???????????????????????????? ??????????????/????????????????? ............/............... .........................../... ????????????????????????????? >>>>>>>>>>>>>/>>>>>>>>>>>>>>>>> ÿØÿà JFIF    ÿÛ „  ( %!1!%)+//.383,7(-.+  -%%-////---/-.+/--+------/------/--0+--/-/-----.-----ÿÀ  ¥2" ÿÄ     ÿÄ J    ! 1AQ"aq2‘#BR‚¡ÁÑ3br’¢±Âð$CSƒ²á4c“%DsÓñÿÄ   ÿÄ *  !1AQa‘"2q3±ð#b¡ÿÚ   ? ¼QxJQaÍuò¸Zö Úü8,ÐÚú "SSn<rçù–´âE—^ªBÖ9À\†¸ÔÁT­ÃÛ5 ëd´³Í#Ý;Þ38œî ¶H£M:wÎ3…³…âpÔF&‚FK¸9„â4àGEõªfÿ ‘ñ(ßw­pŽF|È¥ù®häðÍѶ¹‘[ÒinÙW¶ùñY˜Q{›K"išÒ[Ú8žë\F¹@-?v"ÔU”,ìöžkÿ {I‡£šÍ?e ríV ?> ......................................... ............................................................................. <<<<<<<<<<<<<<<<<<<<<<<<<<<<<< >>>>>>>>>>>>>/>>>>>>>>>>>>>>>>>> <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> maildirfolder000064000000000000152327572250007300 0ustar00cur/1736782234.M111697P21142.vps,S=51487,W=52194:2,Sa000064000000144437152327706310013124 0ustar00Return-Path: Delivered-To: info@multitex.hr Received: from vps.web-242.com by vps.web-242.com with LMTP id 0KUVBpoxhWeWUgAAI2GjSg (envelope-from ) for ; Mon, 13 Jan 2025 16:30:34 +0100 Return-path: Envelope-to: info@multitex.hr Delivery-date: Mon, 13 Jan 2025 16:30:34 +0100 Received: from mail-dm6nam11lp2170.outbound.protection.outlook.com ([104.47.57.170]:43068 helo=NAM11-DM6-obe.outbound.protection.outlook.com) by vps.web-242.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1tXMOf-0006CK-0w for info@multitex.hr; Mon, 13 Jan 2025 16:30:33 +0100 Received: from BN0P221MB0447.NAMP221.PROD.OUTLOOK.COM (2603:10b6:408:16e::5) by MW6P221MB1098.NAMP221.PROD.OUTLOOK.COM (2603:10b6:303:23d::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 15:29:42 +0000 Received: from BY1P221MB1522.NAMP221.PROD.OUTLOOK.COM (2603:10b6:a03:4ad::18) by BN0P221MB0447.NAMP221.PROD.OUTLOOK.COM (2603:10b6:408:16e::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 15:28:32 +0000 Received: from BY1P221MB1522.NAMP221.PROD.OUTLOOK.COM ([fe80::d269:489e:f66:39ac]) by BY1P221MB1522.NAMP221.PROD.OUTLOOK.COM ([fe80::d269:489e:f66:39ac%3]) with mapi id 15.20.8335.017; Mon, 13 Jan 2025 15:28:31 +0000 Received: from BL1PR13CA0079.namprd13.prod.outlook.com (2603:10b6:208:2b8::24) by DM8P221MB0294.NAMP221.PROD.OUTLOOK.COM (2603:10b6:8:21::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 15:10:02 +0000 Received: from BN2PEPF000044A0.namprd02.prod.outlook.com (2603:10b6:208:2b8:cafe::15) by BL1PR13CA0079.outlook.office365.com (2603:10b6:208:2b8::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8356.10 via Frontend Transport; Mon, 13 Jan 2025 15:10:01 +0000 Authentication-Results: spf=pass (sender IP is 40.93.64.9) smtp.mailfrom=smartfenseoffice.onmicrosoft.com; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action=none header.from=paypal.com; Received-SPF: Pass (protection.outlook.com: domain of smartfenseoffice.onmicrosoft.com designates 40.93.64.9 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.64.9; helo=DUZPR83CU001.outbound.protection.outlook.com; pr=C Received: from DUZPR83CU001.outbound.protection.outlook.com (40.93.64.9) by BN2PEPF000044A0.mail.protection.outlook.com (10.167.243.151) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8356.11 via Frontend Transport; Mon, 13 Jan 2025 15:10:01 +0000 Received: from DB7PR09MB2633.eurprd09.prod.outlook.com (2603:10a6:10:4d::17) by PR3PR09MB5473.eurprd09.prod.outlook.com (2603:10a6:102:17c::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.17; Mon, 13 Jan 2025 15:09:59 +0000 Received: from DB7PR09MB2633.eurprd09.prod.outlook.com ([fe80::ff97:9615:66ef:77b9]) by DB7PR09MB2633.eurprd09.prod.outlook.com ([fe80::ff97:9615:66ef:77b9%5]) with mapi id 15.20.8335.015; Mon, 13 Jan 2025 15:09:59 +0000 Received: from AM0PR04CA0054.eurprd04.prod.outlook.com (2603:10a6:208:1::31) by DBBPR09MB4683.eurprd09.prod.outlook.com (2603:10a6:10:20d::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 15:09:39 +0000 Received: from AM3PEPF00009B9B.eurprd04.prod.outlook.com (2603:10a6:208:1:cafe::e6) by AM0PR04CA0054.outlook.office365.com (2603:10a6:208:1::31) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8335.18 via Frontend Transport; Mon, 13 Jan 2025 15:09:39 +0000 Authentication-Results-Original: spf=pass (sender IP is 173.0.84.232) smtp.mailfrom=paypal.com; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action=none header.from=paypal.com; Received-SPF: Pass (protection.outlook.com: domain of paypal.com designates 173.0.84.232 as permitted sender) receiver=protection.outlook.com; client-ip=173.0.84.232; helo=mx8.slc.paypal.com; pr=C Received: from mx8.slc.paypal.com (173.0.84.232) by AM3PEPF00009B9B.mail.protection.outlook.com (10.167.16.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8356.11 via Frontend Transport; Mon, 13 Jan 2025 15:09:38 +0000 DKIM-Signature: v=1; a=rsa-sha256; d=paypal.com; s=pp-dkim1; c=relaxed/relaxed; q=dns/txt; i=@paypal.com; t=1736780976; h=From:From:Subject:Date:To:MIME-Version:Content-Type; bh=FIL8iFsOZnwK3czbnVVBQrumL8hEHzAzDrWuaeVU0Ao=; b=lMpQKHXWuc3vRudUjTqLGlXVfPxwb6Rf/wu3/ZbJz8j2KZEQhe7i9PdyGjLit5k1 EpRUjtSIpLyQPGyhgcNpukiWoZKihCoRYxttqTc3kHxlUBklEWbjOJ0McvHKLE9x 9mbjXNBix2Dnu7e4V+CKM+lS2EfmiQ/d4fyV3rYC3Xyx6Hf0o1d3Odu1yrrAgURb jigiY1lCA3OqX4S+urqRQs+MPJC1VmTJw4Ur/xOOs6n33fTG7slI9QBDvNkvaoRG AlC+WBvlg3g/udWtcyjGw3lDnmmu6bi596Bp6RmESGOrj3ybKgxddhyG4mcLBfR0 xsXjJJk1+WMVuod0Q0JT2Q==; Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="UTF-8" Date: Mon, 13 Jan 2025 07:09:36 -0800 Message-ID: <85.31.41022.0BC25876@ccg13mail08> MIME-Version: 1.0 From: "service@paypal.com" To: "order_status5@hardeningusuarios. com" Subject: Invoice from Wikimedia Foundation, Inc. (TRX-#41c207) X-MaxCode-Template: RT000238 X-PP-Priority: 0-none-true PP-Correlation-Id: 311332fa05c1d X-PP-Email-transmission-Id: 67316131-d1c0-11ef-a577-df4186cd06eb X-PP-REQUESTED-TIME: 1736780967143 X-Email-Type-Id: RT000238 AMQ-Delivery-Message-Id: nullval X-XPT-XSL-Name: nullval X-EOPAttributedMessage: 1 X-MS-TrafficTypeDiagnostic: AM3PEPF00009B9B:EE_|DBBPR09MB4683:EE_|PR3PR09MB5473:EE_|BN2PEPF000044A0:EE_|DM8P221MB0294:EE_|BN0P221MB0447:EE_|MW6P221MB1098:EE_ X-MS-Office365-Filtering-Correlation-Id: 87a657d8-6cf5-4414-4216-08dd33e45a38 X-Moderation-Data: 1/13/2025 3:09:58 PM X-LD-Processed: c1fadfba-c4bf-4b80-aad2-84589d5a2a84,ExtAddr X-Auto-Response-Suppress: DR, OOF, AutoReply X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR09MB5473 X-EOPTenantAttributedMessage: 8e32d6ff-a089-490c-abe9-6cca60749f67:0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: BN2PEPF000044A0.namprd02.prod.outlook.com X-MS-Exchange-Transport-CrossTenantHeadersPromoted: BN2PEPF000044A0.namprd02.prod.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 48a01f98-ace7-4024-66b5-08dd33e44ca9 X-Moderation-Data: 1/13/2025 3:28:29 PM X-LD-Processed: 8e32d6ff-a089-490c-abe9-6cca60749f67,ExtAddr,ExtAddr X-OriginatorOrg: x0ciag4.onmicrosoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 87a657d8-6cf5-4414-4216-08dd33e45a38 X-MS-Exchange-CrossTenant-Id: 8e32d6ff-a089-490c-abe9-6cca60749f67 X-MS-Exchange-CrossTenant-AuthSource: BN2PEPF000044A0.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jan 2025 15:28:31.5813 (UTC) X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW6P221MB1098 =0A=0A =0A =0A =0A Invoice from Wikimedia Foundation, = Inc. (TRX-#41c207)=0A =0A =0A=0A =0A

= order_status5@hardeningusuarios.com, here are your invoice details

=0A = =0A =0A =0A =0A =0A = =0A =0A =0A =0A =
=0A =0A
=0A =0A = =0A =0A = =0A =0A =0A =0A =0A =0A
=0A =0A =0A = =0A =0A =0A = =0A
Hello, order_status5@hardeningusuarios.com
=0A =
=0A =0A =0A = =0A =0A = =0A =0A =
3D"PayPal"
=0A
=0A =
=0A =0A =0A =0A =0A = =0A =0A =0A = =0A
=0A =0A = =0A =0A = =0A = =0A =0A =
=0A

= Here's your invoice

=0A
=0A =0A = =0A =0A = =0A =0A =0A =
=0A =0A = =0A =0A = =0A = =0A = =0A
=0A =

Wikimedia Foundation, Inc. sent you an invoice for $9= 99.99=C2=A0USD

=0A
=0A
=0A =0A = =0A =0A = =0A =0A = =0A
=0A = =0A= =0A =0A =0A =0A = =0A
=0A =

Due on receipt.

=0A =
=0A =
=0A =0A
=0A =0A =0A = =0A =0A =0A = =0A =0A =0A = =0A
Wikimedia Foundation, Inc. =
=0A = =0A = =0A =0A = =0A = =0A = =0A
=0A = =0A = =0A = =0A =0A = =0A= =0A = =0A =
=0A = =0A = =0A = =0A 3D""=0A = =0A = =0A =
=0A
You don't= have any payments with this seller in the last year.
=0A
=0A =
=0A =
=0A <= table id=3D"transactionDetails" width=3D"100%" cellSpacing=3D"0" cellPaddin= g=3D"0" border=3D"0">=0A =0A = =0A =0A =0A =0A = =0A =0A =0A = =0A =0A =0A = =0A =
=0A = =0A = =0A =0A = =0A = =0A = =0A
=0A = =0A =0A =0A = =0A = =0A = =0A =
=0A =

Invoice details=

=0A
=0A
=0A =
=0A = =0A =0A = =0A = =0A =0A = =0A =
=0A = =0A = =0A = =0A = =0A = =0A = =0A = =0A =0A =0A =
Amount requested
$999.99= =C2=A0USD
=0A =
=0A =0A = =0A = =0A =0A =0A = =0A =0A =0A = =0A = =0A =0A =
=0A =0A =
Note f= rom seller
Fraud Alert: Didn't make this order=3F Call at= 1-888-509-1823
=0A =
=0A =0A = =0A = =0A =0A = =0A =0A=
=0A = =0A = =0A =0A = =0A = =0A =0A = =0A = =0A = =0A
= Invoice number
TRX-#41c207
= =0A
=0A = =0A =0A = =0A =0A = =0A =0A =0A =0A =0A =0A =0A =0A =0A =0A
=0A =0A = =0A =0A = =0A = =0A =0A =
View and Pay Invoice
=0A
=0A = =0A =0A = =0A =0A =0A =0A
=0A =0A = =0A =0A = =0A =0A = =0A
=0A

Don't recognize this invoice=3F

=0A =
=0A =
=0A =0A = =0A =0A =0A =
=0A =0A = =0A =0A = =0A = =0A =0A =
=0A = =0A = =0A =0A = =0A = =0A = =0A
3D""
=0A =
Re= port this invoice
=0A =0A =0A =0A =0A = =0A =0A =0A= = =0A =0A =0A =
=0A

Before paying, make sure you recognize this invoice. If you = don't, report it. Learn more about common security threats and how to spot them. F= or example, PayPal would never use an invoice or a money request to ask you= for your account credentials.

=0A
=0A =0A = =0A =0A = =0A = =0A =0A
=0A = =0A= =0A =0A =0A = =0A =0A =
=0A =

Buy now. Pay over time.

=0A
=0A
= =0A =0A =0A = =0A =0A = =0A =0A =
=0A

Simply select PayPal Credit at checkout and enjoy= No Interest if paid in full in 6 months. Subject to credit approval. See terms. US customers only.

=0A
=0A =0A =0A = =0A =0A =0A =0A =0A = =0A =0A = =0A =0A = =0A =0A = =0A
3D"PayPal"=0A =
=0A =
=0A = =0A =0A = =0A =0A =0A <= tbody>=0A =0A =0A = =0A =0A =0A =0A =0A =
Help & Contact | Security | Apps
=0A =0A = =0A =0A = =0A =0A = =0A = =0A = =0A =0A =0A =0A =0A = =0A
3D"Twitter"3D"Instagram"3D"Facebook"3D"LinkedIn"
=0A =
=0A =0A =0A =0A =0A = =0A =0A
=0A =0A = =0A =0A =0A =0A =0A
=0A =

PayPal is committed to preventing fraudulent emails. Emails from = PayPal will always contain your full name. Learn to identify phishing

=0A
=0A = =0A =0A = =0A =0A =0A =0A
=0A Pleas= e don't reply to this email. To get in touch with us, click Help & Contact.

