Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (4 hops)
  1. unknown source→uid
    2024-09-20 14:21:23
  2. 🇺🇸 207.246.254.16 cloudhost-11611031.us-midwest-2.nxcli.net→asterix.imp.ch
    ESMTPS · 2024-09-20 15:47:48 · +1h 26m
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
      LMTP · 2024-09-20 15:47:59 · +11s
    • 🇨🇭 157.161.12.4 asterix.imp.ch→falbala.imp.ch
      LMTP · 2024-09-20 15:47:59
From
PayPal <support@4c67991e35.nxcli.io>
To
geysir@teleport.ch
Date
20.09.2024 14:19:01 CEST
Subject
Konto vorübergehend gesperrt.
SourceReport
Authentication
SPFnone
DKIM–
Spam score
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_NONESPF: sender does not publish an SPF Record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_FACE_BADHTML font face is not a word
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
T_KAM_HTML_FONT_INVALIDTest for Invalidly Named or Formatted Colors in HTML
-1.9

Header

X-SPAM-SRCREPO
Return-Path<postmaster@4c67991e35.nxcli.io>
Delivered-Togeysir@teleport.ch
Receivedfrom asterix.imp.ch ([157.161.12.4]) by falbala.imp.ch with LMTP id 8PlCKA997WZxWjIA0cKaAg:P1 (envelope-from <postmaster@4c67991e35.nxcli.io>) for <geysir@teleport.ch>; Fri, 20 Sep 2024 15:47:59 +0200
Receivedfrom asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id 8PlCKA997WZxWjIA0cKaAg (envelope-from <postmaster@4c67991e35.nxcli.io>) for <geysir@teleport.ch>; Fri, 20 Sep 2024 15:47:59 +0200
Receivedfrom cloudhost-11611031.us-midwest-2.nxcli.net (cloudhost-11611031.us-midwest-2.nxcli.net [207.246.254.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id EF37CC48A9 for <geysir@teleport.ch>; Fri, 20 Sep 2024 15:47:48 +0200 (CEST)
DMARC-FilterOpenDMARC Filter v1.3.2 asterix.imp.ch EF37CC48A9
Authentication-Resultsasterix.imp.ch; dmarc=none (p=none dis=none) header.from=4c67991e35.nxcli.io
Authentication-Resultsasterix.imp.ch; spf=none smtp.mailfrom=postmaster@4c67991e35.nxcli.io
Received(qmail 8676 invoked by uid 10099); 20 Sep 2024 12:21:23 +0000
Togeysir@teleport.ch
Subject=?UTF-8?Q?Konto_vor=C3=BCbergehend_gesperrt.?=
X-PHP-Originating-Script10099:pl.php
DateFri, 20 Sep 2024 12:19:01 +0000
FromPayPal <support@4c67991e35.nxcli.io>
Message-ID<df4f7f917b4d38ecb64d63cde71e4f1e@4c67991e35.nxcli.io>
List-Unsubscribemailto:bounce547-lsphihdrT4cZhLH@4c67991e35.nxcli.io?subject=list-unsubscribe
MIME-Version1.0
Content-Typemultipart/alternative; boundary="13fb6775c26a24f86632f178fa9704fc1"
Content-Transfer-Encoding8bit
X-GreylistDelayed for 00:41:20 by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Fri, 20 Sep 2024 15:47:49 +0200 (CEST)
X-MS-Exchange-Organization-SCL0
X-Spam-Score-1.884 BAYES_00,HTML_FONT_FACE_BAD,HTML_MESSAGE,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,SPF_NONE,T_KAM_HTML_FONT_INVALID
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1