Skip to content

Instantly share code, notes, and snippets.

@rorymckinley
Created May 27, 2021 15:35
Show Gist options
  • Save rorymckinley/b3f908f0b6eb059ba226fe3d408d998c to your computer and use it in GitHub Desktop.
Save rorymckinley/b3f908f0b6eb059ba226fe3d408d998c to your computer and use it in GitHub Desktop.
Spam email with noisy headers
Delivered-To: xxxxxxxxxx@gmail.com
Received: by 2002:a4a:5e42:0:0:0:0:0 with SMTP id h63csp3374554oob;
Mon, 24 May 2021 17:16:48 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJyKp6gW2dKktMurjH/o2ChRn/YlqMUonSvALTtmzHxltPJTOB/GP7mIUy35kyHEdW8mTAzB
X-Received: by 2002:a17:902:f291:b029:f0:ba5b:5c47 with SMTP id k17-20020a170902f291b02900f0ba5b5c47mr28313770plc.41.1621901808578;
Mon, 24 May 2021 17:16:48 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1621901808; cv=none;
d=google.com; s=arc-20160816;
b=veQUdmJt0/ISfl4k+veXFATeIk1AJUqPVB1k7aKy2kdA4tQtIVOAiG8bZCF0aAyycV
gYBPGZoE3wGqidTKO/bgGj/wPun/W1hUzozHa2e3MWmKLSlcob/IQZFK3JxTTmgSjfyJ
y/7C3Zxn0m5LcdCtjIv22wrkviWUW1qcVxiKWoD/zGc2PTDxiZJnXT7HuOMWijGpIQn1
eoRjqaAVvUgCqrhyb2uQHmxVGoDefgnuUFJzspPhusb/Q5f6prYG3NukqWqm5Pd2bzq2JIfNgzIL0AwGoyoEsy9PMiS
+IGane3dIsMy3EYXoq5pWRusvjaqMLOYZiEJBLzZqai63MJ/GgRPMrWcNF3o0PTa0osA
IcBW3efTvwT6FiDLl/zCahkTboNNBUulWaL6u9mPKoNwN52PWq8hJ/aD7p00Q6hG42Vv
7/6n9+Ir03VF4Y/EWL6mXhuNe/m/o9Qw4vwIc+r/L/NP/O3e0Xuhx7ZsyZVntysMOQzp
DutT+/AMpKMoU9DkgJODbqb2eslTYfVHb5FPLvfDfp4h7l3icBJ+hKYJHtJ7I6HNn4CQ
gMwg==K0pZRUU2m8Al1R7W76YwznakIfRv3zbphNBpUb5Jz16
Rg4mKAM4QDzyZStmR8HNS3VDGj4QLpz4tvG0cp0/YFEOcOy3k8wAlkKpYBZbM6IbQ4QT
IWTQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=from:date:message-id:message-id:list-id:date:list-unsubscribe
:sender:subject:mime-version:cc:in-reply-to:references:to
:dkim-signature:domainkey-signature:dkim-signature;
bh=xFJ0oE4zeTwPljDmxRgHX2XU6dj5lk/BL2Ciu4w/2+Y=;
b=YFMzG1TStbeshLQ37ATGScQI0RCKaNELu0AXvTAixMB0BHpYhaBcfUD36pxNnF2gPm
/+N+rt6Y5zmy1YOINr2Fllf3dLfb+0Ldmm4FkOACle0q8RlDfF4/bOTkQEKpm+a1VAe3
gpYy5wcqbU8IQ731GnU0VFgR8XgX8IPCkSKkK4BdTICZx1IzlKzWBOVivS/+t8qz02Qo
d2JezK6EY9oHagUkxLPxFNSBrAqdYfyyZB5xcZ0hFfZVvabkTZSAoSiqAkDL/XIS94u5
fYcqnNyLUTNlFsqy1PupVEhGLv+WSXseL4njktcnZ5G6AkAZjo6kkHdbP4JXZNRCDV12
Qqqw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@jauntspet.com header.s=9n4 header.b=A0fJr9yv;
dkim=pass header.i=@gmail.com header.s=20161025 header.b=oDefgnuU;
spf=pass (google.com: domain of delivery_06002224562598.462633772435@language-season.jauntspet.com designates 173.82.12.96 as permitted sender) smtp.mailfrom=delivery_06002224562598.462633772435@language-season.jauntspet.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <delivery_06002224562598.462633772435@language-season.jauntspet.com>
