Email: 262788 Autolearn: 0 AvgScore: 4.74 AvgScanTime: 1.38 sec Spam: 92001 Autolearn: 0 AvgScore: 13.72 AvgScanTime: 1.47 sec Ham: 170787 Autolearn: 0 AvgScore: -0.10 AvgScanTime: 1.33 sec Time Spent Running SA: 100.53 hours Time Spent Processing Spam: 37.65 hours Time Spent Processing Ham: 62.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88457 88.34 96.15 84.13 2 DKIM_SIGNED 83663 82.29 90.94 77.64 3 XM_DK_Pass 80088 80.02 87.05 76.23 4 XM_B_Unicode 79774 76.62 86.71 71.19 5 DKIM_VALID 79545 79.45 86.46 75.67 6 RELAYCOUNTRY_US 78863 82.59 85.72 80.91 7 DCC_CHECK 71907 57.75 78.16 46.76 8 XMListUnsubscribeExists 67341 59.87 73.20 52.69 9 XM_B_SpammyWords 67093 55.95 72.93 46.80 10 DKIM_VALID_AU 64531 66.21 70.14 64.10 11 LOC_TINY_FONT_1 47803 38.93 51.96 31.91 12 XM_B_Unicode3 47268 47.28 51.38 45.07 13 XM_DK_Undo_02 39418 18.85 42.85 5.93 14 XM_B_SpammyWords2 39245 28.85 42.66 21.42 15 RCVD_IN_MSPIKE_H2 37900 38.74 41.20 37.42 16 HTML_FONT_LOW_CONTRAST 35774 33.93 38.88 31.26 17 BAYES_99 32959 15.36 35.82 4.33 18 BAYES_50 32665 53.41 35.51 63.05 19 FVGT_m_MULTI_ODD 29680 28.29 32.26 26.14 20 T_KAM_HTML_FONT_INVALID 29625 24.09 32.20 19.72 21 TR_XM_DKIM_Undo 29245 12.73 31.79 2.47 22 DKIM_VALID_EF 26159 29.50 28.43 30.07 23 BAYES_999 25768 11.98 28.01 3.34 24 MIME_HTML_ONLY 25553 25.00 27.77 23.51 25 TR_DCC_Bayes_99 25030 10.50 27.21 1.51 26 XM_Multi_Part_URI 21654 18.19 23.54 15.30 27 DCC_CHECK_NEGATIVE 19558 42.02 21.26 53.21 28 XMSubLong 19541 22.56 21.24 23.28 29 T_TM2_M_HEADER_IN_MSG 19516 22.28 21.21 22.85 30 TR_XM_DK_Unsub 18864 16.70 20.50 14.65 31 UNPARSEABLE_RELAY 16525 14.23 17.96 12.22 32 XM_B_Unsub 15848 12.28 17.23 9.62 33 TR_XM_BayesUnsub 15379 10.72 16.72 7.49 34 TR_MAX_INTL_RELAY 15079 9.97 16.39 6.52 35 RELAYCOUNTRY_META 13634 7.61 14.82 3.73 36 TR_XM_SpammyWords2 13595 5.53 14.78 0.55 37 XM_B_SpammyWords3 13223 9.51 14.37 6.89 38 TR_XM_SpammyRelay 10354 5.50 11.25 2.40 39 LOTS_OF_MONEY 9915 8.20 10.78 6.81 40 XM_Body_Dirty_Words 9824 6.06 10.68 3.57 41 BAYES_80 9183 6.02 9.98 3.88 42 TR_XM_SpammyWords4 9103 6.69 9.89 4.96 43 TR_XM_UnparsRelay 8952 4.70 9.73 1.99 44 BOTNET_IPINHOSTNAME 8855 5.79 9.62 3.72 45 FSL_BULK_SIG 8233 9.65 8.95 10.03 46 RCVD_IN_BL_SPAMCOP_NET 8202 3.67 8.92 0.84 47 BAYES_60 7775 7.42 8.45 6.86 48 XM_Evil_Numbers_Gen 7665 9.92 8.33 10.77 49 HTML_IMAGE_RATIO_02 7026 6.38 7.64 5.70 50 BOTNET 6970 3.62 7.58 1.49 51 XM_B_Phish_Phrases 6933 6.25 7.54 5.55 52 TR_XM_SPAMCOP 6849 2.98 7.44 0.57 53 RELAYCOUNTRY_CA 6038 3.42 6.56 1.72 54 XMSubMetaSx_00 5974 5.43 6.49 4.85 55 LotsOfNums_01 5891 7.02 6.40 7.36 56 MPART_ALT_DIFF 5728 5.43 6.23 4.99 57 BAYES_95 5655 3.86 6.15 2.63 58 XM_UncommonTLD01 5527 5.57 6.01 5.33 59 XM_H_GMP 5309 6.21 5.77 6.45 60 XM_H_Long_From01 5018 5.82 5.45 6.02 61 T_XMDrugObfuBody_14 4605 3.19 5.01 2.21 62 XM_OfRef6 4556 2.59 4.95 1.32 63 XMStrtUSub 4337 5.51 4.71 5.95 64 RCVD_IN_VALIDITY_RPBL 4307 1.79 4.68 0.23 65 XMSexyCombo_05 4293 3.38 4.67 2.69 66 TR_XM_PhishingBody 4289 2.77 4.66 1.76 67 HTML_IMAGE_RATIO_04 4258 4.99 4.63 5.19 68 DKIM_INVALID 4118 2.84 4.48 1.96 69 HTML_IMAGE_RATIO_06 4102 3.71 4.46 3.31 70 XM_B_PhoneNumber 4025 5.76 4.37 6.51 71 UNTRUSTED_Relay 3906 2.40 4.25 1.40 72 XM_B_Investor 3840 2.32 4.17 1.32 73 TM2_M_VERY_LONG_WORD 3798 2.67 4.13 1.88 74 MIME_HTML_MOSTLY 3638 3.04 3.95 2.55 75 RCVD_IN_MSPIKE_WL 3459 4.78 3.76 5.33 76 RCVD_IN_MSPIKE_H3 3459 4.78 3.76 5.33 77 MIME_HTML_ONLY_MULTI 3283 3.18 3.57 2.96 78 XM_B_SpammyTLD 3261 3.15 3.54 2.94 79 XM_CamelCaseFrm001 2955 2.97 3.21 2.83 80 TM2_M_URI_OPT_OUT 2899 2.37 3.15 1.94 81 DKIM_ADSP_NXDOMAIN 2860 1.41 3.11 0.50 82 T_XMHurry_00 2847 1.55 3.09 0.72 83 TooManyTo_001 2818 5.19 3.06 6.33 84 T_XMDrugObfuBody_08 2789 2.10 3.03 1.59 85 HTML_IMAGE_RATIO_08 2723 2.23 2.96 1.83 86 RCVD_IN_VALIDITY_SAFE 2616 4.50 2.84 5.39 87 TR_XM_SpammyWords5 2578 1.91 2.80 1.42 88 XM_SPF_SoftFail 2566 1.72 2.79 1.15 89 NO_DNS_FOR_FROM 2529 1.26 2.75 0.45 90 TR_XM_MaxWHORU 2521 1.21 2.74 0.38 91 XM_B_SpammyWords4 2508 1.92 2.73 1.49 92 XM_URI_RBL 2500 1.30 2.72 0.54 93 RELAYCOUNTRY_AU 2494 1.25 2.71 0.46 94 XMDiploma_00 2244 1.84 2.44 1.52 95 XMBody_17 2241 1.26 2.44 0.63 96 T_FILL_THIS_FORM_SHORT 2191 1.27 2.38 0.67 97 USER_IN_DEF_DKIM_WL 2110 12.69 2.29 18.29 98 XM_B_Unsub2 2099 1.63 2.28 1.28 99 XMNumbers 2060 3.44 2.24 4.08 100 T_TooManySym_01 2046 6.37 2.22 8.60 101 XM_B_URI_Unicode 2027 1.87 2.20 1.69 102 FROM_EXCESS_BASE64 2023 2.24 2.20 2.26 103 DIET_1 1969 1.12 2.14 0.57 104 XMBrknScrpt_02 1956 1.48 2.13 1.12 105 TR_XM_NoHeaderRelay 1906 0.85 2.07 0.20 106 XMStockSpam_06 1903 2.46 2.07 2.67 107 STY_INVIS_DIRECT 1867 1.02 2.03 0.48 108 SUBJ_ALL_CAPS 1854 1.33 2.02 0.96 109 RCVD_IN_VALIDITY_CERTIFIED 1844 3.20 2.00 3.84 110 SpammyFromTLD_02 1758 1.00 1.91 0.50 111 MAILING_LIST_MULTI 1756 2.20 1.91 2.35 112 NORDNS_LOW_CONTRAST 1735 0.69 1.89 0.05 113 LongTLD 1695 0.81 1.84 0.25 114 XM_UB50 1669 1.15 1.81 0.79 115 XM_B_Phish66 1537 0.78 1.67 0.30 116 SpammyFromTLD_01 1514 1.02 1.65 0.68 117 XM_DIRTYINTL 1462 0.61 1.59 0.08 118 URI_NOVOWEL 1461 1.46 1.59 1.38 119 XMPhish30 1458 1.05 1.58 0.77 120 TR_XM_PHPForged 1447 0.71 1.57 0.24 121 TR_XM_PHPDW 1433 0.70 1.56 0.24 122 TR_XM_FormFill2 1432 0.70 1.56 0.24 123 TR_XM_INV_DKIM 1431 0.68 1.56 0.20 124 XMSolicitRefs_0 1424 0.79 1.55 0.39 125 T_XMDrugObfuBody_00 1410 0.81 1.53 0.42 126 XM_SendGrid 1404 1.37 1.53 1.29 127 HTML_TAG_BALANCE_BODY 1403 1.01 1.52 0.73 128 XM_H_PHPOS 1395 0.68 1.52 0.22 129 XM_B_COPY_HTML 1367 1.21 1.49 1.05 130 T_REMOTE_IMAGE 1350 2.88 1.47 3.65 131 MPART_ALT_DIFF_COUNT 1340 0.96 1.46 0.69 132 SHOPIFY_IMG_NOT_RCVD_SFY 1310 0.73 1.42 0.36 133 MIME_QP_LONG_LINE 1309 2.78 1.42 3.51 134 XM_B_REG_HTML 1287 0.66 1.40 0.26 135 KHOP_HELO_FCRDNS 1273 1.49 1.38 1.55 136 URI_HEX 1270 1.18 1.38 1.07 137 XM_DK_Undo_01 1266 1.56 1.38 1.66 138 XM_OfRef7 1233 0.70 1.34 0.36 139 HTML_MIME_NO_HTML_TAG 1207 1.69 1.31 1.89 140 TM2_M_OBFU_COMMENT 1197 0.76 1.30 0.47 141 TR_LOTS_OF_MONEY3 1196 0.68 1.30 0.35 142 XMSexyCombo_01 1195 1.28 1.30 1.26 143 XMBdyGiftCard01 1189 0.87 1.29 0.65 144 BAYES_40 1187 3.50 1.29 4.69 145 RCVD_IN_PSBL 1172 0.89 1.27 0.69 146 T_MONEY_PERCENT 1163 0.55 1.26 0.17 147 TR_LOTS_OF_MONEY2 1163 0.55 1.26 0.17 148 TR_MetaPhish_Combo_01 1159 0.88 1.26 0.67 149 ALL_TRUSTED 1158 10.55 1.26 15.56 150 TR_Symld_Words 1157 1.83 1.26 2.13 151 XMSubMetaI_00 1103 0.72 1.20 0.47 152 TR_XM_DK_SendGrid 1082 1.02 1.18 0.94 153 XM_HighProb1 1070 0.42 1.16 0.01 154 XM_B_SEO 1056 0.55 1.15 0.23 155 BAYES_20 1040 2.54 1.13 3.30 156 XMReplyNow 1013 0.59 1.10 0.31 157 HOSTED_IMG_MULTI_PUB_01 1003 0.40 1.09 0.03 158 XMBody_78 973 0.52 1.06 0.22 159 HTML_FONT_FACE_BAD 967 0.75 1.05 0.59 160 XM_UB99 966 0.37 1.05 0.00 161 XM_H_Long_From02 956 1.09 1.04 1.12 162 XMGenDplmaNmb 945 0.86 1.03 0.76 163 J_POPCORN_WO_D 941 0.54 1.02 0.28 164 URI_TRY_3LD 938 0.69 1.02 0.52 165 XM_RXBody 932 0.52 1.01 0.25 166 BOTNET_NORDNS 923 0.36 1.00 0.02 167 MIME_CHARSET_FARAWAY 902 0.74 0.98 0.61 168 DRUGS_DIET 897 0.37 0.97 