PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773737162.M784807P18493.host100322.itwesthosting.com,S=10874,W=11109 |
Return-Path: <noreply@nirvana-4aa43.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id eAWgLsoUuWk9SAAAp0YrwQ
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Tue, 17 Mar 2026 09:46:02 +0100
Return-path: <noreply@nirvana-4aa43.firebaseapp.com>
Envelope-to: denis.richter@h1telekom.hr
Delivery-date: Tue, 17 Mar 2026 09:46:02 +0100
Received: from mail-oi1-f199.google.com ([209.85.167.199]:46482)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
id 1w2Q3t-0004ny-35
for denis.richter@h1telekom.hr;
Tue, 17 Mar 2026 09:46:02 +0100
Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-466fb87b5c6so16544172b6e.1
for <denis.richter@h1telekom.hr>; Tue, 17 Mar 2026 01:46:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773737159; x=1774341959; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=sFsR1p48kdfgYJGwEzkdZDK5VTRgqZY8TK1ICU9HrZc=;
b=EsPtwNr64GqCLec1McacW+hr4p2RyXOOKbw5KlVUVnUyR1zwpFxeEnu8IwcNnI8Rb4
7+hmLPA3qnge7DbrIXeS7fxXpRQdl7lM4LlEjTFlAkQ/R9yaHxZ113S0MrNl5GmceA3m
B+80hgio3DdgTYQ4cuI5n4UQ6stGA+wbjSpmQ93P+kizMfW3rAzY9lTeX/3lwbyabRZk
JNLeJssrRURdT6MP81Q1lHFGlTRyhAv1qbEPblc8iE6Nz2Z6Z94f16/+3Z2koewb/Dvv
NdnsHAbOaZGfuhPgC/mprJ82o6+Zd8bM4eKxSj2nzg+fI8QzHJYixyK16hqeF3FD+08s
NesA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773737159; x=1774341959;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=sFsR1p48kdfgYJGwEzkdZDK5VTRgqZY8TK1ICU9HrZc=;
b=dwcWL/JqmHOHyyTzF0BB07t0rD37ftttqKumz7TnIVbekGEun7kI47VJLkobskIZNg
GMZ1J9GU+y4xCUL75o03p23KtViJBtTiaMTRQXlAaNYVPtuV4PeEdEnKR9EupdIoBpuL
iMAnk0CbRCPquLgwpX6e++uG5Xd6mRkzd6aPcgBvSjSd1udRdQjad/kqc4bLVqLfDG+h
oDV17WlE0PhErThOGqOYL8sU0x+V9j/mm2S4fIBnXtRrIvYKEeXCuwzkx72VjLuX2OnA
g9w/X5AulzFc0S3JiJgFjz16vFNsckjxHLa6EyFx5dlBIBu6LalxKjS7tn1XHVxqsciy
HKDA==
X-Gm-Message-State: AOJu0Yyg0KqmDTdvpNjM08K8wkX5mcYcOGHnZroXVA1sDmsbL48p+jGv
hzagGNcJqymlF/XDD7Ok9i7U7fCX/68dvEGNQrraKvxRO2pdN7AlMIDEcS6hsXQxPeb45toF2q7
yWSaMxIWEKQ==
MIME-Version: 1.0
X-Received: by 2002:a05:6808:ec7:b0:464:2570:8805 with SMTP id
5614622812f47-467570a768fmr8327111b6e.3.1773737159252; Tue, 17 Mar 2026
01:45:59 -0700 (PDT)
Message-ID: <0000000000004d5dee064d345d13@google.com>
Date: Tue, 17 Mar 2026 08:45:59 +0000
From: Cloud Ops <noreply@nirvana-4aa43.firebaseapp.com>
To: denis.richter@h1telekom.hr
Content-Type: multipart/alternative; boundary="0000000000004d5dde064d345d10"
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL SYSTEM ERROR ⚠️ 🚫 STORAGE 100% FULL
DELETION PROCESS MAY START SOON
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebaseapp.com]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: www-tinyurl.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: www-tinyurl.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.199 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.199 listed in sa-accredit.habeas.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
X-Spam-Flag: YES
Subject: ***SPAM*** Failed to save: Not enough space
X-From-Rewrite: unmodified, forwarded message
--0000000000004d5dde064d345d10
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIFNZU1RFTSBFUlJPUiDimqDvuI8NCg0KDQoNCg0K8J+aqw0KU1RPUkFH