Received: from language-season.jauntspet.com (language-season.jauntspet.com. [173.82.12.96])
by mx.google.com with ESMTP id p4si19921580pll.166.2021.05.24.17.16.48
for <xxxxxxxxxx@gmail.com>;
Mon, 24 May 2021 17:16:48 -0700 (PDT)
Received-SPF: pass (google.com: domain of delivery_06002224562598.462633772435@language-season.jauntspet.com designates 173.82.12.96 as permitted sender) client-ip=173.82.12.96;
Authentication-Results: mx.google.com;
dkim=pass header.i=@jauntspet.com header.s=9n4 header.b=A0fJr9yv;
dkim=pass header.i=@gmail.com header.s=20161025 header.b=oDefgnuU;
spf=pass (google.com: domain of delivery_06002224562598.462633772435@language-season.jauntspet.com designates 173.82.12.96 as permitted sender) smtp.mailfrom=delivery_06002224562598.462633772435@language-season.jauntspet.com;
dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=9n4; d=jauntspet.com;
h=To:References:In-Reply-To:CC:MIME-Version:Subject:Sender:List-Unsubscribe:Date:List-ID:Message-ID:Message-ID:Date:From:Content-Type; i=support.Mv3fkVeVnj@language-season.jauntspet.com;
bh=ad3l8EUdNPXuKTlHqvICPLLRRbw=;
b=A0fJr9yvJkUOIIhSp7iMsPfULULyONQBB9yOCR7bvsjFIrBsnSQEs4wy/XbcFFaoECyf1B59v/E8
CWBJ3hMo7wyVxnsrJXKhD2yCCOUvq1ucZzs1ysQmmEQ6JbOYM52l1Tnzm9BaLpOzVg5cC20nHigj
2kRpQzNXaspKTH+ArZcZKiQWUzfc5puxZUYZM3ySJH3HUndFCP/PaBJl43kBImZRD4gxt8pbPtdO
oTkf6jMOWLUfWhF6yhwmUggV53NZSxgZMjD6DSycXUzm1p6GHi94vaICckp7W8MPvB/rNiWOd9jR
8N0CyogTK/dEt7Y0UfOQn4bg6YXoAPl2Gcc=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=9n4; d=jauntspet.com;
b=BNCNzH9YLgsZzKWPiBnJ5joByREXi5PICv4w4M9r4oneeRFwAPuFyX4l/q81gBeM0cI1Nf3LUZeT
HhYcvvZUvOvv1X6f5ImqtYSFwvwSDticuZVJLyFauwg+CToM8RYZiE7XkAkjrb/t0c/Iobmj6sB6
znQVw/KWyOCZOwGqhMfv8C2PTJrxaWMMjX+1uXT+8ya+JtmnYCJHpT5voDbEisAA/n1LScXYTCbd
oXuPYvEl3eNqs3Uz3SneMrcah1Do3JTvdCQpsO7ieiQFi+SE4mfdRfW1DPt+H+Huq8zz6MF0ekzx
he9islj/Lx4YRVLgPpUJ/Y1MaQKO+d/nfho=;
Received: from app19.muc.ec-messenger.com (app19.muc.ec-messenger.com )
(envelope-from <g-3851351679-7322-354668012-1559235622088@bounce.news.mapp.com (g-3851351679-7322-354668012-1559235622088@bounce.news.mapp.com)>)
by gp13mtaq123 (mtaq-receiver/2.20190311.1) with ESMTP id yA3jJ-_S5g8Z
for <xxxxxxxxxx@comcast.net>; Thu, 30 May 2019 19:00:22 +0200
Received: from www.takataka.gr (realshop.gr )
by uat.atnet.gr (Postfix) with ESMTPA id 24BF957C2E58
for <xxxxxxxxxx@aol.com>; Wed, 29 May 2019 20:27:11 +0300 (EEST)
