Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-io1-f69.google.com
- 🇺🇸 209.85.166.69 mail-io1-f69.google.com→obelix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
- 🇨🇭 157.161.12.5 obelix.imp.ch→tragicomix.imp.ch
From
"Gear Program Services #biLB92" <noreply@dailydials19.onmicrosoft.com>
To
ruru@breitband.ch
Date
31.07.2025 15:25:42 CEST
Subject
Final check complete you’re in #QbSEhW
SourceReport
Authentication
SPF–
DKIMpass
Spam score
-1.8DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2Average reputation (+2)
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
URI_HEXURI hostname has long hexadecimal sequence
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <31m6LaBAcAC0eRTTRJYYUNcXWnnoMJRUhMRJUbks.XWVRLaXbXOc.LXV@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from obelix.imp.ch ([157.161.12.5]) by tragicomix.imp.ch with LMTP id KBBNDJlvi2hzHxYAGLljUw:P1 (envelope-from <31m6LaBAcAC0eRTTRJYYUNcXWnnoMJRUhMRJUbks.XWVRLaXbXOc.LXV@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 31 Jul 2025 15:28:57 +0200 |
| Received | from obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id KBBNDJlvi2hzHxYAGLljUw (envelope-from <31m6LaBAcAC0eRTTRJYYUNcXWnnoMJRUhMRJUbks.XWVRLaXbXOc.LXV@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 31 Jul 2025 15:28:57 +0200 |
| Received | from mail-io1-f69.google.com (mail-io1-f69.google.com [209.85.166.69]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id E767EE0561 for <ruru@breitband.ch>; Thu, 31 Jul 2025 15:28:44 +0200 (CEST) |
| Authentication-Results | obelix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.i=@dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=D5qdKr4t; dkim-atps=neutral |
| Received | by mail-io1-f69.google.com with SMTP id ca18e2360f4ac-8814b2524c6so75890939f.1 for <ruru@breitband.ch>; Thu, 31 Jul 2025 06:28:44 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1753968343; x=1754573143; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=eWE0OUJ6Tu6euTkEmL/GDJAZAZwFyfYfeqvsbPek5Tw=; b=D5qdKr4txfv7bCve7dRZqHW5f3kwUoz6B3tAw7PXWvZyEFcnhlkWRA/kaM3E2HlgJF I67OvH1AijdP204H1wB4ghpPxZzWGDIgt1BqIIxndsu4i29aLiZWQgkvH54G5R+bEp6P Z2Wu5FlQ/ro8f5jnoyXm1v34rJhpm7o0Eyf7xVUSRJ5kYVYAXagYtRKwevn8L/hd1W3h AbLBy1DuBDZJNA3GIoTdBnEoShl27GStH6VaUAZ6BtxWaDUhAaPEyQjhGuEgxi/t8pN4 5qczpJxESXgiRbI42Hy18LKpA226tDyGJ0KQq0zmYpvbC1M8V0hgc35NuvkTJZcAA1aQ wqNw== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1753968343; x=1754573143; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=eWE0OUJ6Tu6euTkEmL/GDJAZAZwFyfYfeqvsbPek5Tw=; b=M64O8RUFqBq8krxoX7pVYlPqxuURpOtyYlApFz9Wt5shNkXiYcXbeQ8CYlDIo0A4w7 UDqmh9kdrQWyylek0NBm4icguPIxEs6b4xuBUnoZZ0bnfFv9iR5pfJxzgDVcQ+vo6ZQl YcGjsiRD1v0nPGD0xNK0MF2DLY0i6sfWTvGAblnH+4hxam4iCONAoBPEVFM/paRi3f52 XZnhEPWMFzw5jXKW+CZMI+sSkTbPXK1abw7aXDGp1vJyVIb34EN335FASBrYF+hYGoE7 PVfkhyBAgNTL8EsgBY9t7xPOjt0ALBD8LFUzhL6RwzD1ERhuJQt/jB2qB8N33DZnEcwF rEEg== |
| X-Gm-Message-State | AOJu0YwdJGUx4lzCFCNrEPzoGWuOicHq9B2DgVEgkASe2oR2KhT40J4u Va/+6xQwsxZdCoSc0ozFiqGaRiIiiNp3WroX/iqbj5jdFNnUbpKLhqGQ67ThWdG2Y8AjnYR2L6Q 2j6dVJQDOYMRXXgAa/25MQIc4WjT7SpIaY3dkOJjR9nqnfRzhUmZuW/fMIh/C7NJrn+l2oo0GVN Ju |
| X-Google-Smtp-Source | AGHT+IErEHsH8n3WKyDtQ+Pne1/gl6cw/aThCOImDp8dIu/HOjgqtAmcY5/JlNQXD0+XuFg8SNavghHC0A== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a92:cec3:0:b0:3e2:9715:df3e with SMTP id e9e14a558f8ab-3e3f62aee5cmr120296995ab.18.1753968342949; Thu, 31 Jul 2025 06:25:42 -0700 (PDT) |
| Reply-To | noreply@dailydials19.onmicrosoft.com |
| Message-ID | <autogen-java-e97c06e3-827f-4ec2-8169-f482fe389345@google.com> |
| Date | Thu, 31 Jul 2025 13:25:42 +0000 |
| Subject | =?UTF-8?B?RmluYWwgY2hlY2sgY29tcGxldGUgeW914oCZcmUgaW4gI1FiU0VoVw==?= |
| From | "Gear Program Services #biLB92" <noreply@dailydials19.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="0000000000000772e5063b399430" |
| X-Greylist | Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (obelix.imp.ch [0.0.0.0]); Thu, 31 Jul 2025 15:28:47 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | -1.795 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,URI_HEX |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |