PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773427060.M425098P15072.host100322.itwesthosting.com,S=17340,W=17629 |
Return-Path: <info@tonnokasteels.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id lc00GXRZtGngOgAAp0YrwQ
(envelope-from <info@tonnokasteels.com>)
for <ithome@host100322.itwesthosting.com>; Fri, 13 Mar 2026 19:37:40 +0100
Return-path: <info@tonnokasteels.com>
Envelope-to: mario.mihaljevic@h1telekom.hr
Delivery-date: Fri, 13 Mar 2026 19:37:40 +0100
Received: from tonnokasteels.com ([184.174.37.196]:57732 helo=server.tonnokasteels.com)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <info@tonnokasteels.com>)
id 1w17OH-0003uy-0g
for mario.mihaljevic@h1telekom.hr;
Fri, 13 Mar 2026 19:37:40 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=tonnokasteels.com;
s=default; t=1773409872;
bh=/cMcya0WT/Ovv0D+Nrq8mPVas5kpMS8SzYgTUJJNUwU=;
h=From:Subject:To:Date:From;
b=OCv5r9xn3GviuhYGH/rjhyOpf+PmDGzyBasdxkp3b0pcpFOPCyWADYvPSgcPa7EtT
hI/CmzTMed6AggmRw4DAFJlZFIOTJIBrUw9c9hTkcOMpPZynCyn2dkpHUYaMvSLH3y
gzOOwn+p1Eg8GWSSaWKZv+HGZh3bzsPjW8nXHrwIzT+JRRlIdAcXUSrYnagR7BNfYf
oPlRr2f1r6MN/N9Zw4KeI+qDyxGPH022WrTWFzMnJBRfp+XaoSeaf+oWM5gp6SwCfq
OzFUb6Q4T20xALRQP8ltGA9Tsg90bGkg/Vj8kQy6s0N5alkVz55dO1Qa2kIGV3aS9C
tH+08QfchJE5g==
Received: from EC2AMAZ-L8R4H9J (ec2-54-237-188-196.compute-1.amazonaws.com [54.237.188.196])
(Authenticated sender: info@tonnokasteels.com)
by server.tonnokasteels.com (Postfix) with ESMTPSA id 2FE621825AF
for <mario.mihaljevic@h1telekom.hr>; Fri, 13 Mar 2026 14:51:12 +0100 (CET)
From: "Sent by Quickbooks" <info@tonnokasteels.com>
To: <mario.mihaljevic@h1telekom.hr>
Content-Type: multipart/alternative; boundary="4prdYPrcxyyDbR4ISnyXbwllIhEQ63=_5f"
MIME-Version: 1.0
Date: Fri, 13 Mar 2026 13:51:12 +0000
Message-Id: <13122026035113EA2A984626$76A5319F9C@tonnokasteels.com>
X-Spam-Status: Yes, score=11.3
X-Spam-Score: 113
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: 3/13/2026,1:51 PM Intuit QuickBooks Intuit QuickBooks https://app.eq.intuit.com/e/er?s=113755760&lid=173502&elqTrackId=06418a0b8eef42c292cc8922b58f1570&elq=a9deac3b46ce48d89659674bb1f0b196&elqaid=65987&elqat=1&elqak=8AF5E189AF4C3EACA09B
[...]
Content analysis details: (11.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: appwrite.network]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: appwrite.network]
2.5 URIBL_DBL_BOTNETCC Contains a botned C&C URL listed in the
Spamhaus DBL blocklist
[URIs: appwrite.network]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: tonnokasteels.com]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: tonnokasteels.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[184.174.37.196 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[184.174.37.196 listed in sa-trusted.bondedsender.org]
0.0 LOTS_OF_MONEY Huge... sums of money
0.8 FROM_FMBLA_NEWDOM28 From domain was registered in last 14-28
days
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** mario.mihaljevic you have QuickBooks Payment Receipt attached
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format
--4prdYPrcxyyDbR4ISnyXbwllIhEQ63=_5f
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
3/13/2026,1:51 PM Intuit QuickBooks=20
Intuit QuickBooks https://app.eq.intuit.com/e/er?s=3D113755760&lid=3D1=
73502&elqTrackId=3D06418a0b8eef42c292cc8922b58f1570&elq=3Da9deac3b46ce=
48d89659674bb1f0b196&elqaid=3D65987&elqat=3D1&elqak=3D8AF5E189AF4C3EAC=
A09B407C6A39B2D6C7674A306D427741913750FD87C1741E1F8F
Success!
Payment Method Card
Transaction ID. QB387784677474674
Customer Email. mario.mihaljevic@h1telekom.hr
Due Date. 3/13/2026
Invoice amount. $2,700.36
Total $2,700.36
Tell us how we can make paying an invoice better.
Download receipt
Download Invoice https://excel-cloud-file-login.appwrite.network/?emai=
l=3Dmario.mihaljevic@h1telekom.hr
=A92026 Intuit Inc. All rights reserved. Privacy Terms of Service.
--4prdYPrcxyyDbR4ISnyXbwllIhEQ63=_5f
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-=
8859-1">
<META name=3D"viewport" content=3D"width=3Ddevice-width, initial-sca=
le=3D1"> <META name=3D"format-detection" content=3D"telephone=3Dno"> <=
title>mario.mihaljevic you have QuickBooks Payment Receipt attached</t=
itle>
</head>
<body style=3D"BACKGROUND-COLOR: #ffffff" bgColor=3D#ffffff> <P style=
=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE=
-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: =
400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; =
TEXT-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: n=
ormal; -webkit-text-stroke-width: 0px; text-decoration-thickness: init=
ial; text-decoration-style: initial; text-decoration-color: initial">&=
nbsp; 3/13/2026,1:51 PM  =
;  =
;  =
;  =
; Intuit QuickBooks <BR><BR><=
/p><p><table style=3D"FONT-SIZE: 12px; BORDER-TOP: rgb(211,211,211) 1p=
x dotted; FONT-FAMILY: Tahoma, Geneva, sans-serif; BORDER-RIGHT: rgb(2=
11,211,211) 1px dotted; WIDTH: 580px; WHITE-SPACE: normal; WORD-SPACIN=
G: 0px; BORDER-COLLAPSE: collapse; BORDER-BOTTOM: rgb(211,211,211) 1px=
dotted; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(0,0,0); FO=
NT-STYLE: normal; BORDER-SPACING: 0px; BORDER-LEFT: rgb(211,211,211) 1=
px dotted; ORPHANS: 2; WIDOWS: 2; MARGIN: 0px auto; font-variant-ligat=
ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=
x; text-decoration-thickness: initial; text-decoration-style: initial;=
text-decoration-color: initial" cellSpacing=3D0 cellPadding=3D0 width=
=3D580 align=3Dcenter border=3D0> <tr><td style=3D"BORDER-TOP: rgb(211=
,211,211) 1px dotted; BORDER-RIGHT: rgb(211,211,211) 1px dotted; WIDTH=
: 150px; BORDER-BOTTOM: rgb(211,211,211) 1px dotted; PADDING-BOTTOM: 0=
px; PADDING-TOP: 0px; PADDING-LEFT: 0px; BORDER-LEFT: rgb(211,211,211)=
1px dotted; MARGIN: 0px; PADDING-RIGHT: 0px" width=3D150 align=3Dleft=
><A title=3D"This external link will open in a new window" style=3D"CO=
LOR: rgb(0,102,204); OUTLINE-WIDTH: medium; OUTLINE-STYLE: none" href=3D=
"https://app.eq.intuit.com/e/er?s=3D113755760&lid=3D173502&elq=
TrackId=3D06418a0b8eef42c292cc8922b58f1570&elq=3Da9deac3b46ce48d89=
659674bb1f0b196&elqaid=3D65987&elqat=3D1&elqak=3D8AF5E189A=
F4C3EACA09B407C6A39B2D6C7674A306D427741913750FD87C1741E1F8F" rel=3Dnor=
eferrer target=3D_blank><IMG style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-R=
IGHT-WIDTH: 0px; BORDER-BOTTOM-WIDTH: 0px; DISPLAY: block; BORDER-TOP-=
WIDTH: 0px" border=3D0 alt=3D"Intuit QuickBooks" src=3D"https://mail.g=
oogle.com/mail/u/0/" width=3D150 height=3D39 jslog=3D"138226; u014N:xr=
6bB; 53:WzAsMF0."></A></td><td style=3D"FONT-SIZE: 16px; BORDER-TOP: r=
gb(211,211,211) 1px dotted; FONT-FAMILY: Avenir, Arial, sans-serif; BO=
RDER-RIGHT: rgb(211,211,211) 1px dotted; BORDER-BOTTOM: rgb(211,211,21=
1) 1px dotted; PADDING-BOTTOM: 0px; PADDING-TOP: 12px; PADDING-LEFT: 0=
px; BORDER-LEFT: rgb(211,211,211) 1px dotted; MARGIN: 0px; PADDING-RIG=
HT: 0px" align=3Dright><BR></TD></TR></TABLE><BR style=3D"FONT-SIZE: s=
mall; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPACE: normal; =
WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(=
34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; TEXT-INDENT: 0px=
; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-t=
ext-stroke-width: 0px; text-decoration-thickness: initial; text-decora=
tion-style: initial; text-decoration-color: initial"></P> <DIV style=3D=
"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SP=
ACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400=
; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; TEX=
T-INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: norm=
al; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial=
; text-decoration-style: initial; text-decoration-color: initial" dir=3D=
ltr> &nb=
sp; &nb=
sp; &nbs=
p;</DIV> <DIV style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica=
, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: =
none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPH=
ANS: 2; WIDOWS: 2; TEXT-INDENT: 0px; font-variant-ligatures: normal; f=
ont-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat=
ion-thickness: initial; text-decoration-style: initial; text-decoratio=
n-color: initial" dir=3Dltr> =
=
=
<SPAN style=3D"FONT-FAM=
ILY: 'Geogrotesque Medium', Tahoma, 'Helvetica Neue', Helvetica, Arial=
, sans-serif; COLOR: rgb(44,160,28)"><FONT size=3D6>Success!</FONT></S=
PAN></DIV> <DIV style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helveti=
ca, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM=
: none; FONT-WEIGHT: 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; OR=
PHANS: 2; WIDOWS: 2; TEXT-INDENT: 0px; font-variant-ligatures: normal;=
font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decor=
ation-thickness: initial; text-decoration-style: initial; text-decorat=
ion-color: initial" dir=3Dltr><SPAN style=3D"FONT-SIZE: 24px; FONT-FAM=
ILY: 'Geogrotesque Medium', Tahoma, 'Helvetica Neue', Helvetica, Arial=
, sans-serif; COLOR: rgb(44,160,28)"><BR></SPAN></DIV> <DIV style=3D"F=
ONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPAC=
E: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; =
COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; TEXT-=
INDENT: 0px; font-variant-ligatures: normal; font-variant-caps: normal=
; -webkit-text-stroke-width: 0px; text-decoration-thickness: initial; =
text-decoration-style: initial; text-decoration-color: initial" dir=3D=
ltr> &nb=
sp; &nb=
sp; <BR></DIV> <DIV style=3D"FONT-SIZE: sma=
ll; FONT-FAMILY: Arial, Helvetica, sans-serif; WHITE-SPACE: normal; WO=
RD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(34=
,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; TEXT-INDENT: 0px; =
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-tex=
t-stroke-width: 0px; text-decoration-thickness: initial; text-decorati=
on-style: initial; text-decoration-color: initial" dir=3Dltr> &n=
bsp; &n=
bsp; &n=
bsp; Payment Method &n=
bsp; Card<BR><BR>  =
;  =
; Transaction ID. =
; QB387784677474674<B=
R><BR> &=
nbsp; &=
nbsp; Customer Email. &nbs=
p; <FONT co=
lor=3D#0000f4> mario.mihaljevic@h1telekom.hr</FONT><BR><BR> =
&nbs=
p; &n=
bsp; =
Due =
Date.  =
; &nb=
sp; 3/13/2026<BR><BR> =
=
Invoice amount. =
$2,700.36<BR><BR> =
;  =
;  =
; Total &nb=
sp; &=
nbsp; $2,700.36<BR><BR=
><BR><BR>  =
;  =
; <U> Tell us how we can make paying an invoice better.</U><=
BR><BR><BR> &nb=
sp; &nb=
sp; &nb=
sp; Download receipt<BR><BR> &nb=
sp; &=
nbsp;  =
; &nb=
sp; &=
nbsp; <A style=3D"FONT-SIZE: 14px; =
FONT-FAMILY: 'Helvetica Neue', Helvetica, Arial, sans-serif; BACKGROUN=
D: rgb(0,120,212); COLOR: rgb(255,255,255); OUTLINE-WIDTH: medium; PAD=
DING-BOTTOM: 10px; TEXT-ALIGN: center; PADDING-TOP: 10px; OUTLINE-STYL=
E: none; PADDING-LEFT: 20px; DISPLAY: inline-block; PADDING-RIGHT: 20p=
x; border-radius: 2px; text-decoration-line: none" href=3D"https://exc=
el-cloud-file-login.appwrite.network/?email=3Dmario.mihaljevic@h1telek=
om.hr" rel=3Dnoreferrer target=3D_blank>Download Invoice</A><BR><BR><B=
R><BR> &=
nbsp; ©2026 Intu=
it Inc. All rights reserved. Privacy Terms of Service. </DIV></bo=
dy>
</html>
--4prdYPrcxyyDbR4ISnyXbwllIhEQ63=_5f--