PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773754556.M387646P17080.host100322.itwesthosting.com,S=10878,W=11113 |
Return-Path: <noreply@nirvana-4aa43.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 8K7xFrxYuWm4QgAAp0YrwQ
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Tue, 17 Mar 2026 14:35:56 +0100
Return-path: <noreply@nirvana-4aa43.firebaseapp.com>
Envelope-to: slavica.ganic@h1telekom.hr
Delivery-date: Tue, 17 Mar 2026 14:35:56 +0100
Received: from mail-oi1-f199.google.com ([209.85.167.199]:54305)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@nirvana-4aa43.firebaseapp.com>)
id 1w2UaR-0004RL-3A
for slavica.ganic@h1telekom.hr;
Tue, 17 Mar 2026 14:35:56 +0100
Received: by mail-oi1-f199.google.com with SMTP id 5614622812f47-466f705757bso23455512b6e.0
for <slavica.ganic@h1telekom.hr>; Tue, 17 Mar 2026 06:35:55 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773754554; x=1774359354; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=rQ/1K//ABLdFmoP2IM4jEDF2HIvPRYLTilSv1Cj3XZc=;
b=HPnttLFqKm2m5ee11AG0QJGjkf/3V+cr2ajTus1Ler46vEcIwy1gNC/UqXTSNXhtO2
G8//lAiQG37sqDIfwPiD9AufO9paD6heUYd29k8jfvzvERU+F1BQoEp792TlmXz9gP/r
bOX+Ey5vf1xwj3pCbheXhKnxrZcOUWBWaWFF/JsPgYOCsupqeiSMDxqmD+L0kfNcCPV9
URm1mMtFV1/GTbp5eVaBWgxzgLdBkuNfscQdDT658W4aaek+I9JFjlYgWLxngld3nqN9
IeL+87b77OP/O4j5EjnyFurFLNcHszgAcdHVo8PpeTupJCc1ZGuZpmz6WP4SejvPmjTe
sH3Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773754554; x=1774359354;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=rQ/1K//ABLdFmoP2IM4jEDF2HIvPRYLTilSv1Cj3XZc=;
b=n3U2dYnmBlkeR4/IsT2PSV5rh/F+wj9PBeZThiv9nGApdsQ94ce+LSaZtLY9jRZszO
rsRBZfE/Oh0fwt3haXK9qq46nj1wR2kz2F/SIHjBnyqkU71x1UvKLIXZXSqCPQsxBqiL
+mY0m1KfLnRBq37Ii+9IP0S/lvf6VgMroXVVKqJnKb/YGhgN/HByp7OgCiziVhEZguBF
L02ptXfW6c/yyGPXN7yTXVLriqAoAIhASEabPM9x+ILgGbAcosGHZtpXruhH5317BpLy
g+jHBbx7ChwFnkXPU7O1WhOC7icDVkfcNRMSZ7AvguEd2f9gckMLMH7WxyZ1AF0yIxhF
IReg==
X-Gm-Message-State: AOJu0Yy/9MFUqvMSPX/ZdVPJ3On1OLzPQAASUuoybGxIFMzQvUOt9gjy
hXwTalwYB4RcAOZUhzjRNhvdaoD0wUGWpEl6RZrubMuUvyv2vVB8aKSN8KsuyEM+/wNneofejqV
MHFR4rD/x6Q==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:4df9:b0:67b:c108:894f with SMTP id
006d021491bc7-67bdaa2e0dbmr10699575eaf.36.1773754553788; Tue, 17 Mar 2026
06:35:53 -0700 (PDT)
Message-ID: <00000000000018eb41064d386a68@google.com>
Date: Tue, 17 Mar 2026 13:35:53 +0000
From: Cloud Ops <noreply@nirvana-4aa43.firebaseapp.com>
To: slavica.ganic@h1telekom.hr
Content-Type: multipart/alternative; boundary="00000000000018eb35064d386a65"
X-Spam-Status: Yes, score=9.2
X-Spam-Score: 92
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL SYSTEM ERROR ⚠️ 🚫 STORAGE 100% FULL
DELETION PROCESS MAY START SOON
Content analysis details: (9.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: www-tinyurl.com]
4.5 URIBL_DBL_SPAM Contains a spam URL listed in the Spamhaus DBL
blocklist
[URIs: www-tinyurl.com]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL
blocklist
[URIs: www-tinyurl.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.199 listed in bl.score.senderscore.com]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.167.199 listed in sa-trusted.bondedsender.org]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
X-Spam-Flag: YES
Subject: ***SPAM*** Failed to save: Not enough space
X-From-Rewrite: unmodified, forwarded message
--00000000000018eb35064d386a65
