Looking at spam that is still getting through not marked as spam, this seems to be a thing:
<!--bit sur team news dine forward lap discussion april frau recommended thank raw tent banking asp suspect dye lap bass lap interface job lap helen hat sur gender faq fax la governor honor catholic chess pick sur view powered frau christian dye pour tax van ney item item ram words applicability ani pat club chad yahoo ram lens dye settle tomorrow april ram confirmation basement damage raw chad on region inquiry pour presto
acumen rising dot rising sharpen la bit pour haven generator april pour pie on ways pick edit lap navigation thursday pour hat ram sol inscription hat ways tax van latest automated eft fax storm acoustic unusual ani recommended ireland frau lightning weekend pie pod reorder greeting news sol asp gun sur tent store pour ram candidate faq
bit sur team news dine forward lap discussion april frau recommended thank raw tent banking asp suspect dye lap bass lap interface job lap helen hat sur gender faq fax la governor honor catholic chess pick sur view powered frau christian dye pour tax van ney item item ram words applicability ani pat club chad yahoo ram lens dye settle tomorrow april ram confirmation basement damage raw chad on region inquiry pour presto
....another 200 words......
acumen rising dot rising sharpen la bit pour haven generator april pour pie on ways pick edit lap navigation thursday pour hat ram sol inscription hat ways tax van latest automated eft fax storm acoustic unusual ani recommended ireland frau lightning weekend pie pod reorder greeting news sol asp gun sur tent store pour ram candidate faq
-->
I think you can do a custom rawbody rule that looks for something like this:
Looking at spam that is still getting through not marked as spam, this seems to be a thing:
I think you can do a custom rawbody rule that looks for something like this: