Email: 308464 Autolearn: 0 AvgScore: 4.55 AvgScanTime: 1.14 sec Spam: 113842 Autolearn: 0 AvgScore: 13.30 AvgScanTime: 1.22 sec Ham: 194622 Autolearn: 0 AvgScore: -0.57 AvgScanTime: 1.10 sec Time Spent Running SA: 98.11 hours Time Spent Processing Spam: 38.72 hours Time Spent Processing Ham: 59.39 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 110815 89.98 97.34 85.67 2 DKIM_SIGNED 106306 83.50 93.38 77.71 3 XM_DK_Pass 103264 81.93 90.71 76.80 4 DKIM_VALID 102592 81.41 90.12 76.31 5 XM_B_Unicode 100183 78.42 88.00 72.81 6 RELAYCOUNTRY_US 98940 84.44 86.91 82.99 7 DCC_CHECK 89023 58.18 78.20 46.46 8 XMListUnsubscribeExists 88055 64.44 77.35 56.88 9 DKIM_VALID_AU 86041 69.88 75.58 66.54 10 XM_B_SpammyWords 84304 56.76 74.05 46.65 11 XM_DK_Undo_02 56474 22.52 49.61 6.68 12 LOC_TINY_FONT_1 50562 35.34 44.41 30.03 13 XM_B_Unicode3 49595 43.63 43.56 43.66 14 XM_B_SpammyWords2 48275 29.97 42.41 22.70 15 RCVD_IN_MSPIKE_H2 46631 35.40 40.96 32.15 16 HTML_FONT_LOW_CONTRAST 46361 36.09 40.72 33.37 17 FVGT_m_MULTI_ODD 46328 32.95 40.69 28.43 18 BAYES_99 45885 18.11 40.31 5.13 19 TR_XM_DKIM_Undo 42385 15.53 37.23 2.83 20 BAYES_50 38007 49.91 33.39 59.58 21 BAYES_999 36958 14.48 32.46 3.97 22 TR_DCC_Bayes_99 35921 13.22 31.55 2.49 23 T_KAM_HTML_FONT_INVALID 35407 25.12 31.10 21.62 24 DKIM_VALID_EF 31625 29.01 27.78 29.74 25 DCC_CHECK_NEGATIVE 24811 41.81 21.79 53.51 26 T_TM2_M_HEADER_IN_MSG 24503 23.83 21.52 25.18 27 TR_XM_DK_Unsub 23942 18.12 21.03 16.41 28 MIME_HTML_ONLY 23378 20.21 20.54 20.02 29 XM_Multi_Part_URI 21787 17.25 19.14 16.14 30 XMSubLong 20079 20.58 17.64 22.30 31 LOTS_OF_MONEY 19055 11.04 16.74 7.70 32 TR_XM_SpammyWords2 18405 6.50 16.17 0.85 33 TR_XM_SpammyWords4 17519 9.26 15.39 5.68 34 TR_MAX_INTL_RELAY 17202 10.45 15.11 7.72 35 UNPARSEABLE_RELAY 17145 12.50 15.06 11.00 36 XM_B_SpammyWords3 16326 10.10 14.34 7.61 37 XM_B_Unsub 15619 10.10 13.72 7.98 38 RELAYCOUNTRY_META 15608 7.67 13.71 4.14 39 TR_XM_BayesUnsub 15096 9.05 13.26 6.58 40 BOTNET_IPINHOSTNAME 13947 7.80 12.25 5.19 41 TR_XM_SpammyRelay 11541 5.31 10.14 2.48 42 RCVD_IN_BL_SPAMCOP_NET 11009 4.17 9.67 0.96 43 XMBody_17 10793 4.32 9.48 1.30 44 BAYES_80 10396 6.34 9.13 4.70 45 TR_XM_SPAMCOP 9126 3.37 8.02 0.65 46 TR_XM_UnparsRelay 8767 3.83 7.70 1.56 47 XM_Body_Dirty_Words 8640 4.85 7.59 3.25 48 BAYES_60 8616 9.88 7.57 11.23 49 TR_LOTS_OF_MONEY3 8435 3.65 7.41 1.45 50 BOTNET 8272 3.38 7.27 1.11 51 XM_Evil_Numbers_Gen 7926 8.17 6.96 8.88 52 FSL_BULK_SIG 7297 6.58 6.41 6.67 53 LotsOfNums_01 6902 7.30 6.06 8.03 54 MPART_ALT_DIFF 6785 4.79 5.96 4.10 55 HTML_IMAGE_RATIO_02 6770 5.83 5.95 5.76 56 XMSubMetaSx_00 6734 5.20 5.92 4.79 57 BAYES_95 6373 3.97 5.60 3.02 58 RELAYCOUNTRY_CA 6163 3.16 5.41 1.85 59 UNTRUSTED_Relay 6109 3.02 5.37 1.65 60 XM_B_Investor 5858 2.89 5.15 1.57 61 XM_OfRef6 5728 2.76 5.03 1.44 62 XM_H_GMP 5498 6.54 4.83 7.55 63 XM_UncommonTLD01 5461 4.57 4.80 4.44 64 HTML_IMAGE_RATIO_06 5413 3.32 4.75 2.47 65 TooManyTo_001 5320 5.38 4.67 5.79 66 XM_SPF_SoftFail 4979 3.17 4.37 2.47 67 MIME_HTML_MOSTLY 4967 3.44 4.36 2.91 68 T_XMDrugObfuBody_14 4870 2.57 4.28 1.57 69 HTML_IMAGE_RATIO_04 4856 4.71 4.27 4.97 70 XMStrtUSub 4701 5.12 4.13 5.71 71 XMSexyCombo_05 4668 3.32 4.10 2.86 72 TR_XM_SpammyWords5 4490 2.27 3.94 1.29 73 XM_H_Long_From01 4428 4.60 3.89 5.01 74 T_XMDrugObfuBody_08 4261 2.26 3.74 1.39 75 HTML_IMAGE_RATIO_08 4085 2.57 3.59 1.97 76 RCVD_IN_VALIDITY_SAFE 4065 6.04 3.57 7.49 77 TR_XM_PhishingBody 3975 2.25 3.49 1.52 78 USER_IN_DEF_DKIM_WL 3971 13.83 3.49 19.87 79 XM_B_Phish_Phrases 3869 3.55 3.40 3.64 80 XM_B_SEO 3851 1.88 3.38 1.00 81 DKIM_INVALID 3714 2.09 3.26 1.40 82 XM_B_PhoneNumber 3709 5.48 3.26 6.78 83 SUBJ_ALL_CAPS 3584 1.91 3.15 1.18 84 MIME_HTML_ONLY_MULTI 3575 2.42 3.14 2.00 85 XM_CamelCaseFrm001 3545 2.54 3.11 2.21 86 XMBrknScrpt_02 3491 2.20 3.07 1.69 87 TR_XM_SEO4 3424 1.46 3.01 0.56 88 RCVD_IN_VALIDITY_CERTIFIED 3254 5.05 2.86 6.32 89 T_XMHurry_00 3218 1.57 2.83 0.83 90 TM2_M_VERY_LONG_WORD 3166 1.89 2.78 1.37 91 AC_BR_BONANZA 3136 1.13 2.75 0.18 92 XM_UB50 3135 1.59 2.75 0.92 93 XMNumbers 3072 3.04 2.70 3.23 94 XM_URI_RBL 3034 1.10 2.67 0.18 95 URI_TRY_3LD 2957 1.67 2.60 1.13 96 XM_B_SpammyTLD 2957 2.56 2.60 2.55 97 XM_B_SpammyWords4 2782 2.46 2.44 2.48 98 T_FILL_THIS_FORM_SHORT 2707 1.19 2.38 0.49 99 TM2_M_URI_OPT_OUT 2631 2.09 2.31 1.97 100 XMDiploma_00 2514 1.76 2.21 1.50 101 XM_B_Unsub2 2358 1.54 2.07 1.23 102 T_TooManySym_01 2357 5.14 2.07 6.93 103 RELAYCOUNTRY_AU 2305 1.13 2.02 0.60 104 RCVD_IN_VALIDITY_RPBL 2303 0.79 2.02 0.07 105 TR_XM_NoHeaderRelay 2169 0.77 1.91 0.11 106 HTML_TAG_BALANCE_BODY 2133 1.09 1.87 0.63 107 RCVD_IN_MSPIKE_H3 2125 4.39 1.87 5.87 108 RCVD_IN_MSPIKE_WL 2125 4.39 1.87 