0.04 169 XM_DKIMWhitelistDomains 888 7.06 0.97 10.34 170 TR_Caps_n_Bayes_99 879 0.34 0.96 0.01 171 TR_XM_Spammywords 851 0.40 0.92 0.11 172 XM_S_SpammyWords 851 0.40 0.92 0.11 173 RCVD_IN_PBL 838 0.73 0.91 0.64 174 XM_ProductURIs 836 1.20 0.91 1.36 175 HK_RANDOM_REPLYTO 834 0.39 0.91 0.10 176 XM_GoogleGroups 829 1.09 0.90 1.20 177 TR_XM_FormFill 829 0.33 0.90 0.02 178 RELAYCOUNTRY_GB 819 0.55 0.89 0.37 179 DKIM_ADSP_CUSTOM_MED 814 0.87 0.88 0.87 180 DEAR_FRIEND 810 0.34 0.88 0.05 181 TR_Mismatch_TLD_01 802 0.53 0.87 0.34 182 THIS_AD 797 0.48 0.87 0.27 183 TR_Mismatch_TLD_02 796 0.39 0.87 0.13 184 BOUNCE_MESSAGE 789 3.31 0.86 4.64 185 ANY_BOUNCE_MESSAGE 789 3.31 0.86 4.64 186 SUSP_UTF8_WORD_SUBJ 784 0.32 0.85 0.03 187 RCVD_IN_XBL 779 0.31 0.85 0.02 188 HTTPS_HTTP_MISMATCH 770 0.67 0.84 0.59 189 XM_H_Undi_Recip 768 0.39 0.83 0.15 190 TR_XM_Base64_M1 748 0.82 0.81 0.82 191 TR_XM_SEO4 745 0.33 0.81 0.06 192 TR_XM_RelayPhish 743 0.34 0.81 0.08 193 XMNoVowels 741 0.78 0.81 0.76 194 PLING_QUERY 739 0.75 0.80 0.73 195 FROM_SUSPICIOUS_NTLD 732 0.31 0.80 0.04 196 XM_H_PHPMailer 730 0.82 0.79 0.84 197 SUBJ_DOLLARS 724 0.47 0.79 0.30 198 RDNS_DYNAMIC 721 0.48 0.78 0.32 199 XM_B_DNDMA 716 0.67 0.78 0.61 200 XM_UB999 715 0.27 0.78 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143689 88.34 96.15 84.13 2 RELAYCOUNTRY_US 138182 82.59 85.72 80.91 3 DKIM_SIGNED 132592 82.29 90.94 77.64 4 XM_DK_Pass 130183 80.02 87.05 76.23 5 DKIM_VALID 129237 79.45 86.46 75.67 6 XM_B_Unicode 121575 76.62 86.71 71.19 7 DKIM_VALID_AU 109471 66.21 70.14 64.10 8 BAYES_50 107685 53.41 35.51 63.05 9 DCC_CHECK_NEGATIVE 90878 42.02 21.26 53.21 10 XMListUnsubscribeExists 89994 59.87 73.20 52.69 11 XM_B_SpammyWords 79929 55.95 72.93 46.80 12 DCC_CHECK 79864 57.75 78.16 46.76 13 XM_B_Unicode3 76969 47.28 51.38 45.07 14 RCVD_IN_MSPIKE_H2 63913 38.74 41.20 37.42 15 LOC_TINY_FONT_1 54500 38.93 51.96 31.91 16 HTML_FONT_LOW_CONTRAST 53389 33.93 38.88 31.26 17 DKIM_VALID_EF 51362 29.50 28.43 30.07 18 FVGT_m_MULTI_ODD 44651 28.29 32.26 26.14 19 MIME_HTML_ONLY 40147 25.00 27.77 23.51 20 XMSubLong 39756 22.56 21.24 23.28 21 T_TM2_M_HEADER_IN_MSG 39025 22.28 21.21 22.85 22 XM_B_SpammyWords2 36575 28.85 42.66 21.42 23 T_KAM_HTML_FONT_INVALID 33676 24.09 32.20 19.72 24 USER_IN_DEF_DKIM_WL 31245 12.69 2.29 18.29 25 ALL_TRUSTED 26576 10.55 1.26 15.56 26 XM_Multi_Part_URI 26137 18.19 23.54 15.30 27 TR_XM_DK_Unsub 25022 16.70 20.50 14.65 28 UNPARSEABLE_RELAY 20865 14.23 17.96 12.22 29 XM_Evil_Numbers_Gen 18402 9.92 8.33 10.77 30 XM_DKIMWhitelistDomains 17661 7.06 0.97 10.34 31 FSL_BULK_SIG 17124 9.65 8.95 10.03 32 XM_B_Unsub 16432 12.28 17.23 9.62 33 BAYES_00 16088 6.30 0.50 9.42 34 T_TooManySym_01 14693 6.37 2.22 8.60 35 TR_XM_BayesUnsub 12799 10.72 16.72 7.49 36 LotsOfNums_01 12565 7.02 6.40 7.36 37 TR_XM_DK_Bayes 12383 4.86 0.43 7.25 38 TR_XM_DK_Bayes1 12293 4.83 0.43 7.20 39 XM_B_SpammyWords3 11759 9.51 14.37 6.89 40 BAYES_60 11720 7.42 8.45 6.86 41 LOTS_OF_MONEY 11623 8.20 10.78 6.81 42 TR_MAX_INTL_RELAY 11129 9.97 16.39 6.52 43 XM_B_PhoneNumber 11122 5.76 4.37 6.51 44 XM_H_GMP 11022 6.21 5.77 6.45 45 TR_XM_DK_Bayes2 10848 4.24 0.32 6.35 46 TooManyTo_001 10818 5.19 3.06 6.33 47 XM_H_Long_From01 10283 5.82 5.45 6.02 48 XMStrtUSub 10154 5.51 4.71 5.95 49 XM_DK_Undo_02 10126 18.85 42.85 5.93 50 IN_ZIMBRA_NJ_WHITELIST 9809 3.76 0.07 5.74 51 HTML_IMAGE_RATIO_02 9735 6.38 7.64 5.70 52 XM_B_Phish_Phrases 9487 6.25 7.54 5.55 53 RCVD_IN_VALIDITY_SAFE 9208 4.50 2.84 5.39 54 RCVD_IN_MSPIKE_H3 9108 4.78 3.76 5.33 55 RCVD_IN_MSPIKE_WL 9108 4.78 3.76 5.33 56 XM_UncommonTLD01 9105 5.57 6.01 5.33 57 HTML_IMAGE_RATIO_04 8860 4.99 4.63 5.19 58 MPART_ALT_DIFF 8530 5.43 6.23 4.99 59 TR_XM_SpammyWords4 8479 6.69 9.89 4.96 60 XMSubMetaSx_00 8283 5.43 6.49 4.85 61 BAYES_40 8008 3.50 1.29 4.69 62 ANY_BOUNCE_MESSAGE 7919 3.31 0.86 4.64 63 BOUNCE_MESSAGE 7919 3.31 0.86 4.64 64 T_TooManySym_02 7645 3.09 0.53 4.48 65 BAYES_99 7393 15.36 35.82 4.33 66 INVALID_MSGID 6972 2.72 0.20 4.08 67 XMNumbers 6971 3.44 2.24 4.08 68 BAYES_80 6625 6.02 9.98 3.88 69 RCVD_IN_VALIDITY_CERTIFIED 6564 3.20 2.00 3.84 70 RELAYCOUNTRY_META 6372 7.61 14.82 3.73 71 BOTNET_IPINHOSTNAME 6355 5.79 9.62 3.72 72 T_REMOTE_IMAGE 6228 2.88 1.47 3.65 73 TO_MALFORMED 6201 2.36 0.01 3.63 74 XM_Body_Dirty_Words 6092 6.06 10.68 3.57 75 MIME_QP_LONG_LINE 5993 2.78 1.42 3.51 76 BAYES_999 5710 11.98 28.01 3.34 77 HTML_IMAGE_RATIO_06 5657 3.71 4.46 3.31 78 BAYES_20 5632 2.54 1.13 3.30 79 MIME_HTML_ONLY_MULTI 5061 3.18 3.57 2.96 80 XM_B_SpammyTLD 5024 3.15 3.54 2.94 81 XM_CamelCaseFrm001 4841 2.97 3.21 2.83 82 XM_PDF 4703 1.90 0.31 2.75 83 XMSexyCombo_05 4588 3.38 4.67 2.69 84 XMStockSpam_06 4560 2.46 2.07 2.67 85 BAYES_95 4500 3.86 6.15 2.63 86 MIME_HTML_MOSTLY 4358 3.04 3.95 2.55 87 TR_XM_DKIM_Undo 4219 12.73 31.79 2.47 88 TR_XM_SpammyRelay 4101 5.50 11.25 2.40 89 MAILING_LIST_MULTI 4017 2.20 1.91 2.35 90 RCVD_IN_IADB_LISTED 3978 1.74 0.64 2.33 91 FROM_EXCESS_BASE64 3853 2.24 2.20 2.26 92 TooManyTo_002 3824 1.67 0.62 2.24 93 T_XMDrugObfuBody_14 3767 3.19 5.01 2.21 94 TR_Symld_Words 3644 1.83 1.26 2.13 95 RCVD_IN_IADB_SPF 3552 1.54 0.55 2.08 96 TR_XM_UnparsRelay 3397 4.70 9.73 1.99 97 DKIM_INVALID 3355 2.84 4.48 1.96 98 TM2_M_URI_OPT_OUT 3320 2.37 3.15 1.94 99 T_TooManySym_03 3271 1.29 0.13 1.92 100 HTML_MIME_NO_HTML_TAG 3234 1.69 1.31 1.89 101 RCVD_IN_IADB_SENDERID 3217 1.40 0.51 1.88 102 TM2_M_VERY_LONG_WORD 3206 2.67 4.13 1.88 103 IN_HORDE_ADDRESS_BOOK 3198 1.26 0.12 1.87 104 RCVD_IN_IADB_DK 3160 1.38 0.51 1.85 105 BAYES_05 3133 1.40 0.59 1.83 106 HTML_IMAGE_RATIO_08 3130 2.23 2.96 1.83 107 TR_XM_PhishingBody 3001 2.77 4.66 1.76 108 RELAYCOUNTRY_CA 2943 3.42 6.56 1.72 109 XM_B_URI_Unicode 2886 1.87 2.20 1.69 110 XM_DK_Undo_01 2827 1.56 1.38 1.66 111 T_XMDrugObfuBody_08 2719 2.10 3.03 1.59 112 RCVD_IN_IADB_VOUCHED 2682 1.15 0.38 1.57 113 KHOP_HELO_FCRDNS 2651 1.49 1.38 1.55 114 T_TVD_MIME_NO_HEADERS 2591 1.00 0.04 1.52 115 XMDiploma_00 2590 1.84 2.44 1.52 116 TVD_SPACE_RATIO 2584 1.02 0.11 1.51 117 TR_DCC_Bayes_99 2574 10.50 27.21 1.51 118 XM_B_SpammyWords4 2546 1.92 2.73 1.49 119 BOTNET 2545 3.62 7.58 1.49 120 TR_XM_SpammyWords5 2430 1.91 2.80 1.42 121 UNTRUSTED_Relay 2390 2.40 4.25 1.40 122 URI_NOVOWEL 2364 1.46 1.59 1.38 123 XMGappySubj_01 2362 0.93 0.09 1.38 124 XM_ProductURIs 2322 1.20 0.91 1.36 125 XM_B_Investor 2253 2.32 4.17 1.32 126 XM_OfRef6 2253 2.59 4.95 1.32 127 XM_SendGrid 2199 1.37 1.53 1.29 128 XM_B_Unsub2 2187 1.63 2.28 1.28 129 XMSubMetaSxObfu_03 2160 0.99 0.49 1.26 130 XMSexyCombo_01 2159 1.28 1.30 1.26 131 XMHTMLBadTable_001 2046 0.95 0.49 1.20 132 XM_GoogleGroups 2044 1.09 0.90 1.20 133 HTML_EXTRA_CLOSE 2042 0.84 0.17 1.20 134 XM_SPF_SoftFail 1967 1.72 2.79 1.15 135 XMBrknScrpt_02 1921 1.48 2.13 1.12 136 XM_H_Long_From02 1906 1.09 1.04 1.12 137 TooManyTo_003 1864 0.91 0.57 1.09 138 RCVD_IN_IADB_OPTIN 1845 0.79 0.25 1.08 139 URI_HEX 1832 1.18 1.38 1.07 140 XM_B_COVIDMETA 1808 0.88 0.55 1.06 141 XM_B_COPY_HTML 1801 1.21 1.49 1.05 142 TVD_RCVD_IP 1707 0.91 0.75 1.00 143 