header:
01: From - Fri May 27 xx:xx:xx 2022
02: X-Account-Key: account5
03: X-UIDL: [UID filtered]
04: X-Mozilla-Status: 0001
05: X-Mozilla-Status2: 00000000
06: X-Mozilla-Keys:
07:
08: Return-Path: <SRS0=yC8eXV=WC=fitzgeraldautomall.com=kings [at] mail.#DOMAIN#.de>
09: X-Cyrus-Session-ID: [ID filtered]
10: X-Sieve: CMU Sieve 3.0
11: Envelope-to: nexus [at] mail.#DOMAIN#.de
12: Delivery-date: Thu, 26 May 2022 xx:xx:xx +0200
13: Authentication-Results: mx1.mail.vrmd.de; dmarc=pass
14: header.from=fitzgeraldautomall.com; dkim=pass header.d=fitzgeraldautomall.com; iprev=pass
15: policy.iprev=173.203.187.97 (smtp97.iad3a.emailsrvr.com)
16: Received: from smtp97.iad3a.emailsrvr.com ([173.203.187.97])
17: by mx1.mail.vrmd.de with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
18: (Exim 4.90_1)
19: (envelope-from <poor [at] spamvictim.tld>)
20: ID: [ID filtered]
21: for nexus [at] mail.#DOMAIN#.de; Thu, 26 May 2022 xx:xx:xx +0200
22: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
23: d=fitzgeraldautomall.com; s=20210429-q2b6p77w; t=1653581432;
24: bh=B6/q3jl2MxeR05HQ75kmM/BZddjgXxnRUrr/uQ448Nk=;
25: h=From:Subject:Date:From;
26: b=TIZ8ejFSdnM9fHArYx550N1TQlHVnNjMleclwE7zkGg0SHraaoDprQi1x4qaAncZN
27: jPx1+DHvMm6fQ8jP2CpLTzjJkrKtxZBVSS0wHkTQOeKI6T5eHB0ATSbz+DeaW0ue93
28: 8m5OaofREsOWoxqGR7FIbicd7EVVZQnJ8hE2LCqQ=
29: X-Auth-ID: [ID filtered]
30: Received: by smtp37.relay.iad3a.emailsrvr.com (Authenticated sender:
31: kings-AT-fitzgeraldautomall.com) with ESMTPA ID: [ID filtered]
32: Thu, 26 May 2022 xx:xx:xx -0400 (EDT)
33: Message-ID: [ID filtered]
34: Reply-To: Accountant General <accountant [at] samco.in>
35: From: Accountant General <kings [at] fitzgeraldautomall.com>
36: Subject: Invoice #0000124
37: Date: Thu, 26 May 2022 xx:xx:xx -0700
38: MIME-Version: 1.0
39: Content-Type: multipart/mixed;
40: boundary="a07f369d69ad87881bb1f853b783a9a12ca8e2"
41: X-Classification-ID: [ID filtered]
42: X-purgate: suspect.mail-count
43: X-purgate-type: suspect.mail-count
44: X-purgate-ID: [ID filtered]
45: X-purgate-Ad: Categorized by eleven eXpurgate (R) http://www.eleven.de
46: X-Spam-Suspicion: No

Dear Colleagues, please check the payment form and also payment informati=
on.
Yours faithfully
Accountant General
[Link nur für registrierte Mitglieder sichtbar. ]
ANHANG "Microsoft.Office.Tools.Common.v4.0.Utilities.dll"

Ich habe im Header meinen Domainnamen durch #DOMAIN# vorab ersetzt.