blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (6 hops)
  1. abde08.onmicrosoft.com→CO1PEPF000044F6.mail.protection.outlook.com
    Microsoft · 2025-10-27 21:31:24
  2. CO1PEPF000044F6.namprd21.prod.outlook.com→MW4P222CA0013.outlook.office365.com
    Microsoft · 2025-10-27 21:31:25
  3. MW4P222CA0013.NAMP222.PROD.OUTLOOK.COM→CO6P220MB0498.NAMP220.PROD.OUTLOOK.COM
    Microsoft · 2025-10-27 21:31:25
  4. mail-eastusazhn150120001.outbound.protection.outlook.com→asterix.imp.ch
    ESMTPS · 2025-10-27 21:31:28 · +3s
  5. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
      LMTP · 2025-10-27 21:31:39 · +11s
    • 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-10-27 21:31:39
From
Oral-B Kit – A Gift for UnitedHealthcare Members <frommxhfpaoeknbxceqkv3yv56lz4dw0uqkor@abde08.onmicrosoft.com>
To
thochuli@breitband.ch
Date
27.10.2025 21:26:44 CET
Subject
Smile Bright with UnitedHealthcare
SourceReport
Authentication
SPFfail
DKIM–
Spam score
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
MIME_HTML_ONLY_MULTIMultipart message only has text/html MIME parts
DNS lists
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FROMSender email is commonly abused enduser mail provider
LONGLN_LOW_CONTRASTExcessively long line + hidden text
LONG_INVISIBLE_TEXTLong block of hidden text - bayes poison?
MPART_ALT_DIFFHTML and text parts are different
URI_NOVOWELURI hostname has long non-vowel sequence
1.5

Header

X-SPAM-SRCREPO
Return-Path<frommxhfpaoeknbxceqkv3yv56lz4dw0uqkor@abde08.onmicrosoft.com>
Delivered-Tothochuli@breitband.ch
Receivedfrom asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id 8FuqIqvW/2hWfAMA0cKaAg:P1 (envelope-from <frommxhfpaoeknbxceqkv3yv56lz4dw0uqkor@abde08.onmicrosoft.com>) for <thochuli@breitband.ch>; Mon, 27 Oct 2025 21:31:39 +0100
Receivedfrom asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id 8FuqIqvW/2hWfAMA0cKaAg (envelope-from <frommxhfpaoeknbxceqkv3yv56lz4dw0uqkor@abde08.onmicrosoft.com>) for <thochuli@breitband.ch>; Mon, 27 Oct 2025 21:31:39 +0100
Receivedfrom BL0PR03CU003.outbound.protection.outlook.com (mail-eastusazhn150120001.outbound.protection.outlook.com [IPv6:2a01:111:f403:d900::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id CAE0BC01C4 for <thochuli@breitband.ch>; Mon, 27 Oct 2025 21:31:28 +0100 (CET)
ARC-Seali=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=kr0MJKMIzCpd6poZxfyySrdX/ihIGhk/A1VMvDN8Z46/wEOQmMxLc3vt7lwda5UrdPzHkt4Y2qHtnwDnu/DJOji445pbHX2R0kgB+UARPS4SdiL+iesgaIPoQzrq42wLiDZsCUPxN2UA1hyOiC2sUaESExEgL01UlEmOODQgjZvLWcoFffBmYP91kvGjNpSz/rAyrsoZ0aFiqZPot8RV0m7meX3qB8txinNBzvc5kV9v1bkoG64rTjrTmfavSwahZgSM4OO62VVfytEk0mqKbuBzS0nCu2Fyq339g4/3tFT2SaGOetlQ0wuKmcWUaOGyCRx2Ie94+LWlXHa8047ceA==
ARC-Message-Signaturei=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=/My/x6+g5L7is7Sc0qhablJb/KXCUbPly3exHMUcP/M=; b=Dakytt9GZJPbu/vKHsgPSpKXYv062Xaxu9n+WvBuZKjtqotKJfKOdtbRy/E/XRuaL2S0qggKplNW2c6aV1aOtkjwIQCBUb5IJCmCQ32AXi+/wb8P33Ezdu4UGBa1cY55bje3CQ6RpTz3lRVok8O1vEk7Nt34fo1OCIEXL9yUd0GMXSq6Gs7N9hEzVEdf+/kSNKksavKbG8t/XIujun3cFJFZntwMUrIWy0ActsEcLQeF16768gsZIzBMeg6jXb1hZhs5xDXS7ugRCZ8XVyWsJtIMZ8hDUdhnO81FNw/RBQAE0JgRGj8R+u3JkC4uzO0hjZp0IVqX8wDB6FAhVu+Frg==
