Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→mail-vk1-f208.google.com
- 🇺🇸 209.85.221.208 mail-vk1-f208.google.com→asterix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
- 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
From
=?UTF-8?B?Q1ZTIOKAkyBIZWFsdGggU3VwcG9ydCBDZW50ZXIjW1VDV1AtNzI1NDdd?= <noreply@isyourtime.onmicrosoft.com>
To
ruru@breitband.ch
Date
05.08.2025 23:44:49 CEST
Subject
Immediate action ensures your Medicare coverage kit
SourceReport
Authentication
SPF–
DKIMpass
Spam score
1.4DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
HTML
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_MOSTLYMessage multipart principalement en MIME text/html
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
MPART_ALT_DIFFHTML and text parts are different
URI_NOVOWELURI hostname has long non-vowel sequence
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <3UXuSaBAaANwJ8PWQQ89SQFCWZdbGQWMSPRGKC.MLKGAPMQMDR.AMK@maestro.bounces.google.com> |
| Delivered-To | ruru@breitband.ch |
| Received | from asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id wIfbBBJ8kmgHXiYA0cKaAg:P1 (envelope-from <3UXuSaBAaANwJ8PWQQ89SQFCWZdbGQWMSPRGKC.MLKGAPMQMDR.AMK@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 23:48:02 +0200 |
| Received | from asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id wIfbBBJ8kmgHXiYA0cKaAg (envelope-from <3UXuSaBAaANwJ8PWQQ89SQFCWZdbGQWMSPRGKC.MLKGAPMQMDR.AMK@maestro.bounces.google.com>) for <ruru@breitband.ch>; Tue, 05 Aug 2025 23:48:02 +0200 |
| Received | from mail-vk1-f208.google.com (mail-vk1-f208.google.com [209.85.221.208]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id B14A5C0028 for <ruru@breitband.ch>; Tue, 5 Aug 2025 23:47:50 +0200 (CEST) |
| Authentication-Results | asterix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=isyourtime-onmicrosoft-com.20230601.gappssmtp.com header.i=@isyourtime-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=RGI7tZFa; dkim-atps=neutral |
| Received | by mail-vk1-f208.google.com with SMTP id 71dfb90a1353d-53969861722so1412282e0c.3 for <ruru@breitband.ch>; Tue, 05 Aug 2025 14:47:50 -0700 (PDT) |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=isyourtime-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1754430289; x=1755035089; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=jurrNPOGaIVJkEznv6dkuCAngO+LWavfSJcCn37lBQY=; b=RGI7tZFaE72JF6gUpE8hDRvONKwCTM6lTed7ItJwmJdQxQVOo/auy/Zwg2VkkcgI6w PBE2ORoKZXOyQ5OwCuRJFfPtGG1e7NTZBxHI1kdRmOZH8uN9JRt0nmbwBrQvOq3W00Xi HJDJVoPAnsQT2QLVDQmFYZJV7xahC+3funODH1g8L8N3QViHmxrN2zYu83DFrprcjU0E cU1WH6Uyvl2+0t/2EzcMiNdrZZkr1uC5gr1idgH+uw25u5SEsF5RKcts0V4pUI8hSWZC rxF3/4F6DGK9ESBYntvl24epdc013TLd3K/Ve0pf5PVokmmmGrRVP/p6cR5yVsY1jNDN /wag== |
| X-Google-DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1754430289; x=1755035089; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=jurrNPOGaIVJkEznv6dkuCAngO+LWavfSJcCn37lBQY=; b=pKO/ZO0Ocx9uByj7OkLQwlVI1CW7z7NNo9IqXL+mBh8Bi9mUVb9Q5puK5vhs6MJnsl 6ZE38LpX30tHn05c0vQroJmtzjuyA/YNyx5TchNAxP504fqXUuuP++4s1hftQ+HH9o/I hu3joWdDH0QkF2itxPwCZvQ8BrgJCICywnQQdZ2lctzHxIUxcaCMvU38YlIWuiAux3rt v+x/k7j/lkMHwcRGZAFVZv6kZHWaPXG5w0viWFNAZDWComC6PkJdUCa4g3fkJRlaOWoo KhUt176BCqDoCr4BwmD4XBsPGmJvWcZ8mOq0c8daVEUCkJ5ED/nU064KJ13ZsB/cIJii A7kg== |
| X-Gm-Message-State | AOJu0Ywv9Rw+osMhl8wTp43NF5ypzfudttbPhzggIznLQZK8JmyVmoU+ EW0IwtqgrUMJkAJi2sQA2BDjwBwod0AnFlAvn11c7vhpA0tOBs7mLAcDDGf6h+KIbX4GkjDtlL6 qgCujIyZd2P9/tGkzqpRho/3eEYlv00FkcubQ+ry5xJ2lM317cT5MtAcVBqwpyrAlckrNunDeOa T1P8o= |
| X-Google-Smtp-Source | AGHT+IE/lAo5zjih3DOV5I4IdKTtFyAn3+w8KPvCxBmIhE/nEh8dDsDe2mu0D0JvB6EGuJxvQ0FAmu4JrQ== |
| MIME-Version | 1.0 |
| X-Received | by 2002:a05:6122:1e14:b0:539:3548:389f with SMTP id 71dfb90a1353d-539a1534765mr88667e0c.11.1754430289379; Tue, 05 Aug 2025 14:44:49 -0700 (PDT) |
| Reply-To | noreply@isyourtime.onmicrosoft.com |
| Message-ID | <autogen-java-94c0053f-f82f-458d-afa0-a2bc873fd765@google.com> |
| Date | Tue, 05 Aug 2025 21:44:49 +0000 |
| Subject | =?UTF-8?B?SW1tZWRpYXRlIGFjdGlvbiBlbnN1cmVzIHlvdXIgTWVkaWNhcmUgY292ZXJhZ2Uga2l0?= |
| From | =?UTF-8?B?Q1ZTIOKAkyBIZWFsdGggU3VwcG9ydCBDZW50ZXIjW1VDV1AtNzI1NDdd?= <noreply@isyourtime.onmicrosoft.com> |
| To | ruru@breitband.ch |
| Content-Type | multipart/alternative; boundary="0000000000002e9683063ba5223e" |
| X-Greylist | Sender IP whitelisted, not delayed by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Tue, 05 Aug 2025 23:47:51 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 2 |
| X-Spam-Score | 1.394 DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,MIME_HTML_MOSTLY,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,URI_NOVOWEL |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |