Hallo zusammen, danke für die vielen Antworten soweit.
Den Header habe ich mittlerweile gefunden.
header:
01: Received: from DB8EUR05HT014.eop-eur05.prod.protection.outlook.com
02: (2603:10a6:20b:130::33) by AM7PR08MB5416.eurprd08.prod.outlook.com with HTTPS
03: via AM7PR03CA0023.EURPRD03.PROD.OUTLOOK.COM; Tue, 21 Jan 2020 xx:xx:xx +0000
04: Received: from DB8EUR05FT016.eop-eur05.prod.protection.outlook.com
05: (10.233.238.54) by DB8EUR05HT014.eop-eur05.prod.protection.outlook.com
06: (10.233.239.200) with Microsoft SMTP Server (version=TLS1_2,
07: cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) ID: [ID filtered]
08: 2020 xx:xx:xx +0000
09: Authentication-Results: spf=fail (sender IP is 3.213.163.214)
10: smtp.mailfrom=1and1.de; outlook.de; dkim=none (message not signed)
11: header.d=none;outlook.de; dmarc=none action=none
12: header.from=sutechno.xyz;compauth=fail reason=001
13: Received-SPF: Fail (protection.outlook.com: domain of 1and1.de does not
14: designate 3.213.163.214 as permitted sender) receiver=protection.outlook.com;
15: client-ip=3.213.163.214; helo=tdyj.timeanddate.com;
16: Received: from tdyj.timeanddate.com (3.213.163.214) by
17: DB8EUR05FT016.mail.protection.outlook.com (10.233.238.97) with Microsoft SMTP
18: Server ID: [ID filtered]
19: +0000
20: X-IncomingTopHeaderMarker:
21: OriginalChecksum:5FDFEA8C00FD9F76E6D314C4AAB103EB4F2542B4EFA13A8616AFF9DE47A7C94E;UpperCasedCh
22: cksum:6A2534A58C72507ABD6408F69BFD3A7B381114F4C475BAF0838D94AC94420826;SizeAsReceived:375;Coun
23: :9
24: MIME-Version: 1.0
25: From: Kundendienst <IAcxcmki [at] sutechno.xyz>
26: Subject: Gewinnen Sie ein Jahr gratis Schokolade!
27: X-Originating-IP: 10.22.2.97
28: To:
29: Content-Transfer-Encoding: 7bit
30: Content-Type: text/html; charset=UTF-8
31: Date: Wed, 22 Jan 2020 xx:xx:xx +0100
32: X-campaign-ID: [ID filtered]
33: X-IncomingHeaderCount: 9
34: Message-ID:
35: <558ab2c3-8146-4619-a1a9-b0876a2a7603 [at] DB8EUR05FT016.eop-eur05.prod.protection.outlook.com&g
36: ;
37: Return-Path: info [at] 1and1.de
38: X-MS-Exchange-Organization-ExpirationStartTime: 21 Jan 2020 xx:xx:xx.7098
39: (UTC)
40: X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
41: X-MS-Exchange-Organization-ExpirationInterval: 1:xx:xx:xx.0000000
42: X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
43: X-MS-Exchange-Organization-Network-Message-Id:
44: 30391196-996d-45a9-4ec4-08d79eccbf5a
45: X-EOPAttributedMessage: 0
46: X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
47: X-MS-Exchange-Organization-MessageDirectionality: Incoming
48: X-Forefront-Antispam-Report: EFV:NLI;
49: X-MS-Exchange-Organization-AuthSource:
50: DB8EUR05FT016.eop-eur05.prod.protection.outlook.com
51: X-MS-Exchange-Organization-AuthAs: Anonymous
52: X-MS-PublicTrafficType: Email
53: X-MS-UserLastLogonTime: 1/21/2020 xx:xx:xx PM
54: X-MS-Office365-Filtering-Correlation-ID: [ID filtered]
55: X-MS-TrafficTypeDiagnostic: DB8EUR05HT014:
56: X-MS-Exchange-EOPDirect: true
57: X-Sender-IP: 3.213.163.214
58: X-SID-PRA: IACXCMKI [at] SUTECHNO.XYZ
59: X-SID-Result: NONE
60: X-MS-Exchange-Organization-PCL: 3
61: X-MS-Exchange-AtpMessageProperties: SA|SL
62: X-Microsoft-Antispam: BCL:0;
63: X-OriginatorOrg: outlook.com
64: X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2020 xx:xx:xx.5476
65: (UTC)
66: X-MS-Exchange-CrossTenant-Network-Message-ID: [ID filtered]
67: X-MS-Exchange-CrossTenant-ID: [ID filtered]
68: X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
69: X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
70: 00000000-0000-0000-0000-000000000000
71: X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8EUR05HT014
72: X-MS-Exchange-Transport-EndToEndLatency: xx:xx:xx.5375926
73: X-MS-Exchange-Processed-By-BccFoldering: 15.20.2644.026
74: X-MS-Exchange-Organization-SCL: 6
75: X-Message-Info:
76: qoGN4b5S4yrmAeNVLAMFDslnOcoUsFCaH3ZBO/myiGJanS2jv0Ihc039BqcQ+fNP7R9MnSKmvHvXAWGSE1rTqBPil6qaaX
77: hb4ZjyUegA1WstVlMWf5/yT2baQ8BYcmEgscW9ub9rNhiLLenWZQUNQ7nxGk5YYEoXXwGHzL0+fIH+dp3hf8qa4hUDuAk0
78: eD93lNMH6ceI6uwwCKeChTAQ==
79: X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
80: X-Microsoft-Antispam-Mailbox-Delivery:
81: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamF
82: lterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(58390011)(98390011)(8390131)(83770
83: 0)(8386120)(8376100)(8375121)(18373022)(4920090)(6352001)(4950130)(4990090)(9140004);RF:JunkEm
84: il;
85: X-Microsoft-Antispam-Message-Info:
86: =?us-ascii?Q?k/LEebv/AopnuRhcjOLReYn+4G+DV3whmo/4LGALEmdhSzqd5dbbyP8tx9Tk?=
87: =?us-ascii?Q?mwKbE7BNpvCFm6dx4t2BD9kEQG7DCE8UTxzLuod14AC2P24W5xTuF8zDCUQR?=
88: =?us-ascii?Q?0BYYzPD5f2FhdX8vhJlYdouxqYe65OR1XLgxtBouAWTz4LWOOFXhBklP/WQE?=
89: =?us-ascii?Q?sCRZtnL+bOXjih0BA0tjVAZp96soPluP1OTlg/OLeGAtc3cuLuZbLX2sJI9C?=
90: =?us-ascii?Q?0uN6UfF3saSVhY7sIpz7maDqxh2at07KV0EdCNBt7mvYCab6tZIJdxROOc9K?=
91: =?us-ascii?Q?5eTzChgJ+0DR0NZUQ15l7Y5zXQSAQPm9k/m4TbqsHH+thdSyWFageTku+CHo?=
92: =?us-ascii?Q?ofe1zSSgaHzEk3PT9BYyGH53Z9J33ClYgqS1HWTiiVVWDENpkdWBVIcqfRzQ?=
93: =?us-ascii?Q?rDZ7ppeoHjS2/b+vkqC8pGNiDkOYQlOBzsfpGaJVQ1gGJgctWpqLh6OD9iG0?=
94: =?us-ascii?Q?0qEveuWu/C/0kqnvQrSeHRb45RSaYsoRRa/NqngHa9tMfOQSR38iUeCl/MCO?=
95: =?us-ascii?Q?GyJcM11uvCImap17KieBEccyMdFOyO1jJUQsrWPZpsYTT0NXSDTzQZs0yuTv?=
96: =?us-ascii?Q?fek25FivNfAC3EFGOwLjCw0n7+mAQImOmDpQwcvOhHZ6aZInDD55paErPR4v?=
97: =?us-ascii?Q?v+mxBd/OQQGIcircBOUYaPKZ6yQepZZfvdoX6S5lE2gwr6vQI3nSyNZdcqp9?=
98: =?us-ascii?Q?eYHkS0hMU5iX2rpbTIPvpHCluhekAcCU02nDdeX1l2cOnyI1Z05Yw1r3HzdV?=
99: =?us-ascii?Q?Ho1L6uugZOR9ZPSdBEuOX8I1jLTNSJimQSwSq6JD/zPW0c0UDGEe+SjS/2G7?=
100: =?us-ascii?Q?vfOttEeihdVcvoOoT9HKyzQNSZ3dvyBSqsoX1QYrQlco0sblycFwRRB8Vzqy?=
101: =?us-ascii?Q?yKy0PspgV0nmOq38uOrzbQADhmaqaqjgiabnwmGV59oQoEXP8ecA4/K3flJ3?=
102: =?us-ascii?Q?P4jmWgoh2+LhIx9RcR9RIHWRKJ5mvaIpXf9xl1A105oXwhobuT6LOzFdbiyD?=
103: =?us-ascii?Q?FI6Y575tmOy5XxlThrmWch0QOXc4Zqvsrw/712qM0zNLOi+LTqzQ+aHlUU8u?=
104: =?us-ascii?Q?6cPGhtyiDt9K184erQq3q4GGb2odxtaEQEFiCwhbAGg2PC2auoZ6xeFhxGdG?=
105: =?us-ascii?Q?Y2LIgJw1bxFqfc3bmbtPU+fLrI8kannGKYlp/Pa53YwH9Oupme9wBYh5mG1A?=
106: =?us-ascii?Q?ZmczwsfVjTPb8vnl0TgWH9Yn3aVAaIQcoODfOpidkI/PCb61FqlfF19ApXe7?=
107: =?us-ascii?Q?4sZsXtWdqsROpyvsH4IAOdHYN33A2GtAp547SnSHpmCchureryxQH615pIA0?=
108: =?us-ascii?Q?9UKmEUhCCHqviz91hwNebvxaD2prv60u4vlMUm/0BOAPxjmwHBIZmQjEnfc+?=
109: =?us-ascii?Q?rqTYgpXfx7CDVAkFQTdlMenvFirq6k3pSW6cUtXR50OZeyK8zNFbUilJXnKm?=
110: =?us-ascii?Q?/Ua4L2D1JCMEvcp5VGE8X5eNNrU00Cd9W2M+5j5S+yHwth3JzcQXixIT1cGf?=
111: =?us-ascii?Q?dFOGlw9BLG8lVHAYghu/uGeWhVsC70W0SaoBTP/+bmQFsR/FLPGrO8qi8A?=
112: =?us-ascii?Q?=3D=3D?=
Ganz schönes Monstrum....
Hier ist noch die einer zweiten, nur um auf Nummer sicher zu gehen.
header:
01: Received: from DB8EUR05HT014.eop-eur05.prod.protection.outlook.com
02: (2603:10a6:209:8f::18) by AM7PR08MB5416.eurprd08.prod.outlook.com with HTTPS
03: via AM6P194CA0077.EURP194.PROD.OUTLOOK.COM; Tue, 21 Jan 2020 xx:xx:xx +0000
04: Received: from DB8EUR05FT016.eop-eur05.prod.protection.outlook.com
05: (10.233.238.54) by DB8EUR05HT014.eop-eur05.prod.protection.outlook.com
06: (10.233.239.200) with Microsoft SMTP Server (version=TLS1_2,
07: cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) ID: [ID filtered]
08: 2020 xx:xx:xx +0000
09: Authentication-Results: spf=fail (sender IP is 3.213.163.214)
10: smtp.mailfrom=1and1.de; outlook.de; dkim=none (message not signed)
11: header.d=none;outlook.de; dmarc=none action=none
12: header.from=sutechno.xyz;compauth=fail reason=001
13: Received-SPF: Fail (protection.outlook.com: domain of 1and1.de does not
14: designate 3.213.163.214 as permitted sender) receiver=protection.outlook.com;
15: client-ip=3.213.163.214; helo=tdyj.timeanddate.com;
16: Received: from tdyj.timeanddate.com (3.213.163.214) by
17: DB8EUR05FT016.mail.protection.outlook.com (10.233.238.97) with Microsoft SMTP
18: Server ID: [ID filtered]
19: +0000
20: X-IncomingTopHeaderMarker:
21: OriginalChecksum:553FF573954770E861881A33A388AD0D7DD85A8ACEC65F8F2296E181594C3609;UpperCasedCh
22: cksum:1B0F6C9E26578A4925D60B0FA9755805C4817B79E2D1BBE9C718D7B5A38B9FF7;SizeAsReceived:367;Coun
23: :9
24: MIME-Version: 1.0
25: From: Warentester <QfdzFnJs [at] sutechno.xyz>
26: Subject: Genieße die leckerste Schokolade!
