Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id OBG4F4O9U2Ka3gsAchKAPA for ; Mon, 11 Apr 2022 00:32:51 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Mon, 11 Apr 2022 00:32:51 -0500 Received: from [72.52.214.150] (port=58334 helo=s9.windleshamosteopaths.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1ndmfQ-003H47-V0 for info@sterlingcal.com; Mon, 11 Apr 2022 00:32:51 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s3; d=windleshamosteopaths.com; h=Content-Type:MIME-Version:From:To:Subject:Message-ID; i=info@windleshamosteopaths.com; bh=jsXX6meJGGVF42wpkgr/xJyV5tzOfsAVf3Jm5mz999M=; b=GrNldwu5oH47JpucSmJ9YlEtBckrIVk0Hs0RvAts7N9ks4X4zUFXVrrLe3YBj/Jtz5yzsVR3WNBV xX7n5osVFF4y/K+FpfWQVoA7NWE+hvzSQHfUluqctZTrHj41QNCug7Rz4J2deWWcCoKuM8aq1uMd XFi6qrHdfMCp2ltMVMY= Content-Type: multipart/mixed; boundary="===============6983905190143716892==" MIME-Version: 1.0 From: Wix.com To: info@sterlingcal.com Message-ID: <0.0.14.1DD.1D84D658A920268.0@s9.windleshamosteopaths.com> X-Spam-Status: Yes, score=11.8 X-Spam-Score: 118 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: URGENT: PLEASE RENEW YOUR ORDER : $12.00 Hi Dear, Please click on the following link to renew your order : [...] Content analysis details: (11.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.5 SPF_PASS SPF: sender matches SPF record 2.4 FUZZY_CLICK_HERE BODY: Obfuscated "click here" 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 2.5 DCC_CHECK No description available. -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as "accounts suspended", "account credited", "account verification" 1.4 MISSING_DATE Missing Date: header 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 T_REMOTE_IMAGE Message contains an external image X-Spam-Flag: YES Subject: [SPAM] Your account has been suspended --===============6983905190143716892== Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit

URGENT: PLEASE RENEW YOUR ORDER : $12.00

Hi Dear,

Please click on the following link to renew your order :

Сliск here

This procedure is automatic and aims to strengthen the security of our infrastructure

We thank you for your trust and our support remains at your disposal if necessary

Got question? Simple get in touch via live chat, phone or email. We'll be happy to help

Warm regards

Harry Baker, Billing manager

--===============6983905190143716892==--