Hier ein Auszug aus dem Quelltext der Mail:
header:
01: Return-Path: <bounce [at] chefkoch.de>
02: Received: from kikstore.com ([45.156.26.223]) by mx.emig.kundenserver.de
03: (mxeue110 [217.72.192.66]) with ESMTP (Nemesis) ID: [ID filtered]
04: for <poor [at] spamvictim.tld>; Wed, 08 Sep 2021 xx:xx:xx +0200
05: Received: from flpn-sentry.natcotech.com () by
06: mx.emig.kundenserver.de (mxeue109 ) with ESMTP (Nemesis) id
07: 1N16cu-1mzejZ00C2-012Zgz for <poor [at] spamvictim.tld>; Sun, 29 Aug 2021 xx:xx:xx
08: +0200
09: Content-Type: text/html; charset="utf-8"
10: MIME-Version: 1.0
11: Content-Transfer-Encoding: 8bit
12: X-CSA-Complaints: whitelist-complaints [at] eco.de
13: X-KM-Flags: 1.37024328.32094
14: List-ID: [ID filtered]
15: From: "Frank Schmidt, Money&MMBusiness Fiananzanalyst"
16: <info [at] kjnews.promifacts.de>
17: Subject: Ich habe die E-Mail-Adresse falsch angegeben. Lesen Sie diese Nachricht nicht.
18: To: Ulreich Hazard <poor [at] spamvictim.tld>
19: List-Unsubscribe-Post: List-Unsubscribe=One-Click
20: List-Unsubscribe: <https://kjnews.promifacts.de/abm.php?[UNSUB filtered]>
21: Feedback-ID: [ID filtered]
22: Message-ID: [ID filtered]
23: Date: Frank Schmidt, Money&MMBusiness Fiananzanalyst
24: Envelope-To: <poor [at] spamvictim.tld>
25: X-Spam-Flag: NO
26: ...
Lesezeichen