Email: 309418 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.17 sec Spam: 120169 Autolearn: 0 AvgScore: 14.09 AvgScanTime: 1.21 sec Ham: 189249 Autolearn: 0 AvgScore: -0.47 AvgScanTime: 1.14 sec Time Spent Running SA: 100.59 hours Time Spent Processing Spam: 40.48 hours Time Spent Processing Ham: 60.11 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 120020 99.77 99.88 99.70 2 HTML_MESSAGE 113408 88.31 94.37 84.45 3 DKIM_SIGNED 107751 83.18 89.67 79.07 4 XM_DK_Pass 104166 81.35 86.68 77.97 5 DKIM_VALID 102982 80.70 85.70 77.53 6 XM_B_Unicode 102166 77.61 85.02 72.91 7 RELAYCOUNTRY_US 94139 80.76 78.34 82.29 8 DCC_CHECK 90043 54.17 74.93 40.98 9 XMListUnsubscribeExists 89664 64.44 74.61 57.98 10 XM_B_SpammyWords 89244 57.69 74.27 47.17 11 DKIM_VALID_AU 78105 65.78 65.00 66.27 12 XM_DK_Undo_02 58805 23.18 48.94 6.83 13 XM_B_SpammyWords2 53339 30.60 44.39 21.85 14 BAYES_99 49819 19.31 41.46 5.24 15 XM_B_Unicode3 48691 43.23 40.52 44.94 16 LOC_TINY_FONT_1 46057 34.20 38.33 31.59 17 TR_XM_DKIM_Undo 45685 16.67 38.02 3.11 18 HTML_FONT_LOW_CONTRAST 42467 34.04 35.34 33.21 19 RCVD_IN_MSPIKE_H2 41275 33.11 34.35 32.33 20 BAYES_999 39565 15.26 32.92 4.04 21 FVGT_m_MULTI_ODD 39376 29.23 32.77 26.98 22 BAYES_50 38266 48.77 31.84 59.53 23 TR_DCC_Bayes_99 36262 13.12 30.18 2.28 24 T_KAM_HTML_FONT_INVALID 35160 24.46 29.26 21.42 25 DKIM_VALID_EF 34799 29.54 28.96 29.91 26 MIME_HTML_ONLY 32917 23.18 27.39 20.50 27 DCC_CHECK_NEGATIVE 30115 45.81 25.06 58.99 28 TR_XM_DK_Unsub 27749 19.20 23.09 16.73 29 T_TM2_M_HEADER_IN_MSG 27244 23.03 22.67 23.25 30 RELAYCOUNTRY_META 26941 11.25 22.42 4.16 31 TR_XM_SpammyRelay 22179 8.72 18.46 2.53 32 XMSubLong 21492 20.33 17.88 21.88 33 TR_XM_SpammyWords2 21071 7.31 17.53 0.81 34 XM_Multi_Part_URI 20840 16.67 17.34 16.24 35 RCVD_IN_BL_SPAMCOP_NET 19602 6.95 16.31 1.01 36 XM_B_SpammyWords3 19571 10.50 16.29 6.83 37 TR_MAX_INTL_RELAY 18684 10.54 15.55 7.36 38 LOTS_OF_MONEY 17701 9.40 14.73 6.02 39 TR_XM_SpammyWords4 16299 7.73 13.56 4.02 40 TR_XM_SPAMCOP 16242 5.60 13.52 0.57 41 XM_B_Unsub 15353 10.27 12.78 8.68 42 RELAYCOUNTRY_CA 15207 6.13 12.65 1.98 43 UNPARSEABLE_RELAY 14968 12.14 12.46 11.94 44 TR_XM_BayesUnsub 14915 9.22 12.41 7.19 45 BOTNET_IPINHOSTNAME 14408 7.93 11.99 5.36 46 XMBody_17 12391 4.64 10.31 1.04 47 RCVD_IN_MSPIKE_H3 11627 7.30 9.68 5.79 48 RCVD_IN_MSPIKE_WL 11627 7.30 9.68 5.79 49 BAYES_80 11186 6.31 9.31 4.41 50 BOTNET 10088 3.96 8.39 1.15 51 BAYES_60 10052 10.45 8.36 11.78 52 FSL_BULK_SIG 10014 5.45 8.33 3.62 53 TR_XM_UnparsRelay 8904 3.93 7.41 1.71 54 MPART_ALT_DIFF 7757 4.97 6.46 4.03 55 XM_Body_Dirty_Words 7255 4.08 6.04 2.84 56 XM_UncommonTLD01 7192 5.17 5.98 4.66 57 XM_OfRef6 7149 2.98 5.95 1.10 58 BAYES_95 7125 4.11 5.93 2.96 59 HTML_IMAGE_RATIO_02 7119 6.02 5.92 6.09 60 UNTRUSTED_Relay 6874 3.17 5.72 1.55 61 TR_XM_SpammyWords5 6687 3.10 5.56 1.54 62 XM_Evil_Numbers_Gen 6538 6.76 5.44 7.60 63 TooManyTo_001 6528 6.10 5.43 6.52 64 XM_H_GMP 6442 6.59 5.36 7.37 65 LotsOfNums_01 6351 6.71 5.29 7.61 66 XM_B_Investor 6226 2.97 5.18 1.56 67 T_FILL_THIS_FORM_SHORT 5902 2.21 4.91 0.49 68 TR_LOTS_OF_MONEY3 5893 2.35 4.90 0.73 69 XM_SPF_SoftFail 5885 3.55 4.90 2.69 70 RCVD_IN_VALIDITY_RPBL 5771 1.99 4.80 0.21 71 HTML_IMAGE_RATIO_08 5747 3.41 4.78 2.54 72 XMStrtUSub 5641 5.14 4.69 5.43 73 HK_RANDOM_REPLYTO 5597 1.89 4.66 0.14 74 XMSubMetaSx_00 5573 4.38 4.64 4.22 75 HTML_IMAGE_RATIO_06 5370 3.20 4.47 2.39 76 T_XMDrugObfuBody_14 5011 2.82 4.17 1.96 77 FONT_INVIS_LONG_LINE 4876 1.62 4.06 0.07 78 DKIM_INVALID 4769 2.48 3.97 1.54 79 XMSexyCombo_05 4656 2.56 3.87 1.73 80 HTML_IMAGE_RATIO_04 4635 3.92 3.86 3.96 81 TR_XM_PhishingBody 4634 2.49 3.86 1.61 82 XM_B_SEO 4510 2.30 3.75 1.38 83 TR_XM_BayesRelay 4495 1.45 3.74 0.00 84 XMNumbers 4450 3.62 3.70 3.57 85 MIME_HTML_MOSTLY 4415 3.08 3.67 2.70 86 SUBJ_ALL_CAPS 4408 2.07 3.67 1.05 87 XM_H_Long_From01 4265 4.76 3.55 5.53 88 TR_XM_SEO4 4116 1.78 3.43 0.73 89 XM_B_Phish_Phrases 4079 3.29 3.39 3.23 90 TR_XM_FormFill 4035 1.32 3.36 0.02 91 RCVD_IN_VALIDITY_SAFE 3949 6.03 3.29 7.76 92 MIME_HTML_ONLY_MULTI 3872 2.55 3.22 2.13 93 XM_CamelCaseFrm001 3810 2.66 3.17 2.34 94 HOSTED_IMG_MULTI_PUB_01 3741 1.22 3.11 0.03 95 XM_UB50 3547 1.67 2.95 0.86 96 T_TooManySym_01 3504 5.31 2.92 6.82 97 USER_IN_DEF_DKIM_WL 3479 12.47 2.90 18.55 98 TM2_M_VERY_LONG_WORD 3435 2.03 2.86 1.51 99 T_XMHurry_00 3379 1.40 2.81 0.51 100 T_REMOTE_IMAGE 3146 3.31 2.62 3.75 101 RCVD_IN_VALIDITY_CERTIFIED 3133 4.91 2.61 6.36 102 XM_B_SpammyTLD 3123 2.53 2.60 2.49 103 XMBrknScrpt_02 3122 1.72 2.60 1.16 104 T_XMDrugObfuBody_08 2971 1.78 2.47 1.35 105 MIME_QP_LONG_LINE 2949 3.17 2.45 3.62 106 TM2_M_URI_OPT_OUT 2905 2.15 2.42 1.97 107 XM_B_SpammyWords4 2836 1.52 2.36 