Email: 308092 Autolearn: 0 AvgScore: 4.30 AvgScanTime: 1.11 sec Spam: 110279 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.12 sec Ham: 197813 Autolearn: 0 AvgScore: -1.01 AvgScanTime: 1.10 sec Time Spent Running SA: 94.85 hours Time Spent Processing Spam: 34.32 hours Time Spent Processing Ham: 60.53 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103189 85.96 93.57 81.72 2 DKIM_SIGNED 100527 82.49 91.16 77.65 3 XM_DK_Pass 97081 80.73 88.03 76.66 4 DKIM_VALID 95821 79.98 86.89 76.12 5 XM_B_Unicode 94002 76.38 85.24 71.44 6 XMListUnsubscribeExists 84392 63.97 76.53 56.96 7 RELAYCOUNTRY_US 83587 78.51 75.80 80.03 8 XM_B_SpammyWords 81163 55.18 73.60 44.91 9 DCC_CHECK 80733 52.51 73.21 40.97 10 DKIM_VALID_AU 72079 65.19 65.36 65.09 11 XM_DK_Undo_02 53746 21.79 48.74 6.77 12 XM_B_Unicode3 47551 44.55 43.12 45.34 13 XM_B_SpammyWords2 45577 27.55 41.33 19.87 14 BAYES_99 44173 18.30 40.06 6.17 15 TR_XM_DKIM_Undo 42677 15.62 38.70 2.75 16 LOC_TINY_FONT_1 42366 33.06 38.42 30.07 17 HTML_FONT_LOW_CONTRAST 38977 33.56 35.34 32.57 18 FVGT_m_MULTI_ODD 36247 31.37 32.87 30.53 19 BAYES_50 35159 48.04 31.88 57.05 20 BAYES_999 34767 14.34 31.53 4.77 21 DKIM_VALID_EF 33208 29.20 30.11 28.69 22 RCVD_IN_MSPIKE_H2 33094 29.47 30.01 29.16 23 TR_DCC_Bayes_99 32800 12.08 29.74 2.24 24 MIME_HTML_ONLY 32204 23.39 29.20 20.16 25 T_KAM_HTML_FONT_INVALID 31123 23.17 28.22 20.36 26 DCC_CHECK_NEGATIVE 29537 47.47 26.78 59.01 27 TR_XM_DK_Unsub 27155 18.82 24.62 15.59 28 RELAYCOUNTRY_META 25784 10.93 23.38 3.99 29 T_TM2_M_HEADER_IN_MSG 21615 21.05 19.60 21.87 30 TR_XM_SpammyRelay 21280 8.34 19.30 2.23 31 XM_Multi_Part_URI 19149 16.30 17.36 15.71 32 XMSubLong 18436 20.44 16.72 22.52 33 TR_MAX_INTL_RELAY 17428 11.22 15.80 8.66 34 TR_XM_SpammyWords2 17394 6.07 15.77 0.66 35 XM_B_Unsub 15880 10.12 14.40 7.73 36 RCVD_IN_BL_SPAMCOP_NET 15583 5.53 14.13 0.73 37 TR_XM_BayesUnsub 15409 9.22 13.97 6.57 38 RELAYCOUNTRY_CA 15148 6.11 13.74 1.86 39 LOTS_OF_MONEY 14410 9.01 13.07 6.75 40 XM_B_SpammyWords3 13486 7.66 12.23 5.11 41 BOTNET_IPINHOSTNAME 13386 7.88 12.14 5.51 42 UNPARSEABLE_RELAY 13278 11.54 12.04 11.26 43 TR_XM_SpammyWords4 13128 7.62 11.90 5.23 44 TR_XM_SPAMCOP 12757 4.41 11.57 0.43 45 RCVD_IN_MSPIKE_WL 11537 7.79 10.46 6.30 46 RCVD_IN_MSPIKE_H3 11537 7.79 10.46 6.30 47 BAYES_80 10469 6.75 9.49 5.22 48 XMBody_17 9978 3.92 9.05 1.06 49 BAYES_60 9243 10.50 8.38 11.67 50 BOTNET 9242 3.70 8.38 1.09 51 FSL_BULK_SIG 9124 5.18 8.27 3.45 52 XM_UncommonTLD01 8689 5.81 7.88 4.66 53 XM_Body_Dirty_Words 8063 5.14 7.31 3.93 54 TR_XM_UnparsRelay 8063 3.89 7.31 1.98 55 UNTRUSTED_Relay 7841 3.58 7.11 1.61 56 XM_Evil_Numbers_Gen 7773 8.87 7.05 9.89 57 XMNumbers 7188 4.66 6.52 3.63 58 HTML_IMAGE_RATIO_02 7155 6.09 6.49 5.86 59 XM_SPF_SoftFail 7040 4.00 6.38 2.68 60 HTML_IMAGE_RATIO_04 6646 5.97 6.03 5.93 61 TooManyTo_001 6462 6.23 5.86 6.44 62 BAYES_95 6387 4.28 5.79 3.44 63 MPART_ALT_DIFF 6004 4.33 5.44 3.70 64 XMStrtUSub 5882 6.18 5.33 6.65 65 LotsOfNums_01 5637 6.63 5.11 7.48 66 TR_XM_SpammyWords5 5629 2.66 5.10 1.29 67 T_FILL_THIS_FORM_SHORT 5583 2.23 5.06 0.65 68 XMSubMetaSx_00 5507 4.13 4.99 3.65 69 TR_LOTS_OF_MONEY3 5441 2.38 4.93 0.95 70 TR_XM_PHPForged 5298 1.87 4.80 0.24 71 TR_XM_PHPDW 5155 1.81 4.67 0.22 72 XM_OfRef6 5132 2.49 4.65 1.29 73 TR_XM_FormFill2 5118 1.82 4.64 0.24 74 SpammyFromTLD_01 5111 2.04 4.63 0.60 75 XM_H_PHPOS 5109 1.79 4.63 0.21 76 DKIM_INVALID 4706 2.51 4.27 1.53 77 XM_H_GMP 4341 6.36 3.94 7.71 78 TR_XM_BayesRelay 4333 1.41 3.93 0.00 79 USER_IN_DEF_DKIM_WL 4280 14.19 3.88 19.93 80 XMSexyCombo_05 4254 2.92 3.86 2.40 81 HK_RANDOM_REPLYTO 4227 1.49 3.83 0.19 82 RCVD_IN_VALIDITY_SAFE 4116 7.44 3.73 9.51 83 XM_H_Long_From01 4076 4.21 3.70 4.49 84 T_XMDrugObfuBody_14 4039 2.44 3.66 1.75 85 MIME_HTML_MOSTLY 4020 3.13 3.65 2.84 86 TR_XM_FormFill 3967 1.32 3.60 0.05 87 HTML_IMAGE_RATIO_06 3908 3.65 3.54 3.71 88 XM_UB50 3838 1.81 3.48 0.87 89 FONT_INVIS_LONG_LINE 3788 1.25 3.43 0.04 90 HTML_IMAGE_RATIO_08 3762 2.70 3.41 2.30 91 XM_B_Phish_Phrases 3755 3.36 3.41 3.34 92 T_XMDrugObfuBody_08 3691 2.01 3.35 1.27 93 TR_XM_PhishingBody 3588 2.26 3.25 1.71 94 XM_B_Investor 3482 2.01 3.16 1.38 95 XMBrknScrpt_02 3475 1.72 3.15 0.92 96 TM2_M_VERY_LONG_WORD 3408 1.95 3.09 1.32 97 XM_URI_RBL 3406 1.24 3.09 0.21 98 RCVD_IN_VALIDITY_CERTIFIED 3348 6.23 3.04 8.01 99 TR_XM_NoHeaderRelay 3340 1.15 3.03 0.11 100 T_XMHurry_00 3314 1.66 3.01 0.91 101 MIME_HTML_ONLY_MULTI 3081 2.30 2.79 2.02 102 SUBJ_ALL_CAPS 3009 1.65 2.73 1.04 103 TM2_M_BODY_EMPTY 2986 1.11 2.71 0.23 104 XM_CamelCaseFrm001 2976 2.77 2.70 2.82 105 TM2_M_URI_OPT_OUT 2969 2.23 2.69 1.97 106 XMEmptyBody_01 2943 1.00 2.67 0.08 107 XM_B_SpammyTLD 2855 2.62 2.59 2.64 108 URI_TRY_3LD 2701 1.51 2.45 0.99 109 BOTNET_NORDNS 2522 0.82 2.29 0.01 110 AC_BR_BONANZA 2515 0.92 2.28 0.17 111 XM_B_SpammyWords4 2425 1.26 2.20 0.74 112 RCVD_IN_VALIDITY_RPBL 2418 1.01 2.19 0.36 113 HTTPS_HTTP_MISMATCH 2413 1.18 2.19 0.62 114 RELAYCOUNTRY_AU 2408 1.03 2.18 0.39 115 MIME_QP_LONG_LINE 2299 2.83 2.08 3.25 116 XMDiploma_00 2264 1.69 2.05 1.48 117 BAYES_40 2258 3.16 2.05 3.78 118 HTML_TAG_BALANCE_BODY 2242 1.02 2.03 0.46 119 TR_XM_InvalidRelay 2049 0.68 1.86 0.03 120 THIS_AD 2010 1.06 1.82 0.63 121 XM_HighProb1 1991 0.65 1.81 0.00 122 T_TooManySym_01 1928 5.45 1.75 7.51 123 T_REMOTE_IMAGE 1853 2.49 1.68 2.94 124 RELAYCOUNTRY_RU 1801 0.60 1.63 0.02 125 TR_XM_INV_DKIM 1679 0.59 1.52 0.07 126 XMBdyGiftCard01 1674 1.36 1.52 1.27 127 SpammyFromTLD_02 1661 0.65 1.51 0.18 128 XMPhish30 1637 0.91 1.48 0.59 129 TR_Mismatch_TLD_02 1593 0.56 1.44 0.07 130 BAYES_20 1590 2.26 1.44 2.71 131 FROM_EXCESS_BASE64 1565 1.81 1.42 2.02 132 HTML_MIME_NO_HTML_TAG 1545 1.32 1.40 1.28 133 XM_B_Unsub2 1533 1.19 1.39 1.08 134 URI_HEX 1520 1.25 1.38 1.18 135 KHOP_HELO_FCRDNS 1513 0.84 1.37 0.55 136 ALL_TRUSTED 1484 10.87 1.35 16.18 137 XMReplyNow 1468 0.62 1.33 0.22 138 XM_SendGrid 1440 1.36 1.31 1.40 139 XMSubMetaI_00 1383 1.07 1.25 0.97 140 XMClaimOffer 1365 0.54 1.24 0.16 141 XMStockSpam_06 1352 2.06 1.23 2.52 142 AC_HTML_NONSENSE_TAGS 1348 0.45 1.22 0.03 143 RCVD_IN_PSBL 1335 0.67 1.21 0.37 144 URI_NOVOWEL 1309 1.11 1.19 1.07 145 MAILING_LIST_MULTI 1293 1.73 1.17 2.05 146 XM_UB60 1290 0.45 1.17 0.04 147 XM_ProductURIs 1287 1.06 1.17 1.00 148 GOOG_STO_NOIMG_HTML 1254 0.41 1.14 0.00 149 XM_OfRef7 1250 0.60 1.13 0.30 150 RELAYCOUNTRY_CN 1225 0.43 1.11 0.05 151 XMSlimDrugH 1181 0.56 1.07 0.28 152 XM_H_Long_From02 1168 1.09 1.06 1.10 153 XM_Combo_Sbj 1138 0.70 1.03 0.52 154 RDNS_DYNAMIC 1136 0.57 1.03 0.31 155 ANY_BOUNCE_MESSAGE 1125 3.65 1.02 5.11 156 LongTLD 1124 0.54 1.02 0.27 157 BOUNCE_MESSAGE 1123 3.65 1.02 5.11 158 XM_H_PHPMailer 1112 0.85 1.01 0.76 159 TVD_RCVD_IP 1082 1.90 0.98 2.42 160 T_XMDrugObfuBody_00 1081 1.16 0.98 1.26 161 TR_XM_DK_SendGrid 1054 0.99 0.96 1.00 162 HTML_FONT_FACE_BAD 1052 0.74 0.95 0.63 163 XM_RXBody 1052 0.56 0.95 0.33 164 XM_UB99 1050 0.34 0.95 0.00 165 TR_Caps_n_Bayes_99 1034 0.36 0.94 0.05 166 T_Symld_Words_02 1030 0.48 0.93 0.23 167 XM_DK_Undo_01 1028 1.31 0.93 1.53 168 XMHTML_After_End 1028 0.49 0.93 0.24 169 