Rendered inside a sandboxed frame: scripts, forms and links are disabled. Loading remote images may confirm to the sender that this address exists.

Show headers
From 187.181.158.120 Mon Aug 17 19:36:12 2026
X-SPAM-SRC: TRAP
Received: from bbb59e78.virtua.com.br ([187.181.158.120]:51394) from sasch@cardinal.ch Auth: sasch@cardinal.ch stefan197655 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.site; Mon, 17 Aug 2026 19:36:08 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Content-Type: multipart/alternative; boundary="===============8596738365230740883=="
MIME-Version: 1.0
Subject: =?utf-8?q?Aviso_de_login_detectado_-_2026-08-17?=
From: =?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch>
To: teste1@afiliadosmarket.site
Date: Mon, 17 Aug 2026 14:36:07 -0300
Message-ID: <178698816751.2546461.15382378519749371727@cardinal.ch>
MIME-Version: 1.0
X-Mailer: Thunderbird/115.0
Show raw body
--===============8596738365230740883==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

T2ksIHR1ZG8gYmVtPwoKQ29uZmlybWFtb3MgcXVlIG8gc2V1IGFjZXNzbyBm
b2kgcmVhbGl6YWRvIGNvbSBzdWNlc3NvLgoKU2V1IGPDs2RpZ28gZGUgY29u
ZmlybWHDp8OjbyDDqSA5NTk3MzguCgpBY2Vzc2Ugbm8gbGluayBzZWd1cm86
IGh0dHBzOi8vcGFnZXMuZGV2Lw==

--===============8596738365230740883==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHkgc3R5bGU9J2ZvbnQtZmFtaWx5
OiBBcmlhbCwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAxNXB4OyBjb2xvcjog
IzIyMjIyMjsnPjwhLS0gaXBvUVBiWHp1QyAtLT48ZGl2IHN0eWxlPSdtYXgt
d2lkdGg6IDU4MHB4OyBtYXJnaW46IDAgYXV0bzsnPk9pLCBjb21vIHZhaT88
YnI+PGJyPlZhbGlkYW1vcyBxdWUgbyBzZXUgY2FkYXN0cm8gZm9pIHJlYWxp
emFkbyBjb20gc3VjZXNzby48YnI+PGJyPlNldSBjw7NkaWdvIGRlIGNvbmZp
cm1hw6fDo28gw6kgOTU5NzM4Ljxicj48YnI+QWNlc3NlIG5vIGxpbmsgc2Vn
dXJvOiA8YSBocmVmPSJodHRwczovL3BhZ2VzLmRldi8iIHRhcmdldD0iX2Js
YW5rIiBzdHlsZT0iY29sb3I6ICMwMDU2YjM7IHRleHQtZGVjb3JhdGlvbjog
dW5kZXJsaW5lOyI+aHR0cHM6Ly9wYWdlcy5kZXYvPC9hPjwvZGl2PjwhLS0g
dTBzQjliWDl4eCAtLT48L2JvZHk+PC9odG1sPg==

--===============8596738365230740883==--
Aviso de login detectado - 2026-08-17
From =?utf-8?q?Servi=C3=A7o_Informativo?= <sasch@cardinal.ch>
To teste1@afiliadosmarket.site
Date 17.08.2026 19:36:07 CEST