| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773982372.M527774P2888.host100322.itwesthosting.com,S=9759,W=9918 |
Return-Path: <stepp@sender-bit.shop>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id ZmNVH6TSvGlICwAAp0YrwQ
(envelope-from <stepp@sender-bit.shop>)
for <ithome@host100322.itwesthosting.com>; Fri, 20 Mar 2026 05:52:52 +0100
Return-path: <stepp@sender-bit.shop>
Envelope-to: goran.mumelas@h1telekom.hr
Delivery-date: Fri, 20 Mar 2026 05:52:52 +0100
Received: from sender-bit.shop ([78.111.75.121]:36170)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <stepp@sender-bit.shop>)
id 1w3Rqu-0000kT-1F
for goran.mumelas@h1telekom.hr;
Fri, 20 Mar 2026 05:52:52 +0100
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=sender-bit.shop; s=mail; h=Date:Message-Id:Reply-To:To:From:Subject:
MIME-Version:Content-Type:Sender:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=VHCF6GixqnaHHQ6c+J3JtiwLLigCQlvwm+DT9ghVvV4=; b=KMr4zH5HCP39bpdTRVUGhn6Fy9
1D+KDMZbtrKYNumWG1htJ4zD8PR9uXpq9OmGOJnbyPKw/Xh22dZgleaN9TzzQeSHcyYpeadqNwYaw
UCARFk/9GviUKsT6qQW8J3vL0etBfBSnQL0Xt6X64GFwLPLtkKEyW5HdJ0q+Npa5AD8NivKq+X1DY
whaTIcE1JZJh+DdIwRKZMJMgBMxH33KiqFwG7ohwysZYqFnqrh+m2muLLqvo8DL0FZE5ATQM4jhG9
MEeVNnTVvsIVcJTztbh/zojbkXng8hQJUENu0k9yOB5UbYddsJnJqxu8B+ijHSrFmeTliyKx3F55L
RN1zoCPA==;
Received: from [151.241.154.136]
by cp.sender-bit.shop with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <stepp@sender-bit.shop>)
id 1w3Rqs-009oaL-8H
for goran.mumelas@h1telekom.hr; Fri, 20 Mar 2026 00:52:50 -0400
Content-Type: multipart/alternative;
boundary="===============3097638651986007715=="
MIME-Version: 1.0
From: iCloud <stepp@sender-bit.shop>
To: goran.mumelas@h1telekom.hr
Reply-To: support@icloud.com
Message-Id: <E1w3Rqs-009oaL-8H@cp.sender-bit.shop>
Date: Fri, 20 Mar 2026 00:52:50 -0400
X-Spam-Status: Yes, score=9.6
X-Spam-Score: 96
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Billing Problem iCloud Billing Problem Your iCloud ID has
been Locked on Mar 18 , 2026 for security reasons
Content analysis details: (9.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: sender-bit.shop]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: sender-bit.shop]
2.5 URIBL_DBL_PHISH Contains a Phishing URL listed in the Spamhaus
DBL blocklist
[URIs: turnhavy.space]
0.1 URIBL_CSS_A Contains URL's A record listed in the Spamhaus CSS
blocklist
[URIs: sender-bit.shop]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
[Blocked - see <https://www.spamcop.net/bl.shtml?78.111.75.121>]
0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: turnhavy.space]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[78.111.75.121 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[78.111.75.121 listed in sa-accredit.habeas.com]
0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
tag
X-Spam-Flag: YES
Subject: ***SPAM*** ACTION REQUIRED: iCloud+ Billing Issue - Update Payment Method
Immediately
X-From-Rewrite: unmodified, forwarded message
--===============3097638651986007715==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
<div style="font-size: 12pt; font-family: Arial, Helvetica, sans-serif; direction: null; color: #000000;" data-attr="forced_root_block_attrs">
<table style="width: 742px; max-width: 100%;" border="0" cellspacing="0" cellpadding="0" align="center">
<tbody>
<tr>
<td style="padding: 20px 0; text-align: center;"><img src="https://s.mzstatic.com/email/images_shared/logo_apple_d-2x.png" width="42" height="42" style="border: 0;" alt="Apple"></td>
<td style="padding: 20px 0; color: #888; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 32px; font-weight: 300; text-align: right;">Billing Problem</td>
</tr>
<tr>
<td style="padding: 0 20px;" colspan="2">
<table style="background-color: #f5f5f5; border-radius: 3px;" border="0" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding: 20px; text-align: center;"><img src="https://is1-ssl.mzstatic.com/image/thumb/Purple126/v4/74/89/8c/74898c5f-5649-2d24-c3cd-dd33a89dccd0/AppIcon-1x_U007emarketing-0-7-0-85-220.png/280x280bb.jpg" width="140" height="140" style="border-radius: 32px; border: 0;" alt="iCloud"></td>
<td style="padding: 20px;">
<h2 style="color: #333; font-size: 18px; margin: 0 0 10px 0;">iCloud</h2>
<p style="color: #ee0200; font-weight: bold; margin: 0;">Billing Problem</p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding: 20px; text-align: center;" colspan="2">
<p style="font-weight: bold; color: #000; margin: 0 0 15px 0;">Your iCloud ID has been Locked on Mar 18 , 2026 for security reasons</p>
<p style="margin: 0 0 20px 0;"><span style="font-size: 14px;">If you do not respond within 12 hours of this email, Your iCloud ID will be suspended and you will no longer be able to access your account.</span></p>
<p style="margin: 0 0 20px 0;"><span style="font-size: 14px;">To avoid interruption to your service, please update your payment information.</span></p>
<table border="0" cellspacing="0" cellpadding="0" align="center">
<tbody>
<tr>
<td style="border-radius: 4px; background-color: #027eff;" align="center"><a style="display: inline-block; padding: 8px 20px; color: #ffffff; font-family: 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 13px; font-weight: 400; text-decoration: none; border-radius: 4px;" href="https://my.turnhavy.space/lonwi/" target="_blank" rel="noopener noreferrer">Update Payment Information </a></td>
</tr>
</tbody>
</table>
<p style="margin: 20px 0 0 0;">Sincerely,<br>Apple</p>
</td>
</tr>
<tr>
<td style="padding: 30px 20px 10px; text-align: center; color: #666; font-size: 12px;" colspan="2">
<p style="margin: 0 0 10px 0;">For help with subscriptions and purchases, visit <a style="color: #1155cc; text-decoration: underline;" href="https://support.apple.com" target="_blank" rel="noopener noreferrer">Apple Support</a></p>
<p style="margin: 0 0 20px 0;"><a style="color: #0073ff; text-decoration: underline;" href="https://appleid.apple.com" target="_blank" rel="noopener noreferrer">Apple Account</a> • <a style="color: #1155cc; text-decoration: underline;" href="https://finance-app.itunes.apple.com/purchases" target="_blank" rel="noopener noreferrer">Purchase History</a> • <a style="color: #0073ff; text-decoration: underline;" href="https://www.apple.com/legal/sales-support/" target="_blank" rel="noopener noreferrer">Terms of Sale</a> • <a style="color: #0073ff; text-decoration: underline;" href="https://www.apple.com/legal/privacy/" target="_blank" rel="noopener noreferrer">Privacy Policy</a></p>
<p style="margin: 0;">Copyright © 2025 Apple Distribution International Ltd.<br><a style="color: #1187ff; text-decoration: underline;" href="https://www.apple.com/legal/" target="_blank" rel="noopener noreferrer">All rights reserved</a></p>
</td>
</tr>
</tbody>
</table>
</div>
--===============3097638651986007715==--