| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757009476.M224659P12181.host100322.itwesthosting.com,S=8719,W=8892:2, |
Return-Path: <noreply@send-c-9de87.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id IGs/DUTWuWiVLwAAp0YrwQ
(envelope-from <noreply@send-c-9de87.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Thu, 04 Sep 2025 20:11:16 +0200
Return-path: <noreply@send-c-9de87.firebaseapp.com>
Envelope-to: dubravko.dodig@h1telekom.hr
Delivery-date: Thu, 04 Sep 2025 20:11:16 +0200
Received: from mail-il1-f199.google.com ([209.85.166.199]:44089)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@send-c-9de87.firebaseapp.com>)
id 1uuEQU-0003Do-1R
for dubravko.dodig@h1telekom.hr;
Thu, 04 Sep 2025 20:11:16 +0200
Received: by mail-il1-f199.google.com with SMTP id e9e14a558f8ab-3f2b8187ec9so27240395ab.0
for <dubravko.dodig@h1telekom.hr>; Thu, 04 Sep 2025 11:11:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1757009471; x=1757614271; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=G1zbC66Gkz3FvK2l2X8XtMVRl1vN18olleJA+FMDqNU=;
b=jVbp+YYYDcDauhUDi9l5suMrB/OV8wNJepe6r1WtQGaOMkgBH7x2OZ5e30uOB9tonI
zzaNSl0tfwwe5MAbRCo/IRc72qBlOg8OY9MnA05TXQ6VSw5GvtmU+/VTJH+DRooux7Nl
JmHaacsn0IyEY5l9dJMP0rSOPHbz2cuN9A3VyyAOJ1o60HHFgtIQ/sd5U9yx3/2yjBPO
B0zydVD9lWTumps5EcXwOgTP33u/UsVYrEXCZwGKzSpFmblBx2ktmvLFXnIdeqqqId3C
Dh95tXu/1IP+0TAaAryToo/Z1+3HJBNF6I8SeLo/ZkHAOEGO9ucUwkMsPIpSZDZpVKj1
AHdg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1757009471; x=1757614271;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=G1zbC66Gkz3FvK2l2X8XtMVRl1vN18olleJA+FMDqNU=;
b=UYY1YQmWQoQ0jN5lOL6sUpBsefoI4XTusPuT1K1vgZNVIGL3KMBZmusdruSScmrXqx
GUi/Q17cvxKQd69Px1wSVdLItaiJe+FPmYWBamJyCo/MuHTezQi0v9v/4FahXOXCKqqv
yE2tMw7qJOSbSDpueOaJFy6CpEPiheoM/JGok1r2lLH20PemLUcsxL3R3POUrPNkpOcr
ejQw07TItQ74AS9b5eXVxtbJNvEf6Cbl3SRgyx8yn6IBv08h9jlWwh6n6Chi4T4Oa93q
D48X+A495q932WljIAWb8jzD15tq7NTPZv/hZCV2Fi5H+fus8w8mGK5jtLK7N/LYFAC5
hcog==
X-Gm-Message-State: AOJu0Yyfm/mRt0AiXHyfNWzP7baUI7M344m9H/2A437A74fA4mIwVSCE
BxDe4o2aCsl/7ee6px0wxY6oMFbZSr0BNF5msDfPA4d3WQZQxMxc7ESGdim5dWsp4Fi05C0TJ9l
PsOGokX5LtQ==
X-Google-Smtp-Source: AGHT+IETQ8oQbgntumgCGHZeaP9T6Hdx5b+ruxcvSnpMvozT7IFCg3F6+oUMfli2XGUS0BnBLzv6AR3yeT8bL9E=
MIME-Version: 1.0
X-Received: by 2002:a92:ca4a:0:b0:3eb:87a2:aead with SMTP id
e9e14a558f8ab-3f401bee16dmr372547895ab.18.1757009470926; Thu, 04 Sep 2025
11:11:10 -0700 (PDT)
Message-ID: <00000000000061af50063dfda53f@google.com>
Date: Thu, 04 Sep 2025 18:11:10 +0000
Subject: =?UTF-8?Q?Potrebna_radnja=3A_Nastavak_pla=C4=87anja_za_narud=C5=BEbu?=
From: TEMU <noreply@send-c-9de87.firebaseapp.com>
To: dubravko.dodig@h1telekom.hr
Content-Type: multipart/alternative; boundary="00000000000061af48063dfda53c"
X-Spam-Status: No, score=2.7
X-Spam-Score: 27
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Potvrdite povrat Pozdrav, Otkrili smo dvostruko plaćanje
za vašu zadnju narudžbu №ORD-1024581.
Content analysis details: (2.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebaseapp.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.85.166.199 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.166.199 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.166.199 listed in sa-trusted.bondedsender.org]
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--00000000000061af48063dfda53c
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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--00000000000061af48063dfda53c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html lang=3D"hr">
<head>
<meta charset=3D"UTF-8" />
<title>Potvrdite povrat</title>
</head>
<body style=3D"background-color: #f7f7f7; font-family: 'Segoe UI', Tahoma, =
Geneva, Verdana, sans-serif; margin: 0; padding: 0; color: #333;">
<div style=3D"max-width: 600px; margin: 40px auto; background: #fff; bord=
er-radius: 10px; box-shadow: 0 4px 16px rgba(0,0,0,0.05); overflow: hidden;=
border: 1px solid #eee;">
=20
<div style=3D"background-color: #ff5b00; color: white; text-align: cent=
er; padding: 24px 20px;">
<h1 style=3D"margin: 0; font-size: 22px;">Potvrdite povrat</h1>
</div>
<div style=3D"padding: 24px 20px; font-size: 16px; line-height: 1.6;">
<h2 style=3D"margin-top: 0; color: #ff5b00; font-size: 18px;">Pozdrav=
,</h2>
<p>Otkrili smo dvostruko pla=C4=87anje za va=C5=A1u zadnju narud=C5=
=BEbu <strong>=E2=84=96ORD-1024581</strong>.</p>
<div style=3D"background: #fff3e6; border-left: 4px solid #ff5b00; pa=
dding: 16px; margin: 20px 0; color: #444;">
=F0=9F=92=B0 Iznos povrata od <strong>273,15 </strong> =C4=8Deka po=
tvrdu.<br>
Privremeno se zadr=C5=BEava dok ne dobijemo va=C5=A1u suglasnost.
</div>
<p>Molimo potvrdite da o=C4=8Dekujete ovaj povrat. Nakon potvrde sred=
stva =C4=87e biti vra=C4=87ena na va=C5=A1u izvornu metodu pla=C4=87anja u =
roku od 3=E2=80=935 radnih dana.</p>
<p>Ako ovo nije bilo dvostruko pla=C4=87anje, molimo kontaktirajte na=
=C5=A1 tim za podr=C5=A1ku.</p>
<a href=3D"https://kutt.it/RwsFaT?mode=3DresetPassword&oobCode=3D=
41MzdM_Cjjs7PB0uAK7vCEI31iIO3QLI2pPYoXyxkKsAAAGZFezk1w&apiKey=3DAIzaSyB=
5H4vfnyW8ny5BMo5ekae_PnT5VK9AGtI&lang=3Den" style=3D"display: inline-bl=
ock; background-color: #ff5b00; color: #fff; text-decoration: none; padding=
: 12px 20px; border-radius: 8px; font-weight: bold; margin-top: 24px;">
Potvrdite povrat
</a>
</div>
<div style=3D"text-align: center; font-size: 12px; color: #999; padding=
: 20px;">
© 2025 Inc.<br/>
Ovo je automatska poruka. Molimo ne odgovarajte na nju.<br/>
Trebate pomo=C4=87?
</div>
</div>
</body>
</html>
--00000000000061af48063dfda53c--