Email: 386165 Autolearn: 0 AvgScore: 4.57 AvgScanTime: 1.30 sec Spam: 125172 Autolearn: 0 AvgScore: 13.97 AvgScanTime: 1.42 sec Ham: 260993 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.25 sec Time Spent Running SA: 139.78 hours Time Spent Processing Spam: 49.42 hours Time Spent Processing Ham: 90.37 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120691 87.57 96.42 83.33 2 DKIM_SIGNED 112251 80.02 89.68 75.39 3 XM_DK_Pass 108161 78.15 86.41 74.19 4 DKIM_VALID 107413 77.41 85.81 73.39 5 RELAYCOUNTRY_US 106173 81.44 84.82 79.82 6 XM_B_Unicode 104982 74.05 83.87 69.34 7 DCC_CHECK 98400 54.19 78.61 42.48 8 XMListUnsubscribeExists 90990 58.42 72.69 51.58 9 XM_B_SpammyWords 89350 53.72 71.38 45.25 10 DKIM_VALID_AU 84973 62.65 67.88 60.13 11 LOC_TINY_FONT_1 63583 34.84 50.80 27.19 12 XM_B_Unicode3 62952 45.09 50.29 42.59 13 BAYES_50 51403 53.59 41.07 59.60 14 XM_B_SpammyWords2 51360 25.92 41.03 18.68 15 HTML_FONT_LOW_CONTRAST 50150 32.58 40.06 28.99 16 XM_DK_Undo_02 50120 16.34 40.04 4.97 17 RCVD_IN_MSPIKE_H2 49341 35.69 39.42 33.91 18 FVGT_m_MULTI_ODD 43956 28.41 35.12 25.20 19 T_KAM_HTML_FONT_INVALID 42576 25.74 34.01 21.77 20 BAYES_99 37976 12.28 30.34 3.62 21 TR_XM_DKIM_Undo 35165 10.57 28.09 2.16 22 DKIM_VALID_EF 34322 27.69 27.42 27.82 23 MIME_HTML_ONLY 33201 21.92 26.52 19.72 24 BAYES_999 29609 9.52 23.65 2.74 25 XM_Multi_Part_URI 29223 19.50 23.35 17.65 26 TR_DCC_Bayes_99 28668 8.28 22.90 1.26 27 XMSubLong 27246 21.82 21.77 21.84 28 T_TM2_M_HEADER_IN_MSG 26841 25.38 21.44 27.26 29 DCC_CHECK_NEGATIVE 25375 45.42 20.27 57.48 30 TR_XM_DK_Unsub 24129 14.99 19.28 12.94 31 XM_B_Unsub 22492 11.96 17.97 9.08 32 TR_XM_BayesUnsub 21601 10.04 17.26 6.58 33 UNPARSEABLE_RELAY 20618 13.07 16.47 11.43 34 TR_MAX_INTL_RELAY 18815 8.65 15.03 5.60 35 RELAYCOUNTRY_META 18345 7.47 14.66 4.02 36 XM_B_SpammyWords3 18048 7.42 14.42 4.06 37 LOTS_OF_MONEY 17969 9.41 14.36 7.03 38 TR_XM_SpammyWords4 16214 7.47 12.95 4.83 39 BOTNET_IPINHOSTNAME 14945 6.15 11.94 3.38 40 TR_XM_SpammyRelay 13954 5.28 11.15 2.47 41 TR_XM_SpammyWords2 13771 3.80 11.00 0.35 42 XM_Evil_Numbers_Gen 13378 9.33 10.69 8.67 43 BOTNET 11874 3.92 9.49 1.24 44 BAYES_80 11833 5.37 9.45 3.42 45 RCVD_IN_BL_SPAMCOP_NET 11473 3.46 9.17 0.72 46 XM_Body_Dirty_Words 11151 4.93 8.91 3.02 47 BAYES_60 11010 8.90 8.80 8.95 48 FSL_BULK_SIG 10954 8.26 8.75 8.02 49 