01: From - Tue Dec 7 xx:xx:xx 2021X-Account-Key: account4
02: X-UIDL: [UID filtered]
03: X-Mozilla-Status: 0003
04: X-Mozilla-Status2: 00000000
05: X-Mozilla-Keys:
06:
07: X-Envelope-From: <xxxxxxxxx>
08: X-Envelope-To: <xxxxxxxxxxxxxx>
09: X-Delivery-Time: 1638866037
10: X-UID: [UID filtered]
11: Return-Path: <xxxxxxxxxxxxxxxx>
12: ARC-Seal: i=4; a=rsa-sha256; t=1638866037; cv=pass;
13: d=strato.com; s=strato-dkim-0002;
14: b=hJ+LFazKYrXuVOPx4gbCzSDN1CXcz4xxh0XTcgQ4yAPVdYpKgZ6K584f2Xx74uwY2M
15: B5iUyD6dAOVLdrWlbu7Fu/lev7/kRRmQFeG2SMH5BxFs8rsdTuQitorFKMdMNfrDL6MF
16: Q/JtUnSFaykE6JOFJhdxqQNZH2z27YkJbEfWX1Pow8t2h/wDFdpegkg3OZjf46Bkgutl
17: s9I51f792D/tXcdKkDDfn0NYLKljqOOCO0VQPexNxmofbEzvsnIk+vKqtLoirBOHoHP7
18: B/dMOz6+eD8fLpTCvEgV9AJkHOe9JiJIygHO0T+EHjcf5vVRgWgj0iQpQWMEQm6lmlJ6
19: TFbw==
20: ARC-Message-Signature: i=4; a=rsa-sha256; c=relaxed/relaxed; t=1638866037;
21: s=strato-dkim-0002; d=strato.com;
22: h=Message-ID:Subject:Date:To:From:Cc:Date:From:Subject:Sender;
23: bh=0Gj6G7kB9qwZoMyya7rJmiuK298sHpXhMd+aNeSbToo=;
24: b=QKX1g/v2I44C/apPB5FtvcDv5/N8hD6z2vvxtt4FHLudgE5vyJbyet9aM+h4Du/ckV
25: h2QusYlVypx5Zb+GNOJCIP3XgGXVanIlpv+MRFEBetRqvwONjSPiM0CSx1a8pCmEQ4ct
26: 3Td5JLoMEWW8tjH6eDRX//WBkrax1zw6bXONmoEAIjvgacLefTF6fR+iG9l9EX1k+IlZ
27: kAEQ+LvuQ0SrNv8bLw1BZfRmlpEeuJi0MuJfmuob5w2/AVUMfRw0qscq3ErgR9U4ncX7
28: 7Uhtpli6f8XEayhnLtDX64cbRhegDFodAxZ3FwFumODsvJ/QwyW99opeZsrumD4YE6jb
29: aRVw==
30: ARC-Authentication-Results: i=4; strato.com;
31: dmarc=none header.from="cepewa.de";
32: arc=pass (i=3) smtp.remote-ip=81.169.146.150;
33: dkim=pass header.d="cepewa.onmicrosoft.com"
34: header.s="selector1-cepewa-onmicrosoft-com" header.a="rsa-sha256";
35: dkim-adsp=pass;
36: spf=pass smtp.mailfrom="SRS0=Cv6uPG=QY=cepewa.de=poor [at] spamvictim.tld"
37: Authentication-Results: strato.com;
38: dmarc=none header.from="cepewa.de";
39: arc=pass (i=3) smtp.remote-ip=81.169.146.150;
40: dkim=pass header.d="cepewa.onmicrosoft.com"
41: header.s="selector1-cepewa-onmicrosoft-com" header.a="rsa-sha256";
42: dkim-adsp=pass;
43: spf=pass smtp.mailfrom="SRS0=Cv6uPG=QY=cepewa.de=poor [at] spamvictim.tld"
44: X-RZG-CLASS-ID: [ID filtered]
45: X-RZG-Expurgate: bulk/normal
46: X-RZG-Expurgate-ID: [ID filtered]
47: Received-SPF: pass
48: (strato.com: domain _spf.strato.com designates 81.169.146.150 as permitted sender)
49: mechanism=ip4;
50: client-ip=81.169.146.150;
51: helo="mi4-p07-ob.smtp.rzone.de";
52: envelope-from="xxxxxxxxxxxxxxxxx";
53: receiver=smtpin.rzone.de;
54: identity=mailfrom;
55: Received: from mi4-p07-ob.smtp.rzone.de ([81.169.146.150])
56: by smtpin.rzone.de (RZmta 47.35.1 OK)
57: with ESMTPS ID: [ID filtered]
