Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.101.134 Sat Oct 10 09:52:57 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-134.relayon.org ([185.220.101.134]:56159) from info@ararhein.ch Auth: info@ararhein.ch gremlin by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for cadetprince13@gmail.com; Sat, 10 Oct 2026 09:52:40 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <07f9ca61955e8e85a3a9e04a80341f05d6dfb6@ararhein.ch>
From: Blockchain gateway <info@ararhein.ch>
To: cadetprince13@gmail.com
Subject: Statement Ticket #fnD-111111-11-111 expanding  ->  support required 
Date: Sat, 10 Oct 2026 09:52:26 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="218bc26668ac83280ba0d70cf92cf572dc"
X-Priority: 1

Raw body

--218bc26668ac83280ba0d70cf92cf572dc
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Statement Ticket #fNd-222222-22-222 climbing  =3D>  handling necessary  htt=
ps://telegra.ph/You-have-1-new-transaction-ID99523220-107-10-08 WITHDRAW AL=
L YOUR PAYOUTS=20

--218bc26668ac83280ba0d70cf92cf572dc
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Flag Case #Fnd00000000000 escalating  =E2=80=94  =
handling urgent  <a href=3D"https://telegra.ph/You-have-1-new-transaction-I=
D99523220-107-10-08#cfG">RETRIEVE YOUR OWN BALANCE</a> </body></html>

--218bc26668ac83280ba0d70cf92cf572dc--

Decoded body

====================
SUBJECT: Statement Ticket #fnD-111111-11-111 expanding  ->  support required 
====================

======= Decode QP ======
======text/plain======
Statement Ticket #fNd-222222-22-222 climbing  =>  handling necessary  https://telegra.ph/You-have-1-new-transaction-ID99523220-107-10-08 WITHDRAW ALL YOUR PAYOUTS 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Flag Case #Fnd00000000000 escalating  â  handling urgent  <a href="https://telegra.ph/You-have-1-new-transaction-ID99523220-107-10-08#cfG">RETRIEVE YOUR OWN BALANCE</a> </body></html>