Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Relay path (1 hop)
  1. 🇺🇸 23.234.79.19 static-23-234-79-19.cust.tzulo.com→a
    2026-07-28 22:11:01
From
=?utf-8?q?Servi=C3=A7o_Informativo?= <gruisigs@cardinal.ch>
To
teste1@afiliadosmarket.site
Date
28.07.2026 22:11:01 CEST
Subject
Configuração de duplo fator atualizada - 2026-07-28
SourceSpamtrap
Authentication
SPF–
DKIM–
Spam score–

Header

X-SPAM-SRCTRAP
Receivedfrom static-23-234-79-19.cust.tzulo.com ([23.234.79.19]:50306) from gruisigs@cardinal.ch Auth: gruisigs@cardinal.ch Scorch666 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.site; Tue, 28 Jul 2026 22:11:01 +0200 (CEST)
X-SpamtrapAuthentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Content-Typemultipart/alternative; boundary="===============1827034623691612864=="
MIME-Version1.0
Subject=?utf-8?q?Configura=C3=A7=C3=A3o_de_duplo_fator_atualizada_-_2026-07-28?=
From=?utf-8?q?Servi=C3=A7o_Informativo?= <gruisigs@cardinal.ch>
Toteste1@afiliadosmarket.site
DateTue, 28 Jul 2026 17:11:01 -0300
Message-ID<178526946119.724405.4754077992948861490@cardinal.ch>
MIME-Version1.0
X-MailerThunderbird/115.0