ARC-Authentication-Resultsi=1; mx.microsoft.com 1; spf=fail (sender ip is 103.45.245.124) smtp.rcpttodomain=breitband.ch smtp.mailfrom=abde08.onmicrosoft.com; dmarc=none action=none header.from=abde08.onmicrosoft.com; dkim=none (message not signed); arc=none (0)
Receivedfrom MW4P222CA0013.NAMP222.PROD.OUTLOOK.COM (2603:10b6:303:114::18) by CO6P220MB0498.NAMP220.PROD.OUTLOOK.COM (2603:10b6:303:13f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.18; Mon, 27 Oct 2025 20:31:25 +0000
Receivedfrom CO1PEPF000044F6.namprd21.prod.outlook.com (2603:10b6:303:114:cafe::80) by MW4P222CA0013.outlook.office365.com (2603:10b6:303:114::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9253.13 via Frontend Transport; Mon, 27 Oct 2025 20:31:25 +0000
X-MS-Exchange-Authentication-Resultsspf=fail (sender IP is 103.45.245.124) smtp.mailfrom=abde08.onmicrosoft.com; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=abde08.onmicrosoft.com;
Received-SPFFail (protection.outlook.com: domain of abde08.onmicrosoft.com does not designate 103.45.245.124 as permitted sender) receiver=protection.outlook.com; client-ip=103.45.245.124; helo=abde08.onmicrosoft.com;
Receivedfrom abde08.onmicrosoft.com (103.45.245.124) by CO1PEPF000044F6.mail.protection.outlook.com (10.167.241.196) with Microsoft SMTP Server id 15.20.9298.0 via Frontend Transport; Mon, 27 Oct 2025 20:31:24 +0000
DateMon, 27 Oct 2025 21:26:44 +0100
FromOral-B Kit – A Gift for UnitedHealthcare Members <frommxhfpaoeknbxceqkv3yv56lz4dw0uqkor@abde08.onmicrosoft.com>
Tothochuli@breitband.ch
SubjectSmile Bright with UnitedHealthcare
Content-Typemultipart/alternative; boundary="_b03d7926-5315-4462-b66b-97c71a893231_"
Precedencebulk
Message-ID<f13bc2c7-6a6c-4311-9c54-c1f44a1bd5e7@CO1PEPF000044F6.namprd21.prod.outlook.com>
X-EOPAttributedMessage0
X-MS-PublicTrafficTypeEmail
X-MS-TrafficTypeDiagnosticCO1PEPF000044F6:EE_|CO6P220MB0498:EE_
MIME-Version1.0
X-MS-Office365-Filtering-Correlation-Idaf7142e3-23a2-492e-180b-08de1597cc54
X-MS-Exchange-SenderADCheck1
X-MS-Exchange-AntiSpam-Relay0
X-Microsoft-AntispamBCL:0;ARA:13230040|61400799027|34070700014|36860700013|82310400026|69100299015|4022899009|1032899013|376014|586017|2066899003|13003099007|8096899003|16130700020;
X-Microsoft-Antispam-Message-Info=?utf-8?B?eDZsdXoyVk56K2x6MTl4aTNMR1M4c1BJWVJRRXkrOGNMUU4wUGc4R0l4NW5z?= =?utf-8?B?SVVMeG9QSnZ3R1BDOWlYSUJyMG4yUURETy9EVTVyT1NsR3dheFUvTzgwVjFr?= =?utf-8?B?RHJwODFkMVdHWHVGSk9UMUd1RHM5ek9TUUkwdEZiYkd2SENyYjlDV1Zsb2xZ?= =?utf-8?B?VFpiUUJVZC95WHRSQmcwUldFY2d1aWFqd28xeENFOC9MaURVYjJqKzg5M0V0?= =?utf-8?B?UjBNNkRKOFdUeFZET0l3dHJRUXNyWnhQdVlLTVNLTEFpQiswanNYbk5xNFRL?= =?utf-8?B?bnYxM1NnNnVaYnZ2TlJIVW1sYXBpUVlOSEtQcmVrK2tyTDdBSzh4Kzg4WjRr?= =?utf-8?B?LzM5dDBHTWdLdGJ2dVVEQ1lkV0ZnOVJwd0JqTzBOaFI3OEthQzhJc2lWM291?= =?utf-8?B?bi80YkRUTTdPYXF6QXJMdGJpMW5uREI2azhhR2JEUjlOcVMrQ3NvTjhMb2No?= =?utf-8?B?OHhNRUZPUUdlRUVOZmlwa3k4ZW1WRlhVVHlIZVZ4czlhSlRQeWdKMHNKcnlp?= =?utf-8?B?V0FMajc1a3QzODhVL1YzaTFWRkVvSDAwSERsVDRsQkYveFFXSUFKOWxHeFQz?= =?utf-8?B?cHhBUHhwN0pvWk1TM25OU0FrSWE4OS9tcDNTcm43TGRuMzJ4OHBUdThhU2ZP?= =?utf-8?B?R3AvM1hsZmdMeXpLNTl0VFk3T2t3d0ZmTEpKNENGRFJSUWVMNmVTN01BM1Y1?= =?utf-8?B?UjRGRzNMOGNoSUZRcXZlZWNGL3ZWZ1lIcXFNRlZ5ZWdhNmo1OGFtMngzRkh0?= =?utf-8?B?MEgzSGVsWmFTTnliNkN6Yk84eEdPRGduUXFmYmRia1lBK2NrdDBkM21UQ3FM?= =?utf-8?B?WnRDTEI2VmJDL1l2cUNySmsyWVExYUhDc0xyS2EvdytTMlBmSDk5NkFwd2No?= =?utf-8?B?bkY5TTNQejZaamFlU2FSZXAxckYrOHYvd2RuaHhIZXRSeDl3K2RsS3BBVzJj?= =?utf-8?B?TDBORVduclUxQVRUblo4RUQydTJhM2dlMlhYNWkwWWhMQ1hmbDZlWmVEYzBa?= =?utf-8?B?bTZFMi9pNjFlajZwTGg5ZlNaYzNyMzZDK2VmNmpVT1dKQkhaN0FtR1pyVGht?= =?utf-8?B?OWhLeGtQZW1DVWlUcFMvTjF6TSt3VzArMytjY0dJV1RIeFg4MVZvQmdld1g5?= =?utf-8?B?b29Zd2pVVHQ3ZWlDNmpNVVRtOGFBdkViWno1Q2dEMEhQdnhlZVpGSWdOV1kv?= =?utf-8?B?bGt3bk5KK1BheS9qMW5nL3JBMS9ndGlhMndMMS9xMS9iNzVEeE4rRGtrcTI0?= =?utf-8?B?alJMdjR2bkpnQXpBT2FEandqRUo4WitqZDljZ2lBVjI2OHJUdHUzeVFRTWk1?= =?utf-8?B?QUxnRG5kTXpoTHpKTVVseDd5NTlINWRWVXVZV3pTK09HZ2phRnd5SEdqM0lB?= =?utf-8?B?VzBzRVo1dGwzOEhoakt2QjM3WE5RdWtwZDJSbThva3hxc0dRcEdqTDdSSk1W?= =?utf-8?B?UUgvRTA2ZFEwUnNhMFdQdHhvd2hqL2crajZDOTFFQUtaalFtL3piTnZYRk12?= =?utf-8?B?eElGWFhIT05SOEx3WnBzVmxtUHBPbEhEbkMxT3pTbTFic3c4SEdSdEtMMm9J?= =?utf-8?B?SFpDMXpCZm93VnJXVVRkSmN4YVk4NzBpVERESHJrY0NINWMwYjgrTnZsZDJM?= =?utf-8?B?cjF1YUU4RXc2UTdaVEVEYXJQYmlJbDRTNHlyVkR6OVNIdWhRRWt5Ny9kdGFB?= =?utf-8?B?MVEra3dLR3ZIWFc5RHhHZlFxV2V1cnRMaXNGQ0p5MnRhN0Zsamk2TjVCVmsr?= =?utf-8?B?NTJuREVMc1dTaS85N2p0Y2JEdjlzSTFhMks4dVU5dU9zeVJ1NlRvaVErSW5V?= =?utf-8?B?M3U3Q015R3RDNytlQVVnSTExNkpoUzdhZFdBZDRHY0VKMjBjaG9WMmttMThZ?= =?utf-8?B?eE1BR25lVFdaM3NabGoxL1FEc0tHYWh5TWlXWjQ1ZEk4MzlneUhTL1dvMUYz?= =?utf-8?B?dEFMcW8rMWhLZlZ6VndQTXdLSFlVZ2RRQXFjL2Q2ZjhtMTkrTzV1QVcyeXhC?= =?utf-8?Q?93bY+TKMqA9es120brXYKqmgcydlk0=3D?=
X-Forefront-Antispam-ReportCIP:103.45.245.124;CTRY:ES;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:abde08.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(61400799027)(34070700014)(36860700013)(82310400026)(69100299015)(4022899009)(1032899013)(376014)(586017)(2066899003)(13003099007)(8096899003)(16130700020);DIR:OUT;SFP:1501;
X-OriginatorOrgabde08.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime27 Oct 2025 20:31:24.1725 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Idaf7142e3-23a2-492e-180b-08de1597cc54
X-MS-Exchange-CrossTenant-Id12fa89a0-eb44-4945-b397-551efea8062a
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIpTenantId=12fa89a0-eb44-4945-b397-551efea8062a;Ip=[103.45.245.124];Helo=[abde08.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSourceCO1PEPF000044F6.namprd21.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAsAnonymous
X-MS-Exchange-CrossTenant-FromEntityHeaderHybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStampedCO6P220MB0498
X-MS-Exchange-Organization-SCL1
X-Spam-Score1.524 BAYES_00,FREEMAIL_FROM,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,LONGLN_LOW_CONTRAST,LONG_INVISIBLE_TEXT,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,RCVD_IN_SWINOG_WHITE,SPF_HELO_NONE,SPF_PASS,URI_NOVOWEL
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1