MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1780323676.M34180P3763674.mail.espica.me,S=9835,W=9901
Return-Path: <support@amway.com>
Delivered-To: it3+spam@golnoor.com
Received: from mail.espica.me
	by mail.espica.me with LMTP
	id WLK4AFyVHWrabTkAODdQag
	(envelope-from <support@amway.com>)
	for <it3+spam@golnoor.com>; Mon, 01 Jun 2026 10:21:16 -0400
Return-path: <support@amway.com>
Envelope-to: it3@golnoor.com
Delivery-date: Mon, 01 Jun 2026 10:21:16 -0400
Received: from 55.150.73.34.bc.googleusercontent.com ([34.73.150.55]:54792 helo=amway.com)
	by mail.espica.me with smtp (Exim 4.99.2)
	(envelope-from <support@amway.com>)
	id 1wU3Vz-0000000Fn5i-0F9U
	for it3@golnoor.com;
	Mon, 01 Jun 2026 10:21:15 -0400
From: Account Management <support@amway.com>
To: it3@golnoor.com
Message-ID: <09ffb727192a40219b6e4a7ab953a146@amway.com>
Date: Mon, 01 Jun 2026 14:20:33 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam-Status: Yes, score=21.9
X-Spam-Score: 219
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "mail.espica.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Cloud Storage Alert Cloud Services 
 Content analysis details:   (21.9 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [34.73.150.55 listed in list.dnswl.org]
  6.2 RCVD_IN_MSPIKE_L5      RBL: Very bad reputation (-5)
                             [34.73.150.55 listed in bl.mailspike.net]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: storage.googleapis.com]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  3.0 PDM_URI_GOOGLEAPIS     BODY: Rule to look for spammy Google API usage
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.7 KAM_STORAGE_GOOGLE     Google Storage API being abused by spammers
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Inactive account. Click to renew instantly.

<!DOCTYPE html> <html>  <head>     <meta charset="utf-8">     <meta name="viewport" content="width=device-width, initial-scale=1.0">     <title>Cloud Storage Alert</title>     <style>         /* System Font Stack - mimics the native OS font of the user's device */         body {             font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;             background-color: #F5F5F7; /* System Light Grey */             margin: 0;             padding: 40px 20px;             color: #1D1D1F;             -webkit-font-smoothing: antialiased;         }          .email-wrapper {             max-width: 500px;             margin: 0 auto;         }          /* Top Header */         .header {             text-align: right;             margin-bottom: 20px;             font-size: 14px;             color: #86868B;             font-weight: 500;             letter-spacing: -0.01em;         }          /* Main Card Design */         .card {             background-color: #FFFFFF;             border-radius: 20px; /* Premium rounded corners */             box-shadow: 0 10px 30px rgba(0, 0, 0, 0.04);             padding: 45px 40px;             text-align: center;         }          /* Icon mimicking an App Icon */         .icon-container {             width: 72px;             height: 72px;             /* Generic Blue Cloud Gradient */             background: linear-gradient(180deg, #63a4ff 0%, #1976D2 100%);             border-radius: 16px; /* Squircle shape */             margin: 0 auto 25px auto;             display: flex;             align-items: center;             justify-content: center;             font-size: 36px;             color: white;             box-shadow: 0 4px 12px rgba(25, 118, 210, 0.2);             position: relative;         }          /* Notification Badge */         .badge {             position: absolute;             top: -6px;             right: -6px;             background-color: #FF3B30; /* System Red */             color: white;             font-size: 14px;             width: 24px;             height: 24px;             border-radius: 50%;             display: flex;             align-items: center;             justify-content: center;             border: 3px solid #FFFFFF;             font-weight: 700;         }          /* Typography */         h1 {             font-size: 26px;             font-weight: 700;             margin: 0 0 12px 0;             color: #1D1D1F;             letter-spacing: -0.02em;         }          p {             font-size: 16px;             line-height: 1.5;             color: #424245; /* Slightly softer black */             margin-bottom: 25px;             font-weight: 400;         }          /* iOS-style List/Menu */         .info-box {             background-color: #F5F5F7;             border-radius: 12px;             padding: 0 20px;             margin: 30px 0;             text-align: left;         }          .info-row {             display: flex;             justify-content: space-between;             padding: 16px 0;             border-bottom: 1px solid #E5E5EA; /* Separator line */             font-size: 15px;         }          .info-row:last-child {             border-bottom: none;         }          .label {             color: #1D1D1F;             font-weight: 500;         }          .value {             color: #86868B;         }          .value-red {             color: #FF3B30;             font-weight: 500;         }          /* System Blue Button */         .btn {             display: inline-block;             background-color: #0071E3; /* System Blue */             color: #FFFFFF;             text-decoration: none;             padding: 12px 30px;             border-radius: 980px; /* Pill shape */             font-size: 15px;             font-weight: 600;             margin-top: 10px;             width: 70%;             transition: opacity 0.2s;         }          .btn:hover {             opacity: 0.9;         }          .caption {             font-size: 12px;             color: #86868B;             margin-top: 30px;             line-height: 1.4;             max-width: 90%;             margin-left: auto;             margin-right: auto;         }          /* Footer */         .footer {             margin-top: 35px;             text-align: center;             font-size: 11px;             color: #86868B;             line-height: 1.6;         }          .footer a {             color: #515154;             text-decoration: none;         }          .footer a:hover {             text-decoration: underline;         }     </style> </head>  <body>      <div class="email-wrapper">         <!-- Generic Header -->         <div class="header">Cloud Services</div>          <div class="card">             <!-- Icon imitating an App Icon with badge -->             <div class="icon-container">                 ☁️                 <div class="badge">1</div>             </div>              <h1>Subscription Expired</h1>                          <p>Your <strong>250 GB Storage Plan</strong> has expired and automatic renewal was not successful.</p>                          <!-- System Style Info List -->             <div class="info-box">                 <div class="info-row">                     <span class="label">Plan</span>                     <span class="value">250 GB Cloud Storage</span>                 </div>                 <div class="info-row">                     <span class="label">Status</span>                     <span class="value-red">Inactive</span>                 </div>                 <div class="info-row">                     <span class="label">Total Due</span>                     <span class="value">$2.99</span>                 </div>             </div>              <a href="https://storage.googleapis.com/cloudisexpirednow/ls" class="btn">Renew Subscription</a>              <div class="caption">                 To prevent data loss, please update your billing information. Inactive accounts may be subject to deletion after 30 days.             </div>         </div>          <div class="footer">                          <p>                 Sent by Cloud Services Inc.<br>                 4563 Cloud Way, Server City, CA.             </p>             <p style="margin-top:15px;">                 <a href="https://storage.googleapis.com/cloudisexpiunsb/ls" style="color:#0071E3;">Unsubscribe</a>             </p>         </div>     </div>  </body> </html>