blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (6 hops)
  1. abde08.onmicrosoft.com→BL6PEPF00022571.mail.protection.outlook.com
    Microsoft · 2025-10-27 16:26:32
  2. BL6PEPF00022571.namprd02.prod.outlook.com→BL1PR13CA0360.outlook.office365.com
    Microsoft · 2025-10-27 16:26:33
  3. BL1PR13CA0360.namprd13.prod.outlook.com→PH7P220MB1795.NAMP220.PROD.OUTLOOK.COM
    Microsoft · 2025-10-27 16:26:33
  4. mail-westusazhn150120001.outbound.protection.outlook.com→obelix.imp.ch
    ESMTPS · 2025-10-27 16:26:45 · +12s
  5. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.5 obelix.imp.ch→obelix.imp.ch
      LMTP · 2025-10-27 16:26:56 · +11s
    • 🇨🇭 157.161.12.5 obelix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-10-27 16:26:56
From
Oral-B Kit – A Gift for UnitedHealthcare Members <fromfigfaosnognetpvx9hcxpdewmz1kvwf8j@abde08.onmicrosoft.com>
To
chiandetti@eblcom.ch
Date
27.10.2025 16:17:40 CET
Subject
Oral-B FREE
SourceReport
Authentication
SPFfail
DKIM–
Spam score
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
MIME_HTML_ONLY_MULTIMultipart message only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FROMSender email is commonly abused enduser mail provider
LONGLN_LOW_CONTRASTExcessively long line + hidden text
LONG_INVISIBLE_TEXTLong block of hidden text - bayes poison?
MPART_ALT_DIFFHTML and text parts are different
URI_NOVOWELURI hostname has long non-vowel sequence
1.5

Header

X-SPAM-SRCREPO
Return-Path<fromfigfaosnognetpvx9hcxpdewmz1kvwf8j@abde08.onmicrosoft.com>
Delivered-Tochiandetti@eblcom.ch
Receivedfrom obelix.imp.ch ([157.161.12.5]) by tragicomix.imp.ch with LMTP id CBEkIkCP/2h+kAsAGLljUw:P1 (envelope-from <fromfigfaosnognetpvx9hcxpdewmz1kvwf8j@abde08.onmicrosoft.com>) for <chiandetti@eblcom.ch>; Mon, 27 Oct 2025 16:26:56 +0100
Receivedfrom obelix.imp.ch ([157.161.12.5]) by obelix.imp.ch with LMTP id CBEkIkCP/2h+kAsAGLljUw (envelope-from <fromfigfaosnognetpvx9hcxpdewmz1kvwf8j@abde08.onmicrosoft.com>) for <chiandetti@eblcom.ch>; Mon, 27 Oct 2025 16:26:56 +0100
Receivedfrom SJ2PR03CU001.outbound.protection.outlook.com (mail-westusazhn150120001.outbound.protection.outlook.com [IPv6:2a01:111:f403:d800::1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by obelix.imp.ch (Postfix) with ESMTPS id 8036CE378B for <chiandetti@eblcom.ch>; Mon, 27 Oct 2025 16:26:45 +0100 (CET)
ARC-Seali=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=CUx32DLpAcJ1mqu8fx97KpzRhlb/8chEjY+k4xcNJyuSbUEXOJ20pINZlf2WCOa9J9iNT91UaaS0pd9SJMnRXk9DTT0h3KXp+GWsnf7npdr+XPxxB60jEN823vw0z1IMvaM8fFjBb2m/iWWcEUXTB5ySBu4Z6gZ9n0woIibCQpREMfakhyh1YYzWijijJ0ud9yLbtHWHLfBCygIeMnFZmyeNJzMIhN2uG2poN0P6GCvf3Qxkh2ynP8STiV4sg75Q2EG+Wmc1OmVP+c4S8aCNEBWmPRXTmhewYzPxDQYbf/29SMMeY4d/HZjKwXJeFVBmUoa88T8wc7ZYuRLPmx+A6Q==
ARC-Message-Signaturei=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=yfj8NT8LbdO3u6hVF5xHnXTrgGFA0t0Y8j+oKofv9yI=; b=vBDAyhbxUheynhcjwNoxy+HOMRmEFUfNA0gjw3O7poMJGqyn0lo4KEqYlPHsPKlZ5PuNQ729n8uPS8BFBDeeAjaWnZDgd6od64PzwrPBrCuboRmlaoIIfo6TlKgn0OioymSeyfrLY4QvtFDMo0MJJMNlAvNqCb16P+xuFcinsVeNAZlZk+SkyzIYRunWFYCylOjMdcIHQmpTUAJvj2QxGxTB+Q/LjLqiENbTjPiBV3IrYnN1yQCZEwCkvGbnwwA+JkMbzKVwTAaX2VQ9aVL3iS5wgOid8fGGhoo8ZhkmoDJV3D1+7YILDvYu/j10a/lvBPYbHqLMuGUE863UJM/XTg==
ARC-Authentication-Resultsi=1; mx.microsoft.com 1; spf=fail (sender ip is 103.241.67.189) smtp.rcpttodomain=eblcom.ch smtp.mailfrom=abde08.onmicrosoft.com; dmarc=none action=none header.from=abde08.onmicrosoft.com; dkim=none (message not signed); arc=none (0)
Receivedfrom BL1PR13CA0360.namprd13.prod.outlook.com (2603:10b6:208:2c6::35) by PH7P220MB1795.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:318::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.18; Mon, 27 Oct 2025 15:26:33 +0000
Receivedfrom BL6PEPF00022571.namprd02.prod.outlook.com (2603:10b6:208:2c6:cafe::44) by BL1PR13CA0360.outlook.office365.com (2603:10b6:208:2c6::35) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9275.12 via Frontend Transport; Mon, 27 Oct 2025 15:26:33 +0000
X-MS-Exchange-Authentication-Resultsspf=fail (sender IP is 103.241.67.189) smtp.mailfrom=abde08.onmicrosoft.com; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=abde08.onmicrosoft.com;
Received-SPFFail (protection.outlook.com: domain of abde08.onmicrosoft.com does not designate 103.241.67.189 as permitted sender) receiver=protection.outlook.com; client-ip=103.241.67.189; helo=abde08.onmicrosoft.com;
Receivedfrom abde08.onmicrosoft.com (103.241.67.189) by BL6PEPF00022571.mail.protection.outlook.com (10.167.249.39) with Microsoft SMTP Server id 15.20.9275.10 via Frontend Transport; Mon, 27 Oct 2025 15:26:32 +0000
DateMon, 27 Oct 2025 16:17:40 +0100
FromOral-B Kit – A Gift for UnitedHealthcare Members <fromfigfaosnognetpvx9hcxpdewmz1kvwf8j@abde08.onmicrosoft.com>
Tochiandetti@eblcom.ch
SubjectOral-B FREE
Content-Typemultipart/alternative; boundary="_56419b11-ef88-4b13-8859-d663049a46cc_"
Precedencebulk
Message-ID<de2dbeaa-03f4-4f6a-ac45-e776e8583964@BL6PEPF00022571.namprd02.prod.outlook.com>
X-EOPAttributedMessage0
X-MS-PublicTrafficTypeEmail
X-MS-TrafficTypeDiagnosticBL6PEPF00022571:EE_|PH7P220MB1795:EE_
MIME-Version1.0
X-MS-Office365-Filtering-Correlation-Idd05d9c03-3c08-4635-3395-08de156d35ae
X-MS-Exchange-SenderADCheck1
X-MS-Exchange-AntiSpam-Relay0
X-Microsoft-AntispamBCL:0;ARA:13230040|1032899013|4022899009|69100299015|376014|586017|82310400026|61400799027|36860700013|34070700014|13003099007|8096899003|2066899003|16130700020;
X-Microsoft-Antispam-Message-Info=?utf-8?B?WjNFODhZSUI1M2svU3BhelJmRHdSNTdSZGVXaGRubVlrcWp2S3JlM3I1Qkpa?= =?utf-8?B?YlFyYXJROTJPQlRoSGJMZHJYRFdyMFMrUmFzc0VIQ2UzV0RSQ0MxY3FDUFRT?= =?utf-8?B?V3FGSDVsUjJ0azFWbGxKejRDbytId2dRN1dZcTErNnJDUWdwNTJJSlI0cXR5?= =?utf-8?B?Y2NwYlZXYUJkNXA5UFBxd2xGZ2tOODdWV0MxVnkweWpzamtUbTd5eWJmRWZB?= =?utf-8?B?aWRqcDQ2d3o3SXZlZ1pVN3lHaVE3c1NRWlNOUkJTL3hRVVZIRjVrUmNJR2Fu?= =?utf-8?B?amtzc1hrN3AzWVhIdStFaCtwdFJ3YXBXd3ZYZ0JtUFBSUVY5RStxOXEyck11?= =?utf-8?B?anViR0NybDhhY2QyTkQxTHA3Tit2QVpHUW9yUElVR01XR1MvS3JmVFU4UitN?= =?utf-8?B?bXc0R0FOdTFNMlFxWWZQYkIwNlc3NkNwWHV0TmVOa2I5eTVMTk5aZC9DcG9i?= =?utf-8?B?c0lSU3dhVEZIWHN6ZCtPdDBveXV3dzNPd1kycDFWVEtybERsMmxOU1lhZkM4?= =?utf-8?B?Y2xsYVMzM282UEphU0IxRWFDcHRQamRNK0xNbE13aEs0NUdOTnBLdGdDYlRs?= =?utf-8?B?MTgwSFY3YmZFMFF5VGM1SkxTR2pRajVxckRuT1VwY2x2eEpmTmtkL1R5TzRx?= =?utf-8?B?cmE2blFOalRmQmtETDZuNE95Z2U0OUp1RWM5OVZJcXRGVHRtZCtHMmRPSUZU?= =?utf-8?B?bWpjL09wdWFWSFd0VU5ETytkMXAyRFFtK1k3YUxhYThRUnN0Q3JoT0UvWUU0?= =?utf-8?B?SzZra1p5WkIyRWMyVm9qVHF2V2xjRURnYzEzSHFYNzkwUTVsTCtDdU5kSlNY?= =?utf-8?B?RW1GMHRkU3AwSFozOUJ1S25vb0N2cklONXFsNFIwM3BZMHl4aG0rekpJajJB?= =?utf-8?B?RXBSSEgyeEZJT1JSY1lwdmZQMytJamNxSDZyTWFLZkRMVjV2cGlublUyVFlp?= =?utf-8?B?L0R4ZjRSR0dUL0xDb2NaS3BaRHFQZ1pUL1lha3BlRUZIeXhUZ2tLNFhiU3I0?= =?utf-8?B?Z09VS1JWMGU3MUp5S2pFWWZDcDVRUHJCWTNlMFcyak5hQUUxQ2x0WTk1a0hi?= =?utf-8?B?enRXU0JiOGh1bk93TVlpRE55elJvZ0o4UzJWYnpINzdYVE5KNHd6amVMWUhP?= =?utf-8?B?ZUlwam04U1pSUjd0L0wwTUQrUGtTNEprR2s5ZDVQakdnb1dLajFYRFFKLzRT?= =?utf-8?B?NTFmYU12b1JVaWJJaGtjWHY2TGVKVFZsLzhFRUt0QWVqcUs2TDUrNzJUaFow?= =?utf-8?B?RWN2Sk94a0RjeE85TmVuYzJpMThLMmtHMVhCME91WXYxdTRGaUFaNWljY3Nn?= =?utf-8?B?cGZwUUtNN0V3SXNwRHhSTEtYWG5WWW1XYyszL1BSdG56SUMyNzYvWStrUmZL?= =?utf-8?B?SHdvS0JJU0Q5M25sZUM3bXhVSGhqbS9sdFMxbG11RHpML1dDTCtTUlZOdTJn?= =?utf-8?B?NUVtUlpZU0NzSEFMQXhDUkRaVHZDekFKZlF6Z3FCaTUrRDJSQWdtWDh3Z3lN?= =?utf-8?B?OCtMRWNrbUFERFJkd0xJSHYrQUhkaEJSOU02ejFTejdUYktCZWw2Ymh1L0Rp?= =?utf-8?B?Ky9TK09GQkZRRUNab3c2ODhlV1RmdzQyam9WZGZrcnliVmxvMUw1a25qL1lQ?= =?utf-8?B?S0JjUGFJSUt3cTV0NjE4SUZtS01XbHRKTjJvcVNBU1BoaS9aUUtsZGZQeXJs?= =?utf-8?B?MmsyNmxhbklGZFQ1U1dOYXoxRzZzOVdmYkJ5Mk1aZ1MxWjdCMWlNWGZWSWpU?= =?utf-8?B?VVFLZXVXSmN6RUNuNWtOdU1jNnZnQldMQ1g3Q0VBZFpGcmZ1eFpHT3AwUCtJ?= =?utf-8?B?SUQwUk9CNUd3V1pSZDBFZS9CVUFROVN6VUVqM1FDb1V2K2J5RUZHQzQzTzBM?= =?utf-8?B?LzlEUnltQUxaOWFEck84eFpzM0hPODdHQUx4R01CYUoxa2MxNmNMWnppanRz?= =?utf-8?B?Nlh1bSt2SGFYWm1LWTBYVjExSjFzZmM2TzFwNTNrdSsxNy9aRVlGZ1Y2aTZE?= =?utf-8?Q?h8/r4EC0YFd8JOETiahtfyN8WVgOFo=3D?=
X-Forefront-Antispam-ReportCIP:103.241.67.189;CTRY:ES;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:abde08.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1032899013)(4022899009)(69100299015)(376014)(586017)(82310400026)(61400799027)(36860700013)(34070700014)(13003099007)(8096899003)(2066899003)(16130700020);DIR:OUT;SFP:1501;
X-OriginatorOrgabde08.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime27 Oct 2025 15:26:32.6902 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Idd05d9c03-3c08-4635-3395-08de156d35ae
X-MS-Exchange-CrossTenant-Id12fa89a0-eb44-4945-b397-551efea8062a
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIpTenantId=12fa89a0-eb44-4945-b397-551efea8062a;Ip=[103.241.67.189];Helo=[abde08.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSourceBL6PEPF00022571.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAsAnonymous
X-MS-Exchange-CrossTenant-FromEntityHeaderHybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStampedPH7P220MB1795
X-MS-Exchange-Organization-SCL1
X-Spam-Score1.522 BAYES_00,FREEMAIL_FROM,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,LONGLN_LOW_CONTRAST,LONG_INVISIBLE_TEXT,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_SWINOG_WHITE,SPF_HELO_PASS,SPF_PASS,URI_NOVOWEL
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1