PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1772545637.M912657P30443.host100322.itwesthosting.com,S=5744,W=5849

Return-Path: <bilgi@evdershanem.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id IL5KNmXmpmnrdgAAp0YrwQ
	(envelope-from <bilgi@evdershanem.com>)
	for <ithome@host100322.itwesthosting.com>; Tue, 03 Mar 2026 14:47:17 +0100
Return-path: <bilgi@evdershanem.com>
Envelope-to: info@h1telekom.hr,
 20info@h1telekom.hr
Delivery-date: Tue, 03 Mar 2026 14:47:17 +0100
Received: from ip-193-53-87-126.muvdns.com ([193.53.87.126]:43533 helo=agitated-wright.193-53-87-126.plesk.page)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.96.2)
	(envelope-from <bilgi@evdershanem.com>)
	id 1vxQ5l-000871-29;
	Tue, 03 Mar 2026 14:47:17 +0100
Received: from DESKTOP-LEA11UH.wan (unknown [196.96.85.20])
	by agitated-wright.193-53-87-126.plesk.page (Postfix) with ESMTPA id 31C0A163ED0F;
	Tue,  3 Mar 2026 10:35:27 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=evdershanem.com;
	s=evdershanem; t=1772534165;
	bh=A+DCgskDdCELF43gxJVYyzfvVMKKX0VUpjtdUFra1W0=; h=Subject:To:From;
	b=KMvMP1/QTdrgjy5wjc7YyINFnWacCdNuDXslF9dkYsxsZD/6dRcJz23ZMvZOA2ZHN
	 NO/dXiKOgphKKPCcXnNFfecjXuXHvnp7h3LQ305aYw19hcT8nTVH3XG8TrCTAmDAeP
	 XwtUiXouJp60XUtPZIODyx4wGy865THtfDBCbW73KqRmyB0WUu9GMfhYYUqNY2ZfuZ
	 ZSgu+yihaeKjFasJcofQJkSBbsPFmM+XAPzO/6qt5f0OzluLUIbOeWVZqlp4MJJZS9
	 Iie8sGhYNTNJ93zs8ksajMCNOx3xI7AROG6TiBpCRVqlAnrqra7ujLtC+nOlm1d+Uz
	 EPtNjC1xq+XsQ==
Authentication-Results: agitated-wright.193-53-87-126.plesk.page;
        spf=pass (sender IP is 196.96.85.20) smtp.mailfrom=bilgi@evdershanem.com smtp.helo=DESKTOP-LEA11UH.wan
Received-SPF: pass (agitated-wright.193-53-87-126.plesk.page: connection is authenticated)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <bilgi@evdershanem.com>
From: "Sigrid Rausing" <bilgi@evdershanem.com>
Date: Tue, 03 Mar 2026 13:35:10 +0300
Reply-To: srausing@hotmail.com
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  I have a financial proposition for you. Your email was provided
    as an active user on the internet by google LLC. Reply for more information
    Mrs Sigrid Rausing srausing@hotmail.com 
 Content analysis details:   (14.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: evdershanem.com]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URIs: evdershanem.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?193.53.87.126>]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URIs: evdershanem.com]
  0.1 URIBL_CSS              Contains an URL's NS IP listed in the Spamhaus CSS
                             blocklist
                             [URIs: evdershanem.com]
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [193.53.87.126 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [193.53.87.126 listed in sa-accredit.habeas.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  I have been looking for you!
X-From-Rewrite: unmodified, forwarded message

I have a financial proposition for you.
Your email was provided as an active user on the internet by google LLC.
Reply for more information

Mrs Sigrid Rausing
srausing@hotmail.com