Return-Path: Delivered-To: hr@transocean.com Received: from vps.transocean.com by vps.transocean.com (Dovecot) with LMTP id HfpFJbZEV1l1LAAAInt2oQ for ; Fri, 30 Jun 2017 23:44:06 -0700 Return-path: Envelope-to: hr@transocean.com Delivery-date: Fri, 30 Jun 2017 23:44:06 -0700 Received: from smtp.agip.gov.ar ([190.12.99.116]:42334) by vps.transocean.com with esmtp (Exim 4.89) (envelope-from ) id 1dRC8K-0002wO-Kt for hr@transocean.com; Fri, 30 Jun 2017 23:44:06 -0700 Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp.agip.gov.ar (Postfix) with ESMTP id 185EE1FE23C; Sat, 1 Jul 2017 03:23:56 -0300 (ART) X-Virus-Scanned: amavisd-new at smtp.agip.gov.ar Received: from smtp.agip.gov.ar ([127.0.0.1]) by localhost (smtp.agip.gov.ar [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SjzbAsOrZ6Sh; Sat, 1 Jul 2017 03:23:55 -0300 (ART) Received: from mail.agip.gov.ar (mail.agip.gov.ar [10.32.0.102]) by smtp.agip.gov.ar (Postfix) with ESMTP id 34CA7206DA; Sat, 1 Jul 2017 03:19:05 -0300 (ART) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.agip.gov.ar (Postfix) with ESMTP id B92451E43DAA; Sat, 1 Jul 2017 02:52:46 -0300 (ART) X-Virus-Scanned: amavisd-new at mail.agip.gov.ar Received: from mail.agip.gov.ar ([127.0.0.1]) by localhost (mail.agip.gov.ar [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GjBqCzGVFpce; Sat, 1 Jul 2017 02:52:45 -0300 (ART) Received: from [10.157.22.181] (unknown [197.211.63.150]) by mail.agip.gov.ar (Postfix) with ESMTPSA id 73A49E5A60; Sat, 1 Jul 2017 02:17:07 -0300 (ART) Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Description: Mail message body To: Recipients From: scicchetto@agip.gov.ar Date: Sat, 01 Jul 2017 06:15:59 +0100 Reply-To: franksmithloan2@yahoo.com X-Antivirus: avast! (VPS 170625-2, 06/25/2017), Outbound message X-Antivirus-Status: Clean Message-Id: <20170701051708.73A49E5A60@mail.agip.gov.ar> X-Spam-Status: Yes, score=4.2 X-Spam-Score: 42 X-Spam-Bar: ++++ X-Spam-Report: Spam detection software, running on the system "vps.transocean.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Do you need a loan? if yes contact us through email at franksmithloan2@yahoo.com with the information's below: name: address: state: country: phone number: amount needed: loan duration: We await you with your fast response. Thanks Mr Frank Smith. [...] Content analysis details: (4.2 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [190.12.99.116 listed in dnsbl.sorbs.net] 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (franksmithloan2[at]yahoo.com) -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40% [score: 0.3401] 2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information 0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s) X-Spam-Flag: YES Subject: ****SPAM**** Loan to offer at low interest rate. Do you need a loan? if yes contact us through email at franksmithloan2@yaho= o.com with the information's below: name: address: state: country: phone number: amount needed: loan duration: We await you with your fast response. Thanks Mr Frank Smith. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus