Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (1 hop)
- 🇧🇷 187.19.143.221 187-19-143-221-temp-internal.static.brisanet.net.br→a
From
=?utf-8?q?Servi=C3=A7o_Informativo?= <candidat@cardinal.ch>
To
teste1@afiliadosmarket.online
Date
30.09.2026 11:04:22 CEST
Subject
Notificação de patch de segurança aplicada - 2026-09-30
SourceSpamtrap
Authentication
SPF–
DKIM–
Spam score–
Header
| X-SPAM-SRC | TRAP |
|---|---|
| Received | from 187-19-143-221-temp-internal.static.brisanet.net.br ([187.19.143.221]:25043) from candidat@cardinal.ch Auth: candidat@cardinal.ch fringant49 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.online; Wed, 30 Sep 2026 11:04:22 +0200 (CEST) |
| X-Spamtrap | Authentication has been performed! If this is the first connection from this IP we see (0), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap. |
| Content-Type | multipart/alternative; boundary="===============8562515338663792987==" |
| MIME-Version | 1.0 |
| Subject | =?utf-8?q?Notifica=C3=A7=C3=A3o_de_patch_de_seguran=C3=A7a_aplicada_-_2026-0?= =?utf-8?q?9-30?= |
| From | =?utf-8?q?Servi=C3=A7o_Informativo?= <candidat@cardinal.ch> |
| To | teste1@afiliadosmarket.online |
| Date | Wed, 30 Sep 2026 06:04:22 -0300 |
| Message-ID | <179075906258.1972257.5209829638639565587@cardinal.ch> |
| MIME-Version | 1.0 |
| X-Mailer | Thunderbird/115.0 |