Email: 292340 Autolearn: 0 AvgScore: 4.63 AvgScanTime: 1.18 sec Spam: 108071 Autolearn: 0 AvgScore: 14.45 AvgScanTime: 1.30 sec Ham: 184269 Autolearn: 0 AvgScore: -1.12 AvgScanTime: 1.11 sec Time Spent Running SA: 95.89 hours Time Spent Processing Spam: 38.93 hours Time Spent Processing Ham: 56.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103422 86.39 95.70 80.93 2 DKIM_SIGNED 98068 81.93 90.74 76.77 3 XM_DK_Pass 95854 80.54 88.70 75.76 4 DKIM_VALID 93535 79.43 86.55 75.25 5 XM_B_Unicode 91836 75.45 84.98 69.86 6 T_SCC_BODY_TEXT_LINE 87949 82.77 81.38 83.58 7 XMListUnsubscribeExists 80220 61.77 74.23 54.46 8 RELAYCOUNTRY_US 79208 77.44 73.29 79.88 9 DCC_CHECK 77986 50.84 72.16 38.34 10 XM_B_SpammyWords 76840 54.06 71.10 44.06 11 DKIM_VALID_AU 67463 63.48 62.42 64.10 12 XM_DK_Undo_02 54262 22.89 50.21 6.86 13 TR_MAX_INTL_RELAY 50047 22.19 46.31 8.05 14 XM_B_Unicode3 48158 43.90 44.56 43.52 15 XM_B_SpammyWords2 43802 26.50 40.53 18.27 16 BAYES_99 43028 18.10 39.81 5.36 17 TR_XM_DKIM_Undo 41891 16.01 38.76 2.67 18 LOC_TINY_FONT_1 41516 31.89 38.42 28.06 19 MIME_HTML_ONLY 38816 27.21 35.92 22.11 20 BAYES_50 36753 48.71 34.01 57.33 21 HTML_FONT_LOW_CONTRAST 36407 32.86 33.69 32.38 22 DKIM_VALID_EF 35933 31.19 33.25 29.98 23 BAYES_999 34451 14.42 31.88 4.17 24 FVGT_m_MULTI_ODD 33928 27.60 31.39 25.38 25 T_KAM_HTML_FONT_INVALID 31688 23.47 29.32 20.03 26 TR_DCC_Bayes_99 31219 11.90 28.89 1.94 27 DCC_CHECK_NEGATIVE 30076 49.14 27.83 61.63 28 RELAYCOUNTRY_META 29036 12.13 26.87 3.48 29 TR_XM_DK_Unsub 28685 19.81 26.54 15.86 30 RCVD_IN_MSPIKE_H2 25960 24.66 24.02 25.04 31 T_TM2_M_HEADER_IN_MSG 23531 21.71 21.77 21.68 32 TR_XM_SpammyRelay 22210 8.85 20.55 1.98 33 XMSubLong 21240 20.82 19.65 21.51 34 RCVD_IN_BL_SPAMCOP_NET 19373 7.33 17.93 1.11 35 RELAYCOUNTRY_CA 17928 7.02 16.59 1.41 36 XM_Multi_Part_URI 17423 15.89 16.12 15.75 37 TR_XM_SpammyWords2 17022 6.07 15.75 0.38 38 TR_XM_SPAMCOP 16374 5.95 15.15 0.55 39 UNPARSEABLE_RELAY 15814 12.30 14.63 10.93 40 RCVD_IN_MSPIKE_H3 15352 9.36 14.21 6.52 41 RCVD_IN_MSPIKE_WL 15352 9.36 14.21 6.52 42 XM_B_Unsub 14765 10.37 13.66 8.43 43 XM_B_SpammyWords3 14508 8.02 13.42 4.84 44 TR_XM_BayesUnsub 14322 9.27 13.25 6.94 45 BOTNET_IPINHOSTNAME 13170 8.47 12.19 6.28 46 LOTS_OF_MONEY 11542 7.74 10.68 6.01 47 XM_Body_Dirty_Words 10147 5.96 9.39 3.94 48 TR_XM_SpammyWords4 9607 