Return-Path: Received: from vps.transocean.com by vps.transocean.com with LMTP id SDcaINdfwlrNBwAAInt2oQ ; Mon, 02 Apr 2018 09:52:39 -0700 Return-path: Envelope-to: susan@transocean.com Delivery-date: Mon, 02 Apr 2018 09:52:39 -0700 Received: from mtaout-206-ewr.sendlabs.com ([216.146.33.206]:39828) by vps.transocean.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) (envelope-from ) id 1f32h1-0000VS-KD for susan@transocean.com; Mon, 02 Apr 2018 09:52:39 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dyn2014; d=e-billexpress.com; h=MIME-Version:From:To:Date:Subject:Content-Type:Message-ID:Sender; i=E-BillExpress@E-billexpress.com; bh=NFE/2z4pis1HU6reD7Y40jjbRa2dd+U8tcUlte8+bVQ=; b=jdQfWfzEJR6JgSa36fBoZcxjn/L3SNgWuB4Ftbm/GnwKhvXklC1xeEVjnaXiYKXI5qwaKET74UzR oM6D2fTir7Ba5pePCMUydFo4fnJzX/sW+Hx1dzmjOUSU9GKL6wta/NpTc1xvKkFRKt0zMseJK1/I rkaajwtbMHtrA4acG44= X-MailingID: Wells::WFEFMSG::E-billexpress.com::22288298::15::prod_wells_ucb MIME-Version: 1.0 From: E-BillExpress@E-billexpress.com To: susan@transocean.com Date: 2 Apr 2018 12:51:46 -0400 Subject: Your Enrolled Payment to Wells Fargo Bank, NA has been initiated Content-Type: multipart/alternative; boundary=--boundary_2397_ecbf371e-22b2-4ba0-be75-27d11c7ad79d Message-ID: X-OriginalArrivalTime: 02 Apr 2018 16:51:46.0593 (UTC) FILETIME=[E301B910:01D3CAA2] Sender: E-BillExpress@E-billexpress.com X-DynectEmail-Msg-Hash: NHOkGrDLOAYQzmt5GGcOPcAIgtrhltbFTZo0vWHFe6DUCykzZAll0DHl1uwa3GEhJuTtRc8p67htS/vtyMwmX3GXAcu9z+L4h7VrCor5yZZ7LJQ19kRz1QNrIfzS8DNN X-DynEmail-Meta: ZZS9/FSyo0JMUoWRNdFFro6L9iKQu6r5DEAjIXwgQomGR9XmkDHgR4EM7Dr 8BNZ6pOFzoeVB/6wyWGq08H53UJgSfGB9kdKgMevMq4A6qu2QwrRQ9idXDlSY1/yjPW3O/FGl/k BjlIoMvx5D1p9zjT8nXPvZizxq2ZemBaXAtTptQHBydAN0809za2vHGNSwI84eTOnS4ytQW+kKx Dyf0XgDkA2RfQMrpKF4mhAnAKoBz8gS84ddSTaYbmJy9+manl5jzt/llIPmn64Gi4nnbkGMJ9K1 YmyeKYmLBQtRBJmHO5kggBJ4tQ== X-DynectEmail-Msg-Key: 20180402165146.0000009301db@mail6-71-usnbn1 X-DynectEmail-X-Headers: MHwxMDIzNjk4OldlbGxzJTNBJTNBV0ZFRk1TRyUzQSUzQUUtYmlsbGV4cHJlc3MuY29tJTNBJTNBMjIyODgyOTglM0ElM0ExNSUzQSUzQXByb2Rfd2VsbHNfdWNiOw== X-Feedback-ID: R29sZFRyYW4xM1ZNVEFz:476690:287891:dyn06 X-Spam-Status: No, score=2.9 X-Spam-Score: 29 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "vps.transocean.