[Rspamd-Users] gmail forwarded mail DMARC/DKIM problems
Kapetanakis Giannis
bilias at edu.physics.uoc.gr
Fri Nov 28 21:53:21 UTC 2025
Hi,
I have a couple of valid mails, coming from a payment provider
(vivawallet.com)
Mail was sent to my gmail account and forwarded to my local account.
Rspamd identifies them both as
DMARC_POLICY_QUARANTINE (vivawallet.com and not gmail)
R_DKIM_REJECT (vivawallet.com and not gmail)
The scores are high, and I don’t know how to fix this without adding a
wildcard MIME entry, which I’d prefer not to do.
I'm quite sure there must be other false positives similar to this.
Don't know if the problem is the multiple DKIMs, or is some kind of bug.
I will paste Rspamd symbols as well as original headers (except gmail
account),
maybe someone can have a look.
Thanks,
G
Received from: 209.85.210.54 (mail-ot1-f54.google.com)
Rspamd Symbols:
DMARC_POLICY_QUARANTINE:8:vivawallet.com : SPF not aligned (relaxed), quarantine
R_DKIM_REJECT:8:vivawallet.com:s=selector2
GOOGLE_FORWARDING_MID_BROKEN:1.7
FORGED_SENDER:0.3:no-reply at vivawallet.com,my_gmail+caf_=bilias=edu.physics.uoc.gr at gmail.com
MIME_HTML_ONLY:0.2
FROM_HAS_DN:0
MISSING_XM_UA:0
RCVD_TLS_LAST:0
REPLYTO_EQ_FROM:0
TO_DN_NONE:0
ASN:0:asn:15169, ipnet:209.85.128.0/17, country:US
BLOCKLISTDE_FAIL:0:209.85.210.54:query timed out
DKIM_REPUTATION:0:0
DKIM_TRACE:0:vivawallet.com:-
FREEMAIL_ENVFROM:0:gmail.com
FROM_NEQ_ENVFROM:0:no-reply at vivawallet.com,my_gmail+caf_=bilias=edu.physics.uoc.gr at gmail.com
HAS_REPLYTO:0:no-reply at vivawallet.com
MIME_TRACE:0:0:~
MX_WHITE:0:
NEURAL_HAM:0:-0.203
RCPT_COUNT_ONE:0:1
RCVD_COUNT_FIVE:0:6
RCVD_IN_DNSWL_NONE:0:209.85.210.54:from
RECEIVED_ABUSIX_POLICY:0:51.138.37.238:received
RWL_MAILSPIKE_GOOD:-0.1:209.85.210.54:from
R_SPF_ALLOW:-0.2:+ip4:209.85.128.0/17
IP_REPUTATION_HAM:-0.315914:asn: 15169(-0.31), country: US(-0.01), ip: 209.85.210.54(0.00)
SPF_REPUTATION_HAM:-0.809596:-0.80959628453564
ARC_ALLOW:-1:google.com:s=arc-20240605:i=3
Headers:
Received: by mail-ot1-f54.google.com with SMTP id 46e09a7af769-7c7503c73b4so1275671a34.3
for<bilias at edu.physics.uoc.gr>; Fri, 28 Nov 2025 12:07:49 -0800 (PST)
ARC-Seal: i=3; a=rsa-sha256; t=1764360467; cv=pass;
d=google.com; s=arc-20240605;
b=IwqLCn5AFgqVJVL5DY4RBZzNDs/S6pudN9fsLW1onRcgR1aIAHgaV4CyHPAsYfIDMV
9E1fUG7jKA164MSpjSFyVWG/RHi1cc9CcMMaHQmsNsH84hrdGSvax0siyeCYJH3kPUO2
S1CiRbxZE2kLtWq5Ep/XRsSQGLAtsbhqke/Ynr2Bp/q31t7MAi35jtQfJtv0E+R2sJKV