DKIM_ADSP_CUSTOM_MED 1028 0.95 0.93 0.96 170 PDS_OTHER_BAD_TLD 987 0.40 0.90 0.12 171 HTML_TAG_BALANCE_CENTER 986 0.39 0.89 0.11 172 XM_B_COPY_HTML 982 1.19 0.89 1.35 173 NML_ADSP_CUSTOM_MED 946 0.74 0.86 0.68 174 MPART_ALT_DIFF_COUNT 945 0.88 0.86 0.89 175 XMGenDplmaNmb 940 0.69 0.85 0.59 176 XMSexyCombo_01 927 0.41 0.84 0.16 177 SHOPIFY_IMG_NOT_RCVD_SFY 921 0.57 0.84 0.43 178 TR_Mismatch_TLD_01 919 0.48 0.83 0.28 179 TR_Symld_Words 916 1.01 0.83 1.11 180 XM_UB80 907 0.31 0.82 0.02 181 URIBL_DBL_SPAM 907 0.30 0.82 0.00 182 T_XMDrugObfuBody_10 906 0.34 0.82 0.07 183 XMHTMLBadTable_001 881 0.63 0.80 0.53 184 HELO_DYNAMIC_SPLIT_IP 878 0.29 0.80 0.01 185 XM_B_Phish66 861 0.45 0.78 0.27 186 FORGED_GMAIL_RCVD 861 0.63 0.78 0.55 187 TR_MetaPhish_Combo_01 856 0.75 0.78 0.73 188 DIET_1 856 0.46 0.78 0.28 189 RCVD_IN_IADB_LISTED 845 1.97 0.77 2.64 190 TR_XM_Base64_L1 835 0.39 0.76 0.19 191 HTML_TEXT_INVISIBLE_STYLE 828 0.38 0.75 0.17 192 XM_DIRTYINTL 809 0.36 0.73 0.16 193 TooManyTo_002 808 1.27 0.73 1.57 194 RELAYCOUNTRY_IN 778 0.27 0.71 0.03 195 RCVD_IN_IADB_SPF 773 1.77 0.70 2.36 196 TooManyTo_003 767 0.80 0.70 0.86 197 TM2_M_A_HREF_HREF 751 0.33 0.68 0.13 198 T_STY_INVIS_DIRECT 750 0.42 0.68 0.27 199 XM_UB999 740 0.24 0.67 0.00 200 HOSTED_IMG_MULTI_PUB_01 731 0.27 0.66 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161652 85.96 93.57 81.72 2 RELAYCOUNTRY_US 158300 78.51 75.80 80.03 3 DKIM_SIGNED 153609 82.49 91.16 77.65 4 XM_DK_Pass 151646 80.73 88.03 76.66 5 DKIM_VALID 150584 79.98 86.89 76.12 6 XM_B_Unicode 141323 76.38 85.24 71.44 7 DKIM_VALID_AU 128761 65.19 65.36 65.09 8 DCC_CHECK_NEGATIVE 116726 47.47 26.78 59.01 9 BAYES_50 112854 48.04 31.88 57.05 10 XMListUnsubscribeExists 112684 63.97 76.53 56.96 11 XM_B_Unicode3 89693 44.55 43.12 45.34 12 XM_B_SpammyWords 88842 55.18 73.60 44.91 13 DCC_CHECK 81035 52.51 73.21 40.97 14 HTML_FONT_LOW_CONTRAST 64431 33.56 35.34 32.57 15 FVGT_m_MULTI_ODD 60388 31.37 32.87 30.53 16 LOC_TINY_FONT_1 59482 33.06 38.42 30.07 17 RCVD_IN_MSPIKE_H2 57691 29.47 30.01 29.16 18 DKIM_VALID_EF 56759 29.20 30.11 28.69 19 XMSubLong 44544 20.44 16.72 22.52 20 T_TM2_M_HEADER_IN_MSG 43252 21.05 19.60 21.87 21 T_KAM_HTML_FONT_INVALID 40270 23.17 28.22 20.36 22 MIME_HTML_ONLY 39874 23.39 29.20 20.16 23 USER_IN_DEF_DKIM_WL 39424 14.19 3.88 19.93 24 XM_B_SpammyWords2 39306 27.55 41.33 19.87 25 ALL_TRUSTED 32016 10.87 1.35 16.18 26 XM_Multi_Part_URI 31077 16.30 17.36 15.71 27 TR_XM_DK_Unsub 30838 18.82 24.62 15.59 28 XM_DKIMWhitelistDomains 23216 7.54 0.03 11.74 29 BAYES_60 23092 10.50 8.38 11.67 30 UNPARSEABLE_RELAY 22280 11.54 12.04 11.26 31 XM_Evil_Numbers_Gen 19561 8.87 7.05 9.89 32 RCVD_IN_VALIDITY_SAFE 18805 7.44 3.73 9.51 33 TR_MAX_INTL_RELAY 17130 11.22 15.80 8.66 34 RCVD_IN_VALIDITY_CERTIFIED 15843 6.23 3.04 8.01 35 XM_B_Unsub 15288 10.12 14.40 7.73 36 XM_H_GMP 15250 6.36 3.94 7.71 37 T_TooManySym_01 14851 5.45 1.75 7.51 38 LotsOfNums_01 14798 6.63 5.11 7.48 39 BAYES_00 14153 4.73 0.37 7.15 40 XM_DK_Undo_02 13396 21.79 48.74 6.77 41 LOTS_OF_MONEY 13361 9.01 13.07 6.75 42 XMStrtUSub 13149 6.18 5.33 6.65 43 TR_XM_BayesUnsub 13001 9.22 13.97 6.57 44 TooManyTo_001 12731 6.23 5.86 6.44 45 RCVD_IN_MSPIKE_WL 12461 7.79 10.46 6.30 46 RCVD_IN_MSPIKE_H3 12461 7.79 10.46 6.30 47 BAYES_99 12205 18.30 40.06 6.17 48 TR_XM_DK_Bayes 11988 3.99 0.27 6.06 49 TR_XM_DK_Bayes1 11897 3.94 0.22 6.01 50 HTML_IMAGE_RATIO_04 11733 5.97 6.03 5.93 51 HTML_IMAGE_RATIO_02 11601 6.09 6.49 5.86 52 BOTNET_IPINHOSTNAME 10891 7.88 12.14 5.51 53 TR_XM_DK_Bayes2 10509 3.47 0.16 5.31 54 IN_ZIMBRA_NJ_WHITELIST 10486 3.42 0.06 5.30 55 TR_XM_SpammyWords4 10337 7.62 11.90 5.23 56 BAYES_80 10317 6.75 9.49 5.22 57 ANY_BOUNCE_MESSAGE 10113 3.65 1.02 5.11 58 BOUNCE_MESSAGE 10111 3.65 1.02 5.11 59 XM_B_SpammyWords3 10109 7.66 12.23 5.11 60 BAYES_999 9426 14.34 31.53 4.77 61 XM_UncommonTLD01 9214 5.81 7.88 4.66 62 XM_H_Long_From01 8883 4.21 3.70 4.49 63 RELAYCOUNTRY_META 7897 10.93 23.38 3.99 64 XM_Body_Dirty_Words 7780 5.14 7.31 3.93 65 BAYES_40 7469 3.16 2.05 3.78 66 HTML_IMAGE_RATIO_06 7340 3.65 3.54 3.71 67 MPART_ALT_DIFF 7323 4.33 5.44 3.70 68 XMSubMetaSx_00 7214 4.13 4.99 3.65 69 T_TooManySym_02 7213 2.49 0.42 3.65 70 XMNumbers 7182 4.66 6.52 3.63 71 INVALID_MSGID 6874 2.35 0.32 3.47 72 FSL_BULK_SIG 6828 5.18 8.27 3.45 73 BAYES_95 6809 4.28 5.79 3.44 74 TO_MALFORMED 6681 2.17 0.01 3.38 75 XM_B_Phish_Phrases 6605 3.36 3.41 3.34 76 MSGID_NOFQDN1 6508 2.17 0.17 3.29 77 MIME_QP_LONG_LINE 6433 2.83 2.08 3.25 78 T_REMOTE_IMAGE 5808 2.49 1.68 2.94 79 MIME_HTML_MOSTLY 5612 3.13 3.65 2.84 80 XM_CamelCaseFrm001 5569 2.77 2.70 2.82 81 BAYES_05 5556 2.00 0.54 2.81 82 TR_XM_DKIM_Undo 5444 15.62 38.70 2.75 83 BAYES_20 5358 2.26 1.44 2.71 84 XM_SPF_SoftFail 5295 4.00 6.38 2.68 85 RCVD_IN_IADB_LISTED 5224 1.97 0.77 2.64 86 XM_B_SpammyTLD 5213 2.62 2.59 2.64 87 XMStockSpam_06 4987 2.06 1.23 2.52 88 TVD_RCVD_IP 4781 1.90 0.98 2.42 89 XMSexyCombo_05 4752 2.92 3.86 2.40 90 RCVD_IN_IADB_SPF 4670 1.77 0.70 2.36 91 HTML_IMAGE_RATIO_08 4556 2.70 3.41 2.30 92 TR_DCC_Bayes_99 4423 12.08 29.74 2.24 93 TR_XM_SpammyRelay 4416 8.34 19.30 2.23 94 XM_PDF 4296 1.53 0.37 2.17 95 RCVD_IN_IADB_SENDERID 4282 1.63 0.66 2.16 96 RCVD_IN_IADB_DK 4176 1.59 0.66 2.11 97 XMBSHREFv2 4069 1.39 0.20 2.06 98 MAILING_LIST_MULTI 4048 1.73 1.17 2.05 99 FROM_EXCESS_BASE64 4000 1.81 1.42 2.02 100 MIME_HTML_ONLY_MULTI 3998 2.30 2.79 2.02 101 TR_XM_UnparsRelay 3925 3.89 7.31 1.98 102 TM2_M_URI_OPT_OUT 3905 2.23 2.69 1.97 103 RELAYCOUNTRY_CA 3677 6.11 13.74 1.86 104 T_XMDrugObfuBody_14 3466 2.44 3.66 1.75 105 XMGappySubj_01 3423 1.19 0.21 1.73 106 TVD_SPACE_RATIO 3416 1.14 0.09 1.73 107 TR_XM_PhishingBody 3382 2.26 3.25 1.71 108 IN_HORDE_ADDRESS_BOOK 3364 1.11 0.05 1.70 109 RCVD_IN_IADB_VOUCHED 3221 1.15 0.30 1.63 110 UNTRUSTED_Relay 3178 3.58 7.11 1.61 111 XMBody_95 3138 1.10 0.22 1.59 112 TooManyTo_002 3097 1.27 0.73 1.57 113 DKIM_INVALID 3025 2.51 4.27 1.53 114 XM_DK_Undo_01 3022 1.31 0.93 1.53 115 XMDiploma_00 2928 1.69 2.05 1.48 116 XMGappySubj_02 2901 0.97 0.08 1.47 117 XM_SendGrid 2763 1.36 1.31 1.40 118 XM_B_Investor 2721 2.01 3.16 1.38 119 XM_B_COPY_HTML 2677 1.19 0.89 1.35 120 TM2_M_VERY_LONG_WORD 2602 1.95 3.09 1.32 121 T_TooManySym_03 2584 0.92 0.23 1.31 122 TR_XM_SpammyWords5 2553 2.66 5.10 1.29 123 XM_OfRef6 2547 2.49 4.65 1.29 124 HTML_MIME_NO_HTML_TAG 2531 1.32 1.40 1.28 125 T_XMDrugObfuBody_08 2511 2.01 3.35 1.27 126 XMBdyGiftCard01 2505 1.36 1.52 1.27 127 T_XMDrugObfuBody_00 2495 1.16 0.98 1.26 128 URI_HEX 2343 1.25 1.38 1.18 129 RCVD_IN_IADB_OPTIN 2308 0.83 0.23 1.17 130 XM_GoogleGroups 2282 0.89 0.42 1.15 131 TR_Symld_Words 2193 1.01 0.83 1.11 132 XM_H_Long_From02 2185 1.09 1.06 1.10 133 BOTNET 2158 3.70 8.38 1.09 134 XM_B_Unsub2 2131 1.19 1.39 1.08 135 URI_NOVOWEL 2119 1.11 1.19 1.07 136 XMBody_17 2088 3.92 9.05 1.06 137 SUBJ_ALL_CAPS 2062 1.65 2.73 1.04 138 XM_ProductURIs 1986 1.06 1.17 1.00 139 TR_XM_DK_SendGrid 1982 0.99 0.96 1.00 140 URI_TRY_3LD 1964 1.51 2.45 0.99 141 XMSubMetaI_00 1927 1.07 1.25 0.97 142 DKIM_ADSP_CUSTOM_MED 1895 0.95 0.93 0.96 143 TR_LOTS_OF_MONEY3 1884 