| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757491444.M912887P13329.host100322.itwesthosting.com,S=7932,W=8091:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id OB9PNvQwwWgRNAAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Wed, 10 Sep 2025 10:04:04 +0200
Return-path: <>
Envelope-to: jelena.durinic@h1telekom.hr
Delivery-date: Wed, 10 Sep 2025 10:04:04 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uwFoC-0003iW-2i
for jelena.durinic@h1telekom.hr;
Wed, 10 Sep 2025 10:04:04 +0200
X-Failed-Recipients: jelena.durinic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: jelena.durinic@h1telekom.hr
References: <20250905035058.5472@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757491444-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uwFoC-0003iW-2i@host100322.itwesthosting.com>
Date: Wed, 10 Sep 2025 10:04:04 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757491444-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
jelena.durinic@h1telekom.hr
--1757491444-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;jelena.durinic@h1telekom.hr
Status: 5.0.0
--1757491444-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <jelena.durinic@h1telekom.hr>
Received: from [147.45.124.49] (port=48456 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <jelena.durinic@h1telekom.hr>)
id 1uuRDp-0000Lh-2o
for jelena.durinic@h1telekom.hr;
Fri, 05 Sep 2025 09:51:00 +0200
Received: from mail.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id 747E13FAD6
for <jelena.durinic@h1telekom.hr>; Fri, 5 Sep 2025 03:50:58 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============6496619252413716905=="
MIME-Version: 1.0
From: jelena.durinic@h1telekom.hr <jelena.durinic@h1telekom.hr>
To: jelena.durinic@h1telekom.hr
Reply-To: jelena.durinic@h1telekom.hr
Message-ID: <20250905035058.5472@h1telekom.hr>
Date: Fri, 05 Sep 2025 03:50:58
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=10.0
X-Spam-Score: 100
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I will be direct You watch adult content often, and I caught
you masturbating. We all do it from time to time. How I did this Your router
was vulnerable. I was able to inject some code into the firmwa [...]
Content analysis details: (10.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[147.45.124.49 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[147.45.124.49 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** BADNEWS FOR YOU
--===============6496619252413716905==
Content-Type: multipart/alternative; boundary="===============4725451491782633405=="
MIME-Version: 1.0
--===============4725451491782633405==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============4725451491782633405==--
--===============6496619252413716905==--
--1757491444-eximdsn-1804289383--