Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (5 hops)
- 192.168.1.73 mail.usadiino.com([192.168.1.73])→Postfix
- 23.228.75.194 mail.usadiino.com([23.228.75.194])→mail.dinointhebox.com(CC
- 23.228.75.212 mta6-212.mail.dinointhebox.com→idefix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
- 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
From
=?utf-8?B?RGlubyBEZWFscw==?= <server@email.usadiino.com>
To
"=?utf-8?B?Z2Nvc3RhYmlsZUBlYmxjb20uY2g=?=" <gcostabile@eblcom.ch>
Delivered-To
gcostabile@eblcom.ch
Date
22.10.2024 18:21:19 CEST
Subject
3 in 1 Professional Hairdresser Razor Hair Remover Only $29.99.140,000 RPM Mini Turbo Jet Fan Vacuum Cleaner For $43.99.
SourceReport
Authentication
SPFpass
DKIMsigned
Spam score
-0.6DKIM
DKIM_ADSP_NXDOMAINNo valid author signature and domain not in DNS
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_08HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
HTML_TAG_BALANCE_BODYHTML has unbalanced "body" tags
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
DNS lists
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
FROM_EXCESS_BASE64From: base64 encoded unnecessarily
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
LOTS_OF_MONEYHuge... sums of money
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <server@mail.dinointhebox.com> |
| Delivered-To | gcostabile@eblcom.ch |
| Received | from idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id MJTeKgHRF2fyEzYAf9g64g:P1 (envelope-from <server@mail.dinointhebox.com>) for <gcostabile@eblcom.ch>; Tue, 22 Oct 2024 18:21:21 +0200 |
| Received | from idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id MJTeKgHRF2fyEzYAf9g64g (envelope-from <server@mail.dinointhebox.com>) for <gcostabile@eblcom.ch>; Tue, 22 Oct 2024 18:21:21 +0200 |
| Received | from mail.dinointhebox.com (mta6-212.mail.dinointhebox.com [23.228.75.212]) by idefix.imp.ch (Postfix) with ESMTP id 99745C6238 for <gcostabile@eblcom.ch>; Tue, 22 Oct 2024 18:21:19 +0200 (CEST) |
| DMARC-Filter | OpenDMARC Filter v1.3.2 idefix.imp.ch 99745C6238 |
| Authentication-Results | idefix.imp.ch; dmarc=none (p=none dis=none) header.from=email.usadiino.com |
| Authentication-Results | idefix.imp.ch; spf=pass smtp.mailfrom=server@mail.dinointhebox.com |
| Received | from mail.usadiino.com([23.228.75.194]) by mail.dinointhebox.com(CC Gateway 3.0.13.p6,23.228.75.194) with ESMTP id mx5993.1729614072 for <gcostabile@eblcom.ch>; Wed, 23 Oct 2024 00:21:19 +0800 (CST) |
| X-Original-MailFrom | server@mail.dinointhebox.com |
| X-MAIL-SOURCE-IP | 23.228.75.194 |
| DKIM-Signature | v=1; a=rsa-sha256; q=dns/txt; c=simple/simple; d=mail.dinointhebox.com; s=default; h=Message-ID:Content-Transfer-Encoding:Content-Type:MIME-Version:Date:List-Unsubscribe:To:Subject:Reply-To:From; bh=BaxT+hQB+6WFfhP5nKLOz3YR+/IA8p5jdV02UrrlQk4=; b=FbuzVusw0eql+g+VjDlAL6XeR0R8B6843gvBCtMJ+9nFkqws9UsiWRyhakRQY+mxr8Dwd03hCVTGrLSZHR9msLdkYn7oOvUiTZ0iRE53u9cMNhUT+83nfheZfOxV1UYOt8Obr3MZ3qjgusdxzivN6fO6ixqvPC1mymlOs+kLZhY=; |
| Received | from mail.usadiino.com([192.168.1.73]) by Postfix with SMTPD id 6910 for <gcostabile@eblcom.ch>; Wed, 23 Oct 2024 00:21:19 +0800 |
| X-Ironport-Ids | 113931;32713 |
| From | =?utf-8?B?RGlubyBEZWFscw==?= <server@email.usadiino.com> |
| Reply-To | =?utf-8?B?RGlubyBEZWFscw==?= <server@email.usadiino.com> |
| Subject | =?utf-8?B?MyBpbiAxIFByb2Zlc3Npb25hbCBIYWlyZHJlc3NlciBSYXpvciBIYWlyIFJlbW92ZXIgT25seSAkMjkuOTkuMTQwLDAwMCBSUE0gTWluaSBUdXJibyBKZXQgRmFuIFZhY3V1bSBDbGVhbmVyIEZvciAkNDMuOTku?= |
| To | "=?utf-8?B?Z2Nvc3RhYmlsZUBlYmxjb20uY2g=?=" <gcostabile@eblcom.ch> |
| List-Unsubscribe | <mailto:server>, <http://mx01.email.dinointhebox.com/unsubscribe.html?gid=4&tlid=13730&email=gcostabile@eblcom.ch> |
| Date | Wed, 23 Oct 2024 00:21:19 +0800 |
| MIME-Version | 1.0 |
| Content-Type | text/html; charset="utf-8" |
| Content-Transfer-Encoding | base64 |
| Message-ID | <1729614072053115@13730> |
| X-Greylist | Sender passed SPF test, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Tue, 22 Oct 2024 18:21:20 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | -0.626 BAYES_00,DKIM_ADSP_NXDOMAIN,DKIM_SIGNED,DKIM_VALID,FROM_EXCESS_BASE64,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_08,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |