| Dir : /home/ithome/mail/cur/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/cur/1757789033.M482726P14141.host100322.itwesthosting.com,S=8741,W=8915:2, |
Return-Path: <noreply@ysn6666-bd935.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id CEGgHGm7xWg9NwAAp0YrwQ
(envelope-from <noreply@ysn6666-bd935.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Sat, 13 Sep 2025 20:43:53 +0200
Return-path: <noreply@ysn6666-bd935.firebaseapp.com>
Envelope-to: dubravko.dodig@h1telekom.hr
Delivery-date: Sat, 13 Sep 2025 20:43:53 +0200
Received: from mail-il1-f200.google.com ([209.85.166.200]:46526)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@ysn6666-bd935.firebaseapp.com>)
id 1uxVE2-0003fp-1w
for dubravko.dodig@h1telekom.hr;
Sat, 13 Sep 2025 20:43:53 +0200
Received: by mail-il1-f200.google.com with SMTP id e9e14a558f8ab-42351e83862so42415815ab.1
for <dubravko.dodig@h1telekom.hr>; Sat, 13 Sep 2025 11:43:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1757789030; x=1758393830; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=Ww6y5VNf9yxzXpUI3MhxHxbgLj5QpKADdHmAxvuduJU=;
b=JFFJPBbLQF196xLO9h/QigF++YmFdbW3s2lQkrEKmF3HMs/Lo/DgETCTGtxBBM3s0i
dy95GseS93Ygl60sxFvQkzYvPJlJjXbz5Y48S+xEJbbNLDdIwGxKuPD4fmwaZG6B1Kka
vc+wTrs6mALQqU/R05OOZQhOdbh+Zq3LtkWS+yTqhzP2I7zXy6fI7oZSA4LkvuFVeKq1
N653mB28AFR/xRv8YKRBuHtBMzSBS5SvEB7F4JySy/c/jDASEJ5vxEsClIKzZBd/nL+T
qTs5YXhb/eRqaI3lyJYGr29TVuRZXlXBglPGNrXGzN0+ROZySRA1gqowbUK4ScLTYzUX
bCnQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1757789030; x=1758393830;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=Ww6y5VNf9yxzXpUI3MhxHxbgLj5QpKADdHmAxvuduJU=;
b=YelAUnvmXO4citZzqy52UdKnoFhKhMwpI6npix08/DqXO1boRi64f05v+HqJMgWhio
oUtGfNfv84E6ZksejuaD5yURgVxbNccvso0dvkY/fwtwQlr0UlZ8/Hg9lupTHaLgzwUP
7pmTaiZI82MGx1QtMUmqVFe8qVvBBhDR1ksYYpbPwqk1l7MeyD2dJgJsBFV7rSU6eooS
xUbYt90U7rHy7k3Ts2uMCLEYjeDAPE0pyylcOGRJx9ug0ZcYBsFQ3FlDjgxDCxAF91RF
aQArEN5vYG9/DVIEVh4TPhic/z16XN6D2l/LKYLb5LGvzaMdit4EFYVepHH1ePk2nv89
VIaA==
X-Gm-Message-State: AOJu0YxkR+ODecNKKre2U5qbHfMopk0u5etP7UNmhFH8fkeWPsdWHCt9
Ra4DNQ6ZssF/xzKp7/V1i3dgkUCxpksUThclL/0rl3KZQLgfhb5derJtTd+uREYzea0VQLBngfS
xF2v2ih8njQ==
X-Google-Smtp-Source: AGHT+IH8fVC1ocNJJSL/2wNvrNsejgMxWNCyrce9uP0cZvKTssH6o1r+H7AP63TaxapdG+7yPImTgeqFQ86aF/A=
MIME-Version: 1.0
X-Received: by 2002:a92:c241:0:b0:41f:2b38:c01 with SMTP id
e9e14a558f8ab-4209f87ace3mr97535595ab.13.1757789030322; Sat, 13 Sep 2025
11:43:50 -0700 (PDT)
Message-ID: <000000000000be135f063eb326d8@google.com>
Date: Sat, 13 Sep 2025 18:43:50 +0000
Subject: =?UTF-8?B?TW9saW1vIHBvdHZyZGl0ZSBwb3ZyYXQgaXpub3NhLiDigJhQb3NsamVkbmppIHBveml2?=
=?UTF-8?B?4oCZ4oCc?=
From: TEMU <noreply@ysn6666-bd935.firebaseapp.com>
To: dubravko.dodig@h1telekom.hr
Content-Type: multipart/alternative; boundary="000000000000be1352063eb326d5"
X-Spam-Status: No, score=2.7
X-Spam-Score: 27
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Potvrdite povrat Poštovani, Otkrili smo dvostruku uplatu
za vašu posljednju narudžbu №ORD-1024581.
Content analysis details: (2.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebaseapp.com]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.85.166.200 listed in psbl.surriel.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.166.200 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.166.200 listed in sa-trusted.bondedsender.org]
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--000000000000be1352063eb326d5
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64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==
--000000000000be1352063eb326d5
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html lang=3D"hr">
<head>
<meta charset=3D"UTF-8" />
<title>Potvrdite povrat</title>
</head>
<body style=3D"background-color: #f7f7f7; font-family: 'Segoe UI', Tahoma, =
Geneva, Verdana, sans-serif; margin: 0; padding: 0; color: #333;">
<div style=3D"max-width: 600px; margin: 40px auto; background: #fff; bord=
er-radius: 10px; box-shadow: 0 4px 16px rgba(0,0,0,0.05); overflow: hidden;=
border: 1px solid #eee;">
=20
<div style=3D"background-color: #ff5b00; color: white; text-align: cent=
er; padding: 24px 20px;">
<h1 style=3D"margin: 0; font-size: 22px;">Potvrdite povrat</h1>
</div>
<div style=3D"padding: 24px 20px; font-size: 16px; line-height: 1.6;">
<h2 style=3D"margin-top: 0; color: #ff5b00; font-size: 18px;">Po=C5=
=A1tovani,</h2>
<p>Otkrili smo dvostruku uplatu za va=C5=A1u posljednju narud=C5=BEbu=
<strong>=E2=84=96ORD-1024581</strong>.</p>
<div style=3D"background: #fff3e6; border-left: 4px solid #ff5b00; pa=
dding: 16px; margin: 20px 0; color: #444;">
=F0=9F=92=B0 Iznos za povrat od <strong>700 kn</strong> =C4=8Deka =
potvrdu.<br>
Privremeno je zadr=C5=BEan dok ne primimo va=C5=A1u suglasnost.
</div>
<p>Molimo potvrdite da o=C4=8Dekujete ovaj povrat. Nakon potvrde sred=
stva =C4=87e biti vra=C4=87ena na izvorni na=C4=8Din pla=C4=87anja u roku o=
d 3=E2=80=935 radnih dana.</p>
<p>Ako ovo nije bila dvostruka uplata, molimo kontaktirajte na=C5=A1 =
tim za podr=C5=A1ku.</p>
<a href=3D"https://kutt.it/7MeGbb?mode=3DresetPassword&oobCode=3D=
BVUT8UuTxFcK7CVHUImCYVrmjIfGc4DAd6JN3H6bRl0AAAGZRGQGrA&apiKey=3DAIzaSyA=
nlu9WxUTw2sW5wQ7Ysnd9jRh7IyT2H14&lang=3Den" style=3D"display: inline-bl=
ock; background-color: #ff5b00; color: #fff; text-decoration: none; padding=
: 12px 20px; border-radius: 8px; font-weight: bold; margin-top: 24px;">
Potvrdite povrat
</a>
</div>
<div style=3D"text-align: center; font-size: 12px; color: #999; padding=
: 20px;">
© 2025 Inc.<br/>
Ovo je automatska poruka. Molimo ne odgovarajte na nju.<br/>
Trebate pomo=C4=87?
</div>
</div>
</body>
</html>
--000000000000be1352063eb326d5--