On Fri, 16 Nov 2018 10:39:47 -0500
Kris Deugau wrote:

> From: John D. Smith <johnsm...@richland.edu> <cay...@corpmaqplast.com>
> ... 
> Looking at a couple of other examples, there are also some in the
> form:
> 
> From: =?UTF-8?B?[encoded stuff]= <crackedorspoo...@example.com>
> 
> where [encoded stuff] decodes to:
> 
> Some User <spoof.vic...@example.org>

I think this is worth a try:

header  FROM_NO_COMMA   From =~ />\s*<[^"]*$/




Reply via email to