Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-qk1-x74d.google.com
- mail-qk1-x74d.google.com→asterix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
- 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
From
"United Healthcare Review Desk #zf9Hstp" <noreply@dailydials19.onmicrosoft.com>
To
ruru@breitband.ch
Date
17.07.2025 17:07:14 CEST
Subject
You’re approved everything looks good #BqV2CAv
SourceReport
Authentication
SPF–
DKIMpass
Spam score
-1.3DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
URI_NOVOWELURI hostname has long non-vowel sequence
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <3ohF5aA8cAPMZocZgfdggdji320YVdgtYdVgnw4.jihdXmjnjao.Xjh@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id kCOSKLQReWiJ0h8A0cKaAg:P1 (envelope-from <3ohF5aA8cAPMZocZgfdggdji320YVdgtYdVgnw4.jihdXmjnjao.Xjh@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 17 Jul 2025 17:07:32 +0200 |
| Received | from asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id kCOSKLQReWiJ0h8A0cKaAg (envelope-from <3ohF5aA8cAPMZocZgfdggdji320YVdgtYdVgnw4.jihdXmjnjao.Xjh@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 17 Jul 2025 17:07:32 +0200 |
| Received | from mail-qk1-x74d.google.com (mail-qk1-x74d.google.com [IPv6:2607:f8b0:4864:20::74d]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id DBB01C036E for <ruru@breitband.ch>; Thu, 17 Jul 2025 17:07:21 +0200 (CEST) |
| Authentication-Results | asterix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.i=@dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=3XPUIbRl; dkim-atps=neutral |
| Received | by mail-qk1-x74d.google.com with SMTP id af79cd13be357-7d413a10b4cso146272185a.1 for <ruru@breitband.ch>; Thu, 17 Jul 2025 08:07:21 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1752764835; x=1753369635; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=HT6dNAtHrWldT5EYNEu/kvZgDQWy1QAdUBmRxiljpXc=; b=3XPUIbRlmrV0kN/PmDJJjWASJOD3dG+228cuqLA/lr1lKEc2t6/S3AYNO2ATuGLHS+ EM84lHZFCAsrkGyEYgzeLxK6r3Z7QYEBA4XFRm2iZKtLsId12iEXe111FRPiG7wmxFyX weoDeL+Z+dN4+H5oU89P2dQ5CqpmCt2LdUHvb6GaqlHPkSyTaQNHhHo1oTdsipK/mGK2 YCbjJ+3HLmPLUb7yK2QhsuHnlHuexXLQs9TVTDKwTtaZpjlhe2DDJg0+zILQGF9ymSiP FHO978ZC3Tj9ujrONwufoix0JZF/SOBR1DqXyihDtG33N4EV1xkeg1Jr1nhGW4B8Rikk 5JCA== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1752764835; x=1753369635; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=HT6dNAtHrWldT5EYNEu/kvZgDQWy1QAdUBmRxiljpXc=; b=pbIfxmDZgoIm7InmV1llmpKZBdGmHAzH6+SbXb51u5cOE/weEaBB9n9tAtm2h9Xfqw rnh0K1U28zZuI5uC1Dkg0cfAWyUzfMWcMnNrPfXr6CmGpWroVElBD4kJ55b8n1Ji6PPT xCmgyQZTqMXJzvVYeD9CkG1PzlDch5SCk8NBmxS28mFZYsW7lBlHYI+MAx0dQKjhKtER x2H9814CAW0W8Kauwr1qUcqIQlTKPCK9YWrKfypQyZ9VLmBf7L3Iv09+L8qn3vzPmusz PvC6Cpn09RTfJUV2O5F976DnFxL9GTjZFEYBjRWAKbmuAy8vQaQTEb6nIelk7yHE9WG1 De3w== |
| X-Gm-Message-State | AOJu0Yxrbuw6QCZSYqVpGdB1CjpKVLRepRNv20Hp9mXh2YhYAbnAfuTL pC+CmiB3IaMWbfQStITGak0JldtxYm4ogTMGYL0jWx/1zEl/IDpPaRQ9dXc03m3woSwuwFpTV7/ VjC9oc8Q//m+PfHs4O3j7sSbKbD7uYsWcvAbmQeYG0HbvbrnqDy4SWhjQCB6RLfpJF6EdDUlWVP 4U334= |
| X-Google-Smtp-Source | AGHT+IFk3INvmf8o7eDj0PQSb7TT8EEjzWD0OqMQTri7B3aVB8OfcgbZ7ynJffn268ng62VcJ/JqZILXQg== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a05:620a:7014:b0:7db:1af7:d309 with SMTP id af79cd13be357-7e342b6bed7mr1014938085a.42.1752764834912; Thu, 17 Jul 2025 08:07:14 -0700 (PDT) |
| Reply-To | noreply@dailydials19.onmicrosoft.com |
| Message-ID | <autogen-java-c663a073-c4f1-4b97-ba4e-c2ea01b1d5da@google.com> |
| Date | Thu, 17 Jul 2025 15:07:14 +0000 |
| Subject | =?UTF-8?B?WW914oCZcmUgYXBwcm92ZWQgZXZlcnl0aGluZyBsb29rcyBnb29kICNCcVYyQ0F2?= |
| From | "United Healthcare Review Desk #zf9Hstp" <noreply@dailydials19.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="0000000000005c4aea063a215dbd" |
| X-Greylist | Sender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Thu, 17 Jul 2025 17:07:22 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | -1.295 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,MIME_HTML_MOSTLY,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,URI_NOVOWEL |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |