Email: 351535 Autolearn: 0 AvgScore: 3.61 AvgScanTime: 1.13 sec Spam: 108283 Autolearn: 0 AvgScore: 13.09 AvgScanTime: 1.25 sec Ham: 243252 Autolearn: 0 AvgScore: -0.61 AvgScanTime: 1.08 sec Time Spent Running SA: 110.45 hours Time Spent Processing Spam: 37.58 hours Time Spent Processing Ham: 72.87 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 104141 89.32 96.17 86.27 2 DKIM_SIGNED 98204 76.01 90.69 69.47 3 XM_DK_Pass 94942 74.47 87.68 68.60 4 DKIM_VALID 94382 74.01 87.16 68.15 5 XM_B_Unicode 94231 75.95 87.02 71.02 6 RELAYCOUNTRY_US 92008 83.79 84.97 83.27 7 DCC_CHECK 81574 50.61 75.33 39.60 8 XMListUnsubscribeExists 79302 56.82 73.24 49.51 9 DKIM_VALID_AU 78704 63.13 72.68 58.87 10 XM_B_SpammyWords 78110 56.03 72.14 48.86 11 XM_B_Unicode3 49478 44.97 45.69 44.64 12 LOC_TINY_FONT_1 48148 32.49 44.46 27.16 13 XM_DK_Undo_02 47956 17.45 44.29 5.50 14 XM_B_SpammyWords2 45553 28.35 42.07 22.24 15 HTML_FONT_LOW_CONTRAST 43519 38.78 40.19 38.15 16 RCVD_IN_MSPIKE_H2 42337 31.88 39.10 28.67 17 FVGT_m_MULTI_ODD 40287 28.64 37.21 24.83 18 BAYES_99 39784 14.26 36.74 4.26 19 BAYES_50 38381 53.41 35.45 61.41 20 TR_XM_DKIM_Undo 35023 11.66 32.34 2.46 21 BAYES_999 31473 11.22 29.07 3.27 22 T_KAM_HTML_FONT_INVALID 30186 21.40 27.88 18.51 23 TR_DCC_Bayes_99 29265 9.69 27.03 1.98 24 DKIM_VALID_EF 27517 26.03 25.41 26.30 25 DCC_CHECK_NEGATIVE 26696 49.37 24.65 60.38 26 T_TM2_M_HEADER_IN_MSG 24294 24.43 22.44 25.32 27 MIME_HTML_ONLY 23652 22.92 21.84 23.40 28 XM_Multi_Part_URI 20614 15.43 19.04 13.82 29 XMSubLong 20128 22.79 18.59 24.66 30 TR_XM_DK_Unsub 20035 15.09 18.50 13.57 31 TR_MAX_INTL_RELAY 17373 9.22 16.04 6.18 32 XM_B_Unsub 17029 11.96 15.73 10.29 33 LOTS_OF_MONEY 17024 8.64 15.72 5.49 34 RELAYCOUNTRY_META 16811 7.27 15.53 3.60 35 TR_XM_BayesUnsub 16592 9.31 15.32 6.64 36 UNPARSEABLE_RELAY 15879 12.05 14.66 10.89 37 TR_XM_SpammyWords4 15708 7.15 14.51 3.87 38 TR_XM_SpammyWords2 15662 5.01 14.46 0.80 39 XM_B_SpammyWords3 15575 9.72 14.38 7.64 40 BOTNET_IPINHOSTNAME 14056 6.87 12.98 4.14 41 TR_XM_SpammyRelay 11427 4.70 10.55 2.10 42 BAYES_80 10711 5.62 9.89 3.72 43 RCVD_IN_BL_SPAMCOP_NET 9865 3.35 9.11 0.79 44 BAYES_60 9229 9.07 8.52 9.32 45 XM_Evil_Numbers_Gen 9178 9.99 8.48 10.66 46 BOTNET 8551 3.05 7.90 0.89 47 TR_XM_UnparsRelay 8439 3.64 7.79 1.80 48 FSL_BULK_SIG 8367 6.93 7.73 6.57 49 XM_Body_Dirty_Words 8117 4.54 7.50 3.22 50 TR_XM_SPAMCOP 7871 2.53 7.27 0.42 51 XMBody_17 7395 2.70 6.83 0.87 52 LotsOfNums_01 7238 6.78 6.68 6.83 53 XMSubMetaSx_00 6885 4.52 6.36 3.70 54 TR_LOTS_OF_MONEY3 6863 2.56 6.34 0.87 55 HTML_IMAGE_RATIO_02 6726 5.55 6.21 5.25 56 MPART_ALT_DIFF 6439 6.97 5.95 7.42 57 BAYES_95 6253 3.48 5.77 2.46 58 RELAYCOUNTRY_CA 6194 2.90 5.72 1.64 59 UNTRUSTED_Relay 6106 2.61 5.64 1.26 60 TooManyTo_001 6010 5.43 5.55 5.37 61 XM_H_GMP 5915 5.79 5.46 5.93 62 XM_UncommonTLD01 5834 4.96 5.39 4.77 63 XM_SPF_SoftFail 5726 3.12 5.29 2.16 64 XM_B_Investor 5512 2.33 5.09 1.10 65 HTML_IMAGE_RATIO_08 5500 3.37 5.08 2.61 66 XM_H_Long_From01 5072 4.46 4.68 4.36 67 HTML_IMAGE_RATIO_06 5033 2.78 4.65 1.95 68 XM_B_Phish_Phrases 4969 2.85 4.59 2.07 69 HTML_IMAGE_RATIO_04 4960 3.70 4.58 3.31 70 T_XMDrugObfuBody_14 4802 2.87 4.43 2.18 71 TR_XM_PhishingBody 4686 2.87 4.33 2.22 72 TM2_M_VERY_LONG_WORD 4649 6.43 4.29 7.38 73 XM_B_SEO 4585 1.85 4.23 0.79 74 XM_OfRef6 4428 1.80 4.09 0.78 75 XM_B_PhoneNumber 4241 5.47 3.92 6.16 76 XMSexyCombo_05 4192 2.82 3.87 2.35 77 TR_XM_SEO4 4162 1.53 3.84 0.49 78 XMBrknScrpt_02 4069 1.94 3.76 1.13 79 USER_IN_DEF_DKIM_WL 3985 12.07 3.68 15.80 80 MIME_HTML_MOSTLY 3930 2.73 3.63 2.33 81 XMStrtUSub 3855 5.20 3.56 5.93 82 DKIM_INVALID 3822 2.00 3.53 1.32 83 T_XMDrugObfuBody_08 3758 2.07 3.47 1.45 84 TR_XM_SpammyWords5 3750 1.70 3.46 0.91 85 XM_CamelCaseFrm001 3733 2.37 3.45 1.89 86 T_XMHurry_00 3550 1.44 3.28 0.62 87 MIME_HTML_ONLY_MULTI 3519 4.88 3.25 5.60 88 RCVD_IN_VALIDITY_SAFE 3450 6.53 3.19 8.02 89 XM_B_SpammyTLD 3359 2.41 3.10 2.10 90 SUBJ_ALL_CAPS 3230 1.41 2.98 0.71 91 RELAYCOUNTRY_AU 3196 1.29 2.95 0.54 92 XM_UB50 3018 1.33 2.79 0.69 93 XMNumbers 2822 2.76 2.61 2.83 94 XM_URI_RBL 2809 0.91 2.59 0.15 95 RCVD_IN_VALIDITY_CERTIFIED 2760 5.68 2.55 7.07 96 XM_B_SpammyWords4 2737 1.17 2.53 0.56 97 TM2_M_URI_OPT_OUT 2690 4.43 2.48 5.30 98 TR_XM_NoHeaderRelay 2684 0.83 2.48 0.09 99 T_REMOTE_IMAGE 2658 3.00 2.45 3.24 100 AC_BR_BONANZA 2630 0.82 2.43 0.11 101 XMDiploma_00 2487 1.69 2.30 1.43 102 XM_B_Unsub2 2402 1.37 2.22 1.00 103 MIME_QP_LONG_LINE 2333 3.03 2.15 3.42 104 T_FILL_THIS_FORM_SHORT 2248 1.17 2.08 0.77 105 RCVD_IN_VALIDITY_RPBL 2235 0.69 2.06 0.07 106 ANY_BOUNCE_MESSAGE 2199 7.99 2.03 10.65 107 BOUNCE_MESSAGE 2198 7.99 2.03 10.65 108 TR_XM_PHPDW 2177 0.76 2.01 0.21 109 URI_TRY_3LD 2166 1.22 2.00 0.87 110 T_TooManySym_01 2157 4.29 1.99 5.31 111 TR_XM_PHPForged 2141 0.75 1.98 0.20 112 KHOP_HELO_FCRDNS 2117 3.87 1.96 4.72 113 TR_XM_FormFill2 2079 0.73 1.92 0.20 114 XM_H_PHPOS 2069 0.72 1.91 0.19 115 RCVD_IN_MSPIKE_H3 2029 4.08 1.87 5.07 116 RCVD_IN_MSPIKE_WL 2029 4.08 1.87 5.07 117 TR_MetaPhish_Combo_01 1974 1.01 1.82 0.65 118 SpammyFromTLD_01 1940 0.87 1.79 0.45 119 FROM_EXCESS_BASE64 1881 1.81 1.74 1.84 120 HTML_TAG_BALANCE_BODY 1844 1.00 1.70 0.69 121 XMSexyCombo_01 1793 0.68 1.66 0.24 122 XMBdyGiftCard01 1780 0.97 1.64 0.67 123 XM_HighProb1 1764 0.50 1.63 0.00 124 URIBL_DBL_SPAM 1714 0.50 1.58 0.01 125 XMStockSpam_06 1702 1.34 1.57 1.24 126 T_XMDrugObfuBody_00 1664 0.80 1.54 0.47 127 XMReplyNow 1652 0.57 1.53 0.15 128 TR_Caps_n_Bayes_99 1646 0.48 1.52 0.01 129 ALL_TRUSTED 1634 9.81 1.51 13.51 130 BAYES_40 1586 3.64 1.46 4.60 131 SpammyFromTLD_02 1563 0.61 1.44 0.23 132 MAILING_LIST_MULTI 1530 1.70 1.41 1.83 133 TR_XM_INV_DKIM 1524 0.47 1.41 0.05 134 TR_XM_FormFill 1488 0.43 1.37 0.01 135 URI_NOVOWEL 1485 1.24 1.37 1.18 136 DKIM_ADSP_CUSTOM_MED 1475 0.87 1.36 0.66 137 DKIM_ADSP_NXDOMAIN 1453 0.71 1.34 0.42 138 MPART_ALT_DIFF_COUNT 1451 0.91 1.34 0.72 139 XMPhish30 1430 1.37 1.32 1.40 140 HTML_MIME_NO_HTML_TAG 1423 1.73 1.31 1.92 141 HTTPS_HTTP_MISMATCH 1423 0.73 1.31 0.46 142 T_STY_INVIS_DIRECT 1420 0.81 1.31 0.59 143 XM_DK_Undo_01 1396 1.46 1.29 1.53 144 XM_DIRTYINTL 1391 0.47 1.28 0.10 145 NML_ADSP_CUSTOM_MED 1376 0.67 1.27 0.40 146 TooManyTo_002 1345 1.46 1.24 1.56 147 XM_SendGrid 1319 1.25 1.22 1.26 148 BOTNET_NORDNS 1312 0.38 1.21 0.01 149 XM_B_COPY_HTML 1310 1.08 1.21 1.03 150 XMPhish14 1300 0.57 1.20 0.29 151 FORGED_GMAIL_RCVD 1284 0.65 1.19 0.41 152 RDNS_DYNAMIC 1267 0.55 1.17 0.28 153 TooManyTo_003 1256 0.89 1.16 0.77 154 TooManyTo_004 1236 0.74 1.14 0.56 155 TVD_RCVD_IP 1225 1.63 1.13 1.85 156 TooManyTo_005 1215 0.67 1.12 0.47 157 THIS_AD 1204 0.55 1.11 0.30 158 BAYES_20 1202 2.43 1.11 3.02 159 URI_HEX 1197 0.80 1.11 0.66 160 LongTLD 1153 0.46 1.06 0.19 161 XMSlimDrugH 1141 0.51 1.05 0.27 162 AC_HTML_NONSENSE_TAGS 1137 0.33 1.05 0.01 163 XMGenDplmaNmb 1105 0.74 1.02 0.62 164 TR_Symld_Words 1084 0.99 1.00 0.98 165 PLING_QUERY 1074 0.55 0.99 0.35 166 TR_XM_InvalidRelay 1051 0.31 0.97 0.02 167 DIET_1 1047 0.44 0.97 0.21 168 XMBody_78 1027 0.44 0.95 0.21 169 TR_XM_DK_SendGrid 1011 0.93 0.93 0.93 170 XMHTMLBadTable_001 1011 0.47 0.93 0.27 171 XM_B_Phish66 982 0.44 0.91 0.24 172 HTML_FONT_FACE_BAD 980 0.58 0.91 0.43 173 HELO_DYNAMIC_SPLIT_IP 975 0.29 0.90 0.02 174 TM2_M_OBFU_COMMENT 968 0.50 0.89 0.32 175 XM_UB99 950 0.27 0.88 0.00 176 TR_Mismatch_TLD_02 942 0.32 0.87 0.07 177 RCVD_IN_IADB_LISTED 905 1.93 0.84 2.42 178 XM_ProductURIs 893 0.61 0.82 0.52 179 XM_H_PHPMailer 889 0.64 0.82 0.56 180 TR_LOTS_OF_MONEY2 885 0.49 0.82 0.34 181 T_MONEY_PERCENT 885 0.49 0.82 0.34 182 XM_UB60 884 0.28 0.82 0.04 183 RELAYCOUNTRY_FR 880 0.36 0.81 0.16 184 SHOPIFY_IMG_NOT_RCVD_SFY 858 0.53 0.79 0.41 185 LOW_PRICE 856 0.40 0.79 0.23 186 XM_H_Undi_Recip 846 0.30 0.78 0.09 187 XM_H_Long_From02 831 0.98 0.77 1.07 188 RCVD_IN_PSBL 830 0.70 0.77 0.67 189 TR_Mismatch_TLD_01 820 0.39 0.76 0.22 190 HOSTED_IMG_MULTI_PUB_01 816 0.24 0.75 0.02 191 MISSING_HEADERS 803 0.36 0.74 0.19 192 TR_XM_Base64_M1 795 0.64 0.73 0.60 193 RCVD_IN_IADB_SPF 795 1.73 0.73 2.18 194 RELAYCOUNTRY_DE 791 0.40 0.73 0.25 195 XMHTML_After_End 781 0.38 0.72 0.23 196 XMSubMetaI_00 777 0.73 0.72 0.74 197 XMPhish08 770 0.41 0.71 0.27 198 SHORT_URI_2 767 3.21 0.71 4.32 199 TR_XM_Spammywords 728 0.35 0.67 0.20 200 XM_S_SpammyWords 728 0.35 0.67 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 209842 89.32 96.17 86.27 2 RELAYCOUNTRY_US 202556 83.79 84.97 83.27 3 XM_B_Unicode 172765 75.95 87.02 71.02 4 DKIM_SIGNED 168987 76.01 90.69 69.47 5 XM_DK_Pass 166863 74.47 87.68 68.60 6 DKIM_VALID 165780 74.01 87.16 68.15 7 BAYES_50 149384 53.41 35.45 61.41 8 DCC_CHECK_NEGATIVE 146869 49.37 24.65 60.38 9 DKIM_VALID_AU 143205 63.13 72.68 58.87 10 XMListUnsubscribeExists 120423 56.82 73.24 49.51 11 XM_B_SpammyWords 118849 56.03 72.14 48.86 12 XM_B_Unicode3 108596 44.97 45.69 44.64 13 DCC_CHECK 96331 50.61 75.33 39.60 14 HTML_FONT_LOW_CONTRAST 92807 38.78 40.19 38.15 15 RCVD_IN_MSPIKE_H2 69731 31.88 39.10 28.67 16 LOC_TINY_FONT_1 66070 32.49 44.46 27.16 17 DKIM_VALID_EF 63978 26.03 25.41 26.30 18 T_TM2_M_HEADER_IN_MSG 61585 24.43 22.44 25.32 19 FVGT_m_MULTI_ODD 60392 28.64 37.21 24.83 20 XMSubLong 59983 22.79 18.59 24.66 21 MIME_HTML_ONLY 56932 22.92 21.84 23.40 22 XM_B_SpammyWords2 54103 28.35 42.07 22.24 23 T_KAM_HTML_FONT_INVALID 45035 21.40 27.88 18.51 24 USER_IN_DEF_DKIM_WL 38439 12.07 3.68 15.80 25 XM_Multi_Part_URI 33626 15.43 19.04 13.82 26 TR_XM_DK_Unsub 33001 15.09 18.50 13.57 27 ALL_TRUSTED 32858 9.81 1.51 13.51 28 UNPARSEABLE_RELAY 26484 12.05 14.66 10.89 29 XM_Evil_Numbers_Gen 25935 9.99 8.48 10.66 30 ANY_BOUNCE_MESSAGE 25897 7.99 2.03 10.65 31 BOUNCE_MESSAGE 25896 7.99 2.03 10.65 32 XM_B_Unsub 25022 11.96 15.73 10.29 33 BAYES_60 22663 9.07 8.52 9.32 34 BAYES_00 22661 6.59 0.46 9.32 35 XM_DKIMWhitelistDomains 21462 6.16 0.18 8.82 36 RCVD_IN_VALIDITY_SAFE 19514 6.53 3.19 8.02 37 XM_B_SpammyWords3 18585 9.72 14.38 7.64 38 MPART_ALT_DIFF 18048 6.97 5.95 7.42 39 TM2_M_VERY_LONG_WORD 17959 6.43 4.29 7.38 40 RCVD_IN_VALIDITY_CERTIFIED 17206 5.68 2.55 7.07 41 LotsOfNums_01 16607 6.78 6.68 6.83 42 TR_XM_BayesUnsub 16144 9.31 15.32 6.64 43 FSL_BULK_SIG 15989 6.93 7.73 6.57 44 TR_MAX_INTL_RELAY 15030 9.22 16.04 6.18 45 XM_B_PhoneNumber 14991 5.47 3.92 6.16 46 XM_H_GMP 14437 5.79 5.46 5.93 47 XMStrtUSub 14417 5.20 3.56 5.93 48 TR_XM_DK_Bayes 14240 4.15 0.32 5.85 49 TR_XM_DK_Bayes1 14132 4.12 0.32 5.81 50 MIME_HTML_ONLY_MULTI 13634 4.88 3.25 5.60 51 XM_DK_Undo_02 13384 17.45 44.29 5.50 52 LOTS_OF_MONEY 13356 8.64 15.72 5.49 53 TooManyTo_001 13069 5.43 5.55 5.37 54 T_TooManySym_01 12911 4.29 1.99 5.31 55 TM2_M_URI_OPT_OUT 12900 4.43 2.48 5.30 56 HTML_IMAGE_RATIO_02 12780 5.55 6.21 5.25 57 RCVD_IN_MSPIKE_WL 12324 4.08 1.87 5.07 58 RCVD_IN_MSPIKE_H3 12324 4.08 1.87 5.07 59 TR_XM_DK_Bayes2 12096 3.52 0.26 4.97 60 SHORT_URI_3 12091 3.63 0.63 4.97 61 IN_ZIMBRA_NJ_WHITELIST 11855 3.39 0.05 4.87 62 XM_UncommonTLD01 11597 4.96 5.39 4.77 63 KHOP_HELO_FCRDNS 11486 3.87 1.96 4.72 64 BAYES_40 11197 3.64 1.46 4.60 65 XM_PDF 10598 3.16 0.47 4.36 66 XM_H_Long_From01 10596 4.46 4.68 4.36 67 SHORT_URI_2 10516 3.21 0.71 4.32 68 BAYES_99 10356 14.26 36.74 4.26 69 BOTNET_IPINHOSTNAME 10079 6.87 12.98 4.14 70 HTML_IMAGE_ONLY_32 9870 2.84 0.12 4.06 71 TR_XM_SpammyWords4 9417 7.15 14.51 3.87 72 XM_H_Trusted_IP 9260 2.63 0.00 3.81 73 BAYES_80 9041 5.62 9.89 3.72 74 XMSubMetaSx_00 9001 4.52 6.36 3.70 75 RELAYCOUNTRY_META 8754 7.27 15.53 3.60 76 MIME_QP_LONG_LINE 8328 3.03 2.15 3.42 77 HTML_IMAGE_RATIO_04 8056 3.70 4.58 3.31 78 BAYES_999 7958 11.22 29.07 3.27 79 T_REMOTE_IMAGE 7885 3.00 2.45 3.24 80 XM_Body_Dirty_Words 7840 4.54 7.50 3.22 81 BAYES_20 7345 2.43 1.11 3.02 82 T_TooManySym_02 7063 2.18 0.55 2.90 83 XMNumbers 6889 2.76 2.61 2.83 84 INVALID_MSGID 6650 1.94 0.16 2.73 85 TO_MALFORMED 6501 1.86 0.02 2.67 86 HTML_IMAGE_RATIO_08 6356 3.37 5.08 2.61 87 BAYES_95 5980 3.48 5.77 2.46 88 TR_XM_DKIM_Undo 5974 11.66 32.34 2.46 89 RCVD_IN_IADB_LISTED 5884 1.93 0.84 2.42 90 MIME_CHARSET_FARAWAY 5773 1.82 0.57 2.37 91 XMSexyCombo_05 5715 2.82 3.87 2.35 92 MIME_HTML_MOSTLY 5678 2.73 3.63 2.33 93 TR_XM_PhishingBody 5389 2.87 4.33 2.22 94 T_XMDrugObfuBody_14 5299 2.87 4.43 2.18 95 RCVD_IN_IADB_SPF 5294 1.73 0.73 2.18 96 XM_SPF_SoftFail 5251 3.12 5.29 2.16 97 CHARSET_FARAWAY_HEADER 5138 1.49 0.10 2.11 98 TR_XM_SpammyRelay 5104 4.70 10.55 2.10 99 XM_B_SpammyTLD 5099 2.41 3.10 2.10 100 XM_B_Phish_Phrases 5044 2.85 4.59 2.07 101 T_TVD_MIME_NO_HEADERS 4856 1.40 0.06 2.00 102 RCVD_IN_IADB_SENDERID 4829 1.58 0.67 1.99 103 TR_DCC_Bayes_99 4805 9.69 27.03 1.98 104 HTML_IMAGE_RATIO_06 4750 2.78 4.65 1.95 105 RCVD_IN_IADB_DK 4694 1.54 0.67 1.93 106 HTML_MIME_NO_HTML_TAG 4674 1.73 1.31 1.92 107 BAYES_05 4625 1.50 0.58 1.90 108 XM_CamelCaseFrm001 4603 2.37 3.45 1.89 109 TVD_RCVD_IP 4505 1.63 1.13 1.85 110 FROM_EXCESS_BASE64 4474 1.81 1.74 1.84 111 MAILING_LIST_MULTI 4458 1.70 1.41 1.83 112 TR_XM_UnparsRelay 4371 3.64 7.79 1.80 113 RELAYCOUNTRY_CA 3996 2.90 5.72 1.64 114 XMBSHREFv2 3860 1.25 0.50 1.59 115 TooManyTo_002 3789 1.46 1.24 1.56 116 RCVD_IN_IADB_VOUCHED 3753 1.20 0.44 1.54 117 XM_DK_Undo_01 3722 1.46 1.29 1.53 118 IN_HORDE_ADDRESS_BOOK 3628 1.05 0.05 1.49 119 TVD_SPACE_RATIO 3557 1.04 0.09 1.46 120 T_OBFU_PDF_ATTACH 3540 1.05 0.13 1.46 121 T_XMDrugObfuBody_08 3517 2.07 3.47 1.45 122 XMDiploma_00 3469 1.69 2.30 1.43 123 XMPhish30 3399 1.37 1.32 1.40 124 DKIM_INVALID 3207 2.00 3.53 1.32 125 XMGappySubj_01 3085 0.97 0.28 1.27 126 XM_SendGrid 3076 1.25 1.22 1.26 127 UNTRUSTED_Relay 3059 2.61 5.64 1.26 128 XMStockSpam_06 3014 1.34 1.57 1.24 129 XMSubNoVowel 2947 0.93 0.31 1.21 130 URI_NOVOWEL 2880 1.24 1.37 1.18 131 XMBrknScrpt_02 2744 1.94 3.76 1.13 132 RCVD_IN_IADB_OPTIN 2685 0.85 0.29 1.10 133 XM_B_Investor 2664 2.33 5.09 1.10 134 XM_H_Long_From02 2599 0.98 0.77 1.07 135 XM_B_COPY_HTML 2503 1.08 1.21 1.03 136 T_TooManySym_03 2465 0.78 0.24 1.01 137 XM_GoogleGroups 2437 0.86 0.53 1.00 138 XM_B_Unsub2 2429 1.37 2.22 1.00 139 TR_Symld_Words 2394 0.99 1.00 0.98 140 XMGappySubj_02 2364 0.75 0.24 0.97 141 XMBody_95 2349 0.73 0.19 0.97 142 TR_XM_DK_SendGrid 2270 0.93 0.93 0.93 143 TR_XM_SpammyWords5 2216 1.70 3.46 0.91 144 BOTNET 2159 3.05 7.90 0.89 145 TR_LOTS_OF_MONEY3 2127 2.56 6.34 0.87 146 URI_TRY_3LD 2114 1.22 2.00 0.87 147 XMBody_17 2111 2.70 6.83 0.87 148 TR_XM_SpammyWords2 1936 5.01 14.46 0.80 149 XM_B_SEO 1922 1.85 4.23 0.79 150 RCVD_IN_BL_SPAMCOP_NET 1914 3.35 9.11 0.79 151 XM_OfRef6 1890 1.80 4.09 0.78 152 USER_IN_WELCOMELIST 1870 0.53 0.00 0.77 153 USER_IN_WHITELIST 1870 0.53 0.00 0.77 154 T_FILL_THIS_FORM_SHORT 1868 1.17 2.08 0.77 155 TooManyTo_003 1863 0.89 1.16 0.77 156 XMSubMetaI_00 1799 0.73 0.72 0.74 157 MPART_ALT_DIFF_COUNT 1756 0.91 1.34 0.72 158 SUBJ_ALL_CAPS 1721 1.41 2.98 0.71 159 HTML_TAG_BALANCE_BODY 1688 1.00 1.70 0.69 160 XM_UB50 1671 1.33 2.79 0.69 161 RCVD_IN_PSBL 1634 0.70 0.77 0.67 162 XMBdyGiftCard01 1633 0.97 1.64 0.67 163 URI_HEX 1616 0.80 1.11 0.66 164 XM_B_FormFill 1604 0.49 0.10 0.66 165 DKIM_ADSP_CUSTOM_MED 1597 0.87 1.36 0.66 166 TR_MetaPhish_Combo_01 1583 1.01 1.82 0.65 167 TM2_M_BODY_EMPTY 1539 0.46 0.08 0.63 168 T_XMHurry_00 1507 1.44 3.28 0.62 169 XMGenDplmaNmb 1504 0.74 1.02 0.62 170 TR_XM_Base64_M1 1471 0.64 0.73 0.60 171 T_STY_INVIS_DIRECT 1425 0.81 1.31 0.59 172 XMSubMetaSxObfu_02 1387 0.52 0.41 0.57 173 HTML_EXTRA_CLOSE 1384 0.42 0.10 0.57 174 XM_B_SpammyWords4 1360 1.17 2.53 0.56 175 TooManyTo_004 1352 0.74 1.14 0.56 176 XM_H_PHPMailer 1351 0.64 0.82 0.56 177 RELAYCOUNTRY_AU 1322 1.29 2.95 0.54 178 XM_Walgreens_Forge 1298 0.39 0.06 0.53 179 XM_B_REG_HTML 1283 0.47 0.36 0.53 180 FONT_INVIS_POSTEXTRAS 1272 0.37 0.03 0.52 181 XM_ProductURIs 1256 0.61 0.82 0.52 182 TR_XM_SEO4 1203 1.53 3.84 0.49 183 XM_E_Blogspot 1183 0.37 0.11 0.49 184 XM_B_DNDMA 1151 0.51 0.59 0.47 185 TooManyTo_005 1145 0.67 1.12 0.47 186 T_XMDrugObfuBody_00 1135 0.80 1.54 0.47 187 HTTPS_HTTP_MISMATCH 1130 0.73 1.31 0.46 188 XMNoVowels 1124 0.46 0.46 0.46 189 SpammyFromTLD_01 1101 0.87 1.79 0.45 190 XMSubMetaD_03 1078 0.36 0.19 0.44 191 HTML_FONT_FACE_BAD 1050 0.58 0.91 0.43 192 DKIM_ADSP_NXDOMAIN 1033 0.71 1.34 0.42 193 TR_XM_SPAMCOP 1027 2.53 7.27 0.42 194 T_TooManySym_04 1010 0.31 0.08 0.42 195 SHOPIFY_IMG_NOT_RCVD_SFY 1003 0.53 0.79 0.41 196 FORGED_GMAIL_RCVD 992 0.65 1.19 0.41 197 NML_ADSP_CUSTOM_MED 966 0.67 1.27 0.40 198 HELO_NO_DOMAIN 926 0.36 0.31 0.38 199 HELO_NODOT 926 0.36 0.31 0.38 200 XMSolicitRefs_0 899 0.43 0.55 0.37 ----------------------------------------------------------------------