Return-Path: <root@dc-puff-01.personalufficio.net>
Delivered-To: marty@transocean.com
Received: from vps.transocean.com
	by vps.transocean.com (Dovecot) with LMTP id 6RRSH2T3GVkXYgAAInt2oQ
	for <marty@transocean.com>; Mon, 15 May 2017 11:45:56 -0700
Return-path: <root@dc-puff-01.personalufficio.net>
Envelope-to: marty@transocean.com
Delivery-date: Mon, 15 May 2017 11:45:56 -0700
Received: from dc-puff-01.personalufficio.net ([95.110.211.42]:50150)
	by vps.transocean.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.88)
	(envelope-from <root@dc-puff-01.personalufficio.net>)
	id 1dAKzy-0006b6-9s
	for marty@transocean.com; Mon, 15 May 2017 11:45:56 -0700
Received: (qmail 27533 invoked by uid 48); 15 May 2017 18:43:06 -0000
Date: 15 May 2017 18:43:06 -0000
Message-ID: <20170515184306.27531.qmail@dc-puff-01.personalufficio.net>
To: marty@transocean.com
From: James Norton <james.norton@wall-mart.com>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Spam-Status: Yes, score=4.5
X-Spam-Score: 45
X-Spam-Bar: ++++
X-Spam-Report: Spam detection software, running on the system "vps.transocean.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  Hi, Our records show that your order was delivered. You can
    view the UPS Delivery Confirmation below: [...] 
 
 Content analysis details:   (4.5 points, 3.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: vietnam-visa.jp]
 -0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
  0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
                             domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.5 BAYES_05               BODY: Bayes spam probability is 1 to 5%
                             [score: 0.0188]
  0.7 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.9 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                             above 50%
                             [cf: 100]
  0.9 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 TO_NO_BRKTS_HTML_ONLY  To: lacks brackets and HTML only
X-Spam-Flag: YES
Subject:  ****SPAM****  Re: Re: your order 736938



<html>

	<head>

		<title></title>

	</head>

	<body>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Hi,</span></span></div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Our records show that your order was delivered.</span></span></div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">You can view the UPS Delivery Confirmation below:</span></span></div>

		<div>

			&nbsp;</div>

		<div>

			<a href="https://vietnam-visa.jp/ups/delivery.php?document=bWFydHlAdHJhbnNvY2Vhbi5jb20N"><font face="arial, helvetica, sans-serif"><span style="font-size: 14px;">UPS confirmation 736938</span></font></a></div>

		<div>

			&nbsp;</div>

		<div>

			&nbsp;</div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Regards,</span></span></div>

		<div>

			<span style="font-family: arial, helvetica, sans-serif; font-size: 14px;">James Norton</span></div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Orders Manager</span></span></div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Telephone: (785) 571-7666</span></span></div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Fax: (785) 571-7666</span></span></div>

		<div>

			&nbsp;</div>

		<div>

			&nbsp;</div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">On Thu, May 12 2017 at 14:53 marty@transocean.com
 wrote:</span></span></div>

		<div>

			&nbsp;</div>

		<div>

			<span style="font-size:14px;"><span style="font-family:arial,helvetica,sans-serif;">Any news regarding my order? You can e-mail me back at marty@transocean.com
</span></span></div>

		<div>

			&nbsp;</div>

	</body>

</html>


