blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Wed Jul 29 07:31:15 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:59070) from simu@cardinal.ch Auth: simu@cardinal.ch speed78 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for crick55martines@gmail.com; Wed, 29 Jul 2026 07:31:11 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
From: gclpgqd8jukw64fou3qw1w5l2cxz1 <simu@cardinal.ch>
To: crick55martines@gmail.com
Subject: rsnidqexfzwgc4cflfj8thb2ciiocj
MIME-Version: 1.0
Content-Type: multipart/related; boundary="VGTJZUPYOGX0539R80LN"

Raw body

--VGTJZUPYOGX0539R80LN
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

**simu@cardinal.ch,simu@cardinal.ch,speed78,smtp.cardinal.ch:587**
http://ya.ru=

--VGTJZUPYOGX0539R80LN--

Decoded body

====================
SUBJECT: rsnidqexfzwgc4cflfj8thb2ciiocj
====================

======= Decode QP ======
======text/plain======
**simu@cardinal.ch,simu@cardinal.ch,speed78,smtp.cardinal.ch:587**
http://ya.ru