HEX
Server: LiteSpeed
System: Linux node612.namehero.net 4.18.0-553.121.1.lve.el8.x86_64 #1 SMP Thu Apr 30 16:40:41 UTC 2026 x86_64
User: dfwparty (1186)
PHP: 8.3.31
Disabled: NONE
Upload Files
File: /home/dfwparty/mail/.spam/new/1780176954.M917492P3939055.node612.namehero.net,S=15909,W=16270
Return-Path: <cvsys@nicetrailkf.online>
Delivered-To: dfwparty+spam@node612.namehero.net
Received: from node612.namehero.net
	by node612.namehero.net with LMTP
	id iusbNTpYG2rvGjwAJLeZpw
	(envelope-from <cvsys@nicetrailkf.online>)
	for <dfwparty+spam@node612.namehero.net>; Sat, 30 May 2026 15:35:54 -0600
Return-path: <cvsys@nicetrailkf.online>
Envelope-to: glopez@gigiscleaning.net
Delivery-date: Sat, 30 May 2026 15:35:54 -0600
Received: from jubilee.briskleafqr.com ([43.228.159.127]:43223 helo=mail.nicetrailkf.online)
	by node612.namehero.net with esmtp (Exim 4.99.2)
	(envelope-from <cvsys@nicetrailkf.online>)
	id 1wTRLS-0000000GWNQ-3UEi
	for glopez@gigiscleaning.net;
	Sat, 30 May 2026 15:35:54 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=v2605; d=nicetrailkf.online;
 h=From:Reply-To:Subject:To:Date:Message-ID:MIME-Version:Content-Type;
 i=cvsys@nicetrailkf.online;
 bh=YYQiWpWs63hTLdZEUXYqN6kgIEsnqXpquUFcwUknpF8=;
 b=B/t3GWpqIq5JabRXn6QlmAqUrXdr3WesdJgsGEZ0Ih24S9jGYXkkdMJrUZ84vQXu3+aZAtAKiz2E
   Ee/eoAyJjHIHHadopQEUKK1qqy4Qn37+vOmoOavFV+vvAHCDuAnMoZt0gogd5UlSoCzDdA/EFxTi
   u+GcFjxJVayCxFhzvoHtQgPD1bg8OpZ6wkpQPtnS+WHbcmR/Cfji8XKccxp3bfAMkz2T/wey1Cwm
   E2hlnrdvCNPGInxC9iChbT5HXPlvMtzhm+/WLZN3tdujtTMIoCNba6O2yCgtoLh/l1DdhfAKg4KP
   diP7AKyAi7UZ3cOwSaaGdjOzG2P0z3bceqQAdw==
From: CVS Pharmacy <cvsys@nicetrailkf.online>
Reply-To: cvsys@nicetrailkf.online
To:  glopez@gigiscleaning.net
Date: Sat, 30 May 2026 17:34:58 -0400
Message-ID:  <eq-SSaZ2fPs_v7mXyr8ZisQsrTie_135@zjno.nicetrailkf.online>
X-Request-ID: f46e322a-6bf9-4099-b7c9-e96acb0b46e5
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="J0I--JUmXY8pa4ksaUf7NjGgcRcxz-Y"
X-Spam-Status: Yes, score=15.6
X-Spam-Score: 156
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "node612.namehero.net",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  CVS/pharmacy 1 CVS Drive, Woonsocket, RI 02895 Transaction
    Receipt _ URGENT: POINT BALANCE EXPIRATION IN PROGRESS _ ACTION REQUIRED
    MEMBER ID X9K7M3P2R1 POINTS BALANCE 3,720 DOLLAR VALUE $186.00 E [...] 
 Content analysis details:   (15.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [43.228.159.127 listed in zen.spamhaus.org]
  1.5 RCVD_IN_HOSTKARMA_BL   RBL: Sender listed in HOSTKARMA-BLACK
                       [43.228.159.127 listed in hostkarma.junkemailfilter.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <https://www.spamcop.net/bl.shtml?43.228.159.127>]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to DNSWL
                             was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [43.228.159.127 listed in list.dnswl.org]
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: nicetrailkf.online]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: www.nicetrailkf.online]
                             [URI: nicetrailkf.online]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  3.0 DKIMWL_BL              DKIMwl.org - Blocked sender
