blacklist.imp.ch

Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Wed Sep 23 09:19:16 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:54092) from info@gasmobil-ag.ch Auth: info@gasmobil-ag.ch pkqf7ft by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for curtisreynoldsreynolds@gmail.com; Wed, 23 Sep 2026 09:19:08 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <a8a0e9438fe9c3cc0fa5e1f1c50038155c44@gasmobil-ag.ch>
From: Blockchain gateway <info@gasmobil-ag.ch>
To: curtisreynoldsreynolds@gmail.com
Subject: =?utf-8?B?SGVhZHMgdXAg8J+SsCArMzgsODI0NCwzMyBVU0Qg8J+Sqw==?=
Date: Wed, 23 Sep 2026 09:19:07 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="88eea70dc1a78d8241ebafbf8b4e76bc12d0"
X-Priority: 1

Raw body

--88eea70dc1a78d8241ebafbf8b4e76bc12d0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Processed for your approval +8.989999  BTC FINANCIAL OPERATION needs author=
ization https://telegra.ph/Coinbase-Card-Payment-ID-CBS38084255-138-09-17#W=
XzwyZvTUTy RETRIEVE YOUR OWN PAYOUTS=20

--88eea70dc1a78d8241ebafbf8b4e76bc12d0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Case #PAYMT-222222-22-222 rebooking  : requires  =
private handling necessary <a href=3D"https://telegra.ph/Coinbase-Staking-P=
ayment-ID-TASK953480-64665-09-22#EGmyYopnEX">WITHDRAW THE BTC</a> </body></=
html>

--88eea70dc1a78d8241ebafbf8b4e76bc12d0--

Decoded body

====================
SUBJECT: Heads up 💰 +38,8244,33 USD 💫
====================

======= Decode QP ======
======text/plain======
Processed for your approval +8.989999  BTC FINANCIAL OPERATION needs authorization https://telegra.ph/Coinbase-Card-Payment-ID-CBS38084255-138-09-17#WXzwyZvTUTy RETRIEVE YOUR OWN PAYOUTS 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Case #PAYMT-222222-22-222 rebooking  : requires  private handling necessary <a href="https://telegra.ph/Coinbase-Staking-Payment-ID-TASK953480-64665-09-22#EGmyYopnEX">WITHDRAW THE BTC</a> </body></html>