This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner stage2 with id 1UHdab-0004ON-Ps
for <john.doe@example.net>; Mon, 18 Mar 2013 18:11:14 +0100
Received: from [2.135.141.103] (helo=95.59.69.127)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1UHdab-0004Nn-0X
for <john.doe@example.net>
from <bdaiuto@ultra.sonic.net>; Mon, 18 Mar 2013 18:11:13 +0100
Received: from unknown (HELO 8hx91) ([104.171.161.115])
by 2.135.141.103 with ESMTP; Mon, 18 Mar 2013 23:11:55 +0600
X-MailCleaner-SPF: none
Message-ID: <003001ce23fb$788c7f00$68aba173@user39222565338hx91>
From: "Tybalt Butler" <bdaiuto@ultra.sonic.net>
To: <john.doe@example.net>
Subject: Pre-Market Trading showing interesting action.
Date: Mon, 18 Mar 2013 23:07:00 +0600
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1250";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-MailCleaner-RDNS: invalid reverse DNS for 2.135.141.103
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0302.51474AB2.0084
X-Commtouch-ctasd-RefID: str=0001.0A0C0204.51474AB2.01A0,ss=3,re=0.000,recu=0.000,reip=0.000,pt=C_4528,cl=4,cld=1,fgs=0
X-Commtouch: is spam (Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1UHdab-0004ON-Ps
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (Spam: Confirmed)

It Is Making a Comeback. This could be last chance before bounce!

Trading Date: Mon, March 18th, 2013
Name: County Line Energy Inc
Sym: CY_LC
Closed Price: .019
5-Day Target: .10

MEGA pick is coming after market closes! This Company may have a
Huge Bounce Potential, chart inside.