Dear john.doe For You 65% OFF
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1WFQV4-0007EY-PN
for <john.doe@example.net>; Mon, 17 Feb 2014 16:52:54 +0100
Received: from [91.99.86.54] (helo=GM-PC)
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1WFQV4-0007ED-8q
for <john.doe@example.net>
from <john.doe@hilldesignservices.com>; Mon, 17 Feb 2014 16:52:54 +0100
Received: from [10.0.0.78] ([10.0.0.78:4464] helo=GM-PC)
by 4DADA3 (envelope-from <john.doe@hilldesignservices.com>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id 5F/5B-5E195-F5C5CC2F; Mon, 17 Feb 2014 19:22:54 +0430
X-MailCleaner-SPF: neutral
Date: Mon, 17 Feb 2014 19:22:51 +0430
From: "#1USPharm" <john.doe@hilldesignservices.com>
Reply-To: john.doe@hilldesignservices.com
To: john.doe@example.net
Message-ID: <C4301B0F55AB526A70152D9FA017FE1-87931F760FEB1911F065846848937152@GM-PC>
Subject: Dear john.doe For You 65% OFF
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: WhatCounts
ENVID: WC-9918509831818-BA6C932EB05F5927E43AFB3D4307A6B2-f712f21f89d21237162857cf74b11c09
List-Unsubscribe: <http://email.hilldesignservices.com/u?id=BA6C932EB05F5927E43AFB3D4307A6B2>
X-Unsubscribe-Web: <http://email.hilldesignservices.com/u?id=BA6C932EB05F5927E43AFB3D4307A6B2>
X-MailCleaner-RDNS: invalid reverse DNS for 91.99.86.54
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0303.53023057.0048
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1WFQV4-0007EY-PN
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
<title>Top.Sale</title>
</head>
<body>
<input style="text-align:center" type="text" name="1CC5332252" alt="Order" value="Vigara - 0.66$, Cilias - 1.00$, Levtira - 1.50$. Get Today!" style="width: 350px" />
<br />
<br />
<a href="http://BD.bifortmedic.ru/?page=277E5F7CA74A7115072E9D06F" target="_blank">Order
</a>
</body>
</html>