| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757837751.M646988P11441.host100322.itwesthosting.com,S=8323,W=8487:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 2KPsI7d5xmixLAAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sun, 14 Sep 2025 10:15:51 +0200
Return-path: <>
Envelope-to: marina.blazonbobinac@h1telekom.hr
Delivery-date: Sun, 14 Sep 2025 10:15:51 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxhtn-00035M-19
for marina.blazonbobinac@h1telekom.hr;
Sun, 14 Sep 2025 10:15:51 +0200
X-Failed-Recipients: marina.blazonbobinac@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: marina.blazonbobinac@h1telekom.hr
References: <20250909041147.2179@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757837751-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxhtn-00035M-19@host100322.itwesthosting.com>
Date: Sun, 14 Sep 2025 10:15:51 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757837751-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
marina.blazonbobinac@h1telekom.hr
--1757837751-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;marina.blazonbobinac@h1telekom.hr
Status: 5.0.0
--1757837751-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <marina.blazonbobinac@h1telekom.hr>
Received: from [23.177.184.230] (port=36418 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <marina.blazonbobinac@h1telekom.hr>)
id 1uvtS9-0008Oa-2t
for marina.blazonbobinac@h1telekom.hr;
Tue, 09 Sep 2025 10:11:50 +0200
Received: from outbound.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id B65C23FDE9
for <marina.blazonbobinac@h1telekom.hr>; Tue, 9 Sep 2025 04:11:47 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============4102869217453134910=="
MIME-Version: 1.0
From: marina.blazonbobinac@h1telekom.hr <marina.blazonbobinac@h1telekom.hr>
To: marina.blazonbobinac@h1telekom.hr
Reply-To: marina.blazonbobinac@h1telekom.hr
Message-ID: <20250909041147.2179@h1telekom.hr>
Date: Tue, 09 Sep 2025 04:11:47
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: marina.blazonbobinac@h1telekom.hr I will be direct You watch
adult content often, and I caught you masturbating. We all do it from time
to time. How I did this Your router was vulnerable. I was able t [...]
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** BADNEWS FOR YOU
--===============4102869217453134910==
Content-Type: multipart/alternative; boundary="===============0251864493733348660=="
MIME-Version: 1.0
--===============0251864493733348660==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============0251864493733348660==--
--===============4102869217453134910==--
--1757837751-eximdsn-1804289383--