Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (3 hops)
  1. 🇮🇱 194.36.91.27 qhh3.nc1meser1.com→asterix.imp.ch
    ESMTPS · 2026-08-29 07:49:49
  2. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
      LMTP · 2026-08-29 07:50:00 · +11s
    • 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
      LMTP · 2026-08-29 07:50:00
From
"IndigoDeals" <updates@indigocentral.cc>
To
stathe@leunet.ch
Date
29.08.2026 07:49:41 CEST
Subject
Price Drops: 20$ OR Less / Health & Fitness / DIY & Tools : 40-60%OFF
SourceReport
Authentication
SPFpass
DKIM–
Spam score
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_02HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
HOSTED_IMG_DIRECT_MXImage hosted at large ecomm, CDN or hosting site, message direct-to-mx
3.8

Header

X-SPAM-SRCREPO
Return-Path<nb@nc1meser1.com>
Delivered-Tostathe@leunet.ch
Receivedfrom asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id IADiGwhzkmrvPisA0cKaAg:P1 (envelope-from <nb@nc1meser1.com>) for <stathe@leunet.ch>; Sat, 29 Aug 2026 07:50:00 +0200
Receivedfrom asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id IADiGwhzkmrvPisA0cKaAg (envelope-from <nb@nc1meser1.com>) for <stathe@leunet.ch>; Sat, 29 Aug 2026 07:50:00 +0200
Receivedfrom qhh3.nc1meser1.com (qhh3.nc1meser1.com [194.36.91.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id E13ECC0311 for <stathe@leunet.ch>; Sat, 29 Aug 2026 07:49:49 +0200 (CEST)
Precedencebulk
MIME-Version1.0
Sendernb@nc1meser1.com
From"IndigoDeals" <updates@indigocentral.cc>
Tostathe@leunet.ch
Reply-To"IndigoDeals" <updates@indigocentral.cc>
Date29 Aug 2026 08:49:41 +0300
SubjectPrice Drops: 20$ OR Less / Health & Fitness / DIY & Tools : 40-60%OFF
Content-Typemultipart/alternative; boundary=--boundary_7233593_59cce205-b333-4164-bc47-6960ffe32f7b
Message-Id<20260829053342.A57B63FAE4@nc1meser1.com>
X-GreylistSender passed SPF test, not delayed by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Sat, 29 Aug 2026 07:49:50 +0200 (CEST)
X-MS-Exchange-Organization-SCL3
X-Spam-Score3.752 HEADER_FROM_DIFFERENT_DOMAINS,HOSTED_IMG_DIRECT_MX,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_02,HTML_MESSAGE,SPF_HELO_NONE,SPF_PASS
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1