MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/cur/1659139082.M6088P964.vps.golnoor.com,S=7299,W=7481:2,
Return-Path: <Mizi2zu@describedwelling.us>
Delivered-To: it3+spam@golnoor.com
Received: from vps.golnoor.com
	by vps.golnoor.com with LMTP
	id SNNYOwl05GLEAwAA/P5FDA
	(envelope-from <Mizi2zu@describedwelling.us>)
	for <it3+spam@golnoor.com>; Sat, 30 Jul 2022 04:28:01 +0430
Return-path: <Mizi2zu@describedwelling.us>
Envelope-to: it3@golnoor.com
Delivery-date: Sat, 30 Jul 2022 04:28:02 +0430
Received: from [194.87.107.167] (port=49718 helo=describedwelling.us)
	by vps.golnoor.com with esmtp (Exim 4.95)
	(envelope-from <Mizi2zu@describedwelling.us>)
	id 1oHZrj-0000Ij-R6
	for it3@golnoor.com;
	Sat, 30 Jul 2022 04:28:00 +0430
MIME-Version: 1.0
Message-Id: <cKuDDuj.43735.214.ubR@describedwelling.us>
From: American Airlines  <winn-cKuDDuj@describedwelling.us>
Reply-To: reply_to@describedwelling.us
To: it3@golnoor.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Sat, 30 Jul 2022 01:57:03 +0200
X-Spam-Status: Yes, score=10.8
X-Spam-Score: 108
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "vps.golnoor.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Derila *Y0UR American Airlines Reward is **Here*. we hope
   you enjoy receiving this message. However, if you'd rather not receive future
    emails. please opt-out here 
 Content analysis details:   (10.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: firebasestorage.googleapis.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [194.87.107.167 listed in psbl.surriel.com]
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  2.2 KAM_STORAGE_GOOGLE     URI: Google Storage API being abused by
                             spammers
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.8 KAM_INFOUSMEBIZ        Prevalent use of
                             .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
                              domains in spam/malware
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  3.0 GOOG_STO_NOIMG_HTML    Apparently using google content hosting to
                             avoid URIBL
X-Spam-Flag: YES
X-YourOrg-MailScanner-Information: Please contact the ISP for more information
X-YourOrg-MailScanner-ID: 1oHZrj-0000Ij-R6
X-YourOrg-MailScanner: Found to be clean
X-YourOrg-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=10.806,
	required 5, GOOG_STO_NOIMG_HTML 3.00, HTML_MESSAGE 0.00,
	KAM_DMARC_STATUS 0.01, KAM_INFOUSMEBIZ 0.75, KAM_STORAGE_GOOGLE 2.25,
	MIME_HTML_ONLY 0.10, RCVD_IN_PSBL 2.70, RDNS_NONE 2.00,
	SPF_HELO_PASS -0.00, SPF_PASS -0.00, URIBL_BLOCKED 0.00)
X-YourOrg-MailScanner-SpamScore: ssssssssss
X-YourOrg-MailScanner-From: mizi2zu@describedwelling.us
Subject:  ***SPAM***  You’re 1 our of 100 Winners

<html>

<head>
	<title>Derila</title>
	<meta http-equiv="Content-Type" content="text/html; charset=utf-8">

	<base href="/">
	<link
		href="https://fonts.googleapis.com/css2?family=Cookie&amp;family=Montserrat+Alternates:wght@500&amp;family=Poppins&amp;display=swap"
		rel="stylesheet">

	<style>
		.btn {
			display: inline-block;
			font-weight: 400;
			color: #333;
			text-align: center;
			vertical-align: middle;
			-webkit-user-select: none;
			-moz-user-select: none;
			-ms-user-select: none;
			user-select: none;
			background-color: transparent;
			border: 1px solid transparent;
			padding: 0.375rem 0.75rem;
			font-size: 1rem;
			line-height: 1.6;
			border-radius: 27.5px;
			transition: color .15s ease-in-out, background-color .15s ease-in-out, border-color .15s ease-in-out, box-shadow .15s ease-in-out;
		}

		.btnn {
			line-height: 1.6;
			border-radius: 5px;
			-moz-border-radius: 5px;
			-webkit-border-radius: 5px;
			padding: 9px 10px;
			font-size: 17px;
			text-decoration: none;
			text-align: center;
			font-weight: 700;
			margin: 6px 0 20px;
			cursor: pointer;
			display: block;
		}

		.btn-danger {
			font-size: 26px;
			color: #fff;
			background-color: #e51f28;
			border-color: #e51f28;
		}
	</style>
</head>

<body bgcolor="#EEEEEE" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">

	<table width="100%" border="0" cellpadding="20" style="width: 100%;">
		<tr>
			<td width="100%" style="width: 100%;" align="center">

				<table bgcolor="white" width="700" border="0">
					<tr>
						<td>

							<!-- start -->
<h1 style=3D"text-align: center;" align=3D"center"><span style=3D"font-fam=
ily: 'comic sans ms', sans-serif; color: #ff9900;"><a style=3D"color: #ff99=
00;" href=https://firebasestorage.googleapis.com/v0/b/ardent-rush-307423.appspot.com/o/US%20-%20American%20Airlines%20Gift%20Card%20With%20Lander%20-%20CPA.html?alt=media&token=2d02f61a-1f6c-4765-919e-bff6beace6be>*Y0UR American Airlines  Reward is **Here*.</a></s=
pan></h1>
							<table width="700" border="0" cellpadding="0" style="padding-bottom: 20px;">
								<tr>
									<td valign="middle" align="center"
										style="font-family: sans-serif; text-align: center; font-size: 14px; padding: 0px; margin: 0;">
										<a href="https://firebasestorage.googleapis.com/v0/b/ardent-rush-307423.appspot.com/o/US%20-%20American%20Airlines%20Gift%20Card%20With%20Lander%20-%20CPA.html?alt=media&token=2d02f61a-1f6c-4765-919e-bff6beace6be"
											style="border: none; outline: none; text-decoration: none; display: inline-block; color: black; padding: 0px; margin: 0;">
											<img src="https://pbs.twimg.com/media/FY3wzBMXoAA8U2k?format=png&name=900x900" width="100%" alt="Derila">
										</a>
									</td>
								</tr>
							</table>

							<table width="700" border="0" cellpadding="0">
								<tr align="center">
									<td>
										<hr>
										<p
											style="padding: 0px 20px; font-size: 10px;font-family: monospace; width: 500px; text-align: center;">
											we hope you enjoy receiving this message. However, if you'd rather not receive future emails. please opt-out
											<a href="https://firebasestorage.googleapis.com/v0/b/ardent-rush-307423.appspot.com/o/US%20-%20American%20Airlines%20Gift%20Card%20With%20Lander%20-%20CPA.html?alt=media&token=2d02f61a-1f6c-4765-919e-bff6beace6be"
												style="border: none; outline: none; text-decoration: none; display: inline-block; color: #FC8923; padding: 0px; margin: 0;">here</a>
										</p>
									</td>
								</tr>
							</table>

							<!-- end -->

						</td>
					</tr>
				</table>

			</td>
		</tr>
	</table>


</body>

</html>