| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1756777121.M981836P10116.host100322.itwesthosting.com,S=10671,W=10882:2, |
Return-Path: <brandon@crystalogletree.info>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 3mpWOqFKtmiEJwAAp0YrwQ
(envelope-from <brandon@crystalogletree.info>)
for <ithome@host100322.itwesthosting.com>; Tue, 02 Sep 2025 03:38:41 +0200
Return-path: <brandon@crystalogletree.info>
Envelope-to: info@zagrebcrafts.hr
Delivery-date: Tue, 02 Sep 2025 03:38:41 +0200
Received: from [157.66.223.173] (port=55778 helo=crystalogletree.info)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <brandon@crystalogletree.info>)
id 1utFyq-0002cz-2C
for info@zagrebcrafts.hr;
Tue, 02 Sep 2025 03:38:41 +0200
Received: from [160.25.72.182] (unknown [160.25.72.182])
by crystalogletree.info (Postfix) with ESMTPSA id 8240B11AA1A
for <info@zagrebcrafts.hr>; Mon, 1 Sep 2025 12:52:28 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=crystalogletree.info;
s=default; t=1756723948;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:mime-version:mime-version:content-type:content-type:
content-transfer-encoding:content-transfer-encoding;
bh=vIULmttyE4lOZykp/kKqf+/AlfLWBQOosRY/qdd4gP8=;
b=kFvL2OYuCdFZXpjxP45Qdn8FvZBiMjXua5lD95i7eb27/z4nwx68lpJj/y6mB6P8FEcS0i
yQz0uxPtnP2P2a0VAm2waj6twzhtRTIuEbVvu4rDUfvRdYq71AH4XrXwLIKwYwF5XepmQM
SipcuIGrPyHomH0MZJin2dx7wPk5kH0=
From: zagrebcrafts.hr Cpanel <brandon@crystalogletree.info>
To: info@zagrebcrafts.hr
Date: 1 Sep 2025 17:52:28 +0700
Message-ID: <20250901175228.C65D2307C9D7F570@crystalogletree.info>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam: Yes
X-Spam-Status: Yes, score=25.1
X-Spam-Score: 251
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Email De-activation in progress... Dear info Notice, indicates
that you recently made a request to deactivate email info@zagrebcrafts.hr.
This request will be processed shortly. If this request was made accidentally
and you have no knowledge of it, you are advised to cancel the request now
Content analysis details: (25.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: yre7.pages.dev]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?157.66.223.173>]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: crystalogletree.info]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: crystalogletree.info]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: yre7.pages.dev]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.66.223.173 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[157.66.223.173 listed in sa-accredit.habeas.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
1.3 PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_FRNOM_TODOM_DBL_URL From Name to domain, double URL
0.2 PDS_FRNOM_TODOM_NAKED_TO Naked to From name equals to Domain
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
6.2 KAM_MAILBOX2 Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject: ***SPAM*** Email De-activation Notice
X-From-Rewrite: unmodified, forwarded message
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.17037"></HEAD>
<BODY>
<DIV dir=3Dltr>
<TABLE style=3D'FONT-SIZE: 15px; FONT-FAMILY: wf_segoe-ui_normal,"Segoe UI"=
,"Segoe WP",Tahoma,Arial,sans-serif,serif,EmojiFont; COLOR: rgb(33,33,33)' =
cellSpacing=3D0 width=3D"100%">
<TBODY>
<TR>
<TD bgColor=3D#045fb4 height=3D110>
<TABLE width=3D"80%" align=3Dcenter>
<TBODY>
<TR>
<TD><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" color=3D#ffffff si=
ze=3D6><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIG=
N: inherit">Email De-activation in progress...</FONT></FONT></FONT></TD></T=
