| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757805543.M299511P25396.host100322.itwesthosting.com,S=8234,W=8397:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id EoeqDuf7xWg0YwAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sun, 14 Sep 2025 01:19:03 +0200
Return-path: <>
Envelope-to: laris.grubelic@h1telekom.hr
Delivery-date: Sun, 14 Sep 2025 01:19:03 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxZWI-0006bW-32
for laris.grubelic@h1telekom.hr;
Sun, 14 Sep 2025 01:19:03 +0200
X-Failed-Recipients: laris.grubelic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: laris.grubelic@h1telekom.hr
References: <20250908191122.3648@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757805542-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxZWI-0006bW-32@host100322.itwesthosting.com>
Date: Sun, 14 Sep 2025 01:19:02 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757805542-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
laris.grubelic@h1telekom.hr
--1757805542-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;laris.grubelic@h1telekom.hr
Status: 5.0.0
--1757805542-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <laris.grubelic@h1telekom.hr>
Received: from [23.177.184.230] (port=51924 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <laris.grubelic@h1telekom.hr>)
id 1uvl1B-00040X-16
for laris.grubelic@h1telekom.hr;
Tue, 09 Sep 2025 01:11:25 +0200
Received: from mail.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id D05E63FC6B
for <laris.grubelic@h1telekom.hr>; Mon, 8 Sep 2025 19:11:22 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============2590852984537929074=="
MIME-Version: 1.0
From: laris.grubelic@h1telekom.hr <laris.grubelic@h1telekom.hr>
To: laris.grubelic@h1telekom.hr
Reply-To: laris.grubelic@h1telekom.hr
Message-ID: <20250908191122.3648@h1telekom.hr>
Date: Mon, 08 Sep 2025 19:11:22
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: laris.grubelic@h1telekom.hr I will be direct You watch adult
content often, and I caught you masturbating. We all do it from time to time.
How I did this Your router was vulnerable. I was able to inje [...]
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE A VERY BADNEWS
--===============2590852984537929074==
Content-Type: multipart/alternative; boundary="===============3661382165465600107=="
MIME-Version: 1.0
--===============3661382165465600107==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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==
--===============3661382165465600107==--
--===============2590852984537929074==--
--1757805542-eximdsn-1804289383--