PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1772716218.M21016P18944.host100322.itwesthosting.com,S=7633,W=7761

Return-Path: <kolo@mail.vromien.cc>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id kBwbAbqAqWkASgAAp0YrwQ
	(envelope-from <kolo@mail.vromien.cc>)
	for <ithome@host100322.itwesthosting.com>; Thu, 05 Mar 2026 14:10:18 +0100
Return-path: <kolo@mail.vromien.cc>
Envelope-to: info@h1telekom.hr
Delivery-date: Thu, 05 Mar 2026 14:10:18 +0100
Received: from vromien.cc ([85.137.164.119]:35941 helo=mail.vromien.cc)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <kolo@mail.vromien.cc>)
	id 1vy8T5-00050D-0N
	for info@h1telekom.hr;
	Thu, 05 Mar 2026 14:10:17 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=gmail.com;
 h=Content-Type:MIME-Version:From:To:Subject; i=lianymistress@gmail.com;
 bh=GfPH+2G+MdtPtxncDpJTAkjncbm96Up97oQYU03HyUQ=;
 b=pk2vyBXeUSt/JxH1ehKQD4Wkz50EivKQII97exWPek2opAE56LOh8rMT4S29LduoLUlrYG3NZCuG
   c4FYcphwZpYONgpXqsx0R1dDKEnkqnHsKI4pA8FvzYRaXlqAkaFK020qBp/UVH9gZCo7dfRd6CIU
   Q7vYo60A40zy99dBQk7hgPYumr0M7P7pjRxUI8PQfYclh2+wHbfwVHGCV8Zd74F0niiYeIK+eNS1
   VlzNK/gAPLowZMeY5017eOlJRQffb1GwgCVVfyoTHNcFBrsips8mvQEUJrmc8ThyjvU+6UtcQxZ0
   KJ6tT2ww5i3zzZTDZH9UjHE0d9WEVktPbWCTnQ==
Received: by mail.vromien.cc for <info@h1telekom.hr>; Thu, 5 Mar 2026 14:10:16 +0100 (envelope-from <kolo@mail.vromien.cc>)
Content-Type: multipart/related; boundary="===============8273814469628053539=="
MIME-Version: 1.0
From: "R.Oliver ." <lianymistress@gmail.com>
To: info@h1telekom.hr
X-Priority: 2
X-Spam-Status: Yes, score=7.1
X-Spam-Score: 71
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good day, info@h1telekom.hr We have an outstanding invoice
    for December 2025. Kindly review the attached invoice and let us know when
    payment would be remitted. Thanks 
 Content analysis details:   (7.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail
                             provider
                             [lianymistress[at]gmail.com]
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  1.0 FORGED_GMAIL_RCVD      'From' gmail.com does not match 'Received'
                             headers
  0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                              CUSTOM_MED
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [85.137.164.119 listed in bl.score.senderscore.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [85.137.164.119 listed in sa-accredit.habeas.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
                             EnvelopeFrom freemail headers are
                             different
  1.4 MISSING_DATE           Missing Date: header
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing
                             list
  0.0 SPOOFED_FREEMAIL       No description available.
  0.3 SPOOF_GMAIL_MID        From Gmail but it doesn't seem to be...
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?q?Invoice_No=3A_TU-9078-2025?=
X-From-Rewrite: unmodified, forwarded message

--===============8273814469628053539==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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==

--===============8273814469628053539==--