Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (4 hops)
  1. unknown source→uid
    2025-05-26 13:42:33
  2. 🇺🇸 8.29.155.178 cloudhost-1920808.us-midwest-1.nxcli.net→obelix.imp.ch
    ESMTPS · 2025-05-26 13:50:04 · +7m 31s
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
      LMTP · 2025-05-26 13:50:15 · +11s
    • 🇨🇭 157.161.12.5 obelix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-05-26 13:50:15
From
mySWICA <postmaster@c6ae0df984.nxcli.io>
To
bones@eblcom.ch
Date
26.05.2025 13:40:02 CEST
Subject
Wichtig : Ihre Online-Rückerstattung ist jetzt verfügbar
SourceReport
Authentication
SPF–
DKIMfail
Spam score
DKIM
DKIM_INVALIDDKIM or DK signature exists, but is not valid
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_NONESPF: sender does not publish an SPF Record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_IMAGE_ONLY_20HTML: images with 1600-2000 bytes of words
HTML_MESSAGEHTML included in message
Other
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
3.3

Header

X-SPAM-SRCREPO
Return-Path<postmaster@1942902f27.nxcli.io>
Delivered-Tobones@eblcom.ch
Receivedfrom obelix.imp.ch ([157.161.12.5]) by tragicomix.imp.ch with LMTP id YJImCndVNGiNZBcAGLljUw:P1 (envelope-from <postmaster@1942902f27.nxcli.io>) for <bones@eblcom.ch>; Mon, 26 May 2025 13:50:15 +0200
Receivedfrom obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id YJImCndVNGiNZBcAGLljUw (envelope-from <postmaster@1942902f27.nxcli.io>) for <bones@eblcom.ch>; Mon, 26 May 2025 13:50:15 +0200
Receivedfrom cloudhost-1920808.us-midwest-1.nxcli.net (cloudhost-1920808.us-midwest-1.nxcli.net [8.29.155.178]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id B7EB7E16EB for <bones@eblcom.ch>; Mon, 26 May 2025 13:50:04 +0200 (CEST)
Authentication-Resultsobelix.imp.ch; dkim=fail reason="key not found in DNS" header.d=1942902f27.nxcli.io header.i=@1942902f27.nxcli.io header.a=rsa-sha1 header.s=default header.b=NC17y9bU; dkim-atps=neutral
CommentDomainKeys? See http://domainkeys.sourceforge.net/
DomainKey-Signaturea=rsa-sha1; q=dns; c=nofws; s=default; d=1942902f27.nxcli.io; b=fImjyYxgZjkxdFhyhdrcob74m9/a3FWaxFDPoIuC9P52NueKRVpTPdiQuHvaK6oqNCyEiA1DP3hnibcUX6k/U07OVIXpA8IGbW6ou2VF7HKz0tYuqlzc8kiNMBR348xYBv33YDmNeFIvrJOCjPWSgG//ruYzJtBbsrlVp6Um6gJrb67LgtzC7J2NUoMROsLazdlqV2v6HxRFoVMWA7I5EnmVsaZBXOg++m9NJDq7a7pqzTtLoCN0D9Ub54KHSn3Jd4SRPHNQQqk9aUiSC7i27fcCpZp+CfIWWfYxcehJd05RU17luW2Roj61nAmZ/4OoBWBpYXv2maVPq3nJRf1MBA==; h=Received:To:Subject:X-PHP-Originating-Script:Date:From:Message-ID:List-Unsubscribe:MIME-Version:Content-Type:Content-Transfer-Encoding;
DKIM-Signaturev=1; a=rsa-sha1; c=relaxed; d=1942902f27.nxcli.io; h=to :subject:date:from:message-id:list-unsubscribe:mime-version :content-type:content-transfer-encoding; s=default; bh=yABf9ohVl G7ro8ImIvXH+dG6HIk=; b=NC17y9bUuIrsLAvH8i4Y9FMDxgTJDJpa4EmuZPC0l mOjTKhduV2tWZomorgB8XHCBwst5QGj8BjGm2ftWMkwp14zLgBK2bOnH8S/mrXC9 8SLxpLFvF/x7NFWSdDpWFfMKOngf7C9Ya4O7le4Wmv/NDZyfuLjCKT+SQuvLQVsN /aKLeNdzsv39VVp6180mP6oX2aVPZWTZh7xJ7Z3wtdpQnQ/vvxEJKWPcx6XzAdN9 jS66zdUVhhqq//1e0qCzCcuLbsprxwtXT6nRqyvz+jpn8bnLL9CkRzssu2uLNKbp MIZqx73acaKbMFwGGCOc9d1Zg6LISr0LEukZ/f8UkfDEQ==
Received(qmail 18874 invoked by uid 10215); 26 May 2025 11:42:33 +0000
Tobones@eblcom.ch
Subject=?UTF-8?Q?Wichtig_:_Ihre_Online-R=C3=BCckerstattung_ist_jetzt_verf=C3=BCg?= =?UTF-8?Q?bar?=
X-PHP-Originating-Script10215:m4.php(1) : eval()'d code
DateMon, 26 May 2025 11:40:02 +0000
FrommySWICA <postmaster@c6ae0df984.nxcli.io>
Message-ID<e00662f8cd0b32853d745e5229239359@c6ae0df984.nxcli.io>
List-Unsubscribemailto:bounce073-HlJMSCeq9IbHW5u@c6ae0df984.nxcli.io?subject=list-unsubscribe
MIME-Version1.0
Content-Typemultipart/alternative; boundary="11d0133b6f349b12ce4f78dcd99dda4a4"
Content-Transfer-Encoding8bit
X-GreylistDelayed for 00:07:28 by milter-greylist-4.6.2 (obelix.imp.ch [0.0.0.0]); Mon, 26 May 2025 13:50:05 +0200 (CEST)
X-MS-Exchange-Organization-SCL4
X-Spam-Score3.349 BAYES_00,DKIM_INVALID,DKIM_SIGNED,HTML_IMAGE_ONLY_20,HTML_MESSAGE,SPF_HELO_NONE,SPF_NONE,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1