PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/cur/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/cur/1757665477.M702438P1427.host100322.itwesthosting.com,S=5459,W=5565:2,

Return-Path: <gsandassociates002@gmail.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id HFu7KcXYw2iTBQAAp0YrwQ
	(envelope-from <gsandassociates002@gmail.com>)
	for <ithome@host100322.itwesthosting.com>; Fri, 12 Sep 2025 10:24:37 +0200
Return-path: <gsandassociates002@gmail.com>
Envelope-to: ripe-admin@h1telekom.hr
Delivery-date: Fri, 12 Sep 2025 10:24:37 +0200
Received: from [150.40.114.26] (port=50488 helo=gmail.com)
	by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
	(envelope-from <gsandassociates002@gmail.com>)
	id 1uwz5C-0000Mt-0Y
	for ripe-admin@h1telekom.hr;
	Fri, 12 Sep 2025 10:24:37 +0200
Reply-To: gsandassociates03@gmail.com
From: Paris Gabriel<gsandassociates002@gmail.com>
To: ripe-admin@h1telekom.hr
Date: 12 Sep 2025 01:24:35 -0700
Message-ID: <20250912012435.54927C8F8E00BDF3@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=22.5
X-Spam-Score: 225
X-Spam-Bar: ++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings, We invites you to partner with us and benefit in
    our Client's Loan and Project funding program. Please do not hesitate to
   contact us at: gsandassociates03@gmail.com I look forward to your favorable
    response. 
 Content analysis details:   (22.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [150.40.114.26 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?150.40.114.26>]
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [150.40.114.26 listed in zen.spamhaus.org]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [gsandassociates002[at]gmail.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [gsandassociates03[at]gmail.com]
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
                             in digit
                             [gsandassociates002[at]gmail.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [150.40.114.26 listed in sa-accredit.habeas.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [150.40.114.26 listed in bl.score.senderscore.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  0.3 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
  2.5 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail
                             reply-to
  0.0 T_FROM_MISSP_FREEMAIL  From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Business & Project Funding
X-From-Rewrite: unmodified, forwarded message

Greetings,

We invites you to partner with us and benefit in our Client's=20
Loan and Project funding program. Please do not hesitate to=20
contact us at:   gsandassociates03@gmail.com

I look forward to your favorable response.

Mr. Gabriel Paris.
Senior consultant
GS & Associates