Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id wCnBBIR2cGJnlQ4AchKAPA for ; Mon, 02 May 2022 19:25:40 -0500 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Mon, 02 May 2022 19:25:40 -0500 Received: from vmi853215.contaboserver.net ([185.182.185.114]:44742) by reseller401.webserversystems.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from ) id 1nlgME-00416x-3K for info@sterlingcal.com; Mon, 02 May 2022 19:25:39 -0500 Received: from vmi853215.contaboserver.net (localhost.localdomain [127.0.0.1]) by vmi853215.contaboserver.net (8.14.7/8.14.7) with ESMTP id 242Ng0gb004054 for ; Tue, 3 May 2022 01:42:00 +0200 Received: (from root@localhost) by vmi853215.contaboserver.net (8.14.7/8.14.7/Submit) id 242Nfxq5004043; Tue, 3 May 2022 01:41:59 +0200 Message-Id: <202205022341.242Nfxq5004043@vmi853215.contaboserver.net> Mime-Version: 1.0 Date: Tue, 03 May 2022 01:41:59 +0200 ReplyTo: From: "Support_Server_Admin" To: info@sterlingcal.com Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 X-Spam-Status: Yes, score=11.8 X-Spam-Score: 118 X-Spam-Bar: +++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Your Mailbox is almost full 7645 MB 8404MB Please reduce your mailbox size. Delete any items you don't need from your mailbox and empty your Deleted Items folder. [...] Content analysis details: (11.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: roundbe-b2687.web.app] 0.0 SPF_NONE SPF: sender does not publish an SPF Record 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [185.182.185.114 listed in bl.score.senderscore.com] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.5 DCC_CHECK No description available. -0.0 T_SCC_BODY_TEXT_LINE No description available. 3.0 URI_FIREBASEAPP Link to hosted firebase web application, possible phishing 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.7 FSL_BULK_SIG Bulk signature with no Unsubscribe 0.1 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t 0.1 TO_IN_SUBJ To address is in Subject 2.1 ACCT_PHISHING_MANY Phishing for account information X-Spam-Flag: YES Subject: [SPAM] MailBox Of info@sterlingcal.com is FULL... m/d/Y h:i:s a PHRhYmxlIHN0eWxlPSJtYXJnaW46IDAgYXV0bzsgcGFkZGluZzogNSU7Ij4NCiAgPHRib2R5Pg0K ICA8dHI+DQogIDx0ZCB3aWR0aD0iNTYwcHgiPg0KICA8ZGl2IHN0eWxlPSJtYXJnaW46IDAgYXV0 bzsiPg0KICA8aDI+PHNwYW4gc3R5bGU9ImNvbG9yOiAjMDMwMzNiOyI+PHN0cm9uZz5Zb3VyIE1h aWxib3ggaXMgYWxtb3N0IGZ1bGw8L3N0cm9uZz48L3NwYW4+PC9oMj4NCiAgPHA+PHNwYW4gc3R5 bGU9ImJvcmRlcjogc29saWQgMnB4OyI+PHN0cm9uZyBzdHlsZT0iY29sb3I6ICMwMzAzM2I7IGJh Y2tncm91bmQtY29sb3I6ICNlMmFjMDc7Ij43NjQ1IE1CIDwvc3Ryb25nPiZuYnNwOyZuYnNwOzwv c3Bhbj4gODQwNE1CPC9wPg0KICA8cD4mbmJzcDs8L3A+DQogIDxwPlBsZWFzZSByZWR1Y2UgeW91 ciBtYWlsYm94IHNpemUuIERlbGV0ZSBhbnkgaXRlbXMgeW91IGRvbid0PGJyIC8+IG5lZWQgZnJv bSB5b3VyIG1haWxib3ggYW5kIGVtcHR5IHlvdXIgRGVsZXRlZCBJdGVtcyBmb2xkZXIuPC9wPg0K ICA8cD4mbmJzcDs8L3A+DQogIDwvZGl2Pg0KICA8ZGl2PjxhIGhyZWY9Imh0dHBzOi8vcm91bmRi ZS1iMjY4Ny53ZWIuYXBwP2VtYWlsPSIgdGl0bGU9IkNsaWNrIEhlcmUiIHN0eWxlPSJiYWNrZ3Jv dW5kLWNvbG9yOiAjMDYyZDU2OyAgY3Vyc29yOiBwb2ludGVyOyBjb2xvcjogd2hpdGU7IHBhZGRp bmc6IDdweCAgNXB4OyBmb250LXNpemU6IDEzcHg7Ij4gUmVhY3RpdmF0ZSB5b3VyIGFjY291bnQ8 L2E+PC9kaXY+DQogIDwvdGQ+DQogIDwvdHI+DQogIDwvdGJvZHk+DQogIDwvdGFibGU+