Received: from mx1.banqueaudi.com (unknown ) by IMSVA (Postfix) with ESMTP id 49F9510299C; Mon,
3 Jun 2019 15:02:19 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=message-id:date:from;
bh=xFJ0oE4zeTwPljDmxRgHX2XU6dj5lk/BL2Ciu4w/2+Y=;
b=oDefgnuUFJzspPhusb/Q5f6prYG3NukqWqm5Pd2bzq2JIfNgzIL0AwGoyoEsy9PMiS
+IGane3dIsMy3EYXoq5pWRusvjaqMLOYZiEJBLzZqai63MJ/GgRPMrWcNF3o0PTa0osA
IcBW3efTvwT6FiDLl/zCahkTboNNBUulWaL6u9mPKoNwN52PWq8hJ/aD7p00Q6hG42Vv
7/6n9+Ir03VF4Y/EWL6mXhuNe/m/o9Qw4vwIc+r/L/NP/O3e0Xuhx7ZsyZVntysMOQzp
DutT+/AMpKMoU9DkgJODbqb2eslTYfVHb5FPLvfDfp4h7l3icBJ+hKYJHtJ7I6HNn4CQ
gMwg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:message-id:date:from;
bh=xFJ0oE4zeTwPljDmxRgHX2XU6dj5lk/BL2Ciu4w/2+Y=;
b=DXodJ2QdDL20YFBj06RQ6qT8sGATwInKKPKX1lk0LWXx0zo1O3KlGtOxOb0dMM9d1L
w0FZL+s+E5NUqHQyXLojjvnrm1iPvYEP/gL6GqutW9AqgrrFJOoocXujmHPnL3mM6EQX
ZD3QwbEGBeyuXk1D3z+UtTXmPmcb967uPXzEZTlDqHiJlMV4YhnUAxy9Y9JkgiQT8KGJ
1D+RSRoDiihHqHJ2y7mAoAxjIjdLZ3mgNdUBvZPDA5L9xMrdyjAUQM47VfULvMbFKCZo
xPT6uM0HwlQU9Z/HXsYL+6+4s0thnU1nMpj2tnT7uhkZ5CN26GS7b53obetESkjI3gmv
dYng==
To: <xxxxxxxxxx@aol.com>
References: <Nextpart_yTqSjQ5buGU988139467832703TQlM@>
In-Reply-To: <CADT5qSj0REQQpwKiW6P5cL27kFYMN9CKyTqSjQ5buGUm46NH1Cu5OuqVwXww@vau.abebfchk.org>
CC:<xxxxxxxxxx@aol.com>
MIME-Version: 2.0
Subject: Verification
Sender: xxxxxxxxxx@language-season.jauntspet.com
List-Unsubscribe: <mailto:leave-fcf01672756502122d502d29-fe2b167477630175701770-fe881yTqSjQ5buGU5777c63007e7d-fe9712747463067c76-ff65117171@iiaro.ohbaufpyehi.ltwe.edu>
Date: Tue, 25 May 2021 02:13:26 CEST
List-ID: <6417211.xt.local>
Message-ID: <ZF3lf1bGTw-Ct-Y9ADdPyTqSjQ5buGUHg-173.82.12.96@ismtpd0003p1iad1.sendgrid.net>
Received: from loanformed.com (loanformed.com. )
by smtp.gmail.com with ESMTPSA id i17sm8371221ejp.98.2021.05.24.15.50.35
for <xxxxxxxxxx@gmail.com>
(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);
Mon, 24 May 2021 15:50:35 -0700 (PDT)
Message-ID: <60ac2dbb.1c69fb81.59418.6e42@mx.google.com>
Date: Mon, 24 May 2021 15:50:35 -0700 (PDT)
From: big stomach <xxxxxxxxxx@gmail.com>
X-Google-Original-From: ""big stomach"" <zdglopi-1Q465EU-noReply@heptkdppiq.org>
Content-Type: multipart/mixed; boundary="Nextpart_1Q465EU822316947859311gPeJ"
@rorymckinley
Copy link
Author

rorymckinley commented Jan 6, 2022 via email

@TankORet
Copy link

TankORet commented Jan 6, 2022 via email

@TankORet
Copy link

TankORet commented Jan 6, 2022 via email

@rorymckinley
Copy link
Author

rorymckinley commented Jan 6, 2022 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment