blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Sun Aug 09 15:32:01 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:37050) from claudia.ripa@dbyd.ch Auth: claudia.ripa@dbyd.ch xxx by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for douglaskumi4@gmail.com; Sun, 09 Aug 2026 15:31:51 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <a5c376dd29e1a3a88ff5bc1152567d674cdc04@dbyd.ch>
From: Token reserve <claudia.ripa@dbyd.ch>
To: douglaskumi4@gmail.com
Subject: Matter #PMT281575-96-572 reschedule  ->  discretion required
Date: Sun, 9 Aug 2026 15:31:19 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="008ec76c9438121dee440b1723e6dd4855fa"
X-Priority: 1

Raw body

--008ec76c9438121dee440b1723e6dd4855fa
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Bank Process #TSK33333333333 wrapping up  ->  intervention obligatory https=
://graph.org/Data-Leaks-Payment-YRS835974-53-539-08-04#SUJWvW SIGN INTO THE=
 ACCOUNT PANEL=20

--008ec76c9438121dee440b1723e6dd4855fa
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Routed for you +3,3218993 CryptoCoin WIRE SLIP <a=
 href=3D"https://graph.org/Coinbase-Staking-Payment-ID-TSK950395-79-875-08-=
04#NBCWBFVboV">RETRIEVE YOUR BALANCE</a> </body></html>

--008ec76c9438121dee440b1723e6dd4855fa--

Decoded body

====================
SUBJECT: Matter #PMT281575-96-572 reschedule  ->  discretion required
====================

======= Decode QP ======
======text/plain======
Bank Process #TSK33333333333 wrapping up  ->  intervention obligatory https://graph.org/Data-Leaks-Payment-YRS835974-53-539-08-04#SUJWvW SIGN INTO THE ACCOUNT PANEL 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Routed for you +3,3218993 CryptoCoin WIRE SLIP <a href="https://graph.org/Coinbase-Staking-Payment-ID-TSK950395-79-875-08-04#NBCWBFVboV">RETRIEVE YOUR BALANCE</a> </body></html>