Email: 310345 Autolearn: 0 AvgScore: 5.42 AvgScanTime: 1.13 sec Spam: 124384 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.20 sec Ham: 185961 Autolearn: 0 AvgScore: -0.20 AvgScanTime: 1.08 sec Time Spent Running SA: 97.09 hours Time Spent Processing Spam: 41.45 hours Time Spent Processing Ham: 55.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 120633 87.15 96.98 80.57 2 DKIM_SIGNED 114144 82.32 91.77 76.01 3 XM_DK_Pass 111052 80.72 89.28 74.99 4 DKIM_VALID 110414 80.22 88.77 74.50 5 XM_B_Unicode 106462 75.89 85.59 69.39 6 RELAYCOUNTRY_US 104490 80.73 84.01 78.53 7 DCC_CHECK 97026 57.77 78.01 44.23 8 XMListUnsubscribeExists 95685 63.61 76.93 54.70 9 XM_B_SpammyWords 92734 56.22 74.55 43.95 10 DKIM_VALID_AU 92591 68.35 74.44 64.28 11 XM_DK_Undo_02 62674 24.69 50.39 7.51 12 XM_B_SpammyWords2 56142 30.10 45.14 20.05 13 XM_B_Unicode3 54657 43.15 43.94 42.63 14 RCVD_IN_MSPIKE_H2 54327 37.23 43.68 32.92 15 BAYES_99 53374 20.83 42.91 6.06 16 LOC_TINY_FONT_1 52596 33.86 42.29 28.23 17 HTML_FONT_LOW_CONTRAST 50953 34.89 40.96 30.82 18 TR_XM_DKIM_Undo 47409 17.13 38.12 3.09 19 FVGT_m_MULTI_ODD 45828 31.20 36.84 27.42 20 BAYES_999 44208 17.12 35.54 4.80 21 TR_DCC_Bayes_99 40075 14.58 32.22 2.79 22 BAYES_50 39899 48.28 32.08 59.11 23 T_KAM_HTML_FONT_INVALID 37688 24.30 30.30 20.28 24 DKIM_VALID_EF 33104 28.46 26.61 29.70 25 T_TM2_M_HEADER_IN_MSG 29363 24.28 23.61 24.73 26 MIME_HTML_ONLY 28462 20.84 22.88 19.47 27 DCC_CHECK_NEGATIVE 27338 42.21 21.98 55.74 28 TR_XM_DK_Unsub 25750 18.27 20.70 16.65 29 XM_Multi_Part_URI 23929 19.19 19.24 19.15 30 TR_XM_SpammyWords2 23149 8.10 18.61 1.07 31 XMSubLong 22163 19.89 17.82 21.27 32 LOTS_OF_MONEY 20670 10.03 16.62 5.63 33 RELAYCOUNTRY_META 20255 9.29 16.28 4.62 34 XM_B_SpammyWords3 19628 10.03 15.78 6.18 35 TR_XM_SpammyWords4 19413 8.58 15.61 3.89 36 TR_MAX_INTL_RELAY 17955 10.20 14.44 7.37 37 XM_B_Unsub 17765 10.70 14.28 8.31 38 UNPARSEABLE_RELAY 17298 12.11 13.91 10.91 39 TR_XM_BayesUnsub 16887 9.50 13.58 6.77 40 TR_XM_SpammyRelay 15058 6.45 12.11 2.67 41 BOTNET_IPINHOSTNAME 14265 7.87 11.47 5.46 42 RCVD_IN_BL_SPAMCOP_NET 11581 4.29 9.31 0.93 43 XMBody_17 11410 4.19 9.17 0.86 44 BAYES_80 10876 6.16 8.74 4.43 45 TR_XM_UnparsRelay 10184 4.39 8.19 1.86 46 FSL_BULK_SIG 10046 7.33 8.08 6.83 47 XM_Evil_Numbers_Gen 9785 8.24 7.87 8.48 48 TR_XM_SPAMCOP 9683 3.44 7.78 0.53 49 XM_Body_Dirty_Words 9562 4.77 7.69 2.82 50 BAYES_60 9358 9.85 7.52 11.41 51 BOTNET 9089 3.72 7.31 1.32 52 TR_LOTS_OF_MONEY3 9000 3.42 7.24 0.87 53 UNTRUSTED_Relay 8649 4.07 6.95 2.15 54 RELAYCOUNTRY_CA 8542 3.86 6.87 1.85 55 XMSubMetaSx_00 7708 5.00 6.20 4.20 56 LotsOfNums_01 7562 7.06 6.08 7.72 57 HTML_IMAGE_RATIO_02 7151 5.83 5.75 5.88 58 BAYES_95 6691 3.92 5.38 2.94 59 TooManyTo_001 6669 6.18 5.36 6.73 60 MPART_ALT_DIFF 6566 4.71 5.28 4.32 61 XM_B_Investor 6532 3.05 5.25 1.59 62 XM_OfRef6 6237 2.54 5.01 0.88 63 HTML_IMAGE_RATIO_06 6209 3.66 4.99 2.78 64 XM_H_Long_From01 6123 4.98 4.92 5.02 65 XM_UncommonTLD01 6090 5.16 4.90 5.34 66 XM_SPF_SoftFail 5751 3.22 4.62 2.29 67 TR_XM_PhishingBody 5722 2.79 4.60 1.57 68 RCVD_IN_VALIDITY_SAFE 5663 5.40 4.55 5.96 69 TR_XM_SpammyWords5 5602 2.43 4.50 1.04 70 XM_B_Phish_Phrases 5310 3.78 4.27 3.46 71 T_XMDrugObfuBody_14 5262 2.72 4.23 1.72 72 SUBJ_ALL_CAPS 5236 2.35 4.21 1.11 73 XM_UB50 5208 2.26 4.19 0.96 74 HTML_IMAGE_RATIO_04 5162 3.91 4.15 3.75 75 XM_H_GMP 5149 6.13 4.14 7.46 76 XM_URI_RBL 5098 1.80 4.10 0.26 77 XMSexyCombo_05 5018 2.66 4.03 1.74 78 HTML_IMAGE_RATIO_08 5002 2.80 4.02 1.99 79 MIME_HTML_MOSTLY 4810 3.19 3.87 2.74 80 XMStrtUSub 4774 4.89 3.84 5.59 81 XM_B_SEO 4737 2.15 3.81 1.04 82 RCVD_IN_VALIDITY_CERTIFIED 4613 4.31 3.71 4.71 83 MIME_QP_LONG_LINE 4577 3.61 3.68 3.56 84 XM_B_PhoneNumber 4476 5.70 3.60 7.11 85 XMBrknScrpt_02 4266 2.26 3.43 1.47 86 TR_XM_SEO4 4251 1.73 3.42 0.60 87 TM2_M_VERY_LONG_WORD 3824 2.10 3.07 1.45 88 USER_IN_DEF_DKIM_WL 3819 12.14 3.07 18.21 89 XMNumbers 3816 2.89 3.07 2.77 90 MIME_HTML_ONLY_MULTI 3790 2.70 3.05 2.47 91 TR_XM_NoHeaderRelay 3772 1.30 3.03 0.14 92 DKIM_INVALID 3730 2.10 3.00 1.51 93 T_XMHurry_00 3546 1.79 2.85 1.08 94 URI_TRY_3LD 3413 1.76 2.74 1.10 95 XM_HighProb1 3381 1.11 2.72 0.03 96 T_REMOTE_IMAGE 3367 3.14 2.71 3.42 97 XM_CamelCaseFrm001 3366 2.34 2.71 2.10 98 XMDiploma_00 3348 2.11 2.69 1.72 99 T_XMDrugObfuBody_08 3341 1.90 2.69 1.38 100 XM_B_SpammyTLD 3236 4.85 2.60 6.36 101 RCVD_IN_MSPIKE_H3 2884 4.34 2.32 5.69 102 RCVD_IN_MSPIKE_WL 2884 4.34 2.32 5.69 103 TR_Caps_n_Bayes_99 2835 0.93 2.28 0.03 104 TM2_M_URI_OPT_OUT 2834 1.94 2.28 1.71 105 DKIM_ADSP_NXDOMAIN 2776 1.16 2.23 0.44 106 HTML_TAG_BALANCE_BODY 2621 1.24 2.11 0.66 107 T_TooManySym_01 2615 5.09 2.10 7.09 108 T_FILL_THIS_FORM_SHORT 2581 1.13 