| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757717343.M530138P1295.host100322.itwesthosting.com,S=7877,W=8036:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id ijlzH1+jxGgPBQAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sat, 13 Sep 2025 00:49:03 +0200
Return-path: <>
Envelope-to: it-bss@h1telekom.hr
Delivery-date: Sat, 13 Sep 2025 00:49:03 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxCZj-0000Kn-1R
for it-bss@h1telekom.hr;
Sat, 13 Sep 2025 00:49:03 +0200
X-Failed-Recipients: it-bss@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: it-bss@h1telekom.hr
References: <20250907184717.3983@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757717343-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxCZj-0000Kn-1R@host100322.itwesthosting.com>
Date: Sat, 13 Sep 2025 00:49:03 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757717343-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
it-bss@h1telekom.hr
--1757717343-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;it-bss@h1telekom.hr
Status: 5.0.0
--1757717343-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <it-bss@h1telekom.hr>
Received: from [23.177.184.230] (port=54540 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <it-bss@h1telekom.hr>)
id 1uvOAJ-0006UB-02
for it-bss@h1telekom.hr;
Mon, 08 Sep 2025 00:47:19 +0200
Received: from smtp.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id 35BBD3FC5B
for <it-bss@h1telekom.hr>; Sun, 7 Sep 2025 18:47:17 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============1909160332631318039=="
MIME-Version: 1.0
From: it-bss@h1telekom.hr <it-bss@h1telekom.hr>
To: it-bss@h1telekom.hr
Reply-To: it-bss@h1telekom.hr
Message-ID: <20250907184717.3983@h1telekom.hr>
Date: Sun, 07 Sep 2025 18:47:17
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=18.0
X-Spam-Score: 180
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: it-bss@h1telekom.hr I will be direct You watch adult content
often, and I caught you masturbating. We all do it from time to time. How
I did this Your router was vulnerable. I was able to inject some [...]
Content analysis details: (18.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** i have very badnews for you.
--===============1909160332631318039==
Content-Type: multipart/alternative; boundary="===============4143577797875134728=="
MIME-Version: 1.0
--===============4143577797875134728==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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=
--===============4143577797875134728==--
--===============1909160332631318039==--
--1757717343-eximdsn-1804289383--