5.87 109 XM_HighProb1 2096 0.68 1.84 0.01 110 MIME_QP_LONG_LINE 2050 2.88 1.80 3.51 111 T_REMOTE_IMAGE 2021 2.77 1.78 3.35 112 HOSTED_IMG_MULTI_PUB_01 1971 0.66 1.73 0.03 113 FROM_EXCESS_BASE64 1964 2.28 1.73 2.60 114 TR_Caps_n_Bayes_99 1956 0.66 1.72 0.03 115 XMSlimDrugH 1914 0.92 1.68 0.48 116 LONGLN_LOW_CONTRAST 1894 0.90 1.66 0.45 117 TR_XM_FormFill 1887 0.62 1.66 0.01 118 XMBdyGiftCard01 1875 1.32 1.65 1.13 119 XMReplyNow 1869 0.74 1.64 0.21 120 SpammyFromTLD_01 1850 0.91 1.63 0.50 121 XMStockSpam_06 1761 1.61 1.55 1.65 122 TR_XM_PHPForged 1730 2.40 1.52 2.92 123 TR_XM_PHPDW 1692 2.39 1.49 2.92 124 XM_DK_Undo_01 1686 1.59 1.48 1.65 125 BAYES_40 1660 3.80 1.46 5.16 126 TR_XM_FormFill2 1652 2.38 1.45 2.92 127 KHOP_HELO_FCRDNS 1650 1.23 1.45 1.10 128 XM_H_PHPOS 1645 2.37 1.44 2.91 129 DIET_1 1639 0.71 1.44 0.28 130 T_XMDrugObfuBody_00 1633 0.98 1.43 0.72 131 MPART_ALT_DIFF_COUNT 1629 0.99 1.43 0.73 132 TooManyTo_002 1598 1.57 1.40 1.67 133 TR_MetaPhish_Combo_01 1587 1.06 1.39 0.87 134 T_STY_INVIS_DIRECT 1552 0.78 1.36 0.44 135 XM_DIRTYINTL 1550 0.77 1.36 0.43 136 THIS_AD 1540 0.96 1.35 0.74 137 URI_NOVOWEL 1517 1.30 1.33 1.28 138 TooManyTo_003 1513 1.09 1.33 0.94 139 TR_XM_INV_DKIM 1511 0.54 1.33 0.08 140 TooManyTo_004 1483 0.96 1.30 0.76 141 BAYES_20 1454 2.09 1.28 2.56 142 TooManyTo_005 1450 0.90 1.27 0.68 143 MAILING_LIST_MULTI 1442 1.78 1.27 2.08 144 AC_HTML_NONSENSE_TAGS 1415 0.50 1.24 0.06 145 XM_B_COPY_HTML 1397 1.09 1.23 1.01 146 XMSubMetaSxObfu_03 1386 1.18 1.22 1.16 147 XMPhish30 1374 0.87 1.21 0.68 148 URIBL_DBL_SPAM 1341 0.44 1.18 0.00 149 HTTPS_HTTP_MISMATCH 1317 0.73 1.16 0.49 150 SpammyFromTLD_02 1250 0.66 1.10 0.40 151 XMHTMLBadTable_001 1242 0.59 1.09 0.30 152 TR_XM_InvalidRelay 1234 0.42 1.08 0.02 153 TM2_M_OBFU_COMMENT 1228 0.62 1.08 0.35 154 URIBL_CSS 1226 0.67 1.08 0.43 155 URIBL_CSS_A 1226 0.67 1.08 0.43 156 ALL_TRUSTED 1217 8.69 1.07 13.16 157 HTML_FONT_TINY_NORDNS 1208 0.42 1.06 0.04 158 URI_HEX 1203 1.01 1.06 0.98 159 XM_ProductURIs 1185 0.75 1.04 0.58 160 RELAYCOUNTRY_IN 1169 0.40 1.03 0.04 161 ANY_BOUNCE_MESSAGE 1167 3.07 1.03 4.26 162 BOUNCE_MESSAGE 1167 3.07 1.03 4.26 163 TR_Symld_Words 1137 1.73 1.00 2.15 164 SHOPIFY_IMG_NOT_RCVD_SFY 1129 0.65 0.99 0.45 165 HTML_MIME_NO_HTML_TAG 1129 1.21 0.99 1.33 166 BOTNET_NORDNS 1106 0.36 0.97 0.01 167 XMSubMetaI_00 1075 0.74 0.94 0.62 