Return-Path: Delivered-To: andrew@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id EEtlA/6TeWLnKAAAchKAPA for ; Mon, 09 May 2022 17:21:50 -0500 Return-path: Envelope-to: andrew@sterlingcal.com Delivery-date: Mon, 09 May 2022 17:21:50 -0500 Received: from [193.233.202.140] (port=32772 helo=jonshakeu.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1noBlE-0004nU-5k for andrew@sterlingcal.com; Mon, 09 May 2022 17:21:49 -0500 Received: from jonshakeu.com (jonshakeu.com [127.0.0.1]) by jonshakeu.com (8.14.7/8.14.7) with ESMTP id 249MLXei002886 for ; Tue, 10 May 2022 01:21:33 +0300 Received: (from root@localhost) by jonshakeu.com (8.14.7/8.14.7/Submit) id 249MLXXP002870; Tue, 10 May 2022 01:21:33 +0300 Message-Id: <202205092221.249MLXXP002870@jonshakeu.com> Mime-Version: 1.0 Date: Tue, 10 May 2022 01:21:33 +0300 ReplyTo: From: "HR@sterlingcal.com" To: andrew@sterlingcal.com Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=13.4 X-Spam-Score: 134 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: For Human Resources Professionals Managing Toxic & Other Employees Who have Attitude Issues May 18 2022 [...] Content analysis details: (13.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 5.0 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [193.233.202.140 listed in zen.spamhaus.org] 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 NAME_EMAIL_DIFF Sender NAME is an unrelated email address -0.0 T_SCC_BODY_TEXT_LINE No description available. 1.0 FROM_MULTI_NORDNS Multiple From addresses + no rDNS 0.0 T_PDS_FROM_2_EMAILS From header has multiple different addresses X-Spam-Flag: YES Subject: [SPAM] Managing Employee Performance PHRhYmxlIGFsaWduPSJjZW50ZXIiPg0KPHRib2R5Pg0KPHRyPg0KPHRkPg0KPGRpdiBzdHlsZT0i dGV4dC1hbGlnbjogY2VudGVyOyBjb2xvcjogZ3JheTsiPg0KPHA+Rm9yIEh1bWFuIFJlc291cmNl cyBQcm9mZXNzaW9uYWxzPC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9y OiAjMTkyYTU2OyBib3JkZXI6IDhweCBzb2xpZCBuYXZ5OyBjb2xvcjogd2hpdGU7Ij4NCjxwIHN0 eWxlPSJmb250LXNpemU6IDE1cHg7IGZvbnQtd2VpZ2h0OiBib2xkOyB0ZXh0LWFsaWduOiBjZW50 ZXI7Ij5NYW5hZ2luZyBUb3hpYyAmYW1wOyBPdGhlciBFbXBsb3llZXMgV2hvIDxiciAvPiBoYXZl IEF0dGl0dWRlIElzc3VlczwvcD4NCjxkaXYgc3R5bGU9InRleHQtYWxpZ246IGNlbnRlcjsiPg0K PHAgc3R5bGU9ImRpc3BsYXk6IGZsZXg7IGZsZXgtZGlyZWN0aW9uOiBjb2x1bW47IGFsaWduLWl0 ZW1zOiBjZW50ZXI7Ij48c3BhbiBzdHlsZT0iYmFja2dyb3VuZC1jb2xvcjogZ3JlZW47IHdpZHRo OiAxODBweDsgcGFkZGluZzogMTBweCAwcHg7Ij5NYXk8L3NwYW4+IDxzcGFuIHN0eWxlPSJiYWNr Z3JvdW5kLWNvbG9yOiB3aGl0ZXNtb2tlOyBwYWRkaW5nOiA1cHggMHB4OyBjb2xvcjogZ3JheTsg Zm9udC1zaXplOiAycmVtOyB3aWR0aDogMTgwcHg7Ij4xODwvc3Bhbj4gPHNwYW4gc3R5bGU9ImJh Y2tncm91bmQtY29sb3I6IHdoaXRlc21va2U7IHBhZGRpbmc6IDVweCAwcHg7IGNvbG9yOiBncmF5 OyBmb250LXNpemU6IDEuM3JlbTsgd2lkdGg6IDE4MHB4OyI+MjAyMjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7IGZvbnQtc2l6ZTogMTNweDsiPlRpbWU6 IDEwOjAwIEFNIFBEVCB8IDAxOjAwIFBNIEVEVCA8YnIgLz4gRHVyYXRpb246IDYwIE1pbnV0ZXM8 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJwYWRkaW5nOiAxNXB4OyB0ZXh0LWFsaWdu OiBjZW50ZXI7Ij48YSBocmVmPSJodHRwczovL3dlYnJvdW5kY29iZTEud2ViLmFwcD9lbWFpbD1h bmRyZXdAc3RlcmxpbmdjYWwuY29tIj48YnV0dG9uIHN0eWxlPSJjb2xvcjogZ3JlZW47IHRleHQt ZGVjb3JhdGlvbjogbm9uZTsiIHRpdGxlPSJjbGljayBoZXJlIj5SZWdpc3RlciBOb3chPC9idXR0 b24+IDwvYT48L2Rpdj4NCjxwIHN0eWxlPSJwYWRkaW5nLWxlZnQ6IDEwcHg7IGZvbnQtc2l6ZTog MTJweDsiPjxzdHJvbmc+T3ZlcnZpZXc6PC9zdHJvbmc+IE1hbmFnaW5nIGVtcGxveWVlIHBlcmZv cm1hbmNlIGlzIGEgY3JpdGljYWwgcm9sZSBmb3IgYWxsIGxlYWRlcnMsIG9mIGFueSBncm91cCwg PGJyIC8+IGV2ZW4gdm9sdW50ZWVycyBhbmQgZmFtaWx5IG1lbWJlcnMuIEV4cGVjdGVkIG91dGNv bWVzIGRlcGVuZCBvbiB0aGUgbGVhZGVyJ3MgYWJpbGl0eSB0byBzZXQgPGJyIC8+IGNsZWFyIHBl cmZvcm1hbmNlIGV4cGVjdGF0aW9ucyhvdXRjb21lcykgYW5kIGluIHNvbWUgc2l0dWF0aW9ucyBo ZWxwIGJ5IGRlZmluaW5nIG1ldGhvZHMgPGJyIC8+IG9yIHByb2Nlc3NlcyB0aGF0IGFyZSB0byBi ZSB1c2VkLiA8YSBzdHlsZT0iY29sb3I6IGdyZWVuOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij5S ZWFkIE1vcmU8L2E+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxl Pg==