diff --git a/dmarc/email-samples/sample-1.txt b/dmarc/email-samples/sample-1.txt new file mode 100644 index 0000000000000000000000000000000000000000..32197560475c6979784266f6e62f1cc6befd94bf --- /dev/null +++ b/dmarc/email-samples/sample-1.txt @@ -0,0 +1,41 @@ +Return-Path: <noreply-dmarc-support@vodafone.it> +Received: from unknown (HELO localhost.localdomain) (10.10.178.11) + by smtp1-vf.ad.aruba.it with ESMTP; 17 Oct 2020 14:02:16 -0000 +To: mta-sts@riseup.net +From: noreply-dmarc-support@vodafone.it +Subject: Report Domain: lists.riseup.net Submitter: vodafone.it Report-ID: lists.riseup.net-1602943261@vodafone.it +X-Mailer: opendmarc-reports v1.3.1 +Date: Sat, 17 Oct 2020 16:02:16 +0200 (CEST) +Message-ID: <lists.riseup.net-1602943261@vodafone.it> +Auto-Submitted: auto-generated +MIME-Version: 1.0 +Content-Type: multipart/mixed; boundary="report_section" + +This is a MIME-encapsulated message. + +--report_section +Content-Type: text/plain; + +This is a DMARC aggregate report for lists.riseup.net +generated at Sat Oct 17 16:02:16 2020 + +--report_section +Content-Type: application/zip +Content-Disposition: attachment; filename="vodafone.it!lists.riseup.net!0!1602943336.zip" +Content-Transfer-Encoding: base64 + +UEsDBBQACAAIAEiAUVEAAAAAAAAAAAAAAAAtAA0Adm9kYWZvbmUuaXQhbGlzdHMucmlzZXVwLm5l +dCEwITE2MDI5NDMzMzYueG1sVVQJAANo+YpfaPmKX+2ZyW7bMBCG734KwXdr8xI7YOic+gTtWaDF +kU1EIgmScpq3L7d4SXNI0VvEk8SZ4cz88xECAaH976HPzqA0E/xpXuXlPAPeCsr48Wn+6+ePxXae +7fEMdQD0QNoXPMuQAimUaQYwhBJDrClDQh0bTgbAZ0FJJzjkzKDiYnUhMBDWYy7s9v5tQQei2oUe +pcv1fLcrBLotsRKjuGfa6FwxDaPMOZjHalPWu9Wy3lSouIa5TbYnaBThR182Qwc4Mo5d/Hb9UFcr +VASLdwKnOKQqV+WDrc1DkuIuy6XEjWYkRc/at0aOB9vcCWJxYZvnf7Vr8wWHiyH0hQ1YoSK8eJOW +nbe4pzNIOygOqJB+pd+XOqxla3BpnfbhmvukEzu6VqjQkxKvQawWo2qhYRJXu21er+u8Wi/zamlT +XV0+shUjN9iONrx4W6wCZ9KPdjg+t1PMtBSaGXuAYpO3lhjjdEqitXVGyV5VF41R9VXKXRE7/aAA +MQrcsI7Z8xriT0AoqKZTYvhk5rden+fDfkRGc2oU6LE3MeF7J18i6U+o2xxlxEVQctF0o/h/c17O +S/GhcxcXef8L+V0in8gn8pMin772UyW/SeQT+UR+UuSXVSI/TfLphjdV8umGl8gn8ol8Ij8F8ulu +P1Xy6W7/jcij4vqL7Q9QSwcI+nmpn/ABAACWGwAAUEsBAhQDFAAIAAgASIBRUfp5qZ/wAQAAlhsA +AC0ACQAAAAAAAAAAAKSBAAAAAHZvZGFmb25lLml0IWxpc3RzLnJpc2V1cC5uZXQhMCExNjAyOTQz +MzM2LnhtbFVUBQABaPmKX1BLBQYAAAAAAQABAGQAAABYAgAAAAA= + +--report_section-- diff --git a/dmarc/email-samples/sample-2.txt b/dmarc/email-samples/sample-2.txt new file mode 100644 index 0000000000000000000000000000000000000000..607b1da66209d47851e0a4df03462fe7c36bf9ba --- /dev/null +++ b/dmarc/email-samples/sample-2.txt @@ -0,0 +1,72 @@ +Return-Path: <dmarc-support@alerts.comcast.net> +Received: from mdpapp-ch2-b1p.sys.comcast.net + ([IPv6:2001:558:fe21:39:68:87:23:62]) + by mdpmta-ch2-b1p.sys.comcast.net with ESMTP + id U34lk0ICWTTa2U35NkGtYJ; Sun, 18 Oct 2020 07:26:33 +0000 +Received: from [127.0.0.1] ([68.87.19.10]) by mdpapp-ch2-b1p.sys.comcast.net + with ESMTPA id U1gkkgn7GNBypU35Nko4Uo; Sun, 18 Oct 2020 07:26:33 +0000 +Mmbop-Smtp-Tls: ?? +Message-Id: <8005356f191169037cb04dba60b53b5e@swift.generated> +Date: Sun, 18 Oct 2020 07:26:33 +0000 +Subject: ***SPAM*** Report Domain: riseup.net Submitter: comcast.net Report-ID: + <v2-1602999652-riseup.net> +From: Comcast DMARC Report Generator <dmarc-support@alerts.comcast.net> +To: mta-sts@riseup.net +Mime-Version: 1.0 +Content-Type: multipart/mixed; + boundary="_=_swift_v4_1603005993_3015d000a0c4ea48a421f3fc2fbadeba_=_" +Content-Transfer-Encoding: quoted-printable +X-Auto-Response-Suppress: OOF, AutoReply +X-Spam-Prev-Subject: Report Domain: riseup.net Submitter: comcast.net Report-ID: + + +--_=_swift_v4_1603005993_3015d000a0c4ea48a421f3fc2fbadeba_=_ +Content-Type: text/plain; charset="utf-8" +Content-Transfer-Encoding: 8bit +MIME-Version: 1.0 + + +Hello! + +Please find enclosed a DMARC report for the domain 'riseup.net'. + +If you have any questions or concerns about the DMARC report, please reply to +this message. + +Thanks, + +-- The Comcast Email Delivery and Data Analytics Teams + + + +--_=_swift_v4_1603005993_3015d000a0c4ea48a421f3fc2fbadeba_=_ +Content-Type: application/gzip; + name=comcast.net!riseup.net!1602892800!1602979200.xml.gz +Content-Transfer-Encoding: base64 +Content-Disposition: attachment; + filename=comcast.net!riseup.net!1602892800!1602979200.xml.gz + +H4sIAAAAAAAAA+2c3ZaiOBCAr3uewu17YxJ+BA7D7NU+wey1J4agOQ2ETdDZfftNAG1tZXqcdsDR +eE6LqRSpqtRnAUE6/vJvkU+2TCouys/PCMDnCSupSHm5+vz899e/psHz5EvyKc4YS5eEviSfnuJO +PdHa8WzX0HLJKiHrRcFqkpKaaNFTLORqUZKCJVQUlKgalKyOZ3upUWEF4XmSFkTSKUkLXv5JciZr +BY52abWMfmeGp8kWT5EPcRiGvoenkiu2qVrtVx2zh/aGLSQpV43Bp3jJVly7r3cNQhxAHUUraTpZ +mTZd4TzEpsu0zSCzo1H2Jg6ijSuRc/rfotosc67WrDMutOdlcuhdJzK9JH3hRSLjWfuhEakqayRm +awRVUoqSxbOqaaldU7XtitaJdtNsTDMTpqXfjY9nHNLTR4VsXZPiWxuzEhtJ2YJXCXIDgKAHEALI +1zb2HY0eFZuyTlA8az80ss4G25J8o2eoGdmEzVUlFK8NG62/h5JOx4Sc6bzqzi76JsCsE3YT8BrI +kRGdgtb/mKesrHnGNYqt/pqRlMlFJkVxNPGH8i7ZW5aLirUigxjygWLEQaCgatuhd6TUWH5jMSab +er2QTG3yunPhIKAu3WZ0uuZFRaoTDhqszd5JRZQycDWNbkJYzmgtZPKC9ZzsGu3E7M3Eu8k6sncm +miOjiuq4ksIEpoduGt/3Zp8UzedxzEatI+sHGMOeBswJAcbBo1GmmNRF0wXLKieUpR9g7CTlZ4e+ +KOHtJF474aFOOECu/vPQo6W7+Rpq2kmd47n5Iqb5HdSVswHdQGkxpHmGMwcgHPaxdl3Y2kjewNYK +h4btUPVKeJ0/cfkxsNQ/G/JyCVu9xsanyYGDVK4bgkmfM+qz8F+A1OnAl4Kl652sLgHrHZM3gFff +gTGweFm8PoyX31e9XIuXxevDeIV9ePkWL4vXz+CFIUSRi5ZBhCGOUraMMPIjx8+yKGMujFwI8Xgl +bZxLyTZPei44KYGQq9/zHP80ivFXKDD0ga5j2AkBCvpqGb7XJYpMMtZm5ZpQvRn1Uq7qjeTl6gCs ++I/pdPJ1zdVkJ5p8I2oiWcXM1EzwpOYFU2Aynb4P4fecG6neBWDuAYTNyVpfZbvbRTJeAipKVZOy +1tua0Nrc/bkaikYHUKpYmbbjXgojgvo1d1znopWyvqhujDbX0mZpG4w2z9JmaRuMtoe7h21pG5G2 +h7uXbWkbj7b5w91Kt7SNSJu9JrW0DUZb4FjaLG2D0WZXQCxtg9EWzi1tlraBaMOOPZJa2n4tbT6c +R1mwhJEb+G6EYRRhJ3s06lZCrHK2kmJTqavydjrwpcBhiHwEsXcJbu9YvRXQiPNwB1ML2jigpRY0 +C9oAoLnDPGdgQXtw0GgvaHf7OzcL2higMSe0Fc2Cdm3QCIQRcr2jq057MWBBGwQ0akGzoA0Bml1H +s6BdGzTfB2juAYwxQA/3q44uFVxcD6zXEX+CKBdqpi4iqsfcKCgFGqHQa242wWEuJ+3jeHfwOF48 +e/1/cv8D0ChsoINOAAA= + +--_=_swift_v4_1603005993_3015d000a0c4ea48a421f3fc2fbadeba_=_-- + diff --git a/dmarc/email-samples/sample-3.txt b/dmarc/email-samples/sample-3.txt new file mode 100644 index 0000000000000000000000000000000000000000..a3f1a370672e1732a12f4dc366877c2cfab0cadc --- /dev/null +++ b/dmarc/email-samples/sample-3.txt @@ -0,0 +1,56 @@ +Return-Path: <abuse@seznam.cz> +From: "Seznam.cz" <abuse@seznam.cz> +To: <mta-sts@riseup.net> +Subject: =?utf-8?q?Report_Domain=3A_lists=2Eriseup=2Enet_Submitter=3A_sezn?= + =?utf-8?q?am=2Ecz_Report-ID=3A_szn=5Flists=2Eriseup=2Enet-2020-10-18?= +Date: Mon, 19 Oct 2020 12:28:27 +0200 (CEST) +Mime-Version: 1.0 (szn-mime-2.1.5) +Message-Id: <18.1VZMfB.x4uM1C2k2S.1VZMfB@seznam.cz> +Content-Type: multipart/related; + boundary="=_79a48c0c49060a5b43d2d4d9=6871e6c1-dd73-5f9a-a6c5-eac32fa81149_=" + +--=_79a48c0c49060a5b43d2d4d9=6871e6c1-dd73-5f9a-a6c5-eac32fa81149_= +Content-Type: text/plain +Content-Transfer-Encoding: 