blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (6 hops)
  1. successacademy3.onmicrosoft.com→BL02EPF00021F6D.mail.protection.outlook.com
    Microsoft · 2025-10-28 00:08:34
  2. BL02EPF00021F6D.namprd02.prod.outlook.com→MN0PR02CA0008.outlook.office365.com
    Microsoft · 2025-10-28 00:08:35
  3. MN0PR02CA0008.namprd02.prod.outlook.com→IA0PPFC4D2A1900.namprd18.prod.outlook.com
    Microsoft · 2025-10-28 00:08:35
  4. mail-southcentralusazhn150120000.outbound.protection.outlook.com→idefix.imp.ch
    ESMTPS · 2025-10-28 00:08:38 · +3s
  5. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.6 idefix.imp.ch→idefix.imp.ch
      LMTP · 2025-10-28 00:08:49 · +11s
    • 🇨🇭 157.161.12.6 idefix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-10-28 00:08:49
From
Oral-B Kit – A Gift for UnitedHealthcare Members <fromdedhrgtnwmrsmsv37ajiggbxk7q36tdmv@successacademy3.onmicrosoft.com>
To
bischi@eblcom.ch
Date
28.10.2025 00:00:50 CET
Subject
Claim Your Oral-B Bonus Gift
SourceReport
Authentication
SPFfail
DKIM–
Spam score
SPF
SPF_HELO_PASSSPF: HELO matches SPF record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
MIME_HTML_ONLY_MULTIMultipart message only has text/html MIME parts
DNS lists
RCVD_IN_DNSWL_NONESender listed at https://www.dnswl.org/, no trust
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FROMSender email is commonly abused enduser mail provider
FROM_LOCAL_NOVOWELFrom: localpart has series of non-vowel letters
LONGLN_LOW_CONTRASTExcessively long line + hidden text
LONG_INVISIBLE_TEXTLong block of hidden text - bayes poison?
MPART_ALT_DIFFHTML and text parts are different
1.5

Header

X-SPAM-SRCREPO
Return-Path<fromdedhrgtnwmrsmsv37ajiggbxk7q36tdmv@successacademy3.onmicrosoft.com>
Delivered-Tobischi@eblcom.ch
Receivedfrom idefix.imp.ch ([157.161.12.6]) by tragicomix.imp.ch with LMTP id yFZRMIH7/2j1tB0Af9g64g:P1 (envelope-from <fromdedhrgtnwmrsmsv37ajiggbxk7q36tdmv@successacademy3.onmicrosoft.com>) for <bischi@eblcom.ch>; Tue, 28 Oct 2025 00:08:49 +0100
Receivedfrom idefix.imp.ch ([157.161.12.6]) by idefix.imp.ch with LMTP id yFZRMIH7/2j1tB0Af9g64g (envelope-from <fromdedhrgtnwmrsmsv37ajiggbxk7q36tdmv@successacademy3.onmicrosoft.com>) for <bischi@eblcom.ch>; Tue, 28 Oct 2025 00:08:49 +0100
Receivedfrom SN4PR2101CU001.outbound.protection.outlook.com (mail-southcentralusazhn150120000.outbound.protection.outlook.com [IPv6:2a01:111:f403:d90f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by idefix.imp.ch (Postfix) with ESMTPS id E278EC022A for <bischi@eblcom.ch>; Tue, 28 Oct 2025 00:08:38 +0100 (CET)
ARC-Seali=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=gBlaWSveel5Rw12VLQ/MYN1VAmumSRayp3K+04AlZcUKRdjkwWSqAowFxK+OqngALD0d3rvkbvEeUU08VRhxK3I80ZQ3cB73ccFj716sYaPxx6fYyeSFpkfADorzYjjclQH4r9pfeU8iJg9bmrEU8dgg7D2mRY2eVuiLi8xwDZZ3dUDaWYcfFz2MPKzO5HF8+T6XTpnlxS+RV2+tZ079mWRbNGtBOfPkRVS7b2QACVEH+9u+iInC5bc3FsAo0xq3jKNjESnphb1TZIk9/kNUdQLQXgC3sR/2zfAQu8c7c6Ns0ZPYFmgJXoS+1JZz6FAtQb//X3SnAM3PZezXl68EzQ==
ARC-Message-Signaturei=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rAKWPDkb8bWQEeuHf8jDo9r0idzaNPPgbuZqT0HO55c=; b=WeACEKHin69GhPBGtIHSlvF1hhlFJn3dsswO+WkkxkY19bdBJWSBi0MIS/Giq2g0+BLqaMht45SMjoT3+4qF1zFgaRZOfy0z5LLhhiGjJAdC6/1pZm0OzgD/OB6WrZLKPS92xRYRviAGjijqJcea4UVvE9S5I8FZ4hhGtV0ztJx51ymsHjn4S5jJM/lx6af92ueunf+D8CyJ8VKgZ7dDJbL0xL0HXPFdxcVO7Kes9UvCKeEtchvfciqeKzVyMshOPmU044k+MY16geHDLGbZHD21GG9lq0xkKBg25XykKef3wCHLB5T7HX1BqDl4iVGiCcJ7cz5V7wLfSA7+BSNTNg==
ARC-Authentication-Resultsi=1; mx.microsoft.com 1; spf=fail (sender ip is 103.45.245.124) smtp.rcpttodomain=eblcom.ch smtp.mailfrom=successacademy3.onmicrosoft.com; dmarc=none action=none header.from=successacademy3.onmicrosoft.com; dkim=none (message not signed); arc=none (0)
Receivedfrom MN0PR02CA0008.namprd02.prod.outlook.com (2603:10b6:208:530::10) by IA0PPFC4D2A1900.namprd18.prod.outlook.com (2603:10b6:20f:fc04::c3e) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.18; Mon, 27 Oct 2025 23:08:35 +0000
Receivedfrom BL02EPF00021F6D.namprd02.prod.outlook.com (2603:10b6:208:530:cafe::b3) by MN0PR02CA0008.outlook.office365.com (2603:10b6:208:530::10) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9253.19 via Frontend Transport; Mon, 27 Oct 2025 23:08:35 +0000
X-MS-Exchange-Authentication-Resultsspf=fail (sender IP is 103.45.245.124) smtp.mailfrom=successacademy3.onmicrosoft.com; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=successacademy3.onmicrosoft.com;
Received-SPFFail (protection.outlook.com: domain of successacademy3.onmicrosoft.com does not designate 103.45.245.124 as permitted sender) receiver=protection.outlook.com; client-ip=103.45.245.124; helo=successacademy3.onmicrosoft.com;
Receivedfrom successacademy3.onmicrosoft.com (103.45.245.124) by BL02EPF00021F6D.mail.protection.outlook.com (10.167.249.9) with Microsoft SMTP Server id 15.20.9275.10 via Frontend Transport; Mon, 27 Oct 2025 23:08:34 +0000
