Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-yw1-f200.google.com
- 🇺🇸 209.85.128.200 mail-yw1-f200.google.com→asterix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
- 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
From
=?UTF-8?Q?Harbor_Freight_=E2=80=93_Member_Advantage_Center_=23=5BSSUX=2D99078?= =?UTF-8?Q?=5D?= <noreply@legaloffers.onmicrosoft.com>
To
ruru@breitband.ch
Date
04.08.2025 19:02:07 CEST
Subject
A quick confirmation activates your member benefit
SourceReport
Authentication
SPF–
DKIMpass
Spam score
-0.4DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2Average reputation (+2)
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
FROM_OFFERSFrom address is "at something-offers"
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
MPART_ALT_DIFFHTML and text parts are different
URI_HEXURI hostname has long hexadecimal sequence
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <3j-eQaBAbAOwbWQcZZSSbUZSfwpsZSUOZcTTSfg.cbaWQfcgcTh.Qca@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id GCezHFLokGi3swAA0cKaAg:P1 (envelope-from <3j-eQaBAbAOwbWQcZZSSbUZSfwpsZSUOZcTTSfg.cbaWQfcgcTh.Qca@maestro.bounces.google.com>) for <ruru@breitband.ch>; Mon, 04 Aug 2025 19:05:22 +0200 |
| Received | from asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id GCezHFLokGi3swAA0cKaAg (envelope-from <3j-eQaBAbAOwbWQcZZSSbUZSfwpsZSUOZcTTSfg.cbaWQfcgcTh.Qca@maestro.bounces.google.com>) for <ruru@breitband.ch>; Mon, 04 Aug 2025 19:05:22 +0200 |
| Received | from mail-yw1-f200.google.com (mail-yw1-f200.google.com [209.85.128.200]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id CCCEDC032F for <ruru@breitband.ch>; Mon, 4 Aug 2025 19:05:08 +0200 (CEST) |
| Authentication-Results | asterix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.i=@legaloffers-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=ssXQYvZH; dkim-atps=neutral |
| Received | by mail-yw1-f200.google.com with SMTP id 00721157ae682-71a38e3561fso47748687b3.3 for <ruru@breitband.ch>; Mon, 04 Aug 2025 10:05:08 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=legaloffers-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1754326927; x=1754931727; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=J/6O6YSkONeIXkOk8yLBC7qk7rJWHMBJZb2yhRWO2pE=; b=ssXQYvZHARpNSh1jzOc/BKzTWBiOSFtuUkqbl2o6EusvCc8EexfSCoeBNAciub7lG4 CQ8AzXPmRTaGu8+LEnI4bMSesF6L+ULl03oEUKw7QPfNON5sETWj4fRV/g2L8U9OiOJy hPAd5al/p3tSjyTMEJt8ZrpFGrZYHxFRIPCu21/9X/3HKey7yhktyMvK3UflrcEAZ88l RB+KVOG3FrzV4NsE4PMt4HZ81bYOysitG9Vok/S7QC5eGmLloZZEHzPNLBxNsyFvtJMy afSu/lZHzqU5NmAo89q0AXOjCPnMEAUzwqFm9nICt/wTwsAVtXXbYcEJWe0C4LoYiB6/ 4Ogg== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754326927; x=1754931727; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=J/6O6YSkONeIXkOk8yLBC7qk7rJWHMBJZb2yhRWO2pE=; b=CW62g1xFDA9UOoR3wbVhdMHHboh70o4+tafsW7oDWOImpde3vSaLa6SJLZOklIaMWo cNe8wAW17i+4rq+SqwRbM6ba9Wzzn/iOixZowVgPnnn85MVmQgRcuE8SN1xKnGTvuH8M pvFvYkdRkupGvfxAmX9ApGQERlo3xlSidG3IPKCV+XmLnB/F1/F+ETY6C60SzW7v7cTn Iuag/h0Owmpp48g5URZjAnKNNGoVij1vv/asDfRNsbZ5Y57JdP9SFOpjHcYBBCz8k20T 7kdSbzm8cIhTKUsguaHaFKm0ufwEn0b0JQCzKI226jB/1jQDF4cNDpI+tzYc5EGd/wVD YNkQ== |
| X-Gm-Message-State | AOJu0Yxu2/ivaFIBnSFEj3yp0nxmWP+U+Qftn17bYZtlrK5zWtSPHcyD eHogo3fVPDNAZuM6s+hj4WkitgqNT2eHfpSNjlw66W7gIJQNdzxj5HXmjbu+hVIAeoI8zF2lnj8 QvPQ1UZdFUII74OH6kd9FGYivKqJD8Tj7sTexIclF0dcqcNxoxBd1LEvELJAUoZ8nygHzEkMeEs DJ |
| X-Google-Smtp-Source | AGHT+IGXHXpQKy39ngkNDo1IbSu3PnNWMfeKUNDFsjjBwbtX2ZSu0TYebQejPjwaytd1hPzOhMoTk+5zLQ== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a05:690c:ecf:b0:71a:e2b:d927 with SMTP id 00721157ae682-71b7ef23fd4mr131112157b3.3.1754326927139; Mon, 04 Aug 2025 10:02:07 -0700 (PDT) |
| Reply-To | noreply@legaloffers.onmicrosoft.com |
| Message-ID | <autogen-java-0ea9dc1f-166a-4efe-aa64-7a5921426a07@google.com> |
| Date | Mon, 04 Aug 2025 17:02:07 +0000 |
| Subject | =?UTF-8?B?QSBxdWljayBjb25maXJtYXRpb24gYWN0aXZhdGVzIHlvdXIgbWVtYmVyIGJlbmVmaXQ=?= |
| From | =?UTF-8?Q?Harbor_Freight_=E2=80=93_Member_Advantage_Center_=23=5BSSUX=2D99078?= =?UTF-8?Q?=5D?= <noreply@legaloffers.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="0000000000004ff994063b8d1133" |
| X-Greylist | Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Mon, 04 Aug 2025 19:05:12 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 0 |
| X-Spam-Score | -0.405 BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FROM_OFFERS,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_SWINOG_WHITE,SPF_HELO_NONE,SPF_PASS,URI_HEX |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |