I would focus on the headers: they have plenty for a spam flag. On the body, SA should already mark the text/code ratio, and the number of links.
On Sun, Jan 27, 2019 at 05:43, Mark London <m...@psfc.mit.edu> wrote: > Does anyone have any rules that can catch this type of obfuscated spam? > > https://pastebin.com/qi8dsREW > > Thanks. - Mark
