This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1Ua77R-00079F-I2
for <john.doe@example.net>; Wed, 08 May 2013 18:21:29 +0200
Received: from [93.85.158.13] (helo=93.85.158.13)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1Ua77R-00078v-6b
for <john.doe@example.net>
from <deep_purple@wmcmhs.org>; Wed, 08 May 2013 18:21:29 +0200
Received: from localhost ([125.113.173.143]) by 93.85.158.13 with MailEnable ESMTP; Thu, 16 May 2013 19:21:34 +0400
X-MailCleaner-SPF: none
Message-ID: <001701ce5248$e960a0f0$7d71ad8f@vadim>
From: "deep_purple@wmcmhs.org" <deep_purple@wmcmhs.org>
To: <john.doe@example.net>
Subject: It could be the next big winner!
Date: Thu, 16 May 2013 19:11:09 +0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-MailCleaner-RDNS: invalid reverse DNS for 93.85.158.13
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0301.518A6DB6.0076
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1Ua77R-00079F-I2
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)

Hollywood aims to lower spendings! News now: LOS ANGELES -
Hollywood Abandons Hollywood in Finding of Cheaper Expenses. GT_R L
has established a minimmum cost solutions for Hollywood! When
significant portion of Hollywood productions goes to GT_R L would
you imagine GT_R L's expansion? Ideal timing to grab shares of GT_R
L asap at discounted valuation!!!