PK qhYJF F ) nhhjz3kjnjjwmknjzzqznjzmm1kzmjrmz4qmm.itm/*\U8ewW087XJD%onwUMbJa]Y2zT?AoLMavr%5P*/
| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773892298.M432867P13996.host100322.itwesthosting.com,S=10690,W=10928 |
Return-Path: <noreply@zidi-38368.firebaseapp.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id Vm1hGcpyu2msNgAAp0YrwQ
(envelope-from <noreply@zidi-38368.firebaseapp.com>)
for <ithome@host100322.itwesthosting.com>; Thu, 19 Mar 2026 04:51:38 +0100
Return-path: <noreply@zidi-38368.firebaseapp.com>
Envelope-to: maja.benzon@h1telekom.hr
Delivery-date: Thu, 19 Mar 2026 04:51:38 +0100
Received: from mail-oo1-f70.google.com ([209.85.161.70]:41990)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96.2)
(envelope-from <noreply@zidi-38368.firebaseapp.com>)
id 1w34Q5-0003dX-0a
for maja.benzon@h1telekom.hr;
Thu, 19 Mar 2026 04:51:38 +0100
Received: by mail-oo1-f70.google.com with SMTP id 006d021491bc7-66b612efb4aso5461305eaf.0
for <maja.benzon@h1telekom.hr>; Wed, 18 Mar 2026 20:51:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=firebaseapp.com; s=20230601; t=1773892294; x=1774497094; darn=h1telekom.hr;
h=to:from:subject:date:message-id:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=0f63bjMOyNcSnREJgJU5CaHThoafEpu5RBJYybT4QCM=;
b=idnzT1JA8r0TWQN1G2u7EwBYuVtmdgZNvAjT0jrcI0zjOd6WTAQqQaMiU9OkYWQ+0T
P8qb/wScV8+ioIdA5o6uevyJPX9xIGr9VeKdjQAxLO/cRGUjk0V8AU2jyFJAEhCElvWo
N85aBOn54WCrAgZVywk3kZX31HG7nsMnkY4tJsLtibMas6uF0vz8fx5echnT2OU/7IJ0
FCQP6mTGrQDT9F0xGN8OakmtMWh1VzuhBN8J8xNW1w4b3put5cWPcqv30KwX1oI5pW3r
MWg4m6OIBtwUYSWJCLYHb5FUWERBFrwwUiWcpGRZgWgFCiqJjzX4JICFnQ5PlCI3AGMu
7mIQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20251104; t=1773892294; x=1774497094;
h=to:from:subject:date:message-id:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=0f63bjMOyNcSnREJgJU5CaHThoafEpu5RBJYybT4QCM=;
b=V7LkbBWP7ryhZH136yPrb+5ug14Y6Y3GEzAEcrS+O33/pS8XSBQzAaJVOqNFDIQEM0
D79O100TbTATNyk57jcjJSUqvVq8flmHoM2BLFWqfOWwNqjQxhmOlBHs9/QzfUHEKXLn
QTIKYtFFtGNuu8ul+ge82lgQXPLRxPPfP+oPeqQ1mMyhMlyTIQEA9VoXJg4wlIvokB6K
RBMltBxwR3eMjFFVuKHetimhxTQjmuWmfjhg6ForN2iUoWQOwODm3tpk64rqJpE2zhcC
tKRSNTc+7lbHeeMUp4yHdFDIqdepfmo0DakIiQN/+cz6vv6w8QkOnzCqOQgNnwZs+K6V
Pzmw==
X-Gm-Message-State: AOJu0YzuyGXKrXXhOyYlNJtR8vM0GK3z+cJxKyhUOKqj00MQnv4Isztm
BFOHJmRGs/1ZD3KjQLiEb7czGkEIRGKxaegrDW+I5AKLndKctEqOar6o3BunF3+ap016IU15DMk
K36XmGGnP2Q==
MIME-Version: 1.0
X-Received: by 2002:a4a:e909:0:b0:67b:cd45:483f with SMTP id
006d021491bc7-67c18452e29mr1705993eaf.40.1773892294333; Wed, 18 Mar 2026
20:51:34 -0700 (PDT)
Message-ID: <00000000000012d5d3064d587c16@google.com>
Date: Thu, 19 Mar 2026 03:51:34 +0000
Subject: Your files are about to be lost
From: FINAL WARNING <noreply@zidi-38368.firebaseapp.com>
To: maja.benzon@h1telekom.hr
Content-Type: multipart/alternative; boundary="00000000000012d5ca064d587c13"
X-Spam-Status: No, score=2.8
X-Spam-Score: 28
X-Spam-Bar: ++
X-Ham-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: ⚠️ CRITICAL ALERT: SYSTEM FULL ⚠️ USER: maja.benzon@h1telekom.hr
Storage 100% Full
Content analysis details: (2.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: is.gd]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.70 listed in bl.score.senderscore.com]
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
identical to background
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[209.85.161.70 listed in sa-trusted.bondedsender.org]
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
0.8 UPPERCASE_50_75 message body is 50-75% uppercase
0.0 KAM_SHORT Use of a URL Shortener for very short URL
X-Spam-Flag: NO
X-From-Rewrite: unmodified, forwarded message
--00000000000012d5ca064d587c13
Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes
Content-Transfer-Encoding: base64
4pqg77iPIENSSVRJQ0FMIEFMRVJUOiBTWVNURU0gRlVMTCDimqDvuI8NCg0KDQoNCg0KVVNFUjog
bWFqYS5iZW56b25AaDF0ZWxla29tLmhyDQoNCg0KDQoNClN0b3JhZ2UgMTAwJSBGdWxsDQoNCkRF
TEVUSU9OIFdJTEwgU1RBUlQgQVVUT01BVElDQUxMWQ0KDQoNCg0KDQpDUklUSUNBTCBDQVBBQ0lU
WSByZWFjaGVkDQoNCg0KDQrinJggUGhvdG8gJiBWaWRlbyBTeW5jOiBGQUlMRUQNCuKcmCBBY2Nv
dW50IERhdGE6IEFUIFJJU0sNCuKcmCBDbG91ZCBCYWNrdXA6IERJU0FCTEVEDQoNCg0KUkVDT1ZF
UiBTVE9SQUdFIE5PVw0KDQoNCg0KSU5DSURFTlQgSUQ6ICNNQVItMjAyNi1TWVMNCg0KDQoNCg0K
--00000000000012d5ca064d587c13
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html>
<html>
<head>
<meta charset=3D"UTF-8">
<meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=
=3D1.0">
<title>Urgent: Storage Full</title>
</head>
<body style=3D"margin:0; padding:20px 0; background:#1a1a1a; font-family: '=
Arial Black', Gadget, sans-serif;">
<center>
<a href=3D"https://is.gd/2BScev" style=3D"text-decoration: none; display:=
block; width: 100%; max-width: 480px;">
=20
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0=
" width=3D"100%" style=3D"max-width:480px; background:#ffffff; border-radiu=
s:25px; border:5px solid #ff0000; box-shadow: 0 0 30px rgba(255, 0, 0, 0.4)=
; overflow:hidden;">
=20
<tr>
<td style=3D"background:#ff0000; padding:15px; text-align:center; c=
olor:#ffffff; font-size:16px; font-weight:900; letter-spacing:1px; text-tra=
nsform:uppercase;">
=E2=9A=A0=EF=B8=8F CRITICAL ALERT: SYSTEM FULL =E2=9A=A0=EF=B8=
=8F
</td>
</tr>
<tr>
<td style=3D"padding:25px;">
=20
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin-bottom:20px;">
<tr>
<td align=3D"center">
<div style=3D"background:#ffff00; color:#000000; padding:10=
px 20px; border-radius:10px; font-size:14px; font-weight:900; border:2px so=
lid #000000; display:inline-block;">
USER: maja.benzon@h1telekom.hr
</div>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"text-align:center;">
<tr>
<td>
<h1 style=3D"color:#ff0000; font-size:32px; margin:0; font-=
weight:900; letter-spacing:-1px; text-transform:uppercase;">Storage 100% Fu=
ll</h1>
<p style=3D"color:#000000; font-size:15px; margin:5px 0; fo=
nt-weight:800;">DELETION WILL START AUTOMATICALLY</p>
</td>
</tr>
</table>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0" style=3D"margin:25px 0;">
<tr>
<td style=3D"background:#eeeeee; height:25px; border-radius:5=
0px; border:2px solid #000; overflow:hidden;">
<div style=3D"background:linear-gradient(90deg, #ffff00, #f=
f0000); width:100%; height:100%; color:#fff; text-align:center; line-height=
:25px; font-size:12px; font-weight:bold;">
CRITICAL CAPACITY reached
</div>
</td>
</tr>
</table>
<div style=3D"background:#fffbe6; border:2px solid #ffe58f; borde=
r-radius:15px; padding:15px; margin-bottom:25px;">
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacin=
g=3D"0">
<tr>
<td style=3D"font-size:15px; color:#856404; line-height:1.5=
; font-weight:bold;">
<span style=3D"color:#ff0000;">=E2=9C=98</span> Photo & V=
ideo Sync: <strong>FAILED</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Account D=
ata: <strong>AT RISK</strong><br>
<span style=3D"color:#ff0000;">=E2=9C=98</span> Cloud Bac=
kup: <strong>DISABLED</strong>
</td>
</tr>
</table>
</div>
<table width=3D"100%" border=3D"0" cellpadding=3D"0" cellspacing=
=3D"0">
<tr>
<td align=3D"center" style=3D"background:#ff0000; border-radi=
us:50px; padding:20px; box-shadow: 0 6px 0 #990000;">
<span style=3D"color:#ffffff; font-size:20px; font-weight:9=
00; text-transform:uppercase;">RECOVER STORAGE NOW</span>
</td>
</tr>
</table>
<table width=3D"100%" style=3D"margin-top:25px; border-top:2px da=
shed #eee; padding-top:15px;">
<tr>
<td align=3D"center" style=3D"color:#666; font-size:11px; fon=
t-weight:bold;">
INCIDENT ID: #MAR-2026-SYS<br>
<span id=3D"display_date" style=3D"color:#ff0000;"></span>
</td>
</tr>
</table>
</td>
</tr>
</table>
</a>
</center>
<script>
const now =3D new Date();
document.getElementById('display_date').textContent =3D 'STATUS: EMERGE=
NCY =E2=80=A2 ' + now.toLocaleDateString('en-US', { month: 'short', day: 'n=
umeric', year: 'numeric' });
</script>
</body>
</html>
--00000000000012d5ca064d587c13--