MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1776094820.M254899P5894.server.espica.me,S=8847,W=8936
Return-Path: <support@gayboystube.com>
Delivered-To: it3+spam@golnoor.com
Received: from server.espica.me
	by server.espica.me with LMTP
	id EPZFDmQO3WkGFwAAs+GgsA
	(envelope-from <support@gayboystube.com>)
	for <it3+spam@golnoor.com>; Mon, 13 Apr 2026 19:10:20 +0330
Return-path: <support@gayboystube.com>
Envelope-to: it3@golnoor.com
Delivery-date: Mon, 13 Apr 2026 19:10:20 +0330
Received: from 223.185.106.34.bc.googleusercontent.com ([34.106.185.223]:43638 helo=gayboystube.com)
	by server.espica.me with smtp (Exim 4.96.2)
	(envelope-from <support@gayboystube.com>)
	id 1wCJOb-0001o8-2W
	for it3@golnoor.com;
	Mon, 13 Apr 2026 19:10:20 +0330
From: Cloud Inc. <support@gayboystube.com>
To: it3@golnoor.com
Subject: Critical: Payment Failure Affecting Your Account | ID:33538-39319
Message-ID: <2dfd5cd43adc4f0f80f88264a329a194@gayboystube.com>
Date: Mon, 13 Apr 2026 15:39:36 +0000
Reply-To: support@gayboystube.com
List-ID: notifications.gayboystube.com
List-Unsubscribe: <mailto:unsubscribe@gayboystube.com?subject=unsubscribe>, <https://gayboystube.com/unsubscribe/0d79fb6d5df74ceeaa1ca4b4f750ca17>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
X-Mailer: CloudMailer/2.1
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Subject: ***SPAM***  Critical: Payment Failure Affecting Your Account | ID:33538-39319
X-Spam-Status: Yes, score=21.2
X-Spam-Score: 212
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.espica.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  ⚠️ Immediate Action Required — Scheduled Data Remov=
    al Account ID: #CLOUD-78421 Your Files Are Scheduled for Permanent Deletion
    Our system detected that your storage remains over capacity and inactive.
    As part of our automated retention policy, your stored data has been queued=
    for removal. 
 Content analysis details:   (21.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: storage.googleapis.com]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [34.106.185.223 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                            [34.106.185.223 listed in bl.score.senderscore.com]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=support%40gayboystube.com;ip=34.106.185.223;r=server.espica.me]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
 [SPF failed: Please see http://www.openspf.org/Why?s=helo;id=gayboystube.com;ip=34.106.185.223;r=server.espica.me]
  2.2 KAM_STORAGE_GOOGLE     URI: Google Storage API being abused by
                             spammers
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or
                             identical to background
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76
                             chars
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message
                             and the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.5 LONGLN_LOW_CONTRAST    Excessively long line + hidden text
  3.0 GOOG_STO_NOIMG_HTML    Apparently using google content hosting to
                             avoid URIBL
X-Spam-Flag: YES

<!DOCTYPE html> <html lang=3D"en"> <head> <meta charset=3D"UTF-8"> <meta name=3D"viewport" content=3D"width=3Ddevice-width, initial-scale=3D1.= 0">  <style> @media only screen and (max-width:600px){ .container{width:100%!important;} .padding{padding:20px!important;} .h1{font-size:20px!important;} } </style> </head>  <body style=3D"margin:0;padding:0;background:#f4f7fb;font-family:-apple-sys= tem,BlinkMacSystemFont,'Segoe UI',Roboto,Arial,sans-serif;">  <table width=3D"100%" cellpadding=3D"0" cellspacing=3D"0"> <tr> <td align=3D"center">  <table class=3D"container" width=3D"600" style=3D"background:#ffffff;border= -radius:12px;overflow:hidden;">  <!-- TOP ALERT BAR --> <tr> <td style=3D"background:#dc2626;color:#ffffff;text-align:center;font-size:1= 3px;padding:10px;font-weight:700;"> =E2=9A=A0=EF=B8=8F Immediate Action Required =E2=80=94 Scheduled Data Remov= al </td> </tr>  <!-- HEADER --> <tr> <td style=3D"padding:20px 25px;border-bottom:1px solid #e5e7eb;"> <table width=3D"100%"> <tr> <td align=3D"left"> <img src=3D"https://www.freeiconspng.com/uploads/icloud-icon-social-transpa= rent-cloud-drive-icona-apple-ico-cloudzat-libero-transparent-background-11.= png" width=3D"60"> </td> <td align=3D"right" style=3D"font-size:12px;color:#6b7280;"> Account ID: <strong>#CLOUD-78421</strong> </td> </tr> </table> </td> </tr>  <!-- CONTENT --> <tr> <td class=3D"padding" style=3D"padding:30px;">  <h1 class=3D"h1" style=3D"text-align:center;font-size:22px;color:#111827;ma= rgin-bottom:15px;font-weight:800;"> Your Files Are Scheduled for Permanent Deletion </h1>  <p style=3D"text-align:center;color:#4b5563;font-size:15px;line-height:1.6;= margin-bottom:25px;"> Our system detected that your storage remains over capacity and inactive.=20 As part of our automated retention policy, your stored data has been queued=  for removal. </p>  <!-- CRITICAL NOTICE --> <table width=3D"100%" style=3D"background:#fff1f2;border:1px solid #fecaca;= border-radius:8px;margin-bottom:25px;"> <tr> <td style=3D"padding:18px;font-size:14px;color:#7f1d1d;"> <strong style=3D"color:#b91c1c;">Deletion Date: April 15, 2026</strong><br>= <br> After this date, all files associated with your account will be permanently=  deleted and cannot be restored. </td> </tr> </table>  <!-- STATUS TABLE --> <table width=3D"100%" style=3D"background:#f9fafb;border:1px solid #e5e7eb;= border-radius:8px;margin-bottom:25px;"> <tr> <td style=3D"padding:12px;border-bottom:1px solid #e5e7eb;"> Photos & Videos <span style=3D"float:right;color:#dc2626;font-weight:700;">Pending Deletion= </span> </td> </tr>  <tr> <td style=3D"padding:12px;border-bottom:1px solid #e5e7eb;"> Documents <span style=3D"float:right;color:#dc2626;font-weight:700;">Pending Deletion= </span> </td> </tr>  <tr> <td style=3D"padding:12px;"> Backups <span style=3D"float:right;color:#dc2626;font-weight:700;">Disabled</span> </td> </tr> </table>  <!-- CTA --> <a href=3D"https://cloudstorageinc.storage.googleapis.com/e58534d6-414b-4ab= 8-9a50-a97efb566b27.html" style=3D"display:block;text-align:center;background:#dc2626;color:#ffffff;p= adding:16px;font-size:16px;font-weight:800;border-radius:8px;text-decoratio= n:none;"> Restore Access & Prevent Deletion </a>  <p style=3D"text-align:center;font-size:12px;color:#6b7280;margin-top:10px;= "> Processing time: under 60 seconds =E2=80=A2 No files will be removed after = renewal </p>  </td> </tr>  <!-- FOOTER --> <tr> <td style=3D"text-align:center;font-size:11px;color:#9ca3af;padding:20px;bo= rder-top:1px solid #e5e7eb;"> This is an automated system notification regarding your cloud storage statu= s.<br><br> <a href=3D"https://cloudstorageinc.storage.googleapis.com/08cc9480-7ac6-4a0= 8-9115-d2dc521c2ab7.html" style=3D"color:#9ca3af;text-decoration:underline;= "> Unsubscribe </a> </td> </tr>  </table>  </td> </tr> </table>  </body> </html>