hello my friend
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1XTamK-00037u-Gp
for <john.doe@example.net>; Mon, 15 Sep 2014 20:13:32 +0200
Received: from [1.221.235.219]
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1XTamJ-000371-73
for <john.doe@example.net>
from <john.doe1ae@primefinancialgroup.net>; Mon, 15 Sep 2014 20:13:32 +0200
Received: from 10.0.0.83.domain.local ([10.0.0.83]) by
8A93D80.domain.local ([10.0.181.48.]) with mapi id
16.09.2014.001; Tue, 16 Sep 2014 03:13:30 +0900
X-MailCleaner-SPF: none
From: Blake Charlene <john.doe1ae@primefinancialgroup.net>
To: "john.doe@example.net" <john.doe@example.net>
Subject: hello my friend
Thread-Index: QTM0NDUyNjY0OQ====
Date: Tue, 16 Sep 2014 03:13:30 +0900
Message-ID: <59FD10C5E0F561A7BF698A7A370FC26A2167CB3E@444af4-W1-CA-2.exch109.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [1.221.235.219]
Content-Type: multipart/alternative;
boundary="_000_59FD10C5E0F561A7BF698A7A370FC26A2167CB3E444af4W1CA2exch_"
MIME-Version: 1.0
X-MailCleaner-RDNS: invalid reverse DNS for 1.221.235.219
X-Commtouch-ctIPd-RefID:
X-Commtouch-ctasd-RefID: str=0001.0A0C0203.54172643.0062,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=520
X-Commtouch: is spam (Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1XTamK-00037u-Gp
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (Spam: Confirmed)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
--_000_59FD10C5E0F561A7BF698A7A370FC26A2167CB3E444af4W1CA2exch_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi there john.doe!
nobody wants to reveal the secret of how to loseweight quickly, but I =
know.find it here =
http://john.doe.blognewsarcinniawi.in/?84E8B3CB9AC7DE924D759A2DFB=
3D57E13FA92889
--_000_59FD10C5E0F561A7BF698A7A370FC26A2167CB3E444af4W1CA2exch_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered =
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><strong>Hi there john.doe!</strong></p><p =
class=3D"MsoNormal">nobody wants to reveal the secret of how to =
loseweight quickly, but I know.</p><o:p><a =
href=3D"http://john.doe.blognewsarcinniawi.in/?84E8B3CB9AC7DE924D=
759A2DFB3D57E13FA92889">find it here</a></o:p></p>
</div>
</body>
</html>
--_000_59FD10C5E0F561A7BF698A7A370FC26A2167CB3E444af4W1CA2exch_--