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIFNZU1RFTSBFUlJPUiDimqDvuI8NCg0KDQoNCg0K8J+aqw0KU1RPUkFH
RSAxMDAlIEZVTEwNCg0KREVMRVRJT04gUFJPQ0VTUyBNQVkgU1RBUlQgU09PTg0KDQoNCg0KUEhP
VE8gJiBWSURFTyBCQUNLVVA6IEZBSUxFRA0KDQoNCg0KTUFYIENBUEFDSVRZDQoNCg0KDQrwn5qo
IElNTUVESUFURSBSSVNLOg0KWW91ciByZWNlbnQgbWVtb3JpZXMgYXJlIE5PVCBiZWluZyBzYXZl
ZC4gU3luYyBpcyBPRkYuDQoNCg0K8J+agCBGSVggJiBSRUNPVkVSIE5PVw0KKFRhcCB0byB1cGdy
YWRlIG9yIGNsZWFyIHNwYWNlIGltbWVkaWF0ZWx5KQ0KDQoNCg0KDQpBQ0NPVU5UOiBVU0VSLUlE
LU1BUjIwMjYNCuKXjyBTRVJWSUNFIERJU1JVUFRJT04gQUNUSVZFDQoNCg0KDQo=
--00000000000018eb35064d386a65
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 10px; background:#1a1a1a; font-family=
: 'Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://www-tinyurl.com/f0e5be43" style=3D"text-decoration: no=
ne; display: inline-block; width: 100%; max-width: 500px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:500px; background:#ffffff; border-radiu=
s:30px; border:4px solid #ff0000; box-shadow: 0 0 20px #ff4d4d; overflow:hi=
dden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:12px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:bold; text-transform:uppercase; l=
etter-spacing:2px;">
=E2=9A=A0=EF=B8=8F CRITICAL SYSTEM ERROR =E2=9A=A0=EF=B8=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center">
<div style=3D"background:#ffefef; border:3px dashed #ff0000=
; border-radius:20px; padding:20px;">
<span style=3D"font-size:50px;">=F0=9F=9A=AB</span>
<h1 style=3D"font-size:28px; color:#ff0000; margin:10px 0=
5px; font-weight:900; letter-spacing:-1px;">STORAGE 100% FULL</h1>
<p style=3D"margin:0; color:#555; font-size:14px; font-we=
ight:bold;">DELETION PROCESS MAY START SOON</p>
</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin:25px 0;" cellpadding=3D"0" =
cellspacing=3D"0">
<tr>
<td style=3D"padding-bottom:8px;">
<span style=3D"color:#000; font-size:14px; font-weight:900;=
">PHOTO & VIDEO BACKUP:</span>
<span style=3D"float:right; color:#ff0000; font-weight:900;=
">FAILED</span>
</td>
</tr>
<tr>
<td>
<div style=3D"background:#eeeeee; height:25px; border-radiu=
s:50px; border:1px solid #ccc; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ff0000, =
#ff8000); width:100%; height:100%; text-align:center; line-height:25px; col=
or:white; font-size:12px; font-weight:bold;">MAX CAPACITY</div>
</div>
</td>
</tr>
</table>
<div style=3D"background:#fff4e5; border-radius:20px; padding:15p=
x; border-left:8px solid #ff8000; margin-bottom:20px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#a35200; font-weight:bol=
d; line-height:1.4;">
=F0=9F=9A=A8 <strong>IMMEDIATE RISK:</strong><br>
Your recent memories are NOT being saved. Sync is <stron=
g>OFF</strong>.
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 8px 0 #990000;">
<span style=3D"color:white; font-size:22px; font-weight:900=
; text-transform:uppercase;">=F0=9F=9A=80 FIX & RECOVER NOW</span>
<div style=3D"color:#ffdada; font-size:12px; margin-top:5px=
; font-weight:bold;">(Tap to upgrade or clear space immediately)</div>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:1px so=
lid #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#999; font-size:11px; fon=
t-weight:bold;">
ACCOUNT: USER-ID-MAR2026<br>
<span style=3D"color:#ff0000;">=E2=97=8F SERVICE DISRUPTION=
ACTIVE</span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
</body>
</html>
--00000000000018eb35064d386a65--