Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→e59e4b24e54deb0fd43d3ad49266c0a0c07d4979a5b583e6eb6d2d100b8bbec4
- 🇺🇸 159.135.226.30 m226-30.mailgun.net→idefix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
- 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
From
"service@berlincrown" <service@berlincrown.com>
To
fritz.hildebrand@teleport.ch
Date
08.11.2025 18:49:17 CET
Subject
Letzte Erinnerung: Ihr Store-Guthaben in Höhe von 4,00€ läuft bald ab
SourceReport
Authentication
SPF–
DKIMpass
Spam score
6.3DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_IMAGE_RATIO_06HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H4Very Good reputation (+4)
RCVD_IN_MSPIKE_WLMailspike good senders
Other
MPART_ALT_DIFFHTML and text parts are different
URIBL_SC_SWINOG
URIBL_SC_SWINOG_UR
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <bounce+d6ad54.d5a920-fritz.hildebrand=teleport.ch@berlincrown.com> |
| Delivered-To | fritz.hildebrand@teleport.ch |
| Received | from idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id oGg/NaqCD2kcLiQAf9g64g:P1 (envelope-from <bounce+d6ad54.d5a920-fritz.hildebrand=teleport.ch@berlincrown.com>) for <fritz.hildebrand@teleport.ch>; Sat, 08 Nov 2025 18:49:30 +0100 |
| Received | from idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id oGg/NaqCD2kcLiQAf9g64g (envelope-from <bounce+d6ad54.d5a920-fritz.hildebrand=teleport.ch@berlincrown.com>) for <fritz.hildebrand@teleport.ch>; Sat, 08 Nov 2025 18:49:30 +0100 |
| Received | from m226-30.mailgun.net (m226-30.mailgun.net [159.135.226.30]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 07966C14A2 for <fritz.hildebrand@teleport.ch>; Sat, 8 Nov 2025 18:49:19 +0100 (CET) |
| Authentication-Results | idefix.imp.ch; dkim=pass (1024-bit key; unprotected) header.d=berlincrown.com header.i=@berlincrown.com header.a=rsa-sha256 header.s=krs header.b=0v5bZqM9; dkim-atps=neutral |
| DKIM-Signature | a=rsa-sha256; v=1; c=relaxed/relaxed; d=berlincrown.com; q=dns/txt; s=krs; t=1762624158; x=1762631358; h=Message-Id: List-Unsubscribe-Post: List-Unsubscribe: To: To: From: From: Subject: Subject: Content-Type: Mime-Version: Date: Sender: Sender; bh=TVs19xhQddHCnUpc4mwSj+v5WaWOTU9646PXqphreLE=; b=0v5bZqM9H3E+6Yle38D1c/6CGrHpGKHeS1l5Vq47vGlhoRTh5E31i6juSCnDhktO/t4k4Yx+t2t+tpWvFPtAONuENzoX2gwox680F9wxXvtrPkjoCHPQN8f85FnRftYagnUoIDrnLFSBD6KtMXKIu43uqOxWvHvskRRNiBsr3iI= |
| X-Mailgun-Sid | WyJiNjVjNSIsImZyaXR6LmhpbGRlYnJhbmRAdGVsZXBvcnQuY2giLCJkNWE5MjAiXQ== |
| Received | by e59e4b24e54deb0fd43d3ad49266c0a0c07d4979a5b583e6eb6d2d100b8bbec4 with HTTP id 690f829dc637a056cf8ae5eb; Sat, 08 Nov 2025 17:49:17 GMT |
| X-Mailgun-Sending-Ip-Pool-Name | DPS |
| X-Mailgun-Sending-Ip-Pool | 685295183898dd39168ba084 |
| X-Mailgun-Sending-Ip | 159.135.226.30 |
| X-Mailgun-Batch-Id | 690f829d852eeeee8e69a246 |
| Sender | service@berlincrown.com |
| Date | Sat, 08 Nov 2025 17:49:17 +0000 |
| Mime-Version | 1.0 |
| Content-Type | multipart/alternative; boundary="d5034992de3b33a52a85de5e040467410909ca9098e27123cb30fc85f899" |
| Subject | =?UTF-8?q?Letzte_Erinnerung:_Ihr_Store-Guthaben_in_H=C3=B6he_von_4,00?= =?UTF-8?q?=E2=82=AC_l=C3=A4uft_bald_ab?= |
| From | "service@berlincrown" <service@berlincrown.com> |
| To | fritz.hildebrand@teleport.ch |
| X-Mailgun-Tag | 690da421bd6eb8033d43772c_690f824951cffde5e9519cda_base-0-1 |
| X-Mailgun-Track | false |
| List-Unsubscribe | <https://rfh.soundestlink.com/contactsPreferences/v2/unsubscribe/?b=65b49dfd26ced2965e08489f&c=688a468705e51bffe616d649&payload=e0d5XKqZfMMMCN_voUkW1NoVAcPeY2z6j8DaxNxX1vB830_cDRy-_oAxOkj_t9V6iZoQ0wZ5llin_0bzYk1Odfeox5v4KzLfpIAURxFup3pk6TvRrTw9jbeJ2l6opQPxCYO7&headerUnsub=true> |
| List-Unsubscribe-Post | List-Unsubscribe=One-Click |
| Feedback-Id | 690da38a4cb61d4f14f5dc69:65b49dfd26ced2965e08489f:campaign:omnisend |
| X-Mailgun-Variables | {"brandID": "65b49dfd26ced2965e08489f", "contactID": "688a468705e51bffe616d649", "progressID": "690da421bd6eb8033d43772c"} |
| Message-Id | <20251108174917.1dcf36a1db405a20@berlincrown.com> |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | 6.294 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_IMAGE_RATIO_06,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS,URIBL_SC_SWINOG,URIBL_SC_SWINOG_UR |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |