Email: 324390 Autolearn: 0 AvgScore: 2.96 AvgScanTime: 1.07 sec Spam: 105044 Autolearn: 0 AvgScore: 13.45 AvgScanTime: 1.22 sec Ham: 219346 Autolearn: 0 AvgScore: -2.06 AvgScanTime: 1.00 sec Time Spent Running SA: 96.32 hours Time Spent Processing Spam: 35.46 hours Time Spent Processing Ham: 60.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 101235 90.07 96.37 87.05 2 DKIM_SIGNED 97043 75.28 92.38 67.09 3 XM_DK_Pass 94316 73.94 89.79 66.36 4 DKIM_VALID 93422 73.39 88.94 65.94 5 XM_B_Unicode 90587 75.56 86.24 70.45 6 RELAYCOUNTRY_US 89524 85.13 85.23 85.08 7 DCC_CHECK 81913 53.49 77.98 41.76 8 XMListUnsubscribeExists 80537 58.45 76.67 49.72 9 DKIM_VALID_AU 78172 63.15 74.42 57.75 10 XM_B_SpammyWords 76448 51.41 72.78 41.18 11 XM_DK_Undo_02 49464 19.04 47.09 5.60 12 XM_B_Unicode3 46080 40.04 43.87 38.21 13 RCVD_IN_MSPIKE_H2 46053 33.44 43.84 28.46 14 LOC_TINY_FONT_1 45315 31.66 43.14 26.16 15 XM_B_SpammyWords2 43812 26.82 41.71 19.70 16 BAYES_99 42273 16.02 40.24 4.42 17 HTML_FONT_LOW_CONTRAST 42022 33.25 40.00 30.01 18 FVGT_m_MULTI_ODD 39453 33.14 37.56 31.03 19 TR_XM_DKIM_Undo 36858 13.15 35.09 2.65 20 BAYES_50 34556 51.31 32.90 60.12 21 BAYES_999 33954 12.81 32.32 3.47 22 TR_DCC_Bayes_99 32600 11.47 31.03 2.10 23 T_KAM_HTML_FONT_INVALID 30559 21.76 29.09 18.25 24 DKIM_VALID_EF 27920 25.80 26.58 25.42 25 DCC_CHECK_NEGATIVE 23119 46.49 22.01 58.22 26 T_TM2_M_HEADER_IN_MSG 22190 30.14 21.12 34.46 27 MIME_HTML_ONLY 21416 17.56 20.39 16.20 28 XM_Multi_Part_URI 20516 15.78 19.53 13.98 29 TR_XM_DK_Unsub 20448 15.78 19.47 14.01 30 LOTS_OF_MONEY 17243 8.79 16.42 5.14 31 XMSubLong 16856 18.35 16.05 19.45 32 TR_MAX_INTL_RELAY 16556 9.66 15.76 6.74 33 TR_XM_SpammyWords2 15958 5.39 15.19 0.70 34 RELAYCOUNTRY_META 15918 7.36 15.15 3.63 35 TR_XM_SpammyWords4 14665 7.06 13.96 3.76 36 XM_B_SpammyWords3 14382 7.68 13.69 4.80 37 UNPARSEABLE_RELAY 14352 11.04 13.66 9.79 38 XM_B_Unsub 14002 9.20 13.33 7.22 39 BOTNET_IPINHOSTNAME 13636 7.13 12.98 4.33 40 TR_XM_BayesUnsub 13489 8.38 12.84 6.24 41 TR_XM_SpammyRelay 11120 4.83 10.59 2.07 42 BAYES_80 9986 5.83 9.51 4.07 43 XMBody_17 9601 3.58 9.14 0.92 44 RCVD_IN_BL_SPAMCOP_NET 9061 3.30 8.63 0.75 45 BAYES_60 8712 9.34 8.29 9.84 46 XM_Body_Dirty_Words 7924 4.30 7.54 2.74 47 TR_XM_UnparsRelay 7841 3.31 7.46 1.31 48 BOTNET 7775 3.02 7.40 0.92 49 TR_LOTS_OF_MONEY3 7437 2.89 7.08 0.88 50 XM_Evil_Numbers_Gen 7157 7.25 6.81 7.46 51 FSL_BULK_SIG 7069 6.01 6.73 5.67 52 TR_XM_SPAMCOP 6841 2.39 6.51 0.41 53 RELAYCOUNTRY_CA 6717 3.08 6.39 1.49 54 XMSubMetaSx_00 6691 4.48 6.37 3.57 55 LotsOfNums_01 6668 6.62 6.35 6.75 56 HTML_IMAGE_RATIO_02 6555 5.61 6.24 5.31 57 MPART_ALT_DIFF 6177 4.20 5.88 3.40 58 TooManyTo_001 6098 5.51 5.81 5.36 59 BAYES_95 6041 3.67 5.75 2.68 60 XM_B_Investor 5877 2.78 5.59 1.43 61 UNTRUSTED_Relay 5845 2.78 5.56 1.44 62 XM_UncommonTLD01 5697 4.30 5.42 3.76 63 XM_H_GMP 5481 6.30 5.22 6.81 64 HTML_IMAGE_RATIO_06 5230 3.05 4.98 2.13 65 XM_OfRef6 5026 1.97 4.78 0.63 66 TR_XM_SpammyWords5 4947 2.29 4.71 1.13 67 MIME_HTML_MOSTLY 4896 3.15 4.66 2.42 68 XM_H_Long_From01 4864 4.71 4.63 4.75 69 HTML_IMAGE_RATIO_04 4783 4.17 4.55 3.99 70 XM_SPF_SoftFail 4693 2.92 4.47 2.18 71 HTML_IMAGE_RATIO_08 4655 2.81 4.43 2.03 72 T_XMDrugObfuBody_08 4623 2.38 4.40 1.41 73 SUBJ_ALL_CAPS 4317 1.89 4.11 0.83 74 XMSexyCombo_05 4252 2.32 4.05 1.50 75 T_XMDrugObfuBody_14 4141 2.40 3.94 1.66 76 XMStrtUSub 4050 4.75 3.86 5.18 77 XM_B_SEO 3958 1.76 3.77 0.79 78 XM_B_Phish_Phrases 3910 3.05 3.72 2.73 79 TR_XM_PhishingBody 3713 2.06 3.53 1.35 80 DKIM_INVALID 3621 1.90 3.45 1.15 81 XMNumbers 3606 3.29 3.43 3.22 82 XM_URI_RBL 3502 1.20 3.33 0.18 83 XM_B_PhoneNumber 3486 4.80 3.32 5.51 84 RCVD_IN_VALIDITY_SAFE 3485 6.15 3.32 7.50 85 TR_XM_SEO4 3422 1.34 3.26 0.43 86 XM_CamelCaseFrm001 3378 2.82 3.22 2.63 87 XMBrknScrpt_02 3364 1.86 3.20 1.22 88 MIME_HTML_ONLY_MULTI 3161 2.21 3.01 1.82 89 XM_B_SpammyTLD 3070 2.42 2.92 2.17 90 USER_IN_DEF_DKIM_WL 3032 12.91 2.89 17.72 91 AC_BR_BONANZA 3003 1.01 2.86 0.13 92 XM_UB50 2955 1.43 2.81 0.77 93 TR_XM_NoHeaderRelay 2938 1.07 2.80 0.25 94 TM2_M_VERY_LONG_WORD 2898 1.82 2.76 1.37 95 RCVD_IN_VALIDITY_CERTIFIED 2736 5.00 2.60 6.14 96 URI_TRY_3LD 2712 1.48 2.58 0.96 97 T_XMHurry_00 2698 1.15 2.57 0.48 98 RELAYCOUNTRY_AU 2572 1.14 2.45 0.51 99 RCVD_IN_VALIDITY_RPBL 2565 0.82 2.44 0.04 100 TM2_M_URI_OPT_OUT 2488 1.84 2.37 1.59 101 TR_Caps_n_Bayes_99 2455 0.79 2.34 0.04 102 XM_HighProb1 2438 0.75 2.32 0.00 103 XMDiploma_00 2213 1.51 2.11 1.23 104 HTML_TAG_BALANCE_BODY 2116 1.12 2.01 0.69 105 HOSTED_IMG_MULTI_PUB_01 2061 0.65 1.96 0.03 106 XM_B_Unsub2 2027 1.30 1.93 0.99 107 T_FILL_THIS_FORM_SHORT 2020 0.86 1.92 0.35 108 XM_B_SpammyWords4 2019 1.17 1.92 0.80 109 RCVD_IN_MSPIKE_H3 1851 3.87 1.76 4.89 110 RCVD_IN_MSPIKE_WL 1851 3.87 1.76 4.89 111 TooManyTo_002 1845 1.57 1.76 1.49 112 LONGLN_LOW_CONTRAST 1837 0.81 1.75 0.36 113 THIS_AD 1818 1.02 1.73 0.68 114 KHOP_HELO_FCRDNS 1806 0.95 1.72 0.58 115 TooManyTo_003 1795 1.20 1.71 0.95 116 TooManyTo_004 1761 1.08 1.68 0.80 117 TooManyTo_005 1734 1.02 1.65 0.72 118 T_REMOTE_IMAGE 1692 2.15 1.61 2.41 119 RCVD_IN_PSBL 1648 0.92 1.57 0.60 120 T_TooManySym_01 1643 4.98 1.56 6.61 121 TR_XM_PHPDW 1599 11.74 1.52 16.63 122 TR_XM_PHPForged 1598 11.74 1.52 16.64 123 XMStockSpam_06 1593 1.40 1.52 1.35 124 T_XMDrugObfuBody_00 1591 0.86 1.51 0.55 125 FROM_EXCESS_BASE64 1588 1.76 1.51 1.87 126 SpammyFromTLD_01 1587 0.70 1.51 0.31 127 XM_DK_Undo_01 1557 1.37 1.48 1.31 128 MIME_QP_LONG_LINE 1543 2.20 1.47 2.55 129 TR_XM_FormFill2 1535 11.72 1.46 16.64 130 XM_H_PHPOS 1525 11.70 1.45 16.61 131 ALL_TRUSTED 1507 8.30 1.43 11.59 132 TR_Mismatch_TLD_02 1486 0.49 1.41 0.05 133 MPART_ALT_DIFF_COUNT 1471 0.86 1.40 0.61 134 XMSlimDrugH 1459 0.65 1.39 0.30 135 T_STY_INVIS_DIRECT 1441 0.72 1.37 0.41 136 AC_HTML_NONSENSE_TAGS 1429 0.45 1.36 0.01 137 XMReplyNow 1408 0.56 1.34 0.19 138 TR_XM_INV_DKIM 1407 0.48 1.34 0.07 139 TR_XM_FormFill 1406 0.44 1.34 0.01 140 URI_HEX 1396 0.93 1.33 0.74 141 DIET_1 1386 0.64 1.32 0.31 142 BAYES_40 1354 7.03 1.29 9.78 143 MAILING_LIST_MULTI 1353 2.02 1.29 2.37 144 XM_DIRTYINTL 1307 0.47 1.24 0.10 145 HTTPS_HTTP_MISMATCH 1281 0.72 1.22 0.49 146 XMPhish30 1252 0.77 1.19 0.57 147 SpammyFromTLD_02 1232 0.49 1.17 0.16 148 HTML_MIME_NO_HTML_TAG 1215 1.08 1.16 1.04 149 XM_B_COPY_HTML 1181 0.81 1.12 0.67 150 SHOPIFY_IMG_NOT_RCVD_SFY 1172 0.67 1.12 0.46 151 MISSING_HEADERS 1162 0.50 1.11 0.20 152 XMSubNoVowel 1129 0.63 1.07 0.41 153 TR_MetaPhish_Combo_01 1120 0.88 1.07 0.80 154 XM_B_Phish66 1097 0.49 1.04 0.22 155 URIBL_CSS_A 1069 0.61 1.02 0.41 156 URIBL_CSS 1069 0.61 1.02 0.41 157 URIBL_DBL_SPAM 1062 0.33 1.01 0.01 158 BAYES_20 1057 1.76 1.01 2.12 159 BOTNET_NORDNS 1049 0.33 1.00 0.01 160 XMBdyGiftCard01 1045 1.14 0.99 1.21 161 REPLYTO_WITHOUT_TO_CC 1038 0.34 0.99 0.02 162 T_MONEY_PERCENT 1032 0.45 0.98 0.20 163 TR_LOTS_OF_MONEY2 1032 0.45 0.98 0.20 164 RDNS_DYNAMIC 1012 0.49 0.96 0.27 165 TO_NO_BRKTS_FROM_MSSP 1006 0.31 0.96 0.01 166 FORGED_MUA_OUTLOOK 1006 0.33 0.96 0.03 167 AXB_XMAILER_MIMEOLE_OL_024C2 1005 0.31 0.96 0.00 168 XM_UB99 1002 0.31 0.95 0.01 169 FSL_CTYPE_WIN1251 1001 0.31 0.95 0.00 170 TR_XM_InvalidRelay 1000 0.32 0.95 0.01 171 URI_NOVOWEL 996 0.92 0.95 0.91 172 HTML_FONT_TINY_NORDNS 993 0.34 0.95 0.05 173 FSL_NEW_HELO_USER 989 0.30 0.94 0.00 174 PDS_RDNS_DYNAMIC_FP 968 0.33 0.92 0.05 175 FROM_MISSP_MSFT 966 0.30 0.92 0.00 176 FROM_MISSP_EH_MATCH 965 0.30 0.92 0.00 177 XMSubMetaI_00 955 0.87 0.91 0.85 178 FROM_MISSPACED 948 0.29 0.90 0.00 179 TR_Mismatch_TLD_01 939 0.41 0.89 0.17 180 XMHTMLBadTable_001 937 0.44 0.89 0.23 181 ANY_BOUNCE_MESSAGE 935 2.38 0.89 3.09 182 BOUNCE_MESSAGE 934 2.38 0.89 3.09 183 MONEY_FROM_MISSP 928 0.29 0.88 0.00 184 HTML_FONT_FACE_BAD 923 0.67 0.88 0.57 185 TR_LOTS_OF_MONEY1 917 0.29 0.87 0.01 186 XM_SendGrid 907 0.97 0.86 1.03 187 TR_Symld_Words 895 0.99 0.85 1.05 188 TVD_RCVD_IP 887 1.64 0.84 2.02 189 DKIM_ADSP_CUSTOM_MED 883 0.82 0.84 0.81 190 XMSexyCombo_01 877 0.41 0.83 0.21 191 URG_BIZ 863 0.31 0.82 0.07 192 XM_Dr_From 815 0.34 0.78 0.13 193 XMSubMetaSxObfu_03 813 0.52 0.77 0.40 194 TR_TooManyGl 802 0.55 0.76 0.45 195 XMSubEmpty 802 0.48 0.76 0.34 196 HELO_DYNAMIC_SPLIT_IP 792 0.25 0.75 0.01 197 NML_ADSP_CUSTOM_MED 784 0.62 0.75 0.56 198 PLING_QUERY 782 0.54 0.74 0.44 199 XM_DrOz_From 772 0.27 0.73 0.05 200 NSL_RCVD_HELO_USER 765 0.24 0.73 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 190950 90.07 96.37 87.05 2 RELAYCOUNTRY_US 186626 85.13 85.23 85.08 3 XM_B_Unicode 154524 75.56 86.24 70.45 4 DKIM_SIGNED 147164 75.28 92.38 67.09 5 XM_DK_Pass 145550 73.94 89.79 66.36 6 DKIM_VALID 144635 73.39 88.94 65.94 7 BAYES_50 131876 51.31 32.90 60.12 8 DCC_CHECK_NEGATIVE 127697 46.49 22.01 58.22 9 DKIM_VALID_AU 126678 63.15 74.42 57.75 10 XMListUnsubscribeExists 109054 58.45 76.67 49.72 11 DCC_CHECK 91605 53.49 77.98 41.76 12 XM_B_SpammyWords 90317 51.41 72.78 41.18 13 XM_B_Unicode3 83820 40.04 43.87 38.21 14 T_TM2_M_HEADER_IN_MSG 75585 30.14 21.12 34.46 15 FVGT_m_MULTI_ODD 68058 33.14 37.56 31.03 16 HTML_FONT_LOW_CONTRAST 65823 33.25 40.00 30.01 17 RCVD_IN_MSPIKE_H2 62429 33.44 43.84 28.46 18 LOC_TINY_FONT_1 57374 31.66 43.14 26.16 19 DKIM_VALID_EF 55761 25.80 26.58 25.42 20 IN_ZIMBRA_NJ_WHITELIST 45806 14.13 0.04 20.88 21 XM_B_SpammyWords2 43201 26.82 41.71 19.70 22 XMSubLong 42672 18.35 16.05 19.45 23 T_KAM_HTML_FONT_INVALID 40032 21.76 29.09 18.25 24 USER_IN_DEF_DKIM_WL 38858 12.91 2.89 17.72 25 XM_H_PHPMailer 37006 11.61 0.63 16.87 26 TR_XM_PHPForged 36489 11.74 1.52 16.64 27 TR_XM_FormFill2 36489 11.72 1.46 16.64 28 TR_XM_PHPDW 36478 11.74 1.52 16.63 29 XM_H_PHPOS 36442 11.70 1.45 16.61 30 XM_H_PHPOS_M 36101 11.18 0.17 16.46 31 MIME_HTML_ONLY 35532 17.56 20.39 16.20 32 TR_XM_DK_Unsub 30737 15.78 19.47 14.01 33 XM_Multi_Part_URI 30673 15.78 19.53 13.98 34 ALL_TRUSTED 25424 8.30 1.43 11.59 35 BAYES_60 21582 9.34 8.29 9.84 36 UNPARSEABLE_RELAY 21475 11.04 13.66 9.79 37 BAYES_40 21463 7.03 1.29 9.78 38 XM_DKIMWhitelistDomains 20458 6.32 0.03 9.33 39 RCVD_IN_VALIDITY_SAFE 16453 6.15 3.32 7.50 40 XM_Evil_Numbers_Gen 16368 7.25 6.81 7.46 41 XM_B_Unsub 15840 9.20 13.33 7.22 42 XM_H_GMP 14940 6.30 5.22 6.81 43 LotsOfNums_01 14803 6.62 6.35 6.75 44 TR_MAX_INTL_RELAY 14793 9.66 15.76 6.74 45 T_TooManySym_01 14501 4.98 1.56 6.61 46 TR_XM_BayesUnsub 13693 8.38 12.84 6.24 47 RCVD_IN_VALIDITY_CERTIFIED 13473 5.00 2.60 6.14 48 BAYES_00 12695 4.05 0.42 5.79 49 FSL_BULK_SIG 12429 6.01 6.73 5.67 50 XM_DK_Undo_02 12287 19.04 47.09 5.60 51 XM_B_PhoneNumber 12096 4.80 3.32 5.51 52 TooManyTo_001 11766 5.51 5.81 5.36 53 HTML_IMAGE_RATIO_02 11637 5.61 6.24 5.31 54 XMStrtUSub 11358 4.75 3.86 5.18 55 LOTS_OF_MONEY 11266 8.79 16.42 5.14 56 RCVD_IN_MSPIKE_H3 10717 3.87 1.76 4.89 57 RCVD_IN_MSPIKE_WL 10717 3.87 1.76 4.89 58 XM_B_SpammyWords3 10539 7.68 13.69 4.80 59 TR_XM_DK_Bayes 10494 3.34 0.31 4.78 60 TR_XM_DK_Bayes1 10441 3.30 0.27 4.76 61 XM_H_Long_From01 10418 4.71 4.63 4.75 62 BAYES_99 9692 16.02 40.24 4.42 63 BOTNET_IPINHOSTNAME 9505 7.13 12.98 4.33 64 TR_XM_DK_Bayes2 9367 2.93 0.14 4.27 65 BAYES_80 8922 5.83 9.51 4.07 66 HTML_IMAGE_RATIO_04 8758 4.17 4.55 3.99 67 XM_UncommonTLD01 8253 4.30 5.42 3.76 68 TR_XM_SpammyWords4 8240 7.06 13.96 3.76 69 RELAYCOUNTRY_META 7966 7.36 15.15 3.63 70 T_TooManySym_02 7851 2.56 0.43 3.58 71 XMSubMetaSx_00 7839 4.48 6.37 3.57 72 BAYES_999 7609 12.81 32.32 3.47 73 MPART_ALT_DIFF 7457 4.20 5.88 3.40 74 XMNumbers 7070 3.29 3.43 3.22 75 INVALID_MSGID 7032 2.22 0.15 3.21 76 TO_MALFORMED 6993 2.17 0.05 3.19 77 ANY_BOUNCE_MESSAGE 6779 2.38 0.89 3.09 78 BOUNCE_MESSAGE 6779 2.38 0.89 3.09 79 XM_Body_Dirty_Words 6012 4.30 7.54 2.74 80 XM_B_Phish_Phrases 5983 3.05 3.72 2.73 81 BAYES_95 5868 3.67 5.75 2.68 82 TR_XM_DKIM_Undo 5802 13.15 35.09 2.65 83 XM_CamelCaseFrm001 5776 