blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (4 hops)
  1. userid→server.imgaslabtesting.com
    2025-02-11 21:10:32
  2. 🇺🇸 63.250.60.159 unknown→idefix.imp.ch
    ESMTPS · 2025-02-11 21:28:02 · +17m 30s
  3. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2025-02-11 21:28:12 · +10s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-02-11 21:28:12
From
Support <lws@server.imgaslabtesting.com>
To
oflueck@bman.ch
Date
11.02.2025 21:10:32 CET
Subject
Ihr Spotify-Konto wurde gesperrt – Aktualisieren Sie Ihre Zahlungsmethode!
SourceReport
Authentication
SPFpass
DKIM–
Spam score
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_SIZE_LARGEHTML font size is large
HTML_MESSAGEHTML included in message
DNS lists
RCVD_IN_IMP_SPAM
RCVD_IN_VALIDITY_CERTIFIED_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_RPBL_BLOCKEDADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
Other
AC_BR_BONANZAToo many newlines in a row... spammy template
MPART_ALT_DIFF_COUNTHTML and text parts are different
RDNS_NONEDelivered to internal network by a host with no rDNS
SHOPIFY_IMG_NOT_RCVD_SFYShopify hosted image but message not from Shopify
URIBL_SC_SWINOG
URIBL_SC_SWINOG_TR
URIBL_SC_SWINOG_UR
9.5

Header

X-SPAM-SRCREPO
Return-Path<lws@server.imgaslabtesting.com>
Delivered-Tooflueck@bman.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id IHikItyyq2fCWyQAf9g64g:P1 (envelope-from <lws@server.imgaslabtesting.com>) for <oflueck@bman.ch>; Tue, 11 Feb 2025 21:28:12 +0100
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id IHikItyyq2fCWyQAf9g64g (envelope-from <lws@server.imgaslabtesting.com>) for <oflueck@bman.ch>; Tue, 11 Feb 2025 21:28:12 +0100
Receivedfrom server.imgaslabtesting.com (unknown [63.250.60.159]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id 5E535C00A1 for <oflueck@bman.ch>; Tue, 11 Feb 2025 21:28:02 +0100 (CET)
DMARC-FilterOpenDMARC Filter v1.3.2 idefix.imp.ch 5E535C00A1
Authentication-Resultsidefix.imp.ch; dmarc=fail (p=none dis=none) header.from=server.imgaslabtesting.com
Authentication-Resultsidefix.imp.ch; spf=pass smtp.mailfrom=lws@server.imgaslabtesting.com
Receivedby server.imgaslabtesting.com (Postfix, from userid 33) id 370C97E95D; Tue, 11 Feb 2025 20:10:32 +0000 (UTC)
Tooflueck@bman.ch
Subject=?iso-8859-1?Q?Ihr_Spotify-Konto_wurde_gesperrt_=E2=80=93_Ak?= =?iso-8859-1?Q?tualisieren_Sie_Ihre_Zahlungsmethode!?=
DateTue, 11 Feb 2025 20:10:32 +0000
FromSupport <lws@server.imgaslabtesting.com>
Message-ID<534FwOquOXt2sqvfO2vnJjvL64knsOTUQa3nzPfyW0Y@server.imgaslabtesting.com>
X-MailerPHPMailer 6.0.5 (https://github.com/PHPMailer/PHPMailer)
MIME-Version1.0
Content-Typemultipart/alternative; boundary="b1_534FwOquOXt2sqvfO2vnJjvL64knsOTUQa3nzPfyW0Y"
X-GreylistSender passed SPF test, not delayed by milter-greylist-4.6.2 (idefix.imp.ch [0.0.0.0]); Tue, 11 Feb 2025 21:28:02 +0100 (CET)
X-MS-Exchange-Organization-SCL0
X-Spam-Score9.505 AC_BR_BONANZA,BAYES_00,HTML_FONT_SIZE_LARGE,HTML_MESSAGE,MPART_ALT_DIFF_COUNT,RCVD_IN_IMP_SPAM,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,RDNS_NONE,SHOPIFY_IMG_NOT_RCVD_SFY,SPF_HELO_PASS,SPF_PASS,URIBL_SC_SWINOG,URIBL_SC_SWINOG_TR,URIBL_SC_SWINOG_UR
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1