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your Enrolled Payment to Wells Fargo Bank, NA has been initiated .tButtonColor { color: #F5F5F5; background-color: #00698C; } .tButtonColorFg { color: #F5F5F5; } .tButtonColorBg { background-color: #00698C; } .tHeaderColor { color: #C0C0C0; background-color: #FFFFFF; } .tHeaderColorFg { color: #C0C0C0; } .tHeaderColorBg { background-color: #FFFFFF; } .tHeaderLineColor { color: #FFFFFF; background-color: #00698C; } .tHeaderLineColorFg { color: #FFFFFF; } .tHeaderLineColorBg { background-color: #00698C; } .tHeaderTitleColor { color: #FFFFFF; background-color: #00698C; } .tHeaderTitleColorFg { color: #FFFFFF; } .tHeaderTitleColorBg { background-color: #00698C; } .MainTable { margin-left: auto; margin-right: auto; background-color: #F5F5F5; border: solid 1px #B4B4B4; /* #00698C; */ padding: 1 1 1 1; } .MainFrame { margin-left: auto; margin-right: auto; border: solid 1px gray; padding: 1 1 1 1; } [...] Content analysis details: (2.9 points, 3.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dynect.net] 0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror) 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60% [score: 0.4511] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 KAM_REALLYHUGEIMGSRC RAW: Spam with image tags with ridiculously huge http urls -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.8 CPANEL_LOTS_OF_EMPTY_LINE RAW: Spam that has large block of empty lines 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: NO ----boundary_2397_ecbf371e-22b2-4ba0-be75-27d11c7ad79d Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 DQoNCg0KICAgIFlvdXIgRW5yb2xsZWQgUGF5bWVudCB0byBXZWxscyBGYXJnbyBCYW5r LCBOQSBoYXMgYmVlbiBpbml0aWF0ZWQNCiAgICAgICAgDQogICAgICAgIC50QnV0dG9u Q29sb3INCiAgICAgICAgew0KICAgICAgICAgICAgY29sb3I6ICYjMzU7RjVGNUY1Ow0K ICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogJiMzNTswMDY5OEM7DQogICAgICAg IH0NCiAgICAgICAgLnRCdXR0b25Db2xvckZnDQogICAgICAgIHsNCiAgICAgICAgICAg IGNvbG9yOiAmIzM1O0Y1RjVGNTsNCiAgICAgICAgfQ0KICAgICAgICAudEJ1dHRvbkNv bG9yQmcNCiAgICAgICAgew0KICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogJiMz NTswMDY5OEM7DQogICAgICAgIH0NCiAgICAgICAgLnRIZWFkZXJDb2xvcg0KICAgICAg ICB7DQogICAgICAgICAgICBjb2xvcjogJiMzNTtDMEMwQzA7DQogICAgICAgICAgICBi YWNrZ3JvdW5kLWNvbG9yOiAmIzM1O0ZGRkZGRjsNCiAgICAgICAgfQ0KICAgICAgICAu dEhlYWRlckNvbG9yRmcNCiAgICAgICAgew0KICAgICAgICAgICAgY29sb3I6ICYjMzU7 QzBDMEMwOw0KICAgICAgICB9DQogICAgICAgIC50SGVhZGVyQ29sb3JCZw0KICAgICAg ICB7DQogICAgICAgICAgICBiYWNrZ3JvdW5kLWNvbG9yOiAmIzM1O0ZGRkZGRjsNCiAg ICAgICAgfQ0KICAgICAgICAudEhlYWRlckxpbmVDb2xvcg0KICAgICAgICB7DQogICAg ICAgICAgICBjb2xvcjogJiMzNTtGRkZGRkY7DQogICAgICAgICAgICBiYWNrZ3JvdW5k LWNvbG9yOiAmIzM1OzAwNjk4QzsNCiAgICAgICAgfQ0KICAgICAgICAudEhlYWRlckxp