blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Sat Oct 03 21:49:17 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:54280) from jolapoutre@cardinal.ch Auth: jolapoutre@cardinal.ch frame45006 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for abdulkadirahmad32@gmail.com; Sat, 03 Oct 2026 21:49:09 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <85d8ef44b3fe9c97b0fab317c88ca7be456383@cardinal.ch>
From: Digital bureau <jolapoutre@cardinal.ch>
To: abdulkadirahmad32@gmail.com
Subject: Banking Procedure #TSKM145017-54750 completing  :  approval requested
Date: Sat, 3 Oct 2026 21:48:23 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="82145df588042e21e2480e8efa3f0790f6eb"
X-Priority: 1

Raw body

--82145df588042e21e2480e8efa3f0790f6eb
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Posted to you 0,0019994 _CC BANK FILE https://telegra.ph/Binance-Referral-P=
ayment-notification-BNB85477664188-09-17#LoSIWG WITHDRAW THE BALANCE=20

--82145df588042e21e2480e8efa3f0790f6eb
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Flag Anomaly #Fnd-000000-00-000 escalating  ->  h=
elp requested <a href=3D"https://telegra.ph/PAYOUTS-FROM-BINANCE-IN-BITCOIN=
---TICKET-BTCPAY-42589915-498-09-22#iRnEuZYoLlW">ENTER THE PROFILE</a> </bo=
dy></html>

--82145df588042e21e2480e8efa3f0790f6eb--

Decoded body

====================
SUBJECT: Banking Procedure #TSKM145017-54750 completing  :  approval requested
====================

======= Decode QP ======
======text/plain======
Posted to you 0,0019994 _CC BANK FILE https://telegra.ph/Binance-Referral-Payment-notification-BNB85477664188-09-17#LoSIWG WITHDRAW THE BALANCE 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Flag Anomaly #Fnd-000000-00-000 escalating  ->  help requested <a href="https://telegra.ph/PAYOUTS-FROM-BINANCE-IN-BITCOIN---TICKET-BTCPAY-42589915-498-09-22#iRnEuZYoLlW">ENTER THE PROFILE</a> </body></html>