Received: by mailcleaner.example.net stage2 with id 1UR6ZX-0002EZ-DC
for <john.doe@example.net>; Sat, 13 Apr 2013 21:57:15 +0200
Received: from [109.96.165.150]
by example.net stage1 with esmtp
(Exim MailCleaner)
id 1UR6ZW-0002Dr-Vx
for <john.doe@example.net>
from <canneryb66@google.com>; Sat, 13 Apr 2013 21:57:15 +0200
Received: from [76.121.35.61] (helo=zqwkuluz.wqamgxuloxfn.ru)
by with esmtpa (Exim 4.69)
(envelope-from )
id 1MMIZV-5980gk-A8
for macias@example.net; Sat, 13 Apr 2013 21:57:06 +0200
X-MailCleaner-SPF: softfail
Date:Sat, 13 Apr 2013 21:57:06 +0200
From: <<macias@example.net>,
<john.doe@example.net>>
X-Mailer: The Bat! (v2.00.9) Personal
X-Priority: 3 (Normal)
Message-ID: <8716894345.USAGJAUE131884@wfrntcmtmgks.dwytfugisfbwnfp.tv>
To: <macias@example.net>,
<john.doe@example.net>
Subject: (TXN#: 4VNTS5X): Your interest rates are unfair!
MIME-Version: 1.0
Content-Type: text/html;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit
X-MailCleaner-RDNS: invalid reverse DNS for 109.96.165.150
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1UR6ZX-0002EZ-DC
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: (cached), Commtouch (ip: permfail)
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY>
Of course you have never heard of anything like that before<br>
because it was impossible for average people! <br>
<br>
Welcome to the brand new revolutionary website! There are over 5,000 people on it already;<br>
all of them are busy making money - $70 Every single minute!<br>
<br>
<a href="http://ochesleads.com/">Do not miss your chance to check this out!</a><br>
<br>
As soon as you click on the link given above,<br>
you will join the unique project that is absolutely FREE until Tomorrow.<br>
<br>
Do not waste your time, you are awaited at:<br>
<a href="http://ochesleads.com/">www.<b>ochesleads.com</b></a><br>
<br>
The clock is ticking! You have to visit the portal before tomorrow to make easy money online.
</BODY></HTML>