7bit + +This is a DMARC aggregate report for lists.riseup.net generated at Mon Oct 19 +12:28:27 2020 +--=_79a48c0c49060a5b43d2d4d9=6871e6c1-dd73-5f9a-a6c5-eac32fa81149_= +Content-Type: application/zip; + name="seznam.cz!lists.riseup.net!1602979200!1603065600.xml.zip" +Content-Id: <cid_673> +Content-Transfer-Encoding: base64 +Content-Disposition: attachment; + size=1592; + filename="seznam.cz!lists.riseup.net!1602979200!1603065600.xml.zip" + +UEsDBBQAAAAAAI1jU1G6ZpcBbgUAAG4FAAA0AAAAc2V6bmFtLmN6IWxpc3RzLnJpc2V1cC5uZXQh +MTYwMjk3OTIwMCExNjAzMDY1NjAwLnhtbDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVU +Ri04IiA/Pgo8ZmVlZGJhY2s+CiAgICA8dmVyc2lvbj4xLjA8L3ZlcnNpb24+CiAgICA8cmVwb3J0 +X21ldGFkYXRhPgogICAgICAgIDxvcmdfbmFtZT5zZXpuYW0uY3ogYS5zLjwvb3JnX25hbWU+CiAg +ICAgICAgPGVtYWlsPmFidXNlQHNlem5hbS5jejwvZW1haWw+CiAgICAgICAgPHJlcG9ydF9pZD5z +em5fbGlzdHMucmlzZXVwLm5ldC0yMDIwLTEwLTE4PC9yZXBvcnRfaWQ+CiAgICAgICAgPGRhdGVf +cmFuZ2U+CiAgICAgICAgICAgIDxiZWdpbj4xNjAyOTc5MjAwPC9iZWdpbj4KICAgICAgICAgICAg +PGVuZD4xNjAzMDY1NjAwPC9lbmQ+CiAgICAgICAgPC9kYXRlX3JhbmdlPgogICAgPC9yZXBvcnRf +bWV0YWRhdGE+CiAgICA8cG9saWN5X3B1Ymxpc2hlZD4KICAgICAgICA8ZG9tYWluPmxpc3RzLnJp +c2V1cC5uZXQ8L2RvbWFpbj4KICAgICAgICA8YWRraW0+cjwvYWRraW0+CiAgICAgICAgPGFzcGY+ +cjwvYXNwZj4KICAgICAgICA8cD5ub25lPC9wPgogICAgICAgIDxwY3Q+MTAwPC9wY3Q+CiAgICAg +ICAgPGZvPjA8L2ZvPgogICAgPC9wb2xpY3lfcHVibGlzaGVkPgogICAgPHJlY29yZD4KICAgICAg +ICA8cm93PgogICAgICAgICAgICA8c291cmNlX2lwPjE5OC4yNTIuMTUzLjEzMTwvc291cmNlX2lw +PgogICAgICAgICAgICA8Y291bnQ+MjwvY291bnQ+CiAgICAgICAgICAgIDxwb2xpY3lfZXZhbHVh +dGVkPgogICAgICAgICAgICAgICAgPGRpc3Bvc2l0aW9uPm5vbmU8L2Rpc3Bvc2l0aW9uPgogICAg +ICAgICAgICAgICAgPGRraW0+cGFzczwvZGtpbT4KICAgICAgICAgICAgICAgIDxzcGY+cGFzczwv +c3BmPgogICAgICAgICAgICA8L3BvbGljeV9ldmFsdWF0ZWQ+CiAgICAgICAgPC9yb3c+CiAgICAg +ICAgPGlkZW50aWZpZXJzPgogICAgICAgICAgICA8aGVhZGVyX2Zyb20+bGlzdHMucmlzZXVwLm5l +dDwvaGVhZGVyX2Zyb20+CiAgICAgICAgPC9pZGVudGlmaWVycz4KICAgICAgICA8YXV0aF9yZXN1 +bHRzPgogICAgICAgICAgICAgPGRraW0+CiAgICAgICAgICAgICAgICA8ZG9tYWluPmxpc3RzLnJp +c2V1cC5uZXQ8L2RvbWFpbj4KICAgICAgICAgICAgICAgIDxyZXN1bHQ+cGFzczwvcmVzdWx0Pgog +ICAgICAgICAgICAgICAgPHNlbGVjdG9yPmNoaXJwPC9zZWxlY3Rvcj4KICAgICAgICAgICAgPC9k +a2ltPgogICAgICAgICAgICAgPHNwZj4KICAgICAgICAgICAgICAgIDxkb21haW4+bGlzdHMucmlz +ZXVwLm5ldDwvZG9tYWluPgogICAgICAgICAgICAgICAgPHNjb3BlPm1mcm9tPC9zY29wZT4KICAg +ICAgICAgICAgICAgIDxyZXN1bHQ+cGFzczwvcmVzdWx0PgogICAgICAgICAgICA8L3NwZj4KICAg +ICAgICA8L2F1dGhfcmVzdWx0cz4KICAgIDwvcmVjb3JkPgo8L2ZlZWRiYWNrPgpQSwECFAMUAAAA +AACNY1NRumaXAW4FAABuBQAANAAAAAAAAAAAAAAAgAEAAAAAc2V6bmFtLmN6IWxpc3RzLnJpc2V1 +cC5uZXQhMTYwMjk3OTIwMCExNjAzMDY1NjAwLnhtbFBLBQYAAAAAAQABAGIAAADABQAAAAA= +--=_79a48c0c49060a5b43d2d4d9=6871e6c1-dd73-5f9a-a6c5-eac32fa81149_=-- + diff --git a/dmarc/email-samples/sample-4.txt b/dmarc/email-samples/sample-4.txt new file mode 100644 index 0000000000000000000000000000000000000000..32a08f1766ff3c9f62ee7ae705385ab932234ad5 --- /dev/null +++ b/dmarc/email-samples/sample-4.txt @@ -0,0 +1,40 @@ +Return-Path: <noreply@dmarc.yahoo.com> +Content-Transfer-Encoding: binary +Content-Type: multipart/mixed; boundary="_----------=_1603076670435482241" +MIME-Version: 1.0 +X-Mailer: MIME::Lite 3.030 (F2.84; T1.38; A2.12; B3.13; Q3.13) +Date: Sun, 18 Oct 2020 20:04:30 -0700 +From: noreply@dmarc.yahoo.com +To: mta-sts@riseup.net +Subject: Report Domain: lists.riseup.net Submitter: rogers.com Report-ID: <1603069084.553852> +Message-Id: <1603076670.891938@dmarc.yahoo.com> + +This is a multi-part message in MIME format. + +--_----------=_1603076670435482241 +Content-Disposition: inline +Content-Transfer-Encoding: 8bit +Content-Type: text/plain + +This is an aggregate report from Oath +--_----------=_1603076670435482241 +Content-Disposition: attachment; filename="rogers.com!lists.riseup.net!1602979200!1603065599.xml.gz" +Content-Transfer-Encoding: base64 +Content-Type: application/gzip; name="rogers.com!lists.riseup.net!1602979200!1603065599.xml.gz" + +H4sIAD4CjV8AA+2X3W6bMBTHr7enyPoAfGWkQfLc3e4RdoUcOCRWsI1s0617 ++h1qx9CkRdWmKWvFRRTnf47PFz8MIXc/Rbu6B224kl9u0ii5uaMfPpIGoN6x +6ojr1Ypo6JS2pQDLambZo4iy0vtSMgH0Ozso9Wn1TVYRiYPqvUAw3tJOGSuY +saC/1oLpKnoY9kSVEiR2Ht7d5+I1TTfJOtkUyfZzlOfrbZ6ReDR6bywHSs3k +/pQOtR3suRx2Z8VtkSUJiZ0SHECegud5UWB+GeLFZwFDyie9k061vHoou37X +cnOAsRyFrUiKojWR5gb6LpJgMawzeDdWH7mgmsRucVJN1zyKw7fXOiqVBBJ3 +QagsTYeehoWr8NlicI6V0qEwrX6M/RvV6wpK3tEUZ5vm+NlkUZrhgEdT8K5U +Ly1Fm1sE3aeFe9b2OLQ6WIY5cIMXnFuEyjcwVaaOQ/8dMwY9xlG4KnEKDYKB +RYV5TNo9z4tXKvRIeA3S8oYj1+POA7AadNloJZ65QlPrKeJlGMJ6eyg1mL61 +k9Dntb+OA8/7EMvPwP8Ym30SmEwHMWYRvTlqhnfXnv3iEtw99WIioxrrxnqR +bMJdfNHn4B+IeiVdxTbKciQrX0fpOpmjq7gKXs6y4DWL199n+bdcpTNc3S5Y +LVj9EVabueMqvc7TcOHq7XNVzHK1vGS9A6yu8XY1j9V1uFqOq//quCLx5E/9 +bzk6/974DwAA + +--_----------=_1603076670435482241-- + diff --git a/dmarc/email-samples/sample-5.txt b/dmarc/email-samples/sample-5.txt new file mode 100644 index 0000000000000000000000000000000000000000..d3b55892952b72f304df6b307d62f39ccf96d763 --- /dev/null +++ b/dmarc/email-samples/sample-5.txt @@ -0,0 +1,34 @@ +Return-Path: <0102017536eebcd5-ea7c2c98-0d26-402c-92a7-9b756d96d9bb-000000@eu-west-1.amazonses.com> +Date: Sat, 17 Oct 2020 14:20:16 +0000 +From: postmaster@amazonses.com +To: mta-sts@riseup.net +Message-ID: <0102017536eebcd5-ea7c2c98-0d26-402c-92a7-9b756d96d9bb-000000@eu-west-1.amazonses.com> +Subject: Dmarc Aggregate Report Domain: {riseup.net} Submitter: {Amazon + SES} Date: {2020-10-16} Report-ID: {bf9cb2b6-cdd5-49c3-bfb4-38cc8c29b8e4} +MIME-Version: 1.0 +Content-Type: multipart/mixed; + boundary="----=_Part_246515_1066424797.1602944416978" +X-SES-Outgoing: 2020.10.17-54.240.7.5 + +------=_Part_246515_1066424797.1602944416978 +Content-Type: text/plain; charset=us-ascii +Content-Transfer-Encoding: 7bit + +This MIME email was sent through Amazon SES. +------=_Part_246515_1066424797.1602944416978 +Content-Type: application/octet-stream; + name=amazonses.com!riseup.net!1602806400!1602892800.xml.gz +Content-Transfer-Encoding: base64 +Content-Disposition: attachment; + filename=amazonses.com!riseup.net!1602806400!1602892800.xml.gz + +H4sIAAAAAAAAAIVTy27bMBA8O19R5C5RUmzXAlimOfTY9pBbLwIfK5uIRBIk5T6+vnwptpMCvUia +meXuzi6FH3/N04czWCe1+nTf1s39I7nDI4BglL+Quw0uImnqFqMVBN6C0dYPM3gqqKeB2mBtj4Oi +M5Cnr08/vn+rnr88Y/RKxgiYqZyI0c7P1Hmwn+lM/2jlwNVczxhlPUaW/FIQNvacdWxfcSF21bbn +DxUb2bZ6OHB+4F3PDrDF6BIfT4eWYLBUHVPZDWZwlIq0+6Y7NPtt02CUmSSCElnqgxqkiGMSdJPl +tcSVZWz0JPnvwSxsku4EpbgOLhSx0sFiagU+ZMpUVKl4kTOxGOWPRDkzJia+I2GI0gowMgm5FbqM +DfcktBlfEY46ovCMPf6joTBKrm1uzeqf2bPTi+UwSEO69mPdtvWur9tdmONFSHFcL8qTDqP8kbhS +A850WsKEUuZoW7qwWOnjBcn9XjMlJloew46DWNwng2MhywAuRm6KhBXk/rEUoLwcZbiP6w7PMGkD +w2j1fDP6WyUFn4AKsO9Dr/lU7k0ZTBd/Giy4ZfKl7trwf7aeLnQ8VnwWkK2uW0dv0sewvLmw3vWX +/Av+/ZZ0swMAAA== +------=_Part_246515_1066424797.1602944416978--