A report should include a description, time of occurrence, relevant addresses and, when applicable, the suspicious message or link.
Report the incident to CIP and the Croatian National CERT at incident@cert.hr. Do not delete messages or other evidence before reporting.