This shows a real spam collected in a user quarantine. This shows the headers of the messages with the X-MailCleaner anti spam tags and filtering process

Received: by mailcleaner.example.net stage2 with id 1Ugwea-0001Om-5u
for <john.doe@example.net>; Mon, 27 May 2013 14:35:56 +0200
Received: from [37.44.77.155] (helo=37.44.77.155)
by mailcleaner.example.net stage1 with smtp
(Exim MailCleaner)
id 1UgweZ-0001O2-Cg
for <john.doe@example.net> ; Mon, 27 May 2013 14:35:56 +0200
Received: from unknown (HELO localhost) (sk@015.ru@159.30.61.179)
by 37.44.77.155 with ESMTPA; Mon, 27 May 2013 15:36:18 +0200
X-MailCleaner-SPF: none
X-Originating-IP: 159.30.61.179
From: sk@015.ru
To: john.doe@example.net
Subject: This is a Hot Stock to Watch
Date: Mon, 27 May 2013 15:31:09 +0200
X-MailCleaner-RDNS: invalid reverse DNS for 37.44.77.155
X-Commtouch-ctIPd-RefID:
X-Commtouch-ctasd-RefID: str=0001.0A0C0208.51A3532E.00D0,ss=4,re=0.000,recu=0.000,reip=0.000,pt=R_334738,cl=4,cld=1,fgs=12
X-Commtouch: is spam (Spam: Confirmed)
X-MailCleaner-Information: Please contact support@example.net for more information
X-MailCleaner-ID: 1Ugwea-0001Om-5u
X-MailCleaner: Found to be clean
X-MailCleaner-SpamCheck: spam, Commtouch (Spam: Confirmed)

Turn a nimble 150% on B_Y_S D! Ask at just 1 penny! Nearly a slice of a
penny. Bayside Petroleum Corp (B_Y_S D) set to burst!!! Lodge your order on
Tuesday May 28th, 2013.