PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1772694800.M999006P15728.host100322.itwesthosting.com,S=6975,W=7092 |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id pVxlOxAtqWlwPQAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Thu, 05 Mar 2026 08:13:20 +0100
Return-path: <>
Envelope-to: goran.mumelas@h1telekom.hr
Delivery-date: Thu, 05 Mar 2026 08:13:20 +0100
Received: from 82.164.205.35.bc.googleusercontent.com ([35.205.164.82]:37006 helo=[10.88.0.4])
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
id 1vy2td-00045R-0q
for goran.mumelas@h1telekom.hr;
Thu, 05 Mar 2026 08:13:20 +0100
Content-Type: multipart/related; boundary="===============6975835315916139314=="
MIME-Version: 1.0
From: "H1 portal ." <no-reply@h1telekom.hr>
To: goran.mumelas@h1telekom.hr
X-Priority: 2
X-Spam-Status: Yes, score=11.8
X-Spam-Score: 118
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Account Goran.mumelas, Email addresses with expired sessions!
Confirm your account now and if you are using our service, please update
below.
Content analysis details: (11.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: ipfs.io]
0.0 TVD_RCVD_IP Message was received from an IP address
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[35.205.164.82 listed in zen.spamhaus.org]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.164.82 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[35.205.164.82 listed in sa-accredit.habeas.com]
2.8 URI_IPFSIO References Interplanetary File System PtP content via
ipfs.io, likely phishing
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.4 MISSING_DATE Missing Date: header
0.0 TVD_PH_BODY_ACCOUNTS_PRE The body matches phrases such as
"accounts suspended", "account credited",
"account verification"
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 URI_IPFS References Interplanetary File System PtP content,
probable phishing
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?q?Email_account_needs_to_be_updated_=5Bgoran=2Emumelas=40h1telekom=2Ehr=5D?=
X-From-Rewrite: unmodified, forwarded message
--===============6975835315916139314==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============6975835315916139314==--