2.82 3.22 2.63 84 MIME_QP_LONG_LINE 5595 2.20 1.47 2.55 85 MIME_HTML_MOSTLY 5315 3.15 4.66 2.42 86 T_REMOTE_IMAGE 5291 2.15 1.61 2.41 87 MAILING_LIST_MULTI 5188 2.02 1.29 2.37 88 XM_SPF_SoftFail 4785 2.92 4.47 2.18 89 XM_B_SpammyTLD 4768 2.42 2.92 2.17 90 HTML_IMAGE_RATIO_06 4671 3.05 4.98 2.13 91 BAYES_20 4649 1.76 1.01 2.12 92 TR_DCC_Bayes_99 4617 11.47 31.03 2.10 93 TR_XM_SpammyRelay 4536 4.83 10.59 2.07 94 HTML_IMAGE_RATIO_08 4445 2.81 4.43 2.03 95 TVD_RCVD_IP 4440 1.64 0.84 2.02 96 FROM_EXCESS_BASE64 4106 1.76 1.51 1.87 97 RCVD_IN_IADB_LISTED 3998 1.43 0.62 1.82 98 MIME_HTML_ONLY_MULTI 3995 2.21 3.01 1.82 99 XMBSHREFv2 3800 1.26 0.27 1.73 100 T_XMDrugObfuBody_14 3649 2.40 3.94 1.66 101 RCVD_IN_IADB_SPF 3601 1.28 0.54 1.64 102 XM_PDF 3533 1.18 0.29 1.61 103 TM2_M_URI_OPT_OUT 3480 1.84 2.37 1.59 104 XMSexyCombo_05 3281 2.32 4.05 1.50 105 RELAYCOUNTRY_CA 3272 3.08 6.39 1.49 106 TooManyTo_002 3263 1.57 1.76 1.49 107 RCVD_IN_IADB_SENDERID 3240 1.16 0.49 1.48 108 TVD_SPACE_RATIO 3240 1.07 0.21 1.48 109 RCVD_IN_IADB_DK 3182 1.14 0.50 1.45 110 IN_HORDE_ADDRESS_BOOK 3179 1.01 0.08 1.45 111 UNTRUSTED_Relay 3162 2.78 5.56 1.44 112 XM_B_Investor 3134 2.78 5.59 1.43 113 T_XMDrugObfuBody_08 3087 2.38 4.40 1.41 114 TM2_M_VERY_LONG_WORD 3002 1.82 2.76 1.37 115 TR_XM_PhishingBody 2965 2.06 3.53 1.35 116 XMStockSpam_06 2962 1.40 1.52 1.35 117 XMGappySubj_01 2906 0.95 0.15 1.32 118 XM_DK_Undo_01 2883 1.37 1.48 1.31 119 TR_XM_UnparsRelay 2882 3.31 7.46 1.31 120 T_TooManySym_03 2838 0.93 0.17 1.29 121 RCVD_IN_IADB_VOUCHED 2787 0.98 0.36 1.27 122 XMDiploma_00 2689 1.51 2.11 1.23 123 XMBrknScrpt_02 2680 1.86 3.20 1.22 124 XMBdyGiftCard01 2653 1.14 0.99 1.21 125 BAYES_05 2599 0.99 0.59 1.18 126 DKIM_INVALID 2529 1.90 3.45 1.15 127 TR_XM_SpammyWords5 2482 2.29 4.71 1.13 128 XMGappySubj_02 2466 0.79 0.10 1.12 129 TR_Symld_Words 2308 0.99 0.85 1.05 130 HTML_MIME_NO_HTML_TAG 2287 1.08 1.16 1.04 131 XM_SendGrid 2250 0.97 0.86 1.03 132 XM_B_Unsub2 2174 1.30 1.93 0.99 133 XM_GoogleGroups 2150 0.86 0.61 0.98 134 URI_TRY_3LD 2096 1.48 2.58 0.96 135 TooManyTo_003 2090 1.20 1.71 0.95 136 BOTNET 2027 3.02 7.40 0.92 137 XMBody_17 2025 3.58 9.14 0.92 138 RCVD_IN_IADB_OPTIN 1997 0.68 0.20 0.91 139 URI_NOVOWEL 1993 0.92 0.95 0.91 140 TR_LOTS_OF_MONEY3 1939 2.89 7.08 0.88 141 XMBody_95 1927 0.65 0.18 0.88 142 XMSubMetaI_00 1856 0.87 0.91 0.85 143 USER_IN_WELCOMELIST 1839 0.57 0.00 0.84 144 USER_IN_WHITELIST 1839 0.57 0.00 0.84 145 SUBJ_ALL_CAPS 1817 1.89 4.11 0.83 146 XM_H_Long_From02 1797 0.77 0.65 0.82 147 DKIM_ADSP_CUSTOM_MED 1785 0.82 0.84 0.81 148 XM_B_SpammyWords4 1761 1.17 1.92 0.80 149 TooManyTo_004 1749 1.08 1.68 0.80 150 TR_MetaPhish_Combo_01 1745 0.88 1.07 0.80 151 XM_B_SEO 1742 1.76 3.77 0.79 152 XM_UB50 1687 1.43 2.81 0.77 153 TR_XM_DK_SendGrid 1668 0.73 0.66 0.76 154 RCVD_IN_BL_SPAMCOP_NET 1652 3.30 8.63 0.75 155 URI_HEX 1632 0.93 1.33 0.74 156 TooManyTo_005 1583 1.02 1.65 0.72 157 TR_XM_SpammyWords2 1537 5.39 15.19 0.70 158 HTML_TAG_BALANCE_BODY 1519 1.12 2.01 0.69 159 THIS_AD 1481 1.02 1.73 0.68 160 XM_B_COPY_HTML 1459 0.81 1.12 0.67 161 XM_OfRef6 1371 1.97 4.78 0.63 162 MPART_ALT_DIFF_COUNT 1329 0.86 1.40 0.61 163 RCVD_IN_PSBL 1324 0.92 1.57 0.60 164 XMSubMetaSxObfu_02 1300 0.49 0.28 0.59 165 TR_XM_Base64_M1 1287 0.57 0.54 0.59 166 T_TooManySym_04 1278 0.40 0.02 0.58 167 KHOP_HELO_FCRDNS 1277 0.95 1.72 0.58 168 XMOemUri 1263 0.46 0.23 0.58 169 XMPhish30 1261 0.77 1.19 0.57 170 HTML_FONT_FACE_BAD 1246 0.67 0.88 0.57 171 NML_ADSP_CUSTOM_MED 1223 0.62 0.75 0.56 172 T_XMDrugObfuBody_00 1210 0.86 1.51 0.55 173 XM_ProductURIs 1163 0.58 0.70 0.53 174 XM_B_FormFill 1162 0.38 0.07 0.53 175 XMGenDplmaNmb 1156 0.57 0.66 0.53 176 FORGED_GMAIL_RCVD 1140 0.57 0.68 0.52 177 RELAYCOUNTRY_AU 1122 1.14 2.45 0.51 178 XMNoVowels 1104 0.52 0.57 0.50 179 HTTPS_HTTP_MISMATCH 1067 0.72 1.22 0.49 180 T_XMHurry_00 1042 1.15 2.57 0.48 181 AD_PREFS 1035 0.33 0.04 0.47 182 XM_B_DNDMA 1020 0.51 0.59 0.47 183 SHOPIFY_IMG_NOT_RCVD_SFY 1002 0.67 1.12 0.46 184 TR_TooManyGl 990 0.55 0.76 0.45 185 XM_RXBody 988 0.43 0.38 0.45 186 PLING_QUERY 970 0.54 0.74 0.44 187 TR_XM_SEO4 938 1.34 3.26 0.43 188 XMLngstWrd_00 916 0.40 0.38 0.42 189 FILL_THIS_FORM 909 0.35 0.21 0.41 190 XMSubNoVowel 907 0.63 1.07 0.41 191 TR_XM_SPAMCOP 906 2.39 6.51 0.41 192 URIBL_CSS_A 903 0.61 1.02 0.41 193 URIBL_CSS 903 0.61 1.02 0.41 194 T_STY_INVIS_DIRECT 892 0.72 1.37 0.41 195 DKIM_ADSP_NXDOMAIN 883 0.50 0.71 0.40 196 TR_XM_Spammywords 883 0.44 0.53 0.40 197 XM_S_SpammyWords 883 0.44 0.53 0.40 198 XMSubMetaSxObfu_03 880 0.52 0.77 0.40 199 LONGLN_LOW_CONTRAST 793 0.81 1.75 0.36 200 XMClaimOffer 782 0.44 0.62 0.36 ----------------------------------------------------------------------