Email: 302160 Autolearn: 0 AvgScore: 4.56 AvgScanTime: 1.36 sec Spam: 110301 Autolearn: 0 AvgScore: 14.38 AvgScanTime: 1.45 sec Ham: 191859 Autolearn: 0 AvgScore: -1.08 AvgScanTime: 1.30 sec Time Spent Running SA: 113.96 hours Time Spent Processing Spam: 44.52 hours Time Spent Processing Ham: 69.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103893 85.53 94.19 80.55 2 DKIM_SIGNED 98999 80.25 89.75 74.79 3 XM_B_Unicode 97306 76.24 88.22 69.36 4 XM_DK_Pass 96760 78.88 87.72 73.79 5 DKIM_VALID 95772 78.26 86.83 73.33 6 T_SCC_BODY_TEXT_LINE 89673 82.71 81.30 83.52 7 XMListUnsubscribeExists 83246 61.22 75.47 53.02 8 XM_B_SpammyWords 82645 54.36 74.93 42.54 9 RELAYCOUNTRY_US 82554 77.46 74.84 78.96 10 DCC_CHECK 82247 50.94 74.57 37.35 11 DKIM_VALID_AU 67521 62.22 61.22 62.79 12 XM_DK_Undo_02 58389 24.95 52.94 8.86 13 XM_B_Unicode3 51675 45.15 46.85 44.17 14 XM_B_SpammyWords2 51065 28.92 46.30 18.93 15 TR_XM_DKIM_Undo 48408 18.20 43.89 3.43 16 BAYES_99 44545 19.43 40.38 7.38 17 LOC_TINY_FONT_1 42811 32.28 38.81 28.52 18 HTML_FONT_LOW_CONTRAST 39199 32.73 35.54 31.11 19 MIME_HTML_ONLY 38519 25.68 34.92 20.37 20 DKIM_VALID_EF 37591 31.07 34.08 29.34 21 BAYES_50 37559 48.55 34.05 56.89 22 BAYES_999 35997 15.64 32.64 5.87 23 FVGT_m_MULTI_ODD 35584 29.29 32.26 27.58 24 TR_DCC_Bayes_99 32191 12.90 29.18 3.54 25 T_KAM_HTML_FONT_INVALID 30281 22.19 27.45 19.17 26 TR_XM_DK_Unsub 29461 19.13 26.71 14.78 27 DCC_CHECK_NEGATIVE 28046 49.04 25.43 62.62 28 RELAYCOUNTRY_META 27832 11.63 25.23 3.80 29 RCVD_IN_MSPIKE_H2 25792 22.54 23.38 22.06 30 TR_XM_SpammyRelay 24014 9.37 21.77 2.24 31 T_TM2_M_HEADER_IN_MSG 23177 21.95 21.01 22.48 32 RCVD_IN_BL_SPAMCOP_NET 23114 8.28 20.96 1.00 33 XMSubLong 21585 21.37 19.57 22.40 34 RELAYCOUNTRY_CA 19862 7.52 18.01 1.50 35 TR_XM_SPAMCOP 19591 6.68 17.76 0.32 36 TR_XM_SpammyWords2 19582 7.16 17.75 1.07 37 XM_Multi_Part_URI 18246 16.30 16.54 16.16 38 BOTNET_IPINHOSTNAME 16380 9.18 14.85 5.92 39 RCVD_IN_MSPIKE_H3 15841 9.30 14.36 6.39 40 RCVD_IN_MSPIKE_WL 15841 9.30 14.36 6.39 41 XM_B_Unsub 15812 10.65 14.34 8.52 42 XM_B_SpammyWords3 15567 8.09 14.11 4.63 43 TR_XM_BayesUnsub 15331 9.53 13.90 7.01 44 UNPARSEABLE_RELAY 15205 11.35 13.79 9.96 45 XM_Body_Dirty_Words 14954 8.88 13.56 6.20 46 LOTS_OF_MONEY 14654 8.44 13.29 5.65 47 TR_XM_SpammyWords4 12244 6.56 11.10 3.95 48 BOTNET 11113 4.56 10.08 1.39 