blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Sun Sep 06 18:05:30 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:33634) from albator@cardinal.ch Auth: albator@cardinal.ch 770358628704072 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for pnicolien03@gmail.com; Sun, 06 Sep 2026 18:05:00 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <0a1e57fc3adef4f90aa0fd0d09ccd3b57135@cardinal.ch>
From: Crypto kernel <albator@cardinal.ch>
To: pnicolien03@gmail.com
Subject: =?utf-8?B?UmVxdWVzdCAjUEFZTVQtMjcxODM4NTkxODYgcG9zdHBvbmluZyAg4oCUICBw?= =?utf-8?B?cml2YXRlIGhhbmRsaW5nIG5lY2Vzc2FyeQ==?=
Date: Sun, 6 Sep 2026 18:06:22 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="a9034ad307c3ef3417a9bbe015e4e524c6"
X-Priority: 1

Raw body

--a9034ad307c3ef3417a9bbe015e4e524c6
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

FUNDS HAVE BEEN SENT TO YOUR ACCOUNT REQUIRING YOUR APPROVAL https://graph.=
org/Coinbase-Card-Payment-ID-CBS19189015-961-09-01#ZnpMrvWZP ENTER THE DASH=
BOARD=20

--a9034ad307c3ef3417a9bbe015e4e524c6
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Message Incident #Fnd11111111111 expanding  -  in=
tervention required <a href=3D"https://graph.org/Binance-Referral-Payment-n=
otification-BNB207895-52869-09-04#liUdMMg">TAKE OUT THE MONEY</a> </body></=
html>

--a9034ad307c3ef3417a9bbe015e4e524c6--

Decoded body

====================
SUBJECT: Request #PAYMT-27183859186 postponing  —  private handling necessary
====================

======= Decode QP ======
======text/plain======
FUNDS HAVE BEEN SENT TO YOUR ACCOUNT REQUIRING YOUR APPROVAL https://graph.org/Coinbase-Card-Payment-ID-CBS19189015-961-09-01#ZnpMrvWZP ENTER THE DASHBOARD 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Message Incident #Fnd11111111111 expanding  -  intervention required <a href="https://graph.org/Binance-Referral-Payment-notification-BNB207895-52869-09-04#liUdMMg">TAKE OUT THE MONEY</a> </body></html>