Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (4 hops)
  1. unknown source→mail-yw1-f208.google.com
    SMTP · 2025-08-05 20:16:13
  2. 🇺🇸 209.85.128.208 mail-yw1-f208.google.com→obelix.imp.ch
    ESMTPS · 2025-08-05 20:16:13
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
      LMTP · 2025-08-05 20:16:24 · +11s
    • 🇨🇭 157.161.12.5 obelix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-08-05 20:16:24
From
=?UTF-8?B?TG93ZeKAmXMg4oCTIFByaW9yaXR5IE1lbWJlciBVbml0ICNbUVlMWC02NDg0Nl0=?= <noreply@isyourtime.onmicrosoft.com>
To
ruru@breitband.ch
Date
05.08.2025 20:13:07 CEST
Subject
Respond today to secure your complimentary access
SourceReport
Authentication
SPF–
DKIMpass
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2Average reputation (+2)
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
MPART_ALT_DIFFHTML and text parts are different
-1.5

Header

X-SPAM-SRCREPO
Return-Path<3s0mSaBAaANoH6NUOO67QODAUXbZEOUKQNPEIA.KJIE8NKOKBP.8KI@maestro.bounces.google.com>
Delivered-Toruru@breitband.ch
Receivedfrom obelix.imp.ch ([157.161.12.5]) by tragicomix.imp.ch with LMTP id sLLkHHhKkmiuTyEAGLljUw:P1 (envelope-from <3s0mSaBAaANoH6NUOO67QODAUXbZEOUKQNPEIA.KJIE8NKOKBP.8KI@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 20:16:24 +0200
Receivedfrom obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id sLLkHHhKkmiuTyEAGLljUw (envelope-from <3s0mSaBAaANoH6NUOO67QODAUXbZEOUKQNPEIA.KJIE8NKOKBP.8KI@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 20:16:24 +0200
Receivedfrom mail-yw1-f208.google.com (mail-yw1-f208.google.com [209.85.128.208]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id D6302E3905 for <ruru@breitband.ch>; Tue, 5 Aug 2025 20:16:13 +0200 (CEST)
Authentication-Resultsobelix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=isyourtime-onmicrosoft-com.20230601.gappssmtp.com header.i=@isyourtime-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=caukJPpC; dkim-atps=neutral
Receivedby mail-yw1-f208.google.com with SMTP id 00721157ae682-71b70ee9d3cso70669007b3.1 for <ruru@breitband.ch>; Tue, 05 Aug 2025 11:16:13 -0700 (PDT)
DKIM-Signaturev=1; a=rsa-sha256; c=relaxed/relaxed; d=isyourtime-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1754417587; x=1755022387; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=tkVzGbgz6jMuOj9K2QEx6Z/fFggvwkqXsCwdj3L06+E=; b=caukJPpCA5sXmbh7D+jLDfXeNuUx4v8WwLmMxXzvEDIZqLmc6iy7kIyK5TisQaKGsm WHYXjtMycuj3q/V55zKUFEwCDIZwqjj7eadYDwLugA0udYWH0bmWy7McEubXRyU0MKc9 JMda+e9fpVr5nD2RwuKznrdHgutHkj6sP6lckk8yejbud4vI0+aQhUna36rQrChzcrtt qMAVpNEw/k3z66+MOauoFesByleXyGU7AwUgGl1XVmIpt+v5GdmulsU/3Nf6sdc0jDmS P8eqAHAW7qfu8qu0cgqDX0YHK1CRSOYW7nSRmm4+zj3/8IsbqY4DUfWnWDtiywcsAw35 OzLA==
X-Google-DKIM-Signaturev=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754417587; x=1755022387; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=tkVzGbgz6jMuOj9K2QEx6Z/fFggvwkqXsCwdj3L06+E=; b=MQJLP2mIv9K4JPZzF+YydkePGv2u8BNXZHEJQvNgvKAD8Vq3ZTIz3AeWVl8+fep9uO CVymRghMMMGrcnSdHhkfeBaPXg80qnkxpLokaAE2/jwmscdv1sUiGrDVnVFdK/Fl++L1 I1/5v5I7DtuKoJkq1S8Exs9LR05DdIrgvu5Q0Hl09T7X82ZuqSIONII3HsT7XyIPGgsw LDZHcudAlHS/u5eaG6rHPlFSD219sIn/SazVTc+31GiD7Mbc3k+TV16u4ISOr2hBvGA7 E9PSap7Yk3x+DvTP8iCHLvZm5gKuxgACYlGbO5IAArl1eb+cSqiyNI5bKRaABMrHz2pc 9bnA==
X-Gm-Message-StateAOJu0YzkejstIeefpjI+Gla1BopMis5JrnXjbAVccBwd5cedD8qZovWc T+syN3jAWFELW0p/2NQyv2hTxlKV1pcLOHsG6r/dNFYsuPYTIiSjt/L6p3zDpAjxQIm1wOPjYej bHkqx0VX/wl3gcGyExN+yT8VEZINwdz+wGsisne9TEB0fYZWixadmIvi2GF3lNnH/dq+voFdd1Q t7zo8=
X-Google-Smtp-SourceAGHT+IHAY1OLAwucU7JJfFKo3spauDktiqQKWZxDWeBwfVlQ9l/sPxi9zolTIZwJ5c5HdkYmUIMsf56yvA==
MIME-Version1.0
X-Receivedby 2002:a05:690c:6811:b0:71b:9c07:cfa7 with SMTP id 00721157ae682-71bc991ceadmr2457257b3.40.1754417587291; Tue, 05 Aug 2025 11:13:07 -0700 (PDT)
Reply-Tonoreply@isyourtime.onmicrosoft.com
Message-ID<autogen-java-80f3a67a-c196-47d0-aea4-65c228554183@google.com>
DateTue, 05 Aug 2025 18:13:07 +0000
Subject=?UTF-8?B?UmVzcG9uZCB0b2RheSB0byBzZWN1cmUgeW91ciBjb21wbGltZW50YXJ5IGFjY2Vzcw==?=
From=?UTF-8?B?TG93ZeKAmXMg4oCTIFByaW9yaXR5IE1lbWJlciBVbml0ICNbUVlMWC02NDg0Nl0=?= <noreply@isyourtime.onmicrosoft.com>
Toruru@breitband.ch
Content-Typemultipart/alternative; boundary="00000000000014226e063ba22df0"
X-GreylistSender IP whitelisted, not delayed by milter-greylist-4.6.2 (obelix.imp.ch [0.0.0.0]); Tue, 05 Aug 2025 20:16:14 +0200 (CEST)
X-MS-Exchange-Organization-SCL0
X-Spam-Score-1.505 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SWINOG_WHITE,SPF_HELO_NONE,SPF_PASS
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1