2.08 0.50 109 FROM_EXCESS_BASE64 2566 2.20 2.06 2.29 110 AC_BR_BONANZA 2518 0.88 2.02 0.11 111 TM2_M_A_HREF_HREF 2472 0.94 1.99 0.23 112 RCVD_IN_VALIDITY_RPBL 2466 0.93 1.98 0.22 113 BOUNCE_MESSAGE 2448 3.04 1.97 3.75 114 ANY_BOUNCE_MESSAGE 2448 3.04 1.97 3.75 115 SpammyFromTLD_01 2400 1.16 1.93 0.65 116 XMStockSpam_06 2400 1.20 1.93 0.72 117 RELAYCOUNTRY_AU 2395 1.21 1.93 0.72 118 XM_B_SpammyWords4 2379 1.44 1.91 1.12 119 XM_B_Unsub2 2351 1.53 1.89 1.29 120 HOSTED_IMG_MULTI_PUB_01 2344 0.78 1.88 0.05 121 KHOP_HELO_FCRDNS 2245 1.34 1.80 1.04 122 LONGLN_LOW_CONTRAST 2149 0.91 1.73 0.37 123 XMPhish14 2048 0.90 1.65 0.40 124 TR_XM_PHPForged 1957 0.78 1.57 0.25 125 RELAYCOUNTRY_CN 1930 0.65 1.55 0.05 126 TR_XM_PHPDW 1928 0.77 1.55 0.25 127 XMBounce_01 1906 0.62 1.53 0.01 128 TR_XM_FormFill2 1903 0.77 1.53 0.25 129 XM_H_PHPOS 1896 0.75 1.52 0.23 130 MAILING_LIST_MULTI 1879 2.38 1.51 2.97 131 TR_XM_FormFill 1852 0.61 1.49 0.02 132 THIS_AD 1837 0.93 1.48 0.56 133 TR_XM_INV_DKIM 1836 0.64 1.48 0.08 134 T_XMDrugObfuBody_00 1831 1.11 1.47 0.86 135 XM_ProductURIs 1767 1.01 1.42 0.74 136 URI_NOVOWEL 1720 3.39 1.38 4.73 137 XM_OfRef7 1698 0.68 1.37 0.22 138 T_STY_INVIS_DIRECT 1691 0.79 1.36 0.41 139 TR_Mismatch_TLD_02 1688 0.58 1.36 0.06 140 AC_HTML_NONSENSE_TAGS 1675 0.55 1.35 0.02 141 HTML_FONT_TINY_NORDNS 1663 0.56 1.34 0.04 142 XM_B_COPY_HTML 1603 1.05 1.29 0.89 143 URIBL_DBL_SPAM 1590 0.52 1.28 0.01 144 TR_XM_InvalidRelay 1558 0.52 1.25 0.03 145 XM_DIRTYINTL 1549 0.61 1.25 0.19 146 SpammyFromTLD_02 1534 0.64 1.23 0.24 147 XMPhish30 1503 0.88 1.21 0.67 148 DIET_1 1503 0.65 1.21 0.27 149 BAYES_40 1483 3.29 1.19 4.70 150 XMReplyNow 1469 0.56 1.18 0.14 151 URI_HEX 1426 1.01 1.15 0.91 152 HTTPS_HTTP_MISMATCH 1401 0.75 1.13 0.50 153 ALL_TRUSTED 1370 10.63 1.10 17.01 154 XMGenDplmaNmb 1316 0.84 1.06 0.70 155 MISSING_HEADERS 1305 0.58 1.05 0.27 156 XM_DK_Undo_01 1286 1.66 1.03 2.08 157 SHOPIFY_IMG_NOT_RCVD_SFY 1266 0.67 1.02 0.44 158 HTML_MIME_NO_HTML_TAG 1221 1.34 0.98 1.57 159 MPART_ALT_DIFF_COUNT 1216 0.62 0.98 0.39 160 PLING_QUERY 1208 0.66 0.97 0.45 161 BAYES_20 1191 2.18 0.96 3.00 162 TR_XM_Base64_M1 1189 0.85 0.96 0.78 163 HTML_FONT_FACE_BAD 1148 0.66 0.92 0.49 164 LongTLD 1143 0.51 0.92 0.23 165 TooManyTo_002 1142 1.64 0.92 2.13 166 FORGED_MUA_OUTLOOK 1127 0.39 0.91 0.04 167 AXB_XMAILER_MIMEOLE_OL_024C2 1125 0.36 0.90 0.00 168 FSL_CTYPE_WIN1251 1120 0.36 0.90 0.00 169 FSL_NEW_HELO_USER 1116 0.36 0.90 0.00 170 XMSexyCombo_01 1107 0.50 0.89 0.25 171 REPLYTO_WITHOUT_TO_CC 1082 0.36 0.87 0.02 172 T_MONEY_PERCENT 1071 0.50 0.86 0.25 173 TR_LOTS_OF_MONEY2 1071 0.50 0.86 0.25 174 NSL_RCVD_FROM_USER 1068 0.34 0.86 0.00 175 BOTNET_NORDNS 1056 0.35 0.85 0.01 176 TooManyTo_003 1053 0.84 0.85 0.84 177 RELAYCOUNTRY_IN 1052 0.36 0.85 0.04 178 XMBdyGiftCard01 1038 1.14 0.83 1.35 179 TooManyTo_004 1025 0.71 0.82 0.63 180 XMClaimOffer 1025 0.38 0.82 0.09 181 XM_B_Phish66 1022 0.51 0.82 0.31 182 XM_B_REG_HTML 1017 0.54 0.82 0.36 183 FILL_THIS_FORM 1008 0.49 0.81 0.28 184 TooManyTo_005 1004 0.65 0.81 0.55 185 XM_SendGrid 990 1.02 0.80 1.17 186 RCVD_IN_IADB_LISTED 990 1.89 0.80 2.62 187 XMSubMetaSSx_00 984 0.45 0.79 0.23 188 TO_NO_BRKTS_FROM_MSSP 978 0.32 0.79 0.01 189 FROM_MISSPACED 968 0.31 0.78 0.00 190 XMSubMetaI_00 958 0.54 0.77 0.38 191 FROM_MISSP_MSFT 952 0.31 0.77 0.00 192 XM_UB60 950 0.34 0.76 0.06 193 XM_B_DNDMA 950 0.67 0.76 0.60 194 XM_Combo_Sbj 949 0.40 0.76 0.15 195 FROM_MISSP_EH_MATCH 947 0.31 0.76 0.00 196 RDNS_DYNAMIC 936 0.52 0.75 0.37 197 XMHTMLBadTable_001 926 0.48 0.74 0.30 198 TR_XM_Undi_Recip15 916 0.30 0.74 0.00 199 TM2_M_OBFU_COMMENT 914 0.53 0.73 0.40 200 RELAYCOUNTRY_KR 914 0.30 0.73 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149828 87.15 96.98 80.57 2 RELAYCOUNTRY_US 146040 80.73 84.01 78.53 3 DKIM_SIGNED 141341 82.32 91.77 76.01 4 XM_DK_Pass 139444 80.72 89.28 74.99 5 DKIM_VALID 138540 80.22 88.77 74.50 6 XM_B_Unicode 129047 75.89 85.59 69.39 7 DKIM_VALID_AU 119543 68.35 74.44 64.28 8 BAYES_50 109924 48.28 32.08 59.11 9 DCC_CHECK_NEGATIVE 103648 42.21 21.98 55.74 10 XMListUnsubscribeExists 101721 63.61 76.93 54.70 11 DCC_CHECK 82255 57.77 78.01 44.23 12 XM_B_SpammyWords 81733 56.22 74.55 43.95 13 XM_B_Unicode3 79267 43.15 43.94 42.63 14 RCVD_IN_MSPIKE_H2 61221 37.23 43.68 32.92 15 HTML_FONT_LOW_CONTRAST 57312 34.89 40.96 30.82 16 DKIM_VALID_EF 55228 28.46 26.61 29.70 17 LOC_TINY_FONT_1 52495 33.86 42.29 28.23 18 FVGT_m_MULTI_ODD 50997 31.20 36.84 27.42 19 T_TM2_M_HEADER_IN_MSG 45979 24.28 23.61 24.73 20 XMSubLong 39561 19.89 17.82 21.27 21 T_KAM_HTML_FONT_INVALID 37717 24.30 30.30 20.28 22 XM_B_SpammyWords2 37277 30.10 45.14 20.05 23 MIME_HTML_ONLY 36215 20.84 22.88 19.47 24 XM_Multi_Part_URI 35613 19.19 19.24 19.15 25 USER_IN_DEF_DKIM_WL 33861 12.14 3.07 18.21 26 ALL_TRUSTED 31625 10.63 1.10 17.01 27 TR_XM_DK_Unsub 30956 18.27 20.70 16.65 28 BAYES_60 21225 9.85 7.52 11.41 29 UNPARSEABLE_RELAY 20291 12.11 13.91 10.91 30 XM_DKIMWhitelistDomains 18759 6.06 0.05 10.09 31 XM_Evil_Numbers_Gen 15772 8.24 7.87 8.48 32 XM_B_Unsub 15448 10.70 14.28 8.31 33 LotsOfNums_01 14358 7.06 6.08 7.72 34 XM_DK_Undo_02 13962 24.69 50.39 7.51 35 XM_H_GMP 13876 6.13 4.14 7.46 36 TR_MAX_INTL_RELAY 13714 10.20 14.44 7.37 37 XM_B_PhoneNumber 13217 5.70 3.60 7.11 38 T_TooManySym_01 13189 5.09 2.10 7.09 39 FSL_BULK_SIG 12703 7.33 8.08 6.83 40 BAYES_00 12590 4.31 0.64 6.77 41 TR_XM_BayesUnsub 12583 9.50 13.58 6.77 42 TooManyTo_001 12516 6.18 5.36 6.73 43 XM_B_SpammyTLD 11825 4.85 2.60 6.36 44 XM_B_SpammyWords3 11498 10.03 15.78 6.18 45 BAYES_99 11266 20.83 42.91 6.06 46 RCVD_IN_VALIDITY_SAFE 11087 5.40 4.55 5.96 47 HTML_IMAGE_RATIO_02 10929 5.83 5.75 5.88 48 IN_ZIMBRA_NJ_WHITELIST 10772 3.50 0.07 5.79 49 TR_XM_DK_Bayes 10710 3.59 0.35 5.76 50 TR_XM_DK_Bayes1 10612 3.55 0.34 5.71 51 RCVD_IN_MSPIKE_WL 10580 4.34 2.32 5.69 52 RCVD_IN_MSPIKE_H3 10580 4.34 2.32 5.69 53 LOTS_OF_MONEY 10464 10.03 16.62 5.63 54 XMStrtUSub 10392 4.89 3.84 5.59 55 BOTNET_IPINHOSTNAME 10148 7.87 11.47 5.46 56 XM_UncommonTLD01 9926 5.16 4.90 5.34 57 XM_H_Long_From01 9336 4.98 4.92 5.02 58 TR_XM_DK_Bayes2 9144 3.05 0.26 4.92 59 BAYES_999 8921 17.12 35.54 4.80 60 URI_NOVOWEL 8797 3.39 1.38 4.73 61 RCVD_IN_VALIDITY_CERTIFIED 8762 4.31 3.71 4.71 62 BAYES_40 8739 3.29 1.19 4.70 63 RELAYCOUNTRY_META 8587 9.29 16.28 4.62 64 BAYES_80 8236 6.16 8.74 4.43 65 MPART_ALT_DIFF 8042 4.71 5.28 4.32 66 XMSubMetaSx_00 7805 5.00 6.20 4.20 67 T_TooManySym_02 7678 2.76 0.72 4.13 68 TR_XM_SpammyWords4 7230 8.58 15.61 3.89 69 TO_MALFORMED 7073 2.30 0.05 3.80 70 INVALID_MSGID 7051 2.34 0.18 3.79 71 ANY_BOUNCE_MESSAGE 6981 3.04 1.97 3.75 72 BOUNCE_MESSAGE 6981 3.04 1.97 3.75 73 HTML_IMAGE_RATIO_04 6975 3.91 4.15 3.75 74 MIME_QP_LONG_LINE 6619 3.61 3.68 3.56 75 XM_B_Phish_Phrases 6430 3.78 4.27 3.46 76 T_REMOTE_IMAGE 6365 3.14 2.71 3.42 77 TR_XM_DKIM_Undo 5751 17.13 38.12 3.09 78 BAYES_20 5577 2.18 0.96 3.00 79 MAILING_LIST_MULTI 5517 2.38 1.51 2.97 80 BAYES_95 5471 3.92 5.38 2.94 81 XM_Body_Dirty_Words 5238 4.77 7.69 2.82 82 TR_DCC_Bayes_99 5184 14.58 32.22 2.79 83 HTML_IMAGE_RATIO_06 5161 3.66 4.99 2.78 84 XMNumbers 5152 2.89 3.07 2.77 85 MIME_HTML_MOSTLY 5094 3.19 3.87 2.74 86 TR_XM_SpammyRelay 4965 6.45 12.11 2.67 87 RCVD_IN_IADB_LISTED 4877 1.89 0.80 2.62 88 XM_PDF 4665 1.65 0.36 2.51 89 MIME_HTML_ONLY_MULTI 4595 2.70 3.05 2.47 90 TVD_RCVD_IP 4567 1.73 0.64 2.46 91 RCVD_IN_IADB_SPF 4453 1.72 0.71 2.39 92 XM_SPF_SoftFail 4255 3.22 4.62 2.29 93 FROM_EXCESS_BASE64 4253 2.20 2.06 2.29 94 RCVD_IN_IADB_SENDERID 4108 1.59 0.67 2.21 95 UNTRUSTED_Relay 3996 4.07 6.95 2.15 96 RCVD_IN_IADB_DK 3987 1.55 0.67 2.14 97 TooManyTo_002 3957 1.64 0.92 2.13 98 XM_CamelCaseFrm001 3901 2.34 2.71 2.10 99 XMBSHREFv2 3890 1.47 0.54 2.09 100 XM_DK_Undo_01 3866 1.66 1.03 2.08 101 HTML_IMAGE_RATIO_08 3693 2.80 4.02 1.99 102 XM_TLDProd2 3676 1.27 0.21 1.98 103 TR_XM_UnparsRelay 3450 4.39 8.19 1.86 104 RELAYCOUNTRY_CA 3448 3.86 6.87 1.85 105 TVD_SPACE_RATIO 3253 1.11 0.15 1.75 106 XMSexyCombo_05 3237 2.66 4.03 1.74 107 XMDiploma_00 3202 2.11 2.69 1.72 108 T_XMDrugObfuBody_14 3191 2.72 4.23 1.72 109 TM2_M_URI_OPT_OUT 3172 1.94 2.28 1.71 110 IN_HORDE_ADDRESS_BOOK 3158 1.05 0.08 1.70 111 RCVD_IN_IADB_VOUCHED 3048 1.14 0.41 1.64 112 XMGappySubj_01 2954 1.03 0.21 1.59 113 XM_B_Investor 2948 3.05 5.25 1.59 114 BAYES_05 2933 1.17 0.57 1.58 115 HTML_MIME_NO_HTML_TAG 2926 1.34 0.98 1.57 116 TR_XM_PhishingBody 2925 2.79 4.60 1.57 117 T_TooManySym_03 2860 1.01 0.22 1.54 118 DKIM_INVALID 2801 2.10 3.00 1.51 119 XMBrknScrpt_02 2736 2.26 3.43 1.47 120 TM2_M_VERY_LONG_WORD 2688 2.10 3.07 1.45 121 T_XMDrugObfuBody_08 2562 1.90 2.69 1.38 122 XMNoVowels 2551 0.92 0.25 1.37 123 XMBdyGiftCard01 2512 1.14 0.83 1.35 124 BOTNET 2450 3.72 7.31 1.32 125 XM_B_Unsub2 2404 1.53 1.89 1.29 126 TR_Symld_Words 2384 1.02 0.62 1.28 127 XM_H_Long_From02 2339 0.98 0.56 1.26 128 XMGappySubj_02 2249 0.76 0.09 1.21 129 XM_SendGrid 2180 1.02 0.80 1.17 130 XM_GoogleGroups 2145 0.90 0.53 1.15 131 XM_B_SpammyWords4 2086 1.44 1.91 1.12 132 SUBJ_ALL_CAPS 2057 2.35 4.21 1.11 133 RCVD_IN_IADB_OPTIN 2047 0.75 0.23 1.10 134 URI_TRY_3LD 2043 1.76 2.74 1.10 135 T_XMHurry_00 2003 1.79 2.85 1.08 136 TR_XM_SpammyWords2 1992 8.10 18.61 1.07 137 TR_XM_SpammyWords5 1934 2.43 4.50 1.04 138 XM_B_SEO 1931 2.15 3.81 1.04 139 KHOP_HELO_FCRDNS 1929 1.34 1.80 1.04 140 T_TVD_MIME_NO_HEADERS 1824 0.60 0.02 0.98 141 USER_IN_WELCOMELIST 1812 0.58 0.00 0.97 142 USER_IN_WHITELIST 1812 0.58 0.00 0.97 143 XM_UB50 1794 2.26 4.19 0.96 144 RCVD_IN_BL_SPAMCOP_NET 1728 4.29 9.31 0.93 145 URI_HEX 1698 1.01 1.15 0.91 146 XM_B_COPY_HTML 1662 1.05 1.29 0.89 147 XM_OfRef6 1638 2.54 5.01 0.88 148 HTML_EXTRA_CLOSE 1630 0.53 0.02 0.88 149 NO_DNS_FOR_FROM 1625 0.68 0.40 0.87 150 TR_LOTS_OF_MONEY3 1609 3.42 7.24 0.87 151 T_XMDrugObfuBody_00 1606 1.11 1.47 0.86 152 XMBody_17 1598 4.19 9.17 0.86 153 XMBody_95 1566 0.55 0.11 0.84 154 TooManyTo_003 1560 0.84 0.85 0.84 155 XM_B_FormFill 1537 0.51 0.05 0.83 156 DKIM_ADSP_CUSTOM_MED 1518 0.75 0.64 0.82 157 TR_XM_DK_SendGrid 1484 0.72 0.61 0.80 158 XMLngstWrd_00 1478 0.59 0.29 0.79 159 TR_XM_Base64_M1 1456 0.85 0.96 0.78 160 XM_ProductURIs 1374 1.01 1.42 0.74 161 RELAYCOUNTRY_AU 1347 1.21 1.93 0.72 162 XMStockSpam_06 1338 1.20 1.93 0.72 163 TR_MetaPhish_Combo_01 1336 0.71 0.71 0.72 164 XM_H_PHPMailer 1327 0.67 0.60 0.71 165 T_TooManySym_04 1307 0.45 0.07 0.70 166 XMGenDplmaNmb 1294 0.84 1.06 0.70 167 XMSubMetaSxObfu_02 1260 0.55 0.37 0.68 168 XMPhish30 1239 0.88 1.21 0.67 169 HTML_TAG_BALANCE_BODY 1226 1.24 2.11 0.66 170 SpammyFromTLD_01 1210 1.16 1.93 0.65 171 TooManyTo_004 1174 0.71 0.82 0.63 172 XM_B_DNDMA 1114 0.67 0.76 0.60 173 TR_XM_SEO4 1113 1.73 3.42 0.60 174 THIS_AD 1043 0.93 1.48 0.56 175 TooManyTo_005 1023 0.65 0.81 0.55 176 NML_ADSP_CUSTOM_MED 1005 0.54 0.53 0.54 177 TR_XM_SPAMCOP 980 3.44 7.78 0.53 178 HTTPS_HTTP_MISMATCH 931 0.75 1.13 0.50 179 T_FILL_THIS_FORM_SHORT 926 1.13 2.08 0.50 180 HTML_FONT_FACE_BAD 910 0.66 0.92 0.49 181 RCVD_IN_PSBL 910 0.54 0.61 0.49 182 XMSlimDrugH 890 0.53 0.61 0.48 183 FORGED_GMAIL_RCVD 889 0.49 0.51 0.48 184 XMSubMetaSxObfu_03 853 0.43 0.39 0.46 185 HELO_NODOT 843 0.39 0.30 0.45 186 HELO_NO_DOMAIN 843 0.39 0.29 0.45 187 PLING_QUERY 834 0.66 0.97 0.45 188 DKIM_ADSP_NXDOMAIN 818 1.16 2.23 0.44 189 SHOPIFY_IMG_NOT_RCVD_SFY 812 0.67 1.02 0.44 190 LOW_PRICE 811 0.38 0.29 0.44 191 XM_S_SubURI 771 0.26 0.03 0.41 192 T_STY_INVIS_DIRECT 765 0.79 1.36 0.41 193 T_OBFU_PDF_ATTACH 762 0.27 0.06 0.41 194 TM2_M_OBFU_COMMENT 746 0.53 0.73 0.40 195 XMPhish14 741 0.90 1.65 0.40 196 CTE_8BIT_MISMATCH 726 0.24 0.02 0.39 197 MPART_ALT_DIFF_COUNT 716 0.62 0.98 0.39 198 XMSubMetaI_00 710 0.54 0.77 0.38 199 XMCapTrack 707 0.40 0.43 0.38 200 XMOemUri 707 0.36 0.33 0.38 ----------------------------------------------------------------------