Return-Path: Received: from vps.transocean.com by vps.transocean.com with LMTP id eDkSKL3kgVrSQwAAInt2oQ ; Mon, 12 Feb 2018 11:02:21 -0800 Return-path: Envelope-to: cs@transocean.com Delivery-date: Mon, 12 Feb 2018 11:02:21 -0800 Received: from so254-16.mailgun.net ([198.61.254.16]:54088) by vps.transocean.com with esmtp (Exim 4.89_1) (envelope-from ) id 1elJMg-0004Ts-RF for cs@transocean.com; Mon, 12 Feb 2018 11:02:21 -0800 DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=netretailers.net; q=dns/txt; s=mx; t=1518462069; h=Content-Transfer-Encoding: Content-Type: Subject: Date: To: From: Mime-Version: Message-Id: Sender; bh=OgEoSA9KNexa2/+ptwsIxB31GO7cqlvEcbK9iQIbRag=; b=jFS2Mtmayt2Ce5ILrOaKdq4Dm7Tj0kWccO/lHh6/DYIRyomUxY5mpQ9zSbQ2CD5SYHy1srWV dKpHnEh8fBSaZzvrbdNcRpxwDhLi3zUjVDbRYCu72eF5p8YKNsq+K1nHb/E2P5/dukiE3HKy TU6s6KMTCnEiNRTjdH02KfPgVKY= X-Mailgun-Sid: WyJlOTJkMCIsICJjc0B0cmFuc29jZWFuLmNvbSIsICI2MDhkNiJd X-Mailgun-Sending-Ip: 198.61.254.16 Sender: vendors@netretailers.net Message-Id: <20180212190109.1.534D80470EC65ED7@netretailers.net> Received: from 600601-file1 (Unknown [23.253.7.236]) by mxa.mailgun.org with ESMTP id 5a81e475.7f771410c0a0-smtp-out-n02; Mon, 12 Feb 2018 19:01:09 -0000 (UTC) Mime-Version: 1.0 From: NetRetailers To: cs@transocean.com Date: 12 Feb 2018 13:01:02 -0600 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=3.7 X-Spam-Score: 37 X-Spam-Bar: +++ X-Spam-Report: Spam detection software, running on the system "vps.transocean.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello, Customer would like to cancel order, please confirm cancellation. Thank you! [...] Content analysis details: (3.7 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: netretailers.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4 address 0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.5 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area -0.5 BAYES_05 BODY: Bayes spam probability is 1 to 5% [score: 0.0194] 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.0 KAM_BADIPHTTP Due to the Storm Bot Network, IPs in emails is bad 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: ****SPAM**** NetRetailers PO# TN163240 Question PGh0bWw+PGhlYWQ+PHRpdGxlPjwvdGl0bGU+PC9oZWFkPjxib2R5IHRvcG1hcmdpbj0wIGxlZnRt