bmVDb2xvckZnDQogICAgICAgIHsNCiAgICAgICAgICAgIGNvbG9yOiAmIzM1O0ZGRkZG RjsNCiAgICAgICAgfQ0KICAgICAgICAudEhlYWRlckxpbmVDb2xvckJnDQogICAgICAg IHsNCiAgICAgICAgICAgIGJhY2tncm91bmQtY29sb3I6ICYjMzU7MDA2OThDOw0KICAg ICAgICB9DQogICAgICAgIC50SGVhZGVyVGl0bGVDb2xvcg0KICAgICAgICB7DQogICAg ICAgICAgICBjb2xvcjogJiMzNTtGRkZGRkY7DQogICAgICAgICAgICBiYWNrZ3JvdW5k LWNvbG9yOiAmIzM1OzAwNjk4QzsNCiAgICAgICAgfQ0KICAgICAgICAudEhlYWRlclRp dGxlQ29sb3JGZw0KICAgICAgICB7DQogICAgICAgICAgICBjb2xvcjogJiMzNTtGRkZG RkY7DQogICAgICAgIH0NCiAgICAgICAgLnRIZWFkZXJUaXRsZUNvbG9yQmcNCiAgICAg ICAgew0KICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogJiMzNTswMDY5OEM7DQog ICAgICAgIH0gDQogICAgICAgIC5NYWluVGFibGUNCiAgICAgICAgew0KICAgICAgICAg ICAgbWFyZ2luLWxlZnQ6IGF1dG87DQogICAgICAgICAgICBtYXJnaW4tcmlnaHQ6IGF1 dG87IA0KICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogI0Y1RjVGNTsNCiAgICAg ICAgICAgIGJvcmRlcjogc29saWQgMXB4ICNCNEI0QjQ7IC8qICYjMzU7MDA2OThDOyAq Lw0KICAgICAgICAgICAgcGFkZGluZzogMSAxIDEgMTsNCiAgICAgICAgfQ0KICAgICAg ICAuTWFpbkZyYW1lDQogICAgICAgIHsNCiAgICAgICAgICAgIG1hcmdpbi1sZWZ0OiBh dXRvOw0KICAgICAgICAgICAgbWFyZ2luLXJpZ2h0OiBhdXRvOyANCiAgICAgICAgICAg IGJvcmRlcjogc29saWQgMXB4IGdyYXk7ICAgICAgICAgICAgDQogICAgICAgICAgICBw YWRkaW5nOiAxIDEgMSAxOw0KICAgICAgICB9DQoNCiAgICAgICAgdGFibGUuQm9yZGVy ZWQNCiAgICAgICAgew0KICAgICAgICAgICAgYm9yZGVyLXNwYWNpbmc6IDA7DQogICAg ICAgICAgICBib3JkZXItY29sbGFwc2U6Y29sbGFwc2U7DQogICAgICAgIH0NCiAgICAg ICAgDQogICAgICAgIHRyLkJvcmRlcmVkIHRkDQogICAgICAgIHsNCiAgICAgICAgICAg IGJvcmRlcjogc29saWQgMXB4IGdyYXk7ICAgICAgICAgICAgDQogICAgICAgIH0NCiAg ICANCg0KDQoNCiAgICANCiAgICANCiAgICAgICAgDQoJDQoJRS1CaWxsIEV4cHJlc3Mg DQoNCg0KIA0KCQ0KDQogICAgDQogICAgICAgIA0KICAgICAgICAgICAgDQogICAgICAg ICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgIA0KCQkJCQkNCiAgICAgICAgICAg ICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIE15IFNlbGVjdGVkIEltYWdlOg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICANCiAgICAgICAgICAgICAgICAgICAgICAgICAgICANCiAgICAgICAgICAg ICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAgICAgICAgCQkJCQkJDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgTXkgSW1hZ2UgTGFiZWw6DQogICAgICAgICAg ICAgICAgICAgICAgICAgICAgZXllYmFsbAkJCQkJCQ0KICAgICAgICAgICAgICAgICAg ICAgICAgDQoJCQkJCQkNCiAgICAgICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgIE15IENvbnRyYWN0IE51bWJlcjoNCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAzMDEtNjA1NDkxOS0wMDANCiAgICAgICAgICAgICAgICAg ICAgICAgIAkJCQkJDQogICAgICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAg IA0KICAgICAgICAgICAgDQogICAgICAgIA0KICAgIA0KICAgIA0KDQoNCiAgIA0KICAg IA0KICAgICAgICANCiAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgIFlvdXIgUGF5 bWVudCB0byBXZWxscyBGYXJnbyBCYW5rLCBOQSBpcyBiZWluZyBwcm9jZXNzZWQuDQog ICAgICAgICAgICANCiAgICAgICAgDQogICAgICAgIA0KICAgICAgICAgICAgDQogICAg ICAgICAgICANCg0KICAgIA0KICAgIA0KDQogICAgDQogICAgICAgIA0KICAgICAgICAg ICBDb250cmFjdCBOdW1iZXI6DQogICAgICAgIA0KICAgICAgICANCiAgICAgICAgICAg IDMwMS02MDU0OTE5LTAwNQ0KICAgICAgICANCiAgICANCiAgICANCiAgICAgICAgDQog ICAgICAgICAgICBBY2NvdW50IE5hbWU6DQogICAgICAgIA0KICAgICAgICANCiAgICAg ICAgICAgIFRyYW5zIE9jZWFuIEltcG9ydCBDbyBJbmMNCiAgICAgICAgDQogICAgDQog ICAgDQogICAgICAgIA0KICAgICAgICAgICAgUGF5bWVudCBBY2NvdW50Og0KICAgICAg ICANCiAgICAgICAgDQogICAgICAgICAgICAgDQoJCQkJDQogICAgICAgICAgICAgICAg ICAgIENhcGl0YWwgT25lIA0KICAgICAgICAgICAgICAgICANCgkJCQkmIzQyOyYjNDI7 JiM0MjsmIzQyOyYjNDI7MzAwNg0KICAgICAgICAgICAgDQogICAgICAgIA0KICAgIA0K ICAgIA0KICAgICAgICANCgkJCQ0KCQkJCVBheW1lbnQgQW1vdW50Og0KCQkJDQogICAg ICAgIA0KICAgICAgICANCiAgICAgICAgICAgICQxLDE5Ny44OA0KICAgICAgICAJCQ0K ICAgIA0KDQoNCg0KICAgIA0KCQ0KDQoJDQoNCgkNCgkJDQoJDQoNCg0KICAgIA0KCQkN CgkJDQoJCQkNCgkJDQogICAgDQoJDQoJDQoJCQ0KCQkJCQ0KICAgIA0KCQ0KICAgIA0K ICAgICAgICANCiAgICAgICAgICAgIFRvdGFsIEFtb3VudDoNCiAgICAgICAgDQogICAg ICAgIA0KICAgICAgICAgICAgJDEsMTk3Ljg4DQogICAgICAgIA0KICAgIA0KICAgIA0K ICAgICAgICANCiAgICAgICAgICAgIENyZWF0aW9uIERhdGU6DQogICAgICAgIA0KICAg ICAgICANCiAgICAgICAgICAgIE1vbmRheSwgQXByaWwgMDIsIDIwMTgNCiAgICAgICAg DQogICAgDQogICAgDQogICAgICAgIA0KICAgICAgICAgICAgUGF5bWVudCAgRGF0ZToN CiAgICAgICAgDQogICAgICAgIA0KICAgICAgICAgICAgTW9uZGF5LCBBcHJpbCAwMiwg MjAxOA0KICAgICAgICANCiAgICANCg0KDQoNCgkNCgkNCgkNCgkNCiAgICANCgkNCgkN CgkNCgkNCgkNCgkJDQoJCQ0KCQkJDQoJCQkNCgkJCQkNCgkJCQ0KCQkJDQoJCQkNCgkJ CQ0KCQkJCQ0KCQkJCQ0KCQkJDQoJCQkNCiAgICAgICAgICAgIA0KICAgICAgICAgICAg DQoJCQ0KICAgICAgICANCgkJDQoJDQoJDQoJDQogICAgICAgIA0KCQkNCgkJCQ0KCQkJ CQ0KCQkJCQkNCgkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJCQ0KCQkJCQkJCQkN CgkJCQkJCQkNCgkJCQkJCQ0KCQkJCQkNCgkJCQkJMSBJdGVtIHBhaWQgd2l0aCB0aGlz IFBheW1lbnQNCgkJCQkNCgkJCQkNCgkJCQ0KCQkNCiAgICAgICAgDQoJCQ0KCQkNCgkJ CQ0KCQkJCUNvbmZpcm1hdGlvbiAmIzM1Ow0KCQkJDQoJCQkNCgkJCQlDb250cmFjdCBO dW1iZXINCgkJCQ0KICAgICAgICAgICAgDQoJCQkNCgkJCQ0KCQkJCUludm9pY2UgRGF0 ZQ0KCQkJDQoJCQkNCiAgICAgICAgICAgIA0KICAgICAgICAgICAgDQoJCQkNCgkJCQ0K CQkJCUludm9pY2UgTnVtYmVyDQoJCQkNCgkJCQ0KCQkJIA0KCQkJDQogICAgICAgICAg ICANCgkJCQ0KCQkJCUR1ZSBEYXRlDQoJCQkNCiAgICAgICAgICAgIA0KICAgICAgICAg