sZsgfdLaScvE8nkFFdXVNCyxo6a4lvCkfzpjWTGexh9XXqUZ7Ag+hqsmyNEdryX/0i2j
URFC4wIPdAZLrMdYWg/rYUR0PqpSdaUWAYDk6RCRWkiFG5ESJKEZ4fZRUZNw8xo/42gG
Syvw==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=content-transfer-encoding:mime-version:reply-to:to:subject:date
:from:dkim-signature:message-id:delivered-to;
bh=mG1mRomvwnBB5omWwZJlz1U6z0zwreFW3ADlPC0Qrxw=;
fh=iX7OWs0ThJq1cl4lsa0lSYhZb/FMzBgnURKMwq9ak1Y=;
b=WTjm2PaagQuVbCw/Urj/p0fEVFbqzRgdmhETUf/YtS/qBxXSJI66szekvZhDALlSFt
0c9Q/RlgFihTOQYq4KwTGmNgCPZ115jUL4RXjoIgYb8m+zDpCl4I/vt6tK0AeznT8drW
37o8PaW3Mye7uBTaLncS113amsZiwr2Ue3I5LS6oun/UFNgzqo3fjpdH8bO/r/v630GC
Rqf7Wbsny3cq3n577D+4sxnWA3JNMYkjIDBBigCVcF+epUhwZzT0aEBn5C7OK6eT+RfC
XFZ0W418pWQhoqn5VRLHWhK1R97AjMC3eJGxZpti7vTNnm4zBEX5l2zU5eDBs3jUa8R2
N5PA==;
darn=edu.physics.uoc.gr
ARC-Authentication-Results: i=3; mx.google.com;
dkim=passheader.i=@vivawallet.com header.s=selector2 header.b="Cd/ifMkE";
arc=pass (i=1 spf=pass spfdomain=vivawallet.com dmarc=pass fromdomain=vivawallet.com);
spf=pass (google.com: domain ofno-reply at vivawallet.com designates 2a01:111:f403:c202::7 as permitted sender)smtp.mailfrom=no-reply at vivawallet.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=vivawallet.com
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1764360467; x=1764965267;
h=content-transfer-encoding:mime-version:reply-to:to:subject:date
:from:dkim-signature:message-id:delivered-to:x-forwarded-for
:x-forwarded-to:x-gm-message-state:from:to:cc:subject:date
:message-id:reply-to;
bh=mG1mRomvwnBB5omWwZJlz1U6z0zwreFW3ADlPC0Qrxw=;
b=UhJSlJFmbN8Emm1A0Fk0qU5n5XNhjfEL7RcHHAK/dmJBzWec1HEtgC7mzZGimN9vOp
ku0W3ELDUj0u5L8FlRPb4F/MIqIHDti2jY5F2atgQB5zOs7tkj+zgYwhJyU3CtlsXULw
AtdUQC1KFVaYisqxiN17IYflzoHLM4xK5941tLDIwzznkg14m5rh6gmMRKaj8TtH9LFt
4WK5IYFuKYLlUgmiFF/AdTqOZwRPJ9XMn3YvFv14FcThoQGiAYF5pXwX+QCVLtewnA0g
5gmayyb/Ts7aYCcs/ITfgE04TgyK58cDVR39aWEd0HHL6Wdi18BrZHwlayURdnmot2WC
XcPg==
X-Forwarded-Encrypted: i=3;AJvYcCXJ7l5VkMlojUXJNZpqyGeWR4x3rZ71K8oQi1viKmEkQFwE1w+PP2StObD2dbpyKV+3HDRplsU=@edu.physics.uoc.gr
X-Gm-Message-State: AOJu0YwYy9kFN/SNqIkoG728nCSGGWO3pK4KvOClwzHK8hWtdSmX7Ag2
dXpPRrc4OWjZkeVfL2cOXum+v7Pe/Cwll5rDHwwl3wCiIihs2Si8CSyo5LvFa6NIIZZ5/PN8wtv
RD5Q3QDY/sTo7xO79Eo2jF9DcczZNEXFS07kreiNAFOnGLrOWd+QFqtB4AFiIlg==
X-Received: by 2002:a05:6808:2f15:b0:44d:ae60:6606 with SMTP id 5614622812f47-451159c7a46mr13436648b6e.13.1764360467428;
Fri, 28 Nov 2025 12:07:47 -0800 (PST)
