blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (4 hops)
  1. unknown source→uid
    2025-02-13 18:31:10
  2. 🇺🇸 173.249.144.92 cloudhost-186166.us-west-1.nxcli.net→idefix.imp.ch
    ESMTPS · 2025-02-13 20:37:20 · +2h 6m
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2025-02-13 20:37:28 · +8s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-02-13 20:37:28
From
Spotify <support@01d1b474ba.nxcli.io>
To
caroline.jascha@bman.ch
Date
13.02.2025 18:28:52 CET
Subject
Ihr Zugang zu Spotify wurde deaktiviert.
SourceReport
Authentication
SPFnone
DKIM–
Spam score
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_NONESPF: sender does not publish an SPF Record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_BL_SPAMCOP_NETOntvangen via een relay die gevonden is in bl.spamcop.net
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
4.6

Header

X-SPAM-SRCREPO
Return-Path<postmaster@d91a159dfa.nxcli.net>
Delivered-Tocaroline.jascha@bman.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id MBodFvhJrmdr+A8Af9g64g:P1 (envelope-from <postmaster@d91a159dfa.nxcli.net>) for <caroline.jascha@bman.ch>; Thu, 13 Feb 2025 20:37:28 +0100
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id MBodFvhJrmdr+A8Af9g64g (envelope-from <postmaster@d91a159dfa.nxcli.net>) for <caroline.jascha@bman.ch>; Thu, 13 Feb 2025 20:37:28 +0100
Receivedfrom cloudhost-186166.us-west-1.nxcli.net (cloudhost-186166.us-west-1.nxcli.net [173.249.144.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 482C2C4E0A for <caroline.jascha@bman.ch>; Thu, 13 Feb 2025 20:37:20 +0100 (CET)
DMARC-FilterOpenDMARC Filter v1.3.2 idefix.imp.ch 482C2C4E0A
Authentication-Resultsidefix.imp.ch; dmarc=none (p=none dis=none) header.from=01d1b474ba.nxcli.io
Authentication-Resultsidefix.imp.ch; spf=none smtp.mailfrom=postmaster@d91a159dfa.nxcli.net
Received(qmail 12537 invoked by uid 10079); 13 Feb 2025 17:31:10 +0000
DateThu, 13 Feb 2025 17:28:52 +0000
Tocaroline.jascha@bman.ch
FromSpotify <support@01d1b474ba.nxcli.io>
SubjectIhr Zugang zu Spotify wurde deaktiviert.
Message-ID<bc3d6c1922d0ac2fd71c62bdecc3d3f3@01d1b474ba.nxcli.io>
List-Unsubscribemailto:bounce898-3oeGG8JetGV5Fen@01d1b474ba.nxcli.io?subject=list-unsubscribe
MIME-Version1.0
Content-Typemultipart/alternative; boundary="1025fb6b386de49401875cc657d4ec630"
Content-Transfer-Encoding8bit
X-GreylistDelayed for 00:51:20 by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Thu, 13 Feb 2025 20:37:21 +0100 (CET)
X-MS-Exchange-Organization-SCL4
X-Spam-Score4.606 BAYES_00,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_NONE,SPF_NONE,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1