Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Header
From 185.220.100.245 Tue Jul 21 11:08:48 2026 X-SPAM-SRC: TRAP Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:57742) from info@ararhein.ch Auth: info@ararhein.ch gremlin by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for hacolp111@gmail.com; Tue, 21 Jul 2026 11:08:34 +0200 (CEST) X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap. Message-ID: <002960cb3e674d4162c88a958144585369ac@ararhein.ch> From: Katherine <info@ararhein.ch> To: hacolp111@gmail.com Subject: Reply: 7/21/2026 Banking Procedure #TASK-58085538-945 terminating - action required Date: Tue, 21 Jul 2026 11:08:43 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-Priority: 1
Raw body
11:08:43 AM Task #PAYMENT-333333-33-333 delay â restricted access required https://telegra.ph/Verify-your-Coinbase-Card-with-ID-44326567CBS90359507-934-07-20#WhpykCIIyrJ
Decoded body
==================== SUBJECT: Reply: 7/21/2026 Banking Procedure #TASK-58085538-945 terminating - action required ==================== ====== Plain Text? ======= ======text/plain====== 11:08:43 AM Task #PAYMENT-333333-33-333 delay â restricted access required https://telegra.ph/Verify-your-Coinbase-Card-with-ID-44326567CBS90359507-934-07-20#WhpykCIIyrJ