TR_XM_UnparsRelay 10576 3.71 8.45 1.44 50 LotsOfNums_01 9890 8.52 7.90 8.82 51 TR_XM_SPAMCOP 9695 2.80 7.75 0.42 52 HTML_IMAGE_RATIO_02 9307 5.60 7.44 4.72 53 XM_B_Phish_Phrases 9068 5.31 7.24 4.38 54 RELAYCOUNTRY_CA 7763 3.01 6.20 1.47 55 MPART_ALT_DIFF 7363 4.73 5.88 4.18 56 XM_B_SpammyTLD 7318 5.75 5.85 5.71 57 TooManyTo_001 7127 6.82 5.69 7.36 58 UNTRUSTED_Relay 7050 2.82 5.63 1.47 59 XMSubMetaSx_00 7027 4.33 5.61 3.72 60 XM_H_Long_From01 6900 5.42 5.51 5.38 61 XM_UncommonTLD01 6685 4.66 5.34 4.34 62 BAYES_95 6643 3.19 5.31 2.18 63 XM_B_PhoneNumber 6089 6.73 4.86 7.62 64 TR_LOTS_OF_MONEY3 6041 2.51 4.83 1.40 65 XMStrtUSub 5975 4.80 4.77 4.81 66 XM_B_Investor 5912 2.74 4.72 1.79 67 TR_XM_PhishingBody 5891 2.43 4.71 1.34 68 T_XMDrugObfuBody_14 5801 2.57 4.63 1.58 69 XM_H_GMP 5645 4.85 4.51 5.01 70 HTML_IMAGE_RATIO_04 5523 4.55 4.41 4.62 71 T_XMHurry_00 5431 2.15 4.34 1.10 72 XMSexyCombo_05 4991 2.11 3.99 1.22 73 MIME_HTML_MOSTLY 4948 2.96 3.95 2.48 74 DKIM_INVALID 4838 2.60 3.87 2.00 75 TR_XM_SpammyWords5 4826 2.19 3.86 1.39 76 HTML_IMAGE_RATIO_06 4750 3.49 3.79 3.35 77 XMBody_17 4748 1.59 3.79 0.53 78 DKIM_ADSP_NXDOMAIN 4554 1.39 3.64 0.31 79 TM2_M_VERY_LONG_WORD 4531 2.51 3.62 1.98 80 XM_CamelCaseFrm001 4499 3.06 3.59 2.80 81 RCVD_IN_MSPIKE_WL 4488 4.56 3.59 5.03 82 RCVD_IN_MSPIKE_H3 4488 4.56 3.59 5.03 83 XMNumbers 4473 3.06 3.57 2.81 84 MIME_HTML_ONLY_MULTI 4225 2.65 3.38 2.31 85 XM_OfRef6 4011 1.80 3.20 1.12 86 HTML_IMAGE_RATIO_08 3941 2.42 3.15 2.07 87 XM_UB50 3890 1.62 3.11 0.90 88 MIME_QP_LONG_LINE 3889 4.94 3.11 5.82 89 RCVD_IN_VALIDITY_SAFE 3838 3.95 3.07 4.38 90 XMBrknScrpt_02 3585 1.58 2.86 0.97 91 RCVD_IN_VALIDITY_RPBL 3488 0.93 2.79 0.04 92 RCVD_IN_VALIDITY_CERTIFIED 3350 3.27 2.68 3.56 93 URI_HEX 3347 1.83 2.67 1.42 94 XM_SPF_SoftFail 3321 1.63 2.65 1.14 95 RELAYCOUNTRY_AU 3317 1.46 2.65 0.90 96 FROM_EXCESS_BASE64 3194 2.15 2.55 1.96 97 TR_XM_NoHeaderRelay 3162 1.04 2.53 0.32 98 XM_URI_RBL 3061 1.01 2.45 0.32 99 TM2_M_URI_OPT_OUT 3003 2.18 2.40 2.07 100 T_XMDrugObfuBody_08 2926 1.76 2.34 1.48 101 ANY_BOUNCE_MESSAGE 2852 3.22 2.28 3.67 102 BOUNCE_MESSAGE 2852 3.22 2.28 3.67 103 XM_B_URI_Unicode 2842 1.88 2.27 1.69 104 T_TooManySym_01 2707 4.43 2.16 5.51 105 SUBJ_ALL_CAPS 2705 1.69 2.16 1.47 106 XM_B_Unsub2 2680 1.52 2.14 1.22 107 XMDiploma_00 2675 1.55 2.14 1.27 108 BOTNET_NORDNS 2643 0.69 2.11 0.01 109 