blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (4 hops)
  1. unknown source→e4bde261dd32b2f992dfafed2890d52ab29de7eca02f761e2fb922e2e1ad554f
    HTTP · 2026-09-08 16:38:19
  2. 🇫🇷 204.220.167.35 v535.v5f12d8e2.euw1.send.eu.mailgun.net→idefix.imp.ch
    ESMTPS · 2026-09-08 16:38:20
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2026-09-08 16:38:30 · +10s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
      LMTP · 2026-09-08 16:38:30
From
Temu <temu@eu.temuemail.com>
To
eggenberger_markus@catv.rol.ch
Date
08.09.2026 16:38:19 CEST
Subject
Ihre Zahlung wird in Gutschriften zurückgeschickt.
SourceReport
Authentication
SPFpass
DKIMpass
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_IMAGE_RATIO_02HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
Other
HELO_DYNAMIC_IPADDRRelay HELO'd using suspicious hostname (IP addr 1)
URIBL_SC_SWINOG
URIBL_SC_SWINOG_UR
7.5

Header

X-SPAM-SRCREPO
Return-Path<bounce+881165.435d5-eggenberger_markus=catv.rol.ch@eu.temuemail.com>
Delivered-Toeggenberger_markus@catv.rol.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id MOWeKOYdoGpq0CIAf9g64g:P1 (envelope-from <bounce+881165.435d5-eggenberger_markus=catv.rol.ch@eu.temuemail.com>) for <eggenberger_markus@catv.rol.ch>; Tue, 08 Sep 2026 16:38:30 +0200
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id MOWeKOYdoGpq0CIAf9g64g (envelope-from <bounce+881165.435d5-eggenberger_markus=catv.rol.ch@eu.temuemail.com>) for <eggenberger_markus@catv.rol.ch>; Tue, 08 Sep 2026 16:38:30 +0200
Receivedfrom v535.v5f12d8e2.euw1.send.eu.mailgun.net (v535.v5f12d8e2.euw1.send.eu.mailgun.net [204.220.167.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 6DEC3C07EB for <eggenberger_markus@catv.rol.ch>; Tue, 8 Sep 2026 16:38:20 +0200 (CEST)
Authentication-Resultsidefix.imp.ch; dkim=pass (1024-bit key; unprotected) header.d=eu.temuemail.com header.i=@eu.temuemail.com header.a=rsa-sha256 header.s=email header.b=VBl7Qt1L; dkim-atps=neutral
DKIM-Signaturea=rsa-sha256; v=1; c=relaxed/relaxed; d=eu.temuemail.com; q=dns/txt; s=email; t=1788878299; x=1788885499; h=Message-Id: To: To: From: From: Subject: Subject: Content-Type: Mime-Version: Date: Sender: Sender; bh=qlZjEEQhE+7a4nNAfFywbfWzngiGl6TBVZXo6VLN/mI=; b=VBl7Qt1L7Nrg+tDycYTyd4RTE059MuMdSYxDm8VM0hx/Ay7Q4j7N8GvivxxkT3f+7ROqIb+WBgMDD/bkgm+lspYp8zwtzAsjD0Fs4mIAhlCJIb/dZFW0bk/4LTDaeKBep9o8EDlCEzdvH9LmCihPY3os+H/+CNQnI5hMllokE28=
X-Mailgun-SidWyJhYTM1YiIsImVnZ2VuYmVyZ2VyX21hcmt1c0BjYXR2LnJvbC5jaCIsIjQzNWQ1Il0=
Receivedby e4bde261dd32b2f992dfafed2890d52ab29de7eca02f761e2fb922e2e1ad554f with HTTP id 6aa01ddbab2d1e16a3267070; Tue, 08 Sep 2026 14:38:19 GMT
X-Mailgun-Sending-Ip204.220.167.35
Sendertemu@eu.temuemail.com
DateTue, 08 Sep 2026 14:38:19 +0000
Mime-Version1.0
Content-Typemultipart/alternative; boundary="a8bf54431fddf34bfe6476a2939c94be2ba215ef7483953b569ad7f8194d"
Subject=?UTF-8?q?Ihre_Zahlung_wird_in_Gutschriften_zur=C3=BCckgeschickt.?=
FromTemu <temu@eu.temuemail.com>
Toeggenberger_markus@catv.rol.ch
X-Mailgun-Variables{"my-var": "{\"mail_gun_sign_id\":\"mail_gun_79f1876d-f051-4ab5-9708-e4d20da72043\",\"mail_gun_sign\":\"0A023659120830426443317854331A405FA5035FA0850EFC7A44B6F7C420EBDFFC7A12DD092AF27656948EDB5FEE863501C0F93FE693D8EDFBCA7FC33A608BEAA82F64F2D092C5BC71D342B1A4054F5F3002\",\"msg_id\":\"192-20260908-22-B-1039549437204168705-449-V2Q7ybXs\"}"}
Message-Id<20260908143819.2b28719a2fb93bd7@eu.temuemail.com>
X-GreylistSender passed SPF test, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Tue, 08 Sep 2026 16:38:20 +0200 (CEST)
X-MS-Exchange-Organization-SCL3
X-Spam-Score7.453 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HELO_DYNAMIC_IPADDR,HTML_IMAGE_RATIO_02,HTML_MESSAGE,SPF_HELO_NONE,SPF_PASS,URIBL_SC_SWINOG,URIBL_SC_SWINOG_UR
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1