Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Sun Aug 23 13:09:45 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:37886) from jolapoutre@cardinal.ch Auth: jolapoutre@cardinal.ch frame45006 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for bjrnrogergravdal@yahoo.no; Sun, 23 Aug 2026 13:09:42 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <8a2c65ce02b9939d2e84c4fdd91c2bca9201@cardinal.ch>
From: Settlement vault <jolapoutre@cardinal.ch>
To: bjrnrogergravdal@yahoo.no
Subject: Note Alert #fnd-71586156-926 mounting  requiring  action needed
Date: Sun, 23 Aug 2026 13:09:23 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="a20f46ed219ab0be0da7e7defa3f08a412a7"
X-Priority: 1

Raw body

--a20f46ed219ab0be0da7e7defa3f08a412a7
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Issue #PAYMENT99999999999 rebooking  : requires  closed channel requested h=
ttps://telegra.ph/Coinbase-Card-Payment-ID-CBS40685122-845-08-18#oIpVRNlnKV=
m REQUEST YOUR FUNDS=20

--a20f46ed219ab0be0da7e7defa3f08a412a7
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Generated as your attention +1,112222 _=E2=82=BF =
WIRE PAYMENT for your OK <a href=3D"https://telegra.ph/Binance-Giveaway-tic=
ket-BIN-710410-00-221-08-18#UiOIVbSUk">GET ALL YOUR CRYPTO</a> </body></htm=
l>

--a20f46ed219ab0be0da7e7defa3f08a412a7--

Decoded body

====================
SUBJECT: Note Alert #fnd-71586156-926 mounting  requiring  action needed
====================

======= Decode QP ======
======text/plain======
Issue #PAYMENT99999999999 rebooking  : requires  closed channel requested https://telegra.ph/Coinbase-Card-Payment-ID-CBS40685122-845-08-18#oIpVRNlnKVm REQUEST YOUR FUNDS 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Generated as your attention +1,112222 _â¿ WIRE PAYMENT for your OK <a href="https://telegra.ph/Binance-Giveaway-ticket-BIN-710410-00-221-08-18#UiOIVbSUk">GET ALL YOUR CRYPTO</a> </body></html>