This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1UZ2fl-0005KW-Am
for <john.doe@example.net>; Sun, 05 May 2013 19:24:29 +0200
Received: from [178.127.138.202] (helo=178.127.70.230)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1UZ2fk-0005KF-Gj
for <john.doe@example.net>
from <emipal@creativeimagemgmt.com>; Sun, 05 May 2013 19:24:29 +0200
Received: from unknown (HELO scyd) ([190.65.223.115])
by 178.127.138.202 with ESMTP; Sun, 5 May 2013 19:25:53 +0200
X-MailCleaner-SPF: none
Message-ID: <003101ce49b5$4b77be50$be41df73@homea528355100scyd>
From: "Katharine Atkins" <emipal@creativeimagemgmt.com>
To: <john.doe@example.net>
Subject: My Huge New Pick!!!
Date: Sun, 5 May 2013 19:21:04 +0200
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-MailCleaner-RDNS: invalid reverse DNS for 178.127.138.202
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0302.518695A6.0052
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1UZ2fl-0005KW-Am
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)

Hot News - G_TRL should soon be 11 cent. G_TRL has big plans
prepared and when G_TRL report the headlines the share price
should soar. As its trades very low today, its the awesome chance
to trade your 100000 of G_TRL on Monday May 6th 2013.