User john.doe, Up to 72% Off!
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1WnvDM-0002CT-21
for <john.doe@example.net>; Fri, 23 May 2014 21:33:12 +0200
Received: from 201-67-81-91.pvoce702.dsl.brasiltelecom.net.br ([201.67.81.91])
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1WnvDL-0002Bb-3p
for <john.doe@example.net>
from <john.doe@brasiltelecom.net.br>; Fri, 23 May 2014 21:33:11 +0200
X-MailCleaner-SPF: neutral
MIME-Version: 1.0
Date: Fri, 23 May 2014 15:33:05 -0400
Message-ID: <65B17A74D2572467B339DA1241B1964-3367E0735D1145078D8BD46AF4FC2F74@mail.example.net>
Subject: User john.doe, Up to 72% Off!
From: "HottestPfizer" <john.doe@brasiltelecom.net.br>
To: john.doe <john.doe@example.net>
Content-Type: multipart/alternative; boundary=----=_NextPart_000_000B_01CF769C.4AB782B0
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0303.537FA278.00AF
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1WnvDM-0002CT-21
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
------=_NextPart_000_000B_01CF769C.4AB782B0
Content-Type: text/plain; charset=UTF-8
We Sell Everything we have Cheaply Today!
http://john.doe.doctormeeh.ru/?C858D0 http://john.doe.doctormeeh.ru/?C858D0
------=_NextPart_000_000B_01CF769C.4AB782B0
Content-Type: text/html; charset=UTF-8
<div dir="ltr"><div>We Sell Everything we have Cheaply Today!<br></div><a href="http://john.doe.doctormeeh.ru/?C858D0">http://john.doe.doctormeeh.ru/?C858D0</a><br></div>
------=_NextPart_000_000B_01CF769C.4AB782B0--