MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1779286269.M16001P1098648.mail.espica.me,S=4620,W=4705
Return-Path: <sales@server1.cgcpukp.cn>
Delivered-To: it3+spam@golnoor.com
Received: from mail.espica.me
	by mail.espica.me with LMTP
	id d4A0OvzADWqYwxAAODdQag
	(envelope-from <sales@server1.cgcpukp.cn>)
	for <it3+spam@golnoor.com>; Wed, 20 May 2026 10:11:08 -0400
Return-path: <sales@server1.cgcpukp.cn>
Envelope-to: it3@golnoor.com
Delivery-date: Wed, 20 May 2026 10:11:09 -0400
Received: from [103.30.40.118] (port=48438 helo=server1.cgcpukp.cn)
	by mail.espica.me with esmtp (Exim 4.99.2)
	(envelope-from <sales@server1.cgcpukp.cn>)
	id 1wPhdZ-00000004bly-3ZbA
	for it3@golnoor.com;
	Wed, 20 May 2026 10:11:08 -0400
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=server1.cgcpukp.cn;
 h=Reply-To:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding; i=sales@server1.cgcpukp.cn;
 bh=XuHGDAfrHWKHhi9BMSVN6Co47Vs=;
 b=uClmxwqlGnumbFrUdlP1i+PeR+UyB0Xxxz9z8pYFYX3bmJv6oGeAim1Yw4LFb81ZAYrcLT5BiVZA
   BdP4o+B41Muy111n4tCp9dkDDDfGiNAQ2b7Zb26CQ4QN2OVaPLk3Sk155Mcx78TwDjuQnZsLE9AO
   kWQg9xDyjvWiWbay+Z8tf/t7Ixn8IL3AqTtLC542SUgxIYFyMCja4zDoRP5ef7o9TyGxYXtPir77
   VRgT0sqT7ibSLU2QFBqNHYrbcOTgSyi78WFP0e9AYkHTmdTLmXfbpQDtCXXE4cPSXN79Zku5nOzy
   uMbtGEnmV4x1lo5h/uBJlKnuigstoz4s9SM/6w==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=server1.cgcpukp.cn;
 b=QWPrpGsU+iJNJPWF/HJNC/THp5YwTCXYlH3qStV7kZMdheGuoRjjARcw9BJKbpKBax5KU247H5FN
   yLidbRqhd594d+/RYF/bUvOhTYJSvfB6+MIJZtzzjycmVNIMjtt/9TEwtsLadEK2wlHZ3ngDQABC
   Rm4KQR3dXgApj49NPj2VCQ7mDFw099CdWvCRgn2qdBEBc/kN6ozCmxL0wqQ2KhN3irqihrNhiFZj
   0PHQpemnyPTVKp8yr9V8DesSQ227XXL8sgrX5LtpcU7F2z0KyeqhYhQlyWCE9xMVj92ff1yKb3zv
   Qrjv/E/iNS4FRHeTgywcT402oNlWtdNhvxXKOQ==;
Received: from orsm (111.76.254.72) by server1.cgcpukp.cn id h1mup20e97cf for <it3@golnoor.com>; Wed, 20 May 2026 21:52:34 +0800 (envelope-from <sales@server1.cgcpukp.cn>)
Reply-To: <waimao0009@126.com>
Message-ID: <20260520220706176737@server1.cgcpukp.cn>
From: "Evelyn" <sales@server1.cgcpukp.cn>
To: <it3@golnoor.com>
Date: Wed, 20 May 2026 22:06:54 +0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: base64
X-mailer: Itkeduruw 3
X-Spam-Status: Yes, score=12.2
X-Spam-Score: 122
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "mail.espica.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Hi Discover exquisite model ships Limited supply, global shipping.
    Interested? Reply for a full catalog! Best regards 
 Content analysis details:   (12.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [103.30.40.118 listed in list.dnswl.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: cgcpukp.cn]
  0.5 RCVD_IN_HOSTKARMA_BR   RBL: Sender listed in HOSTKARMA-BROWN
                        [103.30.40.118 listed in hostkarma.junkemailfilter.com]
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                             [waimao0009(at)126.com]
  7.5 SNB_HASHBL_FREEMAIL    Message contains email address found on SNB
                             Freemail HashBL
                             [waimao0009[at]126.com]
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.8 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
X-Spam-Flag: YES
Subject:  ***SPAM***  Fw:Ship Model Paint Set Special

SGkNCg0KRGlzY292ZXIgZXhxdWlzaXRlIG1vZGVsIHNoaXBzIExpbWl0ZWQgc3VwcGx5LCBnbG9i
YWwgc2hpcHBpbmcuDQpJbnRlcmVzdGVkPw0KUmVwbHkgZm9yIGEgZnVsbCBjYXRhbG9nIQ0KDQpC
ZXN0IHJlZ2FyZHMNCg0KRXZlbHluDQo=