Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id GGTJKA6wZmIWyQYAchKAPA for ; Mon, 25 Apr 2022 09:28:30 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Mon, 25 Apr 2022 09:28:30 -0500 Received: from [45.86.86.131] (port=60646 helo=tyututueets1.com) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nizhT-001rVQ-QN for info@sterlingcal.com; Mon, 25 Apr 2022 09:28:30 -0500 Received: from tyututueets1.com (tyututueets1.com [127.0.0.1]) by tyututueets1.com (8.14.7/8.14.7) with ESMTP id 23PESCG4004059 for ; Mon, 25 Apr 2022 17:28:12 +0300 Received: (from root@localhost) by tyututueets1.com (8.14.7/8.14.7/Submit) id 23PES9Kh003954; Mon, 25 Apr 2022 17:28:09 +0300 Message-Id: <202204251428.23PES9Kh003954@tyututueets1.com> Mime-Version: 1.0 Date: Mon, 25 Apr 2022 17:28:09 +0300 From: "donotreply_notifications@sterlingcal" To: info@sterlingcal.com ReplyTo: Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=13.5 X-Spam-Score: 135 X-Spam-Bar: +++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: CAUTION: This email originated outside of the organization. Do not click links or open attachments unless you know the content is safe. If you believe the email to be a Phishing attempt forward to sca Content analysis details: (13.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.8 FROM_IN_TO_AND_SUBJ From address is in To and Subject 0.1 TO_IN_SUBJ To address is in Subject X-Spam-Flag: YES Subject: [SPAM] Mail Termination for - info@sterlingcal.com PHA+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmZmNjMDA7Ij48c3BhbiBzdHlsZT0i Y29sb3I6ICNmZjAwMDA7Ij5DQVVUSU9OPC9zcGFuPjogVGhpcyBlbWFpbCBvcmlnaW5hdGVkIG91 dHNpZGUgb2YgdGhlIG9yZ2FuaXphdGlvbi4gRG8gbm90IGNsaWNrIGxpbmtzIG9yIG9wZW4gYXR0 YWNobWVudHMgdW5sZXNzIHlvdSBrbm93IHRoZSBjb250ZW50IGlzIHNhZmUuIElmIHlvdSBiZWxp ZXZlIHRoZSBlbWFpbCB0byBiZSBhIFBoaXNoaW5nIGF0dGVtcHQgZm9yd2FyZCB0byBzY2Ftc0Bz dGVybGluZ2NhbC48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0id29yZC13cmFwOiBicmVhay13b3Jk OyB3b3JkLWJyZWFrOiBicmVhay13b3JkOyBmb250LWZhbWlseTogVmVyZGFuYSwgYXJpYWwsIEhl bHZldGljYSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxM3B4OyI+DQo8ZGl2IHN0eWxlPSJ3b3Jk LXdyYXA6IGJyZWFrLXdvcmQ7IHdvcmQtYnJlYWs6IGJyZWFrLXdvcmQ7IGZvbnQtZmFtaWx5OiBW ZXJkYW5hLCBhcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDEzcHg7Ij4N CjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OiBWZXJkYW5hLCBhcmlhbCwgSGVsdmV0aWNhLCBzYW5z LXNlcmlmOyI+DQo8cD4mbmJzcDs8L3A+DQo8aDQ+QWN0aW9uIFJlcXVpcmVkOiBNYWlsIFNlcnZl ciBGaXg8L2g0Pg0KPHAgc3R5bGU9InRleHQtYWxpZ246IGxlZnQ7Ij5IaSBpbmZvQHN0ZXJsaW5n Y2FsLmNvbSwgPGJyIC8+PGJyIC8+PHN0cm9uZz5ST1VORENVQkUmbmJzcDs8L3N0cm9uZz5TZXJ2 ZXIgRGV0ZWN0ZWQgeW91IGhhdmUgWzEyXSB1bmRpbGV2ZXJlZCBjbHVzdGVyZWQgbWFpbHMgb24g dGhlIDI1dGggb2YgQXByaWwuIDIwMjIsIHJlcXVpcmVzIHlvdXIgYWN0aW9uIHRvIGJlIGRlbGl2 ZXJlZC48L3A+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogbGVmdDsiPktpbmRseSBmb2xsb3cgdGhl IHNlbGYgc2VydmljZSBpbnN0cnVjdGlvbnMgYmVsb3cgdG8gcmVjdGlmeSB0aGUgaXNzdWU8L3A+ DQo8YnIgLz4NCjxwPjxhIHN0eWxlPSJjb2xvcjogd2hpdGU7IGZvbnQtc2l6ZTogMTVweDsgYm9y ZGVyLXJhZGl1czogM3B4OyBwYWRkaW5nOiA2cHggNHB4OyB0ZXh0LWFsaWduOiBjZW50ZXI7IHdp ZHRoOiAyMDBweDsgbWFyZ2luOiAzcHggYXV0bzsgZGlzcGxheTogYmxvY2s7IGJhY2tncm91bmQt Y29sb3I6ICMwMDdlZTY7IiBocmVmPSJodHRwczovL3N1bnJvdW5kY3ViZTUud2ViLmFwcC8/ZW1h aWw9aW5mb0BzdGVybGluZ2NhbC5jb20iPlJlc29sdmU8L2E+PC9wPg0KPHA+Jm5ic3A7PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg==