cb3JkZXJlZA0KICAgICAgICB7DQogICAgICAgICAgICBib3JkZXItc3BhY2lu ZzogMDsNCiAgICAgICAgICAgIGJvcmRlci1jb2xsYXBzZTpjb2xsYXBzZTsNCiAgICAg ICAgfQ0KICAgICAgICANCiAgICAgICAgdHIuQm9yZGVyZWQgdGQNCiAgICAgICAgew0K ICAgICAgICAgICAgYm9yZGVyOiBzb2xpZCAxcHggZ3JheTsgICAgICAgICAgICANCiAg ICAgICAgfQ0KICAgIA0KDQoNCg0KICAgIA0KICAgIA0KICAgICAgICANCgkNCglPeGZv cmQgUGF5bWVudCBDZW50ZXIgDQoNCg0KIA0KCQ0KDQogICAgDQogICAgICAgIA0KICAg ICAgICAgICAgDQogICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgIA0K ICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgTXkgU2VsZWN0ZWQgSW1hZ2U6DQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0K ICAgICAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICBNeSBJbWFnZSBMYWJlbDoNCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICBsaW9yYW1hbm5lDQogICAgICAgICAgICAgICAg ICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgIE15IEdyb3VwSVAgTnVtYmVyOg0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgICYjNDI7JiM0MjsxNTU2DQogICAgICAgICAgICAgICAgICAgICAgICAN CiAgICAgICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgDQogICAgICAgICAg ICANCiAgICAgICAgDQogICAgDQogICAgDQoNCg0KICAgDQogICAgDQogICAgICAgIA0K ICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgWW91ciBQYXltZW50IHRvIFVuaXRl ZCBIZWFsdGhjYXJlIE94Zm9yZCBpcyBiZWluZyBwcm9jZXNzZWQuDQogICAgICAgICAg ICANCiAgICAgICAgDQogICAgICAgIA0KICAgICAgICAgICAgDQogICAgICAgICAgICAN Cg0KICAgIA0KICAgIA0KDQogICAgDQogICAgICAgIA0KICAgICAgICAgICBHcm91cElQ IE51bWJlcjoNCiAgICAgICAgDQogICAgICAgIA0KICAgICAgICAgICAgJiM0MjsmIzQy OzE1NTYNCiAgICAgICAgDQogICAgDQogICAgDQogICAgICAgIA0KICAgICAgICAgICAg QWNjb3VudCBOYW1lOg0KICAgICAgICANCiAgICAgICAgDQogICAgICAgICAgICBNZ2sg R3JvdXAgSW5jIERiYSBMYW1vbnRhZ2UNCiAgICAgICAgDQogICAgDQogICAgDQogICAg ICAgIA0KICAgICAgICAgICAgUGF5bWVudCBBY2NvdW50Og0KICAgICAgICANCiAgICAg ICAgDQogICAgICAgICAgICAgDQoJCQkJDQogICAgICAgICAgICAgICAgICAgIE1HSyAt IENhcGl0YWwgT25lIEJhbmsNCiAgICAgICAgICAgICAgICAgDQoJCQkJJiM0MjsmIzQy OyYjNDI7JiM0MjsmIzQyOzYyMzINCiAgICAgICAgICAgIA0KICAgICAgICANCiAgICAN CiAgICANCiAgICAgICAgDQoJCQkNCgkJCQlQYXltZW50IEFtb3VudDoNCgkJCQ0KICAg ICAgICANCiAgICAgICAgDQogICAgICAgICAgICAkMTAsMTU5LjkyDQogICAgICAgIAkJ DQogICAgDQoNCg0KDQogICAgDQoJDQoNCgkNCg0KCQ0KCQkNCgkNCg0KDQogICAgDQoJ CQ0KCQkNCgkJCQ0KCQkNCiAgICANCgkNCgkNCgkJDQoJCQkJDQogICAgDQoJDQogICAg DQogICAgICAgIA0KICAgICAgICAgICAgVG90YWwgQW1vdW50Og0KICAgICAgICANCiAg ICAgICAgDQogICAgICAgICAgICAkMTAsMTU5LjkyDQogICAgICAgIA0KICAgIA0KICAg IA0KICAgICAgICANCiAgICAgICAgICAgIENyZWF0aW9uIERhdGU6DQogICAgICAgIA0K ICAgICAgICANCiAgICAgICAgICAgIFR1ZXNkYXksIERlY2VtYmVyIDA1LCAyMDE3DQog ICAgICAgIA0KICAgIA0KICAgIA0KICAgICAgICANCiAgICAgICAgICAgIFBheW1lbnQg IERhdGU6DQogICAgICAgIA0KICAgICAgICANCiAgICAgICAgICAgIFdlZG5lc2RheSwg RGVjZW1iZXIgMDYsIDIwMTcNCiAgICAgICAgDQogICAgDQoNCg0KDQoJDQoJDQoJDQoJ DQogICAgDQoJDQoJDQoJDQoJDQoJDQoJCQ0KCQkNCgkJCQ0KCQkJDQoJCQkJDQoJCQkN