| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773857310.M334618P5921.host100322.itwesthosting.com,S=10626,W=10863 |
Return-Path: <noreply@testd-d2a49.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id OPPUEx7qumkhFwAAp0YrwQ
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 19:08:30 +0100
Return-path: <noreply@testd-d2a49.firebaseapp.com>
Envelope-to: bernard.kauric@h1telekom.hr
Delivery-date: Wed, 18 Mar 2026 19:08:30 +0100
Received: from mail-oo1-f70.google.com ([209.85.161.70]:51289)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
id 1w2vJk-0001cV-1N
for bernard.kauric@h1telekom.hr;
Wed, 18 Mar 2026 19:08:30 +0100
Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-67bc5678917so1501219eaf.2
for <bernard.kauric@h1telekom.hr>; Wed, 18 Mar 2026 11:08:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773857307; x=1774462107; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=pc47MW2oEepqbTMioDc/8S8FKoZIa8hN92bbjAlQ5bs=;
b=avLk0lMSNT/QsBOXjhtuyxytel6ImWEwekGhEunTUQOwoRYhiMk6h9kUAFj7P/SDoQ
/nWaU0MUWe80QUSrQz48btBsIxs8GmD7kwbEiJSxuiOlv/kbQyXufX3+nnVjnllKp/YW
ws5RHnp3nFn7BLeuS059xD5MCfOg4afdqEOc1HkWufIhs0QFUNvr3uTcn7UaG6khwU6v
4dnzwGRq+6Xg8+pcQQFzOlR0vHSqFpyV9iZdxJ/yyuGYAjwvhzRomtyb5knEO7dd0gLL
NQ7unL3yDIOwjpBhsBU3XLosmDHqz+YnHuHKG7rUBpg1szb9s+0Uecompg/V754ZQrUE
khwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773857307; x=1774462107;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=pc47MW2oEepqbTMioDc/8S8FKoZIa8hN92bbjAlQ5bs=;
b=ZllaTelb0Lex0AI8A3i7TT0hL+K8eKdw+bZ9awTAH/UfsZ+MHV7Vuc9CFTENI1Byo0
vg2bwHb8cDyRP2X/J826UftPq+v/ng9UxBoh2MFvgOvMMlij7njDYbL/CB71ueeb6suZ
g3mOdP6sS9bxqBnBnMdWF/KlxmY/Su1D0eF/FdkXWIO6wAT/Ns+irYefWrFA95LxrQJJ
kxv1CM/UFc6/+grvZ6tYyvrSFdcPRy3URWtNMA5bOL0rrmJmN92d2TTaLEEgiQs50h2i
Lfv3hhC2NIwL3yyfzkro1fmDv280GanhXV+8mN0mhpYERR3aykGk4OndmLmc+ZDsR9AS
/mlw==
X-Gm-Message-State: AOJu0YysXmbj/M4GhLhS8Stl9BLTChjpO2qCQIrXQfqvnczD15VbW3u0
ZKHObGLFA77RnFvmUc/MWX2h4bSIcMSR3lcoXp6ll8XEZE63hDmKbmu8JX9DVfy2JRhW36KPQP7
DqOUiTKmhUA==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:228c:b0:67a:22cb:42ae with SMTP id
006d021491bc7-67c0da71d7fmr2930727eaf.2.1773857307110; Wed, 18 Mar 2026
11:08:27 -0700 (PDT)
Message-ID: <000000000000ac2f0f064d50561f@google.com>
Date: Wed, 18 Mar 2026 18:08:27 +0000
Subject: =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Your_files_are_about_to_be_lost?=
From: URGENT <noreply@testd-d2a49.firebaseapp.com>
To: bernard.kauric@h1telekom.hr
Content-Type: multipart/alternative; boundary="000000000000ac2efe064d50561c"
X-Spam-Status: No, score=0.8
X-Spam-Score: 8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL ALERT: SYSTEM FULL ⚠️ USER: bernard.kauric@h1telekom.hr
Storage 100% Full
Content analysis details: (0.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: is.gd]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.70 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.70 listed in sa-trusted.bondedsender.org]
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--000000000000ac2efe064d50561c
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIEFMRVJUOiBTWVNURU0gRlVMTCDimqDvuI8NCg0KDQoNCg0KVVNFUjog
YmVybmFyZC5rYXVyaWNAaDF0ZWxla29tLmhyDQoNCg0KDQoNClN0b3JhZ2UgMTAwJSBGdWxsDQoN
CkRFTEVUSU9OIFdJTEwgU1RBUlQgQVVUT01BVElDQUxMWQ0KDQoNCg0KDQpDUklUSUNBTCBDQVBB
Q0lUWSByZWFjaGVkDQoNCg0KDQrinJggUGhvdG8gJiBWaWRlbyBTeW5jOiBGQUlMRUQNCuKcmCBB
Y2NvdW50IERhdGE6IEFUIFJJU0sNCuKcmCBDbG91ZCBCYWNrdXA6IERJU0FCTEVEDQoNCg0KUkVD
T1ZFUiBTVE9SQUdFIE5PVw0KDQoNCg0KSU5DSURFTlQgSUQ6ICNNQVItMjAyNi1TWVMNCg0KDQoN
Cg0K
--000000000000ac2efe064d50561c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 0; background:#1a1a1a; font-family: '=
Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://is.gd/vLGQRJ" style=3D"text-decoration: none; display:=
block; width: 100%; max-width: 480px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:480px; background:#ffffff; border-radiu=
s:25px; border:5px solid #ff0000; box-shadow: 0 0 30px rgba(255, 0, 0, 0.4)=
; overflow:hidden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:15px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:900; letter-spacing:1px; text-tra=
nsform:uppercase;">
=E2=9A=A0=EF=B8=8F CRITICAL ALERT: SYSTEM FULL =E2=9A=A0=EF=B8=
=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
=20
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin-bottom:20px;">
<tr>
<td align=3D"center">
<div style=3D"background:#ffff00; color:#000000; padding:10=
px 20px; border-radius:10px; font-size:14px; font-weight:900; border:2px so=
lid #000000; display:inline-block;">
USER: bernard.kauric@h1telekom.hr
</div>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"text-align:center;">
<tr>
<td>
<h1 style=3D"color:#ff0000; font-size:32px; margin:0; font-=
weight:900; letter-spacing:-1px; text-transform:uppercase;">Storage 100% Fu=
ll</h1>
<p style=3D"color:#000000; font-size:15px; margin:5px 0; fo=
nt-weight:800;">DELETION WILL START AUTOMATICALLY</p>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin:25px 0;">
<tr>
<td style=3D"background:#eeeeee; height:25px; border-radius:5=
0px; border:2px solid #000; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ffff00, #f=
f0000); width:100%; height:100%; color:#fff; text-align:center; line-height=
:25px; font-size:12px; font-weight:bold;">
CRITICAL CAPACITY reached
</div>
</td>
</tr>
</table>
<div style=3D"background:#fffbe6; border:2px solid #ffe58f; borde=
r-radius:15px; padding:15px; margin-bottom:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#856404; line-height:1.5=
; font-weight:bold;">
<span style=3D"color:#ff0000;">=E2=9C=98</span> Photo & V=
ideo Sync: <strong>FAILED</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Account D=
ata: <strong>AT RISK</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Cloud Bac=
kup: <strong>DISABLED</strong>
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 6px 0 #990000;">
<span style=3D"color:#ffffff; font-size:20px; font-weight:9=
00; text-transform:uppercase;">RECOVER STORAGE NOW</span>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:2px da=
shed #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#666; font-size:11px; fon=
t-weight:bold;">
INCIDENT ID: #MAR-2026-SYS<br>
<span id=3D"display_date" style=3D"color:#ff0000;"></span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
<script>
const now =3D new Date();
document.getElementById('display_date').textContent =3D 'STATUS: EMERGE=
NCY =E2=80=A2 ' + now.toLocaleDateString('en-US', { month: 'short', day: 'n=
umeric', year: 'numeric' });
</script>
</body>
</html>
--000000000000ac2efe064d50561c--