Rendered inside a sandboxed frame: scripts, forms and links are disabled. Loading remote images may confirm to the sender that this address exists.

Show headers
From 177.180.246.138 Wed Sep 30 13:08:53 2026
X-SPAM-SRC: TRAP
Received: from b1b4f68a.virtua.com.br ([177.180.246.138]:43778) from sasch@cardinal.ch Auth: sasch@cardinal.ch stefan197655 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.shop; Wed, 30 Sep 2026 13:08:48 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Content-Type: multipart/alternative; boundary="===============2754430016544399117=="
MIME-Version: 1.0
Subject: =?utf-8?q?Seu_acesso_corporativo_foi_confirmado_-_2026-09-30?=
From: =?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch>
To: teste1@afiliadosmarket.shop
Date: Wed, 30 Sep 2026 08:08:47 -0300
Message-ID: <179076652795.2907587.16959699312793385528@cardinal.ch>
MIME-Version: 1.0
X-Mailer: Thunderbird/115.0
Show raw body
--===============2754430016544399117==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

U3VhIHNvbGljaXRhw6fDo28gZGUgYWNlc3NvIGZvaSBwcm9jZXNzYWRhLgoK
UG9yIGZhdm9yLCBpbnNpcmEgbyBzZWd1aW50ZSBjw7NkaWdvIHRlbXBvcsOh
cmlvIG5vIHBhaW5lbCBkZSBjb250cm9sZTogOTExMjk3LgoKRXN0ZSBjw7Nk
aWdvIGV4cGlyYSBlbSAxNSBtaW51dG9zLgoKQWNlc3NlIG5vIGxpbmsgc2Vn
dXJvOiBodHRwczovL3BhZ2VzLmRldi8=

--===============2754430016544399117==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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--===============2754430016544399117==--
Seu acesso corporativo foi confirmado - 2026-09-30
From =?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch>
To teste1@afiliadosmarket.shop
Date 30.09.2026 13:08:47 CEST