58: (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits))
59: (Client CN "*.smtp.rzone.de", Issuer "TeleSec ServerPass Class 2 CA"
60: (verified OK (+EmiG)))
61: (Client hostname verified OK)
62: for <xxxxxxxxxxxxxxxx>;
63: Tue, 7 Dec 2021 xx:xx:xx +0100 (CET)
64: ARC-Seal: i=3; a=rsa-sha256; t=1638866037; cv=pass;
65: d=strato.com; s=strato-dkim-0002;
66: b=MBqlP2WPWEOnfxsCWs/jGKp70J4Cei1WSVWWOD9CnFL6RnthydkxbsHMbhtI2Z8tzw
67: 1EztJFMMpmwV0gszSHu1wgsscGWw4BMqtj6vAFHWEeWZkQ17rR6Hh7lyLfE+2iOxL32F
68: PtgitwOrIUQAuSxZAwSaWJUzu+0aUVjU+4mVNFlY7QNDx6prjF5k7tF0nzLQmzQOuTTU
69: HznHKcZR8FSEnCS4I5jDeJaG0kNS9U5rWmJN3QyulmCoEQmTKiRP2hqqrbSguNcSUHp1
70: /wDqU1qlZDXvlthI4Ph3Jh5MKB6yevJV0rr+1wcNr59PjJZCz4JfT2TDaurVRDopMirR
71: pIRQ==
72: ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; t=1638866037;
73: s=strato-dkim-0002; d=strato.com;
74: h=Message-ID:Subject:Date:To:From:Cc:Date:From:Subject:Sender;
75: bh=0Gj6G7kB9qwZoMyya7rJmiuK298sHpXhMd+aNeSbToo=;
76: b=M1HnUr3I4M0z6T4vvelhFzKiq1JxGiEFfVBk4TWQFhe8Wrqg2mognC+ghdOx6voc6T
77: w1+jtlieap9mz6vDqXgUOaL4EWeHerhdS++VUBhhJ99vo3m3FPNksnnqdXpzmuGF8bIb
78: dD23Ry3Vsl3HQAXXE6A6zyKYDl4g3SwI6Uzdkdg3P9hE23I6o9FQzhMvyuzGi41xC/BN
79: 5LOkGBouGrL5kA5J7Y7owVlHBPdp0A8UkicQSa8PzZf+tFESM67+Ya6v1OfQiVLLKQNc
80: C0TekqqlTM9dxJ5Ut4v0Ikrby2tmezEgkVm3KHGojN/GdWkWHsQK2AoiNeK1msbfq8FV
81: Ezfg==
82: ARC-Authentication-Results: i=3; strato.com;
83: dmarc=none header.from="cepewa.de";
84: arc=pass (i=1) smtp.remote-ip=40.107.6.85;
85: dkim=pass header.d="cepewa.onmicrosoft.com"
86: header.s="selector1-cepewa-onmicrosoft-com" header.a="rsa-sha256";
87: dkim-adsp=pass;
88: spf=pass smtp.mailfrom="xxxxxxx";
89: x-fwd=pass
90: X-RZG-FWD-BY: xxxxxxxxxxxxxxxxxxxxx
91: Received: from localhost ([unix socket])
92: by mailin.rzone.de (RZmta 47.35.0) with LMTPS;
93: Tue, 7 Dec 2021 xx:xx:xx +0100 (CET)
94: ARC-Seal: i=2; a=rsa-sha256; t=1638866034; cv=pass;
95: d=strato.com; s=strato-dkim-0002;
96: b=SRNbIECoA6Kph3kMSA2dkJVPHhJnPiiEgfCG7t8GrD8qjC1Ff7qg7DjkVm9XWlrftc
97: gO6qXfXdQvIrJFZxuWx6lj1bBrjSghnMk6iX6aA3FAxYbVZVkOJu4Kc17ZmzDRN1pnAI
98: pIzj4PFAbR10oO2+/9kTjZiesFHaacBwsIgbZFKKptvIRAStAzoxKOOqLhMoFowjc9mr
99: +h5hdjBxB1Sj/bTWYr9PXXdRr+F4HDElBQARU1vuXmua24XOK3iCHlUGBawf5P3hyBFJ
100: 9sNsZjqHvDlWnJI8Vkp/YjR0mRMhun+yJqxtm+zgiiM3eBwzVt0Xn852lAgN44Am9h8c
101: WxAQ==
102: ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; t=1638866034;
103: s=strato-dkim-0002; d=strato.com;
104: h=Message-ID:Subject:Date:To:From:Cc:Date:From:Subject:Sender;
105: bh=0Gj6G7kB9qwZoMyya7rJmiuK298sHpXhMd+aNeSbToo=;
106: b=qkAS2i3KHbpoaEvXyZR83WZmnPojRxu1LSYJEBWJydZKpMCsP+gOcCqQRpHctIE1uw
107: eEu8MnQpN9y3/ckxqhG1G/UCZU1BVOAQ2ntwI3BsXOnp4GKiiIUd8JOIGFmN8BBY2iPv
108: 0oyOsulawDu/CM+2esOTszYRoRpxXSCcIk6hyTX9OGbUvUIEDUu3rln+5V7HJMKRgJam
109: jbdos2An7nDyAQFatBEcY9Z6r9YewT2xp9lJAJqiBUpRblV8Ixaobrrim1SN+3yUZKxg
110: qW3s9PbbPyeVw4Rkey1HDXqLdmmjEFQaI32g5H8w0PWCbJVOTh7nEyPVP2aJg86vEN2E
111: +7PA==
112: ARC-Authentication-Results: i=2; strato.com;
113: dmarc=none header.from="cepewa.de";
114: arc=pass (i=1) smtp.remote-ip=40.107.6.85;
115: dkim=pass header.d="cepewa.onmicrosoft.com"
116: header.s="selector1-cepewa-onmicrosoft-com" header.a="rsa-sha256";
117: dkim-adsp=pass;
118: spf=pass smtp.mailfrom="xxxxxxxxxxxxxxxx"
119: X-RZG-CLASS-ID: [ID filtered]
120: X-RZG-Expurgate: bulk/normal
121: X-RZG-Expurgate-ID: [ID filtered]
122: Received-SPF: pass
123: (strato.com: domain cepewa.de designates 40.107.6.85 as permitted sender)
124: mechanism=ip4;
125: client-ip=40.107.6.85;
126: helo="EUR04-DB3-obe.outbound.protection.outlook.com";
127: envelope-from="xxxxxxxxxxxxxx";
128: receiver=smtpin.rzone.de;
129: identity=mailfrom;
130: Received: from EUR04-DB3-obe.outbound.protection.outlook.com
131: (mail-eopbgr60085.outbound.protection.outlook.com [40.107.6.85])
132: by smtpin.rzone.de (RZmta 47.35.0 OK)
133: with ESMTPS ID: [ID filtered]
134: (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (curve X9_62_prime256v1 with 256
135: ECDH bits, eq. 3072 bits RSA))
136: (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services
137: CA-1" (verified OK))
138: (Client hostname verification FAILED)
139: for <xxxxxxxxxxxx>;
140: Tue, 7 Dec 2021 xx:xx:xx +0100 (CET)
141: ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
142: b=WdJypWel7zQHOdAkvol9FXE2FTBPx+fNWhjJnXGzObRgE37Ej/jwbMkctTSVAEjkI+Q8dIKpYDeSXWvGMFY1J75MiG/l
143: o+GlrtZt9KNz5iafgBGIKWbSD6XSkOLqEWkly23KVbT4gavwM8yL7IbFr1wveUZb7UBAOOffDrM+HDtagPKrBOSVtTrQt0
144: USvfeEwUKRkKRo8+KG0fxY/MXzY5wEIO7Ixyjbq9kcBJWdP9IdWaWYZqa2LBlSJ89j0JJJIvodlYEVwGzOoaxM0yWxbNGm
145: ttEO02x/SMnVdmYzUjso3Otq4zSlbj5dH+MLUjHqv15YNlY4qmQPQNhMKHg==
146: ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
147: s=arcselector9901;
148: h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-Ch
149: nkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
150: bh=0Gj6G7kB9qwZoMyya7rJmiuK298sHpXhMd+aNeSbToo=;
151: b=juIeTFi0GOwJVmMtOpG4N47N0vt8b6ZHwi3Yi5TbSqIzoobpn/9kxjQUX473RC7TpiHUPgAczCg1IF3Bb+ethmOcNwj/
152: d4avCLt6EqPaPtzLRnfr2fldWjQV9jrQ/d7Wc0UXXI3c/1ORSolfPwTDSdJXlIRDxcTYiuglplpEj2CCgdxLycIGLwFv27
153: 1AVaumsF/oiNKQGNh3h+owwRKgO+vOEi9MS+RLInGtcDmHilgmm/si+v/hpGtwgtf957y0V13JWsCtxe/38emZNGt31P57
154: MK5PITLn0hwmrXZodUMv+OJGsUWEjL+23L5aTEb74sPn3Dgk6JKyeHsgR9w==
