01: From - Wed May 5 xx:xx:xx 2021X-Account-Key: account4
02: X-UIDL: [UID filtered]
03: X-Mozilla-Status: 0001
04: X-Mozilla-Status2: 00000000
05: X-Mozilla-Keys:
06:
07: X-Envelope-From:
08: <SRS0=RFoqkz=KA=corona-schnelltest-makler.de=info [at] srs.smtpin.rzone.de>
09: X-Envelope-To: <xxxxxxxxxxxxxxxxx>
10: X-Delivery-Time: 1620189300
11: X-UID: [UID filtered]
12: Return-Path:
13: <SRS0=RFoqkz=KA=corona-schnelltest-makler.de=info [at] srs.smtpin.rzone.de>
14: ARC-Seal: i=2; a=rsa-sha256; t=1620189300; cv=pass;
15: d=strato.com; s=strato-dkim-0002;
16: b=rUwllxm6jZkRFmw9XWOGrXfisSU9PJ7hpkngojmnn53POm2BsQeq/ouZZIZvtyuI6C
17: wgyya1zz60dYpi+TE0kidy4UAz5JFTJWEp/j+z8EWRXkc+7uk9qv3eofq21Tf2b+oLX4
18: rEWZqDv4lS4/5ScpFIVgLXmctCaNYQtXhMQ9h+YnYV9Ao/fRQTXSwCz9qktTgRinI3nS
19: zXnLBOtqvBe4u4sq9fDzTSLZxy5zt8z3WhLkMg15Jb8xmCwxFZO7s9gjuF4Tr94TfBSq
20: fCwtANWQK507ys0BJvgTb35HkJIL6vSTaU9g8jLtpqoVvRORVhvzwDQUce9c46CovuSY
21: pGlw==
22: ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; t=1620189300;
23: s=strato-dkim-0002; d=strato.com;
24: h=Message-ID:Subject:From:To:Date:Cc:Date:From:Subject:Sender;
25: bh=lIzy6avJXEagshf4nuGlSw9N+eGDxS6dHFGCTpN55S8=;
26: b=VD44xxAS8QcS1ANiatNf1lkjepYSw+sg/fCNkBXqnyX/rEdfkMapkPP+XK/tG+ph8R
27: qSfZDQcvrOIJPpuYkcoiiIDz4WXTvovaYkNmY0i7BJ0OjI+sztiBAGg9uOAzfoSqeqrn
28: ogpv6iBtjs9oZtDWTzT5HayPEBGJuTtEoDxPgJeKnxwk6N2z3//7d5Cr201RHd/QVL+T
29: Jz7Vn8Nrd0Pp8GxtmeKeo8jFoAJMc/V+TJvNr9EDpqeNDMqFnsRstsagn/tliXNozs1K
30: viSpSSCiFHdfy+NwFxTvjFvcBr6IeKuQ1ZyADearnRGwps7ePwk55QMgxj/LZ6UE4Q2g
31: 4bAQ==
32: ARC-Authentication-Results: i=2; strato.com;
33: dmarc=pass (p=NONE sp=NONE) header.from="corona-schnelltest-makler.de";
34: arc=pass (i=1) smtp.remote-ip=81.169.146.151;
35: dkim=pass header.d="corona-schnelltest-makler.de"
36: header.s="kas202104191354" header.a="rsa-sha256";
37: dkim-adsp=pass;
38: spf=pass
39: smtp.mailfrom="SRS0=RFoqkz=KA=corona-schnelltest-makler.de=poor [at] spamvictim.tld"
40: Authentication-Results: strato.com;
41: dmarc=pass (p=NONE sp=NONE) header.from="corona-schnelltest-makler.de";
42: arc=pass (i=1) smtp.remote-ip=81.169.146.151;
43: dkim=pass header.d="corona-schnelltest-makler.de"
44: header.s="kas202104191354" header.a="rsa-sha256";
45: dkim-adsp=pass;
46: spf=pass
47: smtp.mailfrom="SRS0=RFoqkz=KA=corona-schnelltest-makler.de=poor [at] spamvictim.tld"
48: X-RZG-CLASS-ID: [ID filtered]
49: X-RZG-Expurgate: bulk/normal
50: X-RZG-Expurgate-ID: [ID filtered]
51: Received-SPF: pass
52: (strato.com: domain _spf.strato.com designates 81.169.146.151 as permitted sender)
53: mechanism=ip4;
54: client-ip=81.169.146.151;
55: helo="mi4-p07-ob.smtp.rzone.de";
56: envelope-from="SRS0=RFoqkz=KA=corona-schnelltest-makler.de=poor [at] spamvictim.tld";
57: rceiver=smtpin.rzone.de;
58: identity=mailfrom;
59: Received: from mi4-p07-ob.smtp.rzone.de ([81.169.146.151])
60: by smtpin.rzone.de (RZmta 47.25.6 OK)
61: with ESMTPS ID: [ID filtered]
62: (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits))
63: (Client CN "*.smtp.rzone.de", Issuer "TeleSec ServerPass Class 2 CA"
64: (verified OK (+EmiG)))
65: (Client hostname verified OK)
66: for <xxxxxxxxxxxxxxxxxxxxx>;
67: Wed, 5 May 2021 xx:xx:xx +0200 (CEST)
68: ARC-Seal: i=1; a=rsa-sha256; t=1620189299; cv=none;
69: d=strato.com; s=strato-dkim-0002;
70: b=AP+D/fo8ltGuJXoHv/M89Os60VeP+MOe3QQJX5SBXENoUd+HPvmL4ggvT1JtOD46iX
71: PMIwxVbbhHFhYy2QhjgRzC7/MPybQu4ZCbt8FbkfCWlO0a4CZlCm4LSlDX7YgxdbBG5C
72: j9uXKCRRmgSYZBvHR9tzgSp/Lme6frWH3Argh/jLMqVxZxUVEN50QSAp71f9988Mp7OM
73: VE6as20gv3foomiC/0nnROrOc59qoiayw0szN2G0p5t4wK7/HVuDZ305EaGGYHdEKdw/
74: mibpjQ0c0OBEF2zEikw9hsF9OSnJOZjHkNRIUozSpjFG+207SFJNG0ZvHsvTlC7cx76K
75: IprA==
76: ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1620189299;
77: s=strato-dkim-0002; d=strato.com;
78: h=Message-ID:Subject:From:To:Date:Cc:Date:From:Subject:Sender;
79: bh=lIzy6avJXEagshf4nuGlSw9N+eGDxS6dHFGCTpN55S8=;
80: b=VkeVelcX58SD8pAygV7lPCwJQZ6WyfArr2TFbmk5fqWCjYznKLj5QDKc2LdzOvvkAJ
81: zrSrALaxCt6addHCD/wenNd7HPenI0ruT6E6FIPDomHwcBIARsy541d8g50gNYmTL4k7
82: gZbjUcrFhcyOEiWN5uMsAs0rphkV2kiKPRDwzJx7KoPipw6Z8QV95pP77JTb0mKdLpcx
83: qBEqBNTULm6Bhwuo7e/P3HgrkKQaJi+3XctrfkKpwKzOSm28sw9YH2fyNw5JO8BVv6OK
84: SpPN1qQp2K93Uz1OsGU8B09D5PV51W53KTQyZ1nBXqeGsan2lf0B0hIyLz4jz9OngT5C
85: D7fw==
86: ARC-Authentication-Results: i=1; strato.com;
87: dmarc=pass (p=NONE sp=NONE) header.from="corona-schnelltest-makler.de";
88: dkim=pass header.d="corona-schnelltest-makler.de"
89: header.s="kas202104191354" header.a="rsa-sha256";
90: dkim-adsp=pass;
91: spf=pass smtp.mailfrom="poor [at] spamvictim.tld";
92: x-fwd=pass
93: X-RZG-FWD-BY: xxxxxxxxxxxxxxxxx
94: Received: from localhost ([unix socket])
95: by mailin.rzone.de (RZmta 47.25.6) with LMTPS;
96: Wed, 5 May 2021 xx:xx:xx +0200 (CEST)
97: X-RZG-CLASS-ID: [ID filtered]
98: X-RZG-Expurgate: bulk/normal
99: X-RZG-Expurgate-ID: [ID filtered]
100: Received-SPF: pass
101: (strato.com: domain corona-schnelltest-makler.de designates 85.13.142.208 as permitted
102: sender)
103: mechanism=mx;
104: client-ip=85.13.142.208;
105: helo="dd23300.kasserver.com";
106: envelope-from="poor [at] spamvictim.tld";
107: rceiver=smtpin.rzone.de;
108: identity=mailfrom;
109: Received: from dd23300.kasserver.com ([85.13.142.208])
110: by smtpin.rzone.de (RZmta 47.25.6 OK)
111: with ESMTPS ID: [ID filtered]
112: (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits))
113: (Client dID: [ID filtered]
114: for <xxxxxxxxxxxxxxxxxxxxxxxxxxxx>;
115: Wed, 5 May 2021 xx:xx:xx +0200 (CEST)
116: Received: from supernl.corona-schnelltest-makler.de (dd23300.kasserver.com
117: [85.13.142.208])
118: by dd23300.kasserver.com (Postfix) with ESMTPSA ID: [ID filtered]
119: for <xxxxxxxxxxxxxxxx; Wed, 5 May 2021 xx:xx:xx +0200 (CEST)
120: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
121: d=corona-schnelltest-makler.de; s=kas202104191354; t=1620189296;
122: bh=lIzy6avJXEagshf4nuGlSw9N+eGDxS6dHFGCTpN55S8=;
123: h=Date:To:From:Subject:From;
124: b=TXpj1eSa0xsdYDghNOPEdUM3fg5W3z8Jx+E653RJVzj83gJcpCx/UmQ1ZKidvZtUS
125: AYWW5IPJx9ff+RwN07QS6K1LlRfQg5pm895hRVGjFaBQhpXe8IxBBw37t16klUjkoS
126: tNcFZ3eNOSqXjEnesHGY0Z/I4jpOrdfZJSAyLHXrhozNBdpBw7jWBYq3+hKGoW064a
127: 67+bBpz+sLBG7Wnbz8FToeFt1kdFjAwsNk6zfd5jzigQZrJmI5WYSRbGvNfndJvhsj
128: W0vnSOTfqaH+W6XtVieR70GlDzxtTIb/VKbsaP9WM6sO4LBabshPU2y/piImSNRTSR
129: w2acS8bYz7Z0A==
130: Date: Wed, 5 May 2021 xx:xx:xx +0200
131: To: poor [at] spamvictim.tld
132: From: Corona Schnelltest Makler <info [at] corona-schnelltest-makler.de>
133: Subject: =?utf-8?Q?Bu=C3=9Fgeld_von_bis_zu_30.000_EUR_vermeiden?=
134: Message-ID: [ID filtered]
135: X-Mailer: PHPMailer 6.4.0 (https://github.com/PHPMailer/PHPMailer)
136: MIME-Version: 1.0
137: Content-Type: text/html; charset=utf-8
138: Content-Transfer-Encoding: 8bit
