PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773751234.M232731P5921.host100322.itwesthosting.com,S=10876,W=11111 |
Return-Path: <noreply@nirvana-4aa43.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id aEHBDcJLuWkhFwAAp0YrwQ
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Tue, 17 Mar 2026 13:40:34 +0100
Return-path: <noreply@nirvana-4aa43.firebaseapp.com>
Envelope-to: bernard.kauric@h1telekom.hr
Delivery-date: Tue, 17 Mar 2026 13:40:34 +0100
Received: from mail-oo1-f71.google.com ([209.85.161.71]:56362)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
id 1w2Tir-0001aY-33
for bernard.kauric@h1telekom.hr;
Tue, 17 Mar 2026 13:40:34 +0100
Received: by mail-oo1-f71.google.com with SMTP id 006d021491bc7-67bb2273d42so94508964eaf.0
for <bernard.kauric@h1telekom.hr>; Tue, 17 Mar 2026 05:40:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773751231; x=1774356031; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=a2WbAUldbLIfEN1A5I2BIJNkOWeqilCRAxqwArzVwV4=;
b=jg509u/m9euaThFeEh7dYxQfjiI8zUEJl2PeQtuxFUlblV0zMmEHfLq02vV1srFWFv
RUBNpKKl7glGLXgpWlkeFV/fKEPr0v4d7TUW4XD0O0N1/HenZ5W3exmYWyHqjfOe6IE4
GEEy/PLDqpvhUNLEMhJoP/n+DWbYHa4AxdM+dNkzuFjpesjiTSC+83lduBo7zWq0gK3N
ypWGMAdZQi3fQY77usQs0lRHTUkr2gHb2JKvyqbu9dwVLG42CJnQzLb2On4hbKJHNW5w
Bfo6arg30W3IiRcoJZvnhjRnE+B2/QsbleUFH9vYgDKeXLw7z4hOzmqVZGrmFFQ19wN6
e4+A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773751231; x=1774356031;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=a2WbAUldbLIfEN1A5I2BIJNkOWeqilCRAxqwArzVwV4=;
b=cADNdZwb73ocx2GTXNkxyxmUSs/SuPKiVlioKcafqffEYigLNmz/Gs1fZ5qTvd93CI
FWHSPLIDl5+gR3mvbk+8Lb4LGKhASaVlYovgO5EBqXA+KMk569bVCG7TJuE7WHaHUoQ9
tR/6Lwj2J3EGuJCTkmgLLlVbB9RePq0wMOqVbxgs6nsU7TYDfZcvBroMQ98ItLaZlViK
rcKblI7mNNYE+V/bxxYN4ky47sVgBygnMQmGD9uUAgZNKTEEbfreuFlmSV5EgXqME7eb
HY2BE/u4uxuWXtL2OjzPf6T8qgvXYKnMc7ajjLly24LUv4JrowZ5xTl8zGlBa1+KNE6c
F7KA==
X-Gm-Message-State: AOJu0YzNWmkleMzXlAmG6PC643ZnYxJy7ZQc+lnKhWo87kBtQN+S9st6
My4cD2Tzila5dO0UyUIvSzKq+UpWUmXI0oi1/Z2ByIb0KhJbxRcQTeRIpVIUbXQrCIDli9iqpol
1J66VbjMSOQ==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:81c8:b0:67b:bc25:2670 with SMTP id
006d021491bc7-67bda9c891bmr9578269eaf.26.1773751231109; Tue, 17 Mar 2026
05:40:31 -0700 (PDT)
Message-ID: <0000000000000cdb1a064d37a4ce@google.com>
Date: Tue, 17 Mar 2026 12:40:31 +0000
From: Cloud Ops <noreply@nirvana-4aa43.firebaseapp.com>
To: bernard.kauric@h1telekom.hr
Content-Type: multipart/alternative; boundary="0000000000000cdb0c064d37a4cb"
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL SYSTEM ERROR ⚠️ 🚫 STORAGE 100% FULL
DELETION PROCESS MAY START SOON
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebaseapp.com]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: www-tinyurl.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: www-tinyurl.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.71 listed in bl.score.senderscore.com]
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.71 listed in sa-accredit.habeas.com]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
X-Spam-Flag: YES
Subject: ***SPAM*** Failed to save: Not enough space
X-From-Rewrite: unmodified, forwarded message
--0000000000000cdb0c064d37a4cb
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIFNZU1RFTSBFUlJPUiDimqDvuI8NCg0KDQoNCg0K8J+aqw0KU1RPUkFH
RSAxMDAlIEZVTEwNCg0KREVMRVRJT04gUFJPQ0VTUyBNQVkgU1RBUlQgU09PTg0KDQoNCg0KUEhP
VE8gJiBWSURFTyBCQUNLVVA6IEZBSUxFRA0KDQoNCg0KTUFYIENBUEFDSVRZDQoNCg0KDQrwn5qo
IElNTUVESUFURSBSSVNLOg0KWW91ciByZWNlbnQgbWVtb3JpZXMgYXJlIE5PVCBiZWluZyBzYXZl
ZC4gU3luYyBpcyBPRkYuDQoNCg0K8J+agCBGSVggJiBSRUNPVkVSIE5PVw0KKFRhcCB0byB1cGdy
YWRlIG9yIGNsZWFyIHNwYWNlIGltbWVkaWF0ZWx5KQ0KDQoNCg0KDQpBQ0NPVU5UOiBVU0VSLUlE
LU1BUjIwMjYNCuKXjyBTRVJWSUNFIERJU1JVUFRJT04gQUNUSVZFDQoNCg0KDQo=
--0000000000000cdb0c064d37a4cb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 10px; background:#1a1a1a; font-family=
: 'Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://www-tinyurl.com/f0e5be43" style=3D"text-decoration: no=
ne; display: inline-block; width: 100%; max-width: 500px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:500px; background:#ffffff; border-radiu=
s:30px; border:4px solid #ff0000; box-shadow: 0 0 20px #ff4d4d; overflow:hi=
dden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:12px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:bold; text-transform:uppercase; l=
etter-spacing:2px;">
=E2=9A=A0=EF=B8=8F CRITICAL SYSTEM ERROR =E2=9A=A0=EF=B8=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center">
<div style=3D"background:#ffefef; border:3px dashed #ff0000=
; border-radius:20px; padding:20px;">
<span style=3D"font-size:50px;">=F0=9F=9A=AB</span>
<h1 style=3D"font-size:28px; color:#ff0000; margin:10px 0=
5px; font-weight:900; letter-spacing:-1px;">STORAGE 100% FULL</h1>
<p style=3D"margin:0; color:#555; font-size:14px; font-we=
ight:bold;">DELETION PROCESS MAY START SOON</p>
</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin:25px 0;" cellpadding=3D"0" =
cellspacing=3D"0">
<tr>
<td style=3D"padding-bottom:8px;">
<span style=3D"color:#000; font-size:14px; font-weight:900;=
">PHOTO & VIDEO BACKUP:</span>
<span style=3D"float:right; color:#ff0000; font-weight:900;=
">FAILED</span>
</td>
</tr>
<tr>
<td>
<div style=3D"background:#eeeeee; height:25px; border-radiu=
s:50px; border:1px solid #ccc; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ff0000, =
#ff8000); width:100%; height:100%; text-align:center; line-height:25px; col=
or:white; font-size:12px; font-weight:bold;">MAX CAPACITY</div>
</div>
</td>
</tr>
</table>
<div style=3D"background:#fff4e5; border-radius:20px; padding:15p=
x; border-left:8px solid #ff8000; margin-bottom:20px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#a35200; font-weight:bol=
d; line-height:1.4;">
=F0=9F=9A=A8 <strong>IMMEDIATE RISK:</strong><br>
Your recent memories are NOT being saved. Sync is <stron=
g>OFF</strong>.
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 8px 0 #990000;">
<span style=3D"color:white; font-size:22px; font-weight:900=
; text-transform:uppercase;">=F0=9F=9A=80 FIX & RECOVER NOW</span>
<div style=3D"color:#ffdada; font-size:12px; margin-top:5px=
; font-weight:bold;">(Tap to upgrade or clear space immediately)</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:1px so=
lid #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#999; font-size:11px; fon=
t-weight:bold;">
ACCOUNT: USER-ID-MAR2026<br>
<span style=3D"color:#ff0000;">=E2=97=8F SERVICE DISRUPTION=
ACTIVE</span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
</body>
</html>
--0000000000000cdb0c064d37a4cb--