Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (1 hop)
  1. 🇧🇷 177.180.246.138 b1b4f68a.virtua.com.br→a
    2026-09-18 06:38:06
From
=?utf-8?q?Servi=C3=A7o_Informativo?= <annabel@cardinal.ch>
To
teste1@afiliadosmarket.shop
Date
18.09.2026 06:38:06 CEST
Subject
Monitoramento de perfil: novo login ativo - 2026-09-18
SourceSpamtrap
Authentication
SPF–
DKIM–
Spam score–

Header

X-SPAM-SRCTRAP
Receivedfrom b1b4f68a.virtua.com.br ([177.180.246.138]:39934) from annabel@cardinal.ch Auth: annabel@cardinal.ch jokycywu by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.shop; Fri, 18 Sep 2026 06:38:06 +0200 (CEST)
X-SpamtrapAuthentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Content-Typemultipart/alternative; boundary="===============3679895241053010689=="
MIME-Version1.0
Subject=?utf-8?q?Monitoramento_de_perfil=3A_novo_login_ativo_-_2026-09-18?=
From=?utf-8?q?Servi=C3=A7o_Informativo?= <annabel@cardinal.ch>
Toteste1@afiliadosmarket.shop
DateFri, 18 Sep 2026 01:38:06 -0300
Message-ID<178970628620.1562987.7370200245816097621@cardinal.ch>
MIME-Version1.0
X-MailerThunderbird/115.0