PK œqhYî¶J‚ßFßF)nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/ $#$#$#

Dir : /home/ithome/mail/new/
Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64
IP: 144.91.64.173
Choose File :

Url:
Dir : /home/ithome/mail/new/1773796582.M252615P7004.host100322.itwesthosting.com,S=6843,W=6959

Return-Path: <investment@genevapay.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
	by host100322.itwesthosting.com with LMTP
	id JjSaDub8uWlcGwAAp0YrwQ
	(envelope-from <investment@genevapay.com>)
	for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 02:16:22 +0100
Return-path: <investment@genevapay.com>
Envelope-to: ivanka.puscenik@bolnica-lipik.hr
Delivery-date: Wed, 18 Mar 2026 02:16:22 +0100
Received: from px.kinet.or.jp ([61.200.31.94]:57002)
	by host100322.itwesthosting.com with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <investment@genevapay.com>)
	id 1w2fWG-0001oj-2l
	for ivanka.puscenik@bolnica-lipik.hr;
	Wed, 18 Mar 2026 02:16:22 +0100
Received: from ec2-54-166-207-185.compute-1.amazonaws.com (ec2-54-166-207-185.compute-1.amazonaws.com [54.166.207.185])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256)
	(No client certificate requested)
	by px.kinet.or.jp (Postfix) with ESMTPSA id 242E5EB
	for <ivanka.puscenik@bolnica-lipik.hr>; Wed, 18 Mar 2026 10:10:06 +0900 (JST)
From: bolnica-lipik.hr<investment@genevapay.com>
To: ivanka.puscenik@bolnica-lipik.hr
Subject: Email Notification 
Date: 18 Mar 2026 01:10:04 +0000
Message-ID: <20260318011004.A6B1EA70AD134084@genevapay.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=0.4
X-Spam-Score: 4
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hello ivanka.puscenik We are to inform you that someone is
    trying to log into your account with a new device. When :3/18/2026 1:10:04
    a.m. 
 Content analysis details:   (0.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: clinicadeolhosuchoa.com.br]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URIs: clinicadeolhosuchoa.com.br]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
                             The query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [61.200.31.94 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [61.200.31.94 listed in bl.score.senderscore.com]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 T_SPF_PERMERROR        SPF: test of record failed (permerror)
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message

<html><head>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>
<span style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0=
px; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font=
-size: small; font-style: normal; font-weight: 400; word-spacing: 0px; floa=
t: none; display: inline !important; white-space: normal; orphans: 2; widow=
s: 2; background-color: rgb(255, 255, 255); font-variant-ligatures: normal;=
 font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style:=20
initial; text-decoration-color: initial;">Hello ivanka.puscenik</span>
<div style=3D"color: rgb(34, 34, 34); text-transform: none; text-indent: 0p=
x; letter-spacing: normal; font-family: Arial, Helvetica, sans-serif; font-=
size: small; font-style: normal; font-weight: 400; word-spacing: 0px; white=
-space: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255)=
; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=
: initial; text-decoration-color: initial;"><br>
<div>We are to inform you that&nbsp; someone is trying to log&nbsp; into yo=
ur account with&nbsp; a new device.</div><div><font face=3D"times new roman=
, serif" size=3D"4"><br></font></div><div>When :3/18/2026 1:10:04 a.m.</div=
><div><br></div><div>Device: iPhone 15 Pro</div><div><br></div><div>Locatio=
n: Ibadan/Nigeria</div><div><br>If this is the case, please ignore this mes=
sage or verify below.</div><div><font face=3D"times new roman, serif" size=
=3D"4"><br></font></div><div><div dir=3D"ltr">
<a style=3D"background: rgb(146, 64, 14); padding: 8px 12px; border-radius:=
 4px; text-align: center; color: rgb(255, 255, 255); font-size: 13px; text-=
decoration-line: none;" href=3D"https://clinicadeolhosuchoa.com.br/009/redi=
rectuser.php?userid=3Divanka.puscenik@bolnica-lipik.hr" target=3D"_blank">G=
rant Access Here&nbsp;</a><span style=3D"text-align: center;">&nbsp;</span>=
<span style=3D"text-align: center; font-size: 14px;">&nbsp;&nbsp;</span>
<a style=3D"text-align: center; color: rgb(17, 85, 204); font-size: 14px;" =
href=3D"https://clinicadeolhosuchoa.com.br/009/redirectuser.php?userid=3Div=
anka.puscenik@bolnica-lipik.hr" target=3D"_blank"><font style=3D"vertical-a=
lign: inherit;" dir=3D"auto"><font style=3D"vertical-align: inherit;" dir=
=3D"auto">Verify Here</font></font></a><br><br></div><div>This email is to =
inform you of important changes to your Webmail Account and Services.<br><b=
r>&copy; 2026. All Rights Reserved.</div></div><div><div style=3D"text-alig=
n: center;"><br>
</div></div><br class=3D"Apple-interchange-newline"></div></body></html>