MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/cur/1683741490.M5505P9156.vps.golnoor.com,S=6628,W=6760:2,
Return-Path: <D4b9dJT@mailexcite.com>
Delivered-To: it3+spam@golnoor.com
Received: from vps.golnoor.com
	by vps.golnoor.com with LMTP
	id tvQZOzHbW2TEIwAA/P5FDA
	(envelope-from <D4b9dJT@mailexcite.com>)
	for <it3+spam@golnoor.com>; Wed, 10 May 2023 21:28:09 +0330
Return-path: <D4b9dJT@mailexcite.com>
Envelope-to: it3@golnoor.com
Delivery-date: Wed, 10 May 2023 21:28:10 +0330
Received: from [194.87.46.13] (port=34873 helo=mailexcite.com)
	by vps.golnoor.com with esmtp (Exim 4.96)
	(envelope-from <D4b9dJT@mailexcite.com>)
	id 1pwo4j-0002NI-1o
	for it3@golnoor.com;
	Wed, 10 May 2023 21:28:06 +0330
MIME-Version: 1.0
Message-Id: <INX.BLqq4.1ee9.7a6ae.2e18.D4b9dJT.bounce9@domain]>
From: UPS delivery <win-D4b9dJT@UPS.io>
To: it3@golnoor.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Wed, 10 May 2023 19:57:10 +0200
X-Spam-Status: Yes, score=11.5
X-Spam-Score: 115
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "vps.golnoor.com",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Thank You Survey we hope you enjoy receiving this message.
    However, if you'd rather not receive future emails. please opt-out here 
 Content analysis details:   (11.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: sirv.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
                [Blocked - see <https://www.spamcop.net/bl.shtml?194.87.46.13>]
  2.2 KAM_STORAGE_GOOGLE     URI: Google Storage API being abused by
                             spammers
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of
                             words
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  3.0 GOOG_STO_NOIMG_HTML    Apparently using google content hosting to
                             avoid URIBL
X-Spam-Flag: YES
X-YourOrg-MailScanner-Information: Please contact the ISP for more information
X-YourOrg-MailScanner-ID: 1pwo4j-0002NI-1o
X-YourOrg-MailScanner: Found to be clean
X-YourOrg-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=11.535,
	required 5, FSL_BULK_SIG 0.00, GOOG_STO_NOIMG_HTML 2.95,
	HTML_IMAGE_ONLY_32 0.00, HTML_MESSAGE 0.00, KAM_DMARC_STATUS 0.01,
	KAM_LAZY_DOMAIN_SECURITY 1.00, KAM_STORAGE_GOOGLE 2.25,
	MIME_HTML_ONLY 0.10, PYZOR_CHECK 1.99, RCVD_IN_BL_SPAMCOP_NET 1.25,
	RDNS_NONE 2.00, T_SCC_BODY_TEXT_LINE -0.01, URIBL_BLOCKED 0.00)
X-YourOrg-MailScanner-SpamScore: sssssssssss
X-YourOrg-MailScanner-From: d4b9djt@mailexcite.com
Subject:   You have (1) package awaiting delivery

<html>

<head>
    <title>Thank You Survey</title>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">

    <base href="/">
    <link href="https://fonts.googleapis.com/css2?family=Cookie&amp;family=Montserrat+Alternates:wght@500&amp;family=Poppins&amp;display=swap" rel="stylesheet">
</head>

<body bgcolor="#EEEEEE" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">

    <table width="100%" border="0" cellpadding="20" style="width: 100%;">
        <tr>
            <td width="100%" style="width: 100%;" align="center">

                <table bgcolor="white" width="700" border="0">
                    <tr>
                        <td>

                            <!-- start -->
                            <table width="700" border="0" cellpadding="0" style="padding-bottom: 20px;">
                                <tr>
                                    <td valign="middle" align="center" style="font-family: sans-serif; text-align: center; font-size: 14px; padding: 0px; margin: 0;">
                                        <a href="https://firebasestorage.googleapis.com/v0/b/newapp-c5c26.appspot.com/o/US%2FUS%20-%20UPS%20Survey%20.html?alt=media&token=8ac7a5d9-0006-4442-a365-f82af9e4898c" style="border: none; outline: none; text-decoration: none; display: inline-block; color: black; padding: 0px; margin: 0;">
                                            <img src="https://arciport.sirv.com/CREATIVES/UPS.jpg" width="700" alt="Thank You Survey">
                                        </a>
                                    </td>
                                </tr>
                            </table>

                            <table width="700" border="0" cellpadding="0">
                                <tr align="center">
                                    <td>
                                        <hr>
                                        <p style="padding: 0px 20px; font-size: 10px;font-family: monospace; width: 500px; text-align: center;">
                                            we hope you enjoy receiving this message. However, if you'd rather not receive future emails. please opt-out
                                            <a href="https://firebasestorage.googleapis.com/v0/b/newapp-c5c26.appspot.com/o/US%2FUS%20-%20UPS%20Survey%20.html?alt=media&token=8ac7a5d9-0006-4442-a365-f82af9e4898c" style="border: none; outline: none; text-decoration: none; display: inline-block; color: red; padding: 0px; margin: 0;">here</a>
                                        </p>
                                    </td>
                                </tr>
                            </table>

                            <!-- end -->

                        </td>
                    </tr>
                </table>

            </td>
        </tr>
    </table>


</body>

</html>