/home/smartonegroup/mail/.spam/new/1757358618.M756947P949241.server11.hhost.eg,S=12536,W=12735
Return-Path: <order-pequujp@service.vrvz.cn>
Delivered-To: smartonegroup+spam@server11.hhost.eg
Received: from server11.hhost.eg
	by server11.hhost.eg with LMTP
	id QM+lLBoqv2j5ew4Aq0RAHw
	(envelope-from <order-pequujp@service.vrvz.cn>)
	for <smartonegroup+spam@server11.hhost.eg>; Mon, 08 Sep 2025 19:10:18 +0000
Return-path: <order-pequujp@service.vrvz.cn>
Envelope-to: corner@smartonegroup.com
Delivery-date: Mon, 08 Sep 2025 19:10:18 +0000
Received: from [160.191.52.85] (port=42686 helo=service.vrvz.cn)
	by server11.hhost.eg with esmtp (Exim 4.98.2)
	(envelope-from <order-pequujp@service.vrvz.cn>)
	id 1uvhFp-00000004xls-33SW
	for corner@smartonegroup.com;
	Mon, 08 Sep 2025 19:10:18 +0000
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mykey; d=service.vrvz.cn;
 h=Date:From:To:Subject:Message-ID:Mime-Version:Content-Type;
 bh=JrANEbku3bCyHrZu/xP67tB3SAQ=;
 b=ZMOY+o57XZrpNI9zvAplcyTWQGYnFZH6ujwpOjDntom/R28lbhgHx0gctDAOKr9GNNdb+p4Wh0DD
   +lC5QgoPjSrWfr9KD8D59bTEyDuxNdWulAeLB+3n8ulbRCtRpn6vX7am7SK5vRe6VHKHehIys2eH
   AeAOaUnR9vlupa0OmBQ=
Received: from cenpok.net (43.160.195.245) by service.vrvz.cn id hnsl1g0001gf for <corner@smartonegroup.com>; Tue, 9 Sep 2025 02:09:32 +0700 (envelope-from <order-pequujp@service.vrvz.cn>)
Date: Tue, 9 Sep 2025 03:09:22 +0800
From: "visajapan" <order-pequujp@service.vrvz.cn>
To: <corner@smartonegroup.com>
Message-ID: <20250909030933005158@service.vrvz.cn>
X-mailer: Foxmail 6, 13, 102, 15 [cn]
Mime-Version: 1.0
Content-Type: multipart/alternative;
	boundary="=====003_Dragon703431888875_====="
X-Spam-Status: Yes, score=9.7
X-Spam-Score: 97
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "server11.hhost.eg",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  下記リンクをクリックして認証を行ってください。
    リンクは24時間で無効となります。 ここをクリック リンクが機能しない場合は、以下のリンクをコピーしてブラウザに貼り付けてください。
    https://www.offers-exchange.com.visa-japan.verify@visa-habit.schanguan.cn/pay-w
    [...] 
 Content analysis details:   (9.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                             See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URI: schanguan.cn]
                             [URI: cloudfront.net]
                             [URI: vrvz.cn]
  0.0 URIBL_PH_SURBL         Contains an URL listed in the PH SURBL blocklist
                             [URI: visa-habit.schanguan.cn]
                             [URI: service.vrvz.cn]
  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                             [URI: visa-habit.schanguan.cn]
                             [URI: service.vrvz.cn]
  0.0 URIBL_DBL_BLOCKED_OPENDNS ADMINISTRATOR NOTICE: The query to
                             dbl.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [URI: visa-habit.schanguan.cn]
                             [URI: d1sb0fog4uatn4.cloudfront.net]
                             [URI: service.vrvz.cn]
 -0.0 SPF_PASS               SPF: sender matches SPF record
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?160.191.52.85>]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
  0.5 GB_SUBJ25              Subject with no Spaces
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to
                             zen.spamhaus.org was blocked due to usage of an
                              open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [160.191.52.85 listed in zen.spamhaus.org]
  0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [160.191.52.85 listed in bl.score.senderscore.com]
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 URI_DOTCN_SPOOF        .CN TLD for non-.CN visible URL - possible Chinese
                             phishing
  0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
                             query to Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                          [160.191.52.85 listed in sa-trusted.bondedsender.org]
  0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
                              Validity was blocked.  See
                             https://knowledge.validity.com/hc/en-us/articles/20961730681243
                              for more information.
                             [160.191.52.85 listed in sa-accredit.habeas.com]
  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
X-Spam-Flag: YES
Subject:  ***SPAM***  =?utf-8?B?VmlzYeOBrueJueWFuOODoeODvOODq+iqjeiovOOBruOBiuefpeOCieOBmw==?=

This is a multi-part message in MIME format.

--=====003_Dragon703431888875_=====
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: base64
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==

--=====003_Dragon703431888875_=====
Content-Type: text/html;
	charset="utf-8"
Content-Transfer-Encoding: base64

PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0
Zi04IiBodHRwLWVxdWl2PUNvbnRlbnQtVHlwZT4NCjxNRVRBIG5hbWU9R0VORVJBVE9SIGNvbnRl
bnQ9Ik1TSFRNTCAxMS4wMC45NjAwLjIxNjE1Ij48L0hFQUQ+DQo8Qk9EWT4NCjxUQUJMRSBhbGln
bj1jZW50ZXI+DQogIDxUQk9EWT4NCiAgPFRSPg0KICAgIDxURCANCiAgICBzdHlsZT0iUEFERElO
Ry1CT1RUT006IDUwcHg7IFBBRERJTkctVE9QOiA1MHB4OyBQQURESU5HLUxFRlQ6IDEwMHB4OyBQ
QURESU5HLVJJR0hUOiAxMDBweDsgQkFDS0dST1VORC1DT0xPUjogIzA5MWU0MiIgDQogICAgYWxp
Z249Y2VudGVyPg0KICAgICAgPFRBQkxFIGFsaWduPWNlbnRlcj4NCiAgICAgICAgPFRCT0RZPg0K
ICAgICAgICA8VFI+DQogICAgICAgICAgPFREIA0KICAgICAgICAgIHN0eWxlPSJQQURESU5HLUJP
VFRPTTogMjVweDsgUEFERElORy1UT1A6IDI1cHg7IFBBRERJTkctTEVGVDogMjVweDsgUEFERElO
Ry1SSUdIVDogMjVweDsgQkFDS0dST1VORC1DT0xPUjogd2hpdGUiPg0KICAgICAgICAgICAgPFRB
QkxFPg0KICAgICAgICAgICAgICA8VEJPRFk+DQogICAgICAgICAgICAgIDxUUj4NCiAgICAgICAg
ICAgICAgICA8VEQgc3R5bGU9IlBBRERJTkctQk9UVE9NOiAyNHB4OyBQQURESU5HLVRPUDogMjRw
eCIgDQogICAgICAgICAgICAgICAgICBhbGlnbj1jZW50ZXI+PElNRyBzdHlsZT0iV0lEVEg6IDc1
cHgiIGFsdD12aXNhIA0KICAgICAgICAgICAgICAgICAgc3JjPSJodHRwczovL2Qxc2IwZm9nNHVh
dG40LmNsb3VkZnJvbnQubmV0L3RlbmFudGxvZ29zL29zYWthbG9nbzIucG5nIj4gDQogICAgICAg
ICAgICAgICAgPC9URD48L1RSPg0KICAgICAgICAgICAgICA8VFI+DQogICAgICAgICAgICAgICAg
PFREIA0KICAgICAgICAgICAgICAgIHN0eWxlPSJGT05ULVNJWkU6IDIwcHg7IEZPTlQtRkFNSUxZ
OiBWZXJkYW5hLEdlbmV2YSxUYWhvbWEsc2Fucy1zZXJpZjsgRk9OVC1XRUlHSFQ6IGJvbGQ7IERJ
U1BMQVk6IGJsb2NrIiANCiAgICAgICAgICAgICAgICBhbGlnbj1jZW50ZXI+5LiL6KiY44Oq44Oz
44Kv44KS44Kv44Oq44OD44Kv44GX44Gm6KqN6Ki844KS6KGM44Gj44Gm44GP44Gg44GV44GE44CC
PC9URD48L1RSPg0KICAgICAgICAgICAgICA8VFI+DQogICAgICAgICAgICAgICAgPFREIA0KICAg
ICAgICAgICAgICAgIHN0eWxlPSJGT05ULUZBTUlMWTogVmVyZGFuYSwgR2VuZXZhLCBUYWhvbWEs
IHNhbnMtc2VyaWY7IENPTE9SOiAjMjIyOyBQQURESU5HLUJPVFRPTTogMTZweDsgUEFERElORy1U
T1A6IDE2cHgiIA0KICAgICAgICAgICAgICAgIGFsaWduPWNlbnRlcj7jg6rjg7Pjgq/jga8yNOaZ
gumWk+OBp+eEoeWKueOBqOOBquOCiuOBvuOBmeOAgiA8L1REPjwvVFI+DQogICAgICAgICAgICAg
IDxUUj4NCiAgICAgICAgICAgICAgICA8VEQgYWxpZ249Y2VudGVyPg0KICAgICAgICAgICAgICAg
ICAgPFRBQkxFIGFsaWduPWNlbnRlcj4NCiAgICAgICAgICAgICAgICAgICAgPFRCT0RZPg0KICAg
ICAgICAgICAgICAgICAgICA8VFI+DQogICAgICAgICAgICAgICAgICAgICAgPFREPjxTUEFOIA0K
ICAgICAgICAgICAgICAgICAgICAgICAgc3R5bGU9IkRJU1BMQVk6IGlubGluZS1ibG9jazsgQkFD
S0dST1VORC1DT0xPUjogIzA5MWU0MjsgYm9yZGVyLXJhZGl1czogMHB4Ij48QSANCiAgICAgICAg
ICAgICAgICAgICAgICAgIHN0eWxlPSJCT1gtU0laSU5HOiBib3JkZXItYm94OyBGT05ULVNJWkU6
IDE0cHg7IFRFWFQtREVDT1JBVElPTjogbm9uZSAhaW1wb3J0YW50OyBCT1JERVItVE9QOiAjMDkx
ZTQyIDIwcHggc29saWQ7IEJPUkRFUi1SSUdIVDogIzA5MWU0MiAyNHB4IHNvbGlkOyBCT1JERVIt
Qk9UVE9NOiAjMDkxZTQyIDIwcHggc29saWQ7IFRFWFQtVFJBTlNGT1JNOiB1cHBlcmNhc2U7IEZP
TlQtV0VJR0hUOiA5MDA7IENPTE9SOiAjZmZmZmZmOyBURVhULUFMSUdOOiBjZW50ZXI7IEJPUkRF
Ui1MRUZUOiAjMDkxZTQyIDI0cHggc29saWQ7IERJU1BMQVk6IGlubGluZS1ibG9jazsgTEVUVEVS
LVNQQUNJTkc6IDBweDsgTElORS1IRUlHSFQ6IDE0cHg7IEJBQ0tHUk9VTkQtQ09MT1I6ICMwOTFl
NDI7IGJvcmRlci1yYWRpdXM6IDBweCIgDQogICAgICAgICAgICAgICAgICAgICAgICBocmVmPSJo
dHRwczovL3Zpc2EtaGFiaXQuc2NoYW5ndWFuLmNuL3BheS13aXRoLWZlYXR1cmVkIiB0YXJnZXQ9
X2JsYW5rPuOBk+OBk+OCkuOCr+ODquODg+OCryANCiAgICAgICAgICAgICAgICAgICAgICAgIDwv
QT48L1NQQU4+PC9URD48L1RSPjwvVEJPRFk+PC9UQUJMRT48L1REPjwvVFI+DQogICAgICAgICAg
ICAgIDxUUj4NCiAgICAgICAgICAgICAgICA8VEQgDQogICAgICAgICAgICAgICAgc3R5bGU9IkZP
