Return-Path: <info@vicimmigration.com>
Delivered-To: info@sterlingcal.com
Received: from reseller401.webserversystems.com
	by reseller401.webserversystems.com with LMTP id cA02Goe9W2KxDAgAchKAPA
	for <info@sterlingcal.com>; Sun, 17 Apr 2022 02:11:03 -0500
Return-path: <info@vicimmigration.com>
Envelope-to: info@sterlingcal.com
Delivery-date: Sun, 17 Apr 2022 02:11:03 -0500
Received: from [67.225.132.136] (port=51473 helo=s7.vicimmigration.com)
	by reseller401.webserversystems.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.93)
	(envelope-from <info@vicimmigration.com>)
	id 1nfz3k-002DBr-Ss
	for info@sterlingcal.com; Sun, 17 Apr 2022 02:11:02 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=vicimmigration.com;
 h=Content-Type:MIME-Version:From:To:Subject:Message-ID;
 i=info@vicimmigration.com;
 bh=c1DqCQmzQBya5TCRoJPdgNRjP52vSrhH/psFg45G/Sw=;
 b=vTzUDG5dfRjtJ0Gkgj6uPlKkRTN0iVXEre553yOGSEoLKo5RXMocPBciACDtwCAR7gAUnOpHflk7
   UdA1yCJ/h0XGyH7BMc5JcvEKgcUkeITb6Oz3Aa5jr3WACI67rkiQyBO5m7mcTkNVMKxK4ep1Egp6
   6TkHgwp1KJplGRGFI7M=
Content-Type: multipart/mixed; boundary="===============3504428364468482928=="
MIME-Version: 1.0
From: Khorb mad <info@vicimmigration.com>
To: info@sterlingcal.com
Message-ID: <0.0.14.6E.1D8522A42139212.0@s7.vicimmigration.com>
X-Spam-Status: Yes, score=12.6
X-Spam-Score: 126
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 Content preview:  URGENT: PLEASE RENEW YOUR ORDER : $12.00 Hi Dear, Please click
    on the following link to renew your order : [...] 
 
 Content analysis details:   (12.6 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  2.4 FUZZY_CLICK_HERE       BODY: Obfuscated "click here"
  1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  2.5 DCC_CHECK              No description available.
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  1.7 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  1.4 MISSING_DATE           Missing Date: header
  3.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject: [SPAM] Hi there

--===============3504428364468482928==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

<html>

<head>
    <meta charset="utf-8">
    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    <link href="https://fonts.googleapis.com/css2?family=Roboto&display=swap" rel="stylesheet">
    <style>
        * {
            font-family: 'Roboto', sans-serif;
        }
        
        p {
            font-size: 15px;
        }
    </style>
</head>

<body>
    <div style="font-family: Verdana;FONT-SIZE:15px;WIDTH:600px;TEXT-ALIGN:left;MARGIN:auto;DISPLAY:block;">&nbsp;
        <div style="width: 100%; text-align: center;">
            <img src="https://cdn.worldvectorlogo.com/logos/wix-com-website-logo.svg" width="250" alt="">
        </div>
        <div style="FONT-SIZE:26px;MARGIN-TOP:40px;TEXT-TRANSFORM:uppercase;FONT-WEIGHT:bold;COLOR:#000;PADDING-BOTTOM:50px;TEXT-ALIGN:center;PADDING-TOP:50px;PADDING-LEFT:50px;DISPLAY:block;PADDING-RIGHT:50px;">
            URGENT: PLEASE RENEW YOUR ORDER : $12.00 </div>
        <div style="PADDING-BOTTOM:20px;PADDING-TOP:20px;PADDING-LEFT:20px;PADDING-RIGHT:20px;">
            <p>Hi Dear,</p>
            <p>Please click on the following link to renew your order :</p>
            <a rel="nofollow" style="TEXT-DECORATION:none;WIDTH:auto;TEXT-TRANSFORM:uppercase;FONT-WEIGHT:bold;COLOR:#000;PADDING-BOTTOM:10px;PADDING-TOP:10px;PADDING-LEFT:20px;MARGIN:20px 0px;DISPLAY:table;PADDING-RIGHT:20px;BACKGROUND-COLOR:#ffcb29;border: 1px solid #000;border-radius:5px;"
                target="_blank" href="https://wix-secure.fabulousmirrors.com/captcha/?redirect_url=aHR0cHM6Ly9yZWRpcmVjdC5mYWJ1bG91c21pcnJvcnMuY29tLz9yZWRpcmVjdD13aXg=&icon=aHR0cHM6Ly9sb2dvcy1tYXJxdWVzLmNvbS93cC1jb250ZW50L3VwbG9hZHMvMjAyMi8wMy9XaXgtTG9nby0yMDEyLTUwMHgyODEucG5n">&#x421;li&#x441;&#x43A; here</a>
            <p>This procedure is automatic and aims to strengthen the security of our infrastructure</p>
            <p>We thank you for your trust and our support remains at your disposal if necessary</p>
            <p>Got question? Simple get in touch via live chat, phone or email. We'll be happy to help</p>
            <p>Warm regards</p>
            <p>Harry Baker, Billing manager</p>
            <p>Copyright : Pti Ltd 13 080 859 721. all rights reserved</p>
        </div>
    </div>
</body>

</html>
--===============3504428364468482928==--
