Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Wed Aug 12 07:05:48 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:42618) from info@ararhein.ch Auth: info@ararhein.ch gremlin by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for blackbird7181@gmail.com; Wed, 12 Aug 2026 07:04:39 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <a6cb93cb3ffa46fdde71b813e9eb111b2673eba9@ararhein.ch>
From: Crypto bureau <info@ararhein.ch>
To: blackbird7181@gmail.com
Subject: Report Case #FNd11931059238 raising  : requires  review required
Date: Wed, 12 Aug 2026 07:03:57 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="8329615c18dcf3785bff700bfe240c7cdf"
X-Priority: 1

Raw body

--8329615c18dcf3785bff700bfe240c7cdf
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Ticket #PMT77777777777 rearranging  requires  private handling necessary ht=
tps://graph.org/PAYOUTS-FROM-BINANCE-IN-BITCOIN---TICKET-BTCPAY-458299-79-1=
47-08-01#GTGe ENTER YOUR PERSONAL DASHBOARD=20

--8329615c18dcf3785bff700bfe240c7cdf
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Task #PAYMENT-555555-55-555 delay  =3D>  discreti=
on necessary <a href=3D"https://graph.org/Confirm-BTC-Payment-with-ID-BTC-3=
30943-35-421-08-04#VEUZqpUjnGK">ACCESS YOUR DASHBOARD</a> </body></html>

--8329615c18dcf3785bff700bfe240c7cdf--

Decoded body

====================
SUBJECT: Report Case #FNd11931059238 raising  : requires  review required
====================

======= Decode QP ======
======text/plain======
Ticket #PMT77777777777 rearranging  requires  private handling necessary https://graph.org/PAYOUTS-FROM-BINANCE-IN-BITCOIN---TICKET-BTCPAY-458299-79-147-08-01#GTGe ENTER YOUR PERSONAL DASHBOARD 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Task #PAYMENT-555555-55-555 delay  =>  discretion necessary <a href="https://graph.org/Confirm-BTC-Payment-with-ID-BTC-330943-35-421-08-04#VEUZqpUjnGK">ACCESS YOUR DASHBOARD</a> </body></html>