Email: 321643 Autolearn: 0 AvgScore: 4.78 AvgScanTime: 1.40 sec Spam: 114491 Autolearn: 0 AvgScore: 14.06 AvgScanTime: 1.47 sec Ham: 207152 Autolearn: 0 AvgScore: -0.35 AvgScanTime: 1.35 sec Time Spent Running SA: 124.77 hours Time Spent Processing Spam: 46.82 hours Time Spent Processing Ham: 77.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 114177 99.63 99.73 99.58 2 HTML_MESSAGE 109876 85.55 95.97 79.79 3 DKIM_SIGNED 104199 80.69 91.01 74.98 4 XM_DK_Pass 100089 78.72 87.42 73.92 5 DKIM_VALID 98498 77.91 86.03 73.43 6 XM_B_Unicode 97094 74.08 84.80 68.15 7 RELAYCOUNTRY_US 87020 76.48 76.01 76.74 8 DCC_CHECK 85347 52.34 74.54 40.07 9 XMListUnsubscribeExists 84972 61.28 74.22 54.13 10 XM_B_SpammyWords 84005 54.36 73.37 43.85 11 DKIM_VALID_AU 73782 63.53 64.44 63.02 12 XM_DK_Undo_02 58055 22.62 50.71 7.10 13 XM_B_Unicode3 49085 42.58 42.87 42.41 14 XM_B_SpammyWords2 48206 27.87 42.10 20.00 15 BAYES_99 48015 19.30 41.94 6.78 16 TR_XM_DKIM_Undo 45441 16.06 39.69 3.01 17 LOC_TINY_FONT_1 44808 32.32 39.14 28.55 18 HTML_FONT_LOW_CONTRAST 41238 33.24 36.02 31.71 19 BAYES_999 38521 15.09 33.65 4.84 20 RCVD_IN_MSPIKE_H2 37234 31.47 32.52 30.88 21 FVGT_m_MULTI_ODD 37186 27.91 32.48 25.38 22 BAYES_50 35910 48.06 31.36 57.29 23 DKIM_VALID_EF 35617 29.02 31.11 27.87 24 TR_DCC_Bayes_99 35124 12.67 30.68 2.72 25 MIME_HTML_ONLY 34967 23.23 30.54 19.20 26 T_KAM_HTML_FONT_INVALID 32897 22.73 28.73 19.41 27 DCC_CHECK_NEGATIVE 29131 47.64 25.44 59.91 28 TR_XM_DK_Unsub 27453 18.17 23.98 14.96 29 RELAYCOUNTRY_META 25640 10.77 22.39 4.35 30 T_TM2_M_HEADER_IN_MSG 22940 21.95 20.04 23.01 31 TR_XM_SpammyRelay 21057 8.07 18.39 2.36 32 XMSubLong 20706 19.56 18.09 20.38 33 XM_Multi_Part_URI 19825 15.93 17.32 15.16 34 TR_XM_SpammyWords2 19705 6.66 17.21 0.83 35 RCVD_IN_BL_SPAMCOP_NET 18359 6.14 16.04 0.66 36 TR_MAX_INTL_RELAY 18106 10.54 15.81 7.63 37 XM_B_Unsub 17397 10.50 15.20 7.90 38 TR_XM_BayesUnsub 16697 9.55 14.58 6.76 39 UNPARSEABLE_RELAY 16449 12.68 14.37 11.74 40 TR_XM_SPAMCOP 16440 5.45 14.36 0.52 41 RELAYCOUNTRY_CA 16334 6.38 14.27 2.03 42 LOTS_OF_MONEY 16246 8.96 14.19 6.06 43 XM_B_SpammyWords3 15794 8.28 13.79 5.24 44 TR_XM_SpammyWords4 15001 7.51 13.10 4.43 45 BOTNET_IPINHOSTNAME 12784 7.49 11.17 5.46 46 RCVD_IN_MSPIKE_H3 12293 7.40 10.74 5.56 47 RCVD_IN_MSPIKE_WL 12293 7.40 10.74 5.56 48 XMBody_17 11157 4.20 9.74 