| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773861113.M610592P16196.host100322.itwesthosting.com,S=10624,W=10861 |
Return-Path: <noreply@testd-d2a49.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id 2ERDJPn4umlEPwAAp0YrwQ
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Wed, 18 Mar 2026 20:11:53 +0100
Return-path: <noreply@testd-d2a49.firebaseapp.com>
Envelope-to: slavica.ganic@h1telekom.hr
Delivery-date: Wed, 18 Mar 2026 20:11:53 +0100
Received: from mail-ot1-f72.google.com ([209.85.210.72]:47372)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@testd-d2a49.firebaseapp.com>)
id 1w2wJ6-0004Cy-1o
for slavica.ganic@h1telekom.hr;
Wed, 18 Mar 2026 20:11:53 +0100
Received: by mail-ot1-f72.google.com with SMTP id 46e09a7af769-7d7d3cf11cfso683103a34.3
for <slavica.ganic@h1telekom.hr>; Wed, 18 Mar 2026 12:11:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773861111; x=1774465911; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=5n3PcMX+DyRX2ktpLlbsPnXjBKMUNbpit5NIU1d4huc=;
b=SzDOPOMiWzHb0z6Km6tHrgwk+f2kKDrNVRwpHbYkMZxkUPUdL2S+2YE9gj/zW+50S2
UD5NnwF2wYLitJHgIJ4kIszW3gclmH/snXBxhtX/Eduuc1+dwVNmV1qQ4o8TXx2sgGld
cl6ZZ6EPe+hqq/V+7rSluUMNQEmISLF9rUFNwK6JNIH/BBkej3QTgvHOR0wZ0J/XFKPu
+TV+r6C+sNHGqArbuJc1M4xjwNhVdXlHN1ecCqoqgwKNS3sqOXMUHcm7oyZzQ7p/ZbH6
zz1Sz8h+VmuJNAGHKNczVlnAncJby1MEwr4xbJsDvbSNHdu9cnguwEvLFYd1SUdcBPgm
9vwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773861111; x=1774465911;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=5n3PcMX+DyRX2ktpLlbsPnXjBKMUNbpit5NIU1d4huc=;
b=Egs+QSr5X5zKzhzcD5uJ2kPUkim6jpru0/5f8B0b7KVZXGqtez35CM/2dxoS2LkZGL
LLa57VZvd9fmRVFhbBXG24wKMANNax8aTWv05ovwFWwDJjmICfDN2ChjzleL5OZ40io9
Z3nQWwQLfHhoJLdRRn5wSlVbGd8+wuzP8Dq8NWLUOW4232TRlZw0Fbke91BGgFxKxtF3
nyiBbfEOVTIqTjf71sURChhZclbdlN/xboIhhNArZOvVJE7bcYOh2N7Mn8GmRmC26fbI
Zi5btpcnt1Wkp8BemWpNodGfzFm8DG0zq8pi8NjiT6Jl6kTPGTY80QIWoSWY2qosPQzu
jB6w==
X-Gm-Message-State: AOJu0YwH/U35wjuFc/k7LTkYr4JTGJnD2uHNzg+SU/3REnhFqKsGxL94
6laFWFSbNfmMBBj+F4bH2GHJSsESFrcvjIY1m4GNKYIkQN+f4vgVB0A2Y8xpulaqO6JnkhtcRNF
I6F6lZGDvEQ==
MIME-Version: 1.0
X-Received: by 2002:a4a:e847:0:b0:67b:f775:e5ed with SMTP id
006d021491bc7-67c0db3e01cmr2913605eaf.58.1773861111203; Wed, 18 Mar 2026
12:11:51 -0700 (PDT)
Message-ID: <0000000000006a0727064d513999@google.com>
Date: Wed, 18 Mar 2026 19:11:51 +0000
Subject: =?UTF-8?Q?=E2=9A=A0=EF=B8=8F_Your_files_are_about_to_be_lost?=
From: URGENT <noreply@testd-d2a49.firebaseapp.com>
To: slavica.ganic@h1telekom.hr
Content-Type: multipart/alternative; boundary="0000000000006a071f064d513996"
X-Spam-Status: No, score=0.8
X-Spam-Score: 8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL ALERT: SYSTEM FULL ⚠️ USER: slavica.ganic@h1telekom.hr
Storage 100% Full
Content analysis details: (0.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebaseapp.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.210.72 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.210.72 listed in sa-accredit.habeas.com]
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--0000000000006a071f064d513996
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIEFMRVJUOiBTWVNURU0gRlVMTCDimqDvuI8NCg0KDQoNCg0KVVNFUjog
c2xhdmljYS5nYW5pY0BoMXRlbGVrb20uaHINCg0KDQoNCg0KU3RvcmFnZSAxMDAlIEZ1bGwNCg0K
REVMRVRJT04gV0lMTCBTVEFSVCBBVVRPTUFUSUNBTExZDQoNCg0KDQoNCkNSSVRJQ0FMIENBUEFD
