Can still set up a header-matching rule - just need to mark the email with a label, so you can report it without even having to read it.