01: From - Thu Jan 28 xx:xx:xx 2016
02: X-Account-Key: account3
03: X-UIDL: [UID filtered]
04: X-Mozilla-Status: 0003
05: X-Mozilla-Status2: 00000000
06: X-Mozilla-Keys:
07:
08: X-Envelope-From: <mail [at] try-air.com>
09: X-Envelope-To: <..............>
10: X-Delivery-Time: 1453975950
11: X-UID: [UID filtered]
12: Return-Path: <mail [at] try-air.com>
13: Authentication-Results: strato.com 1;
14: spf=pass
15: smtp.mailfrom="poor [at] spamvictim.tld";
16: dkim=none;
17: domainkeys=none;
18: dkim-adsp=none
19: header.from="poor [at] spamvictim.tld"
20: X-Strato-MessageType: email
21: X-RZG-CLASS-ID: [ID filtered]
22: Received-SPF: pass
23: (strato.com: domain try-air.com designates 81.19.149.136 as permitted sender)
24: mechanism=ip4;
25: client-ip=81.19.149.136;
26: helo="mx26lb.world4you.com";
27: envelope-from="poor [at] spamvictim.tld";
28: receiver=smtp.rzone.de;
29: identity=mailfrom;
30: Received: from mx26lb.world4you.com ([81.19.149.136])
31: by smtp.rzone.de (RZmta 37.17 OK)
32: with ESMTPS ID: [ID filtered]
33: (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (curve secp521r1 with 521 ECDH
34: bits, eq. 15360 bits RSA))
35: (Client dID: [ID filtered]
36: for <..........>;
37: Thu, 28 Jan 2016 xx:xx:xx +0100 (CET)
38: Received: from [81.217.225.92] (helo=ARES-NB)
39: by mx26lb.world4you.com with esmtpa (Exim 4.77)
40: (envelope-from <poor [at] spamvictim.tld>)
41: ID: [ID filtered]
42: for ...........; Thu, 28 Jan 2016 xx:xx:xx +0100
43: From: "tryair" <mail [at] try-air.com>
44: Subject: =?UTF-8?B?VHJvY2tlbmUgSMOkbmRlIGltIEhhbmR1bWRyZWhlbg==?=
45: To: ............
46: Content-Type: multipart/related; type="multipart/alternative";
47: boundary="CJcv0B6K8Lj6H7Itdqtpxe1VW=_dFgpoaR"
48: MIME-Version: 1.0
49: Reply-To: mail [at] try-air.com
50: Date: Thu, 28 Jan 2016 xx:xx:xx +0100
51: Message-ID: [ID filtered]
52: X-SA-Do-Not-Run: Yes
53: X-AV-Do-Run: Yes
54: X-SA-Exim-Connect-IP: 81.217.225.92
55: X-SA-Exim-Mail-From: mail [at] try-air.com
56: X-SA-Exim-Scanned: No (on mx26lb.world4you.com); SAEximRunCond expanded to false
Lesezeichen