PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757014123.M79808P28101.host100322.itwesthosting.com,S=11844,W=12051:2, |
Return-Path: <exim@indotoys.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 0O2SBGvouWjFbQAAp0YrwQ
(envelope-from <exim@indotoys.com>)
for <ithome@host100322.itwesthosting.com>; Thu, 04 Sep 2025 21:28:43 +0200
Return-path: <exim@indotoys.com>
Envelope-to: info@h1telekom.hr
Delivery-date: Thu, 04 Sep 2025 21:28:43 +0200
Received: from scphost9.telkomhosting.com ([103.146.246.28]:58390)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <exim@indotoys.com>)
id 1uuFdS-0007KJ-30
for info@h1telekom.hr;
Thu, 04 Sep 2025 21:28:43 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=indotoys.com; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=O4RW5qGoNZNms1Xtk/qx+HfiBfgdAGTxK6nJfIuSMVc=; b=5aE22avv3ASddAaNgBPJCdWNmf
6Z+X0wKYbsmF0nCnioO03kYHpXH2rCOLOywWdMYPbGxTMrVDKkwm1cIXxGWFXEAsL/gE+mlBLVr42
v7Ujq9r0NqCDS/i+vTK8dN0rgpaO4vkAG0hPcWFEdDpUze+eGUvyqFMlsfdBjXTh317qzJoZPghzR
EX3MjkdQFNvdkNQHtQvmY+viOPT3+5LoAC3QWOT3PvMZ/kUY20goNeJ814ywHscJQd8rRL4Z84J9r
D39VVjBOySUlpgsBqgW9exj042X9qJOOu2dEDz6Z6v1njOOGQu0Y5h278b8nyYs8a+XErrtD2P350
JW46eeIg==;
Received: from [170.39.184.183] (port=59925)
by scphost9.telkomhosting.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2)
(envelope-from <exim@indotoys.com>)
id 1uuFdN-00000008FLA-31Wr
for info@h1telekom.hr;
Fri, 05 Sep 2025 02:28:38 +0700
From: H1TelekomSupport Admin <exim@indotoys.com>
To: info@h1telekom.hr
Date: 4 Sep 2025 12:28:35 -0700
Message-ID: <20250904122835.50332EF5C492FC80@indotoys.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - scphost9.telkomhosting.com
X-AntiAbuse: Original Domain - h1telekom.hr
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - indotoys.com
X-Get-Message-Sender-Via: scphost9.telkomhosting.com: authenticated_id: exim@indotoys.com
X-Authenticated-Sender: scphost9.telkomhosting.com: exim@indotoys.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=10.6
X-Spam-Score: 106
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Suspension Notice info@h1telekom.hr has been Suspended Your
Email account has been suspended because of recent activities detected from
your email box.
Content analysis details: (10.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: adnxs.com]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: oortstorages.com]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: oortstorages.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: oortstorages.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_MXG_EMAIL_FRAG URI with email in fragment
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.146.246.28 listed in bl.score.senderscore.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.146.246.28 listed in sa-accredit.habeas.com]
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as
"accounts suspended", "account credited",
"account verification"
6.2 KAM_MAILBOX2 Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject: ***SPAM*** H1Telekom Ticket No TKT:5115322880 : Suspension Notice
X-From-Rewrite: unmodified, forwarded message
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>
<table width=3D"100%" height=3D"100%" align=3D"left" lang=3D"en" style=3D"c=
olor: rgb(34, 34, 34); text-transform: none; letter-spacing: normal; font-f=
amily: Arial, Helvetica, sans-serif; font-size: small; font-style: normal; =
font-weight: 400; word-spacing: 0px; white-space: normal; border-collapse: =
collapse; min-width: 348px; orphans: 2; widows: 2; background-color: rgb(25=
5, 255, 255); font-variant-ligatures: normal; font-variant-caps: normal; -w=
ebkit-text-stroke-width: 0px; text-decoration-thickness:=20
initial; text-decoration-style: initial; text-decoration-color: initial;" b=
order=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tbody style=3D"box-sizing: border-box;">
<tr align=3D"center" style=3D"box-sizing: border-box;">
<td style=3D"margin: 0px; box-sizing: border-box;"><br>
<table style=3D"width: 524px; height: 480px; padding-bottom: 20px; border-c=
ollapse: collapse; min-width: 220px; max-width: 516px;" border=3D"0" cellsp=
acing=3D"0" cellpadding=3D"0">
<tbody style=3D"box-sizing: border-box;">
<tr style=3D"box-sizing: border-box;">
<td width=3D"8" style=3D"margin: 0px; width: 8px; box-sizing: border-box;">=
</td>
<td style=3D"margin: 0px; box-sizing: border-box;">