YXJnaW49NSBtYXJnaW53aWR0aD0wIG1hcmdpbmhlaWdodD0wPjxzdHlsZSB0eXBlPXRleHQvY3Nz Pi5ycHRsYmxoIHsgZm9udDogYm9sZCAxNXB4IEFyaWFsOyBjb2xvcjogIzMxNEI2RTt9IC5ycHRs Ymwge2ZvbnQ6IGJvbGQgMTFweCBBcmlhbDsgY29sb3I6ICMzMTRCNkU7fSAucnB0bGJsYiB7Zm9u dDogYm9sZCAxM3B4IEFyaWFsOyBjb2xvcjogIzMxNEI2RTt9LnJwdHR4dCB7Zm9udDogMTFweCBB cmlhbDsgY29sb3I6ICM2OTY5NkI7fS5ycHR0eHRyIHtmb250OiAxMXB4IEFyaWFsOyBjb2xvcjog I0ZEMDAwMDt9LnJwdHRibHJzIHsgaGVpZ2h0OjE2cHh9IC5ycHR0YmxzcCB7IGhlaWdodDo1cHh9 IC5ycHRsb2dvIC5ycHRsaW5rIHtmb250OiAxMXB4IEFyaWFsO2NvbG9yOiAjMzE0QjZFO1RFWFQt REVDT1JhVElPTjogdW5kZXJsaW5lO30gLnJwdGxpbms6aG92ZXJ7Y29sb3I6ICNERTcyMDY7Zm9u dDogMTFweCBBcmlhbDsgdGV4dC1kZWNvcmF0aW9uOiBub25lO30gLnByb2R1Y3REdGxUYmxEZXQg e2ZvbnQ6ICAxMXB4IEFyaWFsO2NvbG9yOiAjNjk2OTZCO3RleHQtZGVjb3JhdGlvbjogbm9uZTto ZWlnaHQ6MjJweDt9IC5kaXZjb25maXJtYXRpb257YmFja2dyb3VuZC1jb2xvcjpXaGl0ZTttYXJn aW46IDVweCA1cHggNXB4IDVweDt9PC9zdHlsZT48dGFibGUgaWQ9dGJsQ25mcm0gY2VsbFNwYWNp bmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPTc1MCBib3JkZXI9MD48dHI+PHRkPjxJTUcgc3JjPWh0 dHA6Ly8xOTguMTAxLjEzMS4xNy9pbWFnZXMvbG9nby5qcGcgY2xhc3M9cnB0bG9nbz48L3RkPjwv dHI+PHRyPjx0ZCBDb2xTcGFuPTU+PHNwYW4gY2xhc3M9cnB0bGJsYj48L3NwYW4+PGJyPjxicj48 L3RkPjwvdHI+PHRyPjx0ZCBjbGFzcz10YmxzcD48L3RkPjwvdHI+PHRyPjx0ZD48c3BhbiBjbGFz cz1ycHR0eHQ+PC9zcGFuPjwvdGQ+PC90cj48dHI+PHRkPjx0YWJsZSBpZD10YmxEdGwgY2VsbFNw YWNpbmc9MCBjZWxsUGFkZGluZz0wIHdpZHRoPTc1MCBib3JkZXI9MD48cD5IZWxsbywmbmJzcDs8 L3A+DQo8cD5DdXN0b21lciB3b3VsZCBsaWtlIHRvIGNhbmNlbCBvcmRlciwgcGxlYXNlIGNvbmZp cm0gY2FuY2VsbGF0aW9uLjwvcD4NCjxwPlRoYW5rIHlvdSE8L3A+QmVzdCBSZWdhcmRzLDxicj48 YnI+TmV0UmV0YWlsZXJzLCBJbmM8YnI+aHR0cDovL3d3dy5uZXRyZXRhaWxlcnMubmV0PGJyPlBo b25lOiA4ODgtODYyLTE3Nzc8YnI+RmF4OiA4NDctOTE5LTQzOTA8YnI+VHJhY2tpbmdJRDogNzQ2 OTM1PC90YWJsZT48L3RkPjwvdHI+PHRyPjx0ZCBjbGFzcz10YmxzcD48L3RkPjwvdHI+PHRyPjx0 ZD48YnI+PGJyPjxzcGFuIGNsYXNzPXJwdHR4dD7CqSAyMDE4IE5ldFJldGFpbGVycywgSW5jICAx LTg4OC04NjItMTc3Ny48L3NwYW4+PC90ZD48L3RyPjx0cj48dGQgY2xhc3M9dGJsc3A+PC90ZD48 L3RyPjwvdGFibGU+PGltZyB3aWR0aD0iMXB4IiBoZWlnaHQ9IjFweCIgYWx0PSIiIHNyYz0iaHR0 cDovL2VtYWlsLm5ldHJldGFpbGVycy5uZXQvby9lSndOeXpzT3d5QU1BTkRUbEJIWnhPWXpNRFU1 aUUwc05WSkxKT0QtYXNZM3ZMTkd5R2QwVncyQUdRSUdMSUJRUEhyZWFNOUFDWTUzNUdOUEw0SnVh OWlTNjJ0ai1nZnVVNFUxSk1YTUpSWlRDQmxNRzI5TVJTa2FpUnUxemFldUlYM2V6YVQ3ZHZfLVMt c2h5dyI+PC9ib2R5PjwvaHRtbD4=