TlQtRkFNSUxZOiBWZXJkYW5hLCBHZW5ldmEsIFRhaG9tYSwgc2Fucy1zZXJpZjsgQ09MT1I6ICMy
MjI7IFBBRERJTkctQk9UVE9NOiAyNHB4OyBQQURESU5HLVRPUDogMjRweCIgDQogICAgICAgICAg
ICAgICAgYWxpZ249Y2VudGVyPuODquODs+OCr+OBjOapn+iDveOBl+OBquOBhOWgtOWQiOOBr+OA
geS7peS4i+OBruODquODs+OCr+OCkuOCs+ODlOODvOOBl+OBpuODluODqeOCpuOCtuOBq+iyvOOC
iuS7mOOBkeOBpuOBj+OBoOOBleOBhOOAgiA8L1REPjwvVFI+DQogICAgICAgICAgICAgIDxUUj4N
CiAgICAgICAgICAgICAgICA8VEQgDQogICAgICAgICAgICAgICAgc3R5bGU9IkZPTlQtU0laRTog
MTNweDsgRk9OVC1GQU1JTFk6IG1vbm9zcGFjZTsgQ09MT1I6ICMyMjI7IFBBRERJTkctQk9UVE9N
OiAyNHB4OyBQQURESU5HLVRPUDogMjRweCIgDQogICAgICAgICAgICAgICAgYWxpZ249Y2VudGVy
PjxBIA0KICAgICAgICAgICAgICAgICAgaHJlZj0iaHR0cHM6Ly92aXNhLWhhYml0LnNjaGFuZ3Vh
bi5jbi9wYXktd2l0aC1mZWF0dXJlZCI+aHR0cHM6Ly93d3cub2ZmZXJzLWV4Y2hhbmdlLmNvbS52
aXNhLWphcGFuLnZlcmlmeUB2aXNhLWhhYml0LnNjaGFuZ3Vhbi5jbi9wYXktd2l0aC1mZWF0dXJl
ZDwvQT48L1REPjwvVFI+DQogICAgICAgICAgICAgIDxUUj4NCiAgICAgICAgICAgICAgICA8VEQg
DQogICAgICAgICAgICAgICAgc3R5bGU9IkZPTlQtRkFNSUxZOiBWZXJkYW5hLCBHZW5ldmEsIFRh
aG9tYSwgc2Fucy1zZXJpZjsgQ09MT1I6ICMyMjI7IFBBRERJTkctVE9QOiAyNHB4Ij7mnKzjg6Hj
g7zjg6vjgavlv4PlvZPjgZ/jgorjgYzjgarjgYTloLTlkIjjga/jgIHjgYrmiYvmlbDjgafjgZnj
gYzjg6Hjg7zjg6vjgpLnoLTmo4TjgZfjgabjgYTjgZ/jgaDjgY3jgb7jgZnjgojjgYbjgYrpoZjj
gYTjgYTjgZ/jgZfjgb7jgZnjgIIgDQogICAgICAgICAgICAgICAgPC9URD48L1RSPg0KICAgICAg
ICAgICAgICA8VFI+DQogICAgICAgICAgICAgICAgPFREIA0KICAgICAgICAgICAgICAgIHN0eWxl
PSJGT05ULUZBTUlMWTogVmVyZGFuYSwgR2VuZXZhLCBUYWhvbWEsIHNhbnMtc2VyaWY7IENPTE9S
OiAjMjIyOyBQQURESU5HLUJPVFRPTTogMjRweDsgUEFERElORy1UT1A6IDI0cHgiPjwvVEQ+PC9U
Uj48L1RCT0RZPjwvVEFCTEU+PC9URD4NCiAgICAgICAgPFRSPjwvVFI+PC9UQk9EWT4NCiAgICAg
IDxUQUJMRT48L1REPjwvVFI+DQogICAgICAgIDxUQk9EWT48L1RCT0RZPjwvVEFCTEU+PEJSPjxC
Uj48L1REPjwvVFI+PC9UQk9EWT48L1RBQkxFPjwvQk9EWT48L0hUTUw+DQo=

--=====003_Dragon703431888875_=====--
Path: home/smartonegroup/mail/.spam/new