27: X-Originating-IP: 10.22.2.97
28: To:
29: Content-Transfer-Encoding: 7bit
30: Content-Type: text/html; charset=UTF-8
31: Date: Wed, 22 Jan 2020 xx:xx:xx +0100
32: X-campaign-ID: [ID filtered]
33: X-IncomingHeaderCount: 9
34: Message-ID:
35: <8ee5d22d-0df1-41eb-bf84-d54032aed324 [at] DB8EUR05FT016.eop-eur05.prod.protection.outlook.com&g
36: ;
37: Return-Path: info [at] 1and1.de
38: X-MS-Exchange-Organization-ExpirationStartTime: 21 Jan 2020 xx:xx:xx.6519
39: (UTC)
40: X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
41: X-MS-Exchange-Organization-ExpirationInterval: 1:xx:xx:xx.0000000
42: X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
43: X-MS-Exchange-Organization-Network-Message-Id:
44: b48af616-3267-4481-e503-08d79eccaa74
45: X-EOPAttributedMessage: 0
46: X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
47: X-MS-Exchange-Organization-MessageDirectionality: Incoming
48: X-Forefront-Antispam-Report: EFV:NLI;
49: X-MS-Exchange-Organization-AuthSource:
50: DB8EUR05FT016.eop-eur05.prod.protection.outlook.com
51: X-MS-Exchange-Organization-AuthAs: Anonymous
52: X-MS-PublicTrafficType: Email
53: X-MS-UserLastLogonTime: 1/21/2020 xx:xx:xx PM
54: X-MS-Office365-Filtering-Correlation-ID: [ID filtered]
55: X-MS-TrafficTypeDiagnostic: DB8EUR05HT014:
56: X-MS-Exchange-EOPDirect: true
57: X-Sender-IP: 3.213.163.214
58: X-SID-PRA: QFDZFNJS [at] SUTECHNO.XYZ
59: X-SID-Result: NONE
60: X-MS-Exchange-Organization-PCL: 2
61: X-MS-Exchange-AtpMessageProperties: SA|SL
62: X-Microsoft-Antispam: BCL:0;
63: X-OriginatorOrg: outlook.com
64: X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Jan 2020 xx:xx:xx.4866
65: (UTC)
66: X-MS-Exchange-CrossTenant-Network-Message-ID: [ID filtered]
67: X-MS-Exchange-CrossTenant-ID: [ID filtered]
68: X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
69: X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
70: 00000000-0000-0000-0000-000000000000
71: X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8EUR05HT014
72: X-MS-Exchange-Transport-EndToEndLatency: xx:xx:xx.7217901
73: X-MS-Exchange-Processed-By-BccFoldering: 15.20.2644.026
74: X-MS-Exchange-Organization-SCL: 6
75: X-Message-Info:
76: qoGN4b5S4yrmAeNVLAMFDslnOcoUsFCaH3ZBO/myiGJanS2jv0Ihc039BqcQ+fNP7R9MnSKmvHvXAWGSE1rTqBPil6qaaX
77: hb4ZjyUegA1WstVlMWf5/yT2baQ8BYcmEgscW9ub9rNhiLLenWZQUNQ7nxGk5YYEoXXwGHzL0+fIH+dp3hf8qa4hUDuAk0
78: eD93lNMH6ceI6uwwCKeChTAQ==
79: X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
80: X-Microsoft-Antispam-Mailbox-Delivery:
