| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757881849.M605203P4046.host100322.itwesthosting.com,S=7987,W=8147:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id EzL0I/klx2jODwAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Sun, 14 Sep 2025 22:30:49 +0200
Return-path: <>
Envelope-to: nada.pudar@h1telekom.hr
Delivery-date: Sun, 14 Sep 2025 22:30:49 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uxtN3-00013A-1g
for nada.pudar@h1telekom.hr;
Sun, 14 Sep 2025 22:30:49 +0200
X-Failed-Recipients: nada.pudar@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: nada.pudar@h1telekom.hr
References: <20250909161746.1151@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757881849-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uxtN3-00013A-1g@host100322.itwesthosting.com>
Date: Sun, 14 Sep 2025 22:30:49 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757881849-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
nada.pudar@h1telekom.hr
--1757881849-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;nada.pudar@h1telekom.hr
Status: 5.0.0
--1757881849-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <nada.pudar@h1telekom.hr>
Received: from [23.177.184.230] (port=60638 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <nada.pudar@h1telekom.hr>)
id 1uw4mj-0000gl-0M
for nada.pudar@h1telekom.hr;
Tue, 09 Sep 2025 22:17:49 +0200
Received: from smtp.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id C0A543F6CE
for <nada.pudar@h1telekom.hr>; Tue, 9 Sep 2025 16:17:46 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============5975596124115517034=="
MIME-Version: 1.0
From: nada.pudar@h1telekom.hr <nada.pudar@h1telekom.hr>
To: nada.pudar@h1telekom.hr
Reply-To: nada.pudar@h1telekom.hr
Message-ID: <20250909161746.1151@h1telekom.hr>
Date: Tue, 09 Sep 2025 16:17:46
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=18.5
X-Spam-Score: 185
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: nada.pudar@h1telekom.hr I will be direct You watch adult content
often, and I caught you masturbating. We all do it from time to time. How
I did this Your router was vulnerable. I was able to inject s [...]
Content analysis details: (18.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE A VERY BADNEWS
--===============5975596124115517034==
Content-Type: multipart/alternative; boundary="===============0041140876323349876=="
MIME-Version: 1.0
--===============0041140876323349876==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============0041140876323349876==--
--===============5975596124115517034==--
--1757881849-eximdsn-1804289383--