PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/cur/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/cur/1756795301.M269865P18796.host100322.itwesthosting.com,S=5145,W=5242:2,

Return-Path: <cmeanvy@gmail.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id QG/mD6WRtmhsSQAAp0YrwQ
	(envelope-from <cmeanvy@gmail.com>)
	for <ithome@host100322.itwesthosting.com>; Tue, 02 Sep 2025 08:41:41 +0200
Return-path: <cmeanvy@gmail.com>
Envelope-to: info@zagrebcrafts.hr
Delivery-date: Tue, 02 Sep 2025 08:41:41 +0200
Received: from [192.227.246.68] (port=51856 helo=192-227-246-68-host.colocrossing.com)
	by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
	(envelope-from <cmeanvy@gmail.com>)
	id 1utKi5-00052N-0h
	for info@zagrebcrafts.hr;
	Tue, 02 Sep 2025 08:41:41 +0200
Reply-To: <meanvy65@gmail.com>
From: Mrs. Liam <cmeanvy@gmail.com>
To: info@zagrebcrafts.hr
Date: 2 Sep 2025 08:41:39 +0200
Message-ID: <20250902084139.C0AA6271F2B96F06@gmail.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=21.4
X-Spam-Score: 214
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  I am Mrs. Liam, I am writing from my sick bed, I want to
   donate $6 million USD to you for charity work in your country, please send
    your details only to my Email: meanvy65@gmail.com 
 Content analysis details:   (21.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?192.227.246.68>]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [192.227.246.68 listed in psbl.surriel.com]
  1.2 MILLION_USD            BODY: Talks about millions of dollars
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [cmeanvy[at]gmail.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [meanvy65[at]gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [192.227.246.68 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [192.227.246.68 listed in sa-accredit.habeas.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 HK_NAME_FM_MR_MRS      No description available.
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 LOTS_OF_MONEY          Huge... sums of money
  3.9 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP
                             addr 2)
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  0.2 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  0.3 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail
                             reply-to
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Charity Work 
X-From-Rewrite: unmodified, forwarded message

<!DOCTYPE HTML>

<html>I am Mrs. Liam, I am writing from my sick bed, I want to donate $6 mi=
llion USD to you for charity work in your country, please send your details=
 only to my Email: meanvy65@gmail.com</html>