blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (3 hops)
  1. 🇺🇸 69.169.224.53 b224-53.smtp-out.eu-central-1.amazonses.com→idefix.imp.ch
    ESMTPS · 2024-11-28 10:16:09
  2. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2024-11-28 10:16:18 · +9s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→falbala.imp.ch
      LMTP · 2024-11-28 10:16:18
From
floryfashion <mail@floryfashion.com>
To
erba@zapp.ch
Date
28.11.2024 10:16:08 CET
Subject
【 der 6. zu 100% reduziert 】Gemütliche Kleider, perfekt für den Herbst!
SourceReport
Authentication
SPFpass
DKIMsigned
Spam score
DKIM
DKIM_SIGNEDMessage has a DKIM or DK signature, not necessarily valid
DKIM_VALIDMessage has at least one valid DKIM or DK signature
DKIM_VALID_AUMessage has a valid DKIM or DK signature from author's domain
DKIM_VALID_EFMessage has a valid DKIM or DK signature from envelope-from domain
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_IMAGE_RATIO_06HTML has a low ratio of text to image area
HTML_MESSAGEHTML included in message
HTML_MIME_NO_HTML_TAGHTML-only message, but there is no HTML tag
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H3Good reputation (+3)
RCVD_IN_MSPIKE_WLMailspike good senders
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
HEADER_FROM_DIFFERENT_DOMAINSFrom and EnvelopeFrom 2nd level mail domains are different
SHOPIFY_IMG_NOT_RCVD_SFYShopify hosted image but message not from Shopify
T_REMOTE_IMAGEMessage contains an external image
0.9

Header

X-SPAM-SRCREPO
Return-Path<01070193720e6e93-697add01-c427-42d0-9d3a-df60f2d9bc88-000000@eu-central-1.amazonses.com>
Delivered-Toerba@zapp.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by falbala.imp.ch with LMTP id kD97MuI0SGdGliUAf9g64g:P1 (envelope-from <01070193720e6e93-697add01-c427-42d0-9d3a-df60f2d9bc88-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Thu, 28 Nov 2024 10:16:18 +0100
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id kD97MuI0SGdGliUAf9g64g (envelope-from <01070193720e6e93-697add01-c427-42d0-9d3a-df60f2d9bc88-000000@eu-central-1.amazonses.com>) for <erba@zapp.ch>; Thu, 28 Nov 2024 10:16:18 +0100
Receivedfrom b224-53.smtp-out.eu-central-1.amazonses.com (b224-53.smtp-out.eu-central-1.amazonses.com [69.169.224.53]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 529D5C9292 for <erba@zapp.ch>; Thu, 28 Nov 2024 10:16:09 +0100 (CET)
DMARC-FilterOpenDMARC Filter v1.3.2 idefix.imp.ch 529D5C9292
Authentication-Resultsidefix.imp.ch; dmarc=fail (p=quarantine dis=none) header.from=floryfashion.com
Authentication-Resultsidefix.imp.ch; spf=pass smtp.mailfrom=01070193720e6e93-697add01-c427-42d0-9d3a-df60f2d9bc88-000000@eu-central-1.amazonses.com
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=peuj3ytntcf6xhn2ong6mhvftzdkckmx; d=floryfashion.com; t=1732785368; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; bh=jpqwz6A/XEJBwHXjLgmkCNLIlv5FOjc1o3o3IA+M68A=; b=eC84qjSS5Q+NIEcPhfOF6wOiE7cXlu7H/p7L38imRg+m0tnsh83QQEk5h1KNMeQw iZyvCODZmg2Df1pBvadAJRMl4LteUa5/cGKRQrkgRSRCeOLeSXDuOW5iNKEKAZIH1zL aJG26FVBghA6GTEJy3G5TXGxd3+h1GS/rUfcd57mWhfqrzf/088nxIGCsazTa9us1Gf IZJNQDCZOIxAl6tLdnHBpBeHVDR83ECe/7b3QFlZFlAuOjDiTb3w0GJ8jMYlShcrw2M 6Z6o7ySpkFF765Bzv3X5Ve8LMtnNaDuUthNVQqPEMVr60LMsqFhrHqkR8AnBGzvdJFm G/YFdt1ABQ==
DKIM-Signaturev=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1732785368; h=Date:From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID:Feedback-ID; bh=jpqwz6A/XEJBwHXjLgmkCNLIlv5FOjc1o3o3IA+M68A=; b=O3mDaMYnE93QanZWt7xFblSueJLRQCXGOMDQqtflsGN60cbCDYKJOOmvB9WlZpih L9Jt8rvfAsIlhRVdfGpvX1fcxSIiz30bYx1IqWymmUAsKWTOndO/fK+LS+aSSA/SHqb 2Dd+V2MnmVC8Gu4RBEA3W/P5nPLqmhbW7qPmoOzk=
DateThu, 28 Nov 2024 09:16:08 +0000
Fromfloryfashion <mail@floryfashion.com>
Toerba@zapp.ch
Subject=?UTF-8?Q?=E3=80=90_der_6._zu_100%_reduziert_=E3=80=91Gem=C3=BCtli?= =?UTF-8?Q?che_Kleider,_perfekt_f=C3=BCr_den_Herbst!?=
MIME-Version1.0
Content-Typetext/html; charset=UTF-8
Content-Transfer-Encodingquoted-printable
Message-ID<01070193720e6e93-697add01-c427-42d0-9d3a-df60f2d9bc88-000000@eu-central-1.amazonses.com>
Feedback-ID::1.eu-central-1.Xp5hExUSp7nxbbc7GrK39xQ+uv8QFAx8Ytohp/dmkmQ=:AmazonSES
X-SES-Outgoing2024.11.28-69.169.224.53
X-GreylistSender IP whitelisted by DNSRBL, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Thu, 28 Nov 2024 10:16:09 +0100 (CET)
X-MS-Exchange-Organization-SCL0
X-Spam-Score0.892 BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_IMAGE_RATIO_06,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RCVD_IN_VALIDITY_RPBL_BLOCKED,RCVD_IN_VALIDITY_SAFE_BLOCKED,SHOPIFY_IMG_NOT_RCVD_SFY,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1