Here is an example (headers and spamassassin message, body not included)

>From austad at marketwatch.com  Wed Jul 10 07:10:33 2002
Return-Path: <tclug-list-admin at mn-linux.org>
Delivered-To: slushpupie-com-list at slushpupie.com
Received: (qmail 19074 invoked from network); 9 Jul 2002 22:55:13 -0000
Received: from lists.real-time.com (HELO sprite.real-time.com) (208.20.202.12)
  by 10.0.0.25 with SMTP; 9 Jul 2002 22:55:13 -0000
Received: from sprite.real-time.com (localhost [127.0.0.1])
        by sprite.real-time.com (8.11.6/8.11.6) with ESMTP id g69N15X17878;
        Tue, 9 Jul 2002 18:01:05 -0500
Received: from mspexch2.office.mktw.net (mail.marketwatch.com [206.147.106.4])
        by sprite.real-time.com (8.11.6/8.11.6) with ESMTP id g69LK4X16834
        for <tclug-list at mn-linux.org>; Tue, 9 Jul 2002 16:20:05 -0500
Received: by mspexch2.office.mktw.net with Internet Mail Service (5.5.2655.55)
        id <NYM4B9YH>; Tue, 9 Jul 2002 16:22:51 -0500
Message-ID: <54180709DD3FE145917BB165AFE7EFA008887EAC at mspexch2.office.mktw.net>
From: "Austad, Jay" <austad at marketwatch.com>
To: "'tclug-list at mn-linux.org'" <tclug-list at mn-linux.org>
Subject: *****SPAM***** RE: [TCLUG] OT: ATT GSM
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2655.55)
Content-Type: text/plain
Sender: tclug-list-admin at mn-linux.org
Errors-To: tclug-list-admin at mn-linux.org
X-BeenThere: tclug-list at mn-linux.org
X-Mailman-Version: 2.0.8
Precedence: bulk
Reply-To: tclug-list at mn-linux.org
List-Help: <mailto:tclug-list-request at mn-linux.org?subject=help>
List-Post: <mailto:tclug-list at mn-linux.org>
List-Subscribe: <https://mailman.mn-linux.org/mailman/listinfo/tclug-list>,
        <mailto:tclug-list-request at mn-linux.org?subject=subscribe>
List-Id: Twin Cities Linux Users Group Mailing List <tclug-list.mn-linux.org>
List-Unsubscribe: <https://mailman.mn-linux.org/mailman/listinfo/tclug-list>,
        <mailto:tclug-list-request at mn-linux.org?subject=unsubscribe>
List-Archive: <https://mailman.mn-linux.org/pipermail/tclug-list/>
X-Original-Date: Tue, 9 Jul 2002 16:22:45 -0500
Date: Tue, 9 Jul 2002 16:22:45 -0500
X-Spam-Status: Yes, hits=6.1 required=5.0
        tests=RATWARE,DOUBLE_CAPSWORD,ASCII_FORM_ENTRY,SUBJ_ALL_CAPS
        version=2.31
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.31 (devel $Id: SpamAssassin.pm,v 1.94.2.2 2002/06/20 17:20:29 hughescr Exp $)
Status: R 
X-Status: N

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM: 
SPAM: Content analysis details:   (6.1 hits, 5 required)
SPAM: RATWARE            (4.6 points)  Bulk email software fingerprints found in headers
SPAM: DOUBLE_CAPSWORD    (1.1 points)  BODY: A word in all caps repeated on the line
SPAM: ASCII_FORM_ENTRY   (0.5 points)  BODY: Contains an ASCII-formatted form
SPAM: SUBJ_ALL_CAPS      (-0.1 points) Subject is all capitals
SPAM: 
SPAM: -------------------- End of SpamAssassin results ---------------------