Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (4 hops)
  1. 10.95.198.117 [10.95.198.117]→i-0559509f991175267.mta3vrest.sd.prd.sparkpost
    REST · 2026-07-20 12:11:29
  2. 🇺🇸 156.70.89.240 mta-70-89-240.temu.com.sparkpostmail.com→asterix.imp.ch
    ESMTPS · 2026-07-20 12:11:29
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
      LMTP · 2026-07-20 12:11:39 · +10s
    • 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
      LMTP · 2026-07-20 12:11:39
From
"Temu" <temu@eu.temuemail.com>
To
nando.haeberli@leunet.ch
Date
20.07.2026 12:11:29 CEST
Subject
Wir haben beschlossen, Sie mit … zu verwöhnen.
SourceReport
Authentication
SPFpass
DKIMpass
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
HTML
HTML_IMAGE_RATIO_02HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_MSPIKE_H3Good reputation (+3)
RCVD_IN_MSPIKE_WLMailspike good senders
-0.1

Header

X-SPAM-SRCREPO
Return-Path<msprvs1=20661SOgKTosV=bounces-23732@mb.eu.temuemail.com>
Delivered-Tonando.haeberli@leunet.ch
Receivedfrom asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id 2AK8LFv0XWoKMgEA0cKaAg:P1 (envelope-from <msprvs1=20661SOgKTosV=bounces-23732@mb.eu.temuemail.com>) for <nando.haeberli@leunet.ch>; Mon, 20 Jul 2026 12:11:39 +0200
Receivedfrom asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id 2AK8LFv0XWoKMgEA0cKaAg (envelope-from <msprvs1=20661SOgKTosV=bounces-23732@mb.eu.temuemail.com>) for <nando.haeberli@leunet.ch>; Mon, 20 Jul 2026 12:11:39 +0200
Receivedfrom mta-70-89-240.temu.com.sparkpostmail.com (mta-70-89-240.temu.com.sparkpostmail.com [156.70.89.240]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id 77B8AC0307 for <nando.haeberli@leunet.ch>; Mon, 20 Jul 2026 12:11:29 +0200 (CEST)
Authentication-Resultsasterix.imp.ch; dkim=pass (1024-bit key; unprotected) header.d=eu.temuemail.com header.i=@eu.temuemail.com header.a=rsa-sha256 header.s=scph1223 header.b=z6muQLEE; dkim-atps=neutral
X-MSFBLBRbrYh6YPNiAb8ALCOtxfcV144Q7yjgyVdBfe+E2xIw=|eyJ0ZW5hbnRfaWQiOiJ zcGNldSIsImN1c3RvbWVyX2lkIjoiMjM3MzIiLCJzdWJhY2NvdW50X2lkIjoiMCI sIm1lc3NhZ2VfaWQiOiI2YTVhNTFmNDVkNmE4ZTNkNWRiOCIsInIiOiJuYW5kby5 oYWViZXJsaUBsZXVuZXQuY2gifQ==
DKIM-Signaturev=1; a=rsa-sha256; c=relaxed/relaxed; d=eu.temuemail.com; s=scph1223; t=1784542289; i=@eu.temuemail.com; bh=En44bGxrCNYwkku82TNQUsdGu9CaSt21E9yaQY0eHPg=; h=To:Message-ID:Date:Content-Type:Subject:From:From:To:Cc:Subject: Feedback-Id; b=z6muQLEEu5Eva8MKqOd4nGjswPg5/wi5RtdASZ3WfIsz1+1/bRswxFnDpwe9BNuOP HQbalUktvPSOM/nm5/5UMEP7e2VT6aINacOiaHv1iXKGpoBbA8yBkfl+zgAiQXpRA6 rANltqLRwOxIIoBvrVvQPPNmTtMgNRrITdF2nkrk=
Receivedfrom [10.95.198.117] ([10.95.198.117]) by i-0559509f991175267.mta3vrest.sd.prd.sparkpost (ecelerity 5.2.0.76311 r(msys-ecelerity:tags/5.2.0.47)) with REST id 8B/DD-11664-154FD5A6; Mon, 20 Jul 2026 10:11:29 +0000
Tonando.haeberli@leunet.ch
Message-ID<8B.DD.11664.154FD5A6@i-0559509f991175267.mta3vrest.sd.prd.sparkpost>
DateMon, 20 Jul 2026 10:11:29 +0000
Content-Typemultipart/alternative; boundary="_----fu0dzs/rUt9dqgW8gjL92A===_3B/DD-11664-154FD5A6"
MIME-Version1.0
Subject=?utf-8?B?V2lyIGhhYmVuIGJlc2NobG9zc2VuLCBTaWUgbWl0IOKApiB6dSB2?= =?utf-8?B?ZXJ3w7ZobmVuLg==?=
From"Temu" <temu@eu.temuemail.com>
X-GreylistSender passed SPF test, not delayed by milter-greylist-4.6.2 (asterix.imp.ch [0.0.0.0]); Mon, 20 Jul 2026 12:11:29 +0200 (CEST)
X-MS-Exchange-Organization-SCL0
X-Spam-Score-0.118 DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_02,HTML_MESSAGE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_PASS
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1