RSAxMDAlIEZVTEwNCg0KREVMRVRJT04gUFJPQ0VTUyBNQVkgU1RBUlQgU09PTg0KDQoNCg0KUEhP
VE8gJiBWSURFTyBCQUNLVVA6IEZBSUxFRA0KDQoNCg0KTUFYIENBUEFDSVRZDQoNCg0KDQrwn5qo
IElNTUVESUFURSBSSVNLOg0KWW91ciByZWNlbnQgbWVtb3JpZXMgYXJlIE5PVCBiZWluZyBzYXZl
ZC4gU3luYyBpcyBPRkYuDQoNCg0K8J+agCBGSVggJiBSRUNPVkVSIE5PVw0KKFRhcCB0byB1cGdy
YWRlIG9yIGNsZWFyIHNwYWNlIGltbWVkaWF0ZWx5KQ0KDQoNCg0KDQpBQ0NPVU5UOiBVU0VSLUlE
LU1BUjIwMjYNCuKXjyBTRVJWSUNFIERJU1JVUFRJT04gQUNUSVZFDQoNCg0KDQo=
--0000000000004d5dde064d345d10
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 10px; background:#1a1a1a; font-family=
: 'Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://www-tinyurl.com/b2e5317e" style=3D"text-decoration: no=
ne; display: inline-block; width: 100%; max-width: 500px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:500px; background:#ffffff; border-radiu=
s:30px; border:4px solid #ff0000; box-shadow: 0 0 20px #ff4d4d; overflow:hi=
dden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:12px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:bold; text-transform:uppercase; l=
etter-spacing:2px;">
=E2=9A=A0=EF=B8=8F CRITICAL SYSTEM ERROR =E2=9A=A0=EF=B8=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center">
<div style=3D"background:#ffefef; border:3px dashed #ff0000=
; border-radius:20px; padding:20px;">
<span style=3D"font-size:50px;">=F0=9F=9A=AB</span>
<h1 style=3D"font-size:28px; color:#ff0000; margin:10px 0=
5px; font-weight:900; letter-spacing:-1px;">STORAGE 100% FULL</h1>
<p style=3D"margin:0; color:#555; font-size:14px; font-we=
ight:bold;">DELETION PROCESS MAY START SOON</p>
</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin:25px 0;" cellpadding=3D"0" =
cellspacing=3D"0">
<tr>
<td style=3D"padding-bottom:8px;">
<span style=3D"color:#000; font-size:14px; font-weight:900;=
">PHOTO & VIDEO BACKUP:</span>
<span style=3D"float:right; color:#ff0000; font-weight:900;=
">FAILED</span>
</td>
</tr>
<tr>
<td>
<div style=3D"background:#eeeeee; height:25px; border-radiu=
s:50px; border:1px solid #ccc; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ff0000, =
#ff8000); width:100%; height:100%; text-align:center; line-height:25px; col=
or:white; font-size:12px; font-weight:bold;">MAX CAPACITY</div>
</div>
</td>
</tr>
</table>
<div style=3D"background:#fff4e5; border-radius:20px; padding:15p=
x; border-left:8px solid #ff8000; margin-bottom:20px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#a35200; font-weight:bol=
d; line-height:1.4;">
=F0=9F=9A=A8 <strong>IMMEDIATE RISK:</strong><br>
Your recent memories are NOT being saved. Sync is <stron=
g>OFF</strong>.
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 8px 0 #990000;">
<span style=3D"color:white; font-size:22px; font-weight:900=
; text-transform:uppercase;">=F0=9F=9A=80 FIX & RECOVER NOW</span>
<div style=3D"color:#ffdada; font-size:12px; margin-top:5px=
; font-weight:bold;">(Tap to upgrade or clear space immediately)</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:1px so=
lid #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#999; font-size:11px; fon=
t-weight:bold;">
ACCOUNT: USER-ID-MAR2026<br>
<span style=3D"color:#ff0000;">=E2=97=8F SERVICE DISRUPTION=
ACTIVE</span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
</body>
</html>
--0000000000004d5dde064d345d10--