2.38 4.93 0.95 144 XMBrknScrpt_02 1812 1.72 3.15 0.92 145 T_XMHurry_00 1797 1.66 3.01 0.91 146 USER_IN_WHITELIST 1796 0.58 0.00 0.91 147 USER_IN_WELCOMELIST 1796 0.58 0.00 0.91 148 MPART_ALT_DIFF_COUNT 1767 0.88 0.86 0.89 149 XM_UB50 1728 1.81 3.48 0.87 150 TR_XM_Base64_M1 1711 0.78 0.62 0.86 151 TooManyTo_003 1697 0.80 0.70 0.86 152 XM_H_PHPMailer 1500 0.85 1.01 0.76 153 XM_B_SpammyWords4 1457 1.26 2.20 0.74 154 TR_MetaPhish_Combo_01 1450 0.75 0.78 0.73 155 RCVD_IN_BL_SPAMCOP_NET 1449 5.53 14.13 0.73 156 XM_H_Trusted_IP 1447 0.47 0.00 0.73 157 XMSubNoVowel 1388 0.55 0.29 0.70 158 TooManyTo_004 1356 0.68 0.66 0.69 159 NML_ADSP_CUSTOM_MED 1340 0.74 0.86 0.68 160 TR_XM_SpammyWords2 1296 6.07 15.77 0.66 161 T_FILL_THIS_FORM_SHORT 1291 2.23 5.06 0.65 162 THIS_AD 1252 1.06 1.82 0.63 163 HTML_FONT_FACE_BAD 1240 0.74 0.95 0.63 164 HTTPS_HTTP_MISMATCH 1217 1.18 2.19 0.62 165 XMSubMetaSxObfu_02 1203 0.49 0.28 0.61 166 TooManyTo_005 1190 0.61 0.63 0.60 167 SpammyFromTLD_01 1186 2.04 4.63 0.60 168 XMGenDplmaNmb 1173 0.69 0.85 0.59 169 XMPhish30 1161 0.91 1.48 0.59 170 FILL_THIS_FORM 1106 0.51 0.42 0.56 171 XM_B_REG_HTML 1097 0.56 0.56 0.55 172 KHOP_HELO_FCRDNS 1090 0.84 1.37 0.55 173 FORGED_GMAIL_RCVD 1087 0.63 0.78 0.55 174 AD_PREFS 1084 0.36 0.04 0.55 175 XMPhish08 1081 0.53 0.49 0.55 176 T_TooManySym_04 1075 0.38 0.10 0.54 177 XM_Sft_Co_L33T 1055 0.35 0.03 0.53 178 XMHTMLBadTable_001 1046 0.63 0.80 0.53 179 XMNoVowels 1041 0.52 0.52 0.53 180 XM_Combo_Sbj 1024 0.70 1.03 0.52 181 XM_B_DNDMA 1005 0.55 0.61 0.51 182 NUMERIC_HTTP_ADDR 956 0.41 0.27 0.48 183 XM_B_FormFill 938 0.35 0.14 0.47 184 HTML_TAG_BALANCE_BODY 908 1.02 2.03 0.46 185 XMLngstWrd_00 907 0.46 0.45 0.46 186 DKIM_ADSP_NXDOMAIN 859 0.50 0.61 0.43 187 SHOPIFY_IMG_NOT_RCVD_SFY 850 0.57 0.84 0.43 188 TR_XM_SPAMCOP 845 4.41 11.57 0.43 189 XM_ShortIntro_01 845 0.48 0.56 0.43 190 NO_DNS_FOR_FROM 804 0.41 0.43 0.41 191 XM_S_SubURI 793 0.29 0.10 0.40 192 HELO_NODOT 791 0.47 0.59 0.40 193 HELO_NO_DOMAIN 791 0.45 0.55 0.40 194 FILL_THIS_FORM_LONG 778 0.38 0.36 0.39 195 RELAYCOUNTRY_AU 776 1.03 2.18 0.39 196 XMCapTrack 767 0.32 0.21 0.39 197 TO_NO_BRKTS_HTML_ONLY 746 0.38 0.40 0.38 198 RCVD_IN_PSBL 735 0.67 1.21 0.37 199 CTE_8BIT_MISMATCH 726 0.30 0.17 0.37 200 RCVD_IN_VALIDITY_RPBL 705 1.01 2.19 0.36 ----------------------------------------------------------------------