Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 47.143.208.202 Wed Aug 26 07:02:58 2026
X-SPAM-SRC: TRAP
Received: from 47-143-208-202.fdr01.blpk.ca.ip.frontiernet.net ([47.143.208.202]:36538) from ruflacket@cardinal.ch Auth: ruflacket@cardinal.ch Cardina.2022 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for u1@frosttree.xyz; Wed, 26 Aug 2026 07:02:50 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Date: Wed, 26 Aug 2026 08:02:58 +0300
From: ruflacket@cardinal.ch
Subject: =?UTF-8?B?cnVmbGFja2V0QGNhcmRpbmFsLmNoO3J1ZmxhY2tldEBjYXJkaW5hbC5jaDtD?= =?UTF-8?B?YXJkaW5hLjIwMjI7c210cC5jYXJkaW5hbC5jaDs1ODc7MDtMT0dJTg==?=
To: u1@frosttree.xyz

Raw body

Decoded body

====================
SUBJECT: ruflacket@cardinal.ch;ruflacket@cardinal.ch;Cardina.2022;smtp.cardinal.ch;587;0;LOGIN
====================

====== Plain Text? =======
======text/plain======