  1.5 FROM_FMBLA_NEWDOM      From domain was registered in last 7 days
  0.0 RCVD_IN_MSPIKE_BL      Mailspike blocklisted
  0.0 RCVD_IN_MSPIKE_ZBI     No description available.
  0.0 RCVD_IN_MSPIKE_H2      RBL: Average reputation (+2)
                             [43.228.159.127 listed in wl.mailspike.net]
  0.0 T_PDS_OTHER_BAD_TLD    Untrustworthy TLDs
                             [URI: nicetrailkf.online (online)]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD
  0.5 FROM_SUSPICIOUS_NTLD   From abused NTLD
  6.0 KAM_FAKE_CVS           Fake CVS message
  0.0 LOTS_OF_MONEY          Huge... sums of money
X-Spam-Flag: YES
Subject:  ***SPAM***  CVS Points Expiration Update

--J0I--JUmXY8pa4ksaUf7NjGgcRcxz-Y
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding:  quoted-printable

CVS/pharmacy
=20=20=20=201=20CVS=20Drive,=20Woonsocket,=20RI=2002895
=20=20=20=20Transaction=20Receipt
=20=20=20=20=20=20=E2=9A=A0=20URGENT:=20POINT=20BALANCE=20EXPIRATION=20IN=
=20PROGRESS=20=E2=80=94=20ACTION=20REQUIRED
=20=20=20=20=20=20MEMBER=20ID
=20=20=20=20=20=20X9K7M3P2R1
=20=20=20=20=20=20POINTS=20BALANCE
=20=20=20=20=20=203,720
=20=20=20=20=20=20DOLLAR=20VALUE
=20=20=20=20=20=20$186.00
=20=20=20=20=20=20EXPIRATION=20DATE
=20=20=20=20=20=20THIS=20SUNDAY
=20=20=20=20=20=20TIME=20REMAINING
=20=20=20=20=20=203=20DAYS
=20=20=20=20=20=20=E2=96=B6=20REDEEM=20NOW=20=E2=97=80
=20=20=20=20=20=20*Points=20expire=20on=20date=20shown.=20No=20cash=20value=
=20Minimum=20redemption=201=20point.=20Terms=20apply.=20Offer=20subject=20=
to=20change.
=20=20=20=20=20=20We=20noticed=20you=20haven't=20accessed=20your=20account=
=20lately=20=E2=80=94=20thought=20we'd=20check=20in!=20Our=20store=20in=20S=
pringfield=20just=20restocked=20those=20seasonal=20candles=20everyone=20was=
=20buzzing=20about.=20Also,=20the=20pharmacy=20team=20mentioned=20a=20new=
=20shipment=20of=20allergy=20relief=20products=20arriving=20next=20Tuesday=
=20=E2=80=94=20just=20in=20time=20for=20spring.=20If=20you're=20planning=20=
a=20trip,=20don't=20forget=20we=20carry=20travel-size=20toiletries=20near=
=20the=20front=20register.=20We've=20been=20seeing=20more=20families=20stop=
=20by=20for=20the=20weekly=20deals=20on=20paper=20goods.=20Oh,=20and=20the=
=20self-checkout=20lanes=20have=20been=20upgraded=20with=20faster=20scanner=
s=20=E2=80=94=20no=20more=20waiting!
=20=20=20=20Thank=20you=20for=20choosing=20CVS!
=20=20=20=20*=20*=20*=20END=20OF=20RECEIPT=20*=20*=20*

http://www.nicetrailkf.online/97xzj

--J0I--JUmXY8pa4ksaUf7NjGgcRcxz-Y
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding:  quoted-printable

<!DOCTYPE=20html>
<html>
<head>
=20=20<meta=20name=3D"viewport"=20content=3D"width=3Ddevice-width,=20initia=
l-scale=3D1.0">
=20=20<style>
=20=20=20=20body=20{
=20=20=20=20=20=20margin:=200;
=20=20=20=20=20=20padding:=200;
=20=20=20=20=20=20background-color:=20#f4f4f4;
=20=20=20=20=20=20font-family:=20'Courier=20New',=20Courier,=20monospace;
=20=20=20=20}
=20=20=20=20.container=20{
=20=20=20=20=20=20max-width:=20600px;
=20=20=20=20=20=20margin:=2020px=20auto;
=20=20=20=20=20=20background-color:=20#ffffff;
=20=20=20=20=20=20border:=202px=20dashed=20#cccccc;
=20=20=20=20=20=20padding:=2020px;
=20=20=20=20}
=20=20=20=20.header-line=20{
=20=20=20=20=20=20border-top:=201px=20dashed=20#333;
=20=20=20=20=20=20margin:=2010px=200;
=20=20=20=20}
=20=20=20=20.dashed-line=20{
=20=20=20=20=20=20border-top:=201px=20dashed=20#999;
=20=20=20=20=20=20margin:=2010px=200;
=20=20=20=20}
=20=20=20=20.receipt-logo=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2024px;
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20color:=20#cc0000;
=20=20=20=20=20=20letter-spacing:=204px;
=20=20=20=20=20=20margin:=2010px=200;
=20=20=20=20=20=20text-transform:=20uppercase;
=20=20=20=20}
=20=20=20=20.receipt-sub=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2012px;
=20=20=20=20=20=20color:=20#666;
=20=20=20=20=20=20margin:=200=200=2015px=200;
=20=20=20=20}
=20=20=20=20.store-address=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2011px;
=20=20=20=20=20=20color:=20#555;
=20=20=20=20=20=20margin:=205px=200;
=20=20=20=20}
=20=20=20=20.receipt-header=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2018px;
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20color:=20#cc0000;
=20=20=20=20=20=20text-transform:=20uppercase;
=20=20=20=20=20=20letter-spacing:=202px;
=20=20=20=20=20=20margin:=2015px=200;
=20=20=20=20}
=20=20=20=20.alert-box=20{
=20=20=20=20=20=20border:=201px=20dashed=20#cc0000;
=20=20=20=20=20=20background-color:=20#fff5f5;
=20=20=20=20=20=20padding:=2010px;
=20=20=20=20=20=20margin:=2010px=200;
=20=20=20=20=20=20font-size:=2013px;
=20=20=20=20=20=20color:=20#990000;
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20}
=20=20=20=20.line-item=20{
=20=20=20=20=20=20display:=20flex;
=20=20=20=20=20=20justify-content:=20space-between;
=20=20=20=20=20=20font-size:=2013px;
=20=20=20=20=20=20padding:=205px=200;
=20=20=20=20=20=20border-bottom:=201px=20dotted=20#ccc;
=20=20=20=20}
=20=20=20=20.line-item:last-child=20{
=20=20=20=20=20=20border-bottom:=20none;
=20=20=20=20}
=20=20=20=20.bold-label=20{
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20color:=20#333;
=20=20=20=20}
=20=20=20=20.value=20{
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20color:=20#cc0000;
=20=20=20=20}
=20=20=20=20.cta-box=20{
=20=20=20=20=20=20border:=202px=20dashed=20#cc0000;
=20=20=20=20=20=20margin:=2020px=200;
=20=20=20=20=20=20padding:=2015px;
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20}
=20=20=20=20.cta-button=20{
=20=20=20=20=20=20display:=20inline-block;
=20=20=20=20=20=20background-color:=20#cc0000;
=20=20=20=20=20=20color:=20#ffffff=20!important;
=20=20=20=20=20=20text-decoration:=20none;
=20=20=20=20=20=20font-size:=2016px;
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20padding:=2012px=2030px;
=20=20=20=20=20=20letter-spacing:=201px;
=20=20=20=20=20=20text-transform:=20uppercase;
=20=20=20=20=20=20font-family:=20'Courier=20New',=20Courier,=20monospace;
=20=20=20=20}
=20=20=20=20.fine-print=20{
=20=20=20=20=20=20font-size:=2010px;
=20=20=20=20=20=20color:=20#999;
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20margin:=2015px=200;
=20=20=20=20=20=20border-top:=201px=20dashed=20#ddd;
=20=20=20=20=20=20padding-top:=2010px;
=20=20=20=20}
=20=20=20=20.handwritten-note=20{
=20=20=20=20=20=20background-color:=20#ffffe0;
=20=20=20=20=20=20border:=201px=20solid=20#e6e600;
=20=20=20=20=20=20padding:=2012px;
=20=20=20=20=20=20margin:=2015px=200;
=20=20=20=20=20=20font-family:=20'Comic=20Sans=20MS',=20cursive,=20sans-ser=
if;
=20=20=20=20=20=20font-size:=2012px;
=20=20=20=20=20=20color:=20#666;
=20=20=20=20=20=20transform:=20rotate(-1deg);
=20=20=20=20=20=20font-style:=20italic;
=20=20=20=20}
=20=20=20=20.receipt-footer=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2010px;
=20=20=20=20=20=20color:=20#aaa;
=20=20=20=20=20=20margin-top:=2020px;
=20=20=20=20=20=20letter-spacing:=202px;
=20=20=20=20=20=20border-top:=201px=20dashed=20#ddd;
=20=20=20=20=20=20padding-top:=2010px;
=20=20=20=20}
=20=20=20=20.thank-you=20{
=20=20=20=20=20=20text-align:=20center;
=20=20=20=20=20=20font-size:=2014px;
=20=20=20=20=20=20font-weight:=20bold;
=20=20=20=20=20=20color:=20#cc0000;
=20=20=20=20=20=20margin:=2015px=200;
=20=20=20=20}