R></TBODY></TABLE></TD></TR>
<TR>
<TD bgColor=3D#f8f8f8>
<TABLE width=3D"80%" align=3Dcenter>
<TBODY>
<TR>
<TD><SPAN style=3D"FONT-SIZE: medium; FONT-FAMILY: calibri,serif,EmojiFont"=
>Dear info</SPAN><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=
=3D3><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN:=
inherit"><BR>Notice, indicates that you recently made a request to deactiv=
ate email info@zagrebcrafts.hr. This request will be processed shortly.</FO=
NT></FONT></FONT>
<P><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=3D3><FONT styl=
e=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inherit">If th=
is request was made accidentally and you have no knowledge of it, you are a=
dvised to cancel the request now</FONT></FONT></FONT></P></TD></TR></TBODY>=
</TABLE></TD></TR>
<TR>
<TD bgColor=3D#f8f8f8 height=3D15> </TD></TR>
<TR>
<TD bgColor=3D#f8f8f8>
<TABLE height=3D60 width=3D"80%" align=3Dcenter bgColor=3D#045fb4>
<TBODY>
<TR>
<TD>
<DIV style=3D"BORDER-TOP: 0px; PADDING-TOP: 0px" align=3Dcenter><A style=3D=
"COLOR: rgb(1,134,186); text-decoration-line: none" href=3D"https://yre7.pa=
ges.dev/?ydW=3Dinfo@zagrebcrafts.hr(&)OnR" rel=3D"noreferrer noopener" =
target=3D_blank data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttp=
s://yre7.pages.dev/?ydW%3D%5B%5B-Email-%5D%5D(%26)OnR&source=3Dgmail&am=
p;ust=3D1756777384549000&usg=3DAOvVaw2nYp_aLDGddXKEkIq89NJX"><FONT styl=
e=3D"FONT-FAMILY: calibri,serif,EmojiFont" color=3D#ffffff size=3D+2>
<FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inhe=
rit">Cancel De-activation</FONT></FONT></FONT></A></DIV></TD></TR></TBODY><=
/TABLE></TD></TR>
<TR>
<TD bgColor=3D#f8f8f8 height=3D20> </TD></TR>
<TR>
<TD bgColor=3D#f8f8f8 height=3D70>
<TABLE width=3D"80%" align=3Dcenter>
<TBODY>
<TR>
<TD><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=3D3><FONT sty=
le=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inherit">Howe=
ver, if you do not cancel this request, the your account will be deactivate=
d shortly and all your email data will be lost permanently.</FONT></FONT></=
FONT>
<P><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=3D3><FONT styl=
e=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inherit">Regar=
ds.</FONT></FONT><BR><B><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=
=3D"VERTICAL-ALIGN: inherit">Support Team</FONT></FONT></B></FONT></P></TD>=
</TR></TBODY></TABLE></TD></TR>
<TR>
<TD bgColor=3D#f8f8f8 height=3D10> </TD></TR>
<TR>
<TD bgColor=3D#f8f8f8>
<TABLE height=3D10 width=3D"80%" align=3Dcenter>
<TBODY>
<TR>
<TD>
<HR align=3Dcenter width=3D"100%">
</TD></TR></TBODY></TABLE></TD></TR>
<TR>
<TD bgColor=3D#f8f8f8>
<TABLE width=3D"80%" align=3Dcenter>
<TBODY>
<TR>
<TD>
<P><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=3D2><FONT styl=
e=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTICAL-ALIGN: inherit">This =
message is auto-generated from E-mail security server, and replies sent to =
this email can not be delivered.</FONT><FONT style=3D"VERTICAL-ALIGN: inher=
it">This email is meant for: info@zagrebcrafts.hr</FONT></FONT></FONT></P>
<P><FONT style=3D"FONT-FAMILY: calibri,serif,EmojiFont" size=3D2><SPAN styl=
e=3D"FONT-SIZE: 14px; FONT-FAMILY: arial,serif,EmojiFont; COLOR: rgb(65,65,=
65); BACKGROUND-COLOR: rgb(255,255,255)"><SPAN style=3D"FONT-SIZE: x-small;=
FONT-FAMILY: tahoma,sans-serif,serif,EmojiFont; COLOR: rgb(34,34,34)">Copy=
right © 2025 zagrebcrafts.hr • Web Admin •</SPAN=
></SPAN></FONT></P></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></DI=
V></BODY></HTML>