Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (4 hops)
  1. unknown source→mail-yw1-x114f.google.com
    SMTP · 2025-07-24 18:37:05
  2. mail-yw1-x114f.google.com→idefix.imp.ch
    ESMTPS · 2025-07-24 18:37:05
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2025-07-24 18:37:16 · +11s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-07-24 18:37:16
From
"Care Program Office #yeSlN8" <noreply@dailydials19.onmicrosoft.com>
To
ruru@breitband.ch
Date
24.07.2025 18:36:57 CEST
Subject
Everything checks out you’re #VekaCA
SourceReport
Authentication
SPF–
DKIMpass
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
Other
FREEMAIL_FORGED_FROMDOMAIN2nd level domains in From and EnvelopeFrom freemail headers are different
FREEMAIL_FROMSender email is commonly abused enduser mail provider
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
0.2

Header

X-SPAM-SRCREPO
Return-Path<3KWGCaA8cAEArtwf0hwjtocp82Afckn0fkcnu3B.qpoketquqhv.eqo@maestro.bounces.google.com>
Delivered-Toruru@breitband.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id uLG6DTxhgmi5EQoAf9g64g:P1 (envelope-from <3KWGCaA8cAEArtwf0hwjtocp82Afckn0fkcnu3B.qpoketquqhv.eqo@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 24 Jul 2025 18:37:16 +0200
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id uLG6DTxhgmi5EQoAf9g64g (envelope-from <3KWGCaA8cAEArtwf0hwjtocp82Afckn0fkcnu3B.qpoketquqhv.eqo@maestro.bounces.google.com>) for <ruru@breitband.ch>; Thu, 24 Jul 2025 18:37:16 +0200
Receivedfrom mail-yw1-x114f.google.com (mail-yw1-x114f.google.com [IPv6:2607:f8b0:4864:20::114f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 7C879C03D5 for <ruru@breitband.ch>; Thu, 24 Jul 2025 18:37:05 +0200 (CEST)
Authentication-Resultsidefix.imp.ch; dkim=pass (2048-bit key; unprotected) header.d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.i=@dailydials19-onmicrosoft-com.20230601.gappssmtp.com header.a=rsa-sha256 header.s=20230601 header.b=CPAJnxq7; dkim-atps=neutral
Receivedby mail-yw1-x114f.google.com with SMTP id 00721157ae682-70e7f66cd58so17772097b3.1 for <ruru@breitband.ch>; Thu, 24 Jul 2025 09:37:05 -0700 (PDT)
DKIM-Signaturev=1; a=rsa-sha256; c=relaxed/relaxed; d=dailydials19-onmicrosoft-com.20230601.gappssmtp.com; s=20230601; t=1753375018; x=1753979818; darn=breitband.ch; h=to:from:subject:date:message-id:reply-to:mime-version:from:to:cc :subject:date:message-id:reply-to; bh=F6MHHnuJtpA5QObnJcUFt9fizWQ2hvk+snr7Ru6zvpo=; b=CPAJnxq7LpnHFHwnKS7hV/vwxFBVyXpXLmQRx567XUFqIYI68hsY/EAs1Y4nTFuaBp wnPzdjWhcTHp9z71wmBJhki0BfPJrKmrJex6Lf/7nkJlZ+SgqjTGf37jssXzZKt2Yjnk Zp5BvH6EmlbLbekMo48nT5F2zfbLhAgiOLwoMss0ACC9wsMmL/fRdlfwZofFGtnHYiBv cZrvtGKi7kE7igPQOQ2ug22maR6MGEYpXA7Bi2hL4tdndgEjR8AmSUhppodC9Jz3MUYN 2DU28ed+bnxVNTrNSRMPT5cCur+nZe506W2KMNU3ygQnAD8SJWhR1EgJrVPpqiicgIun 1GOg==
X-Google-DKIM-Signaturev=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1753375018; x=1753979818; h=to:from:subject:date:message-id:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=F6MHHnuJtpA5QObnJcUFt9fizWQ2hvk+snr7Ru6zvpo=; b=eTPVdda5XBG1Fo/C2kkrRZv2JEeQZLM6PH0nF5OqeVsiNyxprCpGiVvPGJcS2WAzAV 2rqm9uSucpjdDnSBsgKcbBGO/4daRlgyJqTS6NgvippTOAVRSfaLsTEUtT1Ha3YtQV2n L7CeOBW6obiq7MUsopn82A1Bw9HCubf2Y8vl+2p7G7fJNsmN/YreZCok0S4pCjQWBe75 W71Wcl4hseTmkEdCv3hLZpbAVBq/J2N4aUKfResAMnUm7Nstg12UHe1vy+/D+xpkJm99 H6JowHYJANAJTGr1q+9XCVneimrlvDVrv33JFbsiBVSc8quC8Ig8/B/XJldxbiCGOUDs 5xyA==
X-Gm-Message-StateAOJu0YyB7g2t47/kiRRpdGQydF2K7bxFGkWRQuVIgydvMpBj82gQsVmu 8HpPYkB7OUUE2Kmjd9mGaTJk99B0QC0nZ2pBUYPa720kaOTwqaeFdkDZ/qTTe2ZGamJuRW1Spmx JD4tKUFettTZMTr4l3B778/hj/sBb5k7Y4HW3CZhMGnv/vQefbgwJvTa+d+xq4xI6j7siHPmHHM HpZsg=
X-Google-Smtp-SourceAGHT+IFmsEdbri5YV0imj2oyufTlPQH4yUqoUFJeA2K3ourbgRlW5hZZAq9kj4LI8QcnNjLXa/ccNllekg==
MIME-Version1.0
X-Receivedby 2002:a05:690c:930d:10b0:719:b6a8:de30 with SMTP id 00721157ae682-719b6a8deb6mr58521087b3.4.1753375017397; Thu, 24 Jul 2025 09:36:57 -0700 (PDT)
Reply-Tonoreply@dailydials19.onmicrosoft.com
Message-ID<autogen-java-e16f6937-11fb-4d7f-b75f-c7e0d1ac358c@google.com>
DateThu, 24 Jul 2025 16:36:57 +0000
Subject=?UTF-8?B?RXZlcnl0aGluZyBjaGVja3Mgb3V0IHlvdeKAmXJlICNWZWthQ0E=?=
From"Care Program Office #yeSlN8" <noreply@dailydials19.onmicrosoft.com>
Toruru@breitband.ch
Content-Typemultipart/alternative; boundary="000000000000120b10063aaf6f5b"
X-GreylistSender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Thu, 24 Jul 2025 18:37:06 +0200 (CEST)
X-MS-Exchange-Organization-SCL0
X-Spam-Score0.162 DKIM_SIGNED,DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1