Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id sI48OQhBUmIUng0AchKAPA for ; Sat, 09 Apr 2022 21:29:29 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Sat, 09 Apr 2022 21:29:29 -0500 Received: from [209.59.170.191] (port=58785 helo=s2.windleshamosteopaths.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1ndNKP-003l3o-Sg for info@sterlingcal.com; Sat, 09 Apr 2022 21:29:28 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=windleshamosteopaths.com; h=Content-Type:MIME-Version:From:To:Subject:Message-ID; i=info@windleshamosteopaths.com; bh=kib/znBfx0WNlGXKzuLn1HPjOyidY0r9tzJ2G2tLjWQ=; b=aws/APZ2tbyKzQP2oHE/GkFgsqwpgK4jOsV6b78CyjM6Ayy7cYOG/8TQ10AB0ITtnrlGYidY1SI2 oIHijginQVss1yK132jyQc1L8p40MsCmc2UuGMI6pRFUthDzwb6RU42lBnqupWZKYn94/OfFoBlj 9lcdAbl6HzMWBLC36wA= Content-Type: multipart/mixed; boundary="===============8150409639546129637==" MIME-Version: 1.0 From: Wix.com To: info@sterlingcal.com Message-ID: <0.0.1.A9E.1D84CC496DF7812.0@s2.windleshamosteopaths.com> X-Spam-Status: Yes, score=13.3 X-Spam-Score: 133 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: URGENT: PLEASE RENEW YOUR ORDER : $12.00 Hi Dear, Please click on the following link to renew your order : [...] Content analysis details: (13.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 2.4 FUZZY_CLICK_HERE BODY: Obfuscated "click here" 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.5 DCC_CHECK No description available. -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 1.4 MISSING_DATE Missing Date: header 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: [SPAM] Your account has been suspended --===============8150409639546129637== Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit

URGENT: PLEASE RENEW YOUR ORDER : $12.00

Hi Dear,

Please click on the following link to renew your order :

Сliск here

This procedure is automatic and aims to strengthen the security of our infrastructure

We thank you for your trust and our support remains at your disposal if necessary

Got question? Simple get in touch via live chat, phone or email. We'll be happy to help

Warm regards

Harry Baker, Billing manager

--===============8150409639546129637==--