USER_IN_DEF_DKIM_WL 2598 9.79 2.08 13.50 110 MAILING_LIST_MULTI 2544 2.27 2.03 2.39 111 NO_DNS_FOR_FROM 2506 0.89 2.00 0.35 112 TR_XM_MaxWHORU 2497 0.84 1.99 0.29 113 XMStockSpam_06 2424 1.64 1.94 1.49 114 SpammyFromTLD_01 2423 1.11 1.94 0.71 115 XMPhish30 2391 0.92 1.91 0.44 116 XM_DK_Undo_01 2201 1.54 1.76 1.44 117 T_FILL_THIS_FORM_SHORT 2155 1.07 1.72 0.76 118 TR_XM_PHPDW 2153 0.71 1.72 0.22 119 TR_XM_PHPForged 2125 0.70 1.70 0.22 120 TR_XM_FormFill2 2089 0.69 1.67 0.23 121 XMBounce_01 2085 0.55 1.67 0.02 122 XM_H_PHPOS 2072 0.68 1.66 0.21 123 URIBL_CSS_A 2044 0.56 1.63 0.05 124 URIBL_CSS 2044 0.56 1.63 0.05 125 SH_BODYURI_REVERSE_CSS 2016 0.55 1.61 0.04 126 BAYES_40 1958 4.19 1.56 5.45 127 XM_B_COPY_HTML 1923 1.26 1.54 1.13 128 NORDNS_LOW_CONTRAST 1906 0.54 1.52 0.07 129 SpammyFromTLD_02 1887 0.91 1.51 0.62 130 HTML_MIME_NO_HTML_TAG 1823 1.91 1.46 2.12 131 XM_B_SpammyWords4 1812 0.74 1.45 0.41 132 TR_Symld_Words 1803 1.52 1.44 1.56 133 T_REMOTE_IMAGE 1796 2.80 1.43 3.46 134 XMSubMetaI_00 1795 1.00 1.43 0.79 135 T_XMDrugObfuBody_00 1773 0.92 1.42 0.69 136 KHOP_HELO_FCRDNS 1749 1.33 1.40 1.30 137 SHOPIFY_IMG_NOT_RCVD_SFY 1698 0.65 1.36 0.32 138 XM_SendGrid 1659 1.33 1.33 1.33 139 XMReplyNow 1633 0.62 1.30 0.29 140 TR_XM_INV_DKIM 1613 0.45 1.29 0.04 141 RCVD_IN_IADB_LISTED 1570 3.02 1.25 3.87 142 TR_XM_Base64_M1 1554 0.83 1.24 0.64 143 BAYES_20 1530 2.93 1.22 3.74 144 THIS_AD 1518 0.62 1.21 0.33 145 T_STY_INVIS_DIRECT 1468 0.65 1.17 0.40 146 DIET_1 1455 0.55 1.16 0.26 147 XMGenDplmaNmb 1448 0.75 1.16 0.55 148 AC_BR_BONANZA 1402 0.46 1.12 0.14 149 RCVD_IN_IADB_SPF 1395 2.70 1.11 3.46 150 XMHTMLBadTable_001 1376 0.53 1.10 0.26 151 RDNS_DYNAMIC 1374 0.56 1.10 0.30 152 ALL_TRUSTED 1368 11.64 1.09 16.69 153 TM2_M_OBFU_COMMENT 1363 0.73 1.09 0.56 154 TooManyTo_002 1360 1.97 1.09 2.40 155 PDS_RDNS_DYNAMIC_FP 1356 0.44 1.08 0.13 156 HTML_TAG_BALANCE_BODY 1355 0.68 1.08 0.48 157 SHORTCIRCUIT 1347 0.35 1.08 0.00 158 RCVD_IN_ZEN_LASTEXTERNAL 1347 0.35 1.08 0.00 159 RCVD_IN_IADB_DK 1340 2.42 1.07 3.07 160 RCVD_IN_IADB_SENDERID 1331 2.48 1.06 3.15 161 XM_B_Phish66 1316 0.54 1.05 0.29 162 TooManyTo_003 1304 1.12 1.04 1.15 163 MPART_ALT_DIFF_COUNT 1284 0.69 1.03 0.52 164 XM_B_DNDMA 1282 0.87 1.02 0.80 165 TooManyTo_004 1264 0.91 1.01 0.86 166 RCVD_IN_PSBL 1264 0.38 1.01 0.07 167 XM_ProductURIs 1259 0.70 1.01 0.55 168 HTTPS_HTTP_MISMATCH 1241 0.72 0.99 0.59 169 TVD_RCVD_IP 1240 0.74 0.99 0.62 170 TR_LOTS_OF_MONEY2 1238 0.53 0.99 0.31 171 TooManyTo_005 1238 0.78 0.99 0.68 172 SUSP_UTF8_WORD_SUBJ 1238 0.34 0.99 0.02 173 T_MONEY_PERCENT 1238 0.53 0.99 0.31 174 XM_H_Long_From02 1233 0.99 0.99 0.99 175 URI_TRY_3LD 1224 0.85 0.98 0.80 176 XMBdyGiftCard01 1218 0.74 0.97 0.63 177 LongTLD 1191 0.60 0.95 0.42 178 XM_DIRTYINTL 1122 0.35 0.90 0.10 179 RELAYCOUNTRY_CN 1095 0.31 0.87 0.04 180 TR_Caps_n_Bayes_99 1093 0.29 0.87 0.01 181 TR_XM_DK_SendGrid 1092 0.94 0.87 0.97 182 DEAR_FRIEND 1082 0.37 0.86 0.13 183 J_POPCORN_W_RD 1073 0.50 0.86 0.33 184 XMSexyCombo_01 1052 0.34 0.84 0.11 185 HELO_DYNAMIC_SPLIT_IP 1036 0.27 0.83 0.01 186 XM_B_SEO 1033 0.53 0.83 0.39 187 TR_XM_RelayPhish 1023 0.30 0.82 0.05 188 TR_XM_Base64_L1 1023 0.38 0.82 0.16 189 XM_B_REG_HTML 1018 0.37 0.81 0.16 190 XM_HighProb1 1017 0.27 0.81 0.01 191 TR_MetaPhish_Combo_01 1009 0.78 0.81 0.76 192 XM_UB99 946 0.25 0.76 0.00 193 T_PDS_OTHER_BAD_TLD 945 0.37 0.75 0.19 194 XM_UB60 931 0.27 0.74 0.04 195 PLING_QUERY 926 0.73 0.74 0.72 196 HTML_FONT_FACE_BAD 916 0.57 0.73 0.49 197 RCVD_IN_PBL 915 0.61 0.73 0.56 198 TR_XM_SEO4 915 0.41 0.73 0.26 199 URI_NOVOWEL 909 2.87 0.73 3.90 200 RELAYCOUNTRY_FR 890 0.38 0.71 0.21 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 217482 87.57 96.42 83.33 2 RELAYCOUNTRY_US 208322 81.44 84.82 79.82 3 DKIM_SIGNED 196750 80.02 89.68 75.39 4 XM_DK_Pass 193629 78.15 86.41 74.19 5 DKIM_VALID 191533 77.41 85.81 73.39 6 XM_B_Unicode 180977 74.05 83.87 69.34 7 DKIM_VALID_AU 156948 62.65 67.88 60.13 8 BAYES_50 155561 53.59 41.07 59.60 9 DCC_CHECK_NEGATIVE 150025 45.42 20.27 57.48 10 XMListUnsubscribeExists 134624 58.42 72.69 51.58 11 XM_B_SpammyWords 118109 53.72 71.38 45.25 12 XM_B_Unicode3 111157 45.09 50.29 42.59 13 DCC_CHECK 110860 54.19 78.61 42.48 14 RCVD_IN_MSPIKE_H2 88491 35.69 39.42 33.91 15 HTML_FONT_LOW_CONTRAST 75671 32.58 40.06 28.99 16 DKIM_VALID_EF 72598 27.69 27.42 27.82 17 T_TM2_M_HEADER_IN_MSG 71151 25.38 21.44 27.26 18 LOC_TINY_FONT_1 70974 34.84 50.80 27.19 19 FVGT_m_MULTI_ODD 65761 28.41 35.12 25.20 20 XMSubLong 57011 21.82 21.77 21.84 21 T_KAM_HTML_FONT_INVALID 56824 25.74 34.01 21.77 22 MIME_HTML_ONLY 51462 21.92 26.52 19.72 23 XM_B_SpammyWords2 48748 25.92 41.03 18.68 24 XM_Multi_Part_URI 46074 19.50 23.35 17.65 25 ALL_TRUSTED 43567 