This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1UaWMK-0006us-Kc
for <john.doe@example.net>; Thu, 09 May 2013 21:18:32 +0200
Received: from 96.230.106.109.adsl.dyn.beotel.net ([109.106.230.96] helo=109.106.230.96)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1UaWMK-0006ud-A6
for <john.doe@example.net> ; Thu, 09 May 2013 21:18:32 +0200
Received: from unknown (HELO localhost) (engleng.ooi@loretel.net@158.133.159.138)
by 109.106.230.96 with ESMTPA; Thu, 9 May 2013 21:21:45 +0100
X-MailCleaner-SPF: none
X-Originating-IP: 158.133.159.138
From: engleng.ooi@loretel.net
To: john.doe@example.net
Subject: This Stock is Chart Burning Tech Beast in the morning!
Date: Thu, 9 May 2013 21:10:30 +0100
X-Commtouch-ctIPd-RefID: tid=0001.0A0C0302.518BF65B.008A
X-Commtouch: is spam (ip: permfail)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1UaWMK-0006us-Kc
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (ip: permfail)

Flicks productions are growing in Mexico, the crisis is over! G
T_RL is a confident Buy. Mexico as advertised in prs recently is
a hot growing market and G T_RL should get it. With these
impressive media Wednesday there is no concerns that G T_RL will
climb. Purchase your 130000 shares on May, 9th.