(3rd Notice) Re: Hurry up and get $500 a Day (I am going to pay you)
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1URTAq-0008Bb-7P
for <john.doe@example.net>; Sun, 14 Apr 2013 22:05:16 +0200
Received: from [181.66.11.41]
by example.net stage1 with esmtp
(Exim MailCleaner)
id 1URTAp-0008BQ-MY
for <john.doe@example.net>
from <serpentb9656@google.com>; Sun, 14 Apr 2013 22:05:16 +0200
Received: from [110.70.94.182] (helo=oblrmvweomahico.uzliivhrce.com)
by with esmtpa (Exim 4.69)
(envelope-from )
id 1MM4Z5-6886zs-4H
for john.doe@example.net; Sun, 14 Apr 2013 15:05:06 -0500
X-MailCleaner-SPF: softfail
Date:Sun, 14 Apr 2013 15:05:06 -0500
From: <<john.doe@example.net>,
<shutchinsonic@example.net>,
<merck@example.net>,
<russelloneil_uw@example.net>>
X-Mailer: The Bat! (v2.00.18) Business
X-Priority: 3 (Normal)
Message-ID: <0126651070.OHVVNY0Y785497@owhirankq.cyswezfnhy.ua>
To: <john.doe@example.net>,
<shutchinsonic@example.net>,
<merck@example.net>,
<russelloneil_uw@example.net>
Subject: (3rd Notice) Re: Hurry up and get $500 a Day (I am going to pay you)
MIME-Version: 1.0
Content-Type: text/html;
charset=windows-1250
Content-Transfer-Encoding: 7bit
X-MailCleaner-RDNS: invalid reverse DNS for 181.66.11.41
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1URTAq-0008Bb-7P
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: (cached), Commtouch (ip: permfail)
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>
Of course you have never heard of anything like that before<br>
because it was impossible for average people! <br>
<br>
Welcome to the brand new revolutionary website! There are over 5,000 people on it already;<br>
all of them are busy making money - $70 Every single minute!<br>
<br>
<a href="http://workhomeonlineforfun.com/">Do not miss your chance to check this out!</a><br>
<br>
As soon as you click on the link given above,<br>
you will join the unique project that is absolutely FREE until Tomorrow.<br>
<br>
Do not waste your time, you are awaited at:<br>
<a href="http://workhomeonlineforfun.com/">www.<b>workhomeonlineforfun.com</b></a><br>
<br>
The clock is ticking! You have to visit the portal before tomorrow to make easy money online.
</BODY></HTML>