header:
01: Return-Path: <no-reply [at] account.com>
02: Received: from mc-webde04.server.lan ([87.106.202.11]) by mx-ha.web.de
03: (mxweb011 [212.227.15.17]) with ESMTP (Nemesis) ID: [ID filtered]
04: X-Envelope-From: <no-reply [at] account.com>
05: X-Envelope-To: <nxxxxxxxxxxxx>
06: X-Delivery-Time: 1553075291
07: X-UID: [UID filtered]
08: X-RZG-Expurgate: suspect/normal
09: X-RZG-Expurgate-ID: [ID filtered]
10: X-Strato-MessageType: email
11: X-RZG-CLASS-ID: [ID filtered]
12: Received-SPF: fail (strato.com: domain account.com does not designate 109.248.200.7 as
13: permitted sender) client-ip=109.248.200.7; helo="depho24.ru";
14: envelope-from="no-reply [at] account.com"; receiver=smtpin.rzone.de; identity=mailfrom;
15: Received: from imap.rzone.de [81.169.145.103] by mc-webde04.server.lan with
16: IMAP (fetchmail-6.3.9) for <xxxxxxxxxx> (single-drop); Wed, 20 Mar 2019 xx:xx:xx +0100
17: (CET)
18: Received: from depho24.ru ([109.248.200.7]) by smtpin.rzone.de (RZmta 44.16 OK)
19: with ESMTPS ID: [ID filtered]
20: Received: from nkromeo by depho24.ru with local (Exim 4.88) (envelope-from
21: <no-reply [at] account.com>) ID: [ID filtered]
22: To: xxxxxxxxxxxxxx
23: Subject: carola.yvonne [at] web.de hat dir uber WeTransfer Dateien gesendet
24: X-PHP-Originating-Script: 542:snd.php
25: Date: Wed, 20 Mar 2019 xx:xx:xx +0300
26: From: WeTransfer <no-reply [at] account.com>
27: Message-ID: [ID filtered]
28: X-Mailer: Leaf PHPMailer 2.7 (leafmailer.pw)
29: MIME-Version: 1.0
30: Content-Type: text/html; charset=
31: Content-Transfer-Encoding: 8bit
32: X-UI-Application: 2:movetofolder=Mg==,name=aW5mb0BsaXBwZS1ldmVudC5kZQ==
33: Envelope-To: <xxxxxxxxxxxxxxxxxx>

Hallo,
Ich habe mein Dokument gesendet, wie Sie mich gestern Abend gefragt haben. Ich habe es über diese Website gesendet, da dies die Sicherheit meiner Dokumente ist.
Bitte schreibe mir, wenn alles die Regel ist, mit meiner Einreichung.
Vielen Dank
Dahin soll das Opfer geleitet werden: whois:wetransfer-security-document.newhorizons-ltd.com

Eone GoDaddy Seite - wie kann es anders sein.