168 DKIM_ADSP_NXDOMAIN 1075 0.64 0.94 0.46 169 PLING_QUERY 1043 0.59 0.92 0.40 170 NORDNS_LOW_CONTRAST 1034 0.46 0.91 0.20 171 XMGenDplmaNmb 1007 0.78 0.88 0.72 172 XMSexyCombo_01 1000 0.43 0.88 0.17 173 XM_SendGrid 999 1.10 0.88 1.23 174 HTML_FONT_FACE_BAD 991 0.65 0.87 0.52 175 TR_LOTS_OF_MONEY2 965 0.43 0.85 0.19 176 T_MONEY_PERCENT 965 0.43 0.85 0.19 177 XM_B_Phish66 959 0.47 0.84 0.25 178 RDNS_DYNAMIC 946 0.52 0.83 0.33 179 LongTLD 944 0.44 0.83 0.21 180 REMOVE_BEFORE_LINK 925 0.45 0.81 0.23 181 RCVD_IN_PSBL 923 0.78 0.81 0.76 182 DKIM_ADSP_CUSTOM_MED 919 0.77 0.81 0.74 183 XM_B_DNDMA 914 0.68 0.80 0.61 184 PDS_RDNS_DYNAMIC_FP 912 0.33 0.80 0.06 185 XM_UB60 908 0.33 0.80 0.06 186 XMBody_29 890 0.33 0.78 0.07 187 TR_XM_Spammywords 888 0.60 0.78 0.49 188 XM_S_SpammyWords 888 0.60 0.78 0.49 189 BAYES_05 876 1.23 0.77 1.50 190 XM_UB99 872 0.29 0.77 0.01 191 XMHTML_After_End 840 0.41 0.74 0.22 192 TVD_RCVD_IP 831 1.78 0.73 2.39 193 XM_H_Long_From02 830 1.05 0.73 1.24 194 XMClaimOffer 814 0.33 0.72 0.11 195 RCVD_IN_IADB_LISTED 797 1.77 0.70 2.40 196 FORGED_GMAIL_RCVD 794 0.51 0.70 0.40 197 XM_B_REG_HTML 788 0.52 0.69 0.41 198 TR_Mismatch_TLD_01 781 0.36 0.69 0.17 199 NML_ADSP_CUSTOM_MED 770 0.58 0.68 0.52 200 TR_XM_DK_SendGrid 753 0.82 0.66 0.92 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 166734 89.98 97.34 85.67 2 RELAYCOUNTRY_US 161517 84.44 86.91 82.99 3 DKIM_SIGNED 151248 83.50 93.38 77.71 4 XM_DK_Pass 149465 81.93 90.71 76.80 5 DKIM_VALID 148519 81.41 90.12 76.31 6 XM_B_Unicode 141707 78.42 88.00 72.81 7 DKIM_VALID_AU 129500 69.88 75.58 66.54 8 BAYES_50 115949 49.91 33.39 59.58 9 XMListUnsubscribeExists 110707 64.44 77.35 56.88 10 DCC_CHECK_NEGATIVE 104146 41.81 21.79 53.51 11 XM_B_SpammyWords 90782 56.76 74.05 46.65 12 DCC_CHECK 90426 58.18 78.20 46.46 13 XM_B_Unicode3 84981 43.63 43.56 43.66 14 HTML_FONT_LOW_CONTRAST 64949 36.09 40.72 33.37 15 RCVD_IN_MSPIKE_H2 62566 35.40 40.96 32.15 16 LOC_TINY_FONT_1 58445 35.34 44.41 30.03 17 DKIM_VALID_EF 57875 29.01 27.78 29.74 18 FVGT_m_MULTI_ODD 55325 32.95 40.69 28.43 19 T_TM2_M_HEADER_IN_MSG 49010 23.83 21.52 25.18 20 XM_B_SpammyWords2 44175 29.97 42.41 22.70 21 XMSubLong 43395 20.58 17.64 22.30 22 T_KAM_HTML_FONT_INVALID 42068 25.12 31.10 21.62 23 MIME_HTML_ONLY 38955 20.21 20.54 20.02 24 USER_IN_DEF_DKIM_WL 38679 13.83 3.49 19.87 25 TR_XM_DK_Unsub 