| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757508544.M790041P11041.host100322.itwesthosting.com,S=8023,W=8183:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id wM6kLsBzwWghKwAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Wed, 10 Sep 2025 14:49:04 +0200
Return-path: <>
Envelope-to: andreja.birt@h1telekom.hr
Delivery-date: Wed, 10 Sep 2025 14:49:04 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uwKG0-0002rz-25
for andreja.birt@h1telekom.hr;
Wed, 10 Sep 2025 14:49:04 +0200
X-Failed-Recipients: andreja.birt@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: andreja.birt@h1telekom.hr
References: <20250905084124.1084@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757508544-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uwKG0-0002rz-25@host100322.itwesthosting.com>
Date: Wed, 10 Sep 2025 14:49:04 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757508544-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
andreja.birt@h1telekom.hr
--1757508544-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;andreja.birt@h1telekom.hr
Status: 5.0.0
--1757508544-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <andreja.birt@h1telekom.hr>
Received: from [87.251.79.31] (port=58544 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <andreja.birt@h1telekom.hr>)
id 1uuVku-0003fm-0e
for andreja.birt@h1telekom.hr;
Fri, 05 Sep 2025 14:41:26 +0200
Received: from your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id A8BDB40C19
for <andreja.birt@h1telekom.hr>; Fri, 5 Sep 2025 08:41:24 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============6570249421098864308=="
MIME-Version: 1.0
From: andreja.birt@h1telekom.hr <andreja.birt@h1telekom.hr>
To: andreja.birt@h1telekom.hr
Reply-To: andreja.birt@h1telekom.hr
Message-ID: <20250905084124.1084@h1telekom.hr>
Date: Fri, 05 Sep 2025 08:41:24
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I will be direct You watch adult content often, and I caught
you masturbating. We all do it from time to time. How I did this Your router
was vulnerable. I was able to inject some code into the firmwa [...]
Content analysis details: (13.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[87.251.79.31 listed in zen.spamhaus.org]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[87.251.79.31 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[87.251.79.31 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** i have very badnews for you.
--===============6570249421098864308==
Content-Type: multipart/alternative; boundary="===============8150405381439190264=="
MIME-Version: 1.0
--===============8150405381439190264==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
SSB3aWxsIGJlIGRpcmVjdCBZb3Ugd2F0Y2ggYWR1bHQgY29udGVudCBvZnRlbiwgYW5kIEkgY2F1
