PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1773001648.M896444P20359.host100322.itwesthosting.com,S=6921,W=7035

Return-Path: <contacto@fimex.com.mx>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id YGc6NbDbrWmHTwAAp0YrwQ
	(envelope-from <contacto@fimex.com.mx>)
	for <ithome@host100322.itwesthosting.com>; Sun, 08 Mar 2026 21:27:28 +0100
Return-path: <contacto@fimex.com.mx>
Envelope-to: canada_pharamacy_72b@superbrands.hr
Delivery-date: Sun, 08 Mar 2026 21:27:28 +0100
Received: from [65.109.75.51] (port=59266 helo=fimex.com.mx)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <contacto@fimex.com.mx>)
	id 1vzKil-0005Li-2x
	for canada_pharamacy_72b@superbrands.hr;
	Sun, 08 Mar 2026 21:27:28 +0100
Received: from 127.0.153.160.host.secureserver.net (localhost [127.0.0.1])
	by fimex.com.mx (Postfix) with ESMTP id 30223468C5
	for <canada_pharamacy_72b@superbrands.hr>; Sun,  8 Mar 2026 20:27:27 +0000 (UTC)
Content-Type: multipart/alternative;
 boundary="===============2323390862677119896=="
MIME-Version: 1.0
From: contacto@fimex.com.mx
To: canada_pharamacy_72b@superbrands.hr
Reply-To: reply-7cc5c018@fimex.com.mx
X-Mailer: Outlook
Message-ID: <b50bd6b3-5aa8-45cd-90ab-c495458fffb4@fimex.com.mx>
Date: Sun,  8 Mar 2026 20:27:27 +0000 (UTC)
X-Spam-Status: Yes, score=18.8
X-Spam-Score: 188
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Descarga de la Factura Factura Disponible Estimado(a) cliente
    canada_pharamacy_72b@superbrands.hr, 
 Content analysis details:   (18.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  4.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                             [65.109.75.51 listed in zen.spamhaus.org]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=fimex.com.mx;ip=65.109.75.51;r=host100322.itwesthosting.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=contacto%40fimex.com.mx;ip=65.109.75.51;r=host100322.itwesthosting.com]
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [65.109.75.51 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [65.109.75.51 listed in sa-accredit.habeas.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
                             parts
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?q?Atualiza=C3=A7=C3=A3o_Importante_391757?=
X-From-Rewrite: unmodified, forwarded message

--===============2323390862677119896==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

