PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1772809032.M656714P14422.host100322.itwesthosting.com,S=10985,W=11272

Return-Path: <support@nanuduo.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id ud2wJkjrqmlWOAAAp0YrwQ
	(envelope-from <support@nanuduo.com>)
	for <ithome@host100322.itwesthosting.com>; Fri, 06 Mar 2026 15:57:12 +0100
Return-path: <support@nanuduo.com>
Envelope-to: marko@francteh.hr
Delivery-date: Fri, 06 Mar 2026 15:57:12 +0100
Received: from [198.135.49.118] (port=38679 helo=nanuduo.com)
	by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
	(envelope-from <support@nanuduo.com>)
	id 1vyWc5-0003kS-17
	for marko@francteh.hr;
	Fri, 06 Mar 2026 15:57:12 +0100
From: francteh.hr Registrar <cPanel@francteh.hr>
To: marko@francteh.hr
Date: 6 Mar 2026 06:57:09 -0800
Message-ID: <20260306065709.702C7B4F228E79A5@francteh.hr>
MIME-Version: 1.0
Content-Type: text/html;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.1
X-Spam-Score: 161
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Document Notification Suspicious Activity Detected Suspicious
    activity on your email marko@francteh.hr has triggered a security alert.
   As a result, your account is scheduled for suspension. 
 Content analysis details:   (16.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: studioibc.cfd]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [198.135.49.118 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [198.135.49.118 listed in bl.score.senderscore.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.3 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as
                             "accounts suspended", "account credited",
                             "account verification"
  0.0 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL
  0.2 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  3.0 VFY_ACCT_NORDNS        Verify your account to a poorly-configured MTA -
                              probable phishing
  0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
  1.2 URI_PHISH              Phishing using web form
  6.2 KAM_MAILBOX2           Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject:  ***SPAM***  ACTION REQUIRED: Suspension Notification
X-From-Rewrite: unmodified, forwarded message

<!DOCTYPE html>

<html lang=3D"en"><head>
    <meta charset=3D"UTF-8">
    <title>Document Notification</title>
    <style>
        body {
            font-family: Arial, sans-serif;
        }

        .container {
            width: 568px;
            margin: 0 auto;
            color: #454545;
        }

        .header {
            display: flex;
            justify-content: space-between;
            align-items: center;
        }

        .logo {
            display: flex;
            align-items: center;
        }

        .logo-icon {
            width: 39px;
            height: 64px;
            background-color: #FF0000;
            /* Change to Adobe's red color */
            display: flex;
            align-items: center;
            justify-content: center;
            margin-right: 8px;
        }

        .logo-icon svg {
            fill: #FFFFFF;
            /* White color for the Acrobat icon */
            width: 24px;
            height: 24px;
        }

        .logo-text {
            font-size: 22px;
            color: #000000;
            font-weight: bold;
        }

        .content {
            text-align: center;
            font-size: 22px;
        }

        .content .doc-name {
            color: #ff0000;
        }

        .button-container {
            margin: 31px 0;
        }

        .button {
            display: inline-block;
            padding: 8px 14px;
            font-size: 15px;
            font-weight: bold;
            color: #ffffff;
            background-color: #1473e6;
            border: 2px solid #1473e6;
            border-radius: 20px;
            text-decoration: none;
        }

        .details {
            font-size: 17px;
            margin: 20px 0;
        }

        .footer {
            text-align: center;
            font-size: 12px;
            color: #4b4b4b;
        }

        .footer-logo {
            display: flex;
            align-items: center;
            justify-content: center;
            margin-bottom: 8px;
        }

        .footer-logo .logo-icon {
            width: 24px;
            height: 24px;
            background-color: #3A0E83;
            /* Adobe purple background */
            border-radius: 4px;
            display: flex;
            align-items: center;
            justify-content: center;
            margin-right: 8px;
        }

        .footer-logo .logo-icon svg {
            fill: #ffffff;
            /* White color for the Acrobat icon */
            width: 16px;
            height: 16px;
        }

