blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (3 hops)
  1. 🇺🇸 69.169.224.51 b224-51.smtp-out.eu-central-1.amazonses.com→obelix.imp.ch
    ESMTPS · 2025-03-29 06:17:17
  2. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
      LMTP · 2025-03-29 06:17:21 · +4s
    • 🇨🇭 157.161.12.5 obelix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-03-29 06:17:21
From
floryfashion <mail@floryfashion.com>
To
erba@zapp.ch
Date
29.03.2025 06:17:16 CET
Subject
💃✨ Lust auf etwas Neues? Shoppen Sie noch heute unsere neue Modeauswahl!
SourceReport
Authentication
SPFpass
DKIMsigned
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_06HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
HTML_MIME_NO_HTML_TAGHTML-only message, but there is no HTML tag
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2Average reputation (+2)
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
PLING_QUERYSubject has exclamation mark and question mark
SHOPIFY_IMG_NOT_RCVD_SFYShopify hosted image but message not from Shopify
T_REMOTE_IMAGEMessage contains an external image
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
4.5

Header

X-SPAM-SRCREPO
Return-Path<01070195e0553b01-20ea4cc7-1c1d-441d-be8a-992efc3cf2c9-000000@eu-central-1.amazonses.com>
Delivered-Toerba@zapp.ch
Receivedfrom obelix.imp.ch ([157.161.12.5]) by tragicomix.imp.ch with LMTP id QDMwL2GC52dGwB8AGLljUw:P1 (envelope-from <01070195e0553b01-20ea4cc7-1c1d-441d-be8a-992efc3cf2c9-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Sat, 29 Mar 2025 06:17:21 +0100
Receivedfrom obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id QDMwL2GC52dGwB8AGLljUw (envelope-from <01070195e0553b01-20ea4cc7-1c1d-441d-be8a-992efc3cf2c9-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Sat, 29 Mar 2025 06:17:21 +0100
Receivedfrom b224-51.smtp-out.eu-central-1.amazonses.com (b224-51.smtp-out.eu-central-1.amazonses.com [69.169.224.51]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id 792E2E14C3 for <erba@zapp.ch>; Sat, 29 Mar 2025 06:17:17 +0100 (CET)
DMARC-FilterOpenDMARC Filter v1.3.2 obelix.imp.ch 792E2E14C3
Authentication-Resultsobelix.imp.ch; dmarc=fail (p=quarantine dis=none) header.from=floryfashion.com
Authentication-Resultsobelix.imp.ch; spf=pass smtp.mailfrom=01070195e0553b01-20ea4cc7-1c1d-441d-be8a-992efc3cf2c9-000000@eu-central-1.amazonses.com
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=peuj3ytntcf6xhn2ong6mhvftzdkckmx; d=floryfashion.com; t=1743225437; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; bh=4wyXOnvWVHYEyj6MsYy9xd5nwVp17Idz+H5xXlL/cZQ=; b=fcyriZQ9f9dev9pYpnPpY4nSQKXiZOiI9XWjr2Xa6jadZpCbrgyiSFx0Iwi3/1Dx G4rmuP9Bd2xgXBlBsKyvX5o2rUlR1XK2f13D6NQK190EJW0HmdUMKvhVfRv26Fip2fY zv/kScOLs0T0LniSZuwuUW/4mptc+SZLUI2wUyk6+6vFQYG1h0ivGpRx0DMmwF/ndhJ 0UlbpDoi8mZ7NK0sMgWKjwNU/B0XUVS4oYY02/+B5FSPUK4t56pVKO/8QbMuHpqhqyq dInKGc+GHTW8wDsx5XRBvRJtcMLV2ZuCMYVZagXhOdJzqLboZ/jvXxsoR3hHhpDYVsS w0NgNKBrsw==
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1743225437; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID:Feedback-ID; bh=4wyXOnvWVHYEyj6MsYy9xd5nwVp17Idz+H5xXlL/cZQ=; b=CcSzQuhnmxKWVyDF7+gWAwgubV4NsB3NOr/qm8fd8c5VQ90hRsfIGgipOqVk52MN 4y50w7lcfkvpzUVsvlimrjIgh46Pc+lhUrmSWm2amyTnDxBO8AGddTp140xtPvT01TX sdr0NPRMWMKw85h7vlrNCfi3y0QyTtJ+O5ryWK0A=
DateSat, 29 Mar 2025 05:17:16 +0000
Fromfloryfashion <mail@floryfashion.com>
Toerba@zapp.ch
Subject=?UTF-8?Q?=F0=9F=92=83=E2=9C=A8_Lust_auf_etwas_Neues=3F_Shoppen_Si?= =?UTF-8?Q?e_noch_heute_unsere_neue_Modeauswahl!?=
MIME-Version1.0
Content-Typetext/html; charset=UTF-8
Content-Transfer-Encodingquoted-printable
Message-ID<01070195e0553b01-20ea4cc7-1c1d-441d-be8a-992efc3cf2c9-000000@eu-central-1.amazonses.com>
Feedback-ID::1.eu-central-1.Xp5hExUSp7nxbbc7GrK39xQ+uv8QFAx8Ytohp/dmkmQ=:AmazonSES
X-SES-Outgoing2025.03.29-69.169.224.51
X-GreylistSender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (obelix.imp.ch [0.0.0.0]); Sat, 29 Mar 2025 06:17:17 +0100 (CET)
X-MS-Exchange-Organization-SCL4
X-Spam-Score4.497 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,PLING_QUERY,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SHOPIFY_IMG_NOT_RCVD_SFY,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1