nquinlan / email-intelligence Goto Github PK

http://www.silverpop.com/

http://www.bluehornet.com/ please add asap. Thank you!

Received: by return01.manticoretechnology.com id hc16ui15oks2 for (redacted); Tue, 14 Jun 2016 13:33:13 -0500 (envelope-from [email protected])
X-MTC-INFO: 207.207.31.150 (v2.1.112111.1): -1.-1.163382.0
X-MTC-CONTACT: 1745997673
X-MTC-RCPTID: C7F38A844671AC2D634FF1DD5AC49A47BBF111FBD805FD92
X-MTC-BAID: 24353
X-MTC-MAILID: 163382
X-MTC-EGUID: 1e295622-5a32-e611-a9ee-b10bc232abc2
From: "Anna Fisher" [email protected]
To: (redacted)
Message-ID: [email protected]
Date: Tue, 14 Jun 2016 13:32:47 -0500
Subject: Lead Qualification: 4 Things You Need to Ask
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----3AB79619AF944BD5BE076C93846D19F4"

SendGrid introduced the new logo on 6/9/2016. Please update the logo for this plugin

PR - #26

http://www.campaignmonitor.com/

http://www.verticalresponse.com/

Delivered-To: [email protected]
Received: by 10.217.38.1 with SMTP id l1csp352198wev;
        Thu, 20 Mar 2014 16:27:15 -0700 (PDT)
X-Received: by 10.236.100.226 with SMTP id z62mr22437076yhf.111.1395358035487;
        Thu, 20 Mar 2014 16:27:15 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mkt4-sf.verticalresponse.com (mkt4-sf.verticalresponse.com. [74.116.91.38])
        by mx.google.com with ESMTP id t70si3899043yhi.105.2014.03.20.16.27.14
        for <[email protected]>;
        Thu, 20 Mar 2014 16:27:15 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 74.116.91.38 as permitted sender) client-ip=74.116.91.38;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of [email protected] designates 74.116.91.38 as permitted sender) [email protected];
       dkim=pass [email protected]
Return-Path: <[email protected]>
DKIM-Signature: v=1; a=rsa-sha1; d=vresp.com; s=dkim; c=simple/simple;
    q=dns/txt; [email protected]; t=1395358034;
    h=From:Subject:Date:To:MIME-Version:Content-Type;
    bh=gYnLSshhswY7CZwNA2CJ+4uIdqI=;
    b=NUj6/yxAsGM6NZ5+XZaiAD4GqlUkgrjgAEtRcjHx0uQkylNIU5JNqCkWALynMlN8
    f/aU1+9IQ5VTfr8q99lXXgOXoYwA5z428/OZhkiRDMYsWMXWbe63Q00WOyhafWCU
    nUyXrCQ1a8I0PpFwbTlKZE20+6K/RAwtIlJG4hR5wE0=;
DomainKey-Signature: q=dns; a=rsa-sha1; c=nofws;
    s=mkt; d=vresp.com;
    h=Received:Message-Id:Content-Transfer-Encoding:Content-Type:MIME-Version:X-Mailer:Date:Subject:From:X-Priority:X-Vr-Email-Origin:Sender:To;
    b=Efz0RttqkWxxMouW/DhwIQ5/D4vWZJZiA3CcxGfD+SNPBidQizPWMsQPhygHGsgO
    lHyowM3XuF+v7VDpVUr/YbKtUcyDf+Q9c4xvD+xs91bNlAI2DaeiGO0tIsLvlSrm
    oT7HimyelaYNXMFT63KkoDUG1nz+xVAWg3ro8SpGocY=
Received: from [10.4.32.18] ([10.4.32.18:52040] helo=vm-api08.sf.verticalresponse.com)
    by napa (envelope-from <[email protected]>)
    (ecelerity 3.1.6.41536 r(41536)) with ESMTP
    id 15/E5-22080-2597B235; Thu, 20 Mar 2014 16:27:14 -0700
Received: from vm-api08.sf.verticalresponse.com (localhost.localdomain [127.0.0.1])
    by vm-api08.sf.verticalresponse.com (8.13.8/8.13.8) with ESMTP id s2KNREkd011986
    for <[email protected]>; Thu, 20 Mar 2014 16:27:14 -0700
Received: (from vr@localhost)
    by vm-api08.sf.verticalresponse.com (8.13.8/8.13.8/Submit) id s2KNRE5V011985;
    Thu, 20 Mar 2014 16:27:14 -0700
Message-Id: <[email protected]>
Content-Transfer-Encoding: binary
Content-Type: multipart/alternative; boundary="_----------=_1395358034119800"
MIME-Version: 1.0
X-Mailer: MIME::Lite 3.01 (F2.74; T1.16; A1.77; B3.07; Q3.07)
Date: Thu, 20 Mar 2014 23:27:14 UT
Subject: Action Required: Confirm Your Sign-Up
From: "TechStars" <[email protected]>
X-Priority: 3
X-Vr-Email-Origin: perl VR::Email
Sender: [email protected]
To: [email protected]

http://www.ebayenterprise.com/marketing_solutions/email/

Image for app engine done broke:

The logic in the extension looks for X-Mailgun-Sid to detect MailGun, but today I got a message that didn't have the -Sid header but had these instead:

X-Mailgun-Tag: (string)
X-Mailgun-Track-Clicks: no
X-Mailgun-Track-Opens: no
X-Mailgun-Variables: (json payload)

This one was much trickier to track down as their IP address pointed to a colo facility and had to do a bunch of searching to find they were actually postup.com through a job posting mentioning the LLC of the colo facility... so let's assume the X-PBPR: header is sufficient for now (I'll have more shortly as I scan my spam box)

From: Top Marketing Resources [email protected]
Reply-To: [email protected]
To: REDACTED
Message-ID: 2030653849.2732024.1466000994795.JavaMail.root@mktgdailybulletin.com
Subject: 3 Business Costs of Delaying a CRM System
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2732023_1623997681.1466000994795"
X-PBPR: pfdjqcdhhjjybhqhbhfhfjqfhdj cdmgwgyqhvrkyfcsvsjcrhhllkwjkjflbhjlhflmblljvc hjjdhjhmhc
list-unsubscribe: mailto:[email protected] X-CmpP2000Id: 355 X-PopR2000Id: 10900822 X-TstC2000Id: 1 X-CmpD2000Id: 7220 X-Dvsn1000Id: 16
Date: Wed, 15 Jun 2016 09:29:54 -0500

Received: by 10.200.56.156 with SMTP id f28csp1439549qtc;
Mon, 20 Jun 2016 10:21:38 -0700 (PDT)
X-Received: by 10.66.4.129 with SMTP id k1mr22974685pak.45.1466443297952;
Mon, 20 Jun 2016 10:21:37 -0700 (PDT)
Return-Path: [email protected]
Received: from mail1.bemta12.messagelabs.com (mail1.bemta12.messagelabs.com. [216.82.251.6])
by mx.google.com with ESMTPS id g27si34307164pfa.159.2016.06.20.10.21.37
for REDACTED
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 20 Jun 2016 10:21:37 -0700 (PDT)
Received-SPF: neutral (google.com: 216.82.251.6 is neither permitted nor denied by best guess record for domain of [email protected]) client-ip=216.82.251.6;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 216.82.251.6 is neither permitted nor denied by best guess record for domain of [email protected]) smtp.mailfrom=[email protected]
Return-Path: [email protected]
Received: from [216.82.251.36] by server-6.bemta-12.messagelabs.com id 75/3F-09598-12628675; Mon, 20 Jun 2016 17:21:37 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrIKsWRWlGSWpSXmKPExsXieN29T1dBLSP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X-Env-Sender: [email protected]
X-Msg-Ref: server-9.tower-152.messagelabs.com!1466443292!36127105!2
X-Originating-IP: [65.215.71.142]
X-StarScan-Received:
X-StarScan-Version: 8.46; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 89592 invoked from network); 20 Jun 2016 17:21:35 -0000
Received: from mail.techusa.net (HELO mail.techusa.net) (65.215.71.142)
by server-9.tower-152.messagelabs.com with AES256-SHA encrypted SMTP; 20 Jun 2016 17:21:35 -0000
Received: from MAIL3.techusa.net ([fe80::4518:1d2a:3023:a554]) by
mail1.techusa.net ([fe80::a582:8d56:e3dd:706d%14]) with mapi id
14.03.0123.003; Mon, 20 Jun 2016 13:21:34 -0400
From: Michael Coccari [email protected]
To: REDACTED
Subject: Tech USA- Software Development Positions
Thread-Topic: Tech USA- Software Development Positions
Thread-Index: AdHLF5Q7efxX8+1bSSWQyzmQIHvLaQ==
Date: Mon, 20 Jun 2016 17:21:33 +0000
Message-ID: [email protected]
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [172.32.13.77]
Content-Type: multipart/related;
boundary="004_F67BD947353FA6418A4F7476C10DDAF80804BE28MAIL3techusanet";
type="multipart/alternative"
MIME-Version: 1.0

sorry, plugin took a long time to show the Marketo image, I thought maybe it didn't detect properly.