SVRZIHJlYWNoZWQNCg0KDQoNCuKcmCBQaG90byAmIFZpZGVvIFN5bmM6IEZBSUxFRA0K4pyYIEFj
Y291bnQgRGF0YTogQVQgUklTSw0K4pyYIENsb3VkIEJhY2t1cDogRElTQUJMRUQNCg0KDQpSRUNP
VkVSIFNUT1JBR0UgTk9XDQoNCg0KDQpJTkNJREVOVCBJRDogI01BUi0yMDI2LVNZUw0KDQoNCg0K
DQo=
--0000000000006a071f064d513996
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 0; background:#1a1a1a; font-family: '=
Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://is.gd/vLGQRJ" style=3D"text-decoration: none; display:=
block; width: 100%; max-width: 480px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:480px; background:#ffffff; border-radiu=
s:25px; border:5px solid #ff0000; box-shadow: 0 0 30px rgba(255, 0, 0, 0.4)=
; overflow:hidden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:15px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:900; letter-spacing:1px; text-tra=
nsform:uppercase;">
=E2=9A=A0=EF=B8=8F CRITICAL ALERT: SYSTEM FULL =E2=9A=A0=EF=B8=
=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
=20
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin-bottom:20px;">
<tr>
<td align=3D"center">
<div style=3D"background:#ffff00; color:#000000; padding:10=
px 20px; border-radius:10px; font-size:14px; font-weight:900; border:2px so=
lid #000000; display:inline-block;">
USER: slavica.ganic@h1telekom.hr
</div>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"text-align:center;">
<tr>
<td>
<h1 style=3D"color:#ff0000; font-size:32px; margin:0; font-=
weight:900; letter-spacing:-1px; text-transform:uppercase;">Storage 100% Fu=
ll</h1>
<p style=3D"color:#000000; font-size:15px; margin:5px 0; fo=
nt-weight:800;">DELETION WILL START AUTOMATICALLY</p>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin:25px 0;">
<tr>
<td style=3D"background:#eeeeee; height:25px; border-radius:5=
0px; border:2px solid #000; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ffff00, #f=
f0000); width:100%; height:100%; color:#fff; text-align:center; line-height=
:25px; font-size:12px; font-weight:bold;">
CRITICAL CAPACITY reached
</div>
</td>
</tr>
</table>
<div style=3D"background:#fffbe6; border:2px solid #ffe58f; borde=
r-radius:15px; padding:15px; margin-bottom:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#856404; line-height:1.5=
; font-weight:bold;">
<span style=3D"color:#ff0000;">=E2=9C=98</span> Photo & V=
ideo Sync: <strong>FAILED</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Account D=
ata: <strong>AT RISK</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Cloud Bac=
kup: <strong>DISABLED</strong>
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 6px 0 #990000;">
<span style=3D"color:#ffffff; font-size:20px; font-weight:9=
00; text-transform:uppercase;">RECOVER STORAGE NOW</span>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:2px da=
shed #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#666; font-size:11px; fon=
t-weight:bold;">
INCIDENT ID: #MAR-2026-SYS<br>
<span id=3D"display_date" style=3D"color:#ff0000;"></span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
<script>
const now =3D new Date();
document.getElementById('display_date').textContent =3D 'STATUS: EMERGE=
NCY =E2=80=A2 ' + now.toLocaleDateString('en-US', { month: 'short', day: 'n=
umeric', year: 'numeric' });
</script>
</body>
</html>
--0000000000006a071f064d513996--