blob: 5ce33667d1a8491fe2e5a6d5184cdb04713e7261 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
Received: from mx.example.org (mx.example.org [192.0.2.11])
by mail.example.org (Postfix) with ESMTP id III99
for <you@example.org>; Tue, 8 Sep 2026 16:00:02 +0200 (CEST)
Received: from sender.example.invalid (unknown [203.0.113.42])
by mx.example.org (Postfix) with ESMTP id JJJ11
for <you@example.org>; Tue, 8 Sep 2026 16:00:01 +0200 (CEST)
Return-Path: <bounce@sender.example.invalid>
From: "Billing at you@example.org" <phish@sender.example.invalid>
To: <you@example.org>
Sender: envelope@relay.example.invalid
List-Unsubscribe: <http://unsub.example.invalid/u?e=you@example.org>, <mailto:leave@unsub.example.invalid>
Subject: Confirm now
Message-ID: <eee555@sender.example.invalid>
Date: Tue, 8 Sep 2026 16:00:00 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Plain value: http://a.example.invalid/p?e=you@example.org
Valueless param: http://b.example.invalid/p?you@example.org
In the fragment: http://c.example.invalid/p#e=you@example.org
In userinfo: http://you%40example.org:pw@d.example.invalid/p
Nested redirect: http://t.example.invalid/c?url=http%3A%2F%2Fe.example.invalid%2Fp%3Fe%3Dyou%40example.org
|
