| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757303115.M402515P10294.host100322.itwesthosting.com,S=8771,W=8960:2, |
Return-Path: <emma@weigongfu.net>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id X8PXF0tRvmg2KAAAp0YrwQ
(envelope-from <emma@weigongfu.net>)
for <ithome@host100322.itwesthosting.com>; Mon, 08 Sep 2025 05:45:15 +0200
Return-path: <emma@weigongfu.net>
Envelope-to: mario.mihaljevic@h1telekom.hr
Delivery-date: Mon, 08 Sep 2025 05:45:15 +0200
Received: from [103.149.28.83] (port=44142 helo=weigongfu.net)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <emma@weigongfu.net>)
id 1uvSoc-0002fn-0f
for mario.mihaljevic@h1telekom.hr;
Mon, 08 Sep 2025 05:45:15 +0200
Message-ID: <29178753831654.8lp5xxl55637oiga@weigongfu.net>
X-Obfuscation-Trace-ID: obs-rtx-59dfe1
X-FakeReply-Detection: neutral; pattern=unknown
X-ZTNA-Token-Stage: verified; pre-access-pass
X-Behavioral-Trust-Index: 91.2; anomaly=false
X-PhishSimulator-Mode: training-off; bypass=no
X-CDN-Path-Validation: passed; ttl=87
X-User-Context-Auth: location-bound; MFA-req=true
X-Risk-Adaptive-Event: eval-id=af82d3; level=2
X-Deception-Asset-Type: smtp-honey-node
X-Auth-Fingerprint-SHA: 379fdba12c8d94ee7abf...
X-API-Session-Entropy: 7.91; normalized
X-ThreatModel-Trigger: heuristic_match_rule_2104
X-Quarantine-Reason-Code: sim-phish:flag=training
From: Luxury Watches <emma@weigongfu.net>
To: mario.mihaljevic <mario.mihaljevic@h1telekom.hr>
Date: Mon, 8 Sep 2025 13:45:01 +1000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="__==80999590_nlfqzp63xwilzwjwrkrjzqnsmgquqzinwka==__"
X-Spam-Status: Yes, score=19.6
X-Spam-Score: 196
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Luxury Watches Starting at $250 Discover Refined Luxury From
modern minimalism to timeless classics, our premium watch collection offers
elegance and precision?starting at just $250. Browse Collection [...]
Content analysis details: (19.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: wwwxiudoulba888.ru]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[103.149.28.83 listed in psbl.surriel.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: wwwxiudoulba888.ru]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?103.149.28.83>]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: wwwxiudoulba888.ru]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.149.28.83 listed in bl.score.senderscore.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=weigongfu.net;ip=103.149.28.83;r=host100322.itwesthosting.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=emma%40weigongfu.net;ip=103.149.28.83;r=host100322.itwesthosting.com]
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of
words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[103.149.28.83 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.5 KAM_NUMSUBJECT Subject ends in numbers excluding current years
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** Premium Timepieces Collection Starting at Only $250
X-From-Rewrite: unmodified, forwarded message
This is a multi-part message in MIME format.
--__==80999590_nlfqzp63xwilzwjwrkrjzqnsmgquqzinwka==__
Content-Type: text/plain;
charset="windows-1256"
Content-Transfer-Encoding: Quoted-Printable
Luxury Watches Starting at $250
Discover Refined Luxury=20
From modern minimalism to timeless classics, our premium watch collect=
ion offers elegance and precision?starting at just $250.=20
Browse Collection=20
You are receiving this email because you opted in to updates.=20
Unsubscribe=20
--__==80999590_nlfqzp63xwilzwjwrkrjzqnsmgquqzinwka==__
Content-Type: text/html;
charset="windows-1256"
Content-Transfer-Encoding: Quoted-Printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML lang=3Den><HEAD><TITLE>Luxury Watches Starting at $250</TITLE>
<META charset=3DUTF-8>
<META name=3DGENERATOR content=3D"MSHTML 11.00.9600.17037"><meta conte=
nt=3D"text/html; charset=3Dwindows-1256" http-equiv=3DContent-Type>
</head>
<BODY=20
style=3D"FONT-FAMILY: Helvetica, Arial, sans-serif; PADDING-BOTTOM: 0p=
x; PADDING-TOP: 0px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0p=
x; BACKGROUND-COLOR: #1a1a1a">
<TABLE style=3D"BACKGROUND-COLOR: #1a1a1a" cellSpacing=3D0 cellPadding=
=3D0=20
width=3D"100%">
<TBODY>
<TR>
<TD align=3Dcenter>
<TABLE=20
style=3D"OVERFLOW: hidden; MARGIN: 30px auto; BACKGROUND-COLOR: =
#ffffff; border-radius: 8px"=20
cellSpacing=3D0 cellPadding=3D0 width=3D600><!-- Header Image --=
>
<TBODY>
<TR>
<TD><A=20
href=3D"https://kk.wwwxiudoulba888.ru/je olfve4o fnwuer 8i=
vew/nfghkl Technologie Actions Je suis affam?.html"=20
target=3D_blank><IMG=20
style=3D"BORDER-TOP: 0px; HEIGHT: auto; BORDER-RIGHT: 0px;=
WIDTH: 100%; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; DISPLAY: block"=20=
alt=3D"Explore Luxury Watches ? Starting from $250"=20
src=3D"https://kk.wwwxiudoulba888.ru/9.jpg" width=3D"100%"=
> </A></TD></TR><!-- Main Content -->
<TR>
<TD=20
style=3D"PADDING-BOTTOM: 30px; TEXT-ALIGN: center; PADDING-T=
OP: 30px; PADDING-LEFT: 30px; PADDING-RIGHT: 30px; BACKGROUND-COLOR: #=
ffffff">
<H2=20
style=3D"FONT-SIZE: 26px; COLOR: #000000; MARGIN: 0px 0px =
20px">Discover=20
Refined Luxury </H2>
<P=20
style=3D"MARGIN-BOTTOM: 30px; FONT-SIZE: 16px; COLOR: #444=
444; LINE-HEIGHT: 1.5">From=20
modern minimalism to timeless classics, our premium watch =
collection=20
offers elegance and precision?starting at just=20
<STRONG>$250</STRONG>. </P><A=20
style=3D"TEXT-DECORATION: none; FONT-WEIGHT: bold; COLOR: =
#ffffff; PADDING-BOTTOM: 12px; PADDING-TOP: 12px; PADDING-LEFT: 24px; =
PADDING-RIGHT: 24px; BACKGROUND-COLOR: #000000; border-radius: 5px"=20=
href=3D"https://kk.wwwxiudoulba888.ru/je olfve4o fnwuer 8i=
vew/nfghkl Technologie Actions Je suis affam?.html">Browse=20
Collection </A></TD></TR><!-- Footer -->
<TR>
<TD=20
style=3D"PADDING-BOTTOM: 20px; TEXT-ALIGN: center; PADDING-T=
OP: 20px; PADDING-LEFT: 20px; PADDING-RIGHT: 20px; BACKGROUND-COLOR: #=
f4f4f4">
<P style=3D"FONT-SIZE: 12px; COLOR: #777777">You are recei=
ving this=20
email because you opted in to updates. <BR><A=20
style=3D"TEXT-DECORATION: underline; COLOR: #777777"=20
href=3D"https://kk.wwwxiudoulba888.ru/un.html">Unsubscribe=
</A>=20
</P></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE></BODY=
></HTML>
--__==80999590_nlfqzp63xwilzwjwrkrjzqnsmgquqzinwka==__--