Phish source
====================================================================
Received: from srv01.ttnetwebim.com (srv01.ttnetwebim.com [93.155.109.2])
(using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(Client did not present a certificate)
by X (Postfix) with ESMTPS id X
for <X>; Thu, 1 Oct 2020 X
Received: by srv01.ttnetwebim.com (Postfix, from userid 10632)
id X; Fri, 2 Oct 2020 X
To: X
Subject: ***SPAM*** Bitte bestatigen Sie den Versand Ihres Pakets.
X-PHP-Script: unyegidamaddeleri.org/home/wp-content/plugins/accelerated-mobile-pages/mailing/567561576979/index.php for 51.103.147.37
From: Swiss Post IncaMail <swisspost@im.post.ch>
Date: Fri, 02 Oct 2020 X
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
MIME-Version: 1.0
Message-Id: <X.X@srv01.ttnetwebim.com>
====================================================================