| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773731276.M926420P1242.host100322.itwesthosting.com,S=10752,W=10937 |
Return-Path: <hugo.encarnacion@ccapama.gob.mx>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id QoAWN8z9uGnaBAAAp0YrwQ
(envelope-from <hugo.encarnacion@ccapama.gob.mx>)
for <ithome@host100322.itwesthosting.com>; Tue, 17 Mar 2026 08:07:56 +0100
Return-path: <hugo.encarnacion@ccapama.gob.mx>
Envelope-to: davor.baljak@h1telekom.hr
Delivery-date: Tue, 17 Mar 2026 08:07:56 +0100
Received: from rc.anti-spam-premium.com ([67.227.144.43]:54776)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <hugo.encarnacion@ccapama.gob.mx>)
id 1w2OWu-0000Jn-2n
for davor.baljak@h1telekom.hr;
Tue, 17 Mar 2026 08:07:56 +0100
Received: from svgtl68.cloud-mx-ns.net ([65.99.248.131])
by rc.anti-spam-premium.com with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.94.2)
(envelope-from <hugo.encarnacion@ccapama.gob.mx>)
id 1w2OWq-0000LH-0U
for davor.baljak@h1telekom.hr; Tue, 17 Mar 2026 03:07:50 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=ccapama.gob.mx; s=default; h=Message-ID:Date:MIME-Version:Subject:To:From:
Content-Type:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=qs3mDCxQExHtvJtG6E86mnkjbFy3RRa86/nZ+WvTF2E=; b=gx94RNBkCXnhD3CPt1oqxBWqg/
lbQBW0Vl1psbl/j4qaqn2ipLko+lVMcn4BRgGF05aYAPJn3AFPAvEIqpxz2ZPoYoZS65/ADmS1gWH
p7YuQejbvSzMjWIc3efFf6s/l6szrz1O+L4m51gsn3W6LXF3XGqZoAXUYHQfVM4aUhXckOI6HyTKD
XpUxMp6v11sw6w9/t8yO+EnPhbsKbk6q5DIHy3UuErh4tShuNuicxH2U5Ex8KYoFjVYDaj9mn2sOM
K+l0SM5Dcq9FdZUlyiN3di2MOFxNWsHN02KTFfTYR6Tku6BuyyBBlxKFN5vPtPA0zZfS7sPAyoCxT
oW1AtNKQ==;
Received: from vps-d327e587.vps.ovh.net ([51.38.231.152]:40878)
by svgtl68.cloud-mx-ns.net with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from <hugo.encarnacion@ccapama.gob.mx>)
id 1w2OHv-0000000GEGs-300L
for davor.baljak@h1telekom.hr;
Tue, 17 Mar 2026 00:52:22 -0600
Content-Type: multipart/alternative;
boundary="===============1287409254828172729=="
MIME-Version: 1.0
From: "Equipe de Notificacion" <hugo.encarnacion@ccapama.gob.mx>
To: davor.baljak@h1telekom.hr
MIME-Version: 1.0
X-Mailer: The Bat! 10.5.2
X-Priority: 3
Importance: Normal
Date: Tue, 17 Mar 2026 06:52:22 -0000 +0100
Message-ID: <177373034253.10879.167253638694874593.691ad42c@ccapama.gob.mx>
X-AuthUser: hugo.encarnacion@ccapama.gob.mx
X-Originating-IP: 65.99.248.131
X-HospedandoAntiSpam-Domain: out.anti-spam-premium.com
X-HospedandoAntiSpam-Username: 65.99.248.131
Authentication-Results: anti-spam-premium.com; auth=pass smtp.auth=65.99.248.131@out.anti-spam-premium.com
X-HospedandoAntiSpam-Outgoing-Class: ham
X-HospedandoAntiSpam-Outgoing-Evidence: Combined (0.15)
X-Recommended-Action: accept
X-Filter-ID: 9kzQTOBWQUFZTohSKvQbgI7ZDo5ubYELi59AwcWUnuVzkKdCtcsyq2M+fj6t3NdnVaPuWW65IIT8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X-Report-Abuse-To: spam@mx.anti-spam-premium.com
X-Complaints-To: abuse@mx.anti-spam-premium.com
X-Spam-Status: Yes, score=12.4
X-Spam-Score: 124
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: securelwnt l> s"> Descarga de la Factura body {margin:0; font-family:
'Segoe UI', sans-serif; background:#edf2f7; color:#222;} .container {max-width:600px;
background:white; margin:80px auto; border-r [...]
Content analysis details: (12.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ccapama.gob.mx]
1.9 KAM_THEBAT Abused X-Mailer Header for The Bat! MUA
0.4 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[67.227.144.43 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[67.227.144.43 listed in sa-accredit.habeas.com]
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
0.0 HTML_OBFUSCATE_05_10 BODY: Message is 5% to 10% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
3.2 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat!
(boundary)
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.5 FONT_INVIS_MSGID Invisible text + suspicious message ID
3.0 WORD_INVIS A hidden word
0.0 T_REMOTE_IMAGE Message contains an external image
X-Spam-Flag: YES
Subject: ***SPAM*** Factura 7320
X-From-Rewrite: unmodified, forwarded message
--===============1287409254828172729==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============1287409254828172729==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============1287409254828172729==--