This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1X4Aqi-0005ST-8J
for <john.doe@example.net>; Mon, 07 Jul 2014 17:29:00 +0200
Received: from [31.148.218.249] (helo=31.148.218.249)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1X4Aqg-0005RZ-N4
for <john.doe@example.net> ; Mon, 07 Jul 2014 17:28:59 +0200
Received: from unknown (HELO localhost) (paul.taylor@tvofertasmex.com.mx@78.24.72.55)
by 31.148.218.249 with ESMTPA; Mon, 7 Jul 2014 19:30:12 +0300
X-MailCleaner-SPF: none
X-Originating-IP: 78.24.72.55
From: paul.taylor@tvofertasmex.com.mx
To: john.doe@example.net
Subject: Do you want to amaze your girl tonight?
Date: Mon, 7 Jul 2014 19:19:51 +0300
X-MailCleaner-RDNS: invalid reverse DNS for 31.148.218.249
X-Commtouch-ctIPd-RefID:
X-Commtouch-ctasd-RefID: str=0001.0A0C0208.53BAB944.0218,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=8
X-Commtouch: is spam (Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1X4Aqi-0005ST-8J
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (Spam: Confirmed)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply

http://thud.vofqzuxp.be/ Leave no place for errors in your intimate life