| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757989848.M708641P26182.host100322.itwesthosting.com,S=8156,W=8319:2, |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id MtscKtjLyGhGZgAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Tue, 16 Sep 2025 04:30:48 +0200
Return-path: <>
Envelope-to: sasa.reic@h1telekom.hr
Delivery-date: Tue, 16 Sep 2025 04:30:48 +0200
Received: from mailnull by host100322.itwesthosting.com with local (Exim 4.96.2)
id 1uyLSy-0006oC-22
for sasa.reic@h1telekom.hr;
Tue, 16 Sep 2025 04:30:48 +0200
X-Failed-Recipients: sasa.reic@h1telekom.hr
Auto-Submitted: auto-replied
From: Mail Delivery System <Mailer-Daemon@host100322.itwesthosting.com>
To: sasa.reic@h1telekom.hr
References: <20250910222622.6173@h1telekom.hr>
Content-Type: multipart/report; report-type=delivery-status; boundary=1757989848-eximdsn-1804289383
MIME-Version: 1.0
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1uyLSy-0006oC-22@host100322.itwesthosting.com>
Date: Tue, 16 Sep 2025 04:30:48 +0200
X-From-Rewrite: unmodified, actual sender is mailnull
--1757989848-eximdsn-1804289383
Content-type: text/plain; charset=us-ascii
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
sasa.reic@h1telekom.hr
--1757989848-eximdsn-1804289383
Content-type: message/delivery-status
Reporting-MTA: dns; host100322.itwesthosting.com
Action: failed
Final-Recipient: rfc822;sasa.reic@h1telekom.hr
Status: 5.0.0
--1757989848-eximdsn-1804289383
Content-type: message/rfc822
Return-path: <sasa.reic@h1telekom.hr>
Received: from [23.177.184.230] (port=36690 helo=localhost.localdomain)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <sasa.reic@h1telekom.hr>)
id 1uwX0z-0000GQ-0G
for sasa.reic@h1telekom.hr;
Thu, 11 Sep 2025 04:26:26 +0200
Received: from smtp.your-helo-hostname (localhost [IPv6:::1])
by localhost.localdomain (Postfix) with ESMTP id 296DC3FD92
for <sasa.reic@h1telekom.hr>; Wed, 10 Sep 2025 22:26:22 -0400 (EDT)
Content-Type: multipart/mixed; boundary="===============5689822077486042148=="
MIME-Version: 1.0
From: sasa.reic@h1telekom.hr <sasa.reic@h1telekom.hr>
To: sasa.reic@h1telekom.hr
Reply-To: sasa.reic@h1telekom.hr
Message-ID: <20250910222622.6173@h1telekom.hr>
Date: Wed, 10 Sep 2025 22:26:22
Content-Transfer-Encoding: binary
MIME-Version: 1.0
Precedence: normal
X-Priority: 1
Importance: normal
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: sasa.reic@h1telekom.hr I will be direct You watch adult content
often, and I caught you masturbating. We all do it from time to time. How
I did this Your router was vulnerable. I was able to inject so [...]
Content analysis details: (19.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?23.177.184.230>]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[23.177.184.230 listed in bl.score.senderscore.com]
1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
8.5 KAM_CRIM Extortion Email
0.0 LOTS_OF_MONEY Huge... sums of money
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 PDS_BTC_ID FP reduced Bitcoin ID
0.0 BITCOIN_XPRIO Bitcoin + priority
0.0 BITCOIN_EXTORT_01 Extortion spam, pay via BitCoin
1.4 BITCOIN_SPAM_07 BitCoin spam pattern 07