XMSexyCombo_04 1681 0.76 0.34 0.98 144 XMSubMetaSx_01 1655 0.74 0.32 0.97 145 SUBJ_ALL_CAPS 1640 1.33 2.02 0.96 146 XMBody_95 1608 0.65 0.10 0.94 147 TR_XM_DK_SendGrid 1605 1.02 1.18 0.94 148 XMGappySubj_02 1581 0.61 0.03 0.93 149 XMSexyCombo_02 1566 0.74 0.40 0.92 150 DKIM_ADSP_CUSTOM_MED 1482 0.87 0.88 0.87 151 RCVD_IN_BL_SPAMCOP_NET 1436 3.67 8.92 0.84 152 XM_H_PHPMailer 1428 0.82 0.79 0.84 153 TR_XM_Base64_M1 1405 0.82 0.81 0.82 154 TooManyTo_004 1388 0.72 0.53 0.81 155 FROM_GOV_DKIM_AU 1367 0.55 0.10 0.80 156 XM_UB50 1342 1.15 1.81 0.79 157 XMPhish30 1308 1.05 1.58 0.77 158 XMGenDplmaNmb 1305 0.86 1.03 0.76 159 XMNoVowels 1297 0.78 0.81 0.76 160 HTML_TAG_BALANCE_BODY 1248 1.01 1.52 0.73 161 PLING_QUERY 1245 0.75 0.80 0.73 162 T_XMHurry_00 1232 1.55 3.09 0.72 163 USER_IN_WELCOMELIST 1210 0.46 0.00 0.71 164 USER_IN_WHITELIST 1210 0.46 0.00 0.71 165 TooManyTo_005 1207 0.64 0.52 0.71 166 XMBSHREFv2 1174 0.55 0.30 0.69 167 RCVD_IN_PSBL 1174 0.89 1.27 0.69 168 MPART_ALT_DIFF_COUNT 1171 0.96 1.46 0.69 169 SpammyFromTLD_01 1168 1.02 1.65 0.68 170 TR_MetaPhish_Combo_01 1145 0.88 1.26 0.67 171 T_FILL_THIS_FORM_SHORT 1142 1.27 2.38 0.67 172 XMBdyGiftCard01 1110 0.87 1.29 0.65 173 XM_B_FormFill 1092 0.42 0.01 0.64 174 RCVD_IN_PBL 1091 0.73 0.91 0.64 175 XMBody_17 1080 1.26 2.44 0.63 176 XM_B_DNDMA 1045 0.67 0.78 0.61 177 MIME_CHARSET_FARAWAY 1037 0.74 0.98 0.61 178 HTML_FONT_FACE_BAD 1009 0.75 1.05 0.59 179 HTTPS_HTTP_MISMATCH 1000 0.67 0.84 0.59 180 DIET_1 979 1.12 2.14 0.57 181 TR_XM_SPAMCOP 977 2.98 7.44 0.57 182 T_TooManySym_04 972 0.38 0.02 0.57 183 HTML_IMAGE_ONLY_20 950 0.53 0.48 0.56 184 TR_XM_SpammyWords2 946 5.53 14.78 0.55 185 FORGED_GMAIL_RCVD 934 0.59 0.67 0.55 186 XM_URI_RBL 928 1.30 2.72 0.54 187 XMLngstWrd_00 881 0.46 0.36 0.52 188 URI_TRY_3LD 880 0.69 1.02 0.52 189 NML_ADSP_CUSTOM_MED 863 0.60 0.77 0.51 190 SpammyFromTLD_02 859 1.00 1.91 0.50 191 DKIM_ADSP_NXDOMAIN 857 1.41 3.11 0.50 192 STY_INVIS_DIRECT 820 1.02 2.03 0.48 193 TM2_M_OBFU_COMMENT 811 0.76 1.30 0.47 194 XMCapTrack 803 0.45 0.42 0.47 195 XMSubMetaI_00 798 0.72 1.20 0.47 196 MSGID_FROM_MTA_HEADER 788 0.35 0.14 0.46 197 RELAYCOUNTRY_AU 779 1.25 2.71 0.46 198 NO_DNS_FOR_FROM 773 1.26 2.75 0.45 199 XMSlimDrugH 766 0.56 0.77 0.45 200 XM_S_SubURI 765 0.31 0.06 0.45 ----------------------------------------------------------------------