Russian Girls Here
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1Y6ka4-0004ug-LN
for <john.doe@example.net>; Thu, 01 Jan 2015 19:34:44 +0100
Received: from [64.185.27.225] (helo=nts-225.27-185.64.nts-online.net)
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1Y6ka3-0004uV-Ra
for <john.doe@example.net>
from <john.doecih@nts-online.net>; Thu, 01 Jan 2015 19:34:44 +0100
X-MailCleaner-SPF: softfail
From: "ForumGirls" <john.doecih@nts-online.net>
To: john.doe@example.net
Subject: Russian Girls Here
Date: Thu, 01 Jan 2015 12:34:41 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="MIMEBoundary6d7ad0109c8b0f7605afb8c2a611f5f9"
List-Unsubscribe: <mailto:leave-7359ecdde332176cfc1b3b7adc9643ad@nts-online.net>
Reply-To: john.doecih@nts-online.net
Message-ID: <13EB5-09102156-08873021-2015.01.01-12.34.41-john.doe#example.net@nts-225.27-185.64.nts-online.net>
X-MailCleaner-RDNS: invalid reverse DNS for 64.185.27.225
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0303.54A59348.0016
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1Y6ka4-0004ug-LN
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
This is a multi-part message in MIME format.
--MIMEBoundary6d7ad0109c8b0f7605afb8c2a611f5f9
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Look what girls writing onthe forum =
http://airbulletinboard.com/phpbb/viewtopic.php?f=3D2&t=3D86104
--MIMEBoundary6d7ad0109c8b0f7605afb8c2a611f5f9
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" =
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns=3D"http://www.w3.org/1999/xhtml">
<head>
<meta content=3D"text/html; charset=3Dutf-8" http-equiv=3D"Content-Type" =
/>
<title>Newsletter</title>
</head>
<body>
<p><span style=3D"font-size: large; font-family: David">Look what girls =
writing on
the </span><a =
href=3D"http://airbulletinboard.com/phpbb/viewtopic.php?f=3D2&t=3D86104">=
<span style=3D"font-size: large; font-family: David">
forum</span></a></p>
</body>
</html>
--MIMEBoundary6d7ad0109c8b0f7605afb8c2a611f5f9--