31940 18.12 21.03 16.41 26 XM_Multi_Part_URI 31413 17.25 19.14 16.14 27 ALL_TRUSTED 25603 8.69 1.07 13.16 28 BAYES_60 21864 9.88 7.57 11.23 29 UNPARSEABLE_RELAY 21401 12.50 15.06 11.00 30 XM_DKIMWhitelistDomains 20238 6.58 0.05 10.40 31 XM_Evil_Numbers_Gen 17274 8.17 6.96 8.88 32 IN_ZIMBRA_NJ_WHITELIST 16603 5.40 0.05 8.53 33 LotsOfNums_01 15631 7.30 6.06 8.03 34 XM_B_Unsub 15523 10.10 13.72 7.98 35 TR_MAX_INTL_RELAY 15024 10.45 15.11 7.72 36 LOTS_OF_MONEY 14991 11.04 16.74 7.70 37 XM_B_SpammyWords3 14818 10.10 14.34 7.61 38 XM_H_GMP 14688 6.54 4.83 7.55 39 RCVD_IN_VALIDITY_SAFE 14571 6.04 3.57 7.49 40 BAYES_00 13847 4.67 0.49 7.11 41 T_TooManySym_01 13491 5.14 2.07 6.93 42 XM_B_PhoneNumber 13204 5.48 3.26 6.78 43 XM_DK_Undo_02 12995 22.52 49.61 6.68 44 FSL_BULK_SIG 12990 6.58 6.41 6.67 45 TR_XM_BayesUnsub 12812 9.05 13.26 6.58 46 RCVD_IN_VALIDITY_CERTIFIED 12309 5.05 2.86 6.32 47 TR_XM_DK_Bayes 11573 3.89 0.38 5.95 48 TR_XM_DK_Bayes1 11503 3.87 0.38 5.91 49 RCVD_IN_MSPIKE_H3 11430 4.39 1.87 5.87 50 RCVD_IN_MSPIKE_WL 11430 4.39 1.87 5.87 51 TooManyTo_001 11273 5.38 4.67 5.79 52 HTML_IMAGE_RATIO_02 11214 5.83 5.95 5.76 53 XMStrtUSub 11105 5.12 4.13 5.71 54 TR_XM_SpammyWords4 11048 9.26 15.39 5.68 55 TR_XM_DK_Bayes2 10233 3.42 0.29 5.26 56 BOTNET_IPINHOSTNAME 10106 7.80 12.25 5.19 57 BAYES_40 10047 3.80 1.46 5.16 58 BAYES_99 9988 18.11 40.31 5.13 59 XM_H_Long_From01 9757 4.60 3.89 5.01 60 HTML_IMAGE_RATIO_04 9667 4.71 4.27 4.97 61 XMSubMetaSx_00 9321 5.20 5.92 4.79 62 BAYES_80 9151 6.34 9.13 4.70 63 XM_UncommonTLD01 8641 4.57 4.80 4.44 64 BOUNCE_MESSAGE 8291 3.07 1.03 4.26 65 ANY_BOUNCE_MESSAGE 8291 3.07 1.03 4.26 66 RELAYCOUNTRY_META 8048 7.67 13.71 4.14 67 MPART_ALT_DIFF 7978 4.79 5.96 4.10 68 BAYES_999 7723 14.48 32.46 3.97 69 INVALID_MSGID 7147 2.37 0.15 3.67 70 XM_B_Phish_Phrases 7078 3.55 3.40 3.64 71 TO_MALFORMED 6946 2.28 0.07 3.57 72 MIME_QP_LONG_LINE 6825 2.88 1.80 3.51 73 T_TooManySym_02 6688 2.33 0.45 3.44 74 T_REMOTE_IMAGE 6528 2.77 1.78 3.35 75 XM_H_PHPMailer 6448 2.30 0.58 3.31 76 XM_Body_Dirty_Words 6330 4.85 7.59 3.25 77 XMNumbers 6294 3.04 2.70 3.23 78 BAYES_95 5870 3.97 5.60 3.02 79 TR_XM_FormFill2 5692 2.38 1.45 2.92 80 TR_XM_PHPForged 5684 2.40 1.52 2.92 81 TR_XM_PHPDW 5675 2.39 1.49 2.92 82 MIME_HTML_MOSTLY 5659 3.44 4.36 2.91 83 XM_H_PHPOS 5657 2.37 1.44 2.91 84 XMSexyCombo_05 5558 3.32 4.10 2.86 85 TR_XM_DKIM_Undo 5511 15.53 37.23 2.83 86 XM_H_PHPOS_M 5427 1.85 0.24 2.79 87 FROM_EXCESS_BASE64 5056 2.28 1.73 2.60 88 BAYES_20 4991 2.09 1.28 2.56 89 XM_B_SpammyTLD 4954 2.56 2.60 2.55 90 TR_DCC_Bayes_99 4849 13.22 31.55 2.49 91 TR_XM_SpammyRelay 4826 5.31 10.14 2.48 92 XM_B_SpammyWords4 4821 2.46 2.44 2.48 93 HTML_IMAGE_RATIO_06 4815 3.32 4.75 2.47 94 XM_SPF_SoftFail 4798 3.17 4.37 2.47 95 XM_PDF 4750 1.65 0.30 2.44 96 RCVD_IN_IADB_LISTED 4663 1.77 0.70 2.40 97 TVD_RCVD_IP 4652 1.78 0.73 2.39 98 XM_CamelCaseFrm001 4305 2.54 3.11 2.21 99 RCVD_IN_IADB_SPF 4252 1.61 0.62 2.18 100 TR_Symld_Words 4188 1.73 1.00 2.15 101 XMBSHREFv2 4095 1.43 0.28 2.10 102 MAILING_LIST_MULTI 4054 1.78 1.27 2.08 103 RCVD_IN_IADB_SENDERID 3958 1.49 0.57 2.03 104 MIME_HTML_ONLY_MULTI 3883 2.42 3.14 2.00 105 RCVD_IN_IADB_DK 3858 1.46 0.57 1.98 106 HTML_IMAGE_RATIO_08 3836 2.57 3.59 1.97 107 TM2_M_URI_OPT_OUT 3827 2.09 2.31 1.97 108 RELAYCOUNTRY_CA 3591 3.16 5.41 1.85 109 TVD_SPACE_RATIO 3388 1.16 0.17 1.74 110 XMBrknScrpt_02 3282 2.20 3.07 1.69 111 IN_HORDE_ADDRESS_BOOK 3264 1.08 0.06 1.68 112 TooManyTo_002 3256 1.57 1.40 1.67 113 XMGappySubj_01 3225 1.08 0.10 1.66 114 XM_DK_Undo_01 3214 1.59 1.48 1.65 115 XMStockSpam_06 3212 1.61 1.55 1.65 116 UNTRUSTED_Relay 3205 3.02 5.37 1.65 117 XM_B_Investor 3056 2.89 5.15 1.57 118 T_XMDrugObfuBody_14 3047 2.57 4.28 1.57 119 TR_XM_UnparsRelay 3040 3.83 7.70 1.56 120 TR_XM_PhishingBody 2952 2.25 3.49 1.52 121 XMDiploma_00 2921 1.76 2.21 1.50 122 BAYES_05 2915 1.23 0.77 1.50 123 RCVD_IN_IADB_VOUCHED 2836 1.04 0.34 1.46 124 TR_LOTS_OF_MONEY3 2822 3.65 7.41 1.45 125 XM_OfRef6 2795 2.76 5.03 1.44 126 DKIM_INVALID 2729 2.09 3.26 1.40 127 T_XMDrugObfuBody_08 2702 2.26 3.74 1.39 128 TM2_M_VERY_LONG_WORD 2662 1.89 2.78 1.37 129 HTML_MIME_NO_HTML_TAG 2597 1.21 0.99 1.33 130 XMBody_17 2533 4.32 9.48 1.30 131 TR_XM_SpammyWords5 2514 2.27 3.94 1.29 132 URI_NOVOWEL 2485 1.30 1.33 1.28 133 T_TooManySym_03 2426 0.83 0.11 1.25 134 XM_H_Long_From02 2408 1.05 0.73 1.24 135 XM_SendGrid 2403 1.10 0.88 1.23 136 XM_B_Unsub2 2394 1.54 2.07 1.23 137 XMGappySubj_02 2358 0.78 0.03 1.21 138 SUBJ_ALL_CAPS 2297 1.91 3.15 1.18 139 XMSubMetaSxObfu_03 2260 1.18 1.22 1.16 140 XMBody_95 2233 0.77 0.12 1.15 141 URI_TRY_3LD 2200 1.67 2.60 1.13 142 XMBdyGiftCard01 2196 1.32 1.65 1.13 143 BOTNET 2169 3.38 7.27 1.11 144 XM_GoogleGroups 2155 0.89 0.53 1.11 145 KHOP_HELO_FCRDNS 2142 1.23 1.45 1.10 146 XM_B_COPY_HTML 1967 1.09 1.23 1.01 147 XM_B_SEO 1944 1.88 3.38 1.00 148 T_TVD_MIME_NO_HEADERS 1944 0.65 0.05 1.00 149 USER_IN_WELCOMELIST 1920 0.62 0.00 0.99 150 USER_IN_WHITELIST 1920 0.62 0.00 0.99 151 URI_HEX 1911 1.01 1.06 0.98 152 RCVD_IN_IADB_OPTIN 1874 0.68 0.19 0.96 153 RCVD_IN_BL_SPAMCOP_NET 1863 4.17 9.67 0.96 154 TooManyTo_003 1837 1.09 1.33 0.94 155 TR_XM_Base64_M1 1795 0.81 0.63 0.92 156 TR_XM_DK_SendGrid 1790 0.82 0.66 0.92 157 XM_UB50 1785 1.59 2.75 0.92 158 TR_MetaPhish_Combo_01 1689 1.06 1.39 0.87 159 XMSubMetaSx_01 1681 0.70 0.42 0.86 160 TR_XM_SpammyWords2 1649 6.50 16.17 0.85 161 T_XMHurry_00 1622 1.57 2.83 0.83 162 TooManyTo_004 1485 0.96 1.30 0.76 163 RCVD_IN_PSBL 1478 0.78 0.81 0.76 164 DKIM_ADSP_CUSTOM_MED 1441 0.77 0.81 0.74 165 THIS_AD 1435 0.96 1.35 0.74 166 MPART_ALT_DIFF_COUNT 1412 0.99 1.43 0.73 167 XMSubMetaSxObfu_02 1412 0.57 0.30 0.73 168 HTML_EXTRA_CLOSE 1409 0.47 0.03 0.72 169 T_XMDrugObfuBody_00 1402 0.98 1.43 0.72 170 XMGenDplmaNmb 1398 0.78 0.88 0.72 171 XM_B_FormFill 1347 0.45 0.04 0.69 172 TooManyTo_005 1332 0.90 1.27 0.68 173 XMPhish30 1321 0.87 1.21 0.68 174 XMBody_78 1291 0.59 0.47 0.66 175 TR_XM_SPAMCOP 1258 3.37 8.02 0.65 176 HTML_TAG_BALANCE_BODY 1222 1.09 1.87 0.63 177 XMSubMetaI_00 1208 0.74 0.94 0.62 178 XM_B_DNDMA 1193 0.68 0.80 0.61 179 RELAYCOUNTRY_AU 1170 1.13 2.02 0.60 180 XMNoVowels 1141 0.50 0.35 0.59 181 XM_ProductURIs 1137 0.75 1.04 0.58 182 TR_XM_SEO4 1083 1.46 3.01 0.56 183 XMLngstWrd_00 1072 0.45 0.29 0.55 184 HTML_FONT_FACE_BAD 1007 0.65 0.87 0.52 185 FILL_THIS_FORM 1007 0.40 0.21 0.52 186 NML_ADSP_CUSTOM_MED 1006 0.58 0.68 0.52 187 XMSubNoVowel 997 0.56 0.65 0.51 188 XMSubGiftCard1 975 0.36 0.11 0.50 189 SpammyFromTLD_01 971 0.91 1.63 0.50 190 T_TooManySym_04 966 0.32 0.03 0.50 191 T_FILL_THIS_FORM_SHORT 952 1.19 2.38 0.49 192 XM_S_SpammyWords 949 0.60 0.78 0.49 193 TR_XM_Spammywords 949 0.60 0.78 0.49 194 HTTPS_HTTP_MISMATCH 945 0.73 1.16 0.49 195 XMSlimDrugH 933 0.92 1.68 0.48 196 T_Symld_Words_02 932 0.50 0.53 0.48 197 DKIM_ADSP_NXDOMAIN 902 0.64 0.94 0.46 198 SHOPIFY_IMG_NOT_RCVD_SFY 880 0.65 0.99 0.45 199 XMLngstWrd_01 880 0.37 0.24 0.45 200 LONGLN_LOW_CONTRAST 867 0.90 1.66 0.45 ----------------------------------------------------------------------