Let's make the regexp:

``````
^X-Spam(?:-([\041-\071\073-\176]+)):\s+(.*)
``````

This requires that something always follows the dash and excludes : from appearing within the header name (it follows the ftext definition in RFC5322 in what characters are allowed in the name) and it strips any extra spaces that might appear after the colon.