1.13 49 BAYES_80 10875 6.20 9.50 4.38 50 FSL_BULK_SIG 9417 6.28 8.23 5.20 51 TR_XM_UnparsRelay 9225 4.10 8.06 1.91 52 BOTNET 9175 3.76 8.01 1.41 53 BAYES_60 9057 10.38 7.91 11.74 54 XM_UncommonTLD01 7600 5.15 6.64 4.33 55 HTML_IMAGE_RATIO_02 7517 6.43 6.57 6.35 56 XM_Body_Dirty_Words 7038 4.35 6.15 3.36 57 XM_OfRef6 6989 2.98 6.10 1.26 58 BAYES_95 6870 4.23 6.00 3.25 59 UNTRUSTED_Relay 6844 3.05 5.98 1.43 60 XM_Evil_Numbers_Gen 6763 7.33 5.91 8.11 61 XMSubMetaSx_00 6537 4.35 5.71 3.60 62 MPART_ALT_DIFF 6353 4.67 5.55 4.18 63 T_FILL_THIS_FORM_SHORT 6338 2.68 5.54 1.10 64 XM_H_GMP 5775 6.54 5.04 7.36 65 XM_SPF_SoftFail 5743 3.31 5.02 2.36 66 DKIM_INVALID 5701 2.77 4.98 1.55 67 LotsOfNums_01 5270 6.77 4.60 7.97 68 TR_XM_SpammyWords5 5219 2.67 4.56 1.63 69 HTML_IMAGE_RATIO_08 5183 2.67 4.53 1.64 70 XM_B_Investor 5011 2.39 4.38 1.30 71 TooManyTo_001 4994 5.59 4.36 6.27 72 HTML_IMAGE_RATIO_06 4704 3.07 4.11 2.49 73 TR_XM_BayesRelay 4673 1.45 4.08 0.00 74 HTML_IMAGE_RATIO_04 4545 3.79 3.97 3.68 75 TR_LOTS_OF_MONEY3 4498 1.76 3.93 0.56 76 XM_H_Long_From01 4466 4.75 3.90 5.22 77 XMNumbers 4461 3.80 3.90 3.74 78 FONT_INVIS_LONG_LINE 4425 1.42 3.86 0.06 79 TM2_M_URI_OPT_OUT 4396 3.12 3.84 2.73 80 XMStrtUSub 4324 5.46 3.78 6.39 81 XMSexyCombo_05 4172 2.35 3.64 1.64 82 T_XMDrugObfuBody_14 4172 2.29 3.64 1.55 83 TR_XM_FormFill 4103 1.47 3.58 0.30 84 MIME_HTML_MOSTLY 3991 3.02 3.49 2.77 85 RCVD_IN_VALIDITY_SAFE 3967 6.67 3.46 8.44 86 TR_XM_PhishingBody 3895 2.30 3.40 1.69 87 XM_B_SEO 3827 1.93 3.34 1.15 88 XM_B_Phish_Phrases 3825 3.29 3.34 3.26 89 SUBJ_ALL_CAPS 3687 1.74 3.22 0.92 90 SpammyFromTLD_01 3657 1.52 3.19 0.60 91 XMBrknScrpt_02 3603 1.72 3.15 0.93 92 TM2_M_VERY_LONG_WORD 3601 1.94 3.15 1.27 93 T_XMHurry_00 3554 1.61 3.10 0.78 94 XM_CamelCaseFrm001 3550 4.00 3.10 4.50 95 MIME_HTML_ONLY_MULTI 3549 2.55 3.10 2.24 96 RCVD_IN_VALIDITY_CERTIFIED 3283 5.35 2.87 6.72 97 USER_IN_DEF_DKIM_WL 3255 12.99 2.84 18.59 98 TR_XM_SEO4 3216 1.46 2.81 0.71 99 T_XMDrugObfuBody_08 3185 1.81 2.78 1.27 100 HOSTED_IMG_MULTI_PUB_01 3104 0.98 2.71 0.02 101 XM_B_SpammyTLD 3068 2.43 2.68 2.29 102 XMDiploma_00 2970 2.12 2.59 1.87 103 XM_UB50 2926 1.33 2.56 0.66 104 XM_URI_RBL 2785 0.97 2.43 0.15 105 TR_XM_NoHeaderRelay 2703 0.91 2.36 0.11 106 ALL_TRUSTED 2697 13.38 2.36 19.47 107 T_TooManySym_01 2646 5.21 2.31 6.81 108 TR_XM_INV_DKIM 2591 0.84 2.26 0.06 109 FROM_EXCESS_BASE64 2520 2.22 2.20 2.23 110 RELAYCOUNTRY_AU 2340 1.29 2.04 0.88 111 HK_RANDOM_REPLYTO 2312 0.81 2.02 0.14 112 XM_B_SpammyWords4 2264 1.22 1.98 0.80 113 TR_XM_PHPForged 2134 0.80 1.86 0.22 114 AC_BR_BONANZA 2083 0.70 1.82 0.08 115 TR_XM_PHPDW 2051 0.77 1.79 0.21 116 TR_XM_FormFill2 2028 0.77 1.77 0.22 117 XM_B_Unsub2 2026 1.40 1.77 1.20 118 HTML_TAG_BALANCE_BODY 2010 1.05 1.76 0.66 119 XM_H_PHPOS 2007 0.75 1.75 0.20 120 SpammyFromTLD_02 1953 0.75 1.71 0.23 121 T_REMOTE_IMAGE 1924 2.78 1.68 3.39 122 TR_Mismatch_TLD_02 1873 0.62 1.64 0.06 123 URI_TRY_3LD 1868 1.05 1.63 0.72 124 MIME_QP_LONG_LINE 1863 3.26 1.63 4.16 125 RCVD_IN_VALIDITY_RPBL 1848 0.63 1.61 0.09 126 BOTNET_NORDNS 1773 0.56 1.55 0.01 127 XMStockSpam_06 1733 1.12 1.51 0.91 128 XMSubMetaI_00 1727 1.20 1.51 1.03 129 TR_Caps_n_Bayes_99 1690 0.54 1.48 0.02 130 URIBL_DBL_SPAM 1629 0.52 1.42 0.02 131 XM_HighProb1 1625 0.51 1.42 0.00 132 XM_DIRTYINTL 1597 0.58 1.39 0.13 133 THIS_AD 1584 0.82 1.38 0.51 134 BAYES_40 1515 2.91 1.32 3.78 135 PLING_QUERY 1486 0.63 1.30 0.26 136 TR_XM_InvalidRelay 1461 0.47 1.28 0.02 137 XMPhish30 1438 0.84 1.26 0.60 138 XM_DK_Undo_01 1430 1.61 1.25 1.81 139 XM_ProductURIs 1387 0.86 1.21 0.66 140 URI_HEX 1368 1.07 1.19 1.00 141 KHOP_HELO_FCRDNS 1367 0.90 1.19 0.74 142 XM_Combo_Sbj 1359 0.61 1.19 0.30 143 TooManyTo_002 1345 1.42 1.17 1.56 144 XMBdyGiftCard01 1332 1.31 1.16 1.40 145 T_STY_INVIS_DIRECT 1328 0.76 1.16 0.53 146 HTML_MIME_NO_HTML_TAG 1318 1.23 1.15 1.27 147 MAILING_LIST_MULTI 1294 1.71 1.13 2.03 148 URI_NOVOWEL 1290 0.98 1.13 0.90 149 DKIM_ADSP_CUSTOM_MED 1282 1.03 1.12 0.98 150 XM_SendGrid 1263 1.11 1.10 1.12 151 TooManyTo_003 1249 0.87 1.09 0.75 152 XMReplyNow 1244 0.53 1.09 0.22 153 DKIM_ADSP_NXDOMAIN 1225 0.62 1.07 0.38 154 XM_OfRef7 1219 0.46 1.06 0.12 155 TooManyTo_004 1215 0.75 1.06 0.57 156 BAYES_20 1212 2.14 1.06 2.74 157 DIET_1 1201 0.54 1.05 0.26 158 RCVD_IN_PSBL 1198 0.60 1.05 0.36 159 RELAYCOUNTRY_RU 1184 0.38 1.03 0.02 160 TooManyTo_005 1178 0.68 1.03 0.49 161 XMGenDplmaNmb 1178 1.00 1.03 0.98 162 NML_ADSP_CUSTOM_MED 1170 0.84 1.02 0.74 163 ANY_BOUNCE_MESSAGE 1138 4.27 0.99 6.08 164 BOUNCE_MESSAGE 1136 4.27 0.99 6.08 165 T_XMDrugObfuBody_00 1132 0.75 0.99 0.61 166 TR_Mismatch_TLD_01 1129 0.56 0.99 0.33 167 LongTLD 1110 0.45 0.97 0.17 168 XM_UB60 1096 0.38 0.96 0.06 169 XM_H_PHPMailer 1084 0.78 0.95 0.70 170 HTML_FONT_FACE_BAD 1078 0.56 0.94 0.35 171 T_XMDrugObfuBody_10 1077 0.35 0.94 0.02 172 TR_XM_Spammywords 1051 0.40 0.92 0.11 173 XM_S_SpammyWords 1051 0.40 0.92 0.11 174 XM_UB99 1011 0.32 0.88 0.00 175 TR_Symld_Words 994 1.09 0.87 1.20 176 RDNS_DYNAMIC 991 0.52 0.87 0.33 177 XMSexyCombo_01 989 0.41 0.86 0.15 178 TM2_M_OBFU_COMMENT 985 0.54 0.86 0.37 179 XMHTMLBadTable_001 981 0.48 0.86 0.27 180 AC_HTML_NONSENSE_TAGS 970 0.31 0.85 0.02 181 XM_B_COPY_HTML 950 0.85 0.83 0.87 182 SHOPIFY_IMG_NOT_RCVD_SFY 940 0.69 0.82 0.62 183 TR_XM_DK_SendGrid 938 0.79 0.82 0.78 184 TR_XM_Base64_L1 932 0.42 0.81 0.20 185 FORGED_GMAIL_RCVD 930 0.74 0.81 0.70 186 XMPhish14 923 0.57 0.81 0.44 187 XMClaimOffer 911 0.50 0.80 0.34 188 HDRS_MISSP 910 0.29 0.79 0.01 189 MPART_ALT_DIFF_COUNT 906 0.69 0.79 0.64 190 XM_UB80 901 0.29 0.79 0.01 191 TVD_RCVD_IP 894 1.81 0.78 2.38 192 HTML_TEXT_INVISIBLE_STYLE 891 0.46 0.78 0.28 193 XM_B_Phish66 887 0.45 0.77 0.27 194 PDS_OTHER_BAD_TLD 879 0.37 0.77 0.15 195 HTTPS_HTTP_MISMATCH 870 0.53 0.76 0.40 196 T_TooManySym_02 868 2.54 0.76 3.52 197 GOOG_STO_NOIMG_HTML 868 0.28 0.76 0.01 198 TR_XM_Base64_M1 864 0.92 0.75 1.01 199 XM_H_Long_From02 859 1.00 0.75 1.14 200 TR_MetaPhish_Combo_01 848 0.75 0.74 0.76 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 206284 99.63 99.73 99.58 2 HTML_MESSAGE 165292 85.55 95.97 79.79 3 RELAYCOUNTRY_US 158971 76.48 76.01 76.74 4 DKIM_SIGNED 155320 80.69 91.01 74.98 5 XM_DK_Pass 153118 78.72 87.42 73.92 6 DKIM_VALID 152107 77.91 86.03 73.43 7 XM_B_Unicode 141164 74.08 84.80 68.15 8 DKIM_VALID_AU 130556 63.53 64.44 63.02 9 DCC_CHECK_NEGATIVE 124099 47.64 25.44 59.91 10 BAYES_50 118679 48.06 31.36 57.29 11 XMListUnsubscribeExists 112139 61.28 74.22 54.13 12 XM_B_SpammyWords 90832 54.36 73.37 43.85 13 XM_B_Unicode3 87860 42.58 42.87 42.41 14 DCC_CHECK 82998 52.34 74.54 40.07 15 HTML_FONT_LOW_CONTRAST 65680 33.24 36.02 31.71 16 RCVD_IN_MSPIKE_H2 63976 31.47 32.52 30.88 17 LOC_TINY_FONT_1 59133 32.32 39.14 28.55 18 DKIM_VALID_EF 57731 29.02 31.11 27.87 19 FVGT_m_MULTI_ODD 52576 27.91 32.48 25.38 20 T_TM2_M_HEADER_IN_MSG 47670 21.95 20.04 23.01 21 XMSubLong 42215 19.56 18.09 20.38 22 XM_B_SpammyWords2 41433 27.87 42.10 20.00 23 ALL_TRUSTED 40326 13.38 2.36 19.47 24 T_KAM_HTML_FONT_INVALID 40215 22.73 28.73 19.41 25 MIME_HTML_ONLY 39764 23.23 30.54 19.20 26 USER_IN_DEF_DKIM_WL 38515 12.99 2.84 18.59 27 XM_Multi_Part_URI 31413 15.93 17.32 15.16 28 TR_XM_DK_Unsub 30994 18.17 23.98 14.96 29 BAYES_60 24328 10.38 7.91 11.74 30 UNPARSEABLE_RELAY 24321 12.68 14.37 11.74 31 XM_DKIMWhitelistDomains 21150 6.60 0.06 10.21 32 RCVD_IN_VALIDITY_SAFE 17484 6.67 3.46 8.44 33 XM_Evil_Numbers_Gen 16800 7.33 5.91 8.11 34 LotsOfNums_01 16504 6.77 4.60 7.97 35 XM_B_Unsub 16363 10.50 15.20 7.90 36 TR_MAX_INTL_RELAY 15805 10.54 15.81 7.63 37 XM_H_GMP 15249 6.54 5.04 7.36 38 BAYES_00 14897 4.79 0.45 7.19 39 XM_DK_Undo_02 14706 22.62 50.71 7.10 40 T_TooManySym_01 14100 5.21 2.31 6.81 41 BAYES_99 14054 19.30 41.94 6.78 42 TR_XM_BayesUnsub 14012 9.55 14.58 6.76 43 RCVD_IN_VALIDITY_CERTIFIED 13912 5.35 2.87 6.72 44 XMStrtUSub 13243 5.46 3.78 6.39 45 HTML_IMAGE_RATIO_02 13155 6.43 6.57 6.35 46 TooManyTo_001 12994 5.59 4.36 6.27 47 ANY_BOUNCE_MESSAGE 12598 4.27 0.99 6.08 48 BOUNCE_MESSAGE 12595 4.27 0.99 6.08 49 LOTS_OF_MONEY 12563 8.96 14.19 6.06 50 TR_XM_DK_Bayes 12465 3.99 0.31 6.02 51 TR_XM_DK_Bayes1 12390 3.96 0.31 5.98 52 RCVD_IN_MSPIKE_H3 11516 7.40 10.74 5.56 53 RCVD_IN_MSPIKE_WL 11516 7.40 10.74 5.56 54 BOTNET_IPINHOSTNAME 11317 7.49 11.17 5.46 55 XM_B_SpammyWords3 10845 8.28 13.79 5.24 56 TR_XM_DK_Bayes2 10838 3.44 0.21 5.23 57 XM_H_Long_From01 10803 4.75 3.90 5.22 58 FSL_BULK_SIG 10773 6.28 8.23 5.20 59 IN_ZIMBRA_NJ_WHITELIST 10720 3.35 0.06 5.17 60 BAYES_999 10026 15.09 33.65 4.84 61 SCC_BODY_URI_ONLY 9362 3.14 0.65 4.52 62 XM_CamelCaseFrm001 9314 4.00 3.10 4.50 63 TR_XM_SpammyWords4 9168 7.51 13.10 4.43 64 BAYES_80 9066 6.20 9.50 4.38 65 RELAYCOUNTRY_META 9002 10.77 22.39 4.35 66 XM_UncommonTLD01 8965 5.15 6.64 4.33 67 MPART_ALT_DIFF 8666 4.67 5.55 4.18 68 MIME_QP_LONG_LINE 8623 3.26 1.63 4.16 69 BAYES_40 7830 2.91 1.32 3.78 70 XMNumbers 7751 3.80 3.90 3.74 71 HTML_IMAGE_RATIO_04 7632 3.79 3.97 3.68 72 XMSubMetaSx_00 7448 4.35 5.71 3.60 73 T_TooManySym_02 7301 2.54 0.76 3.52 74 T_REMOTE_IMAGE 7025 2.78 1.68 3.39 75 TO_MALFORMED 7006 2.18 0.01 3.38 76 XM_Body_Dirty_Words 6962 4.35 6.15 3.36 77 INVALID_MSGID 6922 2.21 0.15 3.34 78 XM_B_Phish_Phrases 6763 3.29 3.34 3.26 79 BAYES_95 6734 4.23 6.00 3.25 80 TR_XM_DKIM_Undo 6226 16.06 39.69 3.01 81 BAYES_05 5832 1.97 0.44 2.82 82 MIME_HTML_MOSTLY 5736 3.02 3.49 2.77 83 BAYES_20 5676 2.14 1.06 2.74 84 TM2_M_URI_OPT_OUT 5645 3.12 3.84 2.73 85 TR_DCC_Bayes_99 5638 12.67 30.68 2.72 86 XM_PDF 5337 1.77 0.30 2.58 87 HTML_IMAGE_RATIO_06 5164 3.07 4.11 2.49 88 TVD_RCVD_IP 4932 1.81 0.78 2.38 89 RCVD_IN_IADB_LISTED 4930 1.78 0.69 2.38 90 XM_SPF_SoftFail 4897 3.31 5.02 2.36 91 TR_XM_SpammyRelay 4891 8.07 18.39 2.36 92 XM_B_SpammyTLD 4743 2.43 2.68 2.29 93 MIME_HTML_ONLY_MULTI 4639 2.55 3.10 2.24 94 FROM_EXCESS_BASE64 4624 2.22 2.20 2.23 95 RCVD_IN_IADB_SPF 4512 1.61 0.58 2.18 96 MAILING_LIST_MULTI 4209 1.71 1.13 2.03 97 RELAYCOUNTRY_CA 4195 6.38 14.27 2.03 98 RCVD_IN_IADB_SENDERID 4152 1.48 0.53 2.00 99 RCVD_IN_IADB_DK 4076 1.46 0.53 1.97 100 XMBSHREFv2 4021 1.35 0.28 1.94 101 TR_XM_UnparsRelay 3962 4.10 8.06 1.91 102 XMDiploma_00 3864 2.12 2.59 1.87 103 XM_DK_Undo_01 3757 1.61 1.25 1.81 104 TR_XM_PhishingBody 3491 2.30 3.40 1.69 105 TVD_SPACE_RATIO 3463 1.11 0.09 1.67 106 HTML_IMAGE_RATIO_08 3401 2.67 4.53 1.64 107 XMSexyCombo_05 3391 2.35 3.64 1.64 108 TR_XM_SpammyWords5 3379 2.67 4.56 1.63 109 IN_HORDE_ADDRESS_BOOK 3279 1.04 0.06 1.58 110 TooManyTo_002 3233 1.42 1.17 1.56 111 DKIM_INVALID 3213 2.77 4.98 1.55 112 T_XMDrugObfuBody_14 3203 2.29 3.64 1.55 113 RCVD_IN_IADB_VOUCHED 3007 1.09 0.43 1.45 114 UNTRUSTED_Relay 2963 3.05 5.98 1.43 115 BOTNET 2918 3.76 8.01 1.41 116 XMBdyGiftCard01 2897 1.31 1.16 1.40 117 XMGappySubj_01 2783 0.92 0.14 1.34 118 XM_B_Investor 2683 2.39 4.38 1.30 119 TM2_M_VERY_LONG_WORD 2640 1.94 3.15 1.27 120 T_XMDrugObfuBody_08 2632 1.81 2.78 1.27 121 HTML_MIME_NO_HTML_TAG 2632 1.23 1.15 1.27 122 T_TooManySym_03 2617 0.91 0.28 1.26 123 XM_OfRef6 2601 2.98 6.10 1.26 124 TR_Symld_Words 2496 1.09 0.87 1.20 125 XM_B_Unsub2 2476 1.40 1.77 1.20 126 XM_B_SEO 2391 1.93 3.34 1.15 127 XM_H_Long_From02 2368 1.00 0.75 1.14 128 XM_GoogleGroups 2343 0.89 0.47 1.13 129 XMBody_17 2337 4.20 9.74 1.13 130 XM_SendGrid 2311 1.11 1.10 1.12 131 T_FILL_THIS_FORM_SHORT 2283 2.68 5.54 1.10 132 XMGappySubj_02 2272 0.72 0.04 1.10 133 XMSubMetaI_00 2124 1.20 1.51 1.03 134 TR_XM_Base64_M1 2083 0.92 0.75 1.01 135 URI_HEX 2073 1.07 1.19 1.00 136 RCVD_IN_IADB_OPTIN 2062 0.74 0.27 1.00 137 DKIM_ADSP_CUSTOM_MED 2040 1.03 1.12 0.98 138 XMGenDplmaNmb 2035 1.00 1.03 0.98 139 XMBrknScrpt_02 1927 1.72 3.15 0.93 140 SUBJ_ALL_CAPS 1909 1.74 3.22 0.92 141 XM_RXBody 1906 0.67 0.23 0.92 142 XMStockSpam_06 1876 1.12 1.51 0.91 143 URI_NOVOWEL 1855 0.98 1.13 0.90 144 RELAYCOUNTRY_AU 1813 1.29 2.04 0.88 145 XM_B_COPY_HTML 1798 0.85 0.83 0.87 146 TR_XM_SpammyWords2 1727 6.66 17.21 0.83 147 XM_B_SpammyWords4 1664 1.22 1.98 0.80 148 USER_IN_WHITELIST 1630 0.51 0.00 0.79 149 USER_IN_WELCOMELIST 1630 0.51 0.00 0.79 150 T_XMHurry_00 1625 1.61 3.10 0.78 151 XMBody_95 1622 0.54 0.09 0.78 152 TR_XM_DK_SendGrid 1615 0.79 0.82 0.78 153 TR_MetaPhish_Combo_01 1574 0.75 0.74 0.76 154 TooManyTo_003 1549 0.87 1.09 0.75 155 KHOP_HELO_FCRDNS 1541 0.90 1.19 0.74 156 NML_ADSP_CUSTOM_MED 1535 0.84 1.02 0.74 157 URI_TRY_3LD 1498 1.05 1.63 0.72 158 TR_XM_SEO4 1477 1.46 2.81 0.71 159 XM_B_FormFill 1460 0.49 0.09 0.70 160 FORGED_GMAIL_RCVD 1451 0.74 0.81 0.70 161 XM_H_PHPMailer 1440 0.78 0.95 0.70 162 XM_B_DNDMA 1403 0.66 0.63 0.68 163 RCVD_IN_BL_SPAMCOP_NET 1376 6.14 16.04 0.66 164 XM_ProductURIs 1367 0.86 1.21 0.66 165 XM_UB50 1366 1.33 2.56 0.66 166 HTML_TAG_BALANCE_BODY 1363 1.05 1.76 0.66 167 MPART_ALT_DIFF_COUNT 1324 0.69 0.79 0.64 168 SHOPIFY_IMG_NOT_RCVD_SFY 1278 0.69 0.82 0.62 169 T_XMDrugObfuBody_00 1271 0.75 0.99 0.61 170 XMPhish30 1250 0.84 1.26 0.60 171 SpammyFromTLD_01 1235 1.52 3.19 0.60 172 FILL_THIS_FORM 1225 0.51 0.35 0.59 173 XM_B_REG_HTML 1225 0.57 0.52 0.59 174 TooManyTo_004 1184 0.75 1.06 0.57 175 TR_LOTS_OF_MONEY3 1169 1.76 3.93 0.56 176 XMSubMetaSxObfu_02 1168 0.49 0.35 0.56 177 T_STY_INVIS_DIRECT 1105 0.76 1.16 0.53 178 XMNoVowels 1089 0.55 0.60 0.53 179 TR_XM_SPAMCOP 1084 5.45 14.36 0.52 180 THIS_AD 1053 0.82 1.38 0.51 181 TooManyTo_005 1011 0.68 1.03 0.49 182 XM_Ancestry_Forge 977 0.31 0.00 0.47 183 T_OBFU_PDF_ATTACH 924 0.30 0.04 0.45 184 FONT_INVIS_MSGID 916 0.44 0.43 0.44 185 XMPhish14 915 0.57 0.81 0.44 186 T_TooManySym_04 892 0.33 0.15 0.43 187 XMSubMetaSxObfu_03 883 0.50 0.64 0.43 188 XM_S_SubURI 847 0.28 0.05 0.41 189 SUBJ_DOLLARS 842 0.51 0.69 0.41 190 HTTPS_HTTP_MISMATCH 826 0.53 0.76 0.40 191 HELO_NODOT 810 0.35 0.28 0.39 192 HELO_NO_DOMAIN 809 0.35 0.28 0.39 193 T_TVD_MIME_NO_HEADERS 794 0.26 0.03 0.38 194 DKIM_ADSP_NXDOMAIN 780 0.62 1.07 0.38 195 NO_DNS_FOR_FROM 776 0.40 0.45 0.37 196 XMOemUri 775 0.28 0.10 0.37 197 HTML_IMAGE_ONLY_20 770 0.39 0.42 0.37 198 TM2_M_OBFU_COMMENT 767 0.54 0.86 0.37 199 XMSubGiftCard1 758 0.26 0.07 0.37 200 XMSolicitRefs_0 749 0.48 0.70 0.36 ----------------------------------------------------------------------