/home/smartonegroup/mail/.spam/new/1739411546.M803475P2035025.server11.hhost.eg,S=7171,W=7291
Return-Path: <sales@coerd.cn>
Delivered-To: smartonegroup+spam@server11.hhost.eg
Received: from server11.hhost.eg
	by server11.hhost.eg with LMTP
	id mOHTL1pQrWdRDR8Aq0RAHw
	(envelope-from <sales@coerd.cn>)
	for <smartonegroup+spam@server11.hhost.eg>; Thu, 13 Feb 2025 01:52:26 +0000
Return-path: <sales@coerd.cn>
Envelope-to: sec@veroserv.com
Delivery-date: Thu, 13 Feb 2025 01:52:26 +0000
Received: from [140.246.118.151] (port=33303 helo=server1.coerd.cn)
	by server11.hhost.eg with esmtp (Exim 4.98)
	(envelope-from <sales@coerd.cn>)
	id 1tiOOw-00000008XXV-0g9P
	for sec@veroserv.com;
	Thu, 13 Feb 2025 01:52:26 +0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=ossljy; d=coerd.cn;
 h=Date:From:Reply-To:To:Message-Id:Subject:MIME-Version:Content-Type; i=sales@coerd.cn;
 bh=9RPeaxQvpG2WxqFheGyA8L4zgpU=;
 b=aFVTn+oC2QR638g4LAzq/qQfVGQ/g4zGhcIFtNsyYCZk/bpu/iurqfgMLfx9WHmaIelu3P2iB23U
   OrtqQ9dywGVY1Fs7IEVxVlkHyhLrK/csaLI0F/uQXMlEhnNXzjv0aG+SVLgIvgceIW+i0vdeHMRA
   wHj1/bF0JdrDzpP7HoW2SG7zfKtno4yda5NIwRakzDkjmlkvtcGq+/aoIBiYTJpWsUT74tTdlSgw
   E0ANbuUQFvpAfoCLrmRLdTFYSg0t0CmdKbMA73w/ykMxfCcA9B+evjaMQCwqolxs4QVV4LCeR91a
   dIb3ntfp9uL7LbeIigvkDw8VFImd1rmP6wz3rw==
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=ossljy; d=coerd.cn;
 b=rMD8az0SQZoFAHBRge5e/2vzKbYsfv3T0Pzaa/pHAnUUq47GMGB4FkjM4Wcz0D0Rp/88NmKIQZFv
   baQNN7IgmWoxEcpUQAvcVTqpmRB3ZjlwwceYtfqBUoayd9h5G+12roj5t6wqSNEiC+nvC1Ryr6lM
   wpgyIsB363V0U7/0nrWhzf1bVwJh8h6rzbplruG4bSP2WbX23n5lTGgFA4mz5skYkkUuBlfPRfOf
   ZnOrsuPhhFAh0HSM2K7fMP6j+P8/DSKjlZXfPncUHB/lM8AFr2cV2l2B6P78r9FwmhEhhlsHcQar
   WKxC6CXk8XNEhHLtEc3M2ciP5ObaDaVaIQ/8Vw==;
Received: from localhost (14.218.34.114) by server1.coerd.cn id hll7ka0e97c4 for <sec@veroserv.com>; Thu, 13 Feb 2025 09:46:34 +0800 (envelope-from <sales@coerd.cn>)
Date: Thu, 13 Feb 2025 09:51:10 +0800 (CST)
From: Andy from DN Suspension <sales@coerd.cn>
Reply-To: sales1@dnshocks.com
To: sec@veroserv.com
Message-Id: <20250213192248259412@coerd.cn>
MIME-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_23177077_507724162.1739411470186"
X-mailer: Foxmail 6, 13, 102, 15 [cn]
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "server11.hhost.eg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear sec , Happy New Year! DN Suspension may your life be
    like the splendor of fireworks in this season of miracles! 
 Content analysis details:   (13.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: coerd.cn]
                             [URI: waimaolang.cn]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [140.246.118.151 listed in zen.spamhaus.org]
  4.5 URIBL_DBL_SPAM         Contains a spam URL listed in the Spamhaus DBL
                             blocklist
                             [URI: coerd.cn]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [140.246.118.151 listed in sa-accredit.habeas.com]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                           [140.246.118.151 listed in bl.score.senderscore.com]
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                        [140.246.118.151 listed in sa-trusted.bondedsender.org]
  0.1 URIBL_CSS_A            Contains URL's A record listed in the Spamhaus CSS
                             blocklist
                             [URI: coerd.cn/140.246.118.151]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  1.6 HTML_IMAGE_ONLY_12     BODY: HTML: images with 800-1200 bytes of words
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
  0.0 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME parts
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.6 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
  0.0 T_REMOTE_IMAGE         Message contains an external image
X-Spam-Flag: YES
Subject:  ***SPAM***  Re:  Best wishes for Happy New Year from DN Suspension

------=_Part_23177077_507724162.1739411470186
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64

PGRpdj5EZWFyIHNlYyZuYnNwOyAsPGJyPjxicj48L2Rpdj4KPGRpdj5IYXBweSBOZXcgWWVhciE8
L2Rpdj4KPGRpdj4mbmJzcDs8L2Rpdj4KPGRpdj5ETiBTdXNwZW5zaW9uIG1heSB5b3VyIGxpZmUg
YmUgbGlrZSB0aGUgc3BsZW5kb3Igb2YgZmlyZXdvcmtzIGluIHRoaXMgc2Vhc29uIG9mIG1pcmFj
bGVzITwvZGl2Pgo8ZGl2PiZuYnNwOzwvZGl2Pgo8ZGl2Pk1heSBsb3ZlIGFuZCBwZWFjZSBhY2Nv
bXBhbnkgeW91IGV2ZXJ5IHN0ZXAgb2YgdGhlIHdheSE8L2Rpdj4KPGRpdj4mbmJzcDs8L2Rpdj4K
PGRpdj5NYXkgdGhpcyBncmFuZCBmZXN0aXZhbCBicmluZyB5b3UgZXZlcmxhc3RpbmcgaGFwcGlu
ZXNzITwvZGl2Pgo8ZGl2PiZuYnNwOzwvZGl2Pgo8ZGl2PkF0IHRoZSBiZWdpbm5pbmcgb2YgdGhl
IE5ldyBZZWFyLCB3ZSB3b3JrIHRvZ2V0aGVyIFRvd2FyZCBhIGJyaWdodGVyIGZ1dHVyZSE8L2Rp
dj4KPGRpdj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLTwvZGl2Pgo8ZGl2PkFuZHkmbmJzcDtYaWU8YnI+PGJyPlNhbGVzJm5i
c3A7TWFuYWdlcjxicj48YnI+R3Vhbmd6aG91IEROIFN1c3BlbnNpb24gVGVjaG5vbG9neSBDby4s
IEx0ZDwvZGl2PiA8ZGl2PjxpbWcgc3JjPSJodHRwczovL2FscGhhLWFwaS53YWltYW9sYW5nLmNu
L3N0YXRpYy9lZG0taHlwZXJmL2V5SjBaVzVoYm5SZmFXUWlPalUzTkRnc0luUmhjMnRmWldSdFgy
bGtJam8wTXpNMUxDSjFjMlZ5YzE5cFpDSTZNakExTkRRc0lsOXBaQ0k2SWpZM056WmlPR0ZoTVdZ
MlpXSmhORFJsT0dZNFpEY3pOQ0o5LmdpZiIgLz48L2Rpdj4=
------=_Part_23177077_507724162.1739411470186--
Path: home/smartonegroup/mail/.spam/new