Return-Path: Received: from vps.transocean.com by vps.transocean.com with LMTP id 6OOSGcJVy1pqCAAAInt2oQ ; Mon, 09 Apr 2018 05:00:02 -0700 Return-path: Envelope-to: cs@transocean.com Delivery-date: Mon, 09 Apr 2018 05:00:02 -0700 Received: from o1.email.bisonoffice.com ([167.89.79.175]:43470) by vps.transocean.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1f5VSi-0000XY-6H for cs@transocean.com; Mon, 09 Apr 2018 05:00:02 -0700 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bisonoffice.com; h=mime-version:from:to:subject:content-type:content-transfer-encoding; s=m1; bh=QvJS2bzgIoWamxmV/nKZx3a8Xyg=; b=ruTbY9ZE1j3yF590QSDOIfO +eUD/IJD3oqo/yNRtsGO/qAfK3xEz96LfvIOKZqROtG/QoQ6wv14xLa/qPc3UUMy HiPDtj0jSivbDz2lMOIV1WcFgnVbM6HTVuwKJoVQprjXwKv2aJ8WPS66wqvZznxT iXTcnckiah3SklNU4uiQ= Received: by filter0026p3las1.sendgrid.net with SMTP id filter0026p3las1-19841-5ACB558D-54 2018-04-09 11:59:09.917121297 +0000 UTC Received: from Service (unknown [168.62.196.227]) by ismtpd0021p1las1.sendgrid.net (SG) with ESMTP id VJ0D0hYpRHu3xaiWiHUzoA for ; Mon, 09 Apr 2018 11:59:09.867 +0000 (UTC) MIME-Version: 1.0 From: "BisonOffice Customer Service" To: cs@transocean.com Date: Mon, 09 Apr 2018 11:59:09 +0000 (UTC) Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 Message-ID: X-SG-EID: D09lM9QKJjtXsuS99tfH1IAY5Ew0j42mv6MU5dRmSBMfpsfF/OiQGTPb3TW16e8Ijyc0NR5m12lZvc X8rBhJV0edmDNfp0qgM8eiTbxTrFvDfkb5OSi9CM1jKyLsttdwE7bHIWcuC1tXQa+GOLxPseYq0bYr 4HQzYMl8CrA/oN/bThyixGKaQJW1K3lP025r6uloi9AjwsOot0uXVDdSlscMWnxq9+yaoyoPo/wuYU xsXB2F142uv8/oHXmMwt4U X-Spam-Status: Yes, score=3.6 X-Spam-Score: 36 X-Spam-Bar: +++ X-Spam-Report: Spam detection software, running on the system "vps.transocean.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Vendor, Congratulations, you have made a sale on BisonOffice.com (Account ID: BISS) Please SHIP the following orders immediately and confirm it by returning to your account at https://admin.bisonoffice.com/vendor/: [...] Content analysis details: (3.6 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sendgrid.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.6 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously huge http urls -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.8 TVD_PH_BODY_META_ALL No description available. 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: ****SPAM**** New Orders Notification PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6QXJpYWwsIFNhbnMtU2VyaWY7IGZvbnQtc2l6ZToxMnB4 OyI+CgkJCTxoMyBzdHlsZT0iY29sb3I6IzYxNDIyRTsgbWFyZ2luOjA7IHBhZGRpbmc6MDsgZm9u dC1mYW1pbHk6QXJpYWwsIFNhbnMtU2VyaWY7IGZvbnQtc2l6ZToxNHB4OyI+RGVhciBWZW5kb3Is PC9oMz4KCQkJPHAgc3R5bGU9Im1hcmdpbjowOyBwYWRkaW5nOjA7IGZvbnQtZmFtaWx5OkFyaWFs LCBTYW5zLVNlcmlmOyBmb250LXNpemU6MTJweDsiPjxiciAvPkNvbmdyYXR1bGF0aW9ucywgeW91 IGhhdmUgbWFkZSBhIHNhbGUgb24gQmlzb25PZmZpY2UuY29tICAoQWNjb3VudCBJRDogQklTUyk8 L3A+CgkJCTxwIHN0eWxlPSJtYXJnaW46MDsgcGFkZGluZzowOyBmb250LWZhbWlseTpBcmlhbCwg U2Fucy1TZXJpZjsgZm9udC1zaXplOjEycHg7Ij48YnIgLz48Yj5QbGVhc2UgU0hJUCB0aGUgZm9s bG93aW5nIG9yZGVycyBpbW1lZGlhdGVseSBhbmQgY29uZmlybSBpdCBieSByZXR1cm5pbmcgdG8g eW91ciBhY2NvdW50IGF0IDxhIGhyZWY9Imh0dHBzOi8vYWRtaW4uYmlzb25vZmZpY2UuY29tL3Zl bmRvci8iPmh0dHBzOi8vYWRtaW4uYmlzb25vZmZpY2UuY29tL3ZlbmRvci88L2E+OjwvYj48L3A+ CgkJCTxwIHN0eWxlPSJtYXJnaW46MDsgcGFkZGluZzowOyBmb250LWZhbWlseTpBcmlhbCwgU2Fu cy1TZXJpZjsgZm9udC1zaXplOjEycHg7Ij48YnIgLz4NCjxiPlAuTy4jIDExMzcwNDI8L2I+PGJy IC8+DQo8Yj5QLk8uIyAxMTM3ODM0PC9iPjxiciAvPg0KPGI+UC5PLiMgMTEzODA1ODwvYj48YnIg Lz4NCjxiPlAuTy4jIDExMzgyOTg8L2I+PGJyIC8+DQo8L3A+DQoKCQkJPHAgc3R5bGU9Im1hcmdp bjowOyBwYWRkaW5nOjA7IGZvbnQtZmFtaWx5OkFyaWFsLCBTYW5zLVNlcmlmOyBmb250LXNpemU6 MTJweDsiPjxiciAvPkZhaWx1cmUgdG8gZG8gc28gd2lsbCBwcmV2ZW50IHlvdSBmcm9tIGJlaW5n IHBhaWQgZm9yIHRoaXMgc2FsZSBhbmQgbWF5IHJlc3VsdCBpbiBmdXJ0aGVyIGFjdGlvbiBhZ2Fp bnN0IHlvdXIgYWNjb3VudC48L3A+CgkJCTxwIHN0eWxlPSJtYXJnaW46MDsgcGFkZGluZzowOyBm b250LWZhbWlseTpBcmlhbCwgU2Fucy1TZXJpZjsgZm9udC1zaXplOjEycHg7Ij48YnIgLz5Mb2cg aW50byB5b3VyIGFjY291bnQgdG8gdmlldyBhbmQgbWFuYWdlIHlvdXIgb3JkZXIocyksIHN0b2Nr IGF2YWlsYWJpbGl0eSBvciBwcmljZXMuPC9wPgoJCQk8cCBzdHlsZT0ibWFyZ2luOjA7IHBhZGRp bmc6MDsgZm9udC1mYW1pbHk6QXJpYWwsIFNhbnMtU2VyaWY7IGZvbnQtc2l6ZToxMnB4OyI+PGJy IC8+SWYgeW91IGhhdmUgcXVlc3Rpb25zIG9yIG5lZWQgYXNzaXN0YW5jZSBwbGVhc2UgPGEgaHJl Zj0iaHR0cDovL3d3dy5iaXNvbm9mZmljZS5jb20vY29udGFjdC8iPmNvbnRhY3QgdXM8L2E+LiBU aGFua3MgZm9yIHlvdXIgYnVzaW5lc3MuPC9wPgoJCQk8cCBzdHlsZT0ibWFyZ2luOjA7IHBhZGRp bmc6MDsgZm9udC1mYW1pbHk6QXJpYWwsIFNhbnMtU2VyaWY7IGZvbnQtc2l6ZToxMnB4OyI+PGJy IC8+VGhlIEJpc29uT2ZmaWNlLmNvbSBUZWFtLCA8YnIgLz48YSBocmVmPSJtYWlsdG86aGVscEBi aXNvbm9mZmljZS5jb20iPmhlbHBAYmlzb25vZmZpY2UuY29tPC9hPiA8YnIgLz4gMS04MDAtODkz LTQwOTE8L3A+CgkJCTwvZGl2PjxpbWcgc3JjPSJodHRwczovL3UyMTcwNTE2LmN0LnNlbmRncmlk Lm5ldC93Zi9vcGVuP3Vwbj1iWlllZDZmLTJGT0RiWHhNUUhkalFXU09uS1A5TFdRTC0yQkxjZmtk ZFBhS3JMRi0yRjJLV2FlLTJCdEd3SWJ2bFdxMlRNQ1h2V2dPQUR4ME5DVExyMk14cS0yQkZGSm1U SFNwcE9nMXNnSk8wMHZ2WW9hanBqa0JOR1hCeUhoS2hXbFA5ZnRLUkpyTnVITC0yQmVTTWVpa0Zr LTJGekg0MExsaXB6S1ozY1JrdWNPVDMtMkZhaVBIa1Q5WjRWaWNNTGFYN2kwY3YtMkZhMXktMkI4 VFZrTS0yQnAyQi0yRi0yQkpSbUxwNk9rbC0yRlh2RWhqYUtBY00tMkYtMkJ2UmZERGJsakRRUDgt M0QiIGFsdD0iIiB3aWR0aD0iMSIgaGVpZ2h0PSIxIiBib3JkZXI9IjAiIHN0eWxlPSJoZWlnaHQ6 MXB4ICFpbXBvcnRhbnQ7d2lkdGg6MXB4ICFpbXBvcnRhbnQ7Ym9yZGVyLXdpZHRoOjAgIWltcG9y dGFudDttYXJnaW4tdG9wOjAgIWltcG9ydGFudDttYXJnaW4tYm90dG9tOjAgIWltcG9ydGFudDtt YXJnaW4tcmlnaHQ6MCAhaW1wb3J0YW50O21hcmdpbi1sZWZ0OjAgIWltcG9ydGFudDtwYWRkaW5n LXRvcDowICFpbXBvcnRhbnQ7cGFkZGluZy1ib3R0b206MCAhaW1wb3J0YW50O3BhZGRpbmctcmln aHQ6MCAhaW1wb3J0YW50O3BhZGRpbmctbGVmdDowICFpbXBvcnRhbnQ7Ii8+Cg==