Z2h0IHlvdQptYXN0dXJiYXRpbmcuIFdlIGFsbCBkbyBpdCBmcm9tIHRpbWUgdG8gdGltZS4gSG93
IEkgZGlkIHRoaXMgWW91ciByb3V0ZXIKd2FzIHZ1bG5lcmFibGUuIEkgd2FzIGFibGUgdG8gaW5q
ZWN0IHNvbWUgY29kZSBpbnRvIHRoZSBmaXJtd2FyZSwgYW5kIGV2ZXJ5CmRldmljZSBjb25uZWN0
ZWQgb24gdGhlIG5ldHdvcmssIGluY2x1ZGluZyBwaG9uZXMsIHdhcyBjb21wcm9taXNlZC4gVGhl
biBJCnNldCBldmVyeSBkZXZpY2UgYXZhaWxhYmxlIHRvIHJlY29yZCB3aXRoIHRoZSBjYW1lcmEg
b25seSB3aGVuIHlvdSB3YXRjaAphZHVsdCBjb250ZW50LiBJIGFsc28gZ290IHlvdXIgY29udGFj
dCBsaXN0cywgcGhvbmUgbnVtYmVycywgZW1haWxzLCBzb2NpYWwKbWVkaWEgY29udGFjdHMsIGFu
ZCBoZXJlIGlzIHRoZSBkZWFsLiBJZiB5b3UgZG9uYHQgcGF5IG1lICQxNjQxNjg2Ljg5IFVTRCB3
b3J0aAppbiBCaWNvaW4sIEkgd2lsbCBzZW5kIHlvdXIgbWFzdHVyYmF0aW9uIHZpZGVvLCAgc2Vh
cmNoIGhpc3RvcnksICBhbmQgYWxsIHlvdXIgcHJpdmF0ZSBjaGF0IHRvIGFsbAp5b3VyIGNvbnRh
Y3RzIGFuZCAgYWxsIHNvY2lhbCBtZWRpYQoKQml0Y29pbiBBZGRyZXNzOiAxUFJIbVlXN0ZGUER0
ZEtKWmNWaGdhejZNa0dzS3Ayb3NqCgpBTU9VTlQ6IDE1IEJUQyAgYXBwcm94aW1hdGVseQoKQ29w
eSB0aGUgYWRkcmVzcyBwZXJmZWN0bHksICB3aXRoIG5vIG1pc3Rha2VzCgpRdWljayBUSVA6ICBZ
b3UgY2FuIGVhc2lseSBidXkgYml0Y29pbiBoZXJlOiBwYXhmdWwgLCBjb2luZ2F0ZS4KLCBjb2lu
YmFzZSwgb3IgY2hlY2sgZm9yIGJpdGNvaW4gQVRNIG5lYXIgeW91LCBvciBHb29nbGUgZm9yIG90
aGVyIGV4Y2hhbmdlLgpZb3UgY2FuIHNlbmQgdGhlIGJpdGNvaW4gZGlyZWN0bHkgdG8gbXkgd2Fs
bGV0LCBvciBjcmVhdGUgeW91ciBvd24gd2FsbGV0IGZpcnN0IGhlcmU6IGJsb2NrY2hhaW4sIHRo
ZW4gcmVjZWl2ZSBhbmQgc2VuZCB0byBtaW5lLApvciBzd2FwIGNvaW4gdG8gYnRjLgpBbHNvLCBz
ZWFyY2ggZm9yIHdoYXQgaXMgTm8gRmFwIGFuZCByZWFkIGFib3V0IHRoZSBiZW5lZml0cyBvZiBu
byBQTU8uCldhdGNoaW5nIGRpcnR5IHBvcm4gaXMgYSB3YXN0ZSBvZiB0aW1lLCBlbmVyZ3ksIGFu
ZCBtaW5lcmFscyBmcm9tIHRoZSBib2R5CkkgaG9wZSB5b3Ugd2lsbCB0aGluayBhYm91dCB0aGlz
IHZlcnkgc2VyaW91c2x5LgpJbiBjYXNlIHlvdSB3b25kZXIgd2h5IHlvdXIgYW50aS12aXJ1c2Vz
IHdlcmUgbm90IHRyaWdnZXJlZCBpcyBiZWNhdXNlIG15CmNvZGUgaXMgbm90IHNldCB0byBzdGVh
bCBwYXNzd29yZHMsIFBJTiBjb2RlcywgYW5kIG90aGVyIHNlbnNpdGl2ZSBkZXRhaWxzLgpUaGUg
b25seSBmdW5jdGlvbiBpcyB0byByZWNvcmQgd2l0aCB0aGUgY2FtZXJhcyhpbiBzaWxlbnQgbW9k
ZSkgYW5kIGdyYWIKdGhlIGNvbnRhY3RzLiBJIGtub3cgdGhhdCB5b3UgaGF2ZSB0aGF0IGFtb3Vu
dCBvZiBtb25leSB0aGF0IGlzIHJlcXVlc3RlZC4KU28gZG9uYHQgd29ycnkgYWJvdXQgeW91ciBw
YXNzd29yZHMgYW5kIGJhbmsgYWNjb3VudHMsIEhvd2V2ZXIsIGZvciB5b3VyCm1lbnRhbCBwZWFj
ZSwgZ28gYWhlYWQsIGNoYW5nZSB0aGVtLgpZb3UgaGF2ZSAgNyBEQVlTICIuIHRvIHNlbmQgdGhl
IHBheW1lbnQuIFdoZW4gY29pbnMgYXJlIHN1Ym1pdHRlZCAsCnRoZSB2aWRlbyB3aXRoIHlvdSBk
b2luZzsgeW91IGtub3cgd2hhdCB3aWxsIGJlIGRlc3Ryb3llZCwgYW5kIHlvdSB3aWxsCm5ldmVy
IGhlYXIgZnJvbSBtZS4KTmV4dCB0aW1lIHlvdSBjb3ZlciB5b3VyIGNhbWVyYXMsIHNvbWVib2R5
IG1heSB3YXRjaCBpdCEgTGltaXQgeW91cnNlbGYgdG8Kb25lIHRpbWUgcGVyIG1vbnRoIGlmIHlv
dSBjYW5gdCBnbyBjb21wbGV0ZWx5IE5vIEZhcC4KCg==
--===============8150405381439190264==--
--===============6570249421098864308==--
--1757508544-eximdsn-1804289383--