5.94 8.89 4.21 49 TR_XM_UnparsRelay 9556 4.33 8.84 1.68 50 XM_Evil_Numbers_Gen 9399 8.90 8.70 9.02 51 BAYES_80 9353 6.20 8.65 4.75 52 XMBody_17 9321 3.68 8.62 0.77 53 XM_UncommonTLD01 8868 6.07 8.21 4.82 54 BOTNET 8516 3.72 7.88 1.28 55 BAYES_60 8513 9.80 7.88 10.92 56 UNTRUSTED_Relay 8031 3.72 7.43 1.55 57 FSL_BULK_SIG 7933 5.26 7.34 4.05 58 HTML_IMAGE_RATIO_02 7648 6.26 7.08 5.78 59 MPART_ALT_DIFF 7421 5.07 6.87 4.01 60 XMSubMetaSx_00 7403 5.83 6.85 5.23 61 T_FILL_THIS_FORM_SHORT 7187 2.78 6.65 0.51 62 TR_XM_BayesRelay 7084 2.42 6.55 0.00 63 BAYES_95 6806 4.02 6.30 2.68 64 LotsOfNums_01 6359 7.51 5.88 8.46 65 XMSexyCombo_05 6288 4.05 5.82 3.01 66 TooManyTo_001 6044 6.20 5.59 6.55 67 HTML_IMAGE_RATIO_04 5823 5.46 5.39 5.49 68 XMStrtUSub 5669 5.29 5.25 5.31 69 FONT_INVIS_LONG_LINE 5611 1.96 5.19 0.07 70 XM_H_GMP 5587 6.84 5.17 7.82 71 HK_RANDOM_REPLYTO 5471 1.94 5.06 0.10 72 XM_B_Phish_Phrases 5397 4.07 4.99 3.52 73 XM_H_Long_From01 5377 5.16 4.98 5.27 74 SpammyFromTLD_01 5289 2.08 4.89 0.42 75 TR_XM_FormFill 5173 1.77 4.79 0.01 76 HTML_IMAGE_RATIO_06 5016 3.29 4.64 2.50 77 XMNumbers 4981 3.91 4.61 3.49 78 MIME_HTML_MOSTLY 4872 3.28 4.51 2.56 79 TR_XM_SpammyWords5 4733 2.62 4.38 1.59 80 XM_OfRef6 4620 2.46 4.27 1.40 81 TR_Mismatch_TLD_02 4575 1.60 4.23 0.05 82 DKIM_INVALID 4533 2.51 4.19 1.52 83 SUBJ_ALL_CAPS 4301 2.20 3.98 1.16 84 KHOP_HELO_FCRDNS 4297 2.06 3.98 0.93 85 T_XMDrugObfuBody_14 4287 2.69 3.97 1.93 86 TR_XM_PhishingBody 4185 2.65 3.87 1.94 87 TM2_M_URI_OPT_OUT 4037 2.73 3.74 2.14 88 XM_UB50 4020 1.91 3.72 0.84 89 T_REMOTE_IMAGE 3915 3.58 3.62 3.55 90 XM_B_Investor 3891 2.12 3.60 1.25 91 XM_SPF_SoftFail 3871 2.89 3.58 2.48 92 RCVD_IN_VALIDITY_SAFE 3853 5.80 3.57 7.11 93 HTML_IMAGE_RATIO_08 3734 2.62 3.46 2.12 94 MIME_HTML_ONLY_MULTI 3667 2.64 3.39 2.19 95 HTML_MIME_NO_HTML_TAG 3648 2.14 3.38 1.42 96 XM_B_SpammyTLD 3615 3.10 3.35 2.95 97 SCC_BODY_URI_ONLY 3457 3.47 3.20 3.63 98 USER_IN_DEF_DKIM_WL 3278 12.09 3.03 17.41 99 XM_CamelCaseFrm001 3270 2.84 3.03 2.73 100 TM2_M_VERY_LONG_WORD 3226 1.93 2.99 1.31 101 XM_URI_RBL 3189 1.22 2.95 0.21 102 T_XMDrugObfuBody_08 3186 1.89 2.95 1.28 103 RCVD_IN_VALIDITY_CERTIFIED 3114 4.96 2.88 6.18 104 T_XMHurry_00 2948 1.35 2.73 0.54 105 T_TooManySym_01 2825 5.40 2.61 7.03 106 TR_LOTS_OF_MONEY3 2748 1.12 2.54 0.28 107 XMBdyGiftCard01 2735 1.64 2.53 1.12 108 XM_ProductURIs 2690 1.41 2.49 0.77 109 XM_B_SpammyWords4 2510 1.47 2.32 0.97 110 DKIM_ADSP_NXDOMAIN 2456 1.10 2.27 0.41 111 RELAYCOUNTRY_AU 2409 1.09 2.23 0.42 112 TR_XM_PHPDW 2388 0.98 2.21 0.26 113 TR_XM_PHPForged 2367 0.99 2.19 0.28 114 FROM_EXCESS_BASE64 2353 2.86 2.18 3.25 115 TR_XM_FormFill2 2316 0.97 2.14 0.28 116 XM_H_PHPOS 2301 0.95 2.13 0.25 117 XMStockSpam_06 2264 1.75 2.09 1.54 118 XM_HighProb1 2223 0.77 2.06 0.01 119 T_Symld_Words_02 2140 0.94 1.98 0.34 120 AC_BR_BONANZA 2076 0.84 1.92 0.21 121 XM_DIRTYINTL 2068 0.83 1.91 0.20 122 HTML_TAG_BALANCE_BODY 2045 1.00 1.89 0.48 123 BOTNET_NORDNS 2041 0.70 1.89 0.01 124 XM_B_Unsub2 2028 1.48 1.88 1.24 125 BODY_URI_ONLY 2025 0.70 1.87 0.01 126 HOSTED_IMG_MULTI_PUB_01 2003 0.70 1.85 0.03 127 RELAYCOUNTRY_CZ 1981 0.68 1.83 0.00 128 XMReplyNow 1911 0.78 1.77 0.21 129 URI_TRY_3LD 1882 1.15 1.74 0.81 130 TR_XM_NoHeaderRelay 1826 0.68 1.69 0.09 131 SpammyFromTLD_02 1748 0.89 1.62 0.46 132 T_XMDrugObfuBody_10 1692 0.59 1.57 0.02 133 XM_DK_Undo_01 1665 1.74 1.54 1.85 134 SCRIPT_GIBBERISH 1620 0.55 1.50 0.00 135 XMDiploma_00 1619 1.44 1.50 1.40 136 HTML_IMAGE_ONLY_20 1607 0.78 1.49 0.36 137 XMPhish30 1580 1.05 1.46 0.82 138 MIME_QP_LONG_LINE 1565 3.02 1.45 3.94 139 URI_HEX 1561 1.09 1.44 0.88 140 MPART_ALT_DIFF_COUNT 1557 1.09 1.44 0.88 141 URI_NOVOWEL 1509 1.28 1.40 1.21 142 XMSubMetaSx_01 1496 1.04 1.38 0.84 143 XM_H_PHPMailer 1481 0.96 1.37 0.72 144 BAYES_40 1446 3.12 1.34 4.16 145 XMSexyCombo_01 1435 0.79 1.33 0.47 146 MAILING_LIST_MULTI 1415 1.92 1.31 2.28 147 ALL_TRUSTED 1397 11.10 1.29 16.86 148 TR_Caps_n_Bayes_99 1397 0.48 1.29 0.01 149 PDS_OTHER_BAD_TLD 1391 0.56 1.29 0.13 150 THIS_AD 1290 0.66 1.19 0.35 151 RDNS_DYNAMIC 1282 0.84 1.19 0.64 152 XM_UB99 1270 0.44 1.18 0.00 153 TR_MetaPhish_Combo_01 1265 1.26 1.17 1.32 154 DIET_1 1247 0.63 1.15 0.32 155 TR_XM_INV_DKIM 1231 0.46 1.14 0.06 156 RCVD_IN_VALIDITY_RPBL 1231 0.46 1.14 0.07 157 XM_SendGrid 1222 1.16 1.13 1.18 158 XMSlimDrugH 1204 0.59 1.11 0.28 159 BAYES_20 1190 2.27 1.10 2.96 160 TVD_RCVD_IP 1189 2.15 1.10 2.76 161 LONG_JUNK_URI2 1170 0.42 1.08 0.03 162 HTML_FONT_SIZE_LARGE 1137 0.42 1.05 0.05 163 XMBody_29 1121 0.44 1.04 0.10 164 XMBrknScrpt_02 1107 0.72 1.02 0.55 165 HTTPS_HTTP_MISMATCH 1100 0.72 1.02 0.54 166 XMClaimOffer 1084 0.42 1.00 0.08 167 TR_XM_InvalidRelay 1081 0.38 1.00 0.02 168 ANY_BOUNCE_MESSAGE 1047 4.00 0.97 5.78 169 BOUNCE_MESSAGE 1047 4.00 0.97 5.78 170 HELO_DYNAMIC_SPLIT_IP 1042 0.36 0.96 0.01 171 XM_B_Phish66 1034 0.55 0.96 0.31 172 RELAYCOUNTRY_HU 1028 0.35 0.95 0.00 173 HTML_SHORT_LINK_IMG_3 1027 0.37 0.95 0.03 174 XM_UB60 1019 0.39 0.94 0.07 175 HTML_FONT_FACE_BAD 1008 0.62 0.93 0.44 176 TR_XM_RelayPhish 1003 0.41 0.93 0.10 177 XM_H_Undi_Recip 983 0.44 0.91 0.17 178 TooManyTo_002 977 1.33 0.90 1.58 179 XM_B_COPY_HTML 973 0.96 0.90 1.00 180 SUBJ_DOLLARS 972 0.51 0.90 0.28 181 GOOG_STO_IMG_NOHTML 962 0.38 0.89 0.08 182 XM_RXBody 955 1.04 0.88 1.13 183 RCVD_IN_IADB_LISTED 955 2.37 0.88 3.24 184 SHOPIFY_IMG_NOT_RCVD_SFY 952 0.58 0.88 0.40 185 TR_XM_Base64_M1 930 1.03 0.86 1.13 186 TR_Mismatch_TLD_01 916 0.54 0.85 0.36 187 FROM_SUSPICIOUS_NTLD 908 0.32 0.84 0.02 188 XM_H_PHPOS_M 904 0.34 0.84 0.04 189 TR_Symld_Words 898 1.54 0.83 1.96 190 TooManyTo_003 898 0.82 0.83 0.81 191 XM_OfRef7 884 0.47 0.82 0.27 192 XM_B_DNDMA 882 0.46 0.82 0.25 193 XM_UB999 871 0.30 0.81 0.00 194 XMPhish14 871 0.58 0.81 0.45 195 RCVD_IN_PSBL 866 0.70 0.80 0.64 196 TR_XM_DK_SendGrid 866 0.80 0.80 0.81 197 T_XMDrugObfuBody_00 860 0.49 0.80 0.31 198 TooManyTo_004 859 0.69 0.79 0.63 199 XM_S_SpammyWords 858 0.41 0.79 0.18 200 TR_XM_Spammywords 858 0.40 0.79 0.18 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 154009 82.77 81.38 83.58 2 HTML_MESSAGE 149125 86.39 95.70 80.93 3 RELAYCOUNTRY_US 147185 77.44 73.29 79.88 4 DKIM_SIGNED 141458 81.93 90.74 76.77 5 XM_DK_Pass 139605 80.54 88.70 75.76 6 DKIM_VALID 138666 79.43 86.55 75.25 7 XM_B_Unicode 128735 75.45 84.98 69.86 8 DKIM_VALID_AU 118114 63.48 62.42 64.10 9 DCC_CHECK_NEGATIVE 113572 49.14 27.83 61.63 10 BAYES_50 105634 48.71 34.01 57.33 11 XMListUnsubscribeExists 100348 61.77 74.23 54.46 12 XM_B_SpammyWords 81193 54.06 71.10 44.06 13 XM_B_Unicode3 80185 43.90 44.56 43.52 14 DCC_CHECK 70643 50.84 72.16 38.34 15 HTML_FONT_LOW_CONTRAST 59661 32.86 33.69 32.38 16 DKIM_VALID_EF 55251 31.19 33.25 29.98 17 LOC_TINY_FONT_1 51698 31.89 38.42 28.06 18 FVGT_m_MULTI_ODD 46772 27.60 31.39 25.38 19 RCVD_IN_MSPIKE_H2 46144 24.66 24.02 25.04 20 MIME_HTML_ONLY 40738 27.21 35.92 22.11 21 T_TM2_M_HEADER_IN_MSG 39944 21.71 21.77 21.68 22 XMSubLong 39633 20.82 19.65 21.51 23 T_KAM_HTML_FONT_INVALID 36912 23.47 29.32 20.03 24 XM_B_SpammyWords2 33662 26.50 40.53 18.27 25 USER_IN_DEF_DKIM_WL 32079 12.09 3.03 17.41 26 ALL_TRUSTED 31064 11.10 1.29 16.86 27 TR_XM_DK_Unsub 29225 19.81 26.54 15.86 28 XM_Multi_Part_URI 29027 15.89 16.12 15.75 29 XM_DKIMWhitelistDomains 21005 7.31 0.35 11.40 30 UNPARSEABLE_RELAY 20144 12.30 14.63 10.93 31 BAYES_60 20124 9.80 7.88 10.92 32 XM_Evil_Numbers_Gen 16626 8.90 8.70 9.02 33 BAYES_00 16202 5.68 0.39 8.79 34 LotsOfNums_01 15594 7.51 5.88 8.46 35 XM_B_Unsub 15538 10.37 13.66 8.43 36 TR_MAX_INTL_RELAY 14836 22.19 46.31 8.05 37 XM_H_GMP 14417 6.84 5.17 7.82 38 TR_XM_DK_Bayes 13267 4.64 0.28 7.20 39 TR_XM_DK_Bayes1 13100 4.58 0.28 7.11 40 RCVD_IN_VALIDITY_SAFE 13096 5.80 3.57 7.11 41 T_TooManySym_01 12960 5.40 2.61 7.03 42 TR_XM_BayesUnsub 12780 9.27 13.25 6.94 43 XM_DK_Undo_02 12648 22.89 50.21 6.86 44 TooManyTo_001 12067 6.20 5.59 6.55 45 RCVD_IN_MSPIKE_WL 12021 9.36 14.21 6.52 46 RCVD_IN_MSPIKE_H3 12021 9.36 14.21 6.52 47 TR_XM_DK_Bayes2 11660 4.08 0.26 6.33 48 BOTNET_IPINHOSTNAME 11577 8.47 12.19 6.28 49 RCVD_IN_VALIDITY_CERTIFIED 11391 4.96 2.88 6.18 50 LOTS_OF_MONEY 11081 7.74 10.68 6.01 51 IN_ZIMBRA_NJ_WHITELIST 10743 3.70 0.08 5.83 52 BOUNCE_MESSAGE 10658 4.00 0.97 5.78 53 ANY_BOUNCE_MESSAGE 10658 4.00 0.97 5.78 54 HTML_IMAGE_RATIO_02 10642 6.26 7.08 5.78 55 HTML_IMAGE_RATIO_04 10125 5.46 5.39 5.49 56 BAYES_99 9879 18.10 39.81 5.36 57 XMStrtUSub 9793 5.29 5.25 5.31 58 XM_H_Long_From01 9715 5.16 4.98 5.27 59 XMSubMetaSx_00 9636 5.83 6.85 5.23 60 XM_B_SpammyWords3 8924 8.02 13.42 4.84 61 XM_UncommonTLD01 8875 6.07 8.21 4.82 62 BAYES_80 8759 6.20 8.65 4.75 63 TR_XM_SpammyWords4 7753 5.94 8.89 4.21 64 BAYES_999 7692 14.42 31.88 4.17 65 BAYES_40 7667 3.12 1.34 4.16 66 FSL_BULK_SIG 7454 5.26 7.34 4.05 67 MPART_ALT_DIFF 7389 5.07 6.87 4.01 68 XM_Body_Dirty_Words 7262 5.96 9.39 3.94 69 MIME_QP_LONG_LINE 7259 3.02 1.45 3.94 70 INVALID_MSGID 7172 2.52 0.17 3.89 71 SCC_BODY_URI_ONLY 6692 3.47 3.20 3.63 72 T_TooManySym_02 6638 2.53 0.71 3.60 73 T_REMOTE_IMAGE 6548 3.58 3.62 3.55 74 XM_B_Phish_Phrases 6487 4.07 4.99 3.52 75 XMNumbers 6436 3.91 4.61 3.49 76 RELAYCOUNTRY_META 6418 12.13 26.87 3.48 77 TO_MALFORMED 6277 2.15 0.01 3.41 78 FROM_EXCESS_BASE64 5997 2.86 2.18 3.25 79 RCVD_IN_IADB_LISTED 5964 2.37 0.88 3.24 80 BAYES_05 5614 2.11 0.52 3.05 81 XMSexyCombo_05 5541 4.05 5.82 3.01 82 RCVD_IN_IADB_SPF 5454 2.15 0.78 2.96 83 BAYES_20 5447 2.27 1.10 2.96 84 XM_B_SpammyTLD 5438 3.10 3.35 2.95 85 TVD_RCVD_IP 5095 2.15 1.10 2.76 86 RCVD_IN_IADB_SENDERID 5050 2.00 0.74 2.74 87 XM_CamelCaseFrm001 5038 2.84 3.03 2.73 88 RCVD_IN_IADB_DK 4992 1.98 0.73 2.71 89 BAYES_95 4942 4.02 6.30 2.68 90 TR_XM_DKIM_Undo 4915 16.01 38.76 2.67 91 MIME_HTML_MOSTLY 4726 3.28 4.51 2.56 92 HTML_IMAGE_RATIO_06 4603 3.29 4.64 2.50 93 XM_SPF_SoftFail 4577 2.89 3.58 2.48 94 XM_PDF 4401 1.59 0.23 2.39 95 MAILING_LIST_MULTI 4201 1.92 1.31 2.28 96 XMBSHREFv2 4150 1.51 0.25 2.25 97 MIME_HTML_ONLY_MULTI 4040 2.64 3.39 2.19 98 TM2_M_URI_OPT_OUT 3944 2.73 3.74 2.14 99 HTML_IMAGE_RATIO_08 3915 2.62 3.46 2.12 100 TR_XM_SpammyRelay 3656 8.85 20.55 1.98 101 TR_Symld_Words 3603 1.54 0.83 1.96 102 TR_DCC_Bayes_99 3574 11.90 28.89 1.94 103 TR_XM_PhishingBody 3567 2.65 3.87 1.94 104 T_XMDrugObfuBody_14 3565 2.69 3.97 1.93 105 XMGappySubj_01 3453 1.26 0.23 1.87 106 XM_DK_Undo_01 3412 1.74 1.54 1.85 107 TVD_SPACE_RATIO 3299 1.21 0.21 1.79 108 IN_HORDE_ADDRESS_BOOK 3274 1.14 0.06 1.78 109 RCVD_IN_IADB_VOUCHED 3180 1.25 0.43 1.73 110 TR_XM_UnparsRelay 3099 4.33 8.84 1.68 111 TR_XM_SpammyWords5 2923 2.62 4.38 1.59 112 TooManyTo_002 2913 1.33 0.90 1.58 113 UNTRUSTED_Relay 2857 3.72 7.43 1.55 114 XMStockSpam_06 2839 1.75 2.09 1.54 115 XMBody_95 2792 1.03 0.19 1.52 116 DKIM_INVALID 2792 2.51 4.19 1.52 117 HTML_MIME_NO_HTML_TAG 2615 2.14 3.38 1.42 118 RELAYCOUNTRY_CA 2603 7.02 16.59 1.41 119 XMDiploma_00 2583 1.44 1.50 1.40 120 XMGappySubj_02 2580 0.90 0.06 1.40 121 XM_OfRef6 2579 2.46 4.27 1.40 122 RCVD_IN_RP_SAFE 2477 1.11 0.71 1.34 123 TR_MetaPhish_Combo_01 2426 1.26 1.17 1.32 124 TM2_M_VERY_LONG_WORD 2408 1.93 2.99 1.31 125 BOTNET 2359 3.72 7.88 1.28 126 T_XMDrugObfuBody_08 2353 1.89 2.95 1.28 127 MSGID_NOFQDN1 2351 0.81 0.01 1.28 128 XM_H_Long_From02 2346 1.07 0.71 1.27 129 XM_GoogleGroups 2307 0.93 0.38 1.25 130 XM_B_Investor 2306 2.12 3.60 1.25 131 XM_B_Unsub2 2293 1.48 1.88 1.24 132 T_TooManySym_03 2286 0.89 0.29 1.24 133 URI_NOVOWEL 2222 1.28 1.40 1.21 134 RCVD_IN_RP_CERTIFIED 2187 0.96 0.57 1.19 135 XM_SendGrid 2181 1.16 1.13 1.18 136 SUBJ_ALL_CAPS 2136 2.20 3.98 1.16 137 TR_XM_Base64_M1 2089 1.03 0.86 1.13 138 RCVD_IN_IADB_OPTIN 2087 0.82 0.29 1.13 139 XM_RXBody 2075 1.04 0.88 1.13 140 XMBdyGiftCard01 2060 1.64 2.53 1.12 141 RCVD_IN_BL_SPAMCOP_NET 2052 7.33 17.93 1.11 142 USER_IN_WHITELIST 1984 0.68 0.00 1.08 143 USER_IN_WELCOMELIST 1984 0.68 0.00 1.08 144 XMSubMetaSxObfu_03 1865 0.92 0.77 1.01 145 XM_B_COPY_HTML 1845 0.96 0.90 1.00 146 XM_B_SpammyWords4 1783 1.47 2.32 0.97 147 KHOP_HELO_FCRDNS 1716 2.06 3.98 0.93 148 MPART_ALT_DIFF_COUNT 1624 1.09 1.44 0.88 149 URI_HEX 1623 1.09 1.44 0.88 150 XM_UB50 1551 1.91 3.72 0.84 151 XMSubMetaSx_01 1541 1.04 1.38 0.84 152 XMSubMetaSxObfu_02 1526 0.67 0.40 0.83 153 XMPhish30 1502 1.05 1.46 0.82 154 TooManyTo_003 1492 0.82 0.83 0.81 155 TR_XM_DK_SendGrid 1487 0.80 0.80 0.81 156 URI_TRY_3LD 1485 1.15 1.74 0.81 157 DKIM_ADSP_CUSTOM_MED 1432 0.73 0.66 0.78 158 XMBody_17 1428 3.68 8.62 0.77 159 XM_ProductURIs 1427 1.41 2.49 0.77 160 XM_H_PHPMailer 1327 0.96 1.37 0.72 161 RDNS_DYNAMIC 1177 0.84 1.19 0.64 162 RCVD_IN_PSBL 1175 0.70 0.80 0.64 163 TooManyTo_004 1168 0.69 0.79 0.63 164 XM_H_Trusted_IP 1067 0.36 0.00 0.58 165 XM_B_FormFill 1043 0.38 0.07 0.57 166 TR_XM_SPAMCOP 1012 5.95 15.15 0.55 167 XM_B_REG_HTML 1011 0.51 0.45 0.55 168 XMBrknScrpt_02 1006 0.72 1.02 0.55 169 HTTPS_HTTP_MISMATCH 1000 0.72 1.02 0.54 170 T_XMHurry_00 993 1.35 2.73 0.54 171 TooManyTo_005 993 0.62 0.77 0.54 172 FILL_THIS_FORM 991 0.48 0.37 0.54 173 T_FILL_THIS_FORM_SHORT 947 2.78 6.65 0.51 174 XMSubNoVowel 930 0.49 0.47 0.50 175 NML_ADSP_CUSTOM_MED 914 0.53 0.58 0.50 176 DATE_IN_PAST_06_12 906 0.36 0.15 0.49 177 T_TooManySym_04 879 0.35 0.14 0.48 178 HTML_TAG_BALANCE_BODY 878 1.00 1.89 0.48 179 XMSexyCombo_01 874 0.79 1.33 0.47 180 FORGED_GMAIL_RCVD 867 0.50 0.54 0.47 181 XMGenDplmaNmb 847 0.52 0.62 0.46 182 SpammyFromTLD_02 841 0.89 1.62 0.46 183 XM_ShortIntro_01 836 0.46 0.46 0.45 184 XMPhish14 829 0.58 0.81 0.45 185 HTML_FONT_FACE_BAD 811 0.62 0.93 0.44 186 XMNoVowels 802 0.42 0.40 0.44 187 FROM_GOV_DKIM_AU 801 0.29 0.04 0.43 188 FILL_THIS_FORM_LONG 796 0.37 0.26 0.43 189 XM_S_SubURI 788 0.28 0.03 0.43 190 SpammyFromTLD_01 782 2.08 4.89 0.42 191 HELO_NODOT 779 0.54 0.75 0.42 192 HELO_NO_DOMAIN 778 0.54 0.75 0.42 193 RELAYCOUNTRY_AU 765 1.09 2.23 0.42 194 DKIM_ADSP_NXDOMAIN 750 1.10 2.27 0.41 195 SHOPIFY_IMG_NOT_RCVD_SFY 744 0.58 0.88 0.40 196 CTE_8BIT_MISMATCH 729 0.26 0.02 0.40 197 PLING_QUERY 721 0.48 0.64 0.39 198 NO_DNS_FOR_FROM 712 0.46 0.58 0.39 199 TR_XM_SpammyWords2 709 6.07 15.75 0.38 200 T_OBFU_PDF_ATTACH 691 0.25 0.03 0.37 ----------------------------------------------------------------------