X-Forwarded-To:bilias at edu.physics.uoc.gr
X-Forwarded-For:my_gmail at gmail.com bilias at edu.physics.uoc.gr
Delivered-To:my_gmail at gmail.com
Received: by 2002:ac9:4449:0:b0:608:2ea2:aaa1 with SMTP id w9csp5314924ocg;
Fri, 28 Nov 2025 12:07:46 -0800 (PST)
X-Google-Smtp-Source: AGHT+IGwfqD4AqDiVApf1ybRTBoXnWVxhmXEmf5i0FvW/RhL5KULWLoAiwQkpkrb41IHHRIo3GhI
X-Received: by 2002:a05:6a21:6d98:b0:35e:86d3:88ca with SMTP id adf61e73a8af0-36150f3f813mr33779724637.59.1764360466164;
Fri, 28 Nov 2025 12:07:46 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; t=1764360466; cv=pass;
d=google.com; s=arc-20240605;
b=hAU0remCZNd8DB4eYEPqF/4MT/FnAYQlRjTgSZv/xI1dxVCwzy8BYghinCq8wHk85V
cwLtWTHz8T0K4ks3MriyeudxmZ/b4/zl843gXRLTnnWY+yNJQk4v2R6QDkCXRWkbOXd6
NUetsyqswiX7REZ3RnwhJBIOs1KTFXcvvXA/RqMQqx2PcrkaJgpfcoflCRiSgOj3If+z
556+EO+E/EaEhNRxQyFHO0I3P0qgZzimua2jMxcsl6aEVsWrhSUP1jaaNuLv6+OOjhwe
GsVih8lmPnqinYs/biA18kskHwelzWFgD+fvd8Gvy7w9cxwm3RhnVzSF6osnYXzK6Kt2
GrVw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=content-transfer-encoding:mime-version:reply-to:to:subject:date
:from:dkim-signature:message-id;
bh=mG1mRomvwnBB5omWwZJlz1U6z0zwreFW3ADlPC0Qrxw=;
fh=v2rZQ3S+efc2K+E6EGdgyNs5lIGpfCP+cNomA6l+Edg=;
b=OoyeSAL8dF6NuullTRNrzhzeRdB88aX7qehRBTruX2StKs68S8mEyhNl6XYZ+8cvt5
4xtRwpCcP5cTD3w2btK/i1Mwxe46uVRO/pE9C3FROm+ajsqPqMixyD4pXjDJ04RmNNkm
h51YQyB5CiKlEW3AmjOk9Z9UjwcbZaJFKr7R7VjNcX6rGTABxO517PAhTYGnzGOup+v8
nPZteUUqtIYozU4swAQ2EJBLeVL4jFrY1pom0UFtrR/9mLADrUEgygdrJTF7YELaMeID
zcIGQ3P4pBL6RzD9bi+CYgIFwRh/09TLy3JuNrTJYxkVE16hcb1M7JZp8J8Oeo3IXbZ/
fWdw==;
dara=google.com
ARC-Authentication-Results: i=2; mx.google.com;
dkim=passheader.i=@vivawallet.com header.s=selector2 header.b="Cd/ifMkE";
arc=pass (i=1 spf=pass spfdomain=vivawallet.com dmarc=pass fromdomain=vivawallet.com);
spf=pass (google.com: domain ofno-reply at vivawallet.com designates 2a01:111:f403:c202::7 as permitted sender)smtp.mailfrom=no-reply at vivawallet.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=vivawallet.com
Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7])
by mx.google.com with ESMTPS id 41be03b00d2f7-be508254f8csi2754102a12.840.2025.11.28.12.07.45
for<my_gmail at gmail.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Fri, 28 Nov 2025 12:07:46 -0800 (PST)
Received-SPF: pass (google.com: domain ofno-reply at vivawallet.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7;
