blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

SourcesRaw header sourceRaw body sourceView rendered mail
Relay path (6 hops)
  1. lamblionministries.onmicrosoft.com→BL02EPF0001A104.mail.protection.outlook.com
    Microsoft · 2025-10-22 18:17:52
  2. BL02EPF0001A104.namprd05.prod.outlook.com→MN2PR05CA0040.outlook.office365.com
    Microsoft · 2025-10-22 18:17:49 · -3s (clock skew)
  3. MN2PR05CA0040.namprd05.prod.outlook.com→BY3PR15MB4994.namprd15.prod.outlook.com
    Microsoft · 2025-10-22 18:17:53 · +4s
  4. mail-westus3azhn150120000.outbound.protection.outlook.com→asterix.imp.ch
    ESMTPS · 2025-10-22 18:18:04 · +11s
  5. →IMP ImproWare AG mail infrastructure (2 hops)
    • 🇨🇭 157.161.12.4 asterix.imp.ch→asterix.imp.ch
      LMTP · 2025-10-22 18:18:17 · +13s
    • 🇨🇭 157.161.12.4 asterix.imp.ch→tragicomix.imp.ch
      LMTP · 2025-10-22 18:18:17
From
🦷 Smile with UnitedHealthcare <fromfcdrl3mzrmndbaunk6xlvkkba46azhk1p@lamblionministries.onmicrosoft.com>
To
chiandetti@eblcom.ch
Date
22.10.2025 18:17:01 CEST
Subject
Dental Kit Claim from UnitedHealthcare
SourceReport
Authentication
SPFfail
DKIM–
Spam score
SPF
SPF_HELO_NONESPF: HELO does not publish an SPF Record
SPF_PASSSPF: sender matches SPF record
Bayes
BAYES_00Bayes spam probability is 0 to 1%
HTML
HTML_FONT_LOW_CONTRASTHTML font color similar or identical to background
HTML_MESSAGEHTML included in message
MIME
MIME_HTML_ONLYMessage only has text/html MIME parts
MIME_HTML_ONLY_MULTIMultipart message only has text/html MIME parts
DNS lists
RCVD_IN_SWINOG_WHITE
Other
FREEMAIL_FROMSender email is commonly abused enduser mail provider
FROM_LOCAL_NOVOWELFrom: localpart has series of non-vowel letters
LONGLN_LOW_CONTRASTExcessively long line + hidden text
LONG_INVISIBLE_TEXTLong block of hidden text - bayes poison?
MPART_ALT_DIFFHTML and text parts are different
URI_NOVOWELURI hostname has long non-vowel sequence
2.8

Header

X-SPAM-SRCREPO
Return-Path<fromfcdrl3mzrmndbaunk6xlvkkba46azhk1p@lamblionministries.onmicrosoft.com>
Delivered-Tochiandetti@eblcom.ch
Receivedfrom asterix.imp.ch ([157.161.12.4]) by tragicomix.imp.ch with LMTP id 2PlDIckD+WiksjYA0cKaAg:P1 (envelope-from <fromfcdrl3mzrmndbaunk6xlvkkba46azhk1p@lamblionministries.onmicrosoft.com>) for <chiandetti@eblcom.ch>; Wed, 22 Oct 2025 18:18:17 +0200
Receivedfrom asterix.imp.ch ([157.161.12.4]) by asterix.imp.ch with LMTP id 2PlDIckD+WiksjYA0cKaAg (envelope-from <fromfcdrl3mzrmndbaunk6xlvkkba46azhk1p@lamblionministries.onmicrosoft.com>) for <chiandetti@eblcom.ch>; Wed, 22 Oct 2025 18:18:17 +0200
Receivedfrom PH8PR06CU001.outbound.protection.outlook.com (mail-westus3azhn150120000.outbound.protection.outlook.com [IPv6:2a01:111:f403:d91c::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by asterix.imp.ch (Postfix) with ESMTPS id 418E4C03AE for <chiandetti@eblcom.ch>; Wed, 22 Oct 2025 18:18:04 +0200 (CEST)
ARC-Seali=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=U2BiyAF2xqiTR6igU8qwlSY9ivUcfjOBraKeMiaWwWzebLfxDwPOsvGWsk+FSXXys7uYVjijIuC/PR/P81Mdkjkva42n98g/tkklr/Eau8AZycgfC82phBVdQEBtnY95vhGzYAyhxeLy6zGVCmZA8ofbkVGtn5nJnDHmurX8jQSyGGOB5Pu2LTowjuwddjnBGHZEgaHcmkT6aEO4jdeLVDTrmQo2G+Vimwe+4KHKCZA2PQBcm7CzzH+I4o8If7AxxGHNg/OKB9gexE0cOt698d3NUqVzeekSt6esDdfZ6iYuCcmBQlZ9C0dA4d2X/aDTDWFtkLbcYy1Moj7HsC6kqA==
ARC-Message-Signaturei=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6N9ScqryqnuGadDd/cYJKiidOxbOGFeO3SQe7mnbh58=; b=HS+VODPes/nr8GGAsn6ChpB1EJ5jwgUd17AiYBkAJeMItP0v5BhVCUTOIX0SdwsB8mo+xFpdN5/HvKbBXHscK75FpYwSKzaxRosOYjs6/irrAiZF7HZdKBhjr9p/QEUK1VZy1Rm7e59C7wtxydfdxCf2dXFv3Q5VJh01EELeCLwnARxmmqE0SQB0WNakZfuigvhveVhAckgRdP5CPypvfbrdPmtSxwgMclZc/oAsNWce9ObhYGczFMMjDfHlj/ULwOqG4dezHp0gGDMninWCwv34tKwnotyDUD1mC+sBvzT/3LAr5NQvo05QeeBma0pvKIkzShw543u1wO05ZsSpyQ==
ARC-Authentication-Resultsi=1; mx.microsoft.com 1; spf=fail (sender ip is 185.47.172.86) smtp.rcpttodomain=eblcom.ch smtp.mailfrom=lamblionministries.onmicrosoft.com; dmarc=none action=none header.from=lamblionministries.onmicrosoft.com; dkim=none (message not signed); arc=none (0)
Receivedfrom MN2PR05CA0040.namprd05.prod.outlook.com (2603:10b6:208:236::9) by BY3PR15MB4994.namprd15.prod.outlook.com (2603:10b6:a03:3c9::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.12; Wed, 22 Oct 2025 16:17:53 +0000
Receivedfrom BL02EPF0001A104.namprd05.prod.outlook.com (2603:10b6:208:236:cafe::e6) by MN2PR05CA0040.outlook.office365.com (2603:10b6:208:236::9) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.9253.12 via Frontend Transport; Wed, 22 Oct 2025 16:17:49 +0000
X-MS-Exchange-Authentication-Resultsspf=fail (sender IP is 185.47.172.86) smtp.mailfrom=lamblionministries.onmicrosoft.com; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=lamblionministries.onmicrosoft.com;
Received-SPFFail (protection.outlook.com: domain of lamblionministries.onmicrosoft.com does not designate 185.47.172.86 as permitted sender) receiver=protection.outlook.com; client-ip=185.47.172.86; helo=lamblionministries.onmicrosoft.com;
Receivedfrom lamblionministries.onmicrosoft.com (185.47.172.86) by BL02EPF0001A104.mail.protection.outlook.com (10.167.241.135) with Microsoft SMTP Server id 15.20.9253.7 via Frontend Transport; Wed, 22 Oct 2025 16:17:52 +0000
DateWed, 22 Oct 2025 18:17:01 +0200
From🦷 Smile with UnitedHealthcare <fromfcdrl3mzrmndbaunk6xlvkkba46azhk1p@lamblionministries.onmicrosoft.com>
Tochiandetti@eblcom.ch
SubjectDental Kit – Claim from UnitedHealthcare
Content-Typemultipart/alternative; boundary="_bd7e1785-d172-4174-a753-16c40cafed04_"
Precedencebulk
Message-ID<fba39dd2-2b1e-483f-a3e3-66312ad5258b@BL02EPF0001A104.namprd05.prod.outlook.com>
X-EOPAttributedMessage0
X-MS-PublicTrafficTypeEmail
X-MS-TrafficTypeDiagnosticBL02EPF0001A104:EE_|BY3PR15MB4994:EE_
MIME-Version1.0
X-MS-Office365-Filtering-Correlation-Ide0966826-b9f4-4093-2351-08de11868d5b
X-MS-Exchange-SenderADCheck1
X-MS-Exchange-AntiSpam-Relay0
X-Microsoft-AntispamBCL:0;ARA:13230040|34070700014|1032899013|36860700013|61400799027|4022899009|82310400026|376014|69100299015|2066899003|8096899003|13003099007|16130700020;
X-Microsoft-Antispam-Message-Info=?utf-8?B?YkZMY2VYYWwzNnBGU0VDVjhLVnEwTXJ5R2ZuOS9kVDVCSnpGTFBpK2UxcEFH?= =?utf-8?B?dTMyd29EUmVEUUNEajJHZDIrQ0c1eXJGcDJFNmtUL01pYWNvc0ViN2VranRy?= =?utf-8?B?aEpRVkZxcDZtdEI5c3hTM0IrbUREb243YUJ6S3FDcFZ4Nk5ueWdrV01IUzAy?= =?utf-8?B?K1c1KzU2YUc3WFB1SnNXV3Qyc3JxWlc2K3NmSHY1bGM1WXJENlBDdjZ5WWV0?= =?utf-8?B?OUNwbWFtbnJvUmREM3FSb1lXREl1WkREa0x2M3h4QlVkNnROTkFoKzNCOVpU?= =?utf-8?B?Vmt0dytPUXhQY2JKU3czSFpyYjFLUUpoeDFaMktmUnFvUWFwRjdrYURsWEJU?= =?utf-8?B?QTh0UlE0VmJicHlxYjdKNmU0NUVQdm04bm1FRHVKMXBMNU13MDMrNWk1QjFT?= =?utf-8?B?RmRqVTJsOWVMb0VlckMyMzk1TDhOYUh1RGFkeFgxT09nZG5NMVV2eFlnUGIv?= =?utf-8?B?WWZiTmtQNGE5Z3o3U3lGVkpOampwRTNpUU50VVBjNENFYUU1azVBNEEvczZ2?= =?utf-8?B?bTB0VzBaak42Z2hzWWdnUG9leHBURm1WM1VaQk9CQm5rWVJEYXlFZ25jSjhF?= =?utf-8?B?R2xaZkFkckQ5dGhTUm52c1ZweW1iQmZnV2hrcHF3ZzJtd0wyODlqTmFITTMz?= =?utf-8?B?MWFkMjR5VE5YNjUyTmQ5Q1lRNnFIUW8zemZDdWhEL202WVRiaFJsUDNJeUNW?= =?utf-8?B?SVFzN0huZmtZK0lvVHVIMGZIeDFkSE9WeHNCRTVVekQra0VwbVo0R3VENEtW?= =?utf-8?B?ellmOHhwd0wxUkl4bXdtcmhpdm96WURMSm80aTFvZnJicGZDU1BHU3V6YThF?= =?utf-8?B?dlJCL1VKZk1jOWhwNlRJcXM0cS9CNVVEQWZJRWdRSmVva1k3UDRwZ2FJK3BX?= =?utf-8?B?REJ5VmtSUHlEaWt4a2lvdjc3U3JzQjlTZmw3Y0l0SXI2Rkp1T0NneFJQaGpT?= =?utf-8?B?bGpFTlowQlhXZ2NXbkJJY0Vwa3d3RDFaVXNHVzZxMTlJVnBkNk1Pbi8rRG9S?= =?utf-8?B?bndqakFWZGlFUFFvS3lLRzRESnVGS2tmeGpKVG1PYjJtRUV4WXBtcmRUNEU2?= =?utf-8?B?Z3ZvUjBHSmo5NXMyTGx1djRDV2x5blVKOVdJalplVDAxMTZEbWdtc3FMU3pB?= =?utf-8?B?NjdqVnNCTWhhMHI3L3BIYVZRV3BsbDVSd0NOZlEwK0FQK1NDMGpFYzVpZm9o?= =?utf-8?B?OFo0b3A4LzNLTUxxTWZFT0FuNndKYldGZE55dlI4bEVtQ09sSy9QNFdtbC9G?= =?utf-8?B?eGNScnNmS0hyWHQxRGJEeWZ4VEltdkpOQVlmUW93WnZWMzZWanhTSEpvQmZi?= =?utf-8?B?a21mbVBBdUx5eG5zKzZESkp4dXB5RXBBRHZ5RVF6cnhqcjgrVGtGaVJVa01H?= =?utf-8?B?bk8zVmFlTFBTQWVEN3pmbVdBY3ZVVmJPUktxNWFOSEVyMnFjbVh5Z3pvYjMr?= =?utf-8?B?MlN0ODd5MndkL0svNnBUcjcrWG9WRER3S2RkWFlmTmpmUDlLOHZiamd5STFr?= =?utf-8?B?dGp3RjJiWmxISTBFczk2YlFYSGQxRjVMdmVoVlJZRHcxb29jeTRVUVZoejNR?= =?utf-8?B?cHJzWXcyTW0yQUNKdjJtL0RPeS9UL3llMWhLeGhqOVRYUmFxbGo2UWJzMk5h?= =?utf-8?B?VTFPN1VnZmVWV3kxRWVDVGY3a1FpdTk4cGFpRTI1djgwbFVSdHhaZHdqY29u?= =?utf-8?B?VGQzbFgwaEwxaXZHR1N5dUQxUTJjK1JXSHQ5WjAvQUJEdWk5cUhjTVNvNlpv?= =?utf-8?B?Zm91bEpzYk14ZFp6UCtKZ2RqS3FPUlZ1YmlldDdBVUFkanNZQzlGeHZJcUU5?= =?utf-8?B?K0UyKzNORDFSZlJMSVBCRjlQdmtLbDVmUFp5MVl1eEFYMVE5a3JLQUpHaUlW?= =?utf-8?B?Mkl4UEM1L1p3T3dGaWFoeVd2RWR0Tm0rZTErMUVtRFdiWUJMM1ZRN3pEeXNN?= =?utf-8?B?UlQyQWJNSk9qWGtaVnB4eC9vWnpKKy9UcWtKZ3VweHZYYlova2RxenRlK3hp?= =?utf-8?Q?N9edlnRLZtCRE/e4nyIv2AnkGyQETg=3D?=
X-Forefront-Antispam-ReportCIP:185.47.172.86;CTRY:IT;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:lamblionministries.onmicrosoft.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(34070700014)(1032899013)(36860700013)(61400799027)(4022899009)(82310400026)(376014)(69100299015)(2066899003)(8096899003)(13003099007)(16130700020);DIR:OUT;SFP:1501;
X-OriginatorOrglamblionministries.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime22 Oct 2025 16:17:52.5582 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Ide0966826-b9f4-4093-2351-08de11868d5b
X-MS-Exchange-CrossTenant-Id15427cb5-a35a-45c2-9661-cdd7be70f033
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIpTenantId=15427cb5-a35a-45c2-9661-cdd7be70f033;Ip=[185.47.172.86];Helo=[lamblionministries.onmicrosoft.com]
X-MS-Exchange-CrossTenant-AuthSourceBL02EPF0001A104.namprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAsAnonymous
X-MS-Exchange-CrossTenant-FromEntityHeaderHybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStampedBY3PR15MB4994
X-MS-Exchange-Organization-SCL2
X-Spam-Score2.844 BAYES_00,FREEMAIL_FROM,FROM_LOCAL_NOVOWEL,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,LONGLN_LOW_CONTRAST,LONG_INVISIBLE_TEXT,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MPART_ALT_DIFF,RCVD_IN_SWINOG_WHITE,SPF_HELO_NONE,SPF_PASS,URI_NOVOWEL
X-Scanned-ByMIMEDefang 2.84 on 127.0.1.1