0.99 108 XM_URI_RBL 2776 1.02 2.31 0.20 109 SpammyFromTLD_01 2761 1.15 2.30 0.43 110 XMReplyNow 2718 1.10 2.26 0.36 111 AC_BR_BONANZA 2635 0.93 2.19 0.12 112 DKIM_ADSP_NXDOMAIN 2593 1.11 2.16 0.45 113 TR_Mismatch_TLD_02 2573 0.87 2.14 0.06 114 TR_XM_PHPForged 2521 0.98 2.10 0.28 115 ANY_BOUNCE_MESSAGE 2519 3.25 2.10 3.99 116 BOUNCE_MESSAGE 2519 3.25 2.10 3.99 117 ALL_TRUSTED 2482 9.25 2.07 13.81 118 TR_XM_PHPDW 2458 0.95 2.05 0.26 119 TR_XM_FormFill2 2442 0.95 2.03 0.26 120 XM_H_PHPOS 2414 0.93 2.01 0.25 121 TR_XM_INV_DKIM 2410 0.83 2.01 0.08 122 XMDiploma_00 2351 1.67 1.96 1.49 123 RELAYCOUNTRY_AU 2350 1.11 1.96 0.58 124 URI_TRY_3LD 2346 1.31 1.95 0.90 125 T_XMDrugObfuBody_00 2308 1.21 1.92 0.76 126 URIBL_DBL_SPAM 2284 0.75 1.90 0.02 127 TR_Caps_n_Bayes_99 2284 0.75 1.90 0.02 128 FROM_EXCESS_BASE64 2256 2.07 1.88 2.19 129 KHOP_HELO_FCRDNS 2090 1.39 1.74 1.17 130 RCVD_IN_PSBL 2061 1.11 1.72 0.73 131 TR_XM_NoHeaderRelay 2020 0.72 1.68 0.11 132 BOTNET_NORDNS 2001 0.65 1.67 0.01 133 XMStockSpam_06 1953 1.05 1.63 0.68 134 XM_B_Unsub2 1941 1.38 1.62 1.23 135 DKIM_ADSP_CUSTOM_MED 1798 1.09 1.50 0.83 136 HTML_TAG_BALANCE_BODY 1733 0.98 1.44 0.68 137 NML_ADSP_CUSTOM_MED 1708 0.89 1.42 0.55 138 XM_HighProb1 1695 0.55 1.41 0.00 139 SpammyFromTLD_02 1643 0.68 1.37 0.24 140 RDNS_DYNAMIC 1606 0.75 1.34 0.38 141 TooManyTo_002 1586 1.62 1.32 1.80 142 XM_B_Phish66 1550 0.65 1.29 0.24 143 HTTPS_HTTP_MISMATCH 1547 0.83 1.29 0.54 144 TooManyTo_003 1494 0.97 1.24 0.79 145 XM_SendGrid 1489 1.25 1.24 1.26 146 BAYES_40 1471 2.98 1.22 4.09 147 TooManyTo_004 1454 0.85 1.21 0.62 148 XM_DK_Undo_01 1444 1.48 1.20 1.66 149 XMBdyGiftCard01 1438 1.09 1.20 1.03 150 TooManyTo_005 1424 0.79 1.18 0.53 151 FORGED_GMAIL_RCVD 1418 0.82 1.18 0.58 152 XMPhish30 1406 0.90 1.17 0.72 153 XMBounce_01 1384 0.45 1.15 0.01 154 MAILING_LIST_MULTI 1383 1.69 1.15 2.03 155 THIS_AD 1377 0.99 1.15 0.89 156 MPART_ALT_DIFF_COUNT 1376 0.94 1.15 0.81 157 HTML_MIME_NO_HTML_TAG 1327 1.25 1.10 1.34 158 T_STY_INVIS_DIRECT 1321 0.72 1.10 0.48 159 TR_MetaPhish_Combo_01 1290 0.84 1.07 0.69 160 TR_XM_InvalidRelay 1286 0.43 1.07 0.02 161 T_XMDrugObfuBody_10 1214 0.41 1.01 0.02 162 AC_HTML_NONSENSE_TAGS 1187 0.40 0.99 0.02 163 XM_RXBody 1186 0.53 0.99 0.24 164 TR_XM_DK_SendGrid 1182 0.89 0.98 0.82 165 XMMoneyMeta_00 1167 0.49 0.97 0.18 166 XMSlimDrugH 1161 0.57 0.97 0.32 167 XM_UB60 1152 0.41 0.96 0.06 168 XM_B_COPY_HTML 1135 1.10 0.94 1.20 169 XMGenDplmaNmb 1113 0.68 0.93 0.53 170 URI_NOVOWEL 1101 1.03 0.92 1.10 171 RELAYCOUNTRY_CN 1078 0.39 0.90 0.07 172 PLING_QUERY 1073 0.74 0.89 0.64 173 XMSexyCombo_01 1065 0.48 0.89 0.22 174 URI_HEX 1057 0.90 0.88 0.91 175 SCC_BODY_URI_ONLY 1055 2.04 0.88 2.78 176 DIET_1 1052 0.54 0.88 0.33 177 XM_DIRTYINTL 1050 0.38 0.87 0.07 178 XM_H_PHPMailer 1046 0.79 0.87 0.74 179 BAYES_20 1019 2.02 0.85 2.77 180 TR_XM_Base64_M1 993 0.90 0.83 0.95 181 TR_Mismatch_TLD_01 987 0.47 0.82 0.25 182 HTML_FONT_FACE_BAD 981 0.67 0.82 0.58 183 SHOPIFY_IMG_NOT_RCVD_SFY 973 0.67 0.81 0.59 184 XM_DrOz_From 971 0.36 0.81 0.07 185 XMNoVowels 966 0.69 0.80 0.61 186 TM2_M_OBFU_COMMENT 957 0.51 0.80 0.33 187 ADVANCE_FEE_5_NEW_MONEY 949 0.31 0.79 0.00 188 XMPhish14 935 0.57 0.78 0.44 189 XM_H_Undi_Recip 908 0.37 0.76 0.12 190 TO_MALFORMED 907 2.48 0.75 3.58 191 RELAYCOUNTRY_MX 899 0.29 0.75 0.00 192 TR_Symld_Words 896 1.03 0.75 1.21 193 XM_OfRef7 891 0.40 0.74 0.19 194 PDS_OTHER_BAD_TLD 885 0.37 0.74 0.13 195 XM_UB99 881 0.29 0.73 0.00 196 XM_S_SpammyWords 880 0.47 0.73 0.31 197 TR_XM_Spammywords 880 0.47 0.73 0.31 198 XM_B_REG_HTML 872 0.56 0.73 0.46 199 RCVD_IN_IADB_LISTED 855 1.77 0.71 2.44 200 XMFrmHeader_28 850 0.27 0.71 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 188672 99.77 99.88 99.70 2 HTML_MESSAGE 159827 88.31 94.37 84.45 3 RELAYCOUNTRY_US 155738 80.76 78.34 82.29 4 DKIM_SIGNED 149631 83.18 89.67 79.07 5 XM_DK_Pass 147559 81.35 86.68 77.97 6 DKIM_VALID 146719 80.70 85.70 77.53 7 XM_B_Unicode 137975 77.61 85.02 72.91 8 DKIM_VALID_AU 125421 65.78 65.00 66.27 9 BAYES_50 112652 48.77 31.84 59.53 10 DCC_CHECK_NEGATIVE 111643 45.81 25.06 58.99 11 XMListUnsubscribeExists 109730 64.44 74.61 57.98 12 XM_B_SpammyWords 89272 57.69 74.27 47.17 13 XM_B_Unicode3 85055 43.23 40.52 44.94 14 DCC_CHECK 77560 54.17 74.93 40.98 15 HTML_FONT_LOW_CONTRAST 62859 34.04 35.34 33.21 16 RCVD_IN_MSPIKE_H2 61182 33.11 34.35 32.33 17 LOC_TINY_FONT_1 59777 34.20 38.33 31.59 18 DKIM_VALID_EF 56607 29.54 28.96 29.91 19 FVGT_m_MULTI_ODD 51063 29.23 32.77 26.98 20 T_TM2_M_HEADER_IN_MSG 44001 23.03 22.67 23.25 21 XMSubLong 41404 20.33 17.88 21.88 22 XM_B_SpammyWords2 41346 30.60 44.39 21.85 23 T_KAM_HTML_FONT_INVALID 40530 24.46 29.26 21.42 24 MIME_HTML_ONLY 38799 23.18 27.39 20.50 25 USER_IN_DEF_DKIM_WL 35104 12.47 2.90 18.55 26 TR_XM_DK_Unsub 31662 19.20 23.09 16.73 27 XM_Multi_Part_URI 30733 16.67 17.34 16.24 28 ALL_TRUSTED 26142 9.25 2.07 13.81 29 UNPARSEABLE_RELAY 22603 12.14 12.46 11.94 30 BAYES_60 22295 10.45 8.36 11.78 31 XM_DKIMWhitelistDomains 19177 6.21 0.04 10.13 32 XM_B_Unsub 16433 10.27 12.78 8.68 33 RCVD_IN_VALIDITY_SAFE 14694 6.03 3.29 7.76 34 BAYES_00 14467 4.90 0.58 7.64 35 LotsOfNums_01 14409 6.71 5.29 7.61 36 XM_Evil_Numbers_Gen 14380 6.76 5.44 7.60 37 XM_H_GMP 13941 6.59 5.36 7.37 38 TR_MAX_INTL_RELAY 13937 10.54 15.55 7.36 39 TR_XM_BayesUnsub 13608 9.22 12.41 7.19 40 XM_B_SpammyWords3 12922 10.50 16.29 6.83 41 XM_DK_Undo_02 12918 23.18 48.94 6.83 42 T_TooManySym_01 12912 5.31 2.92 6.82 43 TooManyTo_001 12345 6.10 5.43 6.52 44 RCVD_IN_VALIDITY_CERTIFIED 12045 4.91 2.61 6.36 45 TR_XM_DK_Bayes 12000 4.04 0.43 6.34 46 TR_XM_DK_Bayes1 11909 4.01 0.43 6.29 47 HTML_IMAGE_RATIO_02 11521 6.02 5.92 6.09 48 LOTS_OF_MONEY 11399 9.40 14.73 6.02 49 RCVD_IN_MSPIKE_WL 10952 7.30 9.68 5.79 50 RCVD_IN_MSPIKE_H3 10952 7.30 9.68 5.79 51 TR_XM_DK_Bayes2 10570 3.55 0.33 5.59 52 XM_H_Long_From01 10463 4.76 3.55 5.53 53 IN_ZIMBRA_NJ_WHITELIST 10439 3.39 0.05 5.52 54 XMStrtUSub 10272 5.14 4.69 5.43 55 BOTNET_IPINHOSTNAME 10143 7.93 11.99 5.36 56 BAYES_99 9916 19.31 41.46 5.24 57 XM_UncommonTLD01 8812 5.17 5.98 4.66 58 BAYES_80 8338 6.31 9.31 4.41 59 XMSubMetaSx_00 7988 4.38 4.64 4.22 60 RELAYCOUNTRY_META 7878 11.25 22.42 4.16 61 BAYES_40 7737 2.98 1.22 4.09 62 BAYES_999 7651 15.26 32.92 4.04 63 MPART_ALT_DIFF 7635 4.97 6.46 4.03 64 TR_XM_SpammyWords4 7604 7.73 13.56 4.02 65 BOUNCE_MESSAGE 7544 3.25 2.10 3.99 66 ANY_BOUNCE_MESSAGE 7544 3.25 2.10 3.99 67 HTML_IMAGE_RATIO_04 7488 3.92 3.86 3.96 68 T_REMOTE_IMAGE 7094 3.31 2.62 3.75 69 INVALID_MSGID 6872 2.27 0.14 3.63 70 MIME_QP_LONG_LINE 6860 3.17 2.45 3.62 71 FSL_BULK_SIG 6845 5.45 8.33 3.62 72 TO_MALFORMED 6770 2.48 0.75 3.58 73 XMNumbers 6763 3.62 3.70 3.57 74 T_TooManySym_02 6677 2.43 0.70 3.53 75 XM_B_Phish_Phrases 6112 3.29 3.39 3.23 76 TR_XM_DKIM_Undo 5882 16.67 38.02 3.11 77 BAYES_95 5596 4.11 5.93 2.96 78 XM_Body_Dirty_Words 5379 4.08 6.04 2.84 79 SCC_BODY_URI_ONLY 5265 2.04 0.88 2.78 80 BAYES_20 5237 2.02 0.85 2.77 81 MIME_HTML_MOSTLY 5115 3.08 3.67 2.70 82 XM_SPF_SoftFail 5085 3.55 4.90 2.69 83 TVD_RCVD_IP 4824 1.81 0.64 2.55 84 HTML_IMAGE_RATIO_08 4816 3.41 4.78 2.54 85 TR_XM_SpammyRelay 4793 8.72 18.46 2.53 86 XM_B_SpammyTLD 4709 2.53 2.60 2.49 87 RCVD_IN_IADB_LISTED 4623 1.77 0.71 2.44 88 HTML_IMAGE_RATIO_06 4531 3.20 4.47 2.39 89 XM_CamelCaseFrm001 4433 2.66 3.17 2.34 90 TR_DCC_Bayes_99 4322 13.12 30.18 2.28 91 XM_PDF 4296 1.48 0.24 2.27 92 RCVD_IN_IADB_SPF 4185 1.61 0.65 2.21 93 FROM_EXCESS_BASE64 4141 2.07 1.88 2.19 94 MIME_HTML_ONLY_MULTI 4033 2.55 3.22 2.13 95 MAILING_LIST_MULTI 3833 1.69 1.15 2.03 96 RCVD_IN_IADB_SENDERID 3824 1.47 0.61 2.02 97 RELAYCOUNTRY_CA 3755 6.13 12.65 1.98 98 RCVD_IN_IADB_DK 3737 1.45 0.63 1.97 99 TM2_M_URI_OPT_OUT 3735 2.15 2.42 1.97 100 T_XMDrugObfuBody_14 3712 2.82 4.17 1.96 101 XMBSHREFv2 3501 1.21 0.19 1.85 102 TooManyTo_002 3413 1.62 1.32 1.80 103 XMSexyCombo_05 3278 2.56 3.87 1.73 104 XMGappySubj_01 3256 1.08 0.07 1.72 105 TR_XM_UnparsRelay 3243 3.93 7.41 1.71 106 TVD_SPACE_RATIO 3153 1.06 0.10 1.67 107 XM_DK_Undo_01 3136 1.48 1.20 1.66 108 TR_XM_PhishingBody 3056 2.49 3.86 1.61 109 IN_HORDE_ADDRESS_BOOK 3030 1.00 0.06 1.60 110 BAYES_05 3008 1.14 0.44 1.59 111 XM_B_Investor 2958 2.97 5.18 1.56 112 UNTRUSTED_Relay 2931 3.17 5.72 1.55 113 DKIM_INVALID 2912 2.48 3.97 1.54 114 TR_XM_SpammyWords5 2911 3.10 5.56 1.54 115 RCVD_IN_IADB_VOUCHED 2854 1.05 0.32 1.51 116 TM2_M_VERY_LONG_WORD 2849 2.03 2.86 1.51 117 XMDiploma_00 2828 1.67 1.96 1.49 118 XM_B_SEO 2621 2.30 3.75 1.38 119 T_XMDrugObfuBody_08 2549 1.78 2.47 1.35 120 HTML_MIME_NO_HTML_TAG 2545 1.25 1.10 1.34 121 XMGappySubj_02 2539 0.83 0.02 1.34 122 XM_SendGrid 2388 1.25 1.24 1.26 123 XM_B_Unsub2 2333 1.38 1.62 1.23 124 XM_H_Long_From02 2323 1.00 0.65 1.23 125 TR_Symld_Words 2289 1.03 0.75 1.21 126 XM_B_COPY_HTML 2272 1.10 0.94 1.20 127 T_TooManySym_03 2232 0.81 0.24 1.18 128 KHOP_HELO_FCRDNS 2222 1.39 1.74 1.17 129 XMBrknScrpt_02 2188 1.72 2.60 1.16 130 BOTNET 2177 3.96 8.39 1.15 131 XM_GoogleGroups 2108 0.88 0.51 1.11 132 URI_NOVOWEL 2078 1.03 0.92 1.10 133 XM_OfRef6 2074 2.98 5.95 1.10 134 RCVD_IN_IADB_OPTIN 2035 0.73 0.18 1.08 135 SUBJ_ALL_CAPS 1985 2.07 3.67 1.05 136 XMBody_17 1968 4.64 10.31 1.04 137 T_TVD_MIME_NO_HEADERS 1960 0.64 0.02 1.04 138 XMBdyGiftCard01 1941 1.09 1.20 1.03 139 RCVD_IN_BL_SPAMCOP_NET 1905 6.95 16.31 1.01 140 XM_B_SpammyWords4 1870 1.52 2.36 0.99 141 TR_XM_Base64_M1 1800 0.90 0.83 0.95 142 URI_HEX 1724 0.90 0.88 0.91 143 XM_B_FormFill 1714 0.57 0.05 0.91 144 URI_TRY_3LD 1695 1.31 1.95 0.90 145 THIS_AD 1692 0.99 1.15 0.89 146 XM_UB50 1628 1.67 2.95 0.86 147 DKIM_ADSP_CUSTOM_MED 1578 1.09 1.50 0.83 148 TR_XM_DK_SendGrid 1559 0.89 0.98 0.82 149 USER_IN_WHITELIST 1553 0.50 0.00 0.82 150 USER_IN_WELCOMELIST 1553 0.50 0.00 0.82 151 MPART_ALT_DIFF_COUNT 1536 0.94 1.15 0.81 152 TR_XM_SpammyWords2 1535 7.31 17.53 0.81 153 XMSubMetaI_00 1513 0.70 0.55 0.80 154 TooManyTo_003 1503 0.97 1.24 0.79 155 XMBody_95 1474 0.49 0.05 0.78 156 T_XMDrugObfuBody_00 1442 1.21 1.92 0.76 157 XM_H_PHPMailer 1408 0.79 0.87 0.74 158 RCVD_IN_PSBL 1388 1.11 1.72 0.73 159 TR_XM_SEO4 1382 1.78 3.43 0.73 160 TR_LOTS_OF_MONEY3 1380 2.35 4.90 0.73 161 XMPhish30 1368 0.90 1.17 0.72 162 TR_MetaPhish_Combo_01 1308 0.84 1.07 0.69 163 HTML_EXTRA_CLOSE 1303 0.47 0.13 0.69 164 XMStockSpam_06 1295 1.05 1.63 0.68 165 HTML_TAG_BALANCE_BODY 1284 0.98 1.44 0.68 166 XM_ProductURIs 1260 0.68 0.70 0.67 167 PLING_QUERY 1209 0.74 0.89 0.64 168 TooManyTo_004 1180 0.85 1.21 0.62 169 XMSubMetaSxObfu_02 1170 0.57 0.50 0.62 170 XMNoVowels 1154 0.69 0.80 0.61 171 XMLngstWrd_00 1138 0.57 0.51 0.60 172 SHOPIFY_IMG_NOT_RCVD_SFY 1111 0.67 0.81 0.59 173 FORGED_GMAIL_RCVD 1104 0.82 1.18 0.58 174 RELAYCOUNTRY_AU 1098 1.11 1.96 0.58 175 HTML_FONT_FACE_BAD 1095 0.67 0.82 0.58 176 TR_XM_SPAMCOP 1073 5.60 13.52 0.57 177 NML_ADSP_CUSTOM_MED 1042 0.89 1.42 0.55 178 HTTPS_HTTP_MISMATCH 1018 0.83 1.29 0.54 179 TooManyTo_005 1011 0.79 1.18 0.53 180 XMGenDplmaNmb 996 0.68 0.93 0.53 181 XM_B_DNDMA 989 0.51 0.49 0.52 182 T_XMHurry_00 967 1.40 2.81 0.51 183 T_FILL_THIS_FORM_SHORT 931 2.21 4.91 0.49 184 T_STY_INVIS_DIRECT 914 0.72 1.10 0.48 185 HELO_NODOT 899 0.38 0.23 0.48 186 HELO_NO_DOMAIN 897 0.37 0.21 0.47 187 XM_B_REG_HTML 869 0.56 0.73 0.46 188 DKIM_ADSP_NXDOMAIN 854 1.11 2.16 0.45 189 XMPhish14 833 0.57 0.78 0.44 190 SpammyFromTLD_01 809 1.15 2.30 0.43 191 T_TooManySym_04 809 0.32 0.16 0.43 192 FILL_THIS_FORM 795 0.41 0.38 0.42 193 XM_S_SubURI 774 0.27 0.04 0.41 194 CTE_8BIT_MISMATCH 726 0.24 0.02 0.38 195 LOW_PRICE 724 0.35 0.29 0.38 196 XM_ShortIntro_01 718 0.46 0.58 0.38 197 RDNS_DYNAMIC 713 0.75 1.34 0.38 198 TRACKER_ID 697 0.27 0.12 0.37 199 XMReplyNow 682 1.10 2.26 0.36 200 TR_LOTS_OF_MONEY2 660 0.39 0.46 0.35 ----------------------------------------------------------------------