49 BAYES_80 9972 6.14 9.04 4.48 50 XMBody_17 9792 3.64 8.88 0.63 51 FSL_BULK_SIG 8807 4.97 7.98 3.24 52 HTML_IMAGE_RATIO_02 8757 6.78 7.94 6.11 53 TR_XM_UnparsRelay 8425 4.00 7.64 1.91 54 XM_Evil_Numbers_Gen 8409 8.43 7.62 8.90 55 BAYES_60 8188 9.33 7.42 10.43 56 TR_XM_BayesRelay 7600 2.52 6.89 0.00 57 HK_RANDOM_REPLYTO 7567 2.57 6.86 0.10 58 XM_UncommonTLD01 7273 5.28 6.59 4.52 59 XMSexyCombo_05 7179 4.33 6.51 3.07 60 T_FILL_THIS_FORM_SHORT 6723 2.56 6.10 0.52 61 BAYES_95 6192 3.99 5.61 3.06 62 HTML_IMAGE_RATIO_04 6123 5.06 5.55 4.79 63 MPART_ALT_DIFF 5794 4.64 5.25 4.28 64 LotsOfNums_01 5684 6.92 5.15 7.93 65 XM_OfRef6 5578 2.56 5.06 1.12 66 XM_H_GMP 5259 6.45 4.77 7.42 67 XM_H_Long_From01 5207 4.80 4.72 4.85 68 XMSubMetaSx_00 5100 5.18 4.62 5.49 69 FONT_INVIS_LONG_LINE 5045 1.71 4.57 0.06 70 UNTRUSTED_Relay 5017 2.67 4.55 1.59 71 TR_XM_SpammyWords5 4983 2.43 4.52 1.22 72 TooManyTo_001 4761 5.86 4.32 6.75 73 HTML_IMAGE_RATIO_06 4714 2.95 4.27 2.19 74 MIME_HTML_MOSTLY 4576 3.42 4.15 3.00 75 TR_XM_FormFill 4573 1.52 4.15 0.01 76 T_XMDrugObfuBody_14 4493 3.05 4.07 2.46 77 SpammyFromTLD_01 4275 1.74 3.88 0.51 78 XMNumbers 4124 3.31 3.74 3.06 79 XM_B_Phish_Phrases 3779 3.04 3.43 2.81 80 TR_LOTS_OF_MONEY3 3740 1.44 3.39 0.31 81 XM_SPF_SoftFail 3735 2.76 3.39 2.40 82 XM_B_Investor 3711 2.02 3.36 1.25 83 RCVD_IN_VALIDITY_SAFE 3649 5.52 3.31 6.79 84 XM_B_SpammyTLD 3647 2.95 3.31 2.75 85 TR_Mismatch_TLD_02 3523 1.26 3.19 0.15 86 MIME_HTML_ONLY_MULTI 3500 2.73 3.17 2.47 87 TR_XM_PhishingBody 3486 2.25 3.16 1.72 88 HTML_IMAGE_RATIO_08 3485 2.76 3.16 2.52 89 T_XMDrugObfuBody_08 3407 2.02 3.09 1.41 90 TM2_M_URI_OPT_OUT 3364 2.48 3.05 2.16 91 XMStrtUSub 3244 4.20 2.94 4.92 92 DKIM_INVALID 3227 1.99 2.93 1.46 93 TM2_M_VERY_LONG_WORD 3196 1.78 2.90 1.13 94 XM_URI_RBL 3195 1.19 2.90 0.21 95 RCVD_IN_VALIDITY_CERTIFIED 3020 4.68 2.74 5.79 96 XM_DIRTYINTL 2998 1.18 2.72 0.30 97 DIET_1 2896 1.20 2.63 0.38 98 T_XMHurry_00 2856 1.30 2.59 0.57 99 SUBJ_ALL_CAPS 2770 1.45 2.51 0.84 100 USER_IN_DEF_DKIM_WL 2750 11.73 2.49 17.05 101 XM_UB50 2598 1.39 2.36 0.84 102 XM_B_SpammyWords4 2536 1.57 2.30 1.15 103 T_TooManySym_01 2432 4.97 2.20 6.57 104 AC_BR_BONANZA 2422 0.92 2.20 0.19 105 FROM_EXCESS_BASE64 2402 2.61 2.18 2.87 106 XM_CamelCaseFrm001 2358 2.47 2.14 2.66 107 HTML_MIME_NO_HTML_TAG 2282 1.49 2.07 1.16 108 XM_HighProb1 2278 0.76 2.07 0.01 109 RELAYCOUNTRY_AU 2278 1.07 2.07 0.50 110 TR_XM_NoHeaderRelay 2274 0.80 2.06 0.08 111 XMDiploma_00 2255 1.46 2.04 1.12 112 TR_XM_PHPDW 2228 0.98 2.02 0.38 113 TR_XM_PHPForged 2221 0.97 2.01 0.37 114 HTML_TAG_BALANCE_BODY 2218 1.05 2.01 0.50 115 XM_B_Unsub2 2157 1.57 1.96 1.34 116 TR_XM_FormFill2 2141 0.94 1.94 0.37 117 XM_H_Long_From02 2122 1.42 1.92 1.14 118 XM_H_PHPOS 2118 0.92 1.92 0.34 119 T_REMOTE_IMAGE 2055 2.81 1.86 3.35 120 TR_Mismatch_TLD_01 1863 0.76 1.69 0.23 121 BAYES_40 1736 3.18 1.57 4.11 122 URI_HEX 1713 1.16 1.55 0.94 123 TR_Caps_n_Bayes_99 1685 0.57 1.53 0.01 124 BOTNET_NORDNS 1681 0.56 1.52 0.01 125 T_XMDrugObfuBody_00 1660 1.04 1.50 0.77 126 XMStockSpam_06 1622 1.55 1.47 1.60 127 XM_ProductURIs 1620 1.53 1.47 1.56 128 XMReplyNow 1615 0.66 1.46 0.20 129 XMSubMetaI_00 1587 1.09 1.44 0.90 130 XM_H_Undi_Recip 1553 0.63 1.41 0.19 131 SpammyFromTLD_02 1533 0.66 1.39 0.25 132 MIME_QP_LONG_LINE 1527 2.89 1.38 3.75 133 T_XMDrugObfuBody_10 1527 0.53 1.38 0.03 134 XMBdyGiftCard01 1511 1.17 1.37 1.05 135 TR_XM_InvalidRelay 1461 0.49 1.32 0.01 136 MAILING_LIST_MULTI 1432 1.96 1.30 2.34 137 RCVD_IN_VALIDITY_RPBL 1415 0.51 1.28 0.06 138 ALL_TRUSTED 1414 11.59 1.28 17.52 139 XMMoneyMeta_00 1404 0.65 1.27 0.30 140 URI_TRY_3LD 1370 0.93 1.24 0.76 141 XM_H_PHPMailer 1366 0.97 1.24 0.81 142 HTTPS_HTTP_MISMATCH 1349 0.83 1.22 0.61 143 XMPhish30 1317 0.96 1.19 0.82 144 XMSexyCombo_01 1297 0.75 1.18 0.51 145 DKIM_ADSP_CUSTOM_MED 1266 0.92 1.15 0.80 146 XM_Combo_Sbj 1250 0.56 1.13 0.23 147 XM_SendGrid 1219 1.13 1.11 1.14 148 NML_ADSP_CUSTOM_MED 1211 0.72 1.10 0.51 149 ANY_BOUNCE_MESSAGE 1201 3.91 1.09 5.53 150 BOUNCE_MESSAGE 1201 3.91 1.09 5.53 151 XM_DK_Undo_01 1189 1.48 1.08 1.71 152 MPART_ALT_DIFF_COUNT 1188 0.86 1.08 0.73 153 TR_XM_Undi_Recip5 1159 0.39 1.05 0.00 154 BAYES_20 1150 2.14 1.04 2.77 155 PDS_OTHER_BAD_TLD 1149 0.48 1.04 0.15 156 KHOP_HELO_FCRDNS 1142 0.88 1.04 0.78 157 RCVD_IN_PSBL 1135 0.68 1.03 0.48 158 RDNS_DYNAMIC 1127 0.64 1.02 0.42 159 FORGED_GMAIL_RCVD 1104 0.68 1.00 0.49 160 XMBrknScrpt_02 1099 0.65 1.00 0.45 161 XMSlimDrugH 1097 0.54 0.99 0.28 162 TR_XM_INV_DKIM 1077 0.39 0.98 0.06 163 XMBody_29 1051 0.38 0.95 0.05 164 XM_OfRef7 1045 0.52 0.95 0.28 165 UNDISC_MONEY 1035 0.35 0.94 0.01 166 TR_XM_Undi_Recip11 1034 0.37 0.94 0.04 167 XMBody_78 1032 0.52 0.94 0.28 168 TVD_RCVD_IP 1025 2.06 0.93 2.72 169 SUBJ_DOLLARS 1025 0.70 0.93 0.57 170 TM2_M_A_HREF_HREF 1022 0.42 0.93 0.13 171 XMGenDplmaNmb 1015 0.68 0.92 0.54 172 URI_NOVOWEL 1011 1.01 0.92 1.06 173 FILL_THIS_FORM 996 0.67 0.90 0.54 174 TR_XM_Undi_RecipCombo2 986 0.33 0.89 0.00 175 GOOG_STO_IMG_NOHTML 980 0.47 0.89 0.24 176 XMPhish14 962 0.50 0.87 0.28 177 SHOPIFY_IMG_NOT_RCVD_SFY 938 0.56 0.85 0.39 178 FILL_THIS_FORM_LONG 936 0.57 0.85 0.41 179 HELO_DYNAMIC_SPLIT_IP 930 0.32 0.84 0.01 180 PLING_QUERY 909 0.60 0.82 0.46 181 XM_RXBody 904 0.45 0.82 0.23 182 TM2_M_OBFU_COMMENT 899 0.50 0.82 0.31 183 MONEY_FORM 893 0.30 0.81 0.00 184 RCVD_IN_IADB_LISTED 893 2.47 0.81 3.42 185 FORGED_RELAY_MUA_TO_MX 881 0.31 0.80 0.02 186 TR_MetaPhish_Combo_01 876 0.77 0.79 0.75 187 XM_B_COPY_HTML 866 0.79 0.79 0.79 188 XM_H_PHPOS_M 832 0.34 0.75 0.09 189 TR_XM_DK_SendGrid 812 0.75 0.74 0.76 190 HOSTED_IMG_MULTI_PUB_01 802 0.27 0.73 0.01 191 RCVD_IN_IADB_SPF 794 2.22 0.72 3.09 192 HTML_FONT_FACE_BAD 792 0.58 0.72 0.51 193 XM_UB60 791 0.30 0.72 0.06 194 ADMITS_SPAM 788 0.28 0.71 0.03 195 XMNoVowels 781 0.56 0.71 0.48 196 TR_XM_Base64_M1 770 0.73 0.70 0.75 197 XMHTML_After_End 769 0.54 0.70 0.44 198 RCVD_IN_IADB_DK 766 2.02 0.69 2.78 199 RCVD_IN_RP_SAFE 765 1.10 0.69 1.33 200 RCVD_IN_IADB_SENDERID 750 2.06 0.68 2.85 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 160234 82.71 81.30 83.52 2 HTML_MESSAGE 154542 85.53 94.19 80.55 3 RELAYCOUNTRY_US 151501 77.46 74.84 78.96 4 DKIM_SIGNED 143492 80.25 89.75 74.79 5 XM_DK_Pass 141581 78.88 87.72 73.79 6 DKIM_VALID 140699 78.26 86.83 73.33 7 XM_B_Unicode 133073 76.24 88.22 69.36 8 DKIM_VALID_AU 120475 62.22 61.22 62.79 9 DCC_CHECK_NEGATIVE 120139 49.04 25.43 62.62 10 BAYES_50 109141 48.55 34.05 56.89 11 XMListUnsubscribeExists 101731 61.22 75.47 53.02 12 XM_B_Unicode3 84751 45.15 46.85 44.17 13 XM_B_SpammyWords 81609 54.36 74.93 42.54 14 DCC_CHECK 71668 50.94 74.57 37.35 15 HTML_FONT_LOW_CONTRAST 59696 32.73 35.54 31.11 16 DKIM_VALID_EF 56282 31.07 34.08 29.34 17 LOC_TINY_FONT_1 54713 32.28 38.81 28.52 18 FVGT_m_MULTI_ODD 52907 29.29 32.26 27.58 19 T_TM2_M_HEADER_IN_MSG 43135 21.95 21.01 22.48 20 XMSubLong 42978 21.37 19.57 22.40 21 RCVD_IN_MSPIKE_H2 42321 22.54 23.38 22.06 22 MIME_HTML_ONLY 39083 25.68 34.92 20.37 23 T_KAM_HTML_FONT_INVALID 36782 22.19 27.45 19.17 24 XM_B_SpammyWords2 36315 28.92 46.30 18.93 25 ALL_TRUSTED 33611 11.59 1.28 17.52 26 USER_IN_DEF_DKIM_WL 32704 11.73 2.49 17.05 27 XM_Multi_Part_URI 30996 16.30 16.54 16.16 28 TR_XM_DK_Unsub 28351 19.13 26.71 14.78 29 XM_DKIMWhitelistDomains 22725 7.56 0.11 11.84 30 BAYES_60 20008 9.33 7.42 10.43 31 UNPARSEABLE_RELAY 19104 11.35 13.79 9.96 32 XM_Evil_Numbers_Gen 17067 8.43 7.62 8.90 33 XM_DK_Undo_02 17000 24.95 52.94 8.86 34 XM_B_Unsub 16353 10.65 14.34 8.52 35 BAYES_00 15519 5.30 0.45 8.09 36 LotsOfNums_01 15218 6.92 5.15 7.93 37 XM_H_GMP 14232 6.45 4.77 7.42 38 BAYES_99 14168 19.43 40.38 7.38 39 TR_XM_BayesUnsub 13455 9.53 13.90 7.01 40 RCVD_IN_VALIDITY_SAFE 13024 5.52 3.31 6.79 41 TooManyTo_001 12952 5.86 4.32 6.75 42 TR_XM_DK_Bayes 12755 4.35 0.35 6.65 43 T_TooManySym_01 12597 4.97 2.20 6.57 44 TR_XM_DK_Bayes1 12581 4.29 0.34 6.56 45 RCVD_IN_MSPIKE_H3 12262 9.30 14.36 6.39 46 RCVD_IN_MSPIKE_WL 12262 9.30 14.36 6.39 47 XM_Body_Dirty_Words 11889 8.88 13.56 6.20 48 HTML_IMAGE_RATIO_02 11722 6.78 7.94 6.11 49 BOTNET_IPINHOSTNAME 11357 9.18 14.85 5.92 50 BAYES_999 11253 15.64 32.64 5.87 51 TR_XM_DK_Bayes2 11209 3.78 0.20 5.84 52 RCVD_IN_VALIDITY_CERTIFIED 11113 4.68 2.74 5.79 53 LOTS_OF_MONEY 10848 8.44 13.29 5.65 54 ANY_BOUNCE_MESSAGE 10609 3.91 1.09 5.53 55 BOUNCE_MESSAGE 10609 3.91 1.09 5.53 56 XMSubMetaSx_00 10541 5.18 4.62 5.49 57 IN_ZIMBRA_NJ_WHITELIST 10469 3.49 0.06 5.46 58 XMStrtUSub 9441 4.20 2.94 4.92 59 XM_H_Long_From01 9307 4.80 4.72 4.85 60 HTML_IMAGE_RATIO_04 9181 5.06 5.55 4.79 61 XM_B_SpammyWords3 8877 8.09 14.11 4.63 62 XM_UncommonTLD01 8672 5.28 6.59 4.52 63 BAYES_80 8593 6.14 9.04 4.48 64 MPART_ALT_DIFF 8221 4.64 5.25 4.28 65 BAYES_40 7878 3.18 1.57 4.11 66 TR_XM_SpammyWords4 7587 6.56 11.10 3.95 67 RELAYCOUNTRY_META 7295 11.63 25.23 3.80 68 MIME_QP_LONG_LINE 7196 2.89 1.38 3.75 69 INVALID_MSGID 7135 2.41 0.13 3.72 70 T_TooManySym_02 6996 2.52 0.55 3.65 71 TR_DCC_Bayes_99 6784 12.90 29.18 3.54 72 TR_XM_DKIM_Undo 6579 18.20 43.89 3.43 73 RCVD_IN_IADB_LISTED 6556 2.47 0.81 3.42 74 T_REMOTE_IMAGE 6435 2.81 1.86 3.35 75 SCC_BODY_URI_ONLY 6410 2.33 0.58 3.34 76 FSL_BULK_SIG 6219 4.97 7.98 3.24 77 TO_MALFORMED 6118 2.04 0.05 3.19 78 XM_PDF 6003 2.07 0.23 3.13 79 RCVD_IN_IADB_SPF 5923 2.22 0.72 3.09 80 XMSexyCombo_05 5896 4.33 6.51 3.07 81 BAYES_95 5876 3.99 5.61 3.06 82 XMNumbers 5865 3.31 3.74 3.06 83 MIME_HTML_MOSTLY 5762 3.42 4.15 3.00 84 FROM_EXCESS_BASE64 5498 2.61 2.18 2.87 85 RCVD_IN_IADB_SENDERID 5466 2.06 0.68 2.85 86 XM_B_Phish_Phrases 5396 3.04 3.43 2.81 87 BAYES_05 5367 1.93 0.41 2.80 88 RCVD_IN_IADB_DK 5327 2.02 0.69 2.78 89 BAYES_20 5307 2.14 1.04 2.77 90 XM_B_SpammyTLD 5272 2.95 3.31 2.75 91 TVD_RCVD_IP 5212 2.06 0.93 2.72 92 XM_CamelCaseFrm001 5100 2.47 2.14 2.66 93 HTML_IMAGE_RATIO_08 4844 2.76 3.16 2.52 94 XMBody_95 4772 1.61 0.08 2.49 95 MIME_HTML_ONLY_MULTI 4748 2.73 3.17 2.47 96 T_XMDrugObfuBody_14 4727 3.05 4.07 2.46 97 XM_SPF_SoftFail 4607 2.76 3.39 2.40 98 MAILING_LIST_MULTI 4483 1.96 1.30 2.34 99 TR_XM_SpammyRelay 4300 9.37 21.77 2.24 100 HTML_IMAGE_RATIO_06 4208 2.95 4.27 2.19 101 TM2_M_URI_OPT_OUT 4136 2.48 3.05 2.16 102 RCVD_IN_IADB_VOUCHED 4083 1.47 0.33 2.13 103 XMBSHREFv2 3984 1.39 0.20 2.08 104 XMGappySubj_01 3751 1.31 0.18 1.96 105 TR_XM_UnparsRelay 3657 4.00 7.64 1.91 106 IN_HORDE_ADDRESS_BOOK 3602 1.21 0.05 1.88 107 TooManyTo_002 3485 1.30 0.40 1.82 108 TVD_SPACE_RATIO 3417 1.17 0.10 1.78 109 TR_XM_PhishingBody 3301 2.25 3.16 1.72 110 XM_DK_Undo_01 3275 1.48 1.08 1.71 111 XMStockSpam_06 3061 1.55 1.47 1.60 112 UNTRUSTED_Relay 3053 2.67 4.55 1.59 113 XM_ProductURIs 2998 1.53 1.47 1.56 114 RELAYCOUNTRY_CA 2875 7.52 18.01 1.50 115 XMGappySubj_02 2832 0.95 0.03 1.48 116 DKIM_INVALID 2793 1.99 2.93 1.46 117 T_XMDrugObfuBody_08 2704 2.02 3.09 1.41 118 BOTNET 2659 4.56 10.08 1.39 119 XM_GoogleGroups 2648 1.03 0.43 1.38 120 RCVD_IN_IADB_OPTIN 2634 0.95 0.21 1.37 121 XM_B_Unsub2 2580 1.57 1.96 1.34 122 RCVD_IN_RP_SAFE 2553 1.10 0.69 1.33 123 T_OBFU_PDF_ATTACH 2531 0.85 0.03 1.32 124 MSGID_NOFQDN1 2417 0.80 0.01 1.26 125 XM_B_Investor 2407 2.02 3.36 1.25 126 TR_Symld_Words 2361 1.01 0.62 1.23 127 TR_XM_SpammyWords5 2345 2.43 4.52 1.22 128 T_TooManySym_03 2325 0.86 0.24 1.21 129 XMSubMetaSxObfu_03 2269 0.96 0.58 1.18 130 HTML_MIME_NO_HTML_TAG 2224 1.49 2.07 1.16 131 XM_B_SpammyWords4 2209 1.57 2.30 1.15 132 XM_SendGrid 2187 1.13 1.11 1.14 133 RCVD_IN_RP_CERTIFIED 2185 0.93 0.58 1.14 134 XM_H_Long_From02 2178 1.42 1.92 1.14 135 TM2_M_VERY_LONG_WORD 2173 1.78 2.90 1.13 136 XM_OfRef6 2153 2.56 5.06 1.12 137 XMDiploma_00 2144 1.46 2.04 1.12 138 TR_XM_SpammyWords2 2051 7.16 17.75 1.07 139 URI_NOVOWEL 2037 1.01 0.92 1.06 140 XMBdyGiftCard01 2012 1.17 1.37 1.05 141 LOW_PRICE 1991 0.74 0.22 1.04 142 RCVD_IN_BL_SPAMCOP_NET 1916 8.28 20.96 1.00 143 URI_HEX 1797 1.16 1.55 0.94 144 TooManyTo_003 1754 0.68 0.28 0.91 145 USER_IN_WHITELIST 1751 0.58 0.00 0.91 146 USER_IN_WELCOMELIST 1751 0.58 0.00 0.91 147 XMSubMetaI_00 1718 1.09 1.44 0.90 148 SUBJ_ALL_CAPS 1604 1.45 2.51 0.84 149 XM_UB50 1603 1.39 2.36 0.84 150 XMPhish30 1579 0.96 1.19 0.82 151 XM_H_PHPMailer 1560 0.97 1.24 0.81 152 DKIM_ADSP_CUSTOM_MED 1526 0.92 1.15 0.80 153 XM_B_COPY_HTML 1507 0.79 0.79 0.79 154 KHOP_HELO_FCRDNS 1506 0.88 1.04 0.78 155 XM_H_Trusted_IP 1486 0.49 0.00 0.77 156 T_XMDrugObfuBody_00 1477 1.04 1.50 0.77 157 TR_XM_DK_SendGrid 1465 0.75 0.74 0.76 158 URI_TRY_3LD 1451 0.93 1.24 0.76 159 TR_MetaPhish_Combo_01 1447 0.77 0.79 0.75 160 TR_XM_Base64_M1 1441 0.73 0.70 0.75 161 MPART_ALT_DIFF_COUNT 1405 0.86 1.08 0.73 162 TooManyTo_004 1296 0.52 0.26 0.68 163 XMBody_17 1218 3.64 8.88 0.63 164 XM_B_FormFill 1185 0.42 0.07 0.62 165 XMSubMetaSxObfu_02 1183 0.50 0.30 0.62 166 HTTPS_HTTP_MISMATCH 1172 0.83 1.22 0.61 167 TooManyTo_005 1133 0.46 0.23 0.59 168 T_XMHurry_00 1087 1.30 2.59 0.57 169 SUBJ_DOLLARS 1085 0.70 0.93 0.57 170 FILL_THIS_FORM 1039 0.67 0.90 0.54 171 XMGenDplmaNmb 1039 0.68 0.92 0.54 172 XMSubNoVowel 1015 0.50 0.45 0.53 173 T_FILL_THIS_FORM_SHORT 1007 2.56 6.10 0.52 174 SpammyFromTLD_01 988 1.74 3.88 0.51 175 XMSexyCombo_01 979 0.75 1.18 0.51 176 NML_ADSP_CUSTOM_MED 978 0.72 1.10 0.51 177 HTML_FONT_FACE_BAD 971 0.58 0.72 0.51 178 RELAYCOUNTRY_AU 965 1.07 2.07 0.50 179 HTML_TAG_BALANCE_BODY 962 1.05 2.01 0.50 180 FORGED_GMAIL_RCVD 948 0.68 1.00 0.49 181 XM_B_REG_HTML 937 0.55 0.67 0.49 182 RCVD_IN_PSBL 920 0.68 1.03 0.48 183 XMNoVowels 917 0.56 0.71 0.48 184 PLING_QUERY 891 0.60 0.82 0.46 185 XMCapTrack 873 0.39 0.28 0.46 186 XMBrknScrpt_02 871 0.65 1.00 0.45 187 XMHTML_After_End 853 0.54 0.70 0.44 188 RCVD_IN_IADB_OPTIN_GT50 847 0.30 0.06 0.44 189 T_TooManySym_04 839 0.33 0.15 0.44 190 LONGLN_LOW_CONTRAST 818 0.46 0.51 0.43 191 RDNS_DYNAMIC 803 0.64 1.02 0.42 192 FILL_THIS_FORM_LONG 789 0.57 0.85 0.41 193 XM_Walgreens_Forge 771 0.28 0.06 0.40 194 XM_S_SubURI 770 0.27 0.04 0.40 195 RELAYCOUNTRY_GB 751 0.40 0.42 0.39 196 SHOPIFY_IMG_NOT_RCVD_SFY 751 0.56 0.85 0.39 197 DATE_IN_PAST_03_06 748 0.33 0.23 0.39 198 XM_ShortIntro_01 747 0.39 0.39 0.39 199 HELO_NODOT 746 0.46 0.58 0.39 200 HELO_NO_DOMAIN 746 0.46 0.58 0.39 ----------------------------------------------------------------------