155: ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
156: 80.74.59.42) smtp.rcpttodomain=kinderschminkwelt.de smtp.mailfrom=cepewa.de;
157: dmarc=bestguesspass action=none header.from=cepewa.de; dkim=none (message not
158: signed); arc=none
159: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
160: d=cepewa.onmicrosoft.com; s=selector1-cepewa-onmicrosoft-com;
161: h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
162: bh=0Gj6G7kB9qwZoMyya7rJmiuK298sHpXhMd+aNeSbToo=;
163: b=6F68aH4hAsEkSdkL3QISMtEE9/CmfK4zLc/v1+s4Wje4wZy4vDj1N6AfAF4GDyHnYO5eF6zMwCp8qZWJOzcmWLU2IRRR
164: ti2EEPyw6LGJ133BaeSFzUSStDqJQ5qODsoXyZXxRKo2vyXWyqWyrEgbgKgJJGVnuNacRpliaLrrto=
165: Received: from AS8PR04CA0001.eurprd04.prod.outlook.com (2603:10a6:20b:310::6)
166: by AS8P190MB1653.EURP190.PROD.OUTLOOK.COM (2603:10a6:20b:3f0::10) with
167: Microsoft SMTP Server (version=TLS1_2,
168: cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) ID: [ID filtered]
169: 2021 xx:xx:xx +0000
170: Received: from AM6EUR05FT016.eop-eur05.prod.protection.outlook.com
171: (2603:10a6:20b:310:cafe::ab) by AS8PR04CA0001.outlook.office365.com
172: (2603:10a6:20b:310::6) with Microsoft SMTP Server (version=TLS1_2,
173: cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) ID: [ID filtered]
174: Transport; Tue, 7 Dec 2021 xx:xx:xx +0000
175: X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 80.74.59.42)
176: smtp.mailfrom=cepewa.de; dkim=none (message not signed)
177: header.d=none;dmarc=bestguesspass action=none header.from=cepewa.de;
178: Received-SPF: Pass (protection.outlook.com: domain of cepewa.de designates
179: 80.74.59.42 as permitted sender) receiver=protection.outlook.com;
180: client-ip=80.74.59.42; helo=mail.cepewa.de;
181: Received: from mail.cepewa.de (80.74.59.42) by
182: AM6EUR05FT016.mail.protection.outlook.com (10.233.240.243) with Microsoft
183: SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
184: 15.20.4755.13 via Frontend Transport; Tue, 7 Dec 2021 xx:xx:xx +0000
185: Received: from CPWExchange2019.cepewa.de (10.0.0.2) by
186: CPWExchange2019.cepewa.de (10.0.0.2) with Microsoft SMTP Server (TLS) id
187: 15.0.1497.26; Tue, 7 Dec 2021 xx:xx:xx +0100
188: Received: from eNVentaW2K8R2 (10.0.0.3) by CPWExchange2019.cepewa.de
189: (10.0.0.2) with Microsoft SMTP Server ID: [ID filtered]
190: Tue, 7 Dec 2021 xx:xx:xx +0100
191: MIME-Version: 1.0
192: From: <xxxxx>
193: To: <xxxxxxxxxxx>
194: Date: Tue, 7 Dec 2021 xx:xx:xx +0100
195: Subject: =?utf-8?B?Q0VQRVdBIEV4cHJlc3MgwrcgU2NobmVsbHRlc3RzLCBNYXNr?=
196: =?utf-8?B?ZW4gJiBtb3JlIQ==?=
197: Content-Type: text/html; charset="utf-8"
198: Content-Transfer-Encoding: base64
199: Message-ID: [ID filtered]