Authentication-Results: mx.google.com;
dkim=passheader.i=@vivawallet.com header.s=selector2 header.b="Cd/ifMkE";
arc=pass (i=1 spf=pass spfdomain=vivawallet.com dmarc=pass fromdomain=vivawallet.com);
spf=pass (google.com: domain ofno-reply at vivawallet.com designates 2a01:111:f403:c202::7 as permitted sender)smtp.mailfrom=no-reply at vivawallet.com;
dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=vivawallet.com
Message-ID:<692a0112.630a0220.3c4e51.e95dSMTPIN_ADDED_BROKEN at mx.google.com>
X-Google-Original-Message-ID: <172cb536-273e-4d90-94bc-21d8705d4fba>
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=AmANVqX6yr4tk2atzbnx/UQ/rjJO0xGXqTC+72FkpTMA+GKFEyi2hLx/vsNo2Jvse2e4e/rF+xUZQ4DH+fU4cZGa3HiuF68I7sP3OuWHPvdmynZvK4Zw4vMvN9aGw+KqntZaginIqYFEaqzBN8N76D9IrXkfvH9RLzzU5b6Iym+F9vMGAbScoBOd6HXSv2w9m08sbiXOD1P7B+UhkolPou8X3EBWFKIQRuBKkB5UHBtacH/LoeM5BKehsNM+dixdWhwzddmRx52DfOPXVg8s4zodqCPmPNbCNxE6tydBgfe0klRVkg74NpAlbHd4d7RWWNNkHhPd/e7EQwDB/gt+9Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=mG1mRomvwnBB5omWwZJlz1U6z0zwreFW3ADlPC0Qrxw=;
b=wnKvZsDBeRX/n/FuMfuLulIuwb0bphQeMDQFreaCzhWnLGkzejEh0D4trQf+aNlEYPKP8nO3cQI4YLje8f0oAtNaFMFkxzPbPQzB2SP51VWpVMYGLg3exBBKob48AM0/+XqPvrxmVlJFXrVIRdv08FZfjxQZv39XzuBN3OdkSl9UD5u7aCC/id7T8lrGbY6esN+C32YYvHHFxKvs5WYnQp6ZFGoc0wOuBIXrXRrWlqSvxi06HtEw+CIAyPmK4tbdccUaky5ZdNnRxpy1nBFVEAJGnMWttpk8Mn2bNcYtNJWBVAPEOSySx5kOUSk6aWf+InsyaGd6Snd+Q8YuQQI/pQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
51.138.37.238) smtp.rcpttodomain=gmail.com smtp.mailfrom=vivawallet.com;
dmarc=pass (p=quarantine sp=quarantine pct=100) action=none
header.from=vivawallet.com; dkim=none (message not signed); arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vivawallet.com;
s=selector2;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=mG1mRomvwnBB5omWwZJlz1U6z0zwreFW3ADlPC0Qrxw=;
b=Cd/ifMkEK5OJmPK+Xr4wJqdSVHt8xTh3mVIXpf3337DfshMSx3/KmElwl/hM0d8kH8YFcfynNw5zvnNVTac3DKFQE0xRE3+sew5JMA6KgF8YGDLBcnL1zfNTNa8DBu+Gtae1ypVYr+seJa6qvfTcVh0onSjO+Sd+NRjU0qjyorE=
Received: from AS4P192CA0040.EURP192.PROD.OUTLOOK.COM (2603:10a6:20b:658::16)
by PAWPR10MB7176.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:2f2::20) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9366.13; Fri, 28 Nov
2025 20:07:40 +0000
Received: from AM3PEPF0000A79B.eurprd04.prod.outlook.com
(2603:10a6:20b:658:cafe::73) by AS4P192CA0040.outlook.office365.com
(2603:10a6:20b:658::16) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.20.9366.17 via Frontend Transport; Fri,
28 Nov 2025 20:07:36 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 51.138.37.238)
smtp.mailfrom=vivawallet.com; dkim=none (message not signed)
header.d=none;dmarc=pass action=none header.from=vivawallet.com;
Received-SPF: Pass (protection.outlook.com: domain of vivawallet.com
designates 51.138.37.238 as permitted sender)
receiver=protection.outlook.com; client-ip=51.138.37.238;
helo=sfvpwe02000000; pr=C
Received: from sfvpwe02000000 (51.138.37.238) by
AM3PEPF0000A79B.mail.protection.outlook.com (10.167.16.106) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.20.9366.7 via Frontend Transport; Fri, 28 Nov 2025 20:07:39 +0000
From: Viva Wallet<no-reply at vivawallet.com>
Date: Fri, 28 Nov 2025 20:07:39 +0000
Subject: viva.com: Successful Payment
To:my_gmail at gmail.com
Reply-To: Viva Wallet<no-reply at vivawallet.com>
X-Viva-MessageId: 172cb536-273e-4d90-94bc-21d8705d4fba
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: AM3PEPF0000A79B:EE_|PAWPR10MB7176:EE_
X-MS-Office365-Filtering-Correlation-Id: 942f0cd3-35fc-464e-63fc-08de2eb9c878
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam:
BCL:0;ARA:13230040|69100299015|30052699003|1032899013|36860700013|1800799024|82310400026|376014|8096899003|2066899003|4076899003|19033499003|3613699012;
X-Microsoft-Antispam-Message-Info:
=?utf-8?B?dHNHSGhVVGUrTGdFcUxFNmJJajNuenM5YUJMNU1oMHJuc0tGcStNNnVza3dC?=
=?utf-8?B?TmdkLy8xSTR0MGNQenl0bjdjdG5hR0ZMVzhLSlBHd2taVUVtdWQxZ0ZQZGZS?=
=?utf-8?B?WUc0aXNPdHIzRi81Nng4andGNzZMR3pFcmV3T0ZEVll6LzNuZ2htT0p1TWdX?=
=?utf-8?B?S1hqUWRZMC9FK2NpME5yYitic3duOUJ2Y3hCc004T3EySy90Vi9hUEZ0U3Jk?=
=?utf-8?B?MXpHRHh2TkxSVGx5MG9nczhGNmJ1MWk5QlozdVdldGxXeWtDWU5tTjNyc0Zt?=
=?utf-8?B?ampuQVZ2cm5rWEFxYkUzbHpqbVVwUnRHNjZzZlhrRy9ZTjhIWmhzc3N1cVVS?=
=?utf-8?B?MFN1dHBmNWpFbFZNR0s5TjRJVHpFU0wwUmRxb0FNU1NldkxlODNvbmZWYTNh?=
=?utf-8?B?RkZQSnhjV0VkVGttaytqVWpaMENqWXI5VEFqZGxoSlJEZUV6RHdPbUJKNWhw?=
=?utf-8?B?alJiTjE4cDhoODBpVVZRQ2c1Z3p2Rkh5cTcxSUxZZkY2c1U3MXM4dEp1S2Z6?=
=?utf-8?B?TEhCTi8zUUY3QVo2QjZ0amVpZFhsYWtGOGV4enFXendLZGlMdDlyM3pCTzU0?=
=?utf-8?B?NTIybGVzVmwzT2NZallVRW83V21qMFptbEluemZMNTdYODF1YjdjMWxQOWE5?=
=?utf-8?B?c3ZuT2hKSExoeEZ6WWVrWTZ3K2RWWUZadjYrUmZpM3BJM0FFMUxEVlV1ZmFj?=
=?utf-8?B?RzlOLzhRNjM2QzA5T240MjJiR3YwdnJML1hENnEyM1ZwZ2hhb0pKcEVPaGJz?=
=?utf-8?B?cWw1T3dPZGhPU0dDT29qMU15djczeGlLZkE0WWJQNmJEUHNRaDBLNVhqOTVu?=
