Rendered inside a sandboxed frame: scripts, forms and links are disabled. Loading remote images may confirm to the sender that this address exists.

Show headers
From 177.180.246.138 Wed Sep 09 16:48:58 2026
X-SPAM-SRC: TRAP
Received: from b1b4f68a.virtua.com.br ([177.180.246.138]:45156) from le_rider_fou@cardinal.ch Auth: le_rider_fou@cardinal.ch 271288 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for teste1@afiliadosmarket.online; Wed, 09 Sep 2026 16:48:55 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (0), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Content-Type: multipart/alternative; boundary="===============8286562954860759757=="
MIME-Version: 1.0
Subject: =?utf-8?q?Acesso_do_sistema_conclu=C3=ADdo_-_2026-09-09?=
From: =?utf-8?q?Servi=C3=A7o_Informativo?= <le_rider_fou@cardinal.ch>
To: teste1@afiliadosmarket.online
Date: Wed, 09 Sep 2026 11:48:54 -0300
Message-ID: <178896533416.29610.2887876696241410541@cardinal.ch>
MIME-Version: 1.0
X-Mailer: Thunderbird/115.0
Show raw body
--===============8286562954860759757==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64

Tm90aWZpY2HDp8OjbyBkbyBzaXN0ZW1hOgoKQSBjb25maWd1cmHDp8OjbyBk
ZSBkdXBsbyBmYXRvciBkZSBhdXRlbnRpY2HDp8OjbyBmb2kgYXRpdmFkYSBw
YXJhIHRlc3RlMUBhZmlsaWFkb3NtYXJrZXQub25saW5lLgoKQ8OzZGlnbyBk
ZSB2YWxpZGHDp8OjbzogODU0NTg2LgoKQWNlc3NlIG5vIGxpbmsgc2VndXJv
OiBodHRwczovL3BhZ2VzLmRldi8=

--===============8286562954860759757==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
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--===============8286562954860759757==--
Acesso do sistema concluído - 2026-09-09
From =?utf-8?q?Servi=C3=A7o_Informativo?= <le_rider_fou@cardinal.ch>
To teste1@afiliadosmarket.online
Date 09.09.2026 16:48:54 CEST