PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/cur/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/cur/1757333202.M46349P3723.host100322.itwesthosting.com,S=5426,W=5521:2,

Return-Path: <subscription@quotesecuredfile.live>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id CLWfAtLGvmiLDgAAp0YrwQ
	(envelope-from <subscription@quotesecuredfile.live>)
	for <ithome@host100322.itwesthosting.com>; Mon, 08 Sep 2025 14:06:42 +0200
Return-path: <subscription@quotesecuredfile.live>
Envelope-to: domagoj.curkovic@h1telekom.hr
Delivery-date: Mon, 08 Sep 2025 14:06:42 +0200
Received: from [84.54.51.245] (port=40088 helo=vmgmedia.us.com)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <subscription@quotesecuredfile.live>)
	id 1uvadr-000104-1P
	for domagoj.curkovic@h1telekom.hr;
	Mon, 08 Sep 2025 14:06:42 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=quotesecuredfile.live; s=202508; t=1757307291;
	bh=rr/FIpBCTbRnrCdvsoF77eCWz87LXtjZFjDJgG7M+Rc=;
	h=From:To:Subject:Date:From;
	b=cl2ox4Alv54OTabbnNFgaxOJl7J7Xdd0aKRVbmTkwrYy0P2HuRRT7rTizOOLohFRi
	 JLMyLkMoPIepq2JakcII6dUpTrAU4rhjS5JLS2JVKye8FNg+Gh8gYFUw3cJuBiqbz8
	 H/F7kl9QnnCWM83LUMnpDeT0xRckmVA2GQmBM/gZZlDdJRaUbd15Zi/rJ+CsHPnX3p
	 tZKzYzN6wyCxMIXYDktLWDLtl7aA+ehSbIEB361nLC9ITYfv9QJdH0V9rwxnz3sLI/
	 bNXxdnqJ7THB+zZgPOJ7wprR1toRZ4bNvnf66ZKQG5KcSjmNqwCl6X2EK4c6YA8UBe
	 +wdbbbcJaHk8Q==
Received: from connected-by.global-layer.com (unknown [213.152.162.84])
	by vmgmedia.us.com (Postfix) with ESMTPA id 87FEA13E4A2
	for <domagoj.curkovic@h1telekom.hr>; Mon,  8 Sep 2025 04:54:50 +0000 (UTC)
From: subscription@quotesecuredfile.live
To: domagoj.curkovic@h1telekom.hr
Date: 7 Sep 2025 21:54:47 -0700
Message-ID: <20250907215447.AAF28DEDD50C1CC0@quotesecuredfile.live>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=8.6
X-Spam-Score: 86
X-Spam-Bar: ++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Sir/Madam, You have been pre-selected for a charitable
    grant from the Worldwide Financial Aid Initiative Foundation. If this email
    is still active and you wish to claim this grant, please confirm your contact
    details by replying to this message or contacting us at WFAIhumanitariangrant@docsignaturepdf.icu.
    
 Content analysis details:   (8.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  1.7 DEAR_SOMETHING         BODY: Contains 'Dear (something)'
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: quotesecuredfile.live]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: quotesecuredfile.live]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: quotesecuredfile.live]
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [84.54.51.245 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [84.54.51.245 listed in bl.score.senderscore.com]
  2.0 KAM_ICU_BAD_TLD        .icu TLD Abuse
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  =?UTF-8?B?SHVtYW5pdGFyaWFuIEdyYW50IE9wcG9ydHVuaXR5IOKAkyBXb3JsZHdpZGUgRmluYW5jaWFsIEFpZCBJbml0aWF0aXZl?=
X-From-Rewrite: unmodified, forwarded message

<html>Dear Sir/Madam,<br><br>You have been pre-selected for a charitable gr=
ant from the Worldwide Financial Aid Initiative Foundation.<br><br>If this =
email is still active and you wish to claim this grant, please confirm your=
 contact details by replying to this message or contacting us at <a href=3D=
"mailto:WFAIhumanitariangrant@docsignaturepdf.icu.">WFAIhumanitariangrant@d=
ocsignaturepdf.icu.</a><br><br>Thank you.<br><br>Respectfully,<br>Worldwide=
 Financial Aid Initiative</html>