This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1XJi3r-0003yT-2k
for <john.doe@example.net>; Tue, 19 Aug 2014 13:58:47 +0200
Received: from mail2.aloo.com.br ([201.70.183.187] helo=smtp.aloo.com.br)
by mailcleaner.example.net stage1 with esmtp
(Exim MailCleaner)
id 1XJi3q-0003yB-FO
for <john.doe@example.net>
from <robertlubanga@yahoo.com>; Tue, 19 Aug 2014 13:58:46 +0200
Received: from User (unknown [41.215.170.64])
by smtp.aloo.com.br (Postfix) with ESMTPA id 38476382A0;
Tue, 19 Aug 2014 04:56:50 -0300 (BRT)
X-MailCleaner-SPF: neutral
Reply-To: <robertlubanga@ymail.com>
From: "Robert Lubanga"<robertlubanga@yahoo.com>
Subject: I NEED YOUR HELP
Date: Tue, 19 Aug 2014 07:57:08 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-MailCleaner-DMARC: reject
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0301.53F33BFE.0008
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1XJi3r-0003yT-2k
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)
X-Auto-Response-Suppress: DR, NDR, RN, NRN, OOF, AutoReply

Dear Friend,

First and foremost i must seek your strict confidence, Let me introduce
myself to you, my name is Robert Lubanga from Democratic Republic of
Congo. My Father name is Thomas Lubanga from Congo.

Am a refugee in Ghana presently in refugee camp i cannot go to Congo
because of the war that is still going on, i succeeded to escaping to
Ghana with part of my father money worth the sum of $1.5 million which i
want to invest in western world.

The money is presently in a hotel here in Ghana, i was formally staying at
the hotel when i first got to Ghana, i decided to keep the trunk box with
the hotel manager before i went to the refugee camp for safe keeping,
because i was afraid, but he dont know the content in it, it has been
there for sometime.

The deal is this, I want you to stand as my dad and i will introduce the
hotel manager to you and you make arrangement to claim it as my dad and i
start sending you the money via western union and you make arrangement for
me to come over to your country and we will both invest the money together
for our mutual benefit.

Please dont disappoint me so that i can be out of the refugee camp and
start living a good life.

I await your response.

God bless you and your family.

yours faithfully
Robert Lubanga