3.5 BITCOIN_TOEQFM Bitcoin + To same as From
X-Spam-Flag: YES
Subject: ***SPAM*** YOU HAVE A VERY BADNEWS
--===============5689822077486042148==
Content-Type: multipart/alternative; boundary="===============7876318462070108261=="
MIME-Version: 1.0
--===============7876318462070108261==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
c2FzYS5yZWljQGgxdGVsZWtvbS5ociBJIHdpbGwgYmUgZGlyZWN0IFlvdSB3YXRjaCBhZHVsdCBj
b250ZW50IG9mdGVuLCBhbmQgSSBjYXVnaHQgeW91Cm1hc3R1cmJhdGluZy4gV2UgYWxsIGRvIGl0
IGZyb20gdGltZSB0byB0aW1lLiBIb3cgSSBkaWQgdGhpcyBZb3VyIHJvdXRlcgp3YXMgdnVsbmVy
YWJsZS4gSSB3YXMgYWJsZSB0byBpbmplY3Qgc29tZSBjb2RlIGludG8gdGhlIGZpcm13YXJlLCBh
bmQgZXZlcnkKZGV2aWNlIGNvbm5lY3RlZCBvbiB0aGUgbmV0d29yaywgaW5jbHVkaW5nIHBob25l
cywgd2FzIGNvbXByb21pc2VkLiBUaGVuIEkKc2V0IGV2ZXJ5IGRldmljZSBhdmFpbGFibGUgdG8g
cmVjb3JkIHdpdGggdGhlIGNhbWVyYSBvbmx5IHdoZW4geW91IHdhdGNoCmFkdWx0IGNvbnRlbnQu
IEkgYWxzbyBnb3QgeW91ciBjb250YWN0IGxpc3RzLCBwaG9uZSBudW1iZXJzLCBlbWFpbHMsIHNv
Y2lhbAptZWRpYSBjb250YWN0cywgYW5kIGhlcmUgaXMgdGhlIGRlYWwuIElmIHlvdSBkb25gdCBw
YXkgbWUgJDE2NDM4NzAgVVNEIHdvcnRoCmluIEJpY29pbiwgSSB3aWxsIHNlbmQgeW91ciBtYXN0
dXJiYXRpb24gdmlkZW8sICBzZWFyY2ggaGlzdG9yeSwgIGFuZCBhbGwgeW91ciBwcml2YXRlIGNo
YXQgdG8gYWxsCnlvdXIgY29udGFjdHMgYW5kICBhbGwgc29jaWFsIG1lZGlhCgpCaXRjb2luIEFk
ZHJlc3M6IDFCZHkxRnVLeWVhUHVuMWdNb2VTVGhoNm1pUm9lb3o5Zk4KCkFNT1VOVDogMTUgIEJU
QyAgYXBwcm94aW1hdGVseTsKCkNvcHkgdGhlIGFkZHJlc3MgcGVyZmVjdGx5LCAgd2l0aCBubyBt
aXN0YWtlcwoKUXVpY2sgVElQOiAgWW91IGNhbiBlYXNpbHkgYnV5IGJpdGNvaW4gaGVyZTogcGF4
ZnVsICwgY29pbmdhdGUuCiwgY29pbmJhc2UsIG9yIGNoZWNrIGZvciBiaXRjb2luIEFUTSBuZWFy
IHlvdSwgb3IgR29vZ2xlIGZvciBvdGhlciBleGNoYW5nZS4KWW91IGNhbiBzZW5kIHRoZSBiaXRj
b2luIGRpcmVjdGx5IHRvIG15IHdhbGxldCwgb3IgY3JlYXRlIHlvdXIgb3duIHdhbGxldCBmaXJz
dCBoZXJlOiBibG9ja2NoYWluLCB0aGVuIHJlY2VpdmUgYW5kIHNlbmQgdG8gbWluZSwKb3Igc3dh
cCBjb2luIHRvIGJ0Yy4KQWxzbywgc2VhcmNoIGZvciB3aGF0IGlzIE5vIEZhcCBhbmQgcmVhZCBh
Ym91dCB0aGUgYmVuZWZpdHMgb2Ygbm8gUE1PLgpXYXRjaGluZyBkaXJ0eSBwb3JuIGlzIGEgd2Fz
dGUgb2YgdGltZSwgZW5lcmd5LCBhbmQgbWluZXJhbHMgZnJvbSB0aGUgYm9keQpJIGhvcGUgeW91
IHdpbGwgdGhpbmsgYWJvdXQgdGhpcyB2ZXJ5IHNlcmlvdXNseS4KSW4gY2FzZSB5b3Ugd29uZGVy
IHdoeSB5b3VyIGFudGktdmlydXNlcyB3ZXJlIG5vdCB0cmlnZ2VyZWQgaXMgYmVjYXVzZSBteQpj
b2RlIGlzIG5vdCBzZXQgdG8gc3RlYWwgcGFzc3dvcmRzLCBQSU4gY29kZXMsIGFuZCBvdGhlciBz
ZW5zaXRpdmUgZGV0YWlscy4KVGhlIG9ubHkgZnVuY3Rpb24gaXMgdG8gcmVjb3JkIHdpdGggdGhl
IGNhbWVyYXMoaW4gc2lsZW50IG1vZGUpIGFuZCBncmFiCnRoZSBjb250YWN0cy4gSSBrbm93IHRo
YXQgeW91IGhhdmUgdGhhdCBhbW91bnQgb2YgbW9uZXkgdGhhdCBpcyByZXF1ZXN0ZWQuClNvIGRv
bmB0IHdvcnJ5IGFib3V0IHlvdXIgcGFzc3dvcmRzIGFuZCBiYW5rIGFjY291bnRzLCBIb3dldmVy
LCBmb3IgeW91cgptZW50YWwgcGVhY2UsIGdvIGFoZWFkLCBjaGFuZ2UgdGhlbS4KWW91IGhhdmUg
IDcgREFZUyAiIHRvIHNlbmQgdGhlIHBheW1lbnQuIFdoZW4gY29pbnMgYXJlIHN1Ym1pdHRlZCAs
CnRoZSB2aWRlbyB3aXRoIHlvdSBkb2luZzsgeW91IGtub3cgd2hhdCB3aWxsIGJlIGRlc3Ryb3ll
ZCwgYW5kIHlvdSB3aWxsCm5ldmVyIGhlYXIgZnJvbSBtZS4KTmV4dCB0aW1lIHlvdSBjb3ZlciB5
b3VyIGNhbWVyYXMsIHNvbWVib2R5IG1heSB3YXRjaCBpdCEgTGltaXQgeW91cnNlbGYgdG8Kb25l
IHRpbWUgcGVyIG1vbnRoIGlmIHlvdSBjYW5gdCBnbyBjb21wbGV0ZWx5IE5vIEZhcC4=
--===============7876318462070108261==--
--===============5689822077486042148==--
--1757989848-eximdsn-1804289383--