01: Return-path: <root [at] clickedby12.com>
02: Delivery-date: Tue, 20 Oct 2009 xx:xx:xx +0200
03: Received: from mi007.mc1.hosteurope.de ([80.237.138.248])
04: by wp082.webpack.hosteurope.de running ExIM with esmtp
05: ID: [ID filtered]
06: Received: from mx0.gmx.net ([213.165.64.100])
07: by mx0.webpack.hosteurope.de (mi007.mc1.hosteurope.de) with smtp
08: ID: [ID filtered]
09: for poor [at] spamvictim.tld; Tue, 20 Oct 2009 xx:xx:xx +0200
10: Received: (qmail 9910 invoked by alias); 20 Oct 2009 xx:xx:xx -0000
11: Delivered-To: GMX delivery to xxx AT gmx.de
12: Received: (qmail invoked by alias); 20 Oct 2009 xx:xx:xx -0000
13: Received: from unknown (EHLO clickedby12.com) [81.88.31.195]
14: by mx0.gmx.net (mx118) with SMTP; 20 Oct 2009 xx:xx:xx +0200
15: Received: by clickedby12.com (Postfix, from userID: [ID filtered]
16: ID: [ID filtered]
17: To: xxx AT gmx.de
18: Subject: Hallo xxx, gewinnen Sie einen 600 EUR IKEA Gutschein
19: Date: Tue, 20 Oct 2009 xx:xx:xx +0200
20: From: =?iso-8859-1?Q?Wohlf=FChl_Umfrage?= <stargames [at] clickedby12.com>
21: Message-ID: [ID filtered]
22: X-Priority: 3
23: X-Mailer: PHPMailer [version 1.73]
24: MIME-Version: 1.0
25: Content-Type: multipart/alternative;
26: boundary="b1_b0a82b0748dedc8e5f55f3e87a33f6ff"
27: X-GMX-Antispam: 0 (Mail was not recognized as spam)
28: X-Resent-By: Forwarder <forwarder [at] gmx.de>
29: X-Resent-For: xxx AT gmx.de
30: X-Resent-To: xxx [at] xxx.xx
31: X-HE-Virus-Scanned: yes
32: X-HE-Spam-Level: ++
33: X-HE-Spam-Score: 2.4
34: X-HE-Spam-Report: Content analysis details: (2.4 points)
35: pts rule name description
36: ---- ---------------------- --------------------------------------------------
37: 2.1 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
38: [URIs: jetzt100euro.com]
39: 0.2 TW_GM BODY: Odd Letter Triples with GM
40: 0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image area
41: 0.1 HTML_MESSAGE BODY: HTML included in message
42: 0.0 RDNS_NONE Delivered to trusted network by a host with no rDNS
43: Envelope-to: poor [at] spamvictim.tld
Lesezeichen