This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1V1rj8-00078Y-Vx
for <john.doe@example.net>; Wed, 24 Jul 2013 07:35:07 +0200
Received: from [95.56.18.89] (helo=95.56.18.89.megaline.telecom.kz)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1V1rj8-000785-7i
for <john.doe@example.net> ; Wed, 24 Jul 2013 07:35:06 +0200
Received: from unknown (HELO localhost) (pallocca@leb-arts.com@231.31.178.95)
by 95.56.18.89 with ESMTPA; Wed, 24 Jul 2013 11:30:00 +0400
X-MailCleaner-SPF: none
X-Originating-IP: 231.31.178.95
From: pallocca@leb-arts.com
To: john.doe@example.net
Subject: Day in Review
Date: Wed, 24 Jul 2013 11:20:15 +0400
X-MailCleaner-RDNS: invalid reverse DNS for 95.56.18.89
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0301.51EF678B.0064
X-Commtouch-ctasd-RefID: str=0001.0A0C0208.51EF678B.00FE,ss=3,re=0.000,recu=0.000,reip=0.000,pt=R_341929,cl=4,cld=1,fgs=0
X-Commtouch: is spam (ip: tempfail, Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1V1rj8-00078Y-Vx
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: tempfail, Spam: Confirmed)

Record Member Mails (BREAKING NEWS ALERT)! Wall Street Hustler Trading
Lesson Inside!

Name: Biostem U.S.
Trading Date: July, 24
Currently traded: $.035
Long Term Target: 0.90
Stock: H A I_R

New Research Report on the Way. New Hot Alert!!!