DateTue, 28 Oct 2025 00:00:50 +0100
FromOral-B Kit – A Gift for UnitedHealthcare Members <fromdedhrgtnwmrsmsv37ajiggbxk7q36tdmv@successacademy3.onmicrosoft.com>
Tobischi@eblcom.ch
SubjectClaim Your Oral-B Bonus Gift
Content-Typemultipart/alternative; boundary="_61e56b1e-aeb9-4bed-a650-c8b0d38e9c74_"
Precedencebulk
Message-ID<1b6de622-d4d5-4312-9e97-a221da513375@BL02EPF00021F6D.namprd02.prod.outlook.com>
X-EOPAttributedMessage0
X-MS-PublicTrafficTypeEmail
X-MS-TrafficTypeDiagnosticBL02EPF00021F6D:EE_|IA0PPFC4D2A1900:EE_
MIME-Version1.0
X-MS-Office365-Filtering-Correlation-Id86c376f8-90eb-421f-2d3e-08de15adc100
X-MS-Exchange-SenderADCheck1
X-MS-Exchange-AntiSpam-Relay0
X-Microsoft-AntispamBCL:0;ARA:13230040|61400799027|376014|69100299015|82310400026|36860700013|34070700014|1032899013|4022899009|2066899003|8096899003|13003099007|16130700020;
X-Microsoft-Antispam-Message-Info=?utf-8?B?L1hwL29iTVhrUzRhSjEzb1o3TkJEVjdVc2dROVQxa1VrNldFNithanF5clVQ?= =?utf-8?B?MHR5eis5amcxMUUyT3NBYXdsUjlqS2VpZ284MVN4MW94Mmx4TUpTRmNEK2Ev?= =?utf-8?B?Q3FHalRJdkQ2a3B3REc2U2V3TEJqZlZwcnRDV1FRalBreS85WHdpSkpSTjRB?= =?utf-8?B?aHFHNGFTVEFwZnFuTnl2L1dYWVBxZmt1MDVITU1PTUpmWHBwOTlKTzYyR0hO?= =?utf-8?B?TU52d1pBU0E3THdlTGRhV09iTVg1S2cvM3E1eGhOSDJNdjZJVTczRDk3V0o5?= =?utf-8?B?VlVWaDJuNmlpb01CcGZuYTJNaWxjZXZhbFVYSGxnbUxmbFRvSmNnL1RiZnNC?= =?utf-8?B?NVBITFFmSkVqaUtmRzlMWWhlVnFLcXRrc3hDZDIycWllRmEvdUtsa2lyWHJX?= =?utf-8?B?NDBSdExwNjRCN0hUc3lCUk9kZjVSNURPRHZURC9KKzRqZzgreTRVR3JNVzl2?= =?utf-8?B?SFJlVzc4bVZ2RC9RWXlxbnZOZVdhYytyd0xMRXZUUzlxRjE3dUxzWmFCbUYw?= =?utf-8?B?czRWS24rcFE1ZEU0cDM1Z1NDMkZvYkRkM0pxQmg3N0hLNW1rRjlEVVZSMUVL?= =?utf-8?B?UVlwNXVDR3YvVTRGbjllVk4wMHNIaTdrN1ZOWFNLMmVMQnIrVG5NaS9ub0NI?= =?utf-8?B?ZkdzaDNoSFIwM3BiY3JpRXVRMDFydktVWEYzbWdMM0FidmtjVTBGcFNwWCtE?= =?utf-8?B?SEFkckJPQit1d0E4Y3EvY3duZml3VUJKeFRsRkZiR3NzL0lINktGOTJackll?= =?utf-8?B?SWFLVGQvYXV3Um94NGNzRjlMS3labVMxNWxxckNzb2RtdGg3OVBOM1FlMDV3?= =?utf-8?B?NHFKeG1ubWptSW5hNzFZMlZyR1ZIRGxkbjBWcWJvUG9lOUxYM2NTdnl3L3NQ?= =?utf-8?B?RTFMcXBaWE01cnc2a0UyQ3RibWpWL3FscHUvL0dGaWJRVDZRYmxCT2tnNUZC?= =?utf-8?B?a3VjemlqNE5aVGwzajFRc1RrbVVhSTJtdGttd3kvM1ZBNTl3NGZTanNrVkVO?= =?utf-8?B?Ty9Bd0llQ1h5djZnQzFtcjQ0M3pVRU1ydk1vR0k0aVFVdFdEWkswdW04T0JJ?= =?utf-8?B?VG1XR3hSUXpHUTV3bkowYjFGV3R0ZktUMWJxc0p6L3V3NzNsU09lWXAxT0Nx?= =?utf-8?B?OTBxUnNMVjF6TjFCV21DSXdrTitrWGZ2QlRDK25DUUtCd3pNRFpSU1I1aWZN?= =?utf-8?B?RWVMbzdVbUdlODlmeE9WS0wxRFVEVTFsamJwS1JoMGduVDFSNzVtVEVGa1p1?= =?utf-8?B?NjNaRXV5MFBLcnBlZlI4REFyekJHa1hEN3lkQWVDb0VSM0dXYTZjMnhncHRh?= =?utf-8?B?QXBTN0VWMVFtMGhRMk9DWXlDODluZVFlaEFmTFFJSWpNQXFFK253WndkWWNm?= =?utf-8?B?MmFwS09pbVhkTGJzUGxVVWsySWdmZWxhNzRhNVFTTi8xVmNIZEZjamtGM3NM?= =?utf-8?B?UnpLcEx6UVFhQW1aT0JZamNadlc1Y3dDa1FyVkZqeExVdGg2NVNldDJxektw?= =?utf-8?B?Y2VXTUQ2M3Fnd3lLWnNuazRkL2tJL21YWWZFRGduL0pTQ3pyVElrZmJzb1E1?= =?utf-8?B?a0p0US82eEFvZXVhWEhLOWZTNGNJaFloWVhxejBUZWdzYXVIdmFXV2JSR3Rq?= =?utf-8?B?UCttZnZEUzRQNHBralZmZEFTaUhJSmxIbGZUai9zRzU5Z2xyRGRiQXBoa21K?= =?utf-8?B?Q2NodTVNeE9YWURjLy8xTUE3SlVWS1ZlWEw5QmpPWjNnT21FNjRwWEwxNHhJ?= =?utf-8?B?UGloVFVET0ZNRnUwcUZHbjdLSDlvQndyL1Y4SlFUNW1rVmE5TlN1ZmJkbkh5?= =?utf-8?B?K2w3eUZjL0VOYUxtaEQ5dzRHSk5SYmZ5dE04b3ZCRkF5WUJXMzdNOWRKWnd1?= =?utf-8?B?eTBmSzJrL0hRTTJzSkRxa3FUeEgydjNHeVdRbm80T2VzaDNHbHdBNkFvdERa?= =?utf-8?B?eW5PRGJEUnNmbmFyUHhRK1h4eFR4a3lPYU1vTVBRS3Q4Q2dyU3ArcnlJUWIy?= =?utf-8?Q?7BGOrT2Nm7mGvGa6+yNSSUf57vMnpc=3D?=
X-Forefront-Antispam-ReportCIP:103.45.245.124;CTRY:ES;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:successacademy3.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(61400799027)(376014)(69100299015)(82310400026)(36860700013)(34070700014)(1032899013)(4022899009)(2066899003)(8096899003)(13003099007)(16130700020);DIR:OUT;SFP:1501;
X-OriginatorOrgsuccessacademy3.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime27 Oct 2025 23:08:34.2195 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id86c376f8-90eb-421f-2d3e-08de15adc100
X-MS-Exchange-CrossTenant-Id2d467d24-adea-45f7-af4d-02719a102aa8
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIpTenantId=2d467d24-adea-45f7-af4d-02719a102aa8;Ip=[103.45.245.124];Helo=[successacademy3.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSourceBL02EPF00021F6D.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAsAnonymous
X-MS-Exchange-CrossTenant-FromEntityHeaderHybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStampedIA0PPFC4D2A1900
X-MS-Exchange-Organization-SCL2
X-Spam-Score1.522 BAYES_00,FREEMAIL_FROM,FROM_LOCAL_NOVOWEL,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,LONGLN_LOW_CONTRAST,LONG_INVISIBLE_TEXT,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,RCVD_IN_DNSWL_NONE,RCVD_IN_SWINOG_WHITE,SPF_HELO_PASS,SPF_PASS
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1