Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-qv1-f70.google.com
- 🇺🇸 209.85.219.70 mail-qv1-f70.google.com→idefix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
- 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
From
=?UTF-8?Q?Bass_Pro_Shops_=E2=80=93_Adventure_Services_Team_=23=5BDFER=2D21522?= =?UTF-8?Q?=5D?= <noreply@legaloffers.onmicrosoft.com>
To
ruru@breitband.ch
Date
04.08.2025 22:02:51 CEST
Subject
Quick confirmation activates your outdoor member benefit
SourceReport
Authentication
SPF–
DKIMpass
Spam score
0.1DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2Average reputation (+2)
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
FROM_OFFERSFrom address is "at something-offers"
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
MPART_ALT_DIFFHTML and text parts are different
URI_HEXURI hostname has long hexadecimal sequence
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <36xGRaBAbAJ4LGAMJJCCLEJCPgZcJCE8JMDDCPQ.MLKGAPMQMDR.AMK@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id SLFMN6sSkWiWTC4Af9g64g:P1 (envelope-from <36xGRaBAbAJ4LGAMJJCCLEJCPgZcJCE8JMDDCPQ.MLKGAPMQMDR.AMK@maestro.bounces.google.com>) for <ruru@breitband.ch>; Mon, 04 Aug 2025 22:06:03 +0200 |
| Received | from idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id SLFMN6sSkWiWTC4Af9g64g (envelope-from <36xGRaBAbAJ4LGAMJJCCLEJCPgZcJCE8JMDDCPQ.MLKGAPMQMDR.AMK@maestro.bounces.google.com>) for <ruru@breitband.ch>; Mon, 04 Aug 2025 22:06:03 +0200 |
| Received | from mail-qv1-f70.google.com (mail-qv1-f70.google.com [209.85.219.70]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 4CFBDC106E for <ruru@breitband.ch>; Mon, 4 Aug 2025 22:05:53 +0200 (CEST) |
| Authentication-Results | idefix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.i=@legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=w43XdD4R; dkim-atps=neutral |
| Received | by mail-qv1-f70.google.com with SMTP id 6a1803df08f44-7073cc86450so52919716d6.2 for <ruru@breitband.ch>; Mon, 04 Aug 2025 13:05:53 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1754337772; x=1754942572; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=sd+Fc+KP1e1S1D6Sw0kdJxXUHXhs33hO37iZek8Gd0c=; b=w43XdD4R76MnN+7Nq7DwI6NPosxya8K6ugZ6aUskoHz3FYEeDMIKo1vPxaZ+wJmHyD yAanaWmQU4dKjfRvE7ibtltc4j3pDk4UMB388ERvezK78pyRnKwrZ7oi9KLitwIZexq1 pKNf9a1L6zsHe3js7s1Tc607/lz5xnAktX8CZHqNF4sWOf4isJrSi1Hsuqae4+c9dYgS +t97mR/T5xIREhr9ZQ6gryy2iR7fzRwEPydWltuIQqqqEkavnoqM1uTE++uqp8486S++ Nizhpw4Wqk7QcW2efTlQ/q94cFfV708XKfV6jBUjSSOk519X+zL2hSpvTGVvNbI1oOIc Ny3w== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754337772; x=1754942572; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=sd+Fc+KP1e1S1D6Sw0kdJxXUHXhs33hO37iZek8Gd0c=; b=T5NmJ/I9gxUle8eNyt8jFrkh1JgdcTsuhabdlgROTlKubZ1s175cG1WorJxpCd+S6H tYkKE1F8nRefovLFgbUTt0QhvCV4Fg5b5/sPmf1KZOwco1tzQuxWDA63gsw6/oCoFeF3 y+MWuFYUvsw5lKRpuZc1/2cb34XLEGx4JF+wDclTvOdjp0sAfZLW0eDHtiS7flhx2zjO f6269+Q829u91925qeUsB6qfgGaGDsLQRfGbn7Ml4lLX8A8oGUs4q4v6QKGk9s3eIpQz VbxRWS98yDC5u8//3i/6rNjYFnUeNK0JVSmsBNgFT6zlUR+XHAHkOvCtlMCN6a77mjZ+ 8Rxw== |
| X-Gm-Message-State | AOJu0Yw43oep0CbVI8Eep8eGMXcc2Y9kCm50WptUmS/bnHgrmpqEwVFD zyd8ZeUBFTIa81Qhb/x2MP9PVS+z0pKopJfoUdhFnTrZHOem6dXR384J41k9GwGPnpbjLNZhaAh oMyE4qPITHZsP8AvuNHDWx09St686lCeDCuI0XPRQfMtEGi5WAKVDXkGnzvxe+1TS6jP+8kCQ0H 6M |
| X-Google-Smtp-Source | AGHT+IG8sB73nnzhoYj5gBJbytJsqN4VhAXlY8mjuJPhR7YGptg67OeVj7ciXtnQ0j0+39EUvCn8j/BbHQ== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a05:6214:c62:b0:707:4daf:637 with SMTP id 6a1803df08f44-709362875a3mr130956616d6.29.1754337771688; Mon, 04 Aug 2025 13:02:51 -0700 (PDT) |
| Reply-To | noreply@legaloffers.onmicrosoft.com |
| Message-ID | <autogen-java-e7d54875-e9a8-4a03-ab83-f4925c1a80ff@google.com> |
| Date | Mon, 04 Aug 2025 20:02:51 +0000 |
| Subject | =?UTF-8?B?UXVpY2sgY29uZmlybWF0aW9uIGFjdGl2YXRlcyB5b3VyIG91dGRvb3IgbWVtYmVyIGJlbmVmaXQ=?= |
| From | =?UTF-8?Q?Bass_Pro_Shops_=E2=80=93_Adventure_Services_Team_=23=5BDFER=2D21522?= =?UTF-8?Q?=5D?= <noreply@legaloffers.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="000000000000b2b135063b8f97fd" |
| X-Greylist | Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Mon, 04 Aug 2025 22:05:53 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 1 |
| X-Spam-Score | 0.095 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FROM_OFFERS,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,URI_HEX |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |