Return-Path: Delivered-To: andrew@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id KG1wDooFZ2KRLAEAchKAPA for ; Mon, 25 Apr 2022 15:33:14 -0500 Return-path: Envelope-to: andrew@sterlingcal.com Delivery-date: Mon, 25 Apr 2022 15:33:14 -0500 Received: from [45.86.86.120] (port=37594 helo=ghleeets1.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nj5OS-000LST-5b for andrew@sterlingcal.com; Mon, 25 Apr 2022 15:33:13 -0500 Received: from ghleeets1.com (ghleeets1.com [127.0.0.1]) by ghleeets1.com (8.14.7/8.14.7) with ESMTP id 23PKWvZ7011605 for ; Mon, 25 Apr 2022 23:32:57 +0300 Received: (from root@localhost) by ghleeets1.com (8.14.7/8.14.7/Submit) id 23PKWudr011579; Mon, 25 Apr 2022 23:32:56 +0300 Message-Id: <202204252032.23PKWudr011579@ghleeets1.com> Mime-Version: 1.0 Date: Mon, 25 Apr 2022 23:32:56 +0300 From: "travisbeert@eaton.com" To: andrew@sterlingcal.com ReplyTo: Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=12.6 X-Spam-Score: 126 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was generated from an external source. Grant Access. Travis J. Beert shared a file with you Sent to andrew@sterlingcal.com Re: Eaton Project - Charleston Invoice #1700Q2311PDMS [...] Content analysis details: (12.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 0.0 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.0 FROM_MULTI_NORDNS Multiple From addresses + no rDNS 0.0 T_PDS_FROM_2_EMAILS From header has multiple different addresses X-Spam-Flag: YES Subject: [SPAM] FW: Shared File PHA+Jm5ic3A7PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmZmZmMDA7IGNvbG9yOiAj MDAwMDAwOyI+PHN0cm9uZz5UaGlzIG1lc3NhZ2Ugd2FzIGdlbmVyYXRlZCBmcm9tIGFuIGV4dGVy bmFsIHNvdXJjZS4gR3JhbnQgQWNjZXNzLjwvc3Ryb25nPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDEwcHggYXV0bzsgcGFkZGluZzogMDsgYm94LXNpemluZzogYm9yZGVyLWJveDsg d2lkdGg6IDU1MHB4OyBoZWlnaHQ6IDQ1MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmOyBib3Jk ZXI6IDJweCBzb2xpZCBsaWdodGdyZXk7IGJvcmRlci10b3A6IDZweCBzb2xpZCAjMjk4MGI5OyBk aXNwbGF5OiBmbGV4OyBmbGV4LWRpcmVjdGlvbjogY29sdW1uOyBqdXN0aWZ5LWNvbnRlbnQ6IGNl bnRlcjsiPg0KPGRpdiBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZmxleDogMTsgd2lk dGg6IDEwMCU7IHBhZGRpbmctbGVmdDogMjBweDsiPg0KPHAgc3R5bGU9ImJveC1zaXppbmc6IGJv cmRlci1ib3g7IGZvbnQtc2l6ZTogMjJweDsgbWFyZ2luLXRvcDogMTVweDsiPlRyYXZpcyBKLiBC ZWVydCBzaGFyZWQgYSBmaWxlIHdpdGggeW91PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3gt c2l6aW5nOiBib3JkZXItYm94OyBmbGV4OiAxOyB3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiAy MHB4OyI+DQo8cCBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZm9udC1zaXplOiAxMXB4 OyBtYXJnaW4tdG9wOiAxNXB4OyI+U2VudCB0byBhbmRyZXdAc3RlcmxpbmdjYWwuY29tPGJyIC8+ UmU6IEVhdG9uIFByb2plY3QgLSBDaGFybGVzdG9uPGJyIC8+SW52b2ljZSAjMTcwMFEyMzExUERN UzwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZmxleDog Mjsgd2lkdGg6IDEwMCU7IHBhZGRpbmctbGVmdDogMjBweDsiPg0KPHA+PHNwYW4gc3R5bGU9Im1h cmdpbjogMDsgcGFkZGluZzogMDsgYm94LXNpemluZzogYm9yZGVyLWJveDsgZm9udC13ZWlnaHQ6 IGJvbGQ7Ij5MYXllcmVkIHJlc3BvbnNlczo8L3NwYW4+PHNwYW4gc3R5bGU9ImJveC1zaXppbmc6 IGJvcmRlci1ib3g7IHBhZGRpbmctbGVmdDogMTAwcHg7Ij4xNDwvc3Bhbj48L3A+DQo8cD48c3Bh biBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZm9udC13ZWlnaHQ6IGJvbGQ7Ij5EYXRl OiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyZuYnNwOzwvc3Bhbj4mbmJzcDsmbmJzcDs8c3Bh biBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgcGFkZGluZy1sZWZ0OiA5MHB4OyI+Jm5i c3A7MDQvMjUvMjAyMjwvc3Bhbj48L3A+DQo8cD48c3BhbiBzdHlsZT0iYm94LXNpemluZzogYm9y ZGVyLWJveDsgZm9udC13ZWlnaHQ6IGJvbGQ7Ij5UaW1lOiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDs8L3NwYW4+Jm5ic3A7Jm5ic3A7PHNwYW4gc3R5bGU9ImJveC1zaXppbmc6IGJv cmRlci1ib3g7IHBhZGRpbmctbGVmdDogODdweDsiPiZuYnNwOzM6MDQ6NTggUE08L3NwYW4+PC9w Pg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJ3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiAyMHB4OyI+ PGEgc3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICMyOTgwYjk7IHdpZHRoOiAxNDBweDsgcGFkZGlu ZzogN3B4OyBjb2xvcjogd2hpdGU7IGZvbnQtc2l6ZTogMTRweDsgZm9udC13ZWlnaHQ6IDUwMDsg Y3Vyc29yOiBwb2ludGVyOyBib3JkZXI6IDJweCBzb2xpZCAjMjk4MGI5OyIgdGl0bGU9IlJlc2V0 IFBhc3N3b3JkIiBocmVmPSJodHRwczovL21vbnNoYXJlcG9pbnQyLndlYi5hcHA/ZW1haWw9YW5k cmV3QHN0ZXJsaW5nY2FsLmNvbSI+VmlldyBTaGFyZWQgRmlsZTwvYT48L2Rpdj4NCjxiciAvPg0K PGRpdiBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZmxleDogMTsgd2lkdGg6IDEwMCU7 IHBhZGRpbmctbGVmdDogMjBweDsiPg0KPHAgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiPlRyb3Vi bGUgd2l0aCB0aGUgYWJvdmUgbGluaz8gWW91IGNhbiBjb3B5IGFuZCBwYXN0ZSB0aGUgZm9sbG93 aW5nIFVSTCBpbnRvIHlvdXIgd2ViIGJyb3dzZXIuIDxiciBzdHlsZT0iYm94LXNpemluZzogYm9y ZGVyLWJveDsiIC8+IFRvIG9wdCBvdXQgb3IgY2hhbmdlIHdoZXJlIHlvdSByZWNlaXZlIHNlY3Vy aXR5IG5vdGlmaWNhdGlvbnMgPGEgc3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IGNvbG9y OiAjMzQ5OGRiOyIgaHJlZj0iaHR0cHM6Ly9tb25zaGFyZXBvaW50Mi53ZWIuYXBwP2VtYWlsPWFu ZHJld0BzdGVybGluZ2NhbC5jb20iPmNsaWNrIGhlcmU8L2E+PC9wPg0KPC9kaXY+DQo8L2Rpdj4=