Saved Evidences
The stored evidence for this listing. The raw body is displayed as text, not rendered.
Relay path (1 hop)
- 🇧🇷 187.181.158.120 bbb59e78.virtua.com.br→a
From
=?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch>
To
teste1@afiliadosmarket.site
Date
17.08.2026 19:36:07 CEST
Subject
Aviso de login detectado - 2026-08-17
SourceSpamtrap
Authentication
SPF–
DKIM–
Spam score–
Header
| X-SPAM-SRC | TRAP |
|---|---|
| Received | from bbb59e78.virtua.com.br ([187.181.158.120]:51394) from sasch@cardinal.ch Auth: sasch@cardinal.ch stefan197655 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.site; Mon, 17 Aug 2026 19:36:08 +0200 (CEST) |
| X-Spamtrap | Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap. |
| Content-Type | multipart/alternative; boundary="===============8596738365230740883==" |
| MIME-Version | 1.0 |
| Subject | =?utf-8?q?Aviso_de_login_detectado_-_2026-08-17?= |
| From | =?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch> |
| To | teste1@afiliadosmarket.site |
| Date | Mon, 17 Aug 2026 14:36:07 -0300 |
| Message-ID | <178698816751.2546461.15382378519749371727@cardinal.ch> |
| MIME-Version | 1.0 |
| X-Mailer | Thunderbird/115.0 |