| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1772538284.M234683P30562.host100322.itwesthosting.com,S=12755,W=12951 |
Return-Path: <bounces+SRS=6Cu0i=BD@ROCKWOOL.onmicrosoft.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 4H/dDazJpmlidwAAp0YrwQ
(envelope-from <bounces+SRS=6Cu0i=BD@ROCKWOOL.onmicrosoft.com>)
for <ithome@host100322.itwesthosting.com>; Tue, 03 Mar 2026 12:44:44 +0100
Return-path: <bounces+SRS=6Cu0i=BD@ROCKWOOL.onmicrosoft.com>
Envelope-to: mario.mihaljevic@h1telekom.hr
Delivery-date: Tue, 03 Mar 2026 12:44:44 +0100
Received: from mail-northeuropeazhn15010008.outbound.protection.outlook.com ([52.102.160.8]:3614 helo=DB3PR0202CU003.outbound.protection.outlook.com)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <bounces+SRS=6Cu0i=BD@ROCKWOOL.onmicrosoft.com>)
id 1vxOB9-0008C2-1z
for mario.mihaljevic@h1telekom.hr;
Tue, 03 Mar 2026 12:44:44 +0100
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=Fh1RtisrNdHxIzY59NTZ7VXU3ZPGDKDXTHU+jvfOY2ujFcGnAHB2qlbIast0YsL+RXqb11eIPFi4yxtDgB6W3MHM+CjSRYgdtGGuuXdKjj4aSE21lFxrMeDadgFN7UvlLukNIHOZ00dytQoPj0oR4UjcMDYwsZFdIYedAAhxZbrDv3ZBAmDrZrbgmyi5t7udQYtrZpNhbxHxC5+hhBTVaUNcaMw84mflVnuToTOJ/IfhUL+avLWa4lLu/wphLM0chvP1hqxfax8r4SmQN7kZ7Pf7fv9JTmspyBZt8iMQsE77D6Up+bSz5SIXHBBPwpLrs3HHreGXcnV7DV0GEwBgGA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=n6FGuL/tRN3Rwj5aph+orx7urBOhqCd7XNcqsbZ3AfE=;
b=KDqQabb5/BHka5RrzN+HPgBpxvF5iodVFpXPm+lfB8uPkQBTkuXreLlYc+ssSRKdZ6QemK2ugdIJpbsa/rwx0B3sZx87yKgn6Cb4lcmrbACsLCOzLfa2lpL9ZRP09Xfl6O6DuSY0kzjoZNTatZW2mCK4l17HfYBMzBjh8eKMUNABcou8AzWQoeVteMIHEsV1rnV4RaUBEIubDCQuqoMAaX2Ifmp/A9pW5ASpLQpVnd/252oqFqJcgDR414Y2ARmmr0rHNqXowgcSoT2sTLl+puNI6b2N4GoLJgfjgHktYPrlIWbX9t0SgjQyC+sp4RpvGdHnWZxyIpt/IYHeRX4t8w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
195.191.109.191) smtp.rcpttodomain=scarlet.be smtp.mailfrom=freebit.com;
dmarc=none action=none header.from=freebit.com; dkim=none (message not
signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=ROCKWOOL.onmicrosoft.com; s=selector2-ROCKWOOL-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=n6FGuL/tRN3Rwj5aph+orx7urBOhqCd7XNcqsbZ3AfE=;
b=Ozswo1P3hv+emzSFDrSdBhxiKLH5v34BjUcWemsVzoEP6/Y6AVrtfMMr+z6pDoPkfU6Bydxw2YPoNNsi4qJgYIdbUwaQw7eVrJ9vYaUHC2C+rnBNNXsN3nJek1ZF6/3TvqH5AzeMaQg6ffCP/cjhx4llUjRDxSLCjoZbi0WSyJw=
Received: from DU7P194CA0016.EURP194.PROD.OUTLOOK.COM (2603:10a6:10:553::19)
by AMBPR04MB12208.eurprd04.prod.outlook.com (2603:10a6:20b:75a::15) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9654.22; Tue, 3 Mar
2026 11:44:41 +0000
Received: from DU2PEPF00028D0C.eurprd03.prod.outlook.com
(2603:10a6:10:553:cafe::95) by DU7P194CA0016.outlook.office365.com
(2603:10a6:10:553::19) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.9654.21 via Frontend Transport; Tue,
3 Mar 2026 11:44:41 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 195.191.109.191)
smtp.mailfrom=freebit.com; dkim=none (message not signed)
header.d=none;dmarc=none action=none header.from=freebit.com;
Received-SPF: None (protection.outlook.com: freebit.com does not designate
permitted sender hosts)
Received: from webmail1.rockwool.com (195.191.109.191) by
DU2PEPF00028D0C.mail.protection.outlook.com (10.167.242.20) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.9632.12 via Frontend Transport; Tue, 3 Mar 2026 11:44:41 +0000
Received: from RDCEX0002.rwgroup.org (10.178.24.59) by RDCEX0002.rwgroup.org
(10.178.24.59) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.17; Tue, 3 Mar
2026 12:44:26 +0100
Received: from [158.94.208.175] (10.178.24.5) by RDCEX0002.rwgroup.org
(10.178.24.59) with Microsoft SMTP Server id 15.2.2562.17 via Frontend
Transport; Tue, 3 Mar 2026 12:44:25 +0100
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <infon@freebit.com>
From: John Patrick Tierney <infon@freebit.com>
Date: Tue, 3 Mar 2026 03:44:12 -0800
Reply-To: <consultantinfofinancial@gmail.com>
Message-ID: <f0268754-b6d6-4ac3-829e-be6e243ce401@RDCEX0002.rwgroup.org>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DU2PEPF00028D0C:EE_|AMBPR04MB12208:EE_
X-MS-Office365-Filtering-Correlation-Id: 4f3e3395-15d6-4757-3045-08de791a41f3
X-MS-Exchange-SenderADCheck: 2
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|82310400026|32650700017|35950700016|61400799027|376014|7416014|48200799018|54012099003|62346030;
X-Microsoft-Antispam-Message-Info:
=?iso-8859-1?Q?Khc9aK9+ZE6kMFuqN+Y4TMZLpTmpPqHxFIALk2Ewzd7/KYpuqwv70Q+bKh?=
=?iso-8859-1?Q?GrPXc25mnW89n1kOl+kK/VaxqRP4uyzeaCYqiyDlRIWY+qUxxJ8ddWOvZS?=
=?iso-8859-1?Q?k5/ZCRW5iEKIfTkAiIulwCWo8vdji7B7ujd5k52oIqCTlvtcCyrsqKnnw4?=
=?iso-8859-1?Q?LpX+wczICYJsaZv2LxeD/HUhMXkD26V4GOYrjHc2bOkHT3jIqdbaxd7Ytl?=
=?iso-8859-1?Q?zLQZmYhM4MeDae2NHCEniZE5NdajI3sUXUb+LpPTpfYkpuTQLF4d5vElAA?=
=?iso-8859-1?Q?ku2QshV6siT5DMqEYD9BZpG4nKJiwImL4j/uL+T8yH/M/Y7NzqOUMO5E+X?=
=?iso-8859-1?Q?BNCRqMH/FXbxEUsx5eZs05Q4A1T7z6zKDD7ydt5gzS/kLLJTEW0e6xc7yO?=
=?iso-8859-1?Q?H2ZLDqWxEycSxKzWV9vXd4t4nF/F25mug3Arbtt75mleVWwNUz5EbsbslI?=
=?iso-8859-1?Q?iikQZUMXuK2anmeqbxQVNixIKpZR0J82G1J9OR43y8FYawWFhiKojrX6jC?=
=?iso-8859-1?Q?XGaSJ93QnyE2fjAh1d0YuTIGkyvi9TUJMenodAQBUXvW51I1HXe+fIaAWD?=
=?iso-8859-1?Q?XRvfbq/IMBCY4vOBZdNgPgT1ShX9DWTVDSavZjJ0Go7GDwyIejy2+lzkEv?=
=?iso-8859-1?Q?p5rEUJpRstb4kBhQeMUL/9AtpoTHexitnjPwWhAgDtDOCvrjaSFRQ0Ns5y?=
=?iso-8859-1?Q?FQ+xLPzxzb6lMA4HxooFsf8ril69tS2re4fremamMiaTBZXoEKMGzfhfdX?=
=?iso-8859-1?Q?0JRXaRQTbzXxlNPZnZ4rRQRuBh8h1tXDFTxKKDnN6kIEodjgu3PnId3mN3?=
=?iso-8859-1?Q?uUVp0gS0qP66Y3Q4VuYgogPmcKQh1uReqDr2H96ApVgjxS5KKkqxWxqX6w?=
=?iso-8859-1?Q?zKFL5vUWmcwQmwetuWmFr338MKiVWiCO7h/8GzM7Gw9O17gvvTN7WYQBej?=
=?iso-8859-1?Q?fnyKbuT494Nb/3FCMCPKXgZ8XXBlDNDlMghOKpLx1dEm6HWLzIFiZcS/d8?=
=?iso-8859-1?Q?442yAVT6YUdIA4eVurY9uz4XOfhmkr0MSnq1Tby1IqiFy+lof1HOu81VZ/?=
=?iso-8859-1?Q?v0P0eKndGkNhGMvxP2httsx/1XYwbya88BAQWWuHxh3Dzrz7Jxmajl9xQR?=
=?iso-8859-1?Q?YMKSKe+y4OomsL0/MONkRakLWAjKXncbrhaSBOa+28uQWmq/GLhVKVKQH+?=
=?iso-8859-1?Q?iEs2KH9zGN2cCfR6x/jxh7jiEOAKh9ZyzsX22kGAHfCxCZ15BOJtscOEpF?=
=?iso-8859-1?Q?KOvDKtJVdP9AJrZG6yT/FhWOtdMDkthaBvdKLs3bM3ZorJXQfI9q3nRMXi?=
=?iso-8859-1?Q?GYVN?=
X-Forefront-Antispam-Report:
CIP:195.191.109.191;CTRY:DK;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:webmail1.rockwool.com;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230040)(82310400026)(32650700017)(35950700016)(61400799027)(376014)(7416014)(48200799018)(54012099003)(62346030);DIR:OUT;SFP:1501;
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0:
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
X-OriginatorOrg: ROCKWOOL.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Mar 2026 11:44:41.5100
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4f3e3395-15d6-4757-3045-08de791a41f3
X-MS-Exchange-CrossTenant-Id: ec85c1f0-148f-4d0f-b9f5-bfd62a99ed8c
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=ec85c1f0-148f-4d0f-b9f5-bfd62a99ed8c;Ip=[195.191.109.191];Helo=[webmail1.rockwool.com]
X-MS-Exchange-CrossTenant-AuthSource:
DU2PEPF00028D0C.eurprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AMBPR04MB12208
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attention: I'm Attorney John Patrick Tierney, a credible attorney
assigned by National Centre For Victims Of Crime (NCVOC) to guide you for
your compensation fund by the United States Financial Intelligence Unit [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 MILLION_USD BODY: Talks about millions of dollars
0.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[52.102.160.8 listed in bl.score.senderscore.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[52.102.160.8 listed in sa-accredit.habeas.com]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
1.7 MONEY_NOHTML Lots of money in plain text
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 XFER_LOTSA_MONEY Transfer a lot of money
3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** ARE YOU AWARE OF THE COMPENSATION FUNDS?
X-From-Rewrite: unmodified, forwarded message
Attention:
I'm Attorney John Patrick Tierney, a credible attorney assigned by National=
Centre For Victims Of Crime (NCVOC) to guide you for your compensation fun=
d by the United States Financial Intelligence Unit on Cyber Crime and Inter=
net Fraud. So I'm your legal representative at this point.
I'm sure that you are not aware of the $1,000.000.00-One Million United Sta=
tes Dollars that has been Approved by the United States Government to compe=
nsate you and One Thousand other Cyber Crime Victims for all that have been=
lost to Internet Scammers. We recovered $1 Billion Dollars from Internet F=
raud Stars this year and we will share the money to One Thousand Lucky Inte=
rnet scam victims which you are one of them.
My reason for contacting you today is to inform you that I have a better op=
tion in which you will receive the Compensation funds, If you are intereste=
d in receiving your compensation funds of One Million United States Dollars=
, You should get back to me so that I will give you the best option to rece=
ive your fund without spending much money.
I await your swift response.
Best Regards
Attorney John Patrick Tierney
Principal Attorney The Tierney Law Group,LLC
Address: 1259 US Highway 46, Bldg , # 133,
Parsippany New Jersey 07054 USA
For information about how the ROCKWOOL Group processes your personal data, =
please refer to our Privacy Statement<https://www.rockwool.com/group/privac=
y-statements-of-rockwool-companies/>.