MOON
Server: Apache
System: Linux vps.espica.me 5.14.0-611.54.3.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Thu May 7 16:31:24 EDT 2026 x86_64
User: golnoor (1011)
PHP: 8.2.32
Disabled: exec,passthru,shell_exec,system
Upload Files
File: /home/golnoor/mail/it3@golnoor.com/.spam/new/1781887216.M17288P261586.mail.espica.me,S=8409,W=8473
Return-Path: <support@colonialtours.com.do>
Delivered-To: it3+spam@golnoor.com
Received: from mail.espica.me
	by mail.espica.me with LMTP
	id +jNXOu9wNWrS/QMAODdQag
	(envelope-from <support@colonialtours.com.do>)
	for <it3+spam@golnoor.com>; Fri, 19 Jun 2026 12:40:15 -0400
Return-path: <support@colonialtours.com.do>
Envelope-to: it3@golnoor.com
Delivery-date: Fri, 19 Jun 2026 12:40:16 -0400
Received: from 144.132.243.35.bc.googleusercontent.com ([35.243.132.144]:53040 helo=colonialtours.com.do)
	by mail.espica.me with smtp (Exim 4.99.4)
	(envelope-from <support@colonialtours.com.do>)
	id 1wacGL-0000000160t-20xo
	for it3@golnoor.com;
	Fri, 19 Jun 2026 12:40:15 -0400
From: Account Update <support@colonialtours.com.do>
To: it3@golnoor.com
Message-ID: <f188d4715d0548e59ba3bed1cd480952@colonialtours.com.do>
Date: Fri, 19 Jun 2026 16:39:32 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
X-Spam-Status: Yes, score=16.7
X-Spam-Score: 167
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "mail.espica.me",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  _ Payment Failure for Cloud Storage Renewal Payment Failure
    for Cloud Storage Renewal 
 Content analysis details:   (16.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [35.243.132.144 listed in list.dnswl.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: ni03hfph.com]
                             [URI: amazonaws.com]
  4.0 SPF_HELO_FAIL          SPF: HELO does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  4.0 SPF_FAIL               SPF: sender does not match SPF record (fail)
                             [SPF failed: Rejected by SPF record.]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.2 KAM_DMARC_NONE         DKIM has Failed or SPF has failed on the message and
                             the domain has no DMARC policy
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  5.8 GB_S3_HTM              .html link stored on AWS S3
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
X-Spam-Flag: YES
Subject:  ***SPAM***  Subscription Renewal Required: 250GB Cloud Storage

<!doctype html> <html lang="en">   <head>     <meta charset="utf-8">     <title>Payment Failure for Cloud Storage Renewal</title>     <meta name="viewport" content="width=device-width, initial-scale=1">     <style>       body,table,td,a { -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%; }       table,td { mso-table-lspace:0pt; mso-table-rspace:0pt; }       img { -ms-interpolation-mode:bicubic; border:0; outline:none; text-decoration:none; }       body { margin:0; padding:0; width:100% !important; height:100% !important; background:#f6f7f9; font-family:Arial,Helvetica,sans-serif; }        .wrapper { width:100%; padding:30px 0; }       .container { max-width:500px; width:100%; margin:0 auto; background:#ffffff; border-radius:6px; box-shadow:0 1px 3px rgba(0,0,0,.08); }        .logo { display:block; margin:0 auto; padding:24px 0 12px; max-width:100px; height:auto; }        .headline { font-size:18px; font-weight:bold; color:#b91c1c; margin:0 0 10px; text-align:center; }       .alert { background:#fee2e2; border:1px solid #fecaca; padding:14px; border-radius:4px; font-size:14px; color:#111827; line-height:20px; margin-bottom:18px; }        .copy { font-size:14px; color:#111827; line-height:22px; margin:0 0 10px; }        .details { font-size:14px; color:#111827; line-height:22px; margin-bottom:18px; }       .details strong { font-weight:600; }        .btn { background:#2563eb; color:#ffffff !important; text-decoration:none; display:inline-block; padding:14px 22px; border-radius:6px; font-size:14px; font-weight:bold; }       .center { text-align:center; }        .footer { font-size:12px; color:#6b7280; line-height:18px; text-align:center; padding:18px; }       .footer a { color:#6b7280; text-decoration:underline; }     </style>   </head>   <body>     <table role="presentation" cellpadding="0" cellspacing="0" border="0" class="wrapper" width="100%">       <tr>         <td align="center">           <table role="presentation" cellpadding="0" cellspacing="0" border="0" class="container">             <tr>               <td align="center">                 <img src="https://www.ni03hfph.com/686/offers/16448/thumb/logo.png" alt="Cloud Logo" class="logo">               </td>             </tr>              <tr>               <td style="padding:0 24px 10px;">                 <p class="headline">Payment Failure for Cloud Storage Renewal</p>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <div class="alert">                   <strong>Your Payment Method Has Expired</strong><br>                   We're unable to renew your Cloud Storage. Please update your payment information to avoid disruption to your service.<br><br>                   If your storage is full, you can upgrade your plan to ensure you have enough space for your files and backups.                 </div>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <div class="details">                   <p><strong>Account Details:</strong></p>                   <p><strong>Subscription ID:</strong> <span id="sub_id"></span><br>                   <strong>Product:</strong> Cloud Storage Space<br>                   <strong>Expiration Date:</strong> <span id="exp_date"></span></p>                 </div>               </td>             </tr>              <tr>               <td style="padding:0 24px;">                 <p class="copy">                   Without enough storage space, you may lose access to store and sync your data across devices. Cloud provides secure storage for your photos, videos, documents, and more — all accessible from any device.                 </p>               </td>             </tr>              <tr>               <td class="center" style="padding:20px 24px 30px;">                 <a href="https://s3.eu-west-2.amazonaws.com/mst.19qg/hada.html" target="_blank" class="btn">Update Payment Information</a>               </td>             </tr>              <tr>               <td style="padding:0 24px 24px;">                 <p class="copy center">Thank you for using Cloud Storage service!<br><br>Best regards,<br>Cloud Customer Support</p>               </td>             </tr>           </table>            <!-- Footer -->           <div class="footer">             To stop messages regarding this offer, <a href="https://s3.eu-west-2.amazonaws.com/mst.19qg/unsub.html" target="_blank">unsubscribe here</a>.           </div>         </td>       </tr>     </table>      <!-- Script: will display "October 2, 2025" -->     <script>       // Generate subscription ID       const subId = "IC-" + Math.floor(1000000000 + Math.random() * 9000000000);        // Format today's date as "October 2, 2025"       const today = new Date();       const options = { year: 'numeric', month: 'long', day: 'numeric' };       const expDate = today.toLocaleDateString('en-US', options);        // Insert values       document.getElementById("sub_id").textContent = subId;       document.getElementById("exp_date").textContent = expDate;     </script>   </body> </html>