2x bei GMX aufgeschlagen.
header:
01: Return-Path: ftlfexzxd [at] yahoo.com
02: Received: from ijntv.cn ([88.132.111.91]) by mx-ha.gmx.net (mxgmx007) with
03: ESMTP (Nemesis) ID: [ID filtered]
04: Oct 2013 16: 03:19 +0200
05: Received: by localhost; Wed, 16 Oct 2013 xx:xx:xx -0-100
06: From: "puoysy" <ftlfexzxd [at] yahoo.com>
07: Reply-To: "puoysy" <ftlfexzxd [at] yahoo.com>
08: To: <poor [at] spamvictim.tld>
09: Subject: ydac
10: Date: Wed, 16 Oct 2013 xx:xx:xx -0-100
11: Content-Transfer-Encoding: 7Bit
12: Content-Type: text/html;;
13: Envelope-To: <poor [at] spamvictim.tld>
14: X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
15: X-GMX-Antivirus: 0 (no virus found)
Body: Interessant: Es gibt noch einen "to", auch bei GMX, der vom "Envelope-To" abweicht.
2. Mail:
header:
01: Return-Path: vmzgi [at] yahoo.com
02: Received: from ijntv.cn ([24.137.249.135]) by mx-ha.gmx.net (mxgmx001) with
03: ESMTP (Nemesis) ID: [ID filtered]
04: Oct 2013 16: 08:31 +0200
05: Received: by localhost; Wed, 16 Oct 2013 xx:xx:xx -0-100
06: From: "qfrnxr" <vmzgi [at] yahoo.com>
07: Reply-To: "qfrnxr" <vmzgi [at] yahoo.com>
08: To: <poor [at] spamvictim.tld>
09: Subject: vnrq
10: Date: Wed, 16 Oct 2013 xx:xx:xx -0-100
11: Content-Transfer-Encoding: 7Bit
12: Content-Type: text/html;;
13: Envelope-To: <poor [at] spamvictim.tld>
Body: Dito, wieder abweichender To/Envelope-To.
Lesezeichen