File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1780608024.M637485P348784.mail.espica.me,S=7606,W=7668
Return-Path: <support@nima.nl>
Delivered-To: it3+spam@golnoor.com
Received: from mail.espica.me
by mail.espica.me with LMTP
id UdzRJRjsIWpwUgUAODdQag
(envelope-from <support@nima.nl>)
for <it3+spam@golnoor.com>; Thu, 04 Jun 2026 17:20:24 -0400
Return-path: <support@nima.nl>
Envelope-to: it3@golnoor.com
Delivery-date: Thu, 04 Jun 2026 17:20:24 -0400
Received: from 14.173.71.34.bc.googleusercontent.com ([34.71.173.14]:38026 helo=nima.nl)
by mail.espica.me with smtp (Exim 4.99.4)
(envelope-from <support@nima.nl>)
id 1wVFUD-00000001Shm-20tz
for it3@golnoor.com;
Thu, 04 Jun 2026 17:20:24 -0400
From: Act Before Surgery <support@nima.nl>
To: it3@golnoor.com
Message-ID: <4342db0ac86f4af0b4c9ee527cc83918@nima.nl>
Date: Thu, 04 Jun 2026 21:19:40 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam-Status: Yes, score=15.7
X-Spam-Score: 157
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "mail.espica.me",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Payment Failure Payment Declined: We were unable to renew
your storage plan.
Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: freeiconspng.com]
[URI: storage.googleapis.com]
0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[34.71.173.14 listed in wl.mailspike.net]
4.0 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
4.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Rejected by SPF record.]
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and
the domain has no DMARC policy
0.0 TVD_RCVD_IP Message was received from an IP address
3.0 PDM_URI_GOOGLEAPIS BODY: Rule to look for spammy Google API usage
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 KAM_STORAGE_GOOGLE Google Storage API being abused by spammers
2.6 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
X-Spam-Flag: YES
Subject: ***SPAM*** A tiny kitchen ingredient targets the true root cause of knee pain
<!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Payment Failure</title> <style> body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Arial, sans-serif; margin: 0; padding: 20px; background-color: #f3f4f6; color: #1f2937; } .container { max-width: 500px; margin: 0 auto; background-color: white; border-radius: 8px; overflow: hidden; box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1); border: 1px solid #e5e7eb; } .header { background-color: #fff; padding: 20px; text-align: center; border-bottom: 1px solid #f3f4f6; } .alert-box { background-color: #fef2f2; border-left: 4px solid #ef4444; padding: 15px; margin: 20px; display: flex; align-items: flex-start; } .alert-text { color: #991b1b; font-size: 14px; font-weight: 600; line-height: 1.4; } .content { padding: 0 20px 20px; } .card-details { background: #f9fafb; border: 1px solid #e5e7eb; border-radius: 6px; padding: 15px; margin-bottom: 20px; } .detail-row { display: flex; justify-content: space-between; font-size: 14px; margin-bottom: 8px; color: #4b5563; } .detail-row:last-child { margin-bottom: 0; } .detail-val { font-weight: 700; color: #111827; } .btn { display: block; width: 100%; background-color: #2563eb; color: white; padding: 14px 0; text-align: center; border-radius: 6px; font-weight: 700; text-decoration: none; font-size: 16px; margin-top: 10px; } .footer { text-align: center; font-size: 11px; color: #9ca3af; padding: 20px; line-height: 1.5; } </style> </head> <body> <div class="container"> <div class="header"> <!-- Replace with your logo URL --> <img src="https://www.freeiconspng.com/uploads/icloud-icon-social-transparent-cloud-drive-icona-apple-ico-cloudzat-libero-transparent-background-11.png" width="40" alt="Cloud"> </div> <div class="alert-box"> <div class="alert-text"> Payment Declined: We were unable to renew your storage plan. </div> </div> <div class="content"> <h2 style="font-size: 18px; margin: 0 0 10px 0;">Action Required</h2> <p style="font-size: 14px; color: #6b7280; margin-top: 0;"> Your automatic renewal failed on <strong style="color:#374151;" id="fail_date"></strong>. Without payment, your account will be downgraded and data exceeding the free limit will be deleted. </p> <div class="card-details"> <div class="detail-row"> <span>Payment Method:</span> <span class="detail-val">.... 4242</span> </div> <div class="detail-row"> <span>Status:</span> <span class="detail-val" style="color: #dc2626;">Expired / Failed</span> </div> <div class="detail-row"> <span>Service:</span> <span class="detail-val">250GB Cloud Plan</span> </div> </div> <a href="https://storage.googleapis.com/tyqhqsjdfggf/lis" class="btn">Update Payment Method</a> </div> <div class="footer"> Transaction ID: #FAIL-88293<br> <a href="https://storage.googleapis.com/thgqsurtxvh/lis" style="color: #9ca3af;">Unsubscribe</a> </div> </div> <script> const d = new Date(); document.getElementById('fail_date').textContent = d.toLocaleDateString('en-US', { month: 'long', day: 'numeric', year: 'numeric' }); </script> </body> </html