Email: 322874 Autolearn: 0 AvgScore: 5.59 AvgScanTime: 1.17 sec Spam: 134643 Autolearn: 0 AvgScore: 13.64 AvgScanTime: 1.21 sec Ham: 188231 Autolearn: 0 AvgScore: -0.17 AvgScanTime: 1.14 sec Time Spent Running SA: 104.90 hours Time Spent Processing Spam: 45.19 hours Time Spent Processing Ham: 59.71 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127289 88.09 94.54 83.48 2 DKIM_SIGNED 123963 84.29 92.07 78.72 3 XM_DK_Pass 121052 82.72 89.91 77.57 4 DKIM_VALID 120291 82.19 89.34 77.08 5 XM_B_Unicode 117731 78.46 87.44 72.05 6 RELAYCOUNTRY_US 114634 82.73 85.14 81.00 7 DCC_CHECK 108325 60.91 80.45 46.93 8 XMListUnsubscribeExists 104920 65.93 77.92 57.35 9 XM_B_SpammyWords 102841 59.57 76.38 47.54 10 DKIM_VALID_AU 101189 69.77 75.15 65.92 11 XM_DK_Undo_02 71761 26.67 53.30 7.62 12 BAYES_99 61635 22.80 45.78 6.37 13 XM_B_SpammyWords2 61135 31.43 45.41 21.44 14 RCVD_IN_MSPIKE_H2 59980 38.99 44.55 35.02 15 LOC_TINY_FONT_1 57087 35.38 42.40 30.35 16 XM_B_Unicode3 56498 43.75 41.96 45.03 17 TR_XM_DKIM_Undo 56086 19.54 41.66 3.72 18 HTML_FONT_LOW_CONTRAST 54018 36.57 40.12 34.03 19 FVGT_m_MULTI_ODD 51682 32.53 38.38 28.34 20 BAYES_999 51401 18.88 38.18 5.08 21 TR_DCC_Bayes_99 48874 16.87 36.30 2.97 22 BAYES_50 42150 47.49 31.31 59.07 23 T_KAM_HTML_FONT_INVALID 41334 25.25 30.70 21.34 24 DKIM_VALID_EF 36866 28.91 27.38 30.01 25 T_TM2_M_HEADER_IN_MSG 29511 22.72 21.92 23.30 26 TR_XM_DK_Unsub 29502 18.41 21.91 15.90 27 MIME_HTML_ONLY 27235 20.84 20.23 21.28 28 LOTS_OF_MONEY 26815 12.53 19.92 7.24 29 TR_XM_SpammyWords2 26779 8.98 19.89 1.18 30 DCC_CHECK_NEGATIVE 26304 39.08 19.54 53.05 31 TR_XM_SpammyWords4 25454 11.01 18.90 5.36 32 XM_Multi_Part_URI 23206 18.04 17.24 18.62 33 XMSubLong 20853 19.43 15.49 22.25 34 RELAYCOUNTRY_META 20746 9.03 15.41 4.47 35 TR_MAX_INTL_RELAY 19443 10.48 14.44 7.64 36 XM_B_SpammyWords3 19225 9.40 14.28 5.90 37 UNPARSEABLE_RELAY 18821 12.60 13.98 11.61 38 XM_B_Unsub 16625 10.03 12.35 8.38 39 TR_XM_BayesUnsub 16353 9.30 12.15 7.26 40 BOTNET_IPINHOSTNAME 15715 7.14 11.67 3.90 41 TR_XM_SpammyRelay 15654 6.39 11.63 2.64 42 XMBody_17 12949 4.60 9.62 1.01 43 RCVD_IN_BL_SPAMCOP_NET 12523 4.38 9.30 0.87 44 FSL_BULK_SIG 12269 8.02 9.11 7.23 45 TR_LOTS_OF_MONEY3 11922 4.54 8.85 1.46 46 BAYES_80 11766 6.33 8.74 4.61 47 TR_XM_UnparsRelay 10915 4.61 8.11 2.10 48 TR_XM_SPAMCOP 10412 3.49 7.73 0.45 49 XM_Evil_Numbers_Gen 10130 8.45 7.52 9.11 50 BAYES_60 9182 9.48 6.82 11.38 51 XM_Body_Dirty_Words 8997 4.48 6.68 2.91 52 BOTNET 8664 3.41 6.43 1.25 53 HTML_IMAGE_RATIO_02 8449 5.97 6.28 5.76 54 RCVD_IN_VALIDITY_RPBL 8208 2.67 6.10 0.22 55 RELAYCOUNTRY_CA 7982 3.46 5.93 1.70 56 XM_SPF_SoftFail 7964 3.86 5.91 2.38 57 BAYES_95 7110 3.97 5.28 3.03 58 LotsOfNums_01 7042 6.65 5.23 7.67 59 XMSubMetaSx_00 6985 4.61 5.19 4.19 60 RCVD_IN_VALIDITY_SAFE 6825 6.08 5.07 6.80 61 MPART_ALT_DIFF 6720 4.78 4.99 4.64 62 UNTRUSTED_Relay 6578 3.08 4.89 1.79 63 HTML_IMAGE_RATIO_04 6136 4.34 4.56 4.18 64 TR_XM_SpammyWords5 5976 2.47 4.44 1.07 65 XMSexyCombo_05 5844 3.21 4.34 2.41 66 XM_OfRef6 5749 2.27 4.27 0.83 67 XM_UncommonTLD01 5565 4.52 4.13 4.80 68 XM_H_Long_From01 5524 4.73 4.10 5.18 69 XMReplyNow 5398 1.81 4.01 0.24 70 XM_B_Investor 5372 2.37 3.99 1.21 71 TooManyTo_001 5332 4.89 3.96 5.55 72 RCVD_IN_VALIDITY_CERTIFIED 5290 4.67 3.93 5.20 73 XMStrtUSub 5277 5.14 3.92 6.01 74 XM_H_GMP 5215 5.08 3.87 5.94 75 XM_B_Phish_Phrases 5182 4.18 3.85 4.41 76 USER_IN_DEF_DKIM_WL 5149 12.17 3.82 18.14 77 HTML_IMAGE_RATIO_06 5114 3.13 3.80 2.64 78 TR_XM_PhishingBody 5085 2.56 3.78 1.69 79 XMBrknScrpt_02 4996 2.56 3.71 1.73 80 MIME_HTML_MOSTLY 4989 3.23 3.71 2.90 81 T_XMDrugObfuBody_08 4979 2.42 3.70 1.50 82 T_XMDrugObfuBody_14 4846 2.49 3.60 1.70 83 HTML_IMAGE_RATIO_08 4777 2.93 3.55 2.48 84 XM_B_SEO 4630 2.02 3.44 1.00 85 XMNumbers 4621 2.83 3.43 2.40 86 URI_TRY_3LD 4307 1.99 3.20 1.13 87 TR_XM_SEO4 4279 1.67 3.18 0.59 88 XM_B_PhoneNumber 4064 4.92 3.02 6.27 89 MIME_HTML_ONLY_MULTI 3975 2.67 2.95 2.47 90 XM_UB50 3962 1.83 2.94 1.04 91 TM2_M_VERY_LONG_WORD 3874 2.11 2.88 1.56 92 T_XMHurry_00 3872 1.64 2.88 0.76 93 SUBJ_ALL_CAPS 3866 1.80 2.87 1.04 94 XM_CamelCaseFrm001 3731 2.79 2.77 2.80 95 DKIM_INVALID 3672 2.09 2.73 1.64 96 XM_B_SpammyTLD 3658 4.24 2.72 5.34 97 XM_URI_RBL 3574 1.29 2.65 0.32 98 MILLION_HUNDRED 3383 1.05 2.51 0.00 99 MONEY_FRAUD_5 3370 1.04 2.50 0.00 100 MONEY_ATM_CARD 3285 1.02 2.44 0.00 101 ADVANCE_FEE_3_NEW_MONEY 3281 1.02 2.44 0.00 102 XMDiploma_00 3155 1.94 2.34 1.65 103 RCVD_IN_MSPIKE_WL 3045 3.78 2.26 4.87 104 RCVD_IN_MSPIKE_H3 3045 3.78 2.26 4.87 105 MONEY_FROM_MISSP 2970 0.92 2.21 0.00 106 XMStockSpam_06 2922 1.99 2.17 1.86 107 RELAYCOUNTRY_GB 