Email: 421380 Autolearn: 0 AvgScore: 4.54 AvgScanTime: 1.35 sec Spam: 132053 Autolearn: 0 AvgScore: 14.56 AvgScanTime: 1.50 sec Ham: 289327 Autolearn: 0 AvgScore: -0.04 AvgScanTime: 1.29 sec Time Spent Running SA: 158.55 hours Time Spent Processing Spam: 54.86 hours Time Spent Processing Ham: 103.69 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 130107 99.22 98.53 99.54 2 HTML_MESSAGE 125416 89.47 94.97 86.95 3 DKIM_SIGNED 114736 80.54 86.89 77.64 4 XM_B_Unicode 112372 75.54 85.10 71.18 5 XM_DK_Pass 108217 78.16 81.95 76.44 6 DKIM_VALID 107440 77.27 81.36 75.41 7 RELAYCOUNTRY_US 106268 82.00 80.47 82.69 8 DCC_CHECK 100385 52.32 76.02 41.50 9 XM_B_SpammyWords 93318 53.95 70.67 46.32 10 XMListUnsubscribeExists 87473 55.35 66.24 50.38 11 DKIM_VALID_AU 85461 61.94 64.72 60.67 12 XM_B_Unicode3 64738 43.84 49.02 41.47 13 LOC_TINY_FONT_1 60801 34.71 46.04 29.53 14 BAYES_50 52795 54.52 39.98 61.15 15 XM_DK_Undo_02 52667 16.83 39.88 6.31 16 XM_B_SpammyWords2 51648 25.78 39.11 19.69 17 HTML_FONT_LOW_CONTRAST 48727 31.47 36.90 29.00 18 FVGT_m_MULTI_ODD 42998 28.66 32.56 26.88 19 BAYES_99 41951 13.07 31.77 4.54 20 MIME_HTML_ONLY 41054 24.15 31.09 20.98 21 T_KAM_HTML_FONT_INVALID 40971 25.16 31.03 22.49 22 DKIM_VALID_EF 39130 30.08 29.63 30.29 23 TR_XM_DKIM_Undo 39069 11.44 29.59 3.16 24 XMSubLong 33692 24.53 25.51 24.08 25 BAYES_999 32723 10.21 24.78 3.56 26 T_TM2_M_HEADER_IN_MSG 30323 27.39 22.96 29.41 27 DCC_CHECK_NEGATIVE 30027 47.26 22.74 58.45 28 TR_DCC_Bayes_99 29669 8.33 22.47 1.88 29 XM_Multi_Part_URI 29079 17.40 22.02 15.29 30 TR_XM_DK_Unsub 27699 16.11 20.98 13.90 31 XM_B_Unsub 25898 13.65 19.61 10.93 32 TR_XM_BayesUnsub 24797 11.53 18.78 8.22 33 RELAYCOUNTRY_META 24208 8.36 18.33 3.81 34 UNPARSEABLE_RELAY 23041 14.45 17.45 13.09 35 XM_B_SpammyWords3 20820 8.24 15.77 4.81 36 TR_MAX_INTL_RELAY 18904 8.87 14.32 6.39 37 BOTNET_IPINHOSTNAME 18406 6.76 13.94 3.48 38 RCVD_IN_MSPIKE_H2 18319 14.66 13.87 15.02 39 FSL_BULK_SIG 17182 10.13 13.01 8.81 40 TR_XM_SpammyRelay 16951 5.40 12.84 2.00 41 LOTS_OF_MONEY 16313 8.11 12.35 6.17 42 TR_XM_SpammyWords4 14628 6.41 11.08 4.28 43 BOTNET 14517 4.52 10.99 1.57 44 TR_XM_SpammyWords2 14253 3.85 10.79 0.68 45 XM_B_Phish_Phrases 13960 7.14 10.57 5.58 46 RCVD_IN_BL_SPAMCOP_NET 12787 3.61 9.68 0.84 47 TR_XM_UnparsRelay 12034 4.15 9.11 1.88 48 BAYES_80 11655 5.40 8.83 3.84 49 RCVD_IN_MSPIKE_WL 11219 13.09 8.50 15.19 50 XM_Evil_Numbers_Gen 11117 8.62 8.42 8.71 51 XM_Body_Dirty_Words 10916 4.82 8.27 3.24 52 BAYES_60 10509 6.87 7.96 6.38 53 UNTRUSTED_Relay 10220 3.35 7.74 1.35 54 XMSubMetaSx_00 10002 5.36 7.57 4.35 55 LotsOfNums_01 9516 7.75 7.21 7.99 56 RELAYCOUNTRY_CA 8657 2.62 6.56 0.83 57 HTML_IMAGE_RATIO_02 8625 5.11 6.53 4.46 58 MPART_ALT_DIFF 7574 4.89 5.74 4.51 59 XM_B_PhoneNumber 7432 8.32 5.63 9.55 60 DKIM_INVALID 7296 3.26 5.53 2.23 61 XM_H_Long_From01 7237 5.72 5.48 5.84 62 XM_UncommonTLD01 7173 4.70 5.43 4.37 63 RCVD_IN_MSPIKE_BL 7070 2.16 5.35 0.70 64 TR_XM_MSPIKECOMBO 7068 2.16 5.35 0.70 65 BAYES_95 6712 3.34 5.08 2.55 66 T_XMDrugObfuBody_14 6601 3.13 5.00 2.28 67 TR_XM_PhishingBody 6578 2.68 4.98 1.63 68 HTML_IMAGE_RATIO_04 6569 4.56 4.97 4.36 69 RCVD_IN_MSPIKE_H3 6497 5.96 4.92 6.43 70 XMSexyCombo_05 6416 2.90 4.86 2.00 71 XM_B_Investor 6405 2.77 4.85 1.82 72 TooManyTo_001 6312 7.31 4.78 8.47 73 XM_H_GMP 6185 5.56 4.68 5.96 74 XMStrtUSub 6020 4.79 4.56 4.89 75 MIME_HTML_MOSTLY 5826 3.19 4.41 2.63 76 TM2_M_VERY_LONG_WORD 5812 2.40 4.40 1.49 77 XM_UB50 5810 1.99 4.40 0.89 78 TR_XM_SpammyWords5 5785 2.31 4.38 1.36 79 RCVD_IN_VALIDITY_RPBL 5318 1.32 4.03 0.08 80 XMNumbers 5274 3.66 3.99 3.51 81 XM_B_SpammyTLD 5069 3.35 3.84 3.12 82 XM_CamelCaseFrm001 5045 2.74 3.82 2.24 83 TR_XM_SPAMCOP 4917 1.30 3.72 0.20 84 XM_SPF_SoftFail 4910 2.12 3.72 1.40 85 TR_XM_NoHeaderRelay 4847 1.37 3.67 0.32 86 TR_XM_SpammyWords3 4783 1.34 3.62 0.30 87 MIME_QP_LONG_LINE 4733 4.59 3.58 5.05 88 XM_OfRef6 4552 2.00 3.45 1.35 89 T_FILL_THIS_FORM_SHORT 4547 1.73 3.44 0.94 90 MIME_HTML_ONLY_MULTI 4461 2.79 3.38 2.52 91 HTML_IMAGE_RATIO_06 4163 3.33 3.15 3.41 92 T_XMDrugObfuBody_08 4055 1.99 3.07 1.49 93 XM_URI_RBL 4048 1.23 3.07 0.39 94 T_TooManySym_01 3967 5.34 3.00 6.40 95 SUBJ_ALL_CAPS 3738 1.92 2.83 1.50 96 XM_B_Unsub2 3683 1.85 2.79 1.42 97 RCVD_IN_VALIDITY_SAFE 3681 3.84 2.79 4.33 98 XMDiploma_00 3605 2.10 2.73 1.82 99 KHOP_HELO_FCRDNS 3533 1.73 2.68 1.30 100 RCVD_IN_MSPIKE_L3 3532 1.21 2.67 0.54 101 ALL_TRUSTED 3342 10.72 2.53 14.46 102 RELAYCOUNTRY_AU 3332 1.38 2.52 0.86 103 RCVD_IN_MSPIKE_H5 3320 5.56 2.51 6.95 104 XM_B_URI_Unicode 3207 2.16 2.43 2.04 105 USER_IN_DEF_DKIM_WL 3190 10.19 2.42 13.74 106 SCC_BODY_URI_ONLY 3122 2.24 2.36 2.18 107 RCVD_IN_MSPIKE_L5 3098 0.84 2.35 0.15 108 TM2_M_URI_OPT_OUT 3089 2.01 2.34 1.86 109 TR_XM_INV_DKIM 3057 0.85 2.31 0.18 110 XMBody_17 3051 1.02 2.31 0.43 111 MAILING_LIST_MULTI 3022 2.84 2.29 3.10 112 SpammyFromTLD_02 3007 1.22 2.28 0.74 113 TR_XM_RelayPhish 2926 0.76 2.22 0.10 114 DKIM_ADSP_NXDOMAIN 2907 0.90 2.20 0.30 115 RCVD_IN_VALIDITY_CERTIFIED 2806 3.12 2.12 3.57 116 ANY_BOUNCE_MESSAGE 2778 2.89 2.10 3.25 117 BOUNCE_MESSAGE 2776 2.89 2.10 3.25 118 FROM_EXCESS_BASE64 2753 1.84 2.08 1.73 119 HTML_IMAGE_RATIO_08 2735 2.08 2.07 2.09 120 XM_B_SpammyWords4 2713 1.05 2.05 0.59 121 XMStockSpam_06 2649 1.70 2.01 1.56 122 BAYES_40 2644 4.16 2.00 5.15 123 TR_LOTS_OF_MONEY3 2614 0.85 1.98 0.34 124 XM_ProductURIs 2612 1.13 1.98 0.75 125 T_XMHurry_00 2528 1.01 1.91 0.59 126 T_REMOTE_IMAGE 2512 3.04 1.90 3.57 127 SpammyFromTLD_01 2392 1.12 1.81 0.81 128 XM_B_DNDMA 2389 1.00 1.81 0.63 129 HTML_MIME_NO_HTML_TAG 2272 2.39 1.72 2.69 130 RCVD_IN_PSBL 2262 0.76 1.71 0.32 131 XMBrknScrpt_02 2215 1.15 1.68 0.91 132 RELAYCOUNTRY_FR 2189 0.70 1.66 0.26 133 XMBounce_01 2175 0.53 1.65 0.01 134 HTTPS_HTTP_MISMATCH 2161 0.95 1.64 0.64 135 URI_TRY_3LD 2135 0.91 1.62 0.58 136 URI_NOVOWEL 2124 1.59 1.61 1.58 137 XMPhish30 2092 0.80 1.58 0.44 138 BAYES_20 2062 2.96 1.56 3.60 139 XM_DK_Undo_01 1949 1.68 1.48 1.77 140 T_HTML_ATTACH 1942 0.49 1.47 0.04 141 XM_B_COPY_HTML 1902 1.10 1.44 0.95 142 RDNS_DYNAMIC 1901 0.60 1.44 0.22 143 TR_MetaPhish_Combo_01 1893 1.57 1.43 1.63 144 T_XMDrugObfuBody_00 1893 1.13 1.43 0.99 145 XM_SendGrid 1887 1.48 1.43 1.51 146 RELAYCOUNTRY_TH 1860 0.44 1.41 0.00 147 BOTNET_NORDNS 1845 0.45 1.40 0.01 148 URI_HEX 1845 1.31 1.40 1.28 149 PDS_RDNS_DYNAMIC_FP 1842 0.49 1.39 0.08 150 XMSubMetaSxObfu_03 1840 1.05 1.39 0.90 151 T_FILL_THIS_FORM_FRAUD_PHISH 1836 0.48 1.39 0.07 152 XM_HighProb1 1834 0.44 1.39 0.01 153 XMGenDplmaNmb 1775 1.03 1.34 0.88 154 DIET_1 1733 0.67 1.31 0.38 155 SHOPIFY_IMG_NOT_RCVD_SFY 1680 0.63 1.27 0.34 156 XM_H_Long_From02 1655 0.99 1.25 0.87 157 TVD_RCVD_IP 1639 0.96 1.24 0.84 158 RCVD_IN_ZEN_LASTEXTERNAL 1605 0.38 1.22 0.00 159 SHORTCIRCUIT 1605 0.38 1.22 0.00 160 TR_XM_InvalidRelay 1604 0.39 1.21 0.01 161 TR_XM_MSPIKECOMBO2 1604 0.40 1.21 0.03 162 XMBdyGiftCard01 1597 0.81 1.21 0.62 163 XMSubMetaI_00 1579 0.73 1.20 0.52 164 TR_XM_PHPForged 1544 0.62 1.17 0.37 165 TR_XM_FormFill2 1539 0.62 1.17 0.38 166 MPART_ALT_DIFF_COUNT 1539 0.80 1.17 0.63 167 TR_XM_PHPDW 1534 0.62 1.16 0.38 168 XM_H_PHPOS 1501 0.60 1.14 0.36 169 RCVD_IN_XBL 1487 0.36 1.13 0.01 170 XMSexyCombo_01 1462 0.83 1.11 0.70 171 RCVD_IN_IADB_LISTED 1455 3.01 1.10 3.88 172 XM_B_Phish66 1454 0.63 1.10 0.42 173 T_TooManySym_02 1420 2.35 1.08 2.94 174 XM_B_SEO 1415 0.57 1.07 0.34 175 TR_Mismatch_TLD_02 1408 0.40 1.07 0.09 176 RCVD_IN_MSPIKE_H4 1402 1.58 1.06 1.81 177 XMHTML_After_End 1396 0.62 1.06 0.41 178 RCVD_IN_SBL_CSS 1392 0.35 1.05 0.03 179 XMPhish14 1375 0.62 1.04 0.43 180 T_MONEY_PERCENT 1357 0.42 1.03 0.15 181 TR_LOTS_OF_MONEY2 1357 0.42 1.03 0.15 182 TR_Symld_Words 1303 1.44 0.99 1.65 183 DKIM_ADSP_CUSTOM_MED 1290 0.91 0.98 0.88 184 XMReplyNow 1281 0.47 0.97 0.24 185 TR_XM_FormFill 1278 0.31 0.97 0.01 186 HTML_FONT_TINY_NORDNS 1275 0.41 0.97 0.16 187 XM_DIRTYINTL 1255 0.35 0.95 0.08 188 FILL_THIS_FORM 1236 0.60 0.94 0.44 189 HTML_TAG_BALANCE_BODY 1217 0.68 0.92 0.58 190 XMSolicitRefs_0 1213 0.51 0.92 0.33 191 RCVD_IN_IADB_SPF 1212 2.60 0.92 3.37 192 TR_XM_SEO4 1183 0.37 0.90 0.12 193 XMBody_78 1167 0.51 0.88 0.34 194 THIS_AD 1164 0.48 0.88 0.29 195 TR_XM_MaxSPIKE 1150 0.28 0.87 0.02 196 RCVD_IN_IADB_DK 1149 2.25 0.87 2.87 197 RCVD_IN_IADB_SENDERID 1144 2.31 0.87 2.97 198 RELAYCOUNTRY_GB 1144 0.64 0.87 0.53 199 TM2_M_OBFU_COMMENT 1141 0.74 0.86 0.69 200 TR_XM_DK_SendGrid 1132 0.97 0.86 1.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 287995 99.22 98.53 99.54 2 HTML_MESSAGE 251578 89.47 94.97 86.95 3 RELAYCOUNTRY_US 239248 82.00 80.47 82.69 4 DKIM_SIGNED 224627 80.54 86.89 77.64 5 XM_DK_Pass 221153 78.16 81.95 76.44 6 DKIM_VALID 218169 77.27 81.36 75.41 7 XM_B_Unicode 205954 75.54 85.10 71.18 8 BAYES_50 176929 54.52 39.98 61.15 9 DKIM_VALID_AU 175548 61.94 64.72 60.67 10 DCC_CHECK_NEGATIVE 169115 47.26 22.74 58.45 11 XMListUnsubscribeExists 145769 55.35 66.24 50.38 12 XM_B_SpammyWords 134010 53.95 70.67 46.32 13 DCC_CHECK 120082 52.32 76.02 41.50 14 XM_B_Unicode3 119993 43.84 49.02 41.47 15 DKIM_VALID_EF 87630 30.08 29.63 30.29 16 LOC_TINY_FONT_1 85447 34.71 46.04 29.53 17 T_TM2_M_HEADER_IN_MSG 85082 27.39 22.96 29.41 18 HTML_FONT_LOW_CONTRAST 83896 31.47 36.90 29.00 19 FVGT_m_MULTI_ODD 77776 28.66 32.56 26.88 20 XMSubLong 69678 24.53 25.51 24.08 21 T_KAM_HTML_FONT_INVALID 65066 25.16 31.03 22.49 22 MIME_HTML_ONLY 60693 24.15 31.09 20.98 23 XM_B_SpammyWords2 56968 25.78 39.11 19.69 24 XM_Multi_Part_URI 44250 17.40 22.02 15.29 25 RCVD_IN_MSPIKE_WL 43949 13.09 8.50 15.19 26 RCVD_IN_MSPIKE_H2 43471 14.66 13.87 15.02 27 ALL_TRUSTED 41850 10.72 2.53 14.46 28 TR_XM_DK_Unsub 40204 16.11 20.98 13.90 29 USER_IN_DEF_DKIM_WL 39760 10.19 2.42 13.74 30 UNPARSEABLE_RELAY 37862 14.45 17.45 13.09 31 XM_B_Unsub 31637 13.65 19.61 10.93 32 BAYES_00 30773 7.55 0.78 10.64 33 XM_B_PhoneNumber 27645 8.32 5.63 9.55 34 FSL_BULK_SIG 25488 10.13 13.01 8.81 35 XM_Evil_Numbers_Gen 25214 8.62 8.42 8.71 36 TooManyTo_001 24495 7.31 4.78 8.47 37 TR_XM_BayesUnsub 23797 11.53 18.78 8.22 38 IN_ZIMBRA_NJ_WHITELIST 23299 5.56 0.09 8.05 39 LotsOfNums_01 23130 7.75 7.21 7.99 40 XM_DKIMWhitelistDomains 21895 5.20 0.02 7.57 41 TR_XM_DK_Bayes 21230 5.25 0.67 7.34 42 TR_XM_DK_Bayes1 20875 5.16 0.66 7.22 43 RCVD_IN_MSPIKE_H5 20097 5.56 2.51 6.95 44 RCVD_IN_MSPIKE_H3 18601 5.96 4.92 6.43 45 T_TooManySym_01 18518 5.34 3.00 6.40 46 TR_MAX_INTL_RELAY 18492 8.87 14.32 6.39 47 BAYES_60 18458 6.87 7.96 6.38 48 XM_DK_Undo_02 18262 16.83 39.88 6.31 49 TR_XM_DK_Bayes2 17877 4.42 0.57 6.18 50 LOTS_OF_MONEY 17855 8.11 12.35 6.17 51 XM_H_GMP 17241 5.56 4.68 5.96 52 XM_H_Long_From01 16886 5.72 5.48 5.84 53 XM_B_Phish_Phrases 16142 7.14 10.57 5.58 54 BAYES_40 14895 4.16 2.00 5.15 55 MIME_QP_LONG_LINE 14624 4.59 3.58 5.05 56 XMStrtUSub 14154 4.79 4.56 4.89 57 XM_B_SpammyWords3 13921 8.24 15.77 4.81 58 BAYES_99 13123 13.07 31.77 4.54 59 MPART_ALT_DIFF 13046 4.89 5.74 4.51 60 HTML_IMAGE_RATIO_02 12900 5.11 6.53 4.46 61 XM_PDF 12841 3.23 0.59 4.44 62 XM_UncommonTLD01 12630 4.70 5.43 4.37 63 HTML_IMAGE_RATIO_04 12628 4.56 4.97 4.36 64 XMSubMetaSx_00 12582 5.36 7.57 4.35 65 RCVD_IN_VALIDITY_SAFE 12518 3.84 2.79 4.33 66 TR_XM_SpammyWords4 12376 6.41 11.08 4.28 67 RCVD_IN_IADB_LISTED 11217 3.01 1.10 3.88 68 BAYES_80 11115 5.40 8.83 3.84 69 RELAYCOUNTRY_META 11012 8.36 18.33 3.81 70 BAYES_20 10411 2.96 1.56 3.60 71 RCVD_IN_VALIDITY_CERTIFIED 10340 3.12 2.12 3.57 72 T_REMOTE_IMAGE 10315 3.04 1.90 3.57 73 BAYES_999 10297 10.21 24.78 3.56 74 XMNumbers 10167 3.66 3.99 3.51 75 BOTNET_IPINHOSTNAME 10062 6.76 13.94 3.48 76 HTML_IMAGE_RATIO_06 9877 3.33 3.15 3.41 77 RCVD_IN_IADB_SPF 9751 2.60 0.92 3.37 78 ANY_BOUNCE_MESSAGE 9417 2.89 2.10 3.25 79 BOUNCE_MESSAGE 9414 2.89 2.10 3.25 80 XM_Body_Dirty_Words 9376 4.82 8.27 3.24 81 TooManyTo_002 9161 2.35 0.56 3.17 82 TR_XM_DKIM_Undo 9133 11.44 29.59 3.16 83 XM_B_SpammyTLD 9027 3.35 3.84 3.12 