Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Sat Oct 17 10:56:52 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:55842) from chester@cardinal.ch Auth: chester@cardinal.ch raub3tier by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for boguslawrebecki@gmail.com; Sat, 17 Oct 2026 10:56:45 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <275cb01bef2e010a2c064ff4e2062d3827c20a@cardinal.ch>
From: Settlement vault <chester@cardinal.ch>
To: boguslawrebecki@gmail.com
Subject: Bank Operation #TSK66666666666 finishing  =>  action obligatory 
Date: Sat, 17 Oct 2026 10:56:38 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="a00f46ed1cddf7f95af0a9e034f1c5e4276a"
X-Priority: 1

Raw body

--a00f46ed1cddf7f95af0a9e034f1c5e4276a
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Banking Procedure #TSKM22222222222 finalizing  ->  intervention requested  =
https://telegra.ph/Coinbase-Payment-CB74571964-503-10-15 ACCESS THE DASHBOA=
RD=20

--a00f46ed1cddf7f95af0a9e034f1c5e4276a
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Bank Task #TSKM-333333-33-333 terminating  :  par=
ticipation requested  <a href=3D"https://telegra.ph/BTC-Mining-Payment-ID-B=
TC1-954689-46-426-10-13#ZNZzqm">TAKE OUT YOUR ASSETS</a> </body></html>

--a00f46ed1cddf7f95af0a9e034f1c5e4276a--

Decoded body

====================
SUBJECT: Bank Operation #TSK66666666666 finishing  =>  action obligatory 
====================

======= Decode QP ======
======text/plain======
Banking Procedure #TSKM22222222222 finalizing  ->  intervention requested  https://telegra.ph/Coinbase-Payment-CB74571964-503-10-15 ACCESS THE DASHBOARD 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Bank Task #TSKM-333333-33-333 terminating  :  participation requested  <a href="https://telegra.ph/BTC-Mining-Payment-ID-BTC1-954689-46-426-10-13#ZNZzqm">TAKE OUT YOUR ASSETS</a> </body></html>