This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1VUwxj-0007mE-TT
for <john.doe@example.net>; Sat, 12 Oct 2013 13:02:23 +0200
Received: from 111-240-208-100.dynamic.hinet.net ([111.240.208.100] helo=111.240.208.100)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1VUwxi-0007lt-Ct
for <john.doe@example.net> ; Sat, 12 Oct 2013 13:02:23 +0200
Received: from unknown (HELO localhost) (carvalhocelian@icepr.com@86.129.50.30)
by 111.240.208.100 with ESMTPA; Sat, 12 Oct 2013 19:01:41 +0800
X-MailCleaner-SPF: none
X-Originating-IP: 86.129.50.30
From: carvalhocelian@icepr.com
To: john.doe@example.net
Subject: More to come!
Date: Sat, 12 Oct 2013 18:51:58 +0800
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0302.52592C40.00A6
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1VUwxj-0007mE-TT
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)

It is on the rise. New Monster Pick Coming!

Long Term Target: $0.35
Traded as: MO_NK
Now: $0.07
Trade Date: Monday, October 14th
Name: MONARCHY RESOURCES, INC

DO NOT OPEN this Email Unless You`re Ready To Make Money. It is a
strong buy!!!