I'm reading in other forums that people are having luck catching image spam by scoring messages higher if they contain "Content-Type: multipart/related;" in the header. Apparently this seems to be a common attribute amongst the image spams, but apparently is quite rare in ham. Anyone have any thoughts on this?