=0A =
=0A =0A = =0A =0A = =0A= =0A =0A =
=0A =

Not sure why you received this email=3F Learn more

=0A
=0A =0A =0A = =0A =0A =0A =0A
=0A =0A =
Copyrig= ht © 1999-2025 PayPal, Inc. All rights reserved. PayPal is located at = 2211 N. First St., San Jose, CA 95131.
=0A =

PayPal RT000238:en_US(en-US)= :1.8.1:311332fa05c1d

3D""

=0A =
=0A
=0A =0A =0A = =0A =0A =0A =0A=0A cur/1736786848.M284298P5563.vps,S=42092,W=42673:2,Sa000064000000122154152327706310013065 0ustar00Return-Path: Delivered-To: info@multitex.hr Received: from vps.web-242.com by vps.web-242.com with LMTP id c057EKBDhWe7FQAAI2GjSg (envelope-from ) for ; Mon, 13 Jan 2025 17:47:28 +0100 Return-path: Envelope-to: info@multitex.hr Delivery-date: Mon, 13 Jan 2025 17:47:28 +0100 Received: from mail-dm6nam04lp2043.outbound.protection.outlook.com ([104.47.73.43]:52039 helo=NAM04-DM6-obe.outbound.protection.outlook.com) by vps.web-242.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1tXNb5-00014N-1w for info@multitex.hr; Mon, 13 Jan 2025 17:47:28 +0100 Received: from SJ0P221MB0692.NAMP221.PROD.OUTLOOK.COM (2603:10b6:a03:3dd::5) by MN0P221MB0899.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:3c9::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 16:46:42 +0000 Received: from CH0P221MB0428.NAMP221.PROD.OUTLOOK.COM (2603:10b6:610:109::8) by SJ0P221MB0692.NAMP221.PROD.OUTLOOK.COM (2603:10b6:a03:3dd::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 16:45:12 +0000 Received: from CH0P221MB0428.NAMP221.PROD.OUTLOOK.COM ([fe80::e2a6:df6f:2f3f:6b8d]) by CH0P221MB0428.NAMP221.PROD.OUTLOOK.COM ([fe80::e2a6:df6f:2f3f:6b8d%4]) with mapi id 15.20.8335.015; Mon, 13 Jan 2025 16:45:12 +0000 Received: from SJ0PR05CA0139.namprd05.prod.outlook.com (2603:10b6:a03:33d::24) by CY5P221MB0855.NAMP221.PROD.OUTLOOK.COM (2603:10b6:930:2d::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8335.18; Mon, 13 Jan 2025 16:41:29 +0000 Received: from SJ5PEPF000001D7.namprd05.prod.outlook.com (2603:10b6:a03:33d:cafe::f8) by SJ0PR05CA0139.outlook.office365.com (2603:10b6:a03:33d::24) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8251.18 via Frontend Transport; Mon, 13 Jan 2025 16:41:29 +0000 Authentication-Results: spf=pass (sender IP is 40.93.131.28) smtp.mailfrom=dpjaingroup.onmicrosoft.com; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action=none header.from=paypal.com; Received-SPF: Pass (protection.outlook.com: domain of dpjaingroup.onmicrosoft.com designates 40.93.131.28 as permitted sender) receiver=protection.outlook.com; client-ip=40.93.131.28; helo=MA0PR01CU012.outbound.protection.outlook.com; pr=C Received: from MA0PR01CU012.outbound.protection.outlook.com (40.93.131.28) by SJ5PEPF000001D7.mail.protection.outlook.com (10.167.242.59) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.8356.11 via Frontend Transport; Mon, 13 Jan 2025 16:41:28 +0000 Authentication-Results-Original: spf=pass (sender IP is 173.0.84.233) smtp.mailfrom=paypal.com; dkim=pass (signature was verified) header.d=paypal.com;dmarc=pass action=none header.from=paypal.com; DKIM-Signature: v=1; a=rsa-sha256; d=paypal.com; s=pp-dkim1; c=relaxed/relaxed; q=dns/txt; i=@paypal.com; t=1736786365; h=From:From:Subject:Date:To:MIME-Version:Content-Type; bh=EAvc5X/2p5oyHj8H2hCcj4VoRP36IdRJrVXO7sYYhPM=; b=WYx2ix+LiwiFBCauHraUcA4IBg6c4xxzpp4GW6yjYJgOiJ3+7VGwm/ahXmVaKZnu OCN03FHaLHdD7SgzebE5AmROtiOSU8/XafgvyGiB4kr9t0EBG3ODSvaDXECH9Yw2 jWMeTOVdOvrv57v+dXKtc0HYPaLNw4+Tyg+lZBEKt55S0JQi44/TB0u/hy2TukbC 55cjwfciqhDlvz2I3r6+cqL65+x1aJ4R2vouKXwF+blPa/wO2cezyuEYHSuxCY6q /l4329cGWbji2H7d0A2ifdOcA4ax+GUxbIAxvsFfacCFbtociev7TmjKYlveZwtc EUl3e8SAeBMMbGXdReHTag==; Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="UTF-8" Date: Mon, 13 Jan 2025 08:39:25 -0800 Message-ID: <2F.51.54235.DB145876@ccg13mail09> MIME-Version: 1.0 From: "service@paypal.com" To: order_status5@naga99g-186.com Subject: Reminder: You've still got a money request X-MaxCode-Template: PPC001017 X-PP-Priority: 0-none-false PP-Correlation-Id: f968736c00594 X-PP-Email-transmission-Id: f2fb1760-d1cc-11ef-a54d-95fcde267f56 X-PP-REQUESTED-TIME: 1736786361110 X-Email-Type-Id: PPC001017 AMQ-Delivery-Message-Id: nullval X-XPT-XSL-Name: nullval X-EOPAttributedMessage: 1 X-MS-TrafficTypeDiagnostic: MA1PEPF00007264:EE_|PNYPR01MB8096:EE_|PN2PPF2DDD06B13:EE_|SJ5PEPF000001D7:EE_|CY5P221MB0855:EE_|SJ0P221MB0692:EE_|MN0P221MB0899:EE_ X-MS-Office365-Filtering-Correlation-Id: 24488fa1-779b-42f6-174e-08dd33f1212b X-Moderation-Data: 1/13/2025 4:41:23 PM X-LD-Processed: d3f1dd08-9931-4da9-9df7-ade95f26daba,ExtAddr X-Auto-Response-Suppress: DR, OOF, AutoReply X-MS-Exchange-Transport-CrossTenantHeadersStamped: PN2PPF2DDD06B13 X-EOPTenantAttributedMessage: 8e32d6ff-a089-490c-abe9-6cca60749f67:0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: SJ5PEPF000001D7.namprd05.prod.outlook.com X-MS-Exchange-Transport-CrossTenantHeadersPromoted: SJ5PEPF000001D7.namprd05.prod.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 13d17848-be09-4238-5930-08dd33f0d8f7 X-Moderation-Data: 1/13/2025 4:45:10 PM X-LD-Processed: 8e32d6ff-a089-490c-abe9-6cca60749f67,ExtAddr,ExtAddr X-OriginatorOrg: x0ciag4.onmicrosoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 24488fa1-779b-42f6-174e-08dd33f1212b X-MS-Exchange-CrossTenant-Id: 8e32d6ff-a089-490c-abe9-6cca60749f67 X-MS-Exchange-CrossTenant-AuthSource: SJ5PEPF000001D7.namprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Jan 2025 16:45:12.7950 (UTC) X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0P221MB0899 =0A=0A =0A =0A =0A Reminder: You've still got a m= oney request=0A =0A =0A=0A =0A

