| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1756949034.M804421P25701.host100322.itwesthosting.com,S=10129,W=10288:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id wFjGLyrquGhlZAAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Thu, 04 Sep 2025 03:23:54 +0200
Return-path: <>
Envelope-to: 20info@h1telekom.hr
Delivery-date: Thu, 04 Sep 2025 03:23:54 +0200
Received: from 38.43.169.34.bc.googleusercontent.com ([34.169.43.38]:38136 helo=[10.88.0.3])
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
id 1utyhe-0006i7-2F
for 20info@h1telekom.hr;
Thu, 04 Sep 2025 03:23:54 +0200
Content-Type: multipart/related; boundary="===============4228376582503882218=="
MIME-Version: 1.0
From: cPanel Help <noreply@h1telekom.hr>
To: 20info@h1telekom.hr
X-Priority: 2
X-Spam-Status: Yes, score=13.8
X-Spam-Score: 138
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: "h1telekom.hr" Password Recovery! User Account: - 20info@h1telekom.hr,
Our new security protocol demands that you update your account password periodically.
Your account is due for update. Action Required: :
Content analysis details: (13.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: h1telekom.hr]
0.0 TVD_RCVD_IP Message was received from an IP address
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[34.169.43.38 listed in zen.spamhaus.org]
0.0 T_MXG_EMAIL_FRAG URI with email in fragment
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.169.43.38 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.169.43.38 listed in sa-accredit.habeas.com]
2.8 URI_IPFSIO References Interplanetary File System PtP content via
ipfs.io, likely phishing
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.5 GOOG_REDIR_NOTRDNS Google redirect to obscure spamvertised
website + HELO is not rDNS
1.4 MISSING_DATE Missing Date: header
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as
"accounts suspended", "account credited",
"account verification"
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 URI_IPFS References Interplanetary File System PtP content,
probable phishing
0.0 URI_WP_HACKED URI for compromised WordPress site, possible
malware
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?q?H1_portal_Password_Prompt?=
X-From-Rewrite: unmodified, forwarded message
--===============4228376582503882218==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============4228376582503882218==--