Mr.: john.doe 65% off for you!
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1WLwgu-0005t8-OY
for <john.doe@example.net>; Fri, 07 Mar 2014 16:28:04 +0100
Received: from host10.190-30-137.telecom.net.ar ([190.30.137.10])
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1WLwgu-0005rq-0i
for <john.doe@example.net>
from <john.doe@brushcreek.com>; Fri, 07 Mar 2014 16:28:04 +0100
Received: from [10.0.0.22] ([10.0.0.22:9972] helo=host10.190-30-137.telecom.net.ar)
by D3CFE0A (envelope-from <john.doe@brushcreek.com>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id 3A/6E-5728A-9D7374CE; Fri, 07 Mar 2014 12:27:30 -0300
X-MailCleaner-SPF: neutral
Date: Fri, 07 Mar 2014 12:27:25 -0300
From: "TodayPfizer" <john.doe@brushcreek.com>
Reply-To: john.doe@brushcreek.com
To: john.doe@example.net
Message-ID: <350D99AF12FE35EE56D5C8F2277C4BC-087C73E47972B196B709D715AFC33E38@host10.190-30-137.telecom.net.ar>
Subject: Mr.: john.doe 65% off for you!
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: WhatCounts
ENVID: WC-3470645337586-dbefdd8a513af6d8499b255b0246-fbc26ae7ff1fc75a4a419a1e4fa7c63b
List-Unsubscribe: <http://email.brushcreek.com/u?id=dbefdd8a513af6d8499b255b0246>
X-Unsubscribe-Web: <http://email.brushcreek.com/u?id=dbefdd8a513af6d8499b255b0246>
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0303.5319E585.0132
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1WLwgu-0005t8-OY
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
</head>
<body>
<div style="text-align: left">
<input name="FCD9671C4EDEDE39DD97"
value="Sale Sale Sale!! Vigara - 0.54$, Cilias - 1.09$, Levtira - 1.15$.. and more more more... "
style="text-align:left; font-size:large; text-decoration:underline; font-style:oblique; width: 970px; height: 45px; color:red"
type="text" />
<br /><br />
<a href="http://7.doctorlsinre.ru/?click=086CE114245DB3B2915369DEB7" target="_blank">
<strong>
<span style="font-size: large">Ready!? Order Today!</span>
</strong></a>
<br />
<br />
<span style="font-size: small; font-family: Tahoma">
© 2002-2013 TodayPfizer. All rights reserved.
<br />
<a href="http://7.doctorlsinre.ru/?click=086CE114245DB3B2915369DEB7&abt=1">About us
</a>
| <a href="http://7.doctorlsinre.ru/?click=086CE114245DB3B2915369DEB7&unsubscribe=john.doe@example.net">Unsubscribe</a></span></div>
</body>
</html>