= order_status5@naga99g-186. com, just a friendly reminder to pay this reques= t.

=0A =0A =0A =0A = =0A =0A =0A = =0A
=0A = =0A =0A = =0A =0A = =0A =0A
=0A =0A =0A =0A = =0A =0A = =0A =0A = =0A =0A = =0A =0A =
=0A =0A = =0A =0A = =0A =0A = =0A
Hello, order_status5@naga99g-186. = com
=0A =
=0A =0A
3D"PayPal"
=0A
= =0A
=0A =0A =0A =0A =
=0A =0A =0A =0A = =0A =0A =0A
=0A

A small reminder from Daniel Landiss

=0A =
=0A =0A =0A =0A =
=0A = =0A = =0A =0A = =0A = =0A =0A =
=0A = =0A =0A = =0A = =0A =0A = =0A =0A = =0A =0A =
=0A = =0A =0A = =0A = =0A = =0A = =0A =0A =0A = =0A =0A
=0A =

Payment request details<= /p>=0A

=0A =
=0A = =0A =0A = =0A = =0A = =0A
=0A = =0A = =0A = =0A Amount requested=0A = =0A = =0A =0A =0A = =0A =
$999.00=C2=A0USD<= /span>
=0A <= /td>=0A
= =0A =0A = =0A =0A = =0A =0A = =0A =
=0A =0A =0A =0A = =0A = =0A =0A = =0A = =0A =0A =
Note from Dan= iel Landiss:
Fraud Alert: Didn't make this order=3F Call a= t 1-888-509-1823
=0A =
=0A =0A = =0A = =0A =0A = =0A =0A
=0A = =0A = =0A =0A = =0A = =0A =0A = =0A = =0A = =0A =
Transaction ID
U-9HX197909U8028545
=0A
=0A = =0A = =0A =0A = =0A =0A = =0A =
= =0A =0A =0A = =0A = =0A = =0A = =0A = =0A = =0A =0A =
Transaction date
January 13, 2025
=0A =
=0A
=0A
=0A =0A =0A = =0A =0A =0A = =0A
=0A

Don't forget to pay the money request fro= m Daniel Landiss. It'll only take a few moments.

