Mr john.doe win 70% off
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1WLD0M-0003aN-DR
for <john.doe@example.net>; Wed, 05 Mar 2014 15:41:06 +0100
Received: from [89.205.29.113] (helo=Lide-AD7757B6.skopje.tk.net.mk)
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1WLD0K-0003Zn-Nk
for <john.doe@example.net>
from <john.doe@tk.net.mk>; Wed, 05 Mar 2014 15:41:05 +0100
Received: from [10.0.0.104] ([10.0.0.104:3135] helo=Lide-AD7757B6.skopje.tk.net.mk)
by B05AA90 (envelope-from <john.doe@tk.net.mk>)
(ecelerity 3.5.1.37854 r(Momo-dev:3.5.1.0)) with ESMTP
id ED/35-148B2-F001AA24; Wed, 05 Mar 2014 15:41:10 +0200
X-MailCleaner-SPF: none
Date: Wed, 05 Mar 2014 15:41:09 +0200
From: "BuyUSPfizer" <john.doe@tk.net.mk>
Reply-To: john.doe@tk.net.mk
To: john.doe@example.net
Message-ID: <DA4B6C203C4C3C56E24B83A9611231D-ECF2708895642DB1098FF64C7A3B3D26@Lide-AD7757B6.skopje.tk.net.mk>
Subject: Mr john.doe win 70% off
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: WhatCounts
ENVID: WC-3503603231254-a12b496f25306c4892851221881e-5234f6a62ef20647237c2c64af40e83d
List-Unsubscribe: <http://email.tk.net.mk/u?id=a12b496f25306c4892851221881e>
X-Unsubscribe-Web: <http://email.tk.net.mk/u?id=a12b496f25306c4892851221881e>
X-MailCleaner-RDNS: invalid reverse DNS for 89.205.29.113
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0302.53173784.0016
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1WLD0M-0003aN-DR
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" />
</head>
<body>
<div style="text-align: left">
<input name="40494D227126FC" value="24-Hours Sale: Vigara - 0.55$, Cilias - 1.10$, Levtira - 1.20$.. etc... Order NOW!"
style="text-align:left; font-size:large; text-decoration:underline; font-style:oblique; width: 990px; height: 40px; color:maroon; font-style:oblique" type="text" />
<br /><br /><a href="http://02.mediclrefugh.ru/?click=C351079C7C4BF698086FB18F34B" target="_blank"><strong>
<span style="font-size: large">2-Days Delivery. Order Today!</span></strong></a>
<br />
<br />
<span style="font-size: small; font-family: Tahoma">
© 2004-2013 Pfizer. All rights reserved.<br />
<a href="http://02.mediclrefugh.ru/?click=C351079C7C4BF698086FB18F34B&abt=1">About us</a>
| <a href="http://02.mediclrefugh.ru/?click=C351079C7C4BF698086FB18F34B&unsubscribe=john.doe@example.net">Unsubscribe</a></span></div>
</body>
</html>