File: /home/golnoor/mail/it3@golnoor.com/.spam/cur/1685792416.M5993P9931.vps.golnoor.com,S=7078,W=7212:2,
Return-Path: <return@news.gruen.com>
Delivered-To: it3+spam@golnoor.com
Received: from vps.golnoor.com
by vps.golnoor.com with LMTP
id 8MNBAKAme2TLJgAA/P5FDA
(envelope-from <return@news.gruen.com>)
for <it3+spam@golnoor.com>; Sat, 03 Jun 2023 15:10:16 +0330
Return-path: <return@news.gruen.com>
Envelope-to: it3@golnoor.com
Delivery-date: Sat, 03 Jun 2023 15:10:16 +0330
Received: from [45.143.95.132] (port=53508 helo=news.gruen.com)
by vps.golnoor.com with esmtp (Exim 4.96)
(envelope-from <return@news.gruen.com>)
id 1q5PcD-0002bF-31
for it3@golnoor.com;
Sat, 03 Jun 2023 15:10:15 +0330
MIME-Version: 1.0
Message-Id: <gZjjbDI.22988.927.eXI@news.gruen.com>
From: Southwest Airlines <support-1uPhY1U@SouthwestAirlines-Shopper.io >
Reply-To: reply_to@news.gruen.com
To: it3@golnoor.com
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset=UTF-8
Date: Sat, 03 Jun 2023 13:34:18 +0200
X-Spam-Status: Yes, score=27.3
X-Spam-Score: 273
X-Spam-Bar: +++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "vps.golnoor.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: hey If you want to unsubscribe, please click here:
Content analysis details: (27.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: firebasestorage.googleapis.com]
2.7 FROM_WSP_TRAIL Trailing whitespace before '>' in From header
field
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[45.143.95.132 listed in psbl.surriel.com]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=news.gruen.com;ip=45.143.95.132;r=vps.golnoor.com]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=return%40news.gruen.com;ip=45.143.95.132;r=vps.golnoor.com]
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in
DNS
2.2 KAM_STORAGE_GOOGLE URI: Google Storage API being abused by
spammers
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of
words
2.0 PYZOR_CHECK Listed in Pyzor
(https://pyzor.readthedocs.io/en/latest/)
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to
avoid URIBL
3.0 FROM_ADDR_WS Malformed From address
X-Spam-Flag: YES
X-YourOrg-MailScanner-Information: Please contact the ISP for more information
X-YourOrg-MailScanner-ID: 1q5PcD-0002bF-31
X-YourOrg-MailScanner: Found to be clean
X-YourOrg-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=24.559,
required 5, autolearn=spam, DKIM_ADSP_NXDOMAIN 0.80,
FROM_ADDR_WS 3.00, FROM_WSP_TRAIL 2.70, FSL_BULK_SIG 0.00,
GOOG_STO_NOIMG_HTML 3.00, HTML_IMAGE_ONLY_28 0.73, HTML_MESSAGE 0.00,
KAM_DMARC_STATUS 0.01, KAM_STORAGE_GOOGLE 2.25, MIME_HTML_ONLY 0.10,
PYZOR_CHECK 1.99, RDNS_NONE 2.00, SPF_FAIL 4.00, SPF_HELO_FAIL 4.00,
T_SCC_BODY_TEXT_LINE -0.01, URIBL_BLOCKED 0.00)
X-YourOrg-MailScanner-SpamScore: ssssssssssssssssssssssss
X-YourOrg-MailScanner-From: return@news.gruen.com
Subject: -Congratulations! it3 You can get a $50 Southwest Airlines gift card!
<html>
<head>
<title>hey</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<base href="/">
<link href="https://fonts.googleapis.com/css2?family=Cookie&family=Montserrat+Alternates:wght@500&family=Poppins&display=swap" rel="stylesheet">
</head>
<body bgcolor="#EEEEEE" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0">
<table width="100%" border="0" cellpadding="0" style="width: 100%;">
<tr>
<td width="100%" style="width: 100%;" align="center">
<table bgcolor="white" width="700" border="0">
<tr>
<td>
<!-- start -->
<table width="700" border="0" cellpadding="0" style="padding-bottom: 20px;">
<tr>
<a href="https://firebasestorage.googleapis.com/v0/b/newapp-c5c26.appspot.com/o/Newusv1%2FUS%20-%20Southwest%20Airlines%20Offerwall.html?alt=media&token=77e244a4-354e-4c2a-abec-79cef7908786&_gl=1*2bg2rr*_ga*NzczNjE2OTg4LjE2NTk0MTY4MjI.*_ga_CW55HF8NVT*MTY4NTc4ODg3MC4yMC4xLjE2ODU3ODg5NTQuMC4wLjA." style="border: none; outline: none; text-decoration: none; display: inline-block; color: black; padding: 0px; margin: 0;">
<img src="https://bizsto.blob.core.windows.net/biz/english - Southwest Survey.jfif" width="700" border="0">
<table width="700" border="0" cellpadding="0">
<tr align="center">
<td>
<hr>
<p style="padding: 0px 20px; font-size: 10px;font-family: monospace; width: 500px; text-align: center;">
If you want to unsubscribe, please click
<a href="https://firebasestorage.googleapis.com/v0/b/newapp-c5c26.appspot.com/o/Newusv1%2FUS%20-%20Southwest%20Airlines%20Offerwall.html?alt=media&token=77e244a4-354e-4c2a-abec-79cef7908786&_gl=1*2bg2rr*_ga*NzczNjE2OTg4LjE2NTk0MTY4MjI.*_ga_CW55HF8NVT*MTY4NTc4ODg3MC4yMC4xLjE2ODU3ODg5NTQuMC4wLjA." style="border: none; outline: none; text-decoration: none; display: inline-block; color: red; padding: 0px; margin: 0;">here:</a>
</p>
</td>
</tr>
</table>
<!-- end -->
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>