| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757837755.M745912P11441.host100322.itwesthosting.com,S=8136,W=8298:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id ONnvK7t5xmixLAAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sun, 14 Sep 2025 10:15:55 +0200
Return-path: <>
Envelope-to: mario.cular@h1telekom.hr
Delivery-date: Sun, 14 Sep 2025 10:15:55 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxhtr-00037X-1b
for mario.cular@h1telekom.hr;
Sun, 14 Sep 2025 10:15:55 +0200
X-Failed-Recipients: mario.cular@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: mario.cular@h1telekom.hr
References: <20250909041523.4596@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757837755-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxhtr-00037X-1b@host100322.itwesthosting.com>
Date: Sun, 14 Sep 2025 10:15:55 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757837755-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
mario.cular@h1telekom.hr
--1757837755-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;mario.cular@h1telekom.hr
Status: 5.0.0
--1757837755-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <mario.cular@h1telekom.hr>
Received: from [23.177.184.230] (port=45062 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <mario.cular@h1telekom.hr>)
id 1uvtVd-00005n-18
for mario.cular@h1telekom.hr;
Tue, 09 Sep 2025 10:15:25 +0200
Received: from mx.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id DD6613FDAC
for <mario.cular@h1telekom.hr>; Tue, 9 Sep 2025 04:15:23 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============3463202750378296291=="
MIME-Version: 1.0
From: mario.cular@h1telekom.hr <mario.cular@h1telekom.hr>
To: mario.cular@h1telekom.hr
Reply-To: mario.cular@h1telekom.hr
Message-ID: <20250909041523.4596@h1telekom.hr>
Date: Tue, 09 Sep 2025 04:15:23
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.2
X-Spam-Score: 192
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: mario.cular@h1telekom.hr I will be direct You watch adult
content often, and I caught you masturbating. We all do it from time to time.
How I did this Your router was vulnerable. I was able to inject [...]
Content analysis details: (19.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** i have very badnews for you.
--===============3463202750378296291==
Content-Type: multipart/alternative; boundary="===============2631770841222289315=="
MIME-Version: 1.0
--===============2631770841222289315==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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==
--===============2631770841222289315==--
--===============3463202750378296291==--
--1757837755-eximdsn-1804289383--