Let see if the mail arrives with the correct escaping this time. body __HAS_URI /(http|https):\/\// tflags __HAS_URI multiple meta TMU ( _HAS_URI > 10 ) describe TMU Too many URIs (>10) score TMU 5.0
As rightly noted, the same link is counted twice, for text and html bodies when they are present. However, my corpus has more of the odd type, where the text and the html parts are different: if you switch from text to html you read a different message for the same email. Those who fill their emails with lots of useless pics get the spam rating they deserve, so I intentionally count all links. I feel more than generous with 5+5 links, but if you want more, or less, you can easily change to fit your local policy.