blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (3 hops)
  1. 🇺🇸 69.169.224.56 b224-56.smtp-out.eu-central-1.amazonses.com→obelix.imp.ch
    ESMTPS · 2024-10-04 09:43:38
  2. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
      LMTP · 2024-10-04 09:43:38
    • 🇨🇭 157.161.12.5 obelix.imp.ch→falbala.imp.ch
      LMTP · 2024-10-04 09:43:38
From
floryfashionmail <mail@floryfashionmail.com>
To
erba@zapp.ch
Date
04.10.2024 09:43:37 CEST
Subject
FLASH ⚡ VERKAUF: bis zu 50% ab
SourceReport
Authentication
SPFpass
DKIMsigned
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_06HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
HTML_MIME_NO_HTML_TAGHTML-only message, but there is no HTML tag
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H4Very Good reputation (+4)
RCVD_IN_MSPIKE_WLMailspike good senders
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
SHOPIFY_IMG_NOT_RCVD_SFYShopify hosted image but message not from Shopify
T_REMOTE_IMAGEMessage contains an external image
1.1

Header

X-SPAM-SRCREPO
Return-Path<01070192567bf6b5-8704f90d-ed2e-4676-a49d-55d8290c083a-000000@eu-central-1.amazonses.com>
Delivered-Toerba@zapp.ch
Receivedfrom obelix.imp.ch ([157.161.12.5]) by falbala.imp.ch with LMTP id sL+oN6qc/2alOhsAGLljUw:P1 (envelope-from <01070192567bf6b5-8704f90d-ed2e-4676-a49d-55d8290c083a-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Fri, 04 Oct 2024 09:43:38 +0200
Receivedfrom obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id sL+oN6qc/2alOhsAGLljUw (envelope-from <01070192567bf6b5-8704f90d-ed2e-4676-a49d-55d8290c083a-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Fri, 04 Oct 2024 09:43:38 +0200
Receivedfrom b224-56.smtp-out.eu-central-1.amazonses.com (b224-56.smtp-out.eu-central-1.amazonses.com [69.169.224.56]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id 59F66E1815 for <erba@zapp.ch>; Fri, 4 Oct 2024 09:43:38 +0200 (CEST)
DMARC-FilterOpenDMARC Filter v1.3.2 obelix.imp.ch 59F66E1815
Authentication-Resultsobelix.imp.ch; dmarc=none (p=none dis=none) header.from=floryfashionmail.com
Authentication-Resultsobelix.imp.ch; spf=pass smtp.mailfrom=01070192567bf6b5-8704f90d-ed2e-4676-a49d-55d8290c083a-000000@eu-central-1.amazonses.com
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=t32t6lfqvc4dd6pkbqzyuqvxm6p5izw7; d=floryfashionmail.com; t=1728027817; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; bh=Wl3ir06kLJh1pzPH/k1zvlZ9BWkG7I8MvatMiWoojqM=; b=BWqh0nmFt8Kcg+bDMGeeDFj0kjsa5hcRj8dGznGmII8mALEaIo8TNZrUhDe1/1Nr 2ktmefinFMWySXAKLuqrCKI97tLHor6ZE6uEKstjItHxMUXVf9kctjjLtQF4ynpvlqX wEZe6ShWbtAsD6paugMQx4A8NW0vkvvn7dVn1PNIODuDOKhRTu2bKbL44sEBauNe+Em Ru3/FoQgco91s6xBAvq5ulNmIAT/DKQSzdAec5wrf1X6CJS6RAUOjX4Lbt4hOU6at1j lVYer+xy9wAC8/FXvOJi4lTxtR2JVJUSUyDT7DM3fpTuQO9AFWstIXZhMeDj3WEf6oL IHpZEmS3XA==
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=qftdzk2dqsatjnlrq4r5brjbihpfcrsh; d=amazonses.com; t=1728027817; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID:Feedback-ID; bh=Wl3ir06kLJh1pzPH/k1zvlZ9BWkG7I8MvatMiWoojqM=; b=d8lwtpsgIphVUmrS/akoWrs4jkrCnyCHqaEZh4BIkWPLDOnEbqjt9fqYW3xo0x92 Rsz55PwkKCJDgetwBSX4zmHGBpToW2pZ67UyOnCgMkzHDILFLujQqTCOH3iwjjGMXQs kWifI08l/IIUOsFsihQ4dpN2nOZe59bBgyAPFucM=
DateFri, 4 Oct 2024 07:43:37 +0000
Fromfloryfashionmail <mail@floryfashionmail.com>
Toerba@zapp.ch
Subject=?UTF-8?Q?FLASH_=E2=9A=A1_VERKAUF:_bis_zu_50%_ab?=
MIME-Version1.0
Content-Typetext/html; charset=UTF-8
Content-Transfer-Encodingquoted-printable
Message-ID<01070192567bf6b5-8704f90d-ed2e-4676-a49d-55d8290c083a-000000@eu-central-1.amazonses.com>
Feedback-ID::1.eu-central-1.GFnMVhKK4xDTO0yKeYP3Ij4ELEqQ9cRSjURhupgWfZs=:AmazonSES
X-SES-Outgoing2024.10.04-69.169.224.56
X-GreylistSender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (obelix.imp.ch [0.0.0.0]); Fri, 04 Oct 2024 09:43:38 +0200 (CEST)
X-MS-Exchange-Organization-SCL0
X-Spam-Score1.14 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SHOPIFY_IMG_NOT_RCVD_SFY,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1