=0A =
=0A =0A =0A = =0A =0A =0A = =0A
=0A =0A = =0A =0A = =0A =0A = =0A
Pay Now
= =0A
=0A = =0A =0A = =0A =0A =0A =
=0A =0A =0A = =0A =0A

Don't rec= ognize this request=3F

=0A = =0A
=0A =0A
=0A <= /td>=0A
=0A =0A =0A =0A =0A = =0A =0A =0A =0A =0A <= tr>=0A =0A =0A =0A =
=0A <= p class=3D"ppsans" style=3D"font-size:14px;line-height:20px;color:#000000;m= argin:0;word-break:break-word" dir=3D"ltr">Before paying, make sure y= ou recognize this person. Don't engage with this request if you're unsure a= bout it. PayPal won't contact you through a money request. Learn more about common security threats and how= to spot them.

=0A
=0A = =0A =0A =0A = =0A =0A =0A
=0A =0A = =0A =0A = =0A =0A = =0A
3D"PayPal"=0A =
=0A =
=0A =
=0A =0A =0A =0A =0A = =0A =0A =0A = =0A =0A
Help & Contact | Security | Apps
=0A =0A = =0A =0A = =0A =0A = =0A =0A =0A =
3D"T=3D"Instagram"<= /td>=0A 3D"Facebook"3D"LinkedIn"
=0A
=0A =
=0A =0A = =0A =0A =0A =0A =0A =0A =0A =0A =0A =0A
=0A =0A = =0A =0A = =0A = =0A =0A
=0A =

PayPal is committed to preventing fraudulent emails. Emails= from PayPal will always contain your full name. Learn to identify phis= hing

=0A
= =0A =0A =0A =0A =0A =0A = =0A
=0A =

Please don't reply to this email. To get in touch with us, click Help & Contact.

=0A =
=0A =0A = =0A =0A = =0A =0A =0A
= =0A

Not sure why you received this email=3F Learn more

=0A =
=0A =0A = =0A =0A =0A =0A = =0A
=0A =

=0A

= Copyright © 1999-2025 PayPal, Inc. All rights reserved. PayPal i= s located at 2211 N. First St., San Jose, CA 95131.
=0A =

PayPal RT000186= :en_US(en-US):1.3.2:f968736c00594

3D""

= =0A
=0A =
=0A =0A= =0A cur/1732880080.M320927P21694.vps,S=8591,W=8725:2,Sa000064000000020617152327706310012760 0ustar00Return-Path: Delivered-To: info@multitex.hr Received: from vps.web-242.com by vps.web-242.com with LMTP id WLAHE9CmSWe+VAAAI2GjSg (envelope-from ) for ; Fri, 29 Nov 2024 12:34:40 +0100 Return-path: Envelope-to: info@multitex.hr Delivery-date: Fri, 29 Nov 2024 12:34:40 +0100 Received: from vps60781.dreamhostps.com ([208.97.180.31]:52650) by vps.web-242.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1tGzGg-0006ri-1z for info@multitex.hr; Fri, 29 Nov 2024 12:34:40 +0100 Received: from vps60781.dreamhostps.com (localhost [127.0.0.1]) by vps60781.dreamhostps.com (Postfix) with ESMTP id 4Y09Sz1XCbz3NJ6 for ; Fri, 29 Nov 2024 11:10:27 +0000 (UTC) Content-Type: text/html; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: LIDO - AIRDROP To: info@multitex.hr Subject: =?utf-8?q?Your_Exclusive_Free_LIDO_Tokens_Are_Waiting!_-_=285503613=29?= Message-Id: <4Y09Sz1XCbz3NJ6@vps60781.dreamhostps.com> Date: Fri, 29 Nov 2024 11:10:27 +0000 (UTC) X-Spam-Status: No, score=2.9 X-Spam-Score: 29 X-Spam-Bar: ++ X-Ham-Report: Spam detection software, running on the system "vps.web-242.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Claim Your Free LIDO Tokens - Secure Your Spot Now Claim Your Free LIDO Tokens – Limited Time Offer Welcome to the Lido Airdrop, Content analysis details: (2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: habonyphp.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [208.97.180.31 listed in sa-trusted.bondedsender.org] -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [208.97.180.31 listed in bl.score.senderscore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.9 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.8 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.1 FSL_BULK_SIG Bulk signature with no Unsubscribe X-Spam-Flag: NO PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgICA8bWV0YSBjaGFyc2V0 PSJVVEYtOCI+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9ZGV2aWNl LXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+CiAgICA8dGl0bGU+Q2xhaW0gWW91ciBGcmVlIExJ RE8gVG9rZW5zIC0gU2VjdXJlIFlvdXIgU3BvdCBOb3c8L3RpdGxlPgogICAgPHN0eWxlPgogICAg ICAgIGJvZHkgewogICAgICAgICAgICBmb250LWZhbWlseTogJ0FyaWFsJywgc2Fucy1zZXJpZjsK ICAgICAgICAgICAgYmFja2dyb3VuZC1jb2xvcjogI2ZmZjlmOTsKICAgICAgICAgICAgbWFyZ2lu OiAwOwogICAgICAgICAgICBwYWRkaW5nOiAwOwogICAgICAgIH0KICAgICAgICAuZW1haWwtY29u dGFpbmVyIHsKICAgICAgICAgICAgbWF4LXdpZHRoOiA2MDBweDsKICAgICAgICAgICAgbWFyZ2lu OiAyMHB4IGF1dG87CiAgICAgICAgICAgIGJhY2tncm91bmQ6ICNmZmZmZmY7CiAgICAgICAgICAg IHBhZGRpbmc6IDIwcHg7CiAgICAgICAgICAgIGJvcmRlci1yYWRpdXM6IDhweDsKICAgICAgICAg ICAgYm94LXNoYWRvdzogMCA0cHggMTJweCByZ2JhKDAsIDAsIDAsIDAuMSk7CiAgICAgICAgfQog ICAgICAgIC5sb2dvIHsKICAgICAgICAgICAgdGV4dC1hbGlnbjogY2VudGVyOwogICAgICAgICAg ICBtYXJnaW4tYm90dG9tOiA1MHB4OwogICAgICAgIH0KICAgICAgICAubG9nbyBzdmcgewogICAg ICAgICAgICB3aWR0aDogMTQwcHg7IC8qIEFkanVzdGVkIHdpZHRoIGZvciBzbWFsbGVyIGxvZ28g Ki8KICAgICAgICAgICAgaGVpZ2h0OiBhdXRvOwogICAgICAgIH0KICAgICAgICBoMSB7CiAgICAg ICAgICAgIGZvbnQtc2l6ZTogMjRweDsKICAgICAgICAgICAgY29sb3I6ICMwMDA7CiAgICAgICAg ICAgIHRleHQtYWxpZ246IGNlbnRlcjsKICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMjBweDsK ICAgICAgICAgICAgbGluZS1oZWlnaHQ6IDEuNTsKICAgICAgICB9CiAgICAgICAgaDIgewogICAg ICAgICAgICBmb250LXNpemU6IDE4cHg7CiAgICAgICAgICAgIGNvbG9yOiAjMDAwOwogICAgICAg ICAgICBtYXJnaW4tYm90dG9tOiAxNXB4OwogICAgICAgIH0KICAgICAgICBwIHsKICAgICAgICAg