Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (4 hops)
- unknown source→uid
- 🇺🇸 192.190.220.238 cloudhost-7138212.us-midwest-2.nxcli.net→asterix.imp.ch
→IMP ImproWare AG mail infrastructure (2 hops)
- 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
- 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
From
"Service@paypal.de" <postmaster@3d5f58c41f.nxcli.io>
To
tmbieri@zapp.ch
Date
26.04.2025 09:26:23 CEST
Subject
Achtung: Bestätigung Ihrer Identität erforderlich für Ihr PayPal-Konto
SourceReport
Authentication
SPFnone
DKIM–
Spam score
5.1SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_NONESPF: sender does not publish an SPF Record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
Other
PDS_FROM_2_EMAILSFrom header has multiple different addresses
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
Header
| X-SPAM-SRC | REPO |
|---|---|
| Return-Path | <postmaster@dee659bc98.nxcli.io> |
| Delivered-To | tmbieri@zapp.ch |
| Received | from asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id IHdsGsyUDGhZEyIA0cKaAg:P1 (envelope-from <postmaster@dee659bc98.nxcli.io>) for <tmbieri@zapp.ch>; Sat, 26 Apr 2025 10:09:48 +0200 |
| Received | from asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id IHdsGsyUDGhZEyIA0cKaAg (envelope-from <postmaster@dee659bc98.nxcli.io>) for <tmbieri@zapp.ch>; Sat, 26 Apr 2025 10:09:48 +0200 |
| Received | from cloudhost-7138212.us-midwest-2.nxcli.net (cloudhost-7138212.us-midwest-2.nxcli.net [192.190.220.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id F1BE8C036D for <tmbieri@zapp.ch>; Sat, 26 Apr 2025 10:09:37 +0200 (CEST) |
| DMARC-Filter | OpenDMARC Filter v1.3.2 asterix.imp.ch F1BE8C036D |
| Authentication-Results | asterix.imp.ch; dmarc=none (p=none dis=none) header.from=3d5f58c41f.nxcli.io |
| Authentication-Results | asterix.imp.ch; spf=none smtp.mailfrom=postmaster@dee659bc98.nxcli.io |
| Received | (qmail 8303 invoked by uid 10074); 26 Apr 2025 07:27:56 +0000 |
| To | tmbieri@zapp.ch |
| Subject | =?UTF-8?Q?Achtung:_Best=C3=A4tigung_Ihrer_Identit=C3=A4t_erforderlich_f?= =?UTF-8?Q?=C3=BCr_Ihr_PayPal-Konto?= |
| X-PHP-Originating-Script | 10074:2.php |
| Date | Sat, 26 Apr 2025 07:26:23 +0000 |
| From | "Service@paypal.de" <postmaster@3d5f58c41f.nxcli.io> |
| Message-ID | <eaab8bc0564bd572cdf94ac949254af4@3d5f58c41f.nxcli.io> |
| List-Unsubscribe | mailto:bounce185-lNJrkBm7vPakhvY@3d5f58c41f.nxcli.io?subject=list-unsubscribe |
| MIME-Version | 1.0 |
| Content-Type | multipart/alternative; boundary="103b6807b4703ad64b79a049e5e614c8e" |
| Content-Transfer-Encoding | 8bit |
| X-Greylist | Delayed for 00:26:34 by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Sat, 26 Apr 2025 10:09:38 +0200 (CEST) |
| X-MS-Exchange-Organization-SCL | 4 |
| X-Spam-Score | 5.102 BAYES_00,HTML_MESSAGE,PDS_FROM_2_EMAILS,SPF_HELO_NONE,SPF_NONE,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR |
| X-Scanned-By | MIMEDefang 2.84 on 127.0.1.1 |