84 MAILING_LIST_MULTI 8961 2.84 2.29 3.10 85 RCVD_IN_IADB_SENDERID 8596 2.31 0.87 2.97 86 T_TooManySym_02 8497 2.35 1.08 2.94 87 RCVD_IN_IADB_DK 8318 2.25 0.87 2.87 88 HTML_MIME_NO_HTML_TAG 7793 2.39 1.72 2.69 89 RCVD_IN_IADB_VOUCHED 7646 2.00 0.58 2.64 90 MIME_HTML_MOSTLY 7621 3.19 4.41 2.63 91 BAYES_95 7367 3.34 5.08 2.55 92 INVALID_MSGID 7360 1.83 0.27 2.54 93 MIME_HTML_ONLY_MULTI 7278 2.79 3.38 2.52 94 T_XMDrugObfuBody_14 6597 3.13 5.00 2.28 95 XM_CamelCaseFrm001 6491 2.74 3.82 2.24 96 DKIM_INVALID 6458 3.26 5.53 2.23 97 SCC_BODY_URI_ONLY 6296 2.24 2.36 2.18 98 TO_MALFORMED 6262 1.49 0.03 2.16 99 BAYES_05 6244 1.74 0.83 2.16 100 HTML_IMAGE_RATIO_08 6049 2.08 2.07 2.09 101 XM_B_URI_Unicode 5891 2.16 2.43 2.04 102 XMSexyCombo_05 5801 2.90 4.86 2.00 103 TR_XM_SpammyRelay 5793 5.40 12.84 2.00 104 TR_XM_UnparsRelay 5434 4.15 9.11 1.88 105 TR_DCC_Bayes_99 5433 8.33 22.47 1.88 106 RCVD_IN_IADB_OPTIN 5396 1.38 0.31 1.87 107 TM2_M_URI_OPT_OUT 5373 2.01 2.34 1.86 108 XM_B_Investor 5261 2.77 4.85 1.82 109 XMDiploma_00 5253 2.10 2.73 1.82 110 RCVD_IN_MSPIKE_H4 5251 1.58 1.06 1.81 111 XMGappySubj_01 5169 1.28 0.18 1.79 112 XM_DK_Undo_01 5118 1.68 1.48 1.77 113 FROM_EXCESS_BASE64 5017 1.84 2.08 1.73 114 TooManyTo_003 4988 1.33 0.48 1.72 115 TR_Symld_Words 4766 1.44 0.99 1.65 116 TR_XM_PhishingBody 4730 2.68 4.98 1.63 117 TR_MetaPhish_Combo_01 4709 1.57 1.43 1.63 118 URI_NOVOWEL 4557 1.59 1.61 1.58 119 BOTNET 4535 4.52 10.99 1.57 120 XMStockSpam_06 4509 1.70 2.01 1.56 121 XM_SendGrid 4361 1.48 1.43 1.51 122 SUBJ_ALL_CAPS 4342 1.92 2.83 1.50 123 T_XMDrugObfuBody_08 4322 1.99 3.07 1.49 124 TM2_M_VERY_LONG_WORD 4310 2.40 4.40 1.49 125 XM_B_Unsub2 4117 1.85 2.79 1.42 126 IN_HORDE_ADDRESS_BOOK 4110 1.01 0.12 1.42 127 XM_SPF_SoftFail 4040 2.12 3.72 1.40 128 TR_XM_SpammyWords5 3942 2.31 4.38 1.36 129 UNTRUSTED_Relay 3906 3.35 7.74 1.35 130 XM_GoogleGroups 3900 1.16 0.76 1.35 131 XM_OfRef6 3896 2.00 3.45 1.35 132 KHOP_HELO_FCRDNS 3771 1.73 2.68 1.30 133 TooManyTo_004 3705 1.01 0.42 1.28 134 URI_HEX 3690 1.31 1.40 1.28 135 HELO_NODOT 3381 0.88 0.25 1.17 136 HELO_NO_DOMAIN 3375 0.87 0.23 1.17 137 FROM_GOV_DKIM_AU 3332 0.84 0.14 1.15 138 T_TooManySym_03 3258 0.96 0.61 1.13 139 TooManyTo_005 3061 0.85 0.40 1.06 140 XMCapTrack 3037 0.82 0.32 1.05 141 TVD_SPACE_RATIO 2969 0.77 0.20 1.03 142 TR_XM_DK_SendGrid 2951 0.97 0.86 1.02 143 T_XMDrugObfuBody_00 2858 1.13 1.43 0.99 144 XM_ShortIntro_01 2750 0.85 0.63 0.95 145 XM_B_COPY_HTML 2743 1.10 1.44 0.95 146 T_FILL_THIS_FORM_SHORT 2727 1.73 3.44 0.94 147 XMGappySubj_02 2715 0.66 0.06 0.94 148 XMBrknScrpt_02 2637 1.15 1.68 0.91 149 XMSubMetaSxObfu_03 2603 1.05 1.39 0.90 150 URI_OPTOUT_3LD 2599 0.77 0.50 0.90 151 XM_UB50 2572 1.99 4.40 0.89 152 XMGenDplmaNmb 2556 1.03 1.34 0.88 153 DKIM_ADSP_CUSTOM_MED 2547 0.91 0.98 0.88 154 XM_H_Long_From02 2509 0.99 1.25 0.87 155 RELAYCOUNTRY_AU 2477 1.38 2.52 0.86 156 XM_H_PHPMailer 2461 0.83 0.77 0.85 157 RCVD_IN_BL_SPAMCOP_NET 2425 3.61 9.68 0.84 158 TVD_RCVD_IP 2422 0.96 1.24 0.84 159 RELAYCOUNTRY_CA 2394 2.62 6.56 0.83 160 SpammyFromTLD_01 2330 1.12 1.81 0.81 161 XM_B_FormFill 2240 0.55 0.05 0.77 162 XM_ProductURIs 2156 1.13 1.98 0.75 163 SpammyFromTLD_02 2141 1.22 2.28 0.74 164 RCVD_IN_PBL 2128 0.77 0.86 0.74 165 XMSexyCombo_01 2023 0.83 1.11 0.70 166 RCVD_IN_MSPIKE_BL 2015 2.16 5.35 0.70 167 TR_XM_MSPIKECOMBO 2015 2.16 5.35 0.70 168 TM2_M_OBFU_COMMENT 1995 0.74 0.86 0.69 169 TR_XM_SpammyWords2 1975 3.85 10.79 0.68 170 XMNoVowels 1953 0.65 0.59 0.68 171 T_TVD_MIME_NO_HEADERS 1925 0.46 0.02 0.67 172 T_OBFU_PDF_ATTACH 1873 0.47 0.09 0.65 173 HTTPS_HTTP_MISMATCH 1847 0.95 1.64 0.64 174 XM_B_DNDMA 1834 1.00 1.81 0.63 175 MPART_ALT_DIFF_COUNT 1828 0.80 1.17 0.63 176 XMBdyGiftCard01 1806 0.81 1.21 0.62 177 XMBSHREFv2 1786 0.62 0.61 0.62 178 T_XMHurry_00 1707 1.01 1.91 0.59 179 XM_B_SpammyWords4 1699 1.05 2.05 0.59 180 URI_TRY_3LD 1683 0.91 1.62 0.58 181 FORGED_GMAIL_RCVD 1670 0.61 0.67 0.58 182 HTML_TAG_BALANCE_BODY 1669 0.68 0.92 0.58 183 TR_XM_Base64_M1 1649 0.64 0.78 0.57 184 LOW_PRICE 1625 0.62 0.76 0.56 185 NML_ADSP_CUSTOM_MED 1617 0.63 0.78 0.56 186 LongTLD 1591 0.62 0.78 0.55 187 XMSubMetaSx_01 1585 0.45 0.23 0.55 188 XMBody_95 1572 0.41 0.13 0.54 189 RCVD_IN_MSPIKE_L3 1563 1.21 2.67 0.54 190 XMSexyCombo_04 1560 0.50 0.43 0.54 191 RELAYCOUNTRY_GB 1539 0.64 0.87 0.53 192 XMSubMetaI_00 1513 0.73 1.20 0.52 193 XMSexyCombo_02 1489 0.40 0.14 0.51 194 HTML_FONT_FACE_BAD 1486 0.56 0.67 0.51 195 XMLngstWrd_00 1456 0.48 0.44 0.50 196 XMSlimDrugH 1428 0.51 0.55 0.49 197 T_Symld_Words_02 1365 0.53 0.67 0.47 198 MSGID_FROM_MTA_HEADER 1364 0.37 0.16 0.47 199 HTML_IMAGE_ONLY_32 1363 0.39 0.22 0.47 200 XMDateMe_00 1285 0.43 0.41 0.44 ----------------------------------------------------------------------