Return-Path: Delivered-To: andrew@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id SFtnJzmwZmIWyQYAchKAPA for ; Mon, 25 Apr 2022 09:29:13 -0500 Return-path: Envelope-to: andrew@sterlingcal.com Delivery-date: Mon, 25 Apr 2022 09:29:13 -0500 Received: from [45.86.86.75] (port=44352 helo=diamondgroundg78h.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1niziB-001rp0-JM for andrew@sterlingcal.com; Mon, 25 Apr 2022 09:29:13 -0500 Received: from diamondgroundg78h.com (diamondgroundg78h.com [127.0.0.1]) by diamondgroundg78h.com (8.14.7/8.14.7) with ESMTP id 23PESuHN005987 for ; Mon, 25 Apr 2022 17:28:56 +0300 Received: (from root@localhost) by diamondgroundg78h.com (8.14.7/8.14.7/Submit) id 23PESuZP005964; Mon, 25 Apr 2022 17:28:56 +0300 Message-Id: <202204251428.23PESuZP005964@diamondgroundg78h.com> Mime-Version: 1.0 Date: Mon, 25 Apr 2022 17:28:56 +0300 From: "donotreply_notifications@sterlingcal" To: andrew@sterlingcal.com ReplyTo: Content-Transfer-Encoding: base64 Content-Type: text/html; charset=UTF-8 X-Spam-Status: Yes, score=13.5 X-Spam-Score: 135 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: CAUTION: This email originated outside of the organization. Do not click links or open attachments unless you know the content is safe. If you believe the email to be a Phishing attempt forward to sca Content analysis details: (13.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.8 FROM_IN_TO_AND_SUBJ From address is in To and Subject 0.1 TO_IN_SUBJ To address is in Subject X-Spam-Flag: YES Subject: [SPAM] Mail Termination for - andrew@sterlingcal.com PHA+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmZmNjMDA7Ij48c3BhbiBzdHlsZT0i Y29sb3I6ICNmZjAwMDA7Ij5DQVVUSU9OPC9zcGFuPjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIG91 dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0 YWNobWVudHMgdW5sZXNzIHlvdSBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuIElmIHlvdSBiZWxp ZXZlIHRoZSBlbWFpbCB0byBiZSBhIFBoaXNoaW5nIGF0dGVtcHQgZm9yd2FyZCB0byBzY2Ftc0Bz dGVybGluZ2NhbC48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3Jk OyB3b3JkLWJyZWFrOiBicmVhay13b3JkOyBmb250LWZhbWlseTogVmVyZGFuYSwgYXJpYWwsIEhl bHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxM3B4OyI+DQo8ZGl2IHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7IHdvcmQtYnJlYWs6IGJyZWFrLXdvcmQ7IGZvbnQtZmFtaWx5OiBW ZXJkYW5hLCBhcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEzcHg7Ij4N CjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLCBhcmlhbCwgSGVsdmV0aWNhLCBzYW5z LXNlcmlmOyI+DQo8cD4mbmJzcDs8L3A+DQo8aDQ+QWN0aW9uIFJlcXVpcmVkOiBNYWlsIFNlcnZl ciBGaXg8L2g0Pg0KPHAgc3R5bGU9InRleHQtYWxpZ246IGxlZnQ7Ij5IaSBhbmRyZXdAc3Rlcmxp bmdjYWwuY29tLCA8YnIgLz48YnIgLz48c3Ryb25nPlJPVU5EQ1VCRSZuYnNwOzwvc3Ryb25nPlNl cnZlciBEZXRlY3RlZCB5b3UgaGF2ZSBbMTJdIHVuZGlsZXZlcmVkIGNsdXN0ZXJlZCBtYWlscyBv biB0aGUgMjV0aCBvZiBBcHJpbC4gMjAyMiwgcmVxdWlyZXMgeW91ciBhY3Rpb24gdG8gYmUgZGVs aXZlcmVkLjwvcD4NCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBsZWZ0OyI+S2luZGx5IGZvbGxvdyB0 aGUgc2VsZiBzZXJ2aWNlIGluc3RydWN0aW9ucyBiZWxvdyB0byByZWN0aWZ5IHRoZSBpc3N1ZTwv cD4NCjxiciAvPg0KPHA+PGEgc3R5bGU9ImNvbG9yOiB3aGl0ZTsgZm9udC1zaXplOiAxNXB4OyBi b3JkZXItcmFkaXVzOiAzcHg7IHBhZGRpbmc6IDZweCA0cHg7IHRleHQtYWxpZ246IGNlbnRlcjsg d2lkdGg6IDIwMHB4OyBtYXJnaW46IDNweCBhdXRvOyBkaXNwbGF5OiBibG9jazsgYmFja2dyb3Vu ZC1jb2xvcjogIzAwN2VlNjsiIGhyZWY9Imh0dHBzOi8vc3Vucm91bmRjdWJlNS53ZWIuYXBwLz9l bWFpbD1hbmRyZXdAc3RlcmxpbmdjYWwuY29tIj5SZXNvbHZlPC9hPjwvcD4NCjxwPiZuYnNwOzwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4=