=?utf-8?B?RXpsN01iTE50Z0Z6cUhmTHBYaVZaZmtOcHUzcVF0L2ZsOTBwbXoyUVBtNis5?=
=?utf-8?B?MCtHZ1dZaXVSQ0VHYWx2amx4aVN2NEV2Vi91UFJDTXhTVWFNVmhqM2xKdDlu?=
=?utf-8?B?aG9aNnZSaVFHN2czSk5OSlczY0IvN3dpcldVNnBwbnJWNFZHYVE4NWh5VEdB?=
=?utf-8?B?bWFESm1tNXB5VHhuazFGS3NtMDBZMVhkYVpWajJBTGJOYk9mMjhmdUJOT0RC?=
=?utf-8?B?enFIV0ptVjMvTFdkYUN1THpsdkgvdVV1REwxeWZPejM1czZsRkZGenFsd1dN?=
=?utf-8?B?YWEzMkZib0ZMWGdzbURPamxETkgwK2ZHem5DWk04Tnd3QWdlOXpLMGhlcmdk?=
=?utf-8?B?U3g3SEdsaVpocTkxQVJYdk1wL1NzVUJQR083TFM0bVpGRUdNaG40YzVXb0pw?=
=?utf-8?B?MjYvRk9sbHRxRlNwSmhrandOVjBObHRFRGJiaUVFd3VaUFFTM1ozbklBdm05?=
=?utf-8?B?SW56QmcvVWJSYVRIVnU5UjZYdUlmaDhyY1dlZXRDOUNMamFEenp1RHJ1VVd2?=
=?utf-8?B?aW5aRWlpL1kwVVAzNDJ5TTRMMEZzNng2WWRmV2NGeHFMc3dOOEMweW81Ujcx?=
=?utf-8?B?UThoWmErVmEvVVlrcEVMZi83WFJ6L05Jdm4vUXZQYmNKWlRRV2QrNnRWS25H?=
=?utf-8?B?ZlNueGJMY1pnS2xVU2dRMGRNek5UUW5lcEJZdkxoTUZhbWtkdExNL3gyZ0xt?=
=?utf-8?B?a1ptMC9YZW5MVHY4OVI3WEYycmxYV0pjcGFmbSt5RDdHNjBLOXN3QjlUN0d6?=
=?utf-8?B?eU9wN0FQbm1Za2pSTmQ5dHpJT0xtUE9kK1owVGwxOHpZSllBNUFSS0VLZ0E3?=
=?utf-8?B?S2xyVmRvalFGVENuYkhjUzN6ME1Pc3ovTmJ1TXA4ZmZEYm5XUGtXbjhyaDRJ?=
=?utf-8?B?anNuMHZXbTFnTGQzZ2tyMUl3QUhWbnR0Y1dQMUtZRVZMdHdFRmRNNWZlL0xz?=
=?utf-8?B?NGl2MGlZdXhSekpQZk80UXBXUjA1Y3g2NTVnd1pDU0hibDh3RWdwVkhqS1Rp?=
=?utf-8?B?UTN5MTZoMFJVcnJCTkhtT0loYUIwNGxmVnNhWHVjakhyYXpXMnlqd1pJTk5M?=
=?utf-8?B?TGFXUnJ3U2p3NHpEUEE1OC9GTStMUkhGY3JxZGxhWEtQMzNLbHE3d0hnN1c0?=
=?utf-8?B?ajdsTkF2ZUg5TUxsczdQVnNpb0NjS2F6ZDQ0MlVzMTRmeUV6UzlBMXh4Znlu?=
=?utf-8?B?Q3pxR3lGVkZ3V0l1UzN3bFZjR0hIOVBYMmtFdz09?=
X-Forefront-Antispam-Report:
CIP:51.138.37.238;CTRY:NL;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:sfvpwe02000000;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(69100299015)(30052699003)(1032899013)(36860700013)(1800799024)(82310400026)(376014)(8096899003)(2066899003)(4076899003)(19033499003)(3613699012);DIR:OUT;SFP:1102;
X-OriginatorOrg: vivawallet.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Nov 2025 20:07:39.9895
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 942f0cd3-35fc-464e-63fc-08de2eb9c878
X-MS-Exchange-CrossTenant-Id: 67605cd7-2905-4d79-8256-ae1f5420c277
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=67605cd7-2905-4d79-8256-ae1f5420c277;Ip=[51.138.37.238];Helo=[sfvpwe02000000]
X-MS-Exchange-CrossTenant-AuthSource:
AM3PEPF0000A79B.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB7176
More information about the Users
mailing list