PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773860422.M667902P14687.host100322.itwesthosting.com,S=10663,W=10900 |
Return-Path: <noreply@testd-d2a49.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 4uCqJ0b2umlfOQAAp0YrwQ
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 20:00:22 +0100
Return-path: <noreply@testd-d2a49.firebaseapp.com>
Envelope-to: ljudski-potencijali@h1telekom.hr
Delivery-date: Wed, 18 Mar 2026 20:00:22 +0100
Received: from mail-ot1-f71.google.com ([209.85.210.71]:47600)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
id 1w2w7x-0003ok-1m
for ljudski-potencijali@h1telekom.hr;
Wed, 18 Mar 2026 20:00:22 +0100
Received: by mail-ot1-f71.google.com with SMTP id 46e09a7af769-7d7d3cf11cfso658186a34.3
for <ljudski-potencijali@h1telekom.hr>; Wed, 18 Mar 2026 12:00:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773860420; x=1774465220; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=SfIryvAwoc1ffm7FO2M0GDosN20dW102Lq0JRbxTIsE=;
b=njbFoBHcS4adpvxrhSmwldUacqtRcI5rnb17bVLKvWyLzXDj0q63+lpuKEgTu69bxX
XMn9dYrMFcE+2/FEJSoZdfr37wKDeLYl9gtR79SYjkpLxUfRJMBNZktZqVynrqB+nyAN
3tmHAB8eLJ1L1NmW3FL2LNqKRE9Bt0npaP8vEGGlKyLMK21wR1+u2BhIncQWDRKTvrz4
wkIck2HNhHm+9K+xTk2Eo5h7g8G2hVRt8SVw0cMxh/A5H85F2WfAobhvwsLqFOtGhvYq
ea7+2OT2sYlkjAOBEx3Po4cHKHY/NmYrey70nUcKFapLQJkpq3pgsOMBXn4M7SdZhrsh
2bwA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773860420; x=1774465220;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=SfIryvAwoc1ffm7FO2M0GDosN20dW102Lq0JRbxTIsE=;
b=qWoLg9TJbmGnagLnNq2WGoiziHTdzfocMUMT4xQoHoAq4EVYPlje0HjnZphcWfyNrL
jTVBSQdasyHRz3/A46DCwD53xrA/WYj2/Sgunb693sSIgzMtx26w1de1vTrUzwS7vKGm
T38DBn+QIo0mSHzFzWv0ozYCam28v4Amx4BqcQhIdeIgJuXiVSN4+O0DZ9C+lnWuF5xK
/FaQuNDzVXRFi443R0y+EKFUytkQATrm8B2mKqvIsQAVcx6je8hWi+RoVcH0exW5TRYG
U1fiRpdttGUj5fVvaDI7XGjv26DXz1+dk1K1Fp7T8PIcjPnZJQygdFPhJtdWHGTPF2+B
AVfA==
X-Gm-Message-State: AOJu0YxuWhJZ4fRqBe9OIcM2CUy+1o1fUYZeL/G7/x3U5LPNzXlCT+c3
9bm3WeqEQ38GnFcwTwEEQSdAW89i9g4gonHgrRxMHGjIsqgIPNmbMXGHFgNUESKEblQK4CyisWw
eevbCplSIkQ==
MIME-Version: 1.0
X-Received: by 2002:a05:6820:16aa:b0:67b:b1a2:b4d6 with SMTP id
006d021491bc7-67c0db5e007mr2812556eaf.68.1773860419811; Wed, 18 Mar 2026
12:00:19 -0700 (PDT)
Message-ID: <000000000000343a8b064d511064@google.com>
Date: Wed, 18 Mar 2026 19:00:19 +0000
Subject: =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Your_files_are_about_to_be_lost?=
From: URGENT <noreply@testd-d2a49.firebaseapp.com>
To: ljudski-potencijali@h1telekom.hr
Content-Type: multipart/alternative; boundary="000000000000343a78064d511061"
X-Spam-Status: No, score=0.8
X-Spam-Score: 8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL ALERT: SYSTEM FULL ⚠️ USER: ljudski-potencijali@h1telekom.hr
Storage 100% Full
Content analysis details: (0.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: is.gd]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.210.71 listed in bl.score.senderscore.com]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.210.71 listed in sa-trusted.bondedsender.org]
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--000000000000343a78064d511061
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIEFMRVJUOiBTWVNURU0gRlVMTCDimqDvuI8NCg0KDQoNCg0KVVNFUjog
bGp1ZHNraS1wb3RlbmNpamFsaUBoMXRlbGVrb20uaHINCg0KDQoNCg0KU3RvcmFnZSAxMDAlIEZ1
bGwNCg0KREVMRVRJT04gV0lMTCBTVEFSVCBBVVRPTUFUSUNBTExZDQoNCg0KDQoNCkNSSVRJQ0FM
IENBUEFDSVRZIHJlYWNoZWQNCg0KDQoNCuKcmCBQaG90byAmIFZpZGVvIFN5bmM6IEZBSUxFRA0K
4pyYIEFjY291bnQgRGF0YTogQVQgUklTSw0K4pyYIENsb3VkIEJhY2t1cDogRElTQUJMRUQNCg0K
DQpSRUNPVkVSIFNUT1JBR0UgTk9XDQoNCg0KDQpJTkNJREVOVCBJRDogI01BUi0yMDI2LVNZUw0K
DQoNCg0KDQo=
--000000000000343a78064d511061
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 0; background:#1a1a1a; font-family: '=
Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://is.gd/vLGQRJ" style=3D"text-decoration: none; display:=
block; width: 100%; max-width: 480px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:480px; background:#ffffff; border-radiu=
s:25px; border:5px solid #ff0000; box-shadow: 0 0 30px rgba(255, 0, 0, 0.4)=
; overflow:hidden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:15px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:900; letter-spacing:1px; text-tra=
nsform:uppercase;">
=E2=9A=A0=EF=B8=8F CRITICAL ALERT: SYSTEM FULL =E2=9A=A0=EF=B8=
=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
=20
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin-bottom:20px;">
<tr>
<td align=3D"center">
<div style=3D"background:#ffff00; color:#000000; padding:10=
px 20px; border-radius:10px; font-size:14px; font-weight:900; border:2px so=
lid #000000; display:inline-block;">
USER: ljudski-potencijali@h1telekom.hr
</div>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"text-align:center;">
<tr>
<td>
<h1 style=3D"color:#ff0000; font-size:32px; margin:0; font-=
weight:900; letter-spacing:-1px; text-transform:uppercase;">Storage 100% Fu=
ll</h1>
<p style=3D"color:#000000; font-size:15px; margin:5px 0; fo=
nt-weight:800;">DELETION WILL START AUTOMATICALLY</p>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin:25px 0;">
<tr>
<td style=3D"background:#eeeeee; height:25px; border-radius:5=
0px; border:2px solid #000; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ffff00, #f=
f0000); width:100%; height:100%; color:#fff; text-align:center; line-height=
:25px; font-size:12px; font-weight:bold;">
CRITICAL CAPACITY reached
</div>
</td>
</tr>
</table>
<div style=3D"background:#fffbe6; border:2px solid #ffe58f; borde=
r-radius:15px; padding:15px; margin-bottom:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#856404; line-height:1.5=
; font-weight:bold;">
<span style=3D"color:#ff0000;">=E2=9C=98</span> Photo & V=
ideo Sync: <strong>FAILED</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Account D=
ata: <strong>AT RISK</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Cloud Bac=
kup: <strong>DISABLED</strong>
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 6px 0 #990000;">
<span style=3D"color:#ffffff; font-size:20px; font-weight:9=
00; text-transform:uppercase;">RECOVER STORAGE NOW</span>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:2px da=
shed #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#666; font-size:11px; fon=
t-weight:bold;">
INCIDENT ID: #MAR-2026-SYS<br>
<span id=3D"display_date" style=3D"color:#ff0000;"></span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
<script>
const now =3D new Date();
document.getElementById('display_date').textContent =3D 'STATUS: EMERGE=
NCY =E2=80=A2 ' + now.toLocaleDateString('en-US', { month: 'short', day: 'n=
umeric', year: 'numeric' });
</script>
</body>
</html>
--000000000000343a78064d511061--