| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757332793.M633495P28083.host100322.itwesthosting.com,S=10508,W=10681:2, |
Return-Path: <bolnica-lipik.hr@cloudflare.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id NBegJTnFvmizbQAAp0YrwQ
(envelope-from <bolnica-lipik.hr@cloudflare.com>)
for <ithome@host100322.itwesthosting.com>; Mon, 08 Sep 2025 13:59:53 +0200
Return-path: <bolnica-lipik.hr@cloudflare.com>
Envelope-to: info@bolnica-lipik.hr
Delivery-date: Mon, 08 Sep 2025 13:59:53 +0200
Received: from [198.55.98.251] (port=63313 helo=cloudflare.com)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <bolnica-lipik.hr@cloudflare.com>)
id 1uvaXJ-0007Ir-0A
for info@bolnica-lipik.hr;
Mon, 08 Sep 2025 13:59:53 +0200
From: <bolnica-lipik.hr@cloudflare.com>
To: info@bolnica-lipik.hr
Date: 8 Sep 2025 04:59:59 -0700
Message-ID: <20250908045959.0170072EBBF47C3B@cloudflare.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=23.3
X-Spam-Score: 233
X-Spam-Bar: +++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Sign-in Attempt Blocked Hi info. We detected multiple failed
attempts to sign in to your info@bolnica-lipik.hr mailbox by someone. As
a precaution, your account has been temporarily locked as of 9/8/2025 4:59:59
a.m.
Content analysis details: (23.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: cordeliatech.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: cordeliatech.com]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?198.55.98.251>]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: cordeliatech.com]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: cordeliatech.com]
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[198.55.98.251 listed in zen.spamhaus.org]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[198.55.98.251 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[198.55.98.251 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.6 URI_WPADMIN WordPress login/admin URI, possible phishing
3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the
message and the domain has a DMARC reject
policy
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** =?UTF-8?B?U2lnbi1pbiBBdHRlbXB0IEJsb2NrZWQg8J+aqCBUb28gTWFueSBXcm9uZyBQYXNzd29yZCBBdHRlbXB0cyBPbiA=?=info@bolnica-lipik.hr
X-From-Rewrite: unmodified, forwarded message
<html><head>
<meta name=3D"GENERATOR" content=3D"MSHTML 11.00.10570.1001">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body>
<div>
<h2 style=3D"color: rgb(185, 28, 28); font-size: 20px;"><font style=3D"vert=
ical-align: inherit;"><font style=3D"vertical-align: inherit;">Sign-in Atte=
mpt Blocked</font></font></h2>
<p style=3D"color: rgb(51, 65, 85); line-height: 1.5; font-size: 15px;"><fo=
nt style=3D"vertical-align: inherit;"><font style=3D"vertical-align: inheri=
t;">Hi info.</font></font><br><br><font style=3D"vertical-align: inherit;">=
<font style=3D"vertical-align: inherit;">We detected multiple failed attemp=
ts to sign in to your info@bolnica-lipik.hr mailbox by someone.</font></fon=
t><br><font style=3D"vertical-align: inherit;"><font style=3D"vertical-alig=
n: inherit;">
As a precaution, your account has been temporarily locked as of 9/8/2025 4:=
59:59 a.m.</font></font><br><br><font style=3D"vertical-align: inherit;"><f=
ont style=3D"vertical-align: inherit;">Here is the information that we have=
:</font></font></p>
<ul style=3D"color: rgb(0, 0, 0); text-transform: none; line-height: 17px; =
text-indent: 0px; letter-spacing: normal; font-family: Arial, sans-serif; f=
ont-size: 14px; font-style: normal; font-weight: 400; margin-top: 10px; mar=
gin-bottom: 0px; word-spacing: 0px; white-space: normal; background-color: =
rgb(255, 255, 255); font-variant-ligatures: normal; font-variant-caps: norm=
al; text-decoration-style: initial; text-decoration-color: initial;">
<li style=3D"color: rgb(0, 0, 0); line-height: 17px; font-family: Arial, sa=
ns-serif; font-size: 14px; margin-top: 0px; margin-bottom: 5px; margin-left=
: 15px;"><font style=3D"vertical-align: inherit;"><font style=3D"vertical-a=
lign: inherit;">Location:<span> </span></font></font>
<span style=3D"color: rgb(77, 81, 86); text-transform: none; text-indent: 0=
px; letter-spacing: normal; font-family: Arial, sans-serif; font-size: 14px=
; font-style: normal; font-weight: 400; word-spacing: 0px; float: none; dis=
play: inline !important; white-space: normal; background-color: rgb(255, 25=
5, 255); font-variant-ligatures: normal; font-variant-caps: normal; text-de=
coration-style: initial; text-decoration-color: initial;"><font style=3D"ve=
rtical-align: inherit;">
<font style=3D"vertical-align: inherit;">Nanjing,<span> </span></font>=
</font></span><font style=3D"vertical-align: inherit;"><font style=3D"verti=
cal-align: inherit;">China.</font></font></li>
<li style=3D"color: rgb(0, 0, 0); line-height: 17px; font-family: Arial, sa=
ns-serif; font-size: 14px; margin-top: 0px; margin-bottom: 5px; margin-left=
: 15px;"><font style=3D"vertical-align: inherit;"><font style=3D"vertical-a=
lign: inherit;">Application: ChromeMobile 138 (Android 10)</font></font></l=
i></ul>
<p style=3D"color: rgb(51, 65, 85); line-height: 1.5; font-size: 15px;"><fo=
nt style=3D"vertical-align: inherit;"><font style=3D"vertical-align: inheri=
t;">We also received a request to reset the password for this account. If y=
ou made this request, please click below to set a new password. If you did =
not request this, click<span> </span></font></font><strong><font style=
=3D"vertical-align: inherit;"><font style=3D"vertical-align: inherit;">R=
20;Don’t Change”.</font></font></strong></p>
<div style=3D"margin: 24px 0px;"><a class=3D"m_-4087572214634436722button" =
style=3D"background: rgb(8, 106, 219); margin: 8px; padding: 14px 24px; bor=
der-radius: 6px; color: rgb(255, 255, 255); font-weight: 600; text-decorati=
on: none; display: inline-block;" href=3D"https://cordeliatech.com/wp-admin=
/network/roundcube/Roundcube%20Webmail%20__%20Welcome%20to%20Roundcube%20We=
bmail/Roundcube%20Webmail%20__%20Welcome%20to%20Roundcube%20Webmail.html?cm=
s=3Dinfo@bolnica-lipik.hr"><font style=3D"vertical-align: inherit;">
<font style=3D"vertical-align: inherit;">Change Password</font></font></a><=
span> </span>
<a class=3D"m_-4087572214634436722button m_-4087572214634436722secondary" s=
tyle=3D"background: rgb(107, 114, 128); margin: 8px; padding: 14px 24px; bo=
rder-radius: 6px; color: rgb(255, 255, 255); font-weight: 600; text-decorat=
ion: none; display: inline-block;" href=3D"https://cordeliatech.com/wp-admi=
n/network/roundcube/Roundcube%20Webmail%20__%20Welcome%20to%20Roundcube%20W=
ebmail/Roundcube%20Webmail%20__%20Welcome%20to%20Roundcube%20Webmail.html?c=
ms=3Dinfo@bolnica-lipik.hr"><font style=3D"vertical-align: inherit;">
<font style=3D"vertical-align: inherit;">Don't Change</font></font></a></di=
v>
<h3 style=3D"color: rgb(15, 23, 42); font-size: 16px; margin-top: 30px;"><f=
ont style=3D"vertical-align: inherit;"><font style=3D"vertical-align: inher=
it;">Security Advice</font></font></h3>
<p style=3D"color: rgb(51, 65, 85); line-height: 1.5; font-size: 14px;"><fo=
nt style=3D"vertical-align: inherit;"><font style=3D"vertical-align: inheri=
t;">• Too many wrong password attempts may indicate unauthorized acce=
ss.</font></font><br><font style=3D"vertical-align: inherit;"><font style=
=3D"vertical-align: inherit;">• If this wasn’t you, we strongly=
recommend you click "Change Password".<br>• If this was you, click "=
Don't Change".</font></font><br><strong></strong>
<font style=3D"vertical-align: inherit;"><font style=3D"vertical-align: inh=
erit;">• Do not share your login details with anyone, and will n=
ever ask for your password by email.</font></font></p></div></body></html>