Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- o2755→srv219.spadit.com
- 🇮🇷 185.141.134.219 srv219.spadit.com→idefix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
- 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
From
Swica AG <support@badalijat-rozhano.ir>
To
fam.haeuptli@leunet.ch
Date
30.05.2025 15:26:39 CEST
Subject
Uw laatste poging tot terugbetaling is actief.
SourceReport
Authentication
SPFpass
DKIMpass
Spam score
4.5DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_IMAGE_ONLY_20HTML: images with 1600-2000 bytes of words
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_MSPIKE_BLMailspike blocklisted
RCVD_IN_MSPIKE_L4Bad reputation (-4)
Other
DATE_IN_PAST_06_12Date: is 6 to 12 hours before Received: date
T_REMOTE_IMAGEMessage contains an external image
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <support@badalijat-rozhano.ir> |
| Delivered-To | fam.haeuptli@leunet.ch |
| Received | from idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id 6AnmGFUbOmjo5DgAf9g64g:P1 (envelope-from <support@badalijat-rozhano.ir>) for <fam.haeuptli@leunet.ch>; Fri, 30 May 2025 22:55:49 +0200 |
| Received | from idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id 6AnmGFUbOmjo5DgAf9g64g (envelope-from <support@badalijat-rozhano.ir>) for <fam.haeuptli@leunet.ch>; Fri, 30 May 2025 22:55:49 +0200 |
| Received | from srv219.spadit.com (srv219.spadit.com [185.141.134.219]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id BB16BC041B for <fam.haeuptli@leunet.ch>; Fri, 30 May 2025 22:55:34 +0200 (CEST) |
| Authentication-Results | idefix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=badalijat-rozhano.ir header.i=@badalijat-rozhano.ir header.a=rsa-sha256 header.s=default header.b=bm3kXnZp; dkim-atps=neutral |
| DKIM-Signature | v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=badalijat-rozhano.ir; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=kX5n7U/RF6OkJZk3Bn4RCWM4JZlGGkVOjQGCtvbuFNQ=; b=bm3kXnZp5LBSQyGGgzgS+aNgFn uqKH/oWrqaN+RaF40rCYJ9wSWHL1ye22yAIk3BhcRzknXjp15Y1mxEYwVof3sx7+dmVYGDesQmnm7 c8QRvf03Qs0yYhTpdLFNA/YmVrlOM/sDfjWya4aYdSstO8oGT8c0AwdxLAT2ZnEREITN6vBryalf7 RaGBRzKfvvpYfXOpOHxCSm9W4VRfpbK+5cMryZFDidxJv40V87IY3YlWhjQ+0ezk3APS0m5EH/BBm WgmKH7nzmOabhVvP9Y/sx4sNjGe7zanl8TO6F1Ai+qbk431scR4y2OjxoZinD0gDAR1oy5F6pTohb /8A0Bytw==; |
| Received | from o2755 by srv219.spadit.com with local (Exim 4.98.1) (envelope-from <support@badalijat-rozhano.ir>) id 1uKzkt-0000000GKkw-2Cwi for fam.haeuptli@leunet.ch; Fri, 30 May 2025 16:56:39 +0330 |
| To | fam.haeuptli@leunet.ch |
| Subject | Uw laatste poging tot terugbetaling is actief. |
| X-PHP-Script | badalijat-rozhano.ir/classsmtps.php for 105.76.184.126 |
| X-PHP-Originating-Script | 1016:classsmtps.php |
| Date | Fri, 30 May 2025 13:26:39 +0000 |
| From | Swica AG <support@badalijat-rozhano.ir> |
| Message-ID | <cdea3156c455a226d1f8adaf8c809d4c@badalijat-rozhano.ir> |
| MIME-Version | 1.0 |
| Content-Type | multipart/alternative; boundary="b1_cdea3156c455a226d1f8adaf8c809d4c" |
| Content-Transfer-Encoding | 8bit |
| X-AntiAbuse | This header was added to track abuse, please include it with any abuse report |
| X-AntiAbuse | Primary Hostname - srv219.spadit.com |
| X-AntiAbuse | Original Domain - leunet.ch |
| X-AntiAbuse | Originator/Caller UID/GID - [1016 981] / [47 12] |
| X-AntiAbuse | Sender Address Domain - badalijat-rozhano.ir |
| X-Get-Message-Sender-Via | srv219.spadit.com: authenticated_id: o2755/from_h |
| X-Authenticated-Sender | srv219.spadit.com: support@badalijat-rozhano.ir |
| X-Source | |
| X-Source-Args | |
| X-Source-Dir | |
| X-Greylist | Sender passed SPF test, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Fri, 30 May 2025 22:55:39 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 4 |
| X-Spam-Score | 4.5 BAYES_00,DATE_IN_PAST_06_12,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HTML_IMAGE_ONLY_20,HTML_MESSAGE,RCVD_IN_MSPIKE_BL,RCVD_IN_MSPIKE_L4,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |