Yeah, actually, I've been trying to fine tune my SpamAssassin setup to nail these damned things. The first guy was right, they're multi-part messages. The second one is a "Content-Type: text/html" message that contains a spam message.

But yeah, any email that's "[A-Z]{2,8}, word word word" is a spam. ;)