Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 70.183.236.241 Wed Nov 04 01:21:35 2026
X-SPAM-SRC: TRAP
Received: from wsip-70-183-236-241.pn.at.cox.net ([70.183.236.241]:45042) from coupy@cardinal.ch Auth: coupy@cardinal.ch Coup2020! by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for u2@frosttree.xyz; Wed, 04 Nov 2026 01:21:27 +0100 (CET)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Date: Wed, 04 Nov 2026 03:21:35 +0300
From: coupy@cardinal.ch
Subject: =?UTF-8?B?Y291cHlAY2FyZGluYWwuY2g7Y291cHlAY2FyZGluYWwuY2g7Q291cDIwMjAh?= =?UTF-8?B?O3NtdHAuY2FyZGluYWwuY2g7NTg3OzA7TE9HSU4=?=
To: u2@frosttree.xyz

Raw body

Decoded body

====================
SUBJECT: coupy@cardinal.ch;coupy@cardinal.ch;Coup2020!;smtp.cardinal.ch;587;0;LOGIN
====================

====== Plain Text? =======
======text/plain======