Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-vs1-f70.google.com
- 🇺🇸 209.85.217.70 mail-vs1-f70.google.com→idefix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
- 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
From
=?UTF-8?Q?Harbor_Freight_=E2=80=93_Priority_Services_Team_=23=5BRPFF=2D89169=5D?= <noreply@legaloffers.onmicrosoft.com>
To
ruru@breitband.ch
Date
05.08.2025 17:45:29 CEST
Subject
One-minute confirmation secures your pending member benefit
SourceReport
Authentication
SPF–
DKIMpass
Spam score
0.0DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_MSPIKE_H2Average reputation (+2)
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
FROM_OFFERSFrom address is "at something-offers"
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
MPART_ALT_DIFFHTML and text parts are different
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <3GSeSaBAbAPopkeqnnggpingtA36ngicnqhhgtu.qpoketquqhv.eqo@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id eCJIMdknkmhHgQQAf9g64g:P1 (envelope-from <3GSeSaBAbAPopkeqnnggpingtA36ngicnqhhgtu.qpoketquqhv.eqo@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 17:48:41 +0200 |
| Received | from idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id eCJIMdknkmhHgQQAf9g64g (envelope-from <3GSeSaBAbAPopkeqnnggpingtA36ngicnqhhgtu.qpoketquqhv.eqo@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 17:48:41 +0200 |
| Received | from mail-vs1-f70.google.com (mail-vs1-f70.google.com [209.85.217.70]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 35FBBC02EB for <ruru@breitband.ch>; Tue, 5 Aug 2025 17:48:31 +0200 (CEST) |
| Authentication-Results | idefix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.i=@legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=k0OoEjY2; dkim-atps=neutral |
| Received | by mail-vs1-f70.google.com with SMTP id ada2fe7eead31-4fc05624269so968473137.2 for <ruru@breitband.ch>; Tue, 05 Aug 2025 08:48:30 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1754408730; x=1755013530; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=Pbf24lP/kSCiT+EBBAWm/3zNAnKLWaplPRpqSCa2i6w=; b=k0OoEjY2tszsXKIjuKGyFgW9+rn7JtxQwwY5U/iU1oHsheFRsUNGepNgYwmEjhzTiK awkRbkj0/6CkexixbFzDN+GePTZ8tMMPmd4kqmRtZENWMo9QzoMLKZuICkxS53+A9xdy 8254LjWXm/MA3fOlkBm6OLiJ1wt64Zltlk6mzHoXIKaX9QmrlcCw0CAeoNrT2ZVsQJSN iszVY+03tIPWdaMDuazuur1iI4puDBXS1q5Eq+yRTiXRdCjWKOXmgYsKSfbFV3w/aY4M SRLKwV2PwXGDQ6AwCTPmR2fG/u2P2l1UnFp0oq3pcgEm4FXM8TdJeqJgWdBVdCfl855x 0Otw== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754408730; x=1755013530; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=Pbf24lP/kSCiT+EBBAWm/3zNAnKLWaplPRpqSCa2i6w=; b=YEZO2yGQYgJk6vpbXXNkV6oue96kgaDEvsM77yZOauNW2wj8QGbxq36rQy6tmGrpr8 AHB1scVAz/j6SOzCW/HnoWVEJUtDcyX+SYLreTp4QfLK+sYDyDSqvOTOdujlGCRYFAMm 4nSQFIi+fhigolNV+KVia3who6VZRWAqcEwSoy3i5UyN0iZSSLDfCvsppYqIWWKTTYY+ r23SdMdYZofQN9tj2MGKslmYniXcDhb1/ZnlpL54SQQwtFj8sYOeXKkGFK2E5O3v8qXB InqQI4AMX82HUpkkTrp4btgU2v038CXyuj9787sbZhCz/YNDsiEekyTGGfp+npCXs6aO flEw== |
| X-Gm-Message-State | AOJu0YxCLyU1GRqY4iDtr6dpMr7a7SnOXh7Y/qz3EFT+SWHPQE3CouPu EMG+n8CqqbgBaZqaQdcvQ/IHSZzKPTHAo2eiGdun0+flPrYPZOhEFBv6Dx9H3R8+FwVrkGfeDdW qGgS3cqf7T5rfdrbFv0Yj+06IOzTLfhTTQCfS3GEXZgmjMXHomfFuc6aNC6PKk8KGXobAgCmgQi jP |
| X-Google-Smtp-Source | AGHT+IGC5Kaxcm2LzLNuY4LmZzz7c5Z1IBsXmrlL+AZFxgZ52JhEcluJynvLd1zSEqYAHWPESbL7yXvwcw== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a05:6102:a4b:b0:4e9:9659:3a5f with SMTP id ada2fe7eead31-4fdc1f3f47amr6118773137.10.1754408729909; Tue, 05 Aug 2025 08:45:29 -0700 (PDT) |
| Reply-To | noreply@legaloffers.onmicrosoft.com |
| Message-ID | <autogen-java-d405845d-aabd-4b36-b096-e081cb130d85@google.com> |
| Date | Tue, 05 Aug 2025 15:45:29 +0000 |
| Subject | =?UTF-8?B?T25lLW1pbnV0ZSBjb25maXJtYXRpb24gc2VjdXJlcyB5b3VyIHBlbmRpbmcgbWVtYmVyIGJlbmVmaXQ=?= |
| From | =?UTF-8?Q?Harbor_Freight_=E2=80=93_Priority_Services_Team_=23=5BRPFF=2D89169=5D?= <noreply@legaloffers.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="0000000000002330f8063ba01d20" |
| X-Greylist | Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Tue, 05 Aug 2025 17:48:31 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | -0.005 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FROM_OFFERS,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |