Email: 304427 Autolearn: 0 AvgScore: 5.06 AvgScanTime: 1.14 sec Spam: 119940 Autolearn: 0 AvgScore: 13.56 AvgScanTime: 1.18 sec Ham: 184487 Autolearn: 0 AvgScore: -0.46 AvgScanTime: 1.12 sec Time Spent Running SA: 96.55 hours Time Spent Processing Spam: 39.37 hours Time Spent Processing Ham: 57.18 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 114782 87.14 95.70 81.57 2 DKIM_SIGNED 108240 81.86 90.25 76.40 3 XM_DK_Pass 105047 80.26 87.58 75.50 4 DKIM_VALID 104347 79.73 87.00 75.01 5 XM_B_Unicode 102179 76.80 85.19 71.34 6 RELAYCOUNTRY_US 99772 80.41 83.18 78.60 7 XMListUnsubscribeExists 92716 65.09 77.30 57.15 8 DCC_CHECK 92616 59.15 77.22 47.41 9 DKIM_VALID_AU 88622 68.65 73.89 65.24 10 XM_B_SpammyWords 87169 55.71 72.68 44.68 11 XM_DK_Undo_02 60139 23.96 50.14 6.94 12 BAYES_99 53735 21.28 44.80 6.00 13 XM_B_Unicode3 52137 44.32 43.47 44.88 14 XM_B_SpammyWords2 51709 29.43 43.11 20.54 15 RCVD_IN_MSPIKE_H2 51128 36.65 42.63 32.77 16 HTML_FONT_LOW_CONTRAST 49913 36.97 41.61 33.96 17 LOC_TINY_FONT_1 49716 34.93 41.45 30.69 18 TR_XM_DKIM_Undo 46391 17.07 38.68 3.02 19 FVGT_m_MULTI_ODD 45108 31.73 37.61 27.92 20 BAYES_999 44085 17.27 36.76 4.60 21 TR_DCC_Bayes_99 39462 14.74 32.90 2.93 22 BAYES_50 35620 47.25 29.70 58.66 23 T_KAM_HTML_FONT_INVALID 34810 23.60 29.02 20.07 24 DKIM_VALID_EF 31940 27.72 26.63 28.43 25 DCC_CHECK_NEGATIVE 27310 40.82 22.77 52.56 26 MIME_HTML_ONLY 26761 21.01 22.31 20.17 27 TR_XM_DK_Unsub 25052 17.91 20.89 15.97 28 T_TM2_M_HEADER_IN_MSG 24692 21.29 20.59 21.75 29 XM_Multi_Part_URI 22983 18.52 19.16 18.10 30 TR_XM_SpammyWords2 22666 8.01 18.90 0.93 31 XMSubLong 21590 21.46 18.00 23.72 32 LOTS_OF_MONEY 20324 10.86 16.95 6.91 33 TR_XM_SpammyWords4 18916 8.49 15.77 3.76 34 RELAYCOUNTRY_META 18159 8.35 15.14 3.94 35 TR_MAX_INTL_RELAY 17315 10.72 14.44 8.31 36 XM_B_SpammyWords3 17314 8.50 14.44 4.64 37 UNPARSEABLE_RELAY 16464 12.15 13.73 11.12 38 BOTNET_IPINHOSTNAME 15296 8.06 12.75 5.01 39 XM_B_Unsub 14758 9.33 12.30 7.39 40 TR_XM_BayesUnsub 13965 8.35 11.64 6.21 41 TR_XM_SpammyRelay 12614 5.42 10.52 2.10 42 RCVD_IN_BL_SPAMCOP_NET 10884 4.08 9.07 0.83 43 BAYES_80 10441 6.50 8.71 5.06 44 TR_XM_UnparsRelay 9844 4.32 8.21 1.79 45 BOTNET 9775 3.81 8.15 0.99 46 XMBody_17 9572 3.74 7.98 0.98 47 TR_LOTS_OF_MONEY3 9547 3.83 7.96 1.14 48 BAYES_60 9457 10.31 7.88 11.88 49 XM_Evil_Numbers_Gen 9450 8.12 7.88 8.27 50 TR_XM_SPAMCOP 8915 3.19 7.43 0.42 51 FSL_BULK_SIG 8680 6.72 7.24 6.39 52 UNTRUSTED_Relay 8325 4.04 6.94 2.15 53 HTML_IMAGE_RATIO_02 8301 6.38 6.92 6.03 54 XM_Body_Dirty_Words 8230 5.36 6.86 4.38 55 TooManyTo_001 7008 6.09 5.84 6.25 56 LotsOfNums_01 6688 6.78 5.58 7.55 57 XMSubMetaSx_00 6653 4.71 5.55 4.17 58 RELAYCOUNTRY_CA 6652 3.26 5.55 1.77 59 BAYES_95 6527 4.11 5.44 3.24 60 RCVD_IN_VALIDITY_SAFE 6403 6.75 5.34 7.66 61 MPART_ALT_DIFF 6260 4.69 5.22 4.34 62 XMStrtUSub 6201 5.43 5.17 5.60 63 XM_H_Long_From01 5647 4.86 4.71 4.96 64 HTML_IMAGE_RATIO_06 5372 3.56 4.48 2.96 65 MIME_HTML_MOSTLY 5365 3.49 4.47 2.85 66 T_XMDrugObfuBody_14 5332 3.25 4.45 2.47 67 HTML_IMAGE_RATIO_04 5133 5.27 4.28 5.91 68 XM_URI_RBL 5129 1.86 4.28 0.29 69 RCVD_IN_VALIDITY_CERTIFIED 5106 5.37 4.26 6.09 70 XM_SPF_SoftFail 5083 3.09 4.24 2.34 71 XM_UncommonTLD01 5009 4.83 4.18 5.26 72 XM_B_Investor 4973 2.42 4.15 1.30 73 XMSexyCombo_05 4909 3.66 4.09 3.37 74 XM_H_GMP 4907 6.12 4.09 7.43 75 USER_IN_DEF_DKIM_WL 4785 13.77 3.99 20.13 76 TR_XM_SpammyWords5 4637 2.22 3.87 1.16 77 XM_B_Phish_Phrases 4482 3.37 3.74 3.14 78 XM_UB50 4393 1.97 3.66 0.87 79 XM_B_SEO 4252 1.97 3.55 0.95 80 HTML_IMAGE_RATIO_08 4212 2.90 3.51 2.50 81 TR_XM_PhishingBody 4194 2.38 3.50 1.66 82 TM2_M_VERY_LONG_WORD 4127 2.20 3.44 1.39 83 XM_OfRef6 4029 1.86 3.36 0.88 84 MIME_QP_LONG_LINE 4029 3.30 3.36 3.26 85 XM_B_PhoneNumber 3982 5.55 3.32 6.99 86 XMBrknScrpt_02 3947 2.30 3.29 1.66 87 DKIM_INVALID 3893 2.12 3.25 1.39 88 XM_CamelCaseFrm001 3684 2.86 3.07 2.72 89 XMNumbers 3625 2.95 3.02 2.91 90 ALL_TRUSTED 3616 11.57 3.01 17.14 91 T_XMDrugObfuBody_08 3518 2.99 2.93 3.03 92 TR_XM_SEO4 3506 1.46 2.92 0.51 93 XM_HighProb1 3448 1.16 2.87 0.04 94 SUBJ_ALL_CAPS 3441 1.70 2.87 0.94 95 MIME_HTML_ONLY_MULTI 3372 2.39 2.81 2.12 96 URI_TRY_3LD 3233 1.63 2.70 0.94 97 T_TooManySym_01 3214 5.92 2.68 8.03 98 XMDiploma_00 3198 2.12 2.67 1.77 99 T_XMHurry_00 3181 1.68 2.65 1.05 100 TR_XM_NoHeaderRelay 3023 1.03 2.52 0.07 101 T_REMOTE_IMAGE 2964 3.76 2.47 4.59 102 AC_BR_BONANZA 2878 1.05 2.40 0.17 103 RCVD_IN_MSPIKE_WL 2872 4.57 2.39 5.98 104 RCVD_IN_MSPIKE_H3 2872 4.57 2.39 5.98 105 TM2_M_URI_OPT_OUT 2764 1.90 2.30 1.63 106 DKIM_ADSP_NXDOMAIN 2721 1.20 2.27 0.50 107 FROM_EXCESS_BASE64 2623 2.40 2.19 2.54 108 XM_B_SpammyTLD 2620 4.12 2.18 5.37 109 RELAYCOUNTRY_AU 2547 1.11 2.12 0.46 110 HTML_TAG_BALANCE_BODY 2537 1.31 2.12 0.78 111 RCVD_IN_VALIDITY_RPBL 2435 0.87 2.03 0.12 112 XM_B_SpammyWords4 2432 1.24 2.03 0.72 113 BOUNCE_MESSAGE 2375 2.64 1.98 3.08 114 ANY_BOUNCE_MESSAGE 2375 2.64 1.98 3.08 115 URI_NOVOWEL 2122 3.03 1.77 3.85 116 TM2_M_BODY_EMPTY 2120 0.85 1.77 0.26 117 XMEmptyBody_01 2102 0.78 1.75 0.15 118 RELAYCOUNTRY_CN 2073 0.72 1.73 0.06 119 TR_XM_PHPDW 2038 0.80 1.70 0.21 120 TR_XM_PHPForged 2024 0.80 1.69 0.22 121 LONGLN_LOW_CONTRAST 1999 0.86 1.67 0.34 122 TR_XM_FormFill2 1992 0.80 1.66 0.24 123 XM_H_PHPOS 1986 0.78 1.66 0.21 124 HOSTED_IMG_MULTI_PUB_01 1878 0.63 1.57 0.02 125 XMBounce_01 1855 0.62 1.55 0.01 126 XM_B_Unsub2 1843 1.32 1.54 1.18 127 HTML_FONT_TINY_NORDNS 1818 0.63 1.52 0.06 128 TR_XM_INV_DKIM 1776 0.64 1.48 0.09 129 T_FILL_THIS_FORM_SHORT 1752 0.85 1.46 0.45 130 AC_HTML_NONSENSE_TAGS 1747 0.59 1.46 0.03 131 XMReplyNow 1708 0.68 1.42 0.19 132 TR_Caps_n_Bayes_99 1689 0.57 1.41 0.02 133 XMSubMetaI_00 1676 0.90 1.40 0.57 134 THIS_AD 1658 0.86 1.38 0.52 135 XMStockSpam_06 1645 0.93 1.37 0.65 136 PLING_QUERY 1632 0.77 1.36 0.39 137 MAILING_LIST_MULTI 1606 1.88 1.34 2.23 138 XM_B_COPY_HTML 1598 1.32 1.33 1.31 139 BAYES_40 1585 3.20 1.32 4.42 140 SpammyFromTLD_01 1563 0.86 1.30 0.57 141 T_STY_INVIS_DIRECT 1531 0.74 1.28 0.39 142 URIBL_DBL_SPAM 1495 0.50 1.25 0.01 143 TR_MetaPhish_Combo_01 1485 0.84 1.24 0.57 144 XM_DK_Undo_01 1482 1.52 1.24 1.70 145 SpammyFromTLD_02 1467 0.59 1.22 0.17 146 XM_ProductURIs 1463 1.31 1.22 1.37 147 KHOP_HELO_FCRDNS 1412 0.82 1.18 0.60 148 TR_Symld_Words 1408 1.12 1.17 1.08 149 DIET_1 1398 0.80 1.17 0.56 150 URI_HEX 1376 0.97 1.15 0.86 151 BOTNET_NORDNS 1352 0.45 1.13 0.01 152 HTTPS_HTTP_MISMATCH 1349 0.88 1.12 0.73 153 T_XMDrugObfuBody_00 1331 0.88 1.11 0.73 154 XMPhish30 1322 0.86 1.10 0.70 155 HTML_MIME_NO_HTML_TAG 1275 1.25 1.06 1.37 156 XM_B_Phish66 1222 0.59 1.02 0.31 157 XMHTMLBadTable_001 1208 0.56 1.01 0.26 158 XM_UB60 1172 0.42 0.98 0.06 159 BAYES_20 1157 2.20 0.96 3.00 160 TooManyTo_002 1151 1.64 0.96 2.09 161 TR_LOTS_OF_MONEY2 1149 0.57 0.96 0.32 162 T_MONEY_PERCENT 1149 0.57 0.96 0.32 163 XMSexyCombo_01 1131 0.49 0.94 0.19 164 HTML_FONT_FACE_BAD 1129 0.71 0.94 0.56 165 XMBdyGiftCard01 1113 1.33 0.93 1.60 166 TR_XM_InvalidRelay 1103 0.38 0.92 0.02 167 RDNS_DYNAMIC 1096 0.58 0.91 0.36 168 TooManyTo_003 1093 0.92 0.91 0.93 169 TR_XM_Base64_M1 1092 0.91 0.91 0.91 170 SHOPIFY_IMG_NOT_RCVD_SFY 1082 0.63 0.90 0.45 171 PDS_RDNS_DYNAMIC_FP 1072 0.41 0.89 0.09 172 TooManyTo_004 1065 0.79 0.89 0.73 173 MPART_ALT_DIFF_COUNT 1045 0.62 0.87 0.45 174 XMGenDplmaNmb 1043 0.80 0.87 0.75 175 TooManyTo_005 1039 0.72 0.87 0.63 176 RCVD_IN_PSBL 1033 0.63 0.86 0.48 177 XM_B_REG_HTML 1011 0.60 0.84 0.43 178 T_Symld_Words_02 983 0.49 0.82 0.27 179 TVD_RCVD_IP 973 1.74 0.81 2.35 180 RELAYCOUNTRY_FR 962 0.43 0.80 0.20 181 TR_XM_FormFill 960 0.33 0.80 0.03 182 XM_SendGrid 949 1.05 0.79 1.22 183 XM_UB99 918 0.30 0.77 0.00 184 LongTLD 904 0.39 0.75 0.16 185 RELAYCOUNTRY_IN 902 0.32 0.75 0.03 186 NORDNS_LOW_CONTRAST 877 0.33 0.73 0.06 187 XMSubMetaSSx_00 874 0.36 0.73 0.12 188 XMWrdNumbWrd 872 0.32 0.73 0.05 189 XM_H_PHPMailer 856 0.71 0.71 0.71 190 XM_H_Long_From02 851 0.84 0.71 0.92 191 HELO_DYNAMIC_SPLIT_IP 835 0.28 0.70 0.01 192 XMSubMetaSxObfu_03 833 0.46 0.69 0.31 193 TR_Mismatch_TLD_01 827 0.44 0.69 0.27 194 HTML_OBFUSCATE_05_10 825 0.36 0.69 0.15 195 HTML_TAG_BALANCE_HEAD 825 0.34 0.69 0.11 196 TR_Mismatch_TLD_02 821 0.31 0.68 0.06 197 XMSlimDrugH 815 0.59 0.68 0.53 198 XMPhish14 807 0.46 0.67 0.32 199 TR_XM_Base64_L1 802 0.38 0.67 0.19 200 DKIM_ADSP_CUSTOM_MED 794 0.75 0.66 0.81 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 150493 87.14 95.70 81.57 2 RELAYCOUNTRY_US 145011 80.41 83.18 78.60 3 DKIM_SIGNED 140950 81.86 90.25 76.40 4 XM_DK_Pass 139288 80.26 87.58 75.50 5 DKIM_VALID 138382 79.73 87.00 75.01 6 XM_B_Unicode 131621 76.80 85.19 71.34 7 DKIM_VALID_AU 120363 68.65 73.89 65.24 8 BAYES_50 108225 47.25 29.70 58.66 9 XMListUnsubscribeExists 105439 65.09 77.30 57.15 10 DCC_CHECK_NEGATIVE 96969 40.82 22.77 52.56 11 DCC_CHECK 87465 59.15 77.22 47.41 12 XM_B_Unicode3 82789 44.32 43.47 44.88 13 XM_B_SpammyWords 82435 55.71 72.68 44.68 14 HTML_FONT_LOW_CONTRAST 62644 36.97 41.61 33.96 15 RCVD_IN_MSPIKE_H2 60458 36.65 42.63 32.77 16 LOC_TINY_FONT_1 56618 34.93 41.45 30.69 17 DKIM_VALID_EF 52448 27.72 26.63 28.43 18 FVGT_m_MULTI_ODD 51500 31.73 37.61 27.92 19 XMSubLong 43755 21.46 18.00 23.72 20 T_TM2_M_HEADER_IN_MSG 40122 21.29 20.59 21.75 21 XM_B_SpammyWords2 37887 29.43 43.11 20.54 22 MIME_HTML_ONLY 37209 21.01 22.31 20.17 23 USER_IN_DEF_DKIM_WL 37139 13.77 3.99 20.13 24 T_KAM_HTML_FONT_INVALID 37026 23.60 29.02 20.07 25 XM_Multi_Part_URI 33385 18.52 19.16 18.10 26 ALL_TRUSTED 31621 11.57 3.01 17.14 27 TR_XM_DK_Unsub 29460 17.91 20.89 15.97 28 BAYES_60 21920 10.31 7.88 11.88 29 XM_DKIMWhitelistDomains 21630 7.12 0.05 11.72 30 UNPARSEABLE_RELAY 20514 12.15 13.73 11.12 31 TR_MAX_INTL_RELAY 15325 10.72 14.44 8.31 32 XM_Evil_Numbers_Gen 15265 8.12 7.88 8.27 33 T_TooManySym_01 14821 5.92 2.68 8.03 34 RCVD_IN_VALIDITY_SAFE 14133 6.75 5.34 7.66 35 LotsOfNums_01 13937 6.78 5.58 7.55 36 XM_H_GMP 13716 6.12 4.09 7.43 37 XM_B_Unsub 13638 9.33 12.30 7.39 38 XM_B_PhoneNumber 12901 5.55 3.32 6.99 39 XM_DK_Undo_02 12804 23.96 50.14 6.94 40 LOTS_OF_MONEY 12750 10.86 16.95 6.91 41 FSL_BULK_SIG 11789 6.72 7.24 6.39 42 TooManyTo_001 11533 6.09 5.84 6.25 43 TR_XM_BayesUnsub 11452 8.35 11.64 6.21 44 BAYES_00 11244 3.95 0.64 6.09 45 RCVD_IN_VALIDITY_CERTIFIED 11232 5.37 4.26 6.09 46 HTML_IMAGE_RATIO_02 11123 6.38 6.92 6.03 47 BAYES_99 11060 21.28 44.80 6.00 48 RCVD_IN_MSPIKE_WL 11026 4.57 2.39 5.98 49 RCVD_IN_MSPIKE_H3 11026 4.57 2.39 5.98 50 HTML_IMAGE_RATIO_04 10904 5.27 4.28 5.91 51 XMStrtUSub 10329 5.43 5.17 5.60 52 IN_ZIMBRA_NJ_WHITELIST 10185 3.37 0.05 5.52 53 XM_B_SpammyTLD 9914 4.12 2.18 5.37 54 XM_UncommonTLD01 9710 4.83 4.18 5.26 55 TR_XM_DK_Bayes 9371 3.23 0.38 5.08 56 BAYES_80 9335 6.50 8.71 5.06 57 TR_XM_DK_Bayes1 9297 3.19 0.35 5.04 58 BOTNET_IPINHOSTNAME 9242 8.06 12.75 5.01 59 XM_H_Long_From01 9149 4.86 4.71 4.96 60 XM_B_SpammyWords3 8567 8.50 14.44 4.64 61 BAYES_999 8492 17.27 36.76 4.60 62 T_REMOTE_IMAGE 8474 3.76 2.47 4.59 63 TR_XM_DK_Bayes2 8379 2.87 0.31 4.54 64 BAYES_40 8150 3.20 1.32 4.42 65 XM_Body_Dirty_Words 8075 5.36 6.86 4.38 66 MPART_ALT_DIFF 8009 4.69 5.22 4.34 67 XMSubMetaSx_00 7687 4.71 5.55 4.17 68 RELAYCOUNTRY_META 7262 8.35 15.14 3.94 69 URI_NOVOWEL 7110 3.03 1.77 3.85 70 TO_MALFORMED 7071 2.34 0.04 3.83 71 T_TooManySym_02 6950 2.54 0.65 3.77 72 TR_XM_SpammyWords4 6942 8.49 15.77 3.76 73 INVALID_MSGID 6924 2.33 0.14 3.75 74 XMSexyCombo_05 6221 3.66 4.09 3.37 75 MIME_QP_LONG_LINE 6021 3.30 3.36 3.26 76 BAYES_95 5986 4.11 5.44 3.24 77 XM_B_Phish_Phrases 5791 3.37 3.74 3.14 78 BOUNCE_MESSAGE 5674 2.64 1.98 3.08 79 ANY_BOUNCE_MESSAGE 5674 2.64 1.98 3.08 80 T_XMDrugObfuBody_08 5586 2.99 2.93 3.03 81 TR_XM_DKIM_Undo 5565 17.07 38.68 3.02 82 BAYES_20 5531 2.20 0.96 3.00 83 HTML_IMAGE_RATIO_06 5452 3.56 4.48 2.96 84 TR_DCC_Bayes_99 5411 14.74 32.90 2.93 85 XMNumbers 5367 2.95 3.02 2.91 86 MIME_HTML_MOSTLY 5249 3.49 4.47 2.85 87 XM_CamelCaseFrm001 5025 2.86 3.07 2.72 88 FROM_EXCESS_BASE64 4695 2.40 2.19 2.54 89 HTML_IMAGE_RATIO_08 4608 2.90 3.51 2.50 90 T_XMDrugObfuBody_14 4562 3.25 4.45 2.47 91 TVD_RCVD_IP 4337 1.74 0.81 2.35 92 XM_SPF_SoftFail 4315 3.09 4.24 2.34 93 MAILING_LIST_MULTI 4122 1.88 1.34 2.23 94 RCVD_IN_IADB_LISTED 4035 1.57 0.63 2.19 95 UNTRUSTED_Relay 3959 4.04 6.94 2.15 96 MIME_HTML_ONLY_MULTI 3909 2.39 2.81 2.12 97 TR_XM_SpammyRelay 3879 5.42 10.52 2.10 98 TooManyTo_002 3850 1.64 0.96 2.09 99 XMBSHREFv2 3720 1.31 0.22 2.02 100 XM_PDF 3705 1.34 0.32 2.01 101 RCVD_IN_IADB_SPF 3634 1.41 0.55 1.97 102 RCVD_IN_IADB_SENDERID 3328 1.29 0.51 1.80 103 TR_XM_UnparsRelay 3302 4.32 8.21 1.79 104 XMDiploma_00 3264 2.12 2.67 1.77 105 RELAYCOUNTRY_CA 3262 3.26 5.55 1.77 106 RCVD_IN_IADB_DK 3217 1.26 0.51 1.74 107 TVD_SPACE_RATIO 3204 1.10 0.13 1.74 108 IN_HORDE_ADDRESS_BOOK 3190 1.07 0.07 1.73 109 T_MANY_PILL_PRICE 3180 1.05 0.01 1.72 110 XM_DK_Undo_01 3137 1.52 1.24 1.70 111 XMBrknScrpt_02 3070 2.30 3.29 1.66 112 TR_XM_PhishingBody 3057 2.38 3.50 1.66 113 BAYES_05 3036 1.21 0.54 1.65 114 XMGappySubj_01 3035 1.07 0.19 1.65 115 TM2_M_URI_OPT_OUT 3012 1.90 2.30 1.63 116 XM_TLDProd2 2973 1.09 0.29 1.61 117 XMBdyGiftCard01 2948 1.33 0.93 1.60 118 RCVD_IN_IADB_VOUCHED 2688 1.02 0.35 1.46 119 XMGappySubj_02 2662 0.91 0.09 1.44 120 DKIM_INVALID 2568 2.12 3.25 1.39 121 TM2_M_VERY_LONG_WORD 2567 2.20 3.44 1.39 122 HTML_MIME_NO_HTML_TAG 2523 1.25 1.06 1.37 123 XM_ProductURIs 2522 1.31 1.22 1.37 124 T_TooManySym_03 2483 0.89 0.19 1.35 125 XM_B_COPY_HTML 2413 1.32 1.33 1.31 126 XM_B_Investor 2402 2.42 4.15 1.30 127 XM_SendGrid 2258 1.05 0.79 1.22 128 XM_B_Unsub2 2174 1.32 1.54 1.18 129 XM_GoogleGroups 2138 0.94 0.60 1.16 130 TR_XM_SpammyWords5 2132 2.22 3.87 1.16 131 TR_LOTS_OF_MONEY3 2112 3.83 7.96 1.14 132 TR_Symld_Words 1987 1.12 1.17 1.08 133 XM_B_FormFill 1959 0.67 0.06 1.06 134 T_XMHurry_00 1945 1.68 2.65 1.05 135 MY_SERVERS_FOUND 1928 0.70 0.17 1.05 136 USER_IN_WHITELIST 1863 0.61 0.00 1.01 137 USER_IN_WELCOMELIST 1863 0.61 0.00 1.01 138 RCVD_IN_IADB_OPTIN 1848 0.68 0.20 1.00 139 BOTNET 1833 3.81 8.15 0.99 140 LOW_PRICE 1819 0.71 0.28 0.99 141 XMBody_17 1808 3.74 7.98 0.98 142 XM_B_SEO 1745 1.97 3.55 0.95 143 SUBJ_ALL_CAPS 1738 1.70 2.87 0.94 144 URI_TRY_3LD 1728 1.63 2.70 0.94 145 TooManyTo_003 1719 0.92 0.91 0.93 146 TR_XM_SpammyWords2 1708 8.01 18.90 0.93 147 XM_H_Long_From02 1700 0.84 0.71 0.92 148 NO_DNS_FOR_FROM 1685 0.73 0.45 0.91 149 TR_XM_Base64_M1 1670 0.91 0.91 0.91 150 XM_OfRef6 1623 1.86 3.36 0.88 151 XM_UB50 1609 1.97 3.66 0.87 152 TR_XM_DK_SendGrid 1587 0.77 0.62 0.86 153 URI_HEX 1587 0.97 1.15 0.86 154 RCVD_IN_BL_SPAMCOP_NET 1536 4.08 9.07 0.83 155 DKIM_ADSP_CUSTOM_MED 1502 0.75 0.66 0.81 156 XMBody_95 1473 0.54 0.15 0.80 157 HTML_TAG_BALANCE_BODY 1437 1.31 2.12 0.78 158 XMGenDplmaNmb 1383 0.80 0.87 0.75 159 XMSubMetaSxObfu_02 1355 0.55 0.27 0.73 160 TooManyTo_004 1345 0.79 0.89 0.73 161 T_XMDrugObfuBody_00 1343 0.88 1.11 0.73 162 HTTPS_HTTP_MISMATCH 1342 0.88 1.12 0.73 163 XM_B_SpammyWords4 1331 1.24 2.03 0.72 164 XM_H_PHPMailer 1317 0.71 0.71 0.71 165 XMPhish30 1290 0.86 1.10 0.70 166 XMStockSpam_06 1197 0.93 1.37 0.65 167 TooManyTo_005 1167 0.72 0.87 0.63 168 XMNoVowels 1101 0.50 0.36 0.60 169 KHOP_HELO_FCRDNS 1098 0.82 1.18 0.60 170 T_TooManySym_04 1078 0.37 0.04 0.58 171 XM_B_DNDMA 1065 0.56 0.53 0.58 172 TR_MetaPhish_Combo_01 1057 0.84 1.24 0.57 173 XMSubMetaI_00 1055 0.90 1.40 0.57 174 SpammyFromTLD_01 1054 0.86 1.30 0.57 175 DIET_1 1039 0.80 1.17 0.56 176 HTML_FONT_FACE_BAD 1031 0.71 0.94 0.56 177 XMLngstWrd_00 1026 0.46 0.31 0.56 178 FILL_THIS_FORM 1001 0.44 0.27 0.54 179 AD_PREFS 978 0.34 0.05 0.53 180 XMSlimDrugH 977 0.59 0.68 0.53 181 THIS_AD 960 0.86 1.38 0.52 182 TR_XM_SEO4 948 1.46 2.92 0.51 183 NML_ADSP_CUSTOM_MED 939 0.53 0.57 0.51 184 SUBJ_DOLLARS 936 0.52 0.54 0.51 185 DKIM_ADSP_NXDOMAIN 924 1.20 2.27 0.50 186 RCVD_IN_PSBL 879 0.63 0.86 0.48 187 FORGED_GMAIL_RCVD 872 0.50 0.54 0.47 188 MSGID_FROM_MTA_HEADER 847 0.30 0.05 0.46 189 RELAYCOUNTRY_AU 842 1.11 2.12 0.46 190 MPART_ALT_DIFF_COUNT 837 0.62 0.87 0.45 191 T_FILL_THIS_FORM_SHORT 834 0.85 1.46 0.45 192 SHOPIFY_IMG_NOT_RCVD_SFY 821 0.63 0.90 0.45 193 XMSolicitRefs_0 809 0.45 0.47 0.44 194 HELO_NODOT 806 0.39 0.31 0.44 195 HELO_NO_DOMAIN 806 0.38 0.30 0.44 196 XM_B_REG_HTML 801 0.60 0.84 0.43 197 TR_XM_SPAMCOP 783 3.19 7.43 0.42 198 XM_S_SubURI 767 0.26 0.03 0.42 199 CTE_8BIT_MISMATCH 731 0.24 0.01 0.40 200 T_STY_INVIS_DIRECT 728 0.74 1.28 0.39 ----------------------------------------------------------------------