Return-Path: Delivered-To: info@sterlingcal.com Received: from reseller401.webserversystems.com by reseller401.webserversystems.com with LMTP id QG9bOz4ZXWUmIA8AchKAPA (envelope-from ) for ; Tue, 21 Nov 2023 14:55:26 -0600 Return-path: Envelope-to: info@sterlingcal.com Delivery-date: Tue, 21 Nov 2023 14:55:26 -0600 Received: from [103.67.163.52] (port=36840 helo=mail.promailer.cyou) by reseller401.webserversystems.com with esmtp (Exim 4.96.2) (envelope-from ) id 1r5XmI-004AS1-1D for info@sterlingcal.com; Tue, 21 Nov 2023 14:55:26 -0600 Received: from promailer.cyou (23-227-196-200.static.hvvc.us [23.227.196.200]) by mail.promailer.cyou (Postfix) with ESMTPA id 5FD1E7B767 for ; Tue, 21 Nov 2023 14:08:19 +0100 (CET) From: sterlingcal.com To: info@sterlingcal.com Date: 21 Nov 2023 05:08:19 -0800 Message-ID: <20231121050818.1E1BDC2B6D329400@promailer.cyou> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=12.0 X-Spam-Score: 120 X-Spam-Bar: ++++++++++++ X-Spam-Report: Spam detection software, running on the system "reseller401.webserversystems.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: sterlingcal.com Unusual sign-in activity We detected something unusual about a recent sign-in to Your Email Account info@sterlingcal.com Sign-in details Country/region: United States IP address: 23.2 [...] Content analysis details: (12.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: r2.dev] 1.5 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date -0.5 SPF_PASS SPF: sender matches SPF record 0.1 URI_HEX URI: URI hostname has long hexadecimal sequence 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 1.0 FROM_FMBLA_NEWDOM14 From domain was registered in last 7-14 days 3.0 RDNS_NONE Delivered to internal network by a host with no rDNS 0.5 FROM_SUSPICIOUS_NTLD From abused NTLD 2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD 2.0 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain 1.3 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain 1.0 PDS_BRAND_SUBJ_NAKED_TO Subject starts with To: brand and naked To: X-Spam-Flag: YES Subject: [SPAM] sterlingcal.com account unusual sign-in activity

sterlingcal.com=
Unusual sign-in acti= vity
We detected something unusual about a recent sign-in to Your Email = Account  i= nfo@sterlingcal.com
Sign-in details
Country/region: United States
IP address: 23.227.196.200
Date: 11/21/2023 2:34 AM (PST)
Platform: Windows
Browser: Chrome
Please go to your recent activity page to let us know whether or n= ot this was you. If this wasn't you, we'll help you secure your account. If= this was you, we'll trust similar activity in the future.
Review recent activity
To opt out or change where you receive security notifications,  click here.
Thanks,
The sterlingcal.com account team