File: /home/yastidua/mail/new/1674793726.M43016P2179071.patehan.idweb.host,S=7606,W=7772
Return-Path: <>
Delivered-To: yastidua@patehan.idweb.host
Received: from patehan.idweb.host
by patehan.idweb.host with LMTP
id 6i1fAP5S02P/PyEAR+cqUA
(envelope-from <>)
for <yastidua@patehan.idweb.host>; Fri, 27 Jan 2023 11:28:46 +0700
Return-path: <>
Envelope-to: yastidua@patehan.idweb.host
Delivery-date: Fri, 27 Jan 2023 11:28:46 +0700
Received: from mx4-ncdc.idweb.host ([203.161.184.57]:53018)
by patehan.idweb.host with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
id 1pLGM2-0098ru-Ki
for yastidua@patehan.idweb.host;
Fri, 27 Jan 2023 11:28:45 +0700
Received: by mx4-ncdc.idweb.host (Postfix)
id 4P34MZ3rFlzV27QF; Fri, 27 Jan 2023 11:28:42 +0700 (WIB)
Date: Fri, 27 Jan 2023 11:28:42 +0700 (WIB)
From: MAILER-DAEMON@idweb.host (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: yastidua@patehan.idweb.host
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="4P34MR68dyzV27Pt.1674793722/mx4-ncdc.idweb.host"
Content-Transfer-Encoding: 8bit
Message-Id: <4P34MZ3rFlzV27QF@mx4-ncdc.idweb.host>
X-Spam-Status: No, score=
X-Spam-Score:
X-Spam-Bar:
X-Ham-Report:
X-Spam-Flag: NO
This is a MIME-encapsulated message.
--4P34MR68dyzV27Pt.1674793722/mx4-ncdc.idweb.host
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
This is the mail system at host mx4-ncdc.idweb.host.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<vasyutin8484@mail.ru>: host mxs.mail.ru[94.100.180.31] said: 550 spam message
rejected. Please visit
http://help.mail.ru/notspam-support/id?c=F5o_wmy5fwvnCBQ2LLTNZ2jQe3y0eqFO5AJyIHRkcJ1gopyPW9ZL0BMAAAB0fQEAKuMVDg~~
or report details to abuse@corp.mail.ru. Error code:
C23F9A170B7FB96C361408E767CDB42C7C7BD0684EA17AB4207202E49D7064748F9CA260D04BD65B.
ID: 0000001300017D740E15E32A. (in reply to end of DATA command)
--4P34MR68dyzV27Pt.1674793722/mx4-ncdc.idweb.host
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; mx4-ncdc.idweb.host
X-Postfix-Queue-ID: 4P34MR68dyzV27Pt
X-Postfix-Sender: rfc822; yastidua@patehan.idweb.host
Arrival-Date: Fri, 27 Jan 2023 11:28:35 +0700 (WIB)
Final-Recipient: rfc822; vasyutin8484@mail.ru
Original-Recipient: rfc822;vasyutin8484@mail.ru
Action: failed
Status: 5.0.0
Remote-MTA: dns; mxs.mail.ru
Diagnostic-Code: smtp; 550 spam message rejected. Please visit
http://help.mail.ru/notspam-support/id?c=F5o_wmy5fwvnCBQ2LLTNZ2jQe3y0eqFO5AJyIHRkcJ1gopyPW9ZL0BMAAAB0fQEAKuMVDg~~
or report details to abuse@corp.mail.ru. Error code:
C23F9A170B7FB96C361408E767CDB42C7C7BD0684EA17AB4207202E49D7064748F9CA260D04BD65B.
ID: 0000001300017D740E15E32A.
--4P34MR68dyzV27Pt.1674793722/mx4-ncdc.idweb.host
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
Return-Path: <yastidua@patehan.idweb.host>
X-Spam-Status: No
DKIM-Filter: OpenDKIM Filter v2.11.0 mx4-ncdc.idweb.host 4P34MR68dyzV27Pt
Authentication-Results: mx4-ncdc.idweb.host;
dkim=fail reason="key not found in DNS" (0-bit key) header.d=yastidua.sch.id header.i=@yastidua.sch.id header.b="TfSyOegP"
X-idwebhost-MailScanner-eFa-Watermark: 1675398509.38924@d7IbpXdB/amHcoxPYAslpw
X-idwebhost-MailScanner-eFa-From: yastidua@patehan.idweb.host
X-idwebhost-MailScanner-eFa: Found to be clean
X-idwebhost-MailScanner-eFa-ID: 4P34MF60G0zV27Pt
X-idwebhost-MailScanner-eFa-Information: Please contact hosting@jogjacamp.co.id for more information
Received: from patehan.idweb.host (patehan.idweb.host [203.161.184.74])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(no client certificate requested)
by mx4-ncdc.idweb.host (MailScanner Milter) with SMTP id 4P34MF60G0zV27Pt
for <vasyutin8484@mail.ru>; Fri, 27 Jan 2023 11:28:26 +0700 (WIB)
DKIM-Filter: OpenDKIM Filter v2.11.0 mx4-ncdc.idweb.host 4P34MF60G0zV27Pt
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=yastidua.sch.id; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=q2ssq5c/7pEBaRiYPxQY7G2bSa1oaSroXR/yord0dPk=; b=TfSyOegPdXtwsmleL/7ZmFHT1J
oan8f6BHH2zns/V8Ib008vrupxq+IlYcwF8iFfQGk+pqHZBZMKVectPSeYHM6HH0NcK72sLcNzOqQ
6EzcavXroNIEPZ5tZUMzYn26t5BY+RPe+JJDiw1IeHEPX50z1/+Hua1rbQtX8WwJ7yA3nUhhijV2a
7ocFSLxbomCPlzKNvECXLMuBd6oeaV9XX3AkoGS+9bEoo0Z7LHqhZCc+isjgt0/4arcUsBBJTX2Nj
XPY4ben58Nm0QlFkcgMP2VpVumKmpGRyF/K5Qg4pIs6S0YvbEgz4gfzLcHkWbOb7CQNKorTQsszsm
T5xW2DgA==;
Received: from yastidua by patehan.idweb.host with local (Exim 4.95)
(envelope-from <yastidua@patehan.idweb.host>)
id 1pLGLh-0098oQ-4T
for vasyutin8484@mail.ru;
Fri, 27 Jan 2023 11:28:25 +0700
To: vasyutin8484@mail.ru
Subject: [MTSS YASTI 2] Login Details
X-PHP-Script: yastidua.sch.id/index.php for 193.188.22.146, 193.188.22.146
X-PHP-Filename: /home/yastidua/public_html/index.php REMOTE_ADDR: 193.188.22.146
Date: Fri, 27 Jan 2023 04:28:24 +0000
From: WordPress <wordpress@sch.id>
Message-ID: <tTfQsIRIfUtUTvvdC3fheJHO3K0qVcbx5chgwmKAH9w@yastidua.sch.id>
X-Mailer: PHPMailer 6.6.0 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_tTfQsIRIfUtUTvvdC3fheJHO3K0qVcbx5chgwmKAH9w"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - patehan.idweb.host
X-AntiAbuse: Original Domain - mail.ru
X-AntiAbuse: Originator/Caller UID/GID - [1840 993] / [47 12]
X-AntiAbuse: Sender Address Domain - patehan.idweb.host
X-Get-Message-Sender-Via: patehan.idweb.host: authenticated_id: yastidua/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: patehan.idweb.host: yastidua
X-Source:
X-Source-Args:
X-Source-Dir: yastidua.sch.id:/public_html
This is a multi-part message in MIME format.
--b1_tTfQsIRIfUtUTvvdC3fheJHO3K0qVcbx5chgwmKAH9w
Content-Type: text/plain; charset=us-ascii
Username: nxshnN0dsq www.spacex.com
To set your password, visit the following address:
https://yastidua.sch.id/account/?action=rp&key=rQgdVEd0YXkBYvoPezos&login=nxshnN0dsq%20www.spacex.com
https://yastidua.sch.id/wp-login.php
--b1_tTfQsIRIfUtUTvvdC3fheJHO3K0qVcbx5chgwmKAH9w
Content-Type: text/html; charset=us-ascii
<p>Username: nxshnN0dsq <a href="http://www.spacex.com" rel="nofollow">http://www.spacex.com</a></p>
<p>To set your password, visit the following address:</p>
<p><a href="https://yastidua.sch.id/account/?action=rp&key=rQgdVEd0YXkBYvoPezos&login=nxshnN0dsq%20www.spacex.com" rel="nofollow"><font color="red"><b>MailScanner has detected a possible fraud attempt from "yastidua.sch.id" claiming to be</b></font> https://yastidua.sch.id/account/?action=rp&key=rQgdVEd0YXkBYvoPezos&login=nxshnN0dsq%20www.spacex.com</a></p>
<p><a href="https://yastidua.sch.id/wp-login.php" rel="nofollow">https://yastidua.sch.id/wp-login.php</a></p>
--b1_tTfQsIRIfUtUTvvdC3fheJHO3K0qVcbx5chgwmKAH9w--
--4P34MR68dyzV27Pt.1674793722/mx4-ncdc.idweb.host--