01: Return-path:
02: <7f18de4e.AMwAAA9lZRcAAAAAAAAAAADNMm4AAAAUii4AAAAAAAvQ1gBbQ_lp [at] bnc3.mailjet.com>
03: Delivery-date: Tue, 10 Jul 2018 xx:xx:xx +0200
04: Received: from [195.4.92.20] (helo=mx10.freenet.de)
05: by mbox94.freenet.de with esmtpa (ID: [ID filtered]
06: ID: [ID filtered]
07: for poor [at] spamvictim.tld; Tue, 10 Jul 2018 xx:xx:xx +0200
08: Received: from o46.p25.mailjet.com ([185.189.236.46]:59283)
09: by mx10.freenet.de with esmtps (TLSv1.2:ECDHE-RSA-CHACHA20-POLY1305:256) (port 25) (Exim
10: 4.90_1 #2)
11: ID: [ID filtered]
12: for poor [at] spamvictim.tld; Tue, 10 Jul 2018 xx:xx:xx +0200
13: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; q=dns/txt;
14: d=anasdma1.win; i=poor [at] spamvictim.tld; s=mailjet;
15: h=message-id:mime-version:from:to:subject:date:list-unsubscribe:x-csa-complaints:
16: x-mj-mid:x-mj-smtpguid:x-report-abuse-to:content-type;
17: bh=O4t7UJi7nUyQTtu4JPTuQIcaxl/wuYqIYRGQLbTgfco=;
18: b=YZOZwehQBP1OkvmcY+ew0BKAZTnOpFf6XDv7G845y5PzHqjx2YAn3wffl
19: HVGW7/3Ne1YSeB15t/gScj4gd0HkWO2DS6Mc8KJzSogkyZwMRDdeS6dTKe/P
20: TfBQcu62YjnJ69iHH14SFqKDtkpk80jAGgi9DkDpzU/UB/B9uydP1A=
21: Message-ID: [ID filtered]
22: MIME-Version: 1.0
23: From: Volksbanken Raiffeisenbanken <info [at] anasdma1.win>
24: To: "mein-name" <poor [at] spamvictim.tld>
25: Subject: Neue Sicherheitseinstellungen
26: Date: Tue, 10 Jul 2018 xx:xx:xx +0200
27: List-Unsubscribe: <mailto:[UNSUB filtered]@bnc3.mailjet.com>
28: X-CSA-Complaints: whitelist-complaints [at] eco.de
29: X-MJ-Mid:
30: AMwAAA9lZRcAAAAAAAAAAADNMm4AAAAUii4AAAAAAAvQ1gBbQ_lpjrHw8KBPQgK0Kh-Z8XbK9wAL5TU
31: X-MJ-SMTPGUID: [UID filtered]
32: X-REPORT-ABUSE-TO: Message sent by Mailjet please report to
33: poor [at] spamvictim.tld with a copy of the message
34: Content-Type: multipart/alternative;
35: boundary="=_R4ZdIAVSH5vkBDRmBvPxPWDnKYb7D8Di"
36: X-Warning: 185.189.236.46 is listed at csa.dnsbl.freenet.de
37: X-Spam-score: -1.9
38: X-Spamreport: Action: no action
39: Symbol: NEURAL_HAM(-2.99)
40: Symbol: IP_SCORE(0.07)
41: Symbol: R_SPF_ALLOW(-0.20)
42: Symbol: FN_FUZZY_PROB(1.33)
43: Symbol: RCPT_COUNT_ONE(0.00)
44: Symbol: HAS_LIST_UNSUB(-0.01)
45: Symbol: MIME_GOOD(-0.10)
46: Symbol: TO_MATCH_ENVRCPT_ALL(0.00)
47: Symbol: RCVD_COUNT_ONE(0.00)
48: Symbol: DKIM_TRACE(0.00)
49: Symbol: FREEMAIL_TO(0.00)
50: Symbol: FORGED_SENDER(0.30)
51: Symbol: TO_DN_ALL(0.00)
52: Symbol: ASN(0.00)
53: Symbol: FREEMAIL_ENVRCPT(0.00)
54: Symbol: FROM_NEQ_ENVFROM(0.00)
55: Symbol: R_DKIM_ALLOW(-0.20)
56: Symbol: RCVD_TLS_ALL(0.00)
57: Symbol: RBL_CSA(0.00)
58: Symbol: FROM_HAS_DN(0.00)
59: Symbol: DMARC_POLICY_ALLOW(-0.25)
60: Symbol: BAYES_HAM(-0.87)
61: Symbol: URI_COUNT_ODD(1.00)
62: Message: (SPF): spf allow
63: Message-ID: [ID filtered]
64: X-FN-Spambar:
65: Delivered-To: poor [at] spamvictim.tld
66: Envelope-to: poor [at] spamvictim.tld
67: X-Originated-At: 185.189.236.46!59283
68: X-Antivirus: Avast (VPS 180709-2, 09.07.2018), Inbound message
69: X-Antivirus-Status: Clean
70: This is a multi-part message in MIME format
71: --=_R4ZdIAVSH5vkBDRmBvPxPWDnKYb7D8Di
72: Content-Type: text/plain; charset="iso-8859-1"
73: Content-Transfer-Encoding: quoted-printable
74: Content-Disposition: inline
Der Kurzlink führt zu einer gefälschten Volksbankseite.
Lesezeichen