| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757831449.M947949P15579.host100322.itwesthosting.com,S=8201,W=8364:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id aIMpNxlhxmjbPAAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sun, 14 Sep 2025 08:30:49 +0200
Return-path: <>
Envelope-to: maja.cukusic@h1telekom.hr
Delivery-date: Sun, 14 Sep 2025 08:30:49 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxgG9-000439-1z
for maja.cukusic@h1telekom.hr;
Sun, 14 Sep 2025 08:30:49 +0200
X-Failed-Recipients: maja.cukusic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: maja.cukusic@h1telekom.hr
References: <20250909022125.4589@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757831449-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxgG9-000439-1z@host100322.itwesthosting.com>
Date: Sun, 14 Sep 2025 08:30:49 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757831449-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
maja.cukusic@h1telekom.hr
--1757831449-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;maja.cukusic@h1telekom.hr
Status: 5.0.0
--1757831449-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <maja.cukusic@h1telekom.hr>
Received: from [23.177.184.230] (port=33822 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <maja.cukusic@h1telekom.hr>)
id 1uvrjL-000488-2t
for maja.cukusic@h1telekom.hr;
Tue, 09 Sep 2025 08:21:28 +0200
Received: from smtp.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id A58503FDCA
for <maja.cukusic@h1telekom.hr>; Tue, 9 Sep 2025 02:21:25 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============5661352049765318633=="
MIME-Version: 1.0
From: maja.cukusic@h1telekom.hr <maja.cukusic@h1telekom.hr>
To: maja.cukusic@h1telekom.hr
Reply-To: maja.cukusic@h1telekom.hr
Message-ID: <20250909022125.4589@h1telekom.hr>
Date: Tue, 09 Sep 2025 02:21:25
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: maja.cukusic@h1telekom.hr I will be direct You watch adult
content often, and I caught you masturbating. We all do it from time to time.
How I did this Your router was vulnerable. I was able to inject [...]
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE A VERY BADNEWS
--===============5661352049765318633==
Content-Type: multipart/alternative; boundary="===============0968508416856213522=="
MIME-Version: 1.0
--===============0968508416856213522==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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=
--===============0968508416856213522==--
--===============5661352049765318633==--
--1757831449-eximdsn-1804289383--