yes, it's me
This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process
Received: by mailcleaner.example.net stage2 with id 1XTUeS-0005oh-NY
for <john.doe@example.net>; Mon, 15 Sep 2014 13:41:00 +0200
Received: from [200.5.69.88] (helo=[192.168.2.250])
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1XTUeR-0005lE-46
for <john.doe@example.net>
from <john.doee4@frandavisracquetball.com>; Mon, 15 Sep 2014 13:41:00 +0200
Received: from 10.0.0.10.domain.local ([10.0.0.10]) by
D372074A.domain.local ([10.0.179.198.]) with mapi id
15.09.2014.001; Mon, 15 Sep 2014 08:40:43 -0300
X-MailCleaner-SPF: neutral
From: Fernandez Sheena <john.doee4@frandavisracquetball.com>
To: "john.doe@example.net" <john.doe@example.net>
Subject: yes, it's me
Thread-Index: RDgxRDlGMDI5RUUyRTc3Rg====
Date: Mon, 15 Sep 2014 08:40:43 -0300
Message-ID: <BBA758171BCF3E56A82F0B32A3461668FF9978FE@a8b122-W1-CA-2.exch390.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [192.168.2.250]
Content-Type: multipart/alternative;
boundary="_000_BBA758171BCF3E56A82F0B32A3461668FF9978FEa8b122W1CA2exch_"
MIME-Version: 1.0
X-MailCleaner-RDNS: invalid reverse DNS for 200.5.69.88
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0303.5416D04D.0041
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1XTUeS-0005oh-NY
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply
--_000_BBA758171BCF3E56A82F0B32A3461668FF9978FEa8b122W1CA2exch_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
hello john.doe!
I remember you asked me how I lost weight so quickly?answer is here =
http://john.doe.blognewsarcinniarep.in/?5BB21FB1CA9DE5130DB0B338E=
C4A98FD84E59346F971
--_000_BBA758171BCF3E56A82F0B32A3461668FF9978FEa8b122W1CA2exch_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered =
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"blue" vlink=3D"purple">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><strong>hello john.doe!</strong></p><p =
class=3D"MsoNormal">I remember you asked me how I lost weight so =
quickly?</p><o:p><a =
href=3D"http://john.doe.blognewsarcinniarep.in/?5BB21FB1CA9DE5130=
DB0B338EC4A98FD84E59346F971">answer is here</a></o:p></p>
</div>
</body>
</html>
--_000_BBA758171BCF3E56A82F0B32A3461668FF9978FEa8b122W1CA2exch_--