We have started seeing some clickbait spam that hides the suspicious text behind /<img alt/ tags, e.g.

https://pastebin.com/SLMyFvmN

The text /Optima Tax Relief: Do You Still[...]/ is visible in the email in thunderbird since the image does not load, but spamassassin's body rule does not trigger

/body        T_OPTIMA  /Optima Tax Relief/i/

Using ctrl-f does not find that text either. Other than rawbody, are there other options?

Reply via email to