<div align=3D"center" style=3D"padding: 40px 20px; border-radius: 8px; bord=
er: thin solid rgb(218, 220, 224); box-sizing: border-box;"><font size=3D"6=
" style=3D"box-sizing: border-box;"><span style=3D"font-weight: bolder; box=
-sizing: border-box;">Suspension Notice</span></font>
<div style=3D'line-height: 32px; padding-bottom: 24px; font-family: "Google=
Sans", Roboto, RobotoDraft, Helvetica, Arial, sans-serif; border-bottom-co=
lor: rgb(218, 220, 224); border-bottom-width: thin; border-bottom-style: so=
lid; box-sizing: border-box;'>
<div style=3D"line-height: 0; padding-bottom: 16px; box-sizing: border-box;=
"><br style=3D"box-sizing: border-box;"></div>
<div style=3D"font-size: 24px; box-sizing: border-box;"><font color=3D"#f30=
c21" style=3D"box-sizing: border-box;"><a style=3D"color: rgb(17, 85, 204);=
" target=3D"_blank">info@h1telekom.hr</a> has been Suspended</font></d=
iv><font color=3D"#127bed" style=3D"box-sizing: border-box;"></font><font c=
olor=3D"#127bed" style=3D"box-sizing: border-box;"></font><font color=3D"#1=
27bed" style=3D"box-sizing: border-box;"></font><font color=3D"#127bed" sty=
le=3D"box-sizing: border-box;"></font>
<table align=3D"center" style=3D"margin-top: 8px; border-collapse: collapse=
;">
<tbody style=3D"box-sizing: border-box;">
<tr style=3D"line-height: normal; box-sizing: border-box;">
<td align=3D"right" style=3D"margin: 0px; padding-right: 8px; box-sizing: b=
order-box;"></td>
<td style=3D"margin: 0px; box-sizing: border-box;"></td></tr></tbody></tabl=
e></div>
<div style=3D"text-align: left; line-height: 20px; padding-top: 20px; font-=
family: Roboto-Regular, Helvetica, Arial, sans-serif; font-size: 14px; box-=
sizing: border-box;"><span style=3D"box-sizing: border-box;">Your Email acc=
ount has been suspended because of recent activities detected fro=
m your email box.<br style=3D"box-sizing: border-box;"><br style=3D"box-siz=
ing: border-box;">Kindly verify ownership of your account to unsuspend your=
email account.<br style=3D"box-sizing: border-box;"></span>
<div style=3D"text-align: center; padding-top: 32px; box-sizing: border-box=
;">
<a style=3D'padding: 10px 24px; border-radius: 5px; color: rgb(255, 255, 25=
5); line-height: 16px; font-family: "Google Sans", Roboto, RobotoDraft, Hel=
vetica, Arial, sans-serif; display: inline-block; min-width: 90px; box-sizi=
ng: border-box; background-color: rgb(25, 126, 209); text-decoration-line: =
none;' href=3D"https://secure.adnxs.com/clktrb?id=3D704169&amp;redir=3D=
https://mst.standard.us-east-1.oortstorages.com/redrtpg#info@h1telekom.hr" =
target=3D"_blank" rel=3D"noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://secure.adnxs=
=2Ecom/clktrb?id%3D704169%26amp;redir%3Dhttps://mst.standard.us-east-1.oort=
storages.com/redrtpg%23%5B%5B-Email-%5D%5D&source=3Dgmail&ust=3D175=
7024270981000&usg=3DAOvVaw0bsQY7TXF6F0jVBBUKorWi"><span style=3D"font-w=
eight: bolder; box-sizing: border-box;">Verify Ownership Here</span></a></d=
iv></div>
<div style=3D"color: rgb(95, 99, 104); line-height: 16px; letter-spacing: 0=
px; padding-top: 20px; font-size: 12px; box-sizing: border-box;">You can al=
so see security activity at<br style=3D"box-sizing: border-box;">
<a style=3D"color: rgb(0, 172, 255); box-sizing: border-box; background-col=
or: transparent; text-decoration-line: none;" href=3D"https://secure.adnxs.=
com/clktrb?id=3D704169&amp;redir=3Dhttps://mst.standard.us-east-1.oorts=
torages.com/redrtpg#info@h1telekom.hr" target=3D"_blank" rel=3D"noreferrer"=
=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://secure.adnxs=
=2Ecom/clktrb?id%3D704169%26amp;redir%3Dhttps://mst.standard.us-east-1.oort=
storages.com/redrtpg%23%5B%5B-Email-%5D%5D&source=3Dgmail&ust=3D175=
7024270981000&usg=3DAOvVaw0bsQY7TXF6F0jVBBUKorWi">https://h1telekom.hr =
/activity</a></div></div>
<div style=3D"box-sizing: border-box;">
<div style=3D"text-align: center; line-height: 18px; padding-top: 12px; fon=
t-family: Roboto-Regular, Helvetica, Arial, sans-serif; font-size: 11px; bo=
x-sizing: border-box;">
<div style=3D"box-sizing: border-box;">You received this email to let you k=
now about important changes to your Smbasulimanest Account and service=
s.</div>
<div style=3D"direction: ltr; box-sizing: border-box;">© 2025 H1Teleko=
m</div></div></div></td></tr></tbody></table></td></tr></tbody></table></bo=
dy></html>