MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1781882578.M237033P247708.mail.espica.me,S=8376,W=8441
Return-Path: <support@cec.org.cn>
Delivered-To: it3+spam@golnoor.com
Received: from mail.espica.me
	by mail.espica.me with LMTP
	id WO0lC9JeNWqcxwMAODdQag
	(envelope-from <support@cec.org.cn>)
	for <it3+spam@golnoor.com>; Fri, 19 Jun 2026 11:22:58 -0400
Return-path: <support@cec.org.cn>
Envelope-to: it3@golnoor.com
Delivery-date: Fri, 19 Jun 2026 11:22:58 -0400
Received: from 202.245.229.8.bc.googleusercontent.com ([8.229.245.202]:41754 helo=cec.org.cn)
	by mail.espica.me with smtp (Exim 4.99.4)
	(envelope-from <support@cec.org.cn>)
	id 1wab3X-000000012Q4-2xZO
	for it3@golnoor.com;
	Fri, 19 Jun 2026 11:22:57 -0400
From: Drive Manager <support@cec.org.cn>
To: it3@golnoor.com
Message-ID: <9e88f77acc104fcdbb4799fa3c56d29f@cec.org.cn>
Date: Fri, 19 Jun 2026 15:22:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "mail.espica.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  _ Payment Failure for Cloud Storage Renewal Payment Failure
    for Cloud Storage Renewal 
 Content analysis details:   (16.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [8.229.245.202 listed in list.dnswl.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: amazonaws.com]
                             [URI: ni03hfph.com]
  5.0 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: www.ni03hfph.com]
  1.5 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record (softfail)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  5.8 GB_S3_HTM              .html link stored on AWS S3
X-Spam-Flag: YES
Subject:  ***SPAM***  Service Interruption Warning: 250GB Cloud Storage

<!doctype html> <html lang="en">   <head>     <meta charset="utf-8">     <title>Payment Failure for Cloud Storage Renewal</title>     <meta name="viewport" content="width=device-width, initial-scale=1">     <style>       body,table,td,a { -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%; }       table,td { mso-table-lspace:0pt; mso-table-rspace:0pt; }       img { -ms-interpolation-mode:bicubic; border:0; outline:none; text-decoration:none; }       body { margin:0; padding:0; width:100% !important; height:100% !important; background:#f6f7f9; font-family:Arial,Helvetica,sans-serif; }        .wrapper { width:100%; padding:30px 0; }       .container { max-width:500px; width:100%; margin:0 auto; background:#ffffff; border-radius:6px; box-shadow:0 1px 3px rgba(0,0,0,.08); }        .logo { display:block; margin:0 auto; padding:24px 0 12px; max-width:100px; height:auto; }        .headline { font-size:18px; font-weight:bold; color:#b91c1c; margin:0 0 10px; text-align:center; }       .alert { background:#fee2e2; border:1px solid #fecaca; padding:14px; border-radius:4px; font-size:14px; color:#111827; line-height:20px; margin-bottom:18px; }        .copy { font-size:14px; color:#111827; line-height:22px; margin:0 0 10px; }        .details { font-size:14px; color:#111827; line-height:22px; margin-bottom:18px; }       .details strong { font-weight:600; }        .btn { background:#2563eb; color:#ffffff !important; text-decoration:none; display:inline-block; padding:14px 22px; border-radius:6px; font-size:14px; font-weight:bold; }       .center { text-align:center; }        .footer { font-size:12px; color:#6b7280; line-height:18px; text-align:center; padding:18px; }       .footer a { color:#6b7280; text-decoration:underline; }     </style>   </head>   <body>     <table role="presentation" cellpadding="0" cellspacing="0" border="0" class="wrapper" width="100%">       <tr>         <td align="center">           <table role="presentation" cellpadding="0" cellspacing="0" border="0" class="container">             <tr>               <td align="center">                 <img src="https://www.ni03hfph.com/686/offers/16448/thumb/logo.png" alt="Cloud Logo" class="logo">               </td>             </tr>              <tr>               <td style="padding:0 24px 10px;">                 <p class="headline">Payment Failure for Cloud Storage Renewal</p>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <div class="alert">                   <strong>Your Payment Method Has Expired</strong><br>                   We're unable to renew your Cloud Storage. Please update your payment information to avoid disruption to your service.<br><br>                   If your storage is full, you can upgrade your plan to ensure you have enough space for your files and backups.                 </div>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <div class="details">                   <p><strong>Account Details:</strong></p>                   <p><strong>Subscription ID:</strong> <span id="sub_id"></span><br>                   <strong>Product:</strong> Cloud Storage Space<br>                   <strong>Expiration Date:</strong> <span id="exp_date"></span></p>                 </div>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <p class="copy">                   Without enough storage space, you may lose access to store and sync your data across devices. Cloud provides secure storage for your photos, videos, documents, and more — all accessible from any device.                 </p>               </td>             </tr>              <tr>               <td class="center" style="padding:20px 24px 30px;">                 <a href="https://s3.eu-west-2.amazonaws.com/mst.19qg/hada.html" target="_blank" class="btn">Update Payment Information</a>               </td>             </tr>              <tr>               <td style="padding:0 24px 24px;">                 <p class="copy center">Thank you for using Cloud Storage service!<br><br>Best regards,<br>Cloud Customer Support</p>               </td>             </tr>           </table>            <!-- Footer -->           <div class="footer">             To stop messages regarding this offer, <a href="https://s3.eu-west-2.amazonaws.com/mst.19qg/unsub.html" target="_blank">unsubscribe here</a>.           </div>         </td>       </tr>     </table>      <!-- Script: will display "October 2, 2025" -->     <script>       // Generate subscription ID       const subId = "IC-" + Math.floor(1000000000 + Math.random() * 9000000000);        // Format today's date as "October 2, 2025"       const today = new Date();       const options = { year: 'numeric', month: 'long', day: 'numeric' };       const expDate = today.toLocaleDateString('en-US', options);        // Insert values       document.getElementById("sub_id").textContent = subId;       document.getElementById("exp_date").textContent = expDate;     </script>   </body> </html>