11.64 1.09 16.69 26 USER_IN_DEF_DKIM_WL 35225 9.79 2.08 13.50 27 TR_XM_DK_Unsub 33765 14.99 19.28 12.94 28 UNPARSEABLE_RELAY 29836 13.07 16.47 11.43 29 BAYES_00 28500 7.56 0.56 10.92 30 XM_B_Unsub 23705 11.96 17.97 9.08 31 BAYES_60 23367 8.90 8.80 8.95 32 LotsOfNums_01 23028 8.52 7.90 8.82 33 XM_Evil_Numbers_Gen 22637 9.33 10.69 8.67 34 FSL_BULK_SIG 20925 8.26 8.75 8.02 35 TR_XM_DK_Bayes 20072 5.32 0.39 7.69 36 XM_B_PhoneNumber 19894 6.73 4.86 7.62 37 TR_XM_DK_Bayes1 19830 5.26 0.38 7.60 38 XM_DKIMWhitelistDomains 19380 5.04 0.06 7.43 39 TooManyTo_001 19212 6.82 5.69 7.36 40 LOTS_OF_MONEY 18351 9.41 14.36 7.03 41 TR_XM_BayesUnsub 17161 10.04 17.26 6.58 42 TR_XM_DK_Bayes2 16991 4.46 0.17 6.51 43 IN_ZIMBRA_NJ_WHITELIST 16867 4.39 0.07 6.46 44 MIME_QP_LONG_LINE 15191 4.94 3.11 5.82 45 XM_B_SpammyTLD 14892 5.75 5.85 5.71 46 TR_MAX_INTL_RELAY 14604 8.65 15.03 5.60 47 T_TooManySym_01 14391 4.43 2.16 5.51 48 BAYES_40 14225 4.19 1.56 5.45 49 XM_H_Long_From01 14046 5.42 5.51 5.38 50 RCVD_IN_MSPIKE_WL 13138 4.56 3.59 5.03 51 RCVD_IN_MSPIKE_H3 13138 4.56 3.59 5.03 52 XM_H_GMP 13078 4.85 4.51 5.01 53 XM_DK_Undo_02 12983 16.34 40.04 4.97 54 TR_XM_SpammyWords4 12615 7.47 12.95 4.83 55 XMStrtUSub 12552 4.80 4.77 4.81 56 HTML_IMAGE_RATIO_02 12322 5.60 7.44 4.72 57 HTML_IMAGE_RATIO_04 12060 4.55 4.41 4.62 58 RCVD_IN_VALIDITY_SAFE 11432 3.95 3.07 4.38 59 XM_B_Phish_Phrases 11428 5.31 7.24 4.38 60 XM_UncommonTLD01 11318 4.66 5.34 4.34 61 MPART_ALT_DIFF 10921 4.73 5.88 4.18 62 XM_B_SpammyWords3 10590 7.42 14.42 4.06 63 RELAYCOUNTRY_META 10501 7.47 14.66 4.02 64 XM_PDF 10482 2.85 0.42 4.02 65 URI_NOVOWEL 10166 2.87 0.73 3.90 66 RCVD_IN_IADB_LISTED 10098 3.02 1.25 3.87 67 BAYES_20 9771 2.93 1.22 3.74 68 XMSubMetaSx_00 9703 4.33 5.61 3.72 69 ANY_BOUNCE_MESSAGE 9584 3.22 2.28 3.67 70 BOUNCE_MESSAGE 9584 3.22 2.28 3.67 71 BAYES_99 9449 12.28 30.34 3.62 72 RCVD_IN_VALIDITY_CERTIFIED 9291 3.27 2.68 3.56 73 RCVD_IN_IADB_SPF 9027 2.70 1.11 3.46 74 T_REMOTE_IMAGE 9022 2.80 1.43 3.46 75 BAYES_80 8919 5.37 9.45 3.42 76 BOTNET_IPINHOSTNAME 8817 6.15 11.94 3.38 77 HTML_IMAGE_RATIO_06 8738 3.49 3.79 3.35 78 RCVD_IN_IADB_SENDERID 8230 2.48 1.06 3.15 79 RCVD_IN_IADB_DK 8008 2.42 1.07 3.07 80 XM_Body_Dirty_Words 7884 4.93 8.91 3.02 81 T_TooManySym_02 7814 2.15 0.40 2.99 82 XMNumbers 7336 3.06 3.57 2.81 83 XM_CamelCaseFrm001 7320 3.06 3.59 2.80 84 BAYES_999 7146 9.52 23.65 2.74 85 INVALID_MSGID 7001 1.86 0.15 2.68 86 MIME_HTML_MOSTLY 6476 2.96 3.95 2.48 87 TR_XM_SpammyRelay 6450 5.28 11.15 2.47 88 TO_MALFORMED 6367 1.65 0.00 2.44 89 TooManyTo_002 6255 1.97 1.09 2.40 90 MAILING_LIST_MULTI 6236 2.27 2.03 2.39 91 MIME_HTML_ONLY_MULTI 6024 2.65 3.38 2.31 92 RCVD_IN_IADB_VOUCHED 5861 1.69 0.53 2.25 93 BAYES_95 5679 3.19 5.31 2.18 94 TR_XM_DKIM_Undo 5650 10.57 28.09 2.16 95 HTML_MIME_NO_HTML_TAG 5537 1.91 1.46 2.12 96 BAYES_05 5521 1.63 0.62 2.12 97 HTML_IMAGE_RATIO_08 5414 2.42 3.15 2.07 98 TM2_M_URI_OPT_OUT 5401 2.18 2.40 2.07 99 DKIM_INVALID 5217 2.60 3.87 2.00 100 TM2_M_VERY_LONG_WORD 5178 2.51 3.62 1.98 101 FROM_EXCESS_BASE64 5105 2.15 2.55 1.96 102 XMGappySubj_01 4736 1.28 0.16 1.81 103 XM_B_Investor 4672 2.74 4.72 1.79 104 XM_B_URI_Unicode 4407 1.88 2.27 1.69 105 IN_HORDE_ADDRESS_BOOK 4159 1.13 0.15 1.59 106 T_XMDrugObfuBody_14 4115 2.57 4.63 1.58 107 TR_Symld_Words 4076 1.52 1.44 1.56 108 RCVD_IN_IADB_OPTIN 3970 1.13 0.33 1.52 109 TVD_SPACE_RATIO 3899 1.05 0.11 1.49 110 XMStockSpam_06 3895 1.64 1.94 1.49 111 T_XMDrugObfuBody_08 3873 1.76 2.34 1.48 112 RELAYCOUNTRY_CA 3845 3.01 6.20 1.47 113 SUBJ_ALL_CAPS 3835 1.69 2.16 1.47 114 UNTRUSTED_Relay 3831 2.82 5.63 1.47 115 XM_DK_Undo_01 3756 1.54 1.76 1.44 116 TR_XM_UnparsRelay 3747 3.71 8.45 1.44 117 URI_HEX 3717 1.83 2.67 1.42 118 TR_LOTS_OF_MONEY3 3660 2.51 4.83 1.40 119 TR_XM_SpammyWords5 3625 2.19 3.86 1.39 120 XM_TLDProd2 3559 1.01 0.27 1.36 121 TR_XM_PhishingBody 3503 2.43 4.71 1.34 122 XM_SendGrid 3463 1.33 1.33 1.33 123 KHOP_HELO_FCRDNS 3396 1.33 1.40 1.30 124 XMDiploma_00 3310 1.55 2.14 1.27 125 TR_DCC_Bayes_99 3290 8.28 22.90 1.26 126 BOTNET 3247 3.92 9.49 1.24 127 XM_B_Unsub2 3177 1.52 2.14 1.22 128 XMSexyCombo_05 3173 2.11 3.99 1.22 129 TooManyTo_003 3009 1.12 1.04 1.15 130 XM_SPF_SoftFail 2978 1.63 2.65 1.14 131 XM_B_COPY_HTML 2939 1.26 1.54 1.13 132 XM_OfRef6 2927 1.80 3.20 1.12 133 T_XMHurry_00 2867 2.15 4.34 1.10 134 XMGappySubj_02 2649 0.70 0.05 1.01 135 T_TooManySym_03 2637 0.73 0.13 1.01 136 XM_GoogleGroups 2599 0.87 0.62 1.00 137 XM_H_Long_From02 2587 0.99 0.99 0.99 138 XMBrknScrpt_02 2521 1.58 2.86 0.97 139 TR_XM_DK_SendGrid 2521 0.94 0.87 0.97 140 XMBody_95 2413 0.69 0.21 0.92 141 XM_UB50 2347 1.62 3.11 0.90 142 RELAYCOUNTRY_AU 2338 1.46 2.65 0.90 143 TooManyTo_004 2245 0.91 1.01 0.86 144 XM_B_FormFill 2238 0.58 0.01 0.86 145 SUBJ_BUY 2176 0.61 0.16 0.83 146 DKIM_ADSP_CUSTOM_MED 2106 0.77 0.70 0.81 147 HELO_NODOT 2094 0.63 0.28 0.80 148 HELO_NO_DOMAIN 2088 0.63 0.28 0.80 149 FROM_GOV_DKIM_AU 2087 0.57 0.08 0.80 150 XM_B_DNDMA 2079 0.87 1.02 0.80 151 URI_TRY_3LD 2077 0.85 0.98 0.80 152 XMSubMetaI_00 2049 1.00 1.43 0.79 153 XMCapTrack 2007 0.65 0.39 0.77 154 TR_MetaPhish_Combo_01 1990 0.78 0.81 0.76 155 T_FILL_THIS_FORM_SHORT 1974 1.07 1.72 0.76 156 XM_RXBody 1971 0.70 0.57 0.76 157 PLING_QUERY 1882 0.73 0.74 0.72 158 RCVD_IN_BL_SPAMCOP_NET 1870 3.46 9.17 0.72 159 SpammyFromTLD_01 1853 1.11 1.94 0.71 160 T_OBFU_PDF_ATTACH 1838 0.51 0.11 0.70 161 T_XMDrugObfuBody_00 1799 0.92 1.42 0.69 162 TooManyTo_005 1780 0.78 0.99 0.68 163 XM_ShortIntro_01 1739 0.61 0.50 0.67 164 XM_H_PHPMailer 1729 0.65 0.61 0.66 165 TR_XM_Base64_M1 1658 0.83 1.24 0.64 166 XMBdyGiftCard01 1657 0.74 0.97 0.63 167 XMLngstWrd_00 1628 0.63 0.65 0.62 168 TVD_RCVD_IP 1628 0.74 0.99 0.62 169 SpammyFromTLD_02 1613 0.91 1.51 0.62 170 HTTPS_HTTP_MISMATCH 1549 0.72 0.99 0.59 171 XMNoVowels 1506 0.49 0.31 0.58 172 RCVD_IN_PBL 1458 0.61 0.73 0.56 173 USER_IN_WHITELIST 1456 0.38 0.00 0.56 174 USER_IN_WELCOMELIST 1456 0.38 0.00 0.56 175 TM2_M_OBFU_COMMENT 1456 0.73 1.09 0.56 176 XMGenDplmaNmb 1435 0.75 1.16 0.55 177 XM_ProductURIs 1432 0.70 1.01 0.55 178 FILL_THIS_FORM 1398 0.40 0.12 0.54 179 NML_ADSP_CUSTOM_MED 1390 0.54 0.54 0.53 180 XMBody_17 1380 1.59 3.79 0.53 181 TM2_M_BODY_EMPTY 1371 0.37 0.06 0.53 182 MPART_ALT_DIFF_COUNT 1370 0.69 1.03 0.52 183 MIME_CHARSET_FARAWAY 1332 0.56 0.67 0.51 184 FORGED_GMAIL_RCVD 1330 0.51 0.50 0.51 185 XM_Body_Obfu01 1281 0.46 0.40 0.49 186 HTML_FONT_FACE_BAD 1270 0.57 0.73 0.49 187 HTML_TAG_BALANCE_BODY 1262 0.68 1.08 0.48 188 XMSubMetaSxObfu_03 1218 0.53 0.67 0.47 189 XMSlimDrugH 1156 0.53 0.70 0.44 190 XMPhish30 1145 0.92 1.91 0.44 191 LongTLD 1109 0.60 0.95 0.42 192 T_TVD_MIME_NO_HEADERS 1109 0.29 0.01 0.42 193 TR_XM_SPAMCOP 1102 2.80 7.75 0.42 194 HTML_IMAGE_ONLY_20 1082 0.49 0.65 0.41 195 GMD_PDF_EMPTY_BODY 1066 0.29 0.05 0.41 196 XM_B_SpammyWords4 1063 0.74 1.45 0.41 197 HTML_IMAGE_ONLY_32 1054 0.34 0.22 0.40 198 MISSING_HEADERS 1048 0.38 0.32 0.40 199 T_STY_INVIS_DIRECT 1037 0.65 1.17 0.40 200 MSGID_FROM_MTA_HEADER 1024 0.30 0.11 0.39 ----------------------------------------------------------------------