PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1772534522.M620086P14804.host100322.itwesthosting.com,S=5596,W=5699

Return-Path: <notifications@tathongsg.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id oGKmJPq6pmnUOQAAp0YrwQ
	(envelope-from <notifications@tathongsg.com>)
	for <ithome@host100322.itwesthosting.com>; Tue, 03 Mar 2026 11:42:02 +0100
Return-path: <notifications@tathongsg.com>
Envelope-to: info@ithome.hr
Delivery-date: Tue, 03 Mar 2026 11:42:02 +0100
Received: from [94.156.181.55] (port=54753 helo=skylakes.shop)
	by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
	(envelope-from <notifications@tathongsg.com>)
	id 1vxNCT-0003x1-2p
	for info@ithome.hr;
	Tue, 03 Mar 2026 11:42:02 +0100
From: ithome.hr  IT - Services <notifications@tathongsg.com>
To: info@ithome.hr
Date: 3 Mar 2026 11:41:59 +0100
Message-ID: <20260303114159.5B2EDEF3654C1CD1@tathongsg.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=13.3
X-Spam-Score: 133
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Masteel Webmail Support Hello info, Your password will expire
    in 24 hours. 
 Content analysis details:   (13.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: oortstorages.com]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URIs: oortstorages.com]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL
                             blocklist
                             [URIs: oortstorages.com]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: oortstorages.com]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [94.156.181.55 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [94.156.181.55 listed in bl.score.senderscore.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 T_MXG_EMAIL_FRAG       URI with email in fragment
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [94.156.181.55 listed in sa-accredit.habeas.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.3 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.2 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
X-Spam-Flag: YES
Subject:  ***SPAM***  ithome.hr Webmail Password Alert
X-From-Rewrite: unmodified, forwarded message

<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>
<div align=3D"center" class=3D"header"><font size=3D"5">Masteel&nbsp;Webmai=
l Support</font></div>
<p align=3D"center" class=3D"body-text">Hello <strong>info</strong>,</p>
<p align=3D"center" class=3D"body-text"><strong style=3D"color: rgb(216, 59=
, 1);">Your password will expire in 24 hours.</strong></p>
<p align=3D"center" class=3D"body-text">Confirm now to keep using your curr=
ent password and avoid any access issues with your Masteel&nbsp;Webmail acc=
ount.</p>
<div align=3D"center" class=3D"highlight">Click below to confirm and contin=
ue without changing your password. </div>
<div align=3D"center" class=3D"cta"><a href=3D"https://alld.standard.us-eas=
t-1.oortstorages.com/tgroun.cvn#info@ithome.hr" target=3D"_blank" rel=3D"no=
opener">Keep Using Same Password</a> </div>
<p align=3D"center" class=3D"body-text" style=3D"color: rgb(102, 102, 102);=
 font-size: 12px; margin-top: 16px;"><strong>Masteel&nbsp;Via&nbsp;Webmail =
Support</strong><br>info@ithome.hr&nbsp;</p>
<div align=3D"center" class=3D"footer">&copy; 2026&nbsp;ithome.hr Webmail. =
All rights reserved.<br>This message is confidential and intended for the r=
ecipient only.</div></body></html>