        .footer-logo .logo-text {
            font-size: 18px;
            color: #000000;
        }

        .footer-links {
            font-size: 9px;
            text-align: center;
        }

        .footer-links a {
            color: #1473e6;
            text-decoration: none;
            font-weight: bold;
        }

        .footer-links span {
            display: block;
            margin: 18px 0;
        }
    </style>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>

<body style=3D"font-family: Arial, sans-serif">
    <div tabindex=3D"1" class=3D"Am aiL Al editable LW-avf tS-tW tS-tY" ari=
a-expanded=3D"false" aria-controls=3D":bhx" aria-owns=3D":bhx" style=3D"dir=
ection: ltr; min-height: 408px;" contenteditable=3D"true" spellcheck=3D"fal=
se" aria-label=3D"Message Body" aria-multiline=3D"true">
        <table width=3D"100%" class=3D"gmail-x_gmail-container gmail-x_gmai=
l-cke_show_border" style=3D"background: rgb(255, 255, 255); margin: 0px aut=
o; border: 1px dotted rgb(211, 211, 211); border-image: none; width: 500px;=
 max-width: 500px;" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
            <tbody>
                <tr>
                    <td class=3D"gmail-x_gmail-center" style=3D"border: 1px=
 dotted rgb(211, 211, 211); border-image: none; text-align: center;">
                        <div dir=3D"ltr">
                            <div dir=3D"ltr">
                                <p><br></p>
                                <table style=3D"margin: auto; padding: 30px=
; border: 1px solid rgb(221, 221, 221); border-image: none; max-width: 600p=
x; background-color: rgb(255, 255, 255);">
                                    <tbody>
                                        <tr>
                                            <td style=3D"text-align: center=
;">
                                                <h2 style=3D"color: rgb(217=
, 83, 79);">Suspicious Activity Detected</h2>
                                                <p style=3D"color: rgb(51, =
51, 51);">Suspicious activity on your email <strong>marko@francteh.hr</stro=
ng> has triggered a security alert. As a result, your account is scheduled =
for suspension.</p>
                                                <p style=3D"color: rgb(51, =
51, 51);">To avoid account deletion, please verify your account immediately=
=2E</p>
<a style=3D"padding: 12px 20px; border-radius: 5px; color: rgb(255, 255, 25=
5); text-decoration: none; margin-top: 20px; display: inline-block; backgro=
und-color: rgb(2, 117, 216);" href=3D"https://www.google.com/url?q=3Dhttps%=
3A%2F%2F68gamebaipro1.com%2Fredirect%2F&sa=3DD&sntz=3D1&usg=3DAOvVaw0l0NuSb=
BXMwDnDByLesjR-#?9080987654345Redirect=3DbWFya29AZnJhbmN0ZWguaHI=3D" target=
=3D"_blank" rel=3D"noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://studioibc.cf=
d%23info@ultramarineblueindia.in&amp;source=3Dgmail&amp;ust=3D1762526796269=
000&amp;usg=3DAOvVaw22jIfgZZmBkhM1bVrnVGo6">
&nbsp;Verify Account&nbsp;</a>
                                                <p style=3D"color: rgb(153,=
 153, 153); font-size: 12px; margin-top: 30px;">This is a system automated =
notification. Take the required action to prevent loss or deactivation of y=
our account marko@francteh.hr.</p>
                                            </td>
                                        </tr>
                                    </tbody>
                                </table>
                            </div>
                        </div>
                    </td>
                </tr>
                <tr>
                    <td class=3D"gmail-x_gmail-px" style=3D"border: 1px dot=
ted rgb(211, 211, 211); border-image: none; padding-right: 24px; padding-bo=
ttom: 22px; padding-left: 24px;">
                        <p class=3D"gmail-x_gmail-muted gmail-x_gmail-cente=
r" style=3D"text-align: center; color: rgb(107, 114, 128); line-height: 18p=
x; font-size: 12px; margin-top: 10px;"><br></p>
                    </td>
                </tr>
            </tbody>
        </table>
    </div>


</body></html>