PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773235477.M181232P32091.host100322.itwesthosting.com,S=4702,W=4790 |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id mBevChVtsWlbfQAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Wed, 11 Mar 2026 14:24:37 +0100
Return-path: <>
Envelope-to: info@bolnica-lipik.hr
Delivery-date: Wed, 11 Mar 2026 14:24:37 +0100
Received: from 131.42.229.35.bc.googleusercontent.com ([35.229.42.131]:55224 helo=[10.88.0.4])
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
id 1w0JYC-0008VN-2Y
for info@bolnica-lipik.hr;
Wed, 11 Mar 2026 14:24:37 +0100
Content-Type: multipart/related; boundary="===============4083423531737632133=="
MIME-Version: 1.0
From: William Chalmers <mrwilliamschalmers007@gmail.com>
To: info@bolnica-lipik.hr
X-Priority: 2
X-Spam-Status: Yes, score=13.7
X-Spam-Score: 137
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Dear Sir/ Madam, I am William Chalmers, the Director and CFO
here in the UK. I previously reached out to you via email regarding a significant
business (investment) opportunity that aligned with your profile and our
i [...]
Content analysis details: (13.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[mrwilliamschalmers007[at]gmail.com]
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[35.229.42.131 listed in zen.spamhaus.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.229.42.131 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.229.42.131 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
1.4 MISSING_DATE Missing Date: header
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing
list
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?q?Re=3A_=28investment=29_opportunity?=
X-From-Rewrite: unmodified, forwarded message
--===============4083423531737632133==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============4083423531737632133==--