2830 1.05 2.10 0.30 108 HTML_TAG_BALANCE_BODY 2721 1.25 2.02 0.69 109 T_TooManySym_01 2680 4.43 1.99 6.18 110 AC_BR_BONANZA 2625 0.94 1.95 0.22 111 TM2_M_URI_OPT_OUT 2518 1.96 1.87 2.02 112 T_REMOTE_IMAGE 2470 2.89 1.83 3.65 113 RELAYCOUNTRY_AU 2469 1.29 1.83 0.91 114 HOSTED_IMG_MULTI_PUB_01 2448 0.77 1.82 0.03 115 LONGLN_LOW_CONTRAST 2300 0.93 1.71 0.38 116 FROM_EXCESS_BASE64 2284 2.20 1.70 2.56 117 XM_B_SpammyWords4 2232 1.04 1.66 0.60 118 XM_HighProb1 2204 0.70 1.64 0.04 119 XM_ProductURIs 2161 1.06 1.60 0.67 120 T_FILL_THIS_FORM_SHORT 2134 0.96 1.58 0.52 121 TR_Caps_n_Bayes_99 2012 0.64 1.49 0.03 122 TM2_M_A_HREF_HREF 2006 0.75 1.49 0.21 123 XM_B_Unsub2 1994 1.26 1.48 1.10 124 MAILING_LIST_MULTI 1989 1.96 1.48 2.31 125 URI_NOVOWEL 1962 2.91 1.46 3.94 126 MIME_QP_LONG_LINE 1936 2.85 1.44 3.86 127 TR_XM_PHPDW 1808 0.70 1.34 0.23 128 XMBdyGiftCard01 1807 1.16 1.34 1.03 129 TR_XM_PHPForged 1806 0.70 1.34 0.24 130 T_XMDrugObfuBody_00 1796 0.99 1.33 0.74 131 XM_DK_Undo_01 1784 1.64 1.32 1.86 132 SpammyFromTLD_02 1780 0.70 1.32 0.25 133 SpammyFromTLD_01 1766 0.89 1.31 0.59 134 TR_XM_FormFill2 1757 0.69 1.30 0.25 135 XM_H_PHPOS 1756 0.68 1.30 0.23 136 XM_DIRTYINTL 1738 0.59 1.29 0.09 137 TR_XM_NoHeaderRelay 1708 0.58 1.27 0.09 138 XMSexyCombo_01 1681 0.62 1.25 0.17 139 ALL_TRUSTED 1663 9.35 1.24 15.15 140 THIS_AD 1651 0.83 1.23 0.55 141 URIBL_DBL_SPAM 1575 0.49 1.17 0.00 142 XM_B_COPY_HTML 1569 1.12 1.17 1.08 143 XMSubMetaI_00 1538 0.88 1.14 0.70 144 XMHTML_After_End 1524 0.60 1.13 0.21 145 XM_B_Phish66 1473 0.59 1.09 0.22 146 DIET_1 1466 0.63 1.09 0.31 147 TR_XM_INV_DKIM 1459 0.53 1.08 0.13 148 HTTPS_HTTP_MISMATCH 1443 0.78 1.07 0.57 149 URI_HEX 1434 0.94 1.07 0.85 150 TR_XM_FormFill 1414 0.45 1.05 0.01 151 KHOP_HELO_FCRDNS 1410 1.04 1.05 1.03 152 LongTLD 1401 0.56 1.04 0.22 153 XMPhish30 1392 0.86 1.03 0.73 154 XMPhish14 1385 0.69 1.03 0.44 155 T_STY_INVIS_DIRECT 1346 0.68 1.00 0.45 156 TR_Symld_Words 1337 1.11 0.99 1.19 157 TR_XM_InvalidRelay 1327 0.42 0.99 0.02 158 HTML_FONT_FACE_BAD 1308 0.77 0.97 0.63 159 RELAYCOUNTRY_IN 1294 0.43 0.96 0.05 160 XM_H_Long_From02 1289 1.00 0.96 1.03 161 TR_MetaPhish_Combo_01 1225 0.72 0.91 0.59 162 TR_Mismatch_TLD_01 1221 0.55 0.91 0.29 163 RELAYCOUNTRY_FR 1219 0.53 0.91 0.27 164 SHOPIFY_IMG_NOT_RCVD_SFY 1207 0.65 0.90 0.47 165 