Hi, john.doe, It's Roxie
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1XN2jV-0005EJ-UT
for <john.doe@example.net>; Thu, 28 Aug 2014 18:39:34 +0200
Received: from [78.187.21.30] (helo=78.187.21.30.static.ttnet.com.tr)
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1XN2jU-0005C1-S4
for <john.doe@example.net>
from <john.doe49@ttnet.com.tr>; Thu, 28 Aug 2014 18:39:33 +0200
Received: from [10.0.0.185] ([10.0.0.185:0894] helo=78.187.21.30.static.ttnet.com.tr)
by 75857C8AEE (envelope-from <john.doe49@ttnet.com.tr>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id 3F/75-E60C5-A9B574B1; Thu, 28 Aug 2014 19:39:36 +0300
X-MailCleaner-SPF: neutral
Date: Thu, 28 Aug 2014 19:39:28 +0300
From: Roxie <john.doe49@ttnet.com.tr>
To: john.doe <john.doe@example.net>
Message-ID: <etPan.5b27def5.d9528b40.a86@server.local>
Subject: Hi, john.doe, It's Roxie
X-Mailer: Airmail (247)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="5b27def5_f3c9a67b_a86"
X-MailCleaner-RDNS: invalid reverse DNS for 78.187.21.30
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0301.53FF5539.0056
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1XN2jV-0005EJ-UT
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
--5b27def5_f3c9a67b_a86
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Hey, john.doe!
If you are lonely lets meet online right now! I had a bad romance with a =
moron but this affair is over now.
So I cannot promise I will behave! Enjoy my naughtiness! :-)
Check out my private pics and contact me tonight [ View Profile ] =
http://john.doe.suburonounx.eu/?ID=3DRoxie889795&codeverify=3DE46=
B70B513C89D5
I'm online :-)
--
Roxie
Sent with Airmail
--5b27def5_f3c9a67b_a86
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</styl=
e></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space;"><div id=3D"bloop_customfont" =
style=3D"font-family:Helvetica,Arial;font-size:13px; color: =
rgba(0,0,0,1.0); margin: 0px; line-height: auto;">Hey, =
john.doe!<br><br>If you are lonely lets meet online right now! I =
had a bad romance with a moron but this affair is over now.<br>So I =
cannot promise I will behave! Enjoy my naughtiness! :-)<br><br>Check out =
my private pics and contact me tonight <a =
href=3D"http://john.doe.suburonounx.eu/?ID=3DRoxie889795&codeveri=
fy=3DE46B70B513C89D5" style=3D"color:blue">[ View Profile =
]</a><br><br></div><div id=3D"bloop_customfont" =
style=3D"font-family:Helvetica,Arial;font-size:13px; color: =
rgba(0,0,0,1.0); margin: 0px; line-height: auto;">I'm online =
:-)</div><br><div id=3D"bloop_sign_8946837372987380023" =
class=3D"bloop_sign"><span =
style=3D"font-family:helvetica,arial;font-size:13px"></span>--<br>Roxie<b=
r><span>Sent with Airmail</span></div></body></html>
--5b27def5_f3c9a67b_a86--