81: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamF
82: lterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(58390011)(98390011)(8390131)(83770
83: 0)(8386120)(8376100)(8375121)(18373022)(4920090)(6352001)(4950130)(4990090)(9140004);RF:JunkEm
84: il;
85: X-Microsoft-Antispam-Message-Info:
86: =?us-ascii?Q?uLqqWX7pzqgvZYQ0u96PQUh2u+TjY5wbckWNMxcqfvLPWFJbDgsPB8Q8zqaz?=
87: =?us-ascii?Q?Td+NSO1H/OXuQ0erMNe2CqJruW9o8Kmy8B/OgSGrXhXt3c/H6WnqEVhYQ74U?=
88: =?us-ascii?Q?E8lmAvG+JIYTtVk2B1tKAtEcagQNTJIWiHPY1sl7SF2cqom5rcAg+6YHCIj6?=
89: =?us-ascii?Q?x76PyqlTdUWbP4UMY+dYWtRTJ9gyNST9/s/tC/fczQW6543JKA6v9kfs8YRP?=
90: =?us-ascii?Q?r+ureUjnqd9og5AecfrGom5113snkYsetaJLMmfUXvh6ly/5m2qDoA7phwsm?=
91: =?us-ascii?Q?EW90nsMvox0A7MYsEH5q4xv7fpR/+vutJl/c7Q5Yx1Rcz4OGejjynIbHHQ4R?=
92: =?us-ascii?Q?pvx0YuxI00txAffAkl2sIqJVLB5+N4x64uLdKspL3Twl9mOsobBBbsEs3OZQ?=
93: =?us-ascii?Q?YVFcZ5xwceqnQ7K2ERPeQf5thx0Fj40hJrV3PoDMR5VOC2pooVdJNJc7SRUv?=
94: =?us-ascii?Q?2hAHjTbunpGMsz+aLN2petmnpFdlvURghbSynqvDaRQ3QOIVobOTOjACJjdc?=
95: =?us-ascii?Q?r+lQgT0OxJ/dMec60s0kNO2xT+kWDGc0gnaO3jOZJ6waGiwUv16FSoJFq1cg?=
96: =?us-ascii?Q?Jqc1ENVugGgZGvOdLoXlkArCiv4ebeF2g5ym0b34VB9eAupP7cHUUT+m7a77?=
97: =?us-ascii?Q?prQpubP//vqTPn5iStjuPAgR/jLzBoq8g1Z6ImUEhB9FHyoLArhEqUIJLDT8?=
98: =?us-ascii?Q?1PhlCJeYNto/+FmyiP4kHQ/HQ1arY3HyYvwGDTpfLLXxU84QNmu8qsFDQJol?=
99: =?us-ascii?Q?xZorWe9HsSMKHDA9+tr6ZQLM7dV53ZdFX/p23xZGfJxoxiWC1RZUgtfrVsRR?=
100: =?us-ascii?Q?8ZyM4mqY92fCpPpTvm0LtZGSVZ4QNWwi5qC4pheFLcl8EJ4hIqc1DuHsmID2?=
101: =?us-ascii?Q?FKMW/BoFX9kUE7tAmAqYAAwTp09JwjuZ/xxKflqXIa15qHWxjMBdZtJwZ3Ar?=
102: =?us-ascii?Q?mcRU9KlGDJAoxq/F1jBG2OBVomkQeu5jpa8ySdG9Ukmu5uCoC2HFAgNujryJ?=
103: =?us-ascii?Q?FZUnUlhRO+NocJlwPMiUcuJQ/8sgsidMS0YjVvtJjg44JfiQNftOnfUjAUA0?=
104: =?us-ascii?Q?VYHIO1I6u+lE5X41Bt0PVYAFe3yM05gCAVaxMCOa+FWuE6v3w0P1PEVAdKIS?=
105: =?us-ascii?Q?1q08VYxG4ZbHuCdzhiZpwbQ6WW9wXOT3QcBIvXQZ3SlFq6zg4/DRGpFaVCUo?=
106: =?us-ascii?Q?3V+G6sd0UwyI/7L7KHV1BQYjitJADJwH0ef/5EAKTWSkdhMTfJYUISixSlHe?=
107: =?us-ascii?Q?5p5iAbLU0Qx5cwCzkDMLbSecFplJlNs77OYJBoH6pPvUV1GPxceQkJEne8c+?=
108: =?us-ascii?Q?WAoX0Pj72MuzfrXnhmbRueU4aRZr0D9pHZU3smh+71Mjxk5gmqsB/9K1f7Jj?=
109: =?us-ascii?Q?FKVXNgqcRl5+UDtAI36bjRhRRoOPRkZUeoUN4XDXs856Ig7mdVbkRo/eRq3b?=
110: =?us-ascii?Q?+NKdeqLMFgBHR0cfTB8QEDMND3HpB4E/4vr4Q2V96m48lljuBoAnRu5qszik?=
111: =?us-ascii?Q?FRbXVPD98kxH6xgbzGbs7je6nkopXnNagTG9FgFox7odOmlJ0tk6eFl5dA?=
112: =?us-ascii?Q?=3D=3D?=
Bezüglich Unsubscribe Button: Ja ich dachte man kann es ja mal versuchen.
Screenshots gehen hier nicht hochzuladen oder?
Lesezeichen