ICAgZm9udC1zaXplOiAxNHB4OwogICAgICAgICAgICBjb2xvcjogIzMzMzsKICAgICAgICAgICAg bGluZS1oZWlnaHQ6IDEuODsKICAgICAgICAgICAgbWFyZ2luOiAxMHB4IDA7CiAgICAgICAgfQog ICAgICAgIG9sIHsKICAgICAgICAgICAgbWFyZ2luOiAxMHB4IDA7CiAgICAgICAgICAgIHBhZGRp bmctbGVmdDogMjBweDsKICAgICAgICAgICAgY29sb3I6ICMzMzM7CiAgICAgICAgfQogICAgICAg IG9sIGxpIHsKICAgICAgICAgICAgbWFyZ2luLWJvdHRvbTogMTBweDsKICAgICAgICB9CiAgICAg ICAgLmN0YS1idXR0b24gewogICAgICAgICAgICBkaXNwbGF5OiBibG9jazsKICAgICAgICAgICAg YmFja2dyb3VuZC1jb2xvcjogIzAwMDsKICAgICAgICAgICAgY29sb3I6ICNmZmY7CiAgICAgICAg ICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsKICAgICAgICAgICAgZm9udC1zaXplOiAxNnB4Owog ICAgICAgICAgICBmb250LXdlaWdodDogYm9sZDsKICAgICAgICAgICAgcGFkZGluZzogMTRweCAy MHB4OwogICAgICAgICAgICB0ZXh0LWFsaWduOiBjZW50ZXI7CiAgICAgICAgICAgIGJvcmRlci1y YWRpdXM6IDVweDsKICAgICAgICAgICAgbWFyZ2luOiAyMHB4IGF1dG87CiAgICAgICAgICAgIG1h eC13aWR0aDogMjUwcHg7CiAgICAgICAgICAgIGJveC1zaGFkb3c6IDAgM3B4IDZweCByZ2JhKDAs IDAsIDAsIDAuMSk7CiAgICAgICAgfQogICAgICAgIC5jdGEtYnV0dG9uOmhvdmVyIHsKICAgICAg ICAgICAgYmFja2dyb3VuZC1jb2xvcjogIzMzMzsKICAgICAgICB9CiAgICAgICAgLmZvb3RlciB7 CiAgICAgICAgICAgIGZvbnQtc2l6ZTogMTJweDsKICAgICAgICAgICAgY29sb3I6ICM3Nzc7CiAg ICAgICAgICAgIHRleHQtYWxpZ246IGNlbnRlcjsKICAgICAgICAgICAgbWFyZ2luLXRvcDogMzBw eDsKICAgICAgICB9CiAgICAgICAgLmZvb3RlciBhIHsKICAgICAgICAgICAgY29sb3I6ICM3Nzc7 CiAgICAgICAgICAgIHRleHQtZGVjb3JhdGlvbjogbm9uZTsKICAgICAgICB9CiAgICAgICAgLmZv b3RlciBhOmhvdmVyIHsKICAgICAgICAgICAgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7CiAg ICAgICAgfQogICAgPC9zdHlsZT4KPC9oZWFkPgo8Ym9keT4KCiAgICAgICAgPGgxPkNsYWltIFlv dXIgRnJlZSBMSURPIFRva2VucyDigJMgTGltaXRlZCBUaW1lIE9mZmVyPC9oMT4KICAgICAgICA8 YnI+CiAgICAgICAgPHA+PHN0cm9uZz5XZWxjb21lIHRvIHRoZSBMaWRvIEFpcmRyb3AsPC9zdHJv bmc+PC9wPgogICAgICAgIDxwPldl4oCZcmUgZXhjaXRlZCB0byBwcmVzZW50IHlvdSB3aXRoIGFu IGV4Y2x1c2l2ZSBjaGFuY2UgdG8gY2xhaW0gPHN0cm9uZz5mcmVlIExJRE8gdG9rZW5zPC9zdHJv bmc+LiBCZSBwYXJ0IG9mIHRoaXMgYW1hemluZyBvcHBvcnR1bml0eSBhbmQgZ3JhYiB5b3VyIHNo YXJlIG9mIDQsMDAwLDAwMCB0b2tlbnMuPC9wPgogICAgICAgIAogICAgICAgIDxoMj5Ib3cgdG8g Q2xhaW0gWW91ciBUb2tlbnM6PC9oMj4KICAgICAgICA8b2w+CiAgICAgICAgICAgIDxsaT48c3Ry b25nPlZpc2l0IHRoZSBBaXJkcm9wIFBhZ2U6PC9zdHJvbmc+IENsaWNrIHRoZSBsaW5rIGJlbG93 LjwvbGk+CiAgICAgICAgICAgIDxsaT48c3Ryb25nPkNvbm5lY3QgWW91ciBXYWxsZXQ6PC9zdHJv bmc+IFNlY3VyZWx5IGxpbmsgeW91ciBFdGhlcmV1bSB3YWxsZXQuPC9saT4KICAgICAgICAgICAg PGxpPjxzdHJvbmc+VmVyaWZ5IEVsaWdpYmlsaXR5Ojwvc3Ryb25nPiBDb25maXJtIHRoYXQgeW91 IG1lZXQgdGhlIHJlcXVpcmVkIGNyaXRlcmlhLjwvbGk+CiAgICAgICAgICAgIDxsaT48c3Ryb25n PkNsYWltIFRva2Vuczo8L3N0cm9uZz4gQ2xpY2sg4oCcQ2xhaW3igJ0gYW5kIGVuam95IHlvdXIg dG9rZW5zIGluc3RhbnRseSE8L2xpPgogICAgICAgIDwvb2w+CiAgICAgICAgCiAgICAgICAgPGEg aHJlZj0iaHR0cHM6Ly9wYWdlcy5oYWJvbnlwaHAuY29tL2NnaSIgY2xhc3M9ImN0YS1idXR0b24i IHRhcmdldD0iX2JsYW5rIj5DbGFpbSBZb3VyIFRva2VucyBOb3c8L2E+CiAgICAgICAgCiAgICAg ICAgPHA+Rm9yIGFzc2lzdGFuY2Ugb3IgaW5xdWlyaWVzLCBmZWVsIGZyZWUgdG8gY29udGFjdCBv dXIgc3VwcG9ydCB0ZWFtLjwvcD4KICAgICAgICA8cD5IdXJyeSB1cCEgVGhlIG9mZmVyIGVuZHMg b25jZSBhbGwgdG9rZW5zIGFyZSBjbGFpbWVkLjwvcD4KICAgICAgICAKICAgICAgICA8ZGl2IGNs YXNzPSJmb290ZXIiPgogICAgICAgICAgICA8cD5UaGFuayB5b3UgZm9yIGJlaW5nIGEgcGFydCBv ZiB0aGUgTElETyBjb21tdW5pdHkuIDxicj4KICAgICAgICAgPGEgaHJlZj0iIyI+UHJpdmFjeSBQ b2xpY3k8L2E+PC9wPgogICAgICAgIDwvZGl2PgogICAgPC9kaXY+CjwvYm9keT4KPC9odG1sPgo= dovecot-keywords000064000000000007152327706310007776 0ustar000 Junk dovecot.index.log000064000000000050152327706310010015 0ustar00(kjkjdovecot-uidlist000064000000000063152327706310007606 0ustar003 V1785458586 N1 G45e8341195ef6b6a029b2600d4e0a231