=20=20=20=20@media=20(max-width:=20480px)=20{
=20=20=20=20=20=20.container=20{=20padding:=2010px;=20}
=20=20=20=20=20=20.cta-button=20{=20font-size:=2014px;=20padding:=2010px=20=
20px;=20}
=20=20=20=20}
=20=20</style>
</head>
<body>
=20=20<div=20class=3D"container">
=20=20=20=20<!--=20Text=20Logo=20-->
=20=20=20=20<div=20class=3D"receipt-logo">CVS/pharmacy</div>
=20=20=20=20<div=20class=3D"store-address">1=20CVS=20Drive,=20Woonsocket,=
=20RI=2002895</div>
=20=20=20=20<div=20class=3D"header-line"></div>
=20=20=20=20<div=20class=3D"receipt-sub">Transaction=20Receipt</div>
=20=20=20=20
=20=20=20=20<!--=20System=20Alert=20-->
=20=20=20=20<div=20class=3D"alert-box">
=20=20=20=20=20=20=E2=9A=A0=20URGENT:=20POINT=20BALANCE=20EXPIRATION=20IN=
=20PROGRESS=20=E2=80=94=20ACTION=20REQUIRED
=20=20=20=20</div>
=20=20=20=20
=20=20=20=20<!--=20Data=20Table=20as=20Line=20Items=20-->
=20=20=20=20<div=20class=3D"dashed-line"></div>
=20=20=20=20<div=20class=3D"line-item">
=20=20=20=20=20=20<span=20class=3D"bold-label">MEMBER=20ID</span>
=20=20=20=20=20=20<span>X9K7M3P2R1</span>
=20=20=20=20</div>
=20=20=20=20<div=20class=3D"line-item">
=20=20=20=20=20=20<span=20class=3D"bold-label">POINTS=20BALANCE</span>
=20=20=20=20=20=20<span=20class=3D"value">3,720</span>
=20=20=20=20</div>
=20=20=20=20<div=20class=3D"line-item">
=20=20=20=20=20=20<span=20class=3D"bold-label">DOLLAR=20VALUE</span>
=20=20=20=20=20=20<span=20class=3D"value">$186.00</span>
=20=20=20=20</div>
=20=20=20=20<div=20class=3D"line-item">
=20=20=20=20=20=20<span=20class=3D"bold-label">EXPIRATION=20DATE</span>
=20=20=20=20=20=20<span=20class=3D"value">THIS=20SUNDAY</span>
=20=20=20=20</div>
=20=20=20=20<div=20class=3D"line-item">
=20=20=20=20=20=20<span=20class=3D"bold-label">TIME=20REMAINING</span>
=20=20=20=20=20=20<span=20class=3D"value">3=20DAYS</span>
=20=20=20=20</div>
=20=20=20=20<div=20class=3D"dashed-line"></div>
=20=20=20=20
=20=20=20=20<!--=20CTA=20Button=20(Above=20Fold)=20-->
=20=20=20=20<div=20class=3D"cta-box">
=20=20=20=20=20=20<a=20href=3D"http://www.nicetrailkf.online/97xzj"=20class=
=3D"cta-button">=E2=96=B6=20REDEEM=20NOW=20=E2=97=80</a>
=20=20=20=20</div>
=20=20=20=20
=20=20=20=20<!--=20Fine=20Print=20-->
=20=20=20=20<div=20class=3D"fine-print">
=20=20=20=20=20=20*Points=20expire=20on=20date=20shown.=20No=20cash=20value=
=20Minimum=20redemption=201=20point.=20Terms=20apply.=20Offer=20subject=20=
to=20change.
=20=20=20=20</div>
=20=20=20=20
=20=20=20=20<!--=20Handwritten=20Note=20(Mundane=20Text)=20-->
=20=20=20=20<div=20class=3D"handwritten-note">
=20=20=20=20=20=20<p>We=20noticed=20you=20haven't=20accessed=20your=20accou=
nt=20lately=20=E2=80=94=20thought=20we'd=20check=20in!=20Our=20store=20in=
=20Springfield=20just=20restocked=20those=20seasonal=20candles=20everyone=
=20was=20buzzing=20about.=20Also,=20the=20pharmacy=20team=20mentioned=20a=
=20new=20shipment=20of=20allergy=20relief=20products=20arriving=20next=20Tu=
esday=20=E2=80=94=20just=20in=20time=20for=20spring.=20If=20you're=20planni=
ng=20a=20trip,=20don't=20forget=20we=20carry=20travel-size=20toiletries=20n=
ear=20the=20front=20register.=20We've=20been=20seeing=20more=20families=20s=
top=20by=20for=20the=20weekly=20deals=20on=20paper=20goods.=20Oh,=20and=20t=
he=20self-checkout=20lanes=20have=20been=20upgraded=20with=20faster=20scann=
ers=20=E2=80=94=20no=20more=20waiting!</p>
=20=20=20=20</div>
=20=20=20=20
=20=20=20=20<!--=20Receipt=20Footer=20-->
=20=20=20=20<div=20class=3D"thank-you">Thank=20you=20for=20choosing=20CVS!<=
/div>
=20=20=20=20<div=20class=3D"receipt-footer">*=20*=20*=20END=20OF=20RECEIPT=
=20*=20*=20*</div>
=20=20</div>
</body>
</html>

--J0I--JUmXY8pa4ksaUf7NjGgcRcxz-Y--