Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.100.245 Fri Aug 28 00:34:51 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-6.zbau.f3netze.de ([185.220.100.245]:43920) from albator@cardinal.ch Auth: albator@cardinal.ch 770358628704072 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for lewisthompson2525@gmail.com; Fri, 28 Aug 2026 00:34:27 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <28efa60dfed7fdf350fab94672b78368640d@cardinal.ch>
From: Blockchain reserve <albator@cardinal.ch>
To: lewisthompson2525@gmail.com
Subject: WIRE HAS BEEN PROCESSED TO YOUR VAULT AND AWAIT YOUR CONSENT
Date: Fri, 28 Aug 2026 00:34:26 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="812b62ced7133cb794342942b76dc58bea"
X-Priority: 1

Raw body

--812b62ced7133cb794342942b76dc58bea
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Issue #PAYMT99999999999 replanning  :  confidentiality mandatory https://te=
legra.ph/Data-Leaks-Payment-GWE96837465-600-08-18#okZqOP TRANSFER YOUR SAVE=
D MONEY=20

--812b62ced7133cb794342942b76dc58bea
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Item #PMT-222222-22-222 rescheduling  =E2=80=94  =
confidentiality requested <a href=3D"https://telegra.ph/Binance-Giveaway-ti=
cket-BIN-380875-52681-08-18#GkmsnPh">ACCESS YOUR PERSONAL PAGE</a> </body><=
/html>

--812b62ced7133cb794342942b76dc58bea--

Decoded body

====================
SUBJECT: WIRE HAS BEEN PROCESSED TO YOUR VAULT AND AWAIT YOUR CONSENT
====================

======= Decode QP ======
======text/plain======
Issue #PAYMT99999999999 replanning  :  confidentiality mandatory https://telegra.ph/Data-Leaks-Payment-GWE96837465-600-08-18#okZqOP TRANSFER YOUR SAVED MONEY 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Item #PMT-222222-22-222 rescheduling  â  confidentiality requested <a href="https://telegra.ph/Binance-Giveaway-ticket-BIN-380875-52681-08-18#GkmsnPh">ACCESS YOUR PERSONAL PAGE</a> </body></html>