CgkJCQ0KCQkJDQoJCQkNCgkJCQkNCgkJCQkNCgkJCQ0KCQkJDQogICAgICAgICAgICAN CiAgICAgICAgICAgIA0KCQkNCiAgICAgICAgDQoJCQ0KCQ0KCQ0KCQ0KICAgICAgICAN CgkJDQoJCQkNCgkJCQkNCgkJCQkJDQoJCQkJCQ0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJ CQkNCgkJCQkJCQkJDQoJCQkJCQkJDQoJCQkJCQkNCgkJCQkJDQoJCQkJCTEgSXRlbSBw YWlkIHdpdGggdGhpcyBQYXltZW50DQoJCQkJDQoJCQkJDQoJCQkNCgkJDQogICAgICAg IA0KCQkNCgkJDQoJCQkNCgkJCQlDb25maXJtYXRpb24gJiMzNTsNCgkJCQ0KCQkJDQoJ CQkJR3JvdXBJUCBOdW1iZXINCgkJCQ0KICAgICAgICAgICAgDQogICAgICAgICAgICAg DQoJCQkNCiAgICAgICAgICAgIA0KCQkJDQoJCQkJRHVlIERhdGUNCgkJCQ0KICAgICAg ICAgICAgDQogICAgICAgICAgICANCiAgICAgICAgICAgIA0KCQkJDQoJCQkJIEFtb3Vu dA0KCQkJDQoJCQkNCgkJCQ0KCQkJCVBheW1lbnQgQW1vdW50DQoJCQkNCgkJCQ0KCQkJ IA0KCQkNCgkJDQoJCQkNCgkJCQ0KCQkJDQoJCQkNCgkJCQkNCgkJCQkNCgkJCQkNCgkJ CQkNCgkJCQkJDQoJCQkJCQkNCgkJCQkJCQkzMTA1Mzc3NzE0DQoJCQkJCQkNCgkJCQkJ CQ0KCQkJCQkJCSYjNDI7JiM0MjsxNTU2DQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJIA0K CQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQkJMTImIzQ3OzAxJiM0 NzsyMDE3DQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0KCQkJ CQkJDQoJCQkJCQkJJDAuMDANCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQkJDQoJCQkJCQkJ DQoJCQkJCQkJCQ0KCQkJCQkJCQ0KCQkJCQkJCQ0KCQkJCQkJCSQxMCwxNTkuOTINCgkJ CQkJCQ0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJDQoJCQkJDQoJCQkJCQ0KCQkJCQkJCQ0K CQkJCQ0KCQkJCQkNCgkJCQ0KCQkNCgkJDQoJDQoJDQogICAgICAgICAgICANCiAgICAg ICAgDQogICAgDQoNCiAgICAgDQogICAgDQogICAgDQogICAgICAgIA0KICAgICAgICAg ICAgDQogICAgICAgICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgIFBsZWFzZSBE TyBOT1QgcmVwbHkgdG8gdGhpcyBlbWFpbC4gVGhpcyBlbWFpbCBtZXNzYWdlIHdhcyBz ZW50IGZyb20gYSBub3RpZmljYXRpb24NCiAgICAgICAgICAgICAgICAgICAgYWRkcmVz cyB0aGF0IGNhbm5vdCBhY2NlcHQgaW5jb21pbmcgZW1haWwuDQoJCQkJDQogICAgICAg ICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgIFRvIGNvbnRhY3QgdXMsIGNsaWNr IGhlcmUNCiAgICAgICAgICAgICAgICAgICAgICAgIGFuZCByZXZpZXcgdGhlIENvbnRh Y3QgVXMgc2VjdGlvbiBvbiBvdXIgd2ViIHNpdGUuDQogICAgICAgICAgICAgICAgDQog ICAgICAgICAgICANCiAgICAgICAgDQogICAgDQoNCg0KDQo= ----boundary_1372_67c3e4bb-db22-4f27-9e1d-631f7c349787 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit Your single Enrolled Payment to United Healthcare Oxford has been initiated
My Selected Image: Security Image
My Image Label:
lioramanne 		My GroupIP Number:
**1556

Your Payment to United Healthcare Oxford is being processed.
GroupIP Number: **1556
Account Name: Mgk Group Inc Dba Lamontage
Payment Account: MGK - Capital One Bank *****6232
Payment Amount: $10,159.92
Total Amount: $10,159.92
Creation Date: Tuesday, December 05, 2017
Payment Date: Wednesday, December 06, 2017
1 Item paid with this Payment

Confirmation # GroupIP Number Due Date Amount Payment Amount
3105377714 **1556 12/01/2017 $0.00 $10,159.92
----boundary_1372_67c3e4bb-db22-4f27-9e1d-631f7c349787--