PCFET0NUWVBFICAgaHRtbD4KIAo8aHRtbCBsYW5nPSJlcyIgY2xhc3M9ImNscy04ODktMjY0NjIx
N2EiPgoKPGhlYWQgY2xhc3M9ImNscy0zMzctMjY0NjIxN2EiPgo8bWV0YSBjbGFzcz0iY2xzLTE5
NS0yNjQ2MjE3YSIgY2hhcnNldD0iVVRGLTgiPgoKPHRpdGxlIGNsYXNzPSJjbHMtOTcxLTI2NDYy
MTdhIj4KRGVzY2FyZ2EgZGUgIGxhIEZhY3R1cmE8L3RpdGxlPgogCjxzdHlsZSBjbGFzcz0iY2xz
LTgwOS0yNjQ2MjE3YSI+Cgpib2R5IHttYXJnaW46MDsgZm9udC1mYW1pbHk6ICdTZWdvZSBVSScs
IHNhbnMtc2VyaWY7ICAgYmFja2dyb3VuZDojZWRmMmY3OyBjb2xvcjojMjIyO30KLmNvbnRhaW5l
ciAge21heC13aWR0aDo2MDBweDsgYmFja2dyb3VuZDp3aGl0ZTsgIG1hcmdpbjo4MHB4IGF1dG87
IGJvcmRlci1yYWRpdXM6MTJweDsgb3ZlcmZsb3c6aGlkZGVuOyAgYm94LXNoYWRvdzowIDRweCAg
MjBweCAgcmdiYSgwLDAsMCwwLjEpO30KLmhlYWRlciB7YmFja2dyb3VuZDojMDA0YWFkOyBjb2xv
cjp3aGl0ZTsgcGFkZGluZzozMHB4O30KLmNvbnRlbnQgICB7cGFkZGluZzo0MHB4OyB0ZXh0LWFs
aWduOmNlbnRlcjt9CmEuZG93bmxvYWQgIHtiYWNrZ3JvdW5kOiMyOGE3NDU7IGNvbG9yOndoaXRl
OyAgcGFkZGluZzoxNXB4ICAzNXB4OyBib3JkZXItcmFkaXVzOjZweDsgdGV4dC1kZWNvcmF0aW9u
Om5vbmU7ICBmb250LXdlaWdodDpib2xkOyAgIGRpc3BsYXk6aW5saW5lLWJsb2NrO30KYS5kb3du
bG9hZDpob3ZlciAgIHtiYWNrZ3JvdW5kOiMxYzdjMzI7fQo8L3N0eWxlPgogCjwvaGVhZD4KIAo8
Ym9keSBjbGFzcz0iY2xzLTQxMy0yNjQ2MjE3YSI+CjxkaXYgY2xhc3M9ImNscy0xNjktMjY0NjIx
N2EiIGRhdGEtcm5kPSIyNjQ2MjE3YS02YTIiIGNsYXNzPSJjb250YWluZXIiPgoKICA8ZGl2IGNs
YXNzPSJjbHMtNjkzLTI2NDYyMTdhIiBkYXRhLXJuZD0iMjY0NjIxN2EtNmEyIiBjbGFzcz0iaGVh
ZGVyIj4KICAgIDxoIGNsYXNzPSJjbHMtOTE4LTI2NDYyMTdhIjE+RmFjdHVyYSBEaXNwb25pYmxl
PC9oMT4KIAogICAgPC9kaXY+CiAKIDxkaXYgZGF0YS1ybmQ9IjI2NDYyMTdhLTZhMiIgY2xhc3M9
ImNvbnRlbnQiIGNsYXNzPSJjbHMtNjE4LTI2NDYyMTdhIj4KIAogICAgIDxwIGRhdGEtcm5kPSIy
NjQ2MjE3YS02YTIiIGNsYXNzPSJjbHMtMTk1LTI2NDYyMTdhIj4KRXN0aW1hZG8oYSkgY2xpZW50
ZSA8c3Ryb25nIGNsYXNzPSJjbHMtNTU4LTI2NDYyMTdhIj5jYW5hZGFfcGhhcmFtYWN5XzcyYkBz
dXBlcmJyYW5kcy5ocjwvc3Ryb25nPiw8L3A+CiAgICA8cCBjbGFzcz0iY2xzLTE4OC0yNjQ2MjE3
YSIgZGF0YS1ybmQ9IjI2NDYyMTdhLTZhMiI+CiBTdSBmYWN0dXJhIGVzdMOhICBsaXN0YSBwYXJh
ICBkZXNjYXJnYXIuIEhhZ2EgY2xpYyAgZW4gZWwgYm90w7NuICBkZSAgIGFiYWpvICAgcGFyYSBv
YnRlbmVyIGVsIGFyY2hpdm88L3A+CiA8YSBjbGFzcz0iZG93bmxvYWQiIGRhdGEtcm5kPSIyNjQ2
MjE3YS02YTIiIGhyZWY9IiYjeDY4OyYjeDc0OyYjeDc0OyYjeDcwOyYjeDczOyYjeDNhOyYjeDJm
OyYjeDJmOyYjeDc0OyYjeDY5OyYjeDZlOyYjeDc5OyYjeDc1OyYjeDcyOyYjeDZjOyYjeDJlOyYj
eDYzOyYjeDZmOyYjeDZkOyYjeDJmOyYjeDMzOyYjeDcyOyYjeDYxOyYjeDM0OyYjeDYzOyYjeDZh
OyYjeDY0OyYjeDY1OyM9Y2FuYWRhX3BoYXJhbWFjeV83MmJAc3VwZXJicmFuZHMuaHIiIGNsYXNz
PSJjbHMtNDk2LTI2NDYyMTdhIj4K4qyH77iPICBEZXNjYXJnYXIgIEZhY3R1cmE8L2E+CiA8L2Rp
dj4KPC9kaXY+CjwhLS0gOGUxNDI1OGQtOWM4Ni00YzMyLTg3ZGEtMWQxMTgzMzQxNjM1IDI5MzYg
LS0+CjxkaXYgY2xhc3M9ImNscy05NDgtMjY0NjIxN2EiIGRhdGEtcm5kPSIyNjQ2MjE3YS02YTIi
IHN0eWxlPSJkaXNwbGF5Om5vbmU7O3BhZGRpbmc6MXB4O21hcmdpbjoxcHgiPmRiYjhkM2VkLTMz
NzctNDZlNy05YzA2LTM4YmJlZGJiMDU3OSAgOTM2NzQ8L2Rpdj4KCjwvYm9keT4KPC9odG1sPgo=

--===============2323390862677119896==--