This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1WwqWS-0002b6-Af
for <john.doe@example.net>; Tue, 17 Jun 2014 12:21:48 +0200
Received: from [49.0.71.55] (helo=prusb.com)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1WwqWR-0002aY-9H
for <john.doe@example.net>
from <mgwbscmnvv@prusb.com>; Tue, 17 Jun 2014 12:21:48 +0200
X-MailCleaner-SPF: pass
Date: Tue, 17 Jun 2014 17:21:34 +0700
Message-ID: <440686431138.43273378427051@prusb.com>
From: Einladung <mgwbscmnvv@prusb.com>
To: <david.grandjean@example.net>
Subject: Pure Action erwartet Sie...
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-MailCleaner-RDNS: invalid reverse DNS for 49.0.71.55
X-Commtouch-ctIPd-RefID:
X-Commtouch-ctasd-RefID: str=0001.0A0C0207.53A016B7.006E,ss=4,sh,re=0.000,recu=0.000,reip=0.000,cl=4,cld=1,fgs=12
X-Commtouch: is spam (Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1WwqWS-0002b6-Af
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (Spam: Confirmed)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply

Der fr=FChe Vogel f=E4ngt den Wurm!

Daher holen Sie sich jetzt Ihren EUR300 Bonus im Ruby Palace und starten =
Sie Ihre Gewinnstr=E4hne.

Melden Sie sich an und gewinnen Sie heute noch!
http://punsil=40punsilapin.com/inability.html