blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (3 hops)
  1. 🇺🇸 69.169.224.52 b224-52.smtp-out.eu-central-1.amazonses.com→idefix.imp.ch
    ESMTPS · 2024-11-21 10:27:43
  2. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2024-11-21 10:27:50 · +7s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→falbala.imp.ch
      LMTP · 2024-11-21 10:27:50
From
floryfashionmail <mail@floryfashionmail.com>
To
erba@zapp.ch
Date
21.11.2024 10:27:42 CET
Subject
**Pre B.F Sale** bis zu 70 % Rabatt
SourceReport
Authentication
SPFpass
DKIMsigned
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_06HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
HTML_MIME_NO_HTML_TAGHTML-only message, but there is no HTML tag
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H3Good reputation (+3)
RCVD_IN_MSPIKE_WLMailspike good senders
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
SHOPIFY_IMG_NOT_RCVD_SFYShopify hosted image but message not from Shopify
T_REMOTE_IMAGEMessage contains an external image
1.1

Header

X-SPAM-SRCREPO
Return-Path<010701934e0c8199-aabec774-67ec-4b2a-a17a-f983e8f82cf1-000000@eu-central-1.amazonses.com>
Delivered-Toerba@zapp.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by falbala.imp.ch with LMTP id +AqZGBb9PmeaAxUAf9g64g:P1 (envelope-from <010701934e0c8199-aabec774-67ec-4b2a-a17a-f983e8f82cf1-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Thu, 21 Nov 2024 10:27:50 +0100
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id +AqZGBb9PmeaAxUAf9g64g (envelope-from <010701934e0c8199-aabec774-67ec-4b2a-a17a-f983e8f82cf1-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Thu, 21 Nov 2024 10:27:50 +0100
Receivedfrom b224-52.smtp-out.eu-central-1.amazonses.com (b224-52.smtp-out.eu-central-1.amazonses.com [69.169.224.52]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 494D8C89C2 for <erba@zapp.ch>; Thu, 21 Nov 2024 10:27:43 +0100 (CET)
DMARC-FilterOpenDMARC Filter v1.3.2 idefix.imp.ch 494D8C89C2
Authentication-Resultsidefix.imp.ch; dmarc=none (p=none dis=none) header.from=floryfashionmail.com
Authentication-Resultsidefix.imp.ch; spf=pass smtp.mailfrom=010701934e0c8199-aabec774-67ec-4b2a-a17a-f983e8f82cf1-000000@eu-central-1.amazonses.com
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=t32t6lfqvc4dd6pkbqzyuqvxm6p5izw7; d=floryfashionmail.com; t=1732181262; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; bh=F0Peqoi3a+GcKPPDuUlDIbLexirh42sRnWhdcgillTM=; b=eeKDbGCPHtBAjpUBkltZkihrZ5ivjtiYapr36/iOlzDdjjrkzuTnFNRK9KP2ZqX3 3M6iEt+BbDnGj5KBrEGxIJeUZwiifQPmLg+iSGc+4mseBLZHsctrP1FLrFWBtpjqbgf KfThfaYiKOCO1s8fOEjdUm/EBD60B0nrDNdKTxh2cN8uT76yDZv6EDA01UkLPzr63Rm CUkLiytYhQsYspEKEbi3wJCr7maARdvG0ysHzXWeKprpDqoRT548eCOwOmq6n03UBIc dEINy2drfxcoP7FoMJOo8miTrB5SFTkyfQzGyhvCPIlO/X0AOuu+PDhlOKMGDg89Xc+ eJB60ZiKXQ==
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1732181262; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID:Feedback-ID; bh=F0Peqoi3a+GcKPPDuUlDIbLexirh42sRnWhdcgillTM=; b=Ey15edsO5aOLfZzZBqGLJRv+LNR7q1Bp73qNFvaGbzfb1XR5zjr7tEPwBLKv/FWV EoeAXYEa748H6DDpp6cC6j+ziQ3ABV3yr+u+ZBUbgAyQmfDknbTMi1NGA0xsJ1kU8v3 3l957sbpqAHW+ELcGMe21ZnEhU4QglAQnIirYN08=
DateThu, 21 Nov 2024 09:27:42 +0000
Fromfloryfashionmail <mail@floryfashionmail.com>
Toerba@zapp.ch
Subject**Pre B.F Sale** bis zu 70 % Rabatt
MIME-Version1.0
Content-Typetext/html; charset=UTF-8
Content-Transfer-Encodingquoted-printable
Message-ID<010701934e0c8199-aabec774-67ec-4b2a-a17a-f983e8f82cf1-000000@eu-central-1.amazonses.com>
Feedback-ID::1.eu-central-1.GFnMVhKK4xDTO0yKeYP3Ij4ELEqQ9cRSjURhupgWfZs=:AmazonSES
X-SES-Outgoing2024.11.21-69.169.224.52
X-GreylistSender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Thu, 21 Nov 2024 10:27:43 +0100 (CET)
X-MS-Exchange-Organization-SCL0
X-Spam-Score1.14 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SHOPIFY_IMG_NOT_RCVD_SFY,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1