PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757780343.M560417P25980.host100322.itwesthosting.com,S=8246,W=8409:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id eNlLIXeZxWh8ZQAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sat, 13 Sep 2025 18:19:03 +0200
Return-path: <>
Envelope-to: katarina.jelekovic@h1telekom.hr
Delivery-date: Sat, 13 Sep 2025 18:19:03 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxSxr-0006lf-1Z
for katarina.jelekovic@h1telekom.hr;
Sat, 13 Sep 2025 18:19:03 +0200
X-Failed-Recipients: katarina.jelekovic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: katarina.jelekovic@h1telekom.hr
References: <20250908120633.4440@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757780343-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxSxr-0006lf-1Z@host100322.itwesthosting.com>
Date: Sat, 13 Sep 2025 18:19:03 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757780343-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
katarina.jelekovic@h1telekom.hr
--1757780343-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;katarina.jelekovic@h1telekom.hr
Status: 5.0.0
--1757780343-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <katarina.jelekovic@h1telekom.hr>
Received: from [23.177.184.230] (port=43048 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <katarina.jelekovic@h1telekom.hr>)
id 1uveO3-0003Xl-1c
for katarina.jelekovic@h1telekom.hr;
Mon, 08 Sep 2025 18:06:35 +0200
Received: from mail.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id 35CE93FDD3
for <katarina.jelekovic@h1telekom.hr>; Mon, 8 Sep 2025 12:06:33 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============7464849388327225627=="
MIME-Version: 1.0
From: katarina.jelekovic@h1telekom.hr <katarina.jelekovic@h1telekom.hr>
To: katarina.jelekovic@h1telekom.hr
Reply-To: katarina.jelekovic@h1telekom.hr
Message-ID: <20250908120633.4440@h1telekom.hr>
Date: Mon, 08 Sep 2025 12:06:33
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: katarina.jelekovic@h1telekom.hr I will be direct You watch
adult content often, and I caught you masturbating. We all do it from time
to time. How I did this Your router was vulnerable. I was able to [...]
Content analysis details: (19.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** i have very badnews for you.
--===============7464849388327225627==
Content-Type: multipart/alternative; boundary="===============9179799728513336463=="
MIME-Version: 1.0
--===============9179799728513336463==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============9179799728513336463==--
--===============7464849388327225627==--
--1757780343-eximdsn-1804289383--