Saved Evidences

The stored evidence for this listing. The raw body is displayed as text, not rendered.

Header

From 185.220.101.134 Thu Sep 03 10:53:12 2026
X-SPAM-SRC: TRAP
Received: from tor-exit-134.relayon.org ([185.220.101.134]:20319) from jolapoutre@cardinal.ch Auth: jolapoutre@cardinal.ch frame45006 by a Spamtrap on 157.161.9.65 587 pretending to be an open relay for bawadamana@gmail.com; Thu, 03 Sep 2026 10:52:17 +0200 (CEST)
X-Spamtrap: Authentication has been performed! If this is the first connection from this IP we see (1), no attachements present and the size of this email is low we are going to relay this to encourage the attacker to send more emails to this spamtrap.
Message-ID: <8ca38631c501203615b9d07b996ac0cacac12077@cardinal.ch>
From: Token custody <jolapoutre@cardinal.ch>
To: bawadamana@gmail.com
Subject: Prepared as your approval +1,183198 _BTC FINANCIAL REMITTANCE needs confirmation
Date: Thu, 3 Sep 2026 10:52:00 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="2b81c8688145694261dda3887d9a0330b7"
X-Priority: 1

Raw body

--2b81c8688145694261dda3887d9a0330b7
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Banking Procedure #TSKM-222222-22-222 ending  -  intervention essential htt=
ps://graph.org/Binance-Official-Giveaway-BIN-79794781665-09-01#cwwcUkBLACp =
COLLECT THE BALANCE=20

--2b81c8688145694261dda3887d9a0330b7
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
</head>
<body bgColor=3D"#ffffff">Operation #TSK-777777-77-777 ending  -  intervent=
ion necessary <a href=3D"https://graph.org/Coinbase-Staking-Payment-ID-TASK=
49114421-390-09-01#YToR">ACCESS YOUR OWN PROFILE</a> </body></html>

--2b81c8688145694261dda3887d9a0330b7--

Decoded body

====================
SUBJECT: Prepared as your approval +1,183198 _BTC FINANCIAL REMITTANCE needs confirmation
====================

======= Decode QP ======
======text/plain======
Banking Procedure #TSKM-222222-22-222 ending  -  intervention essential https://graph.org/Binance-Official-Giveaway-BIN-79794781665-09-01#cwwcUkBLACp COLLECT THE BALANCE 

======= Decode QP ======
======text/html======
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgColor="#ffffff">Operation #TSK-777777-77-777 ending  -  intervention necessary <a href="https://graph.org/Coinbase-Staking-Payment-ID-TASK49114421-390-09-01#YToR">ACCESS YOUR OWN PROFILE</a> </body></html>