ICAgDQogICAgICAgICAgICANCgkJCQ0KCQkJCSBBbW91bnQgRHVlDQoJCQkNCgkJCQ0K CQkJDQoJCQkJUGF5bWVudCBBbW91bnQNCgkJCQ0KCQkJDQoJCQkgDQoJCQ0KCQkNCgkJ CQkJCQ0KCQkJCQkJCQ0KCQkJDQoJCQkNCgkJCQkNCgkJCQkNCgkJCQkNCgkJCQkNCgkJ CQkJDQoJCQkJCQkNCgkJCQkJCQkzMDE2ODczNTc0DQoJCQkJCQkNCgkJCQkJCQ0KCQkJ CQkJCTMwMS02MDU0OTE5LTAwNQ0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJ DQoJCQkJCQkJMDMmIzQ3OzA3JiM0NzsyMDE4DQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJ DQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQkJMzAwMjY0MjgyMA0KCQkJCQkJ DQoJCQkJCQkNCgkJCQkJCSANCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0K CQkJCQkJCTA0JiM0NzswMSYjNDc7MjAxOA0KCQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0K CQkJCQkJDQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJCSQxLDE5Ny44OA0KCQkJCQkJDQoJ CQkJCQkNCgkJCQkJCQkNCgkJCQkJCQkNCgkJCQkJCQkJDQoJCQkJCQkJDQoJCQkJCQkJ DQoJCQkJCQkJJDEsMTk3Ljg4DQoJCQkJCQkNCgkJCQkJCQ0KCQkJCQkJDQoJCQkJCQ0K CQkJCQ0KCQkJCQkNCgkJCQkJCQkNCgkJCQkNCgkJCQkJDQoJCQkNCgkJDQoJCQ0KCQ0K CQ0KICAgICAgICAgICAgDQogICAgICAgIA0KICAgIA0KDQogICAgIA0KICAgIA0KICAg IA0KICAgICAgICANCiAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgIA0KICAgICAg ICAgICAgICAgICAgICBQbGVhc2UgRE8gTk9UIHJlcGx5IHRvIHRoaXMgZW1haWwuIFRo aXMgZW1haWwgbWVzc2FnZSB3YXMgc2VudCBmcm9tIGEgbm90aWZpY2F0aW9uDQogICAg ICAgICAgICAgICAgICAgIGFkZHJlc3MgdGhhdCBjYW5ub3QgYWNjZXB0IGluY29taW5n IGVtYWlsLg0KCQkJCQ0KICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgICAgICAg ICBUbyBjb250YWN0IHVzLCBjbGljayBoZXJlDQogICAgICAgICAgICAgICAgICAgICAg ICBhbmQgcmV2aWV3IHRoZSBDb250YWN0IFVzIHNlY3Rpb24gb24gb3VyIHdlYiBzaXRl Lg0KICAgICAgICAgICAgICAgIA0KICAgICAgICAgICAgDQogICAgICAgIA0KICAgIA0K DQoNCg0K ----boundary_2397_ecbf371e-22b2-4ba0-be75-27d11c7ad79d Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit Your Enrolled Payment to Wells Fargo Bank, NA has been initiated
My Selected Image: Security Image
My Image Label:
eyeball 		My Contract Number:
301-6054919-000

Your Payment to Wells Fargo Bank, NA is being processed.
Contract Number: 301-6054919-005
Account Name: Trans Ocean Import Co Inc
Payment Account: Capital One *****3006
Payment Amount: $1,197.88
Total Amount: $1,197.88
Creation Date: Monday, April 02, 2018
Payment Date: Monday, April 02, 2018
1 Item paid with this Payment

Confirmation # Contract Number Invoice Date Invoice Number Due Date Amount Due Payment Amount
3016873574 301-6054919-005 03/07/2018 3002642820 04/01/2018 $1,197.88 $1,197.88
----boundary_2397_ecbf371e-22b2-4ba0-be75-27d11c7ad79d--