200: X-EOPAttributedMessage: 0
201: X-MS-PublicTrafficType: Email
202: X-MS-Office365-Filtering-Correlation-ID: [ID filtered]
203: X-MS-TrafficTypeDiagnostic: AS8P190MB1653:EE_
204: X-Microsoft-Antispam-PRVS:
205: <poor [at] spamvictim.tld>
206: X-MS-Oob-TLC-OOBClassifiers: OLM:1728;
207: X-MS-Exchange-SenderADCheck: 1
208: X-MS-Exchange-AntiSpam-Relay: 0
209: X-Microsoft-Antispam: BCL:0;
210: X-Microsoft-Antispam-Message-Info:
211: KKH1W6T8Jh7x5KrNiOzG/D1cWDp+59tapsmQIbPooS/V/OB6lvVEeZXXmQmwMhIvvWhJy+q/qh84ao89Vao/8wX7v8c
212: 2/0WU+f8XuM0iveXBRl+y0OEVHWD9u1qQOz3oSaldyACC171utJwcCdnbtgOj/fa7XAVIebMLcebcGt0RfjZk/LgAnab2P
213: A3/E1zLR31FAZHaSfp8G9TMmWffAPqRUL2oErSMLm0kCionUsmOqnJXfcMkgQX3hfr+a3VxsySfmtaXlZuNKR/RqHigJ2R
214: isEL/Fm6o/cGj2UofeiXCgLvrbrbI5/8rI1QjK7TLTJcb5K2WlDzRNhvlC5BJxfSdkvvNxl+pRpTGaOwf5vmglyBeAk8n+
215: 2CuqpF0PbZP0wHEvaS+Fanz8Y7kbAhs526zg4tYCQr+Ar5Fjyo1p3U1ny7cJ8R07oEoGDoNxDJeuHh+lbmlPbbrRbGKwGz
216: st0CjrgFD45JKHByakqAYc83vKgUOpw8SQjNiMpjWNiyTnbPIAPnpAQKcvLcqjRcrLVQshaX6WEp9BhHqUo65y8QIbztgV
217: e6eCUQSfiYs1s8aSeThSg4qJzq9CFL6ZCp7GcijUpxjwZm+9Dj9xPgp/AFzZAz7R9T7FnNv3jP6iGsx8UmkllJmNvikIno
218: 1mz3SpbVC77FKkEiI1YXuUaoWkJLFsYVGHHxLPxF50XoP0VPqIIzAxXWCjgNi5imU5gNKHdIe18Pd8QA+jZDl7W7xh0hQD
219: i6VP2kaMwvInqDZM3j6xfDs7jhX/Vo9vWQlDHU9jKcUvkuQUrjyHzOmxHNnTMgjEvQN2s1imk6fDYb+aMU5Q7+5vsaFUb9
220: KRpYL0cn93D/T7PT1bVlphc2BjOUqpfJQJmkhrKq08Rh
221: X-Forefront-Antispam-Report:
222: CIP:80.74.59.42;CTRY:DE;LANG:de;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.cepewa.de;PTR:042-059-07
223: -080.ip-addr.inexio.net;CAT:NONE;SFS:(39850400004)(396003)(136003)(346002)(376002)(46966006)(3
224: 840700001)(356005)(2906002)(26005)(186003)(40265005)(36860700001)(21615005)(70586007)(8936002)
225: 47076005)(336012)(82740400003)(40480700001)(70206006)(7066003)(166002)(316002)(6916009)(508600
226: 01)(66574015)(2876002)(82310400004)(81166007)(108616005)(426003)(5660300002)(24736004)(9685405
227: 04);DIR:OUT;SFP:1101;
228: X-OriginatorOrg: cepewa.de
229: X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Dec 2021 xx:xx:xx.1780
230: (UTC)
231: X-MS-Exchange-CrossTenant-Network-Message-ID: [ID filtered]
232: X-MS-Exchange-CrossTenant-ID: [ID filtered]
233: X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp:
234: TenantId=c9313a1a-bf11-4ca4-9641-5268bd2b4925;Ip=[80.74.59.42];Helo=[mail.cepewa.d
235: ]
236: X-MS-Exchange-CrossTenant-AuthSource:
237: AM6EUR05FT016.eop-eur05.prod.protection.outlook.com
238: X-MS-Exchange-CrossTenant-AuthAs: Anonymous
239: X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
240: X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P190MB1653
Lesezeichen