XMHTMLBadTable_001 1201 0.57 0.89 0.34 166 HTML_MIME_NO_HTML_TAG 1182 1.27 0.88 1.55 167 BAYES_40 1177 2.98 0.87 4.48 168 SUBJ_DOLLARS 1149 0.53 0.85 0.30 169 XM_SendGrid 1143 1.01 0.85 1.12 170 XMSexyCombo_04 1093 0.37 0.81 0.05 171 PLING_QUERY 1085 0.64 0.81 0.52 172 TR_XM_Base64_M1 1084 0.81 0.81 0.81 173 XMGenDplmaNmb 1069 0.67 0.79 0.58 174 TooManyTo_002 1060 1.36 0.79 1.77 175 MPART_ALT_DIFF_COUNT 1051 0.60 0.78 0.47 176 T_MONEY_PERCENT 1029 0.42 0.76 0.17 177 TR_LOTS_OF_MONEY2 1029 0.42 0.76 0.17 178 TM2_M_OBFU_COMMENT 1021 0.50 0.76 0.32 179 RDNS_DYNAMIC 1017 0.51 0.76 0.34 180 TR_Mismatch_TLD_02 1015 0.35 0.75 0.06 181 PDS_RDNS_DYNAMIC_FP 998 0.35 0.74 0.06 182 TooManyTo_003 991 0.83 0.74 0.90 183 XM_Combo_Sbj 945 0.40 0.70 0.18 184 TooManyTo_004 943 0.70 0.70 0.69 185 TVD_RCVD_IP 934 0.79 0.69 0.85 186 URG_BIZ 922 0.30 0.68 0.02 187 TooManyTo_005 921 0.63 0.68 0.59 188 HTML_TAG_BALANCE_HEAD 917 0.34 0.68 0.10 189 HTML_OBFUSCATE_05_10 908 0.38 0.67 0.16 190 XMWrdNumbWrd 905 0.30 0.67 0.04 191 FROM_SUSPICIOUS_NTLD 888 0.29 0.66 0.03 192 JH_SPAMMY_HEADERS 878 0.27 0.65 0.00 193 XMSlimDrugH 876 0.48 0.65 0.36 194 XM_B_REG_HTML 867 0.47 0.64 0.34 195 RELAYCOUNTRY_RU 856 0.28 0.64 0.03 196 ANY_BOUNCE_MESSAGE 848 2.46 0.63 3.77 197 BOUNCE_MESSAGE 848 2.46 0.63 3.77 198 URI_TRUNCATED 843 0.30 0.63 0.06 199 DKIM_ADSP_CUSTOM_MED 832 0.75 0.62 0.84 200 FROM_SUSPICIOUS_NTLD_FP 831 0.28 0.62 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 157138 88.09 94.54 83.48 2 RELAYCOUNTRY_US 152474 82.73 85.14 81.00 3 DKIM_SIGNED 148173 84.29 92.07 78.72 4 XM_DK_Pass 146018 82.72 89.91 77.57 5 DKIM_VALID 145086 82.19 89.34 77.08 6 XM_B_Unicode 135612 78.46 87.44 72.05 7 DKIM_VALID_AU 124087 69.77 75.15 65.92 8 BAYES_50 111193 47.49 31.31 59.07 9 XMListUnsubscribeExists 107955 65.93 77.92 57.35 10 DCC_CHECK_NEGATIVE 99862 39.08 19.54 53.05 11 XM_B_SpammyWords 89492 59.57 76.38 47.54 12 DCC_CHECK 88328 60.91 80.45 46.93 13 XM_B_Unicode3 84766 43.75 41.96 45.03 14 RCVD_IN_MSPIKE_H2 65916 38.99 44.55 35.02 15 HTML_FONT_LOW_CONTRAST 64049 36.57 40.12 34.03 16 LOC_TINY_FONT_1 57132 35.38 42.40 30.35 17 DKIM_VALID_EF 56490 28.91 27.38 30.01 18 FVGT_m_MULTI_ODD 53339 32.53 38.38 28.34 19 T_TM2_M_HEADER_IN_MSG 43854 22.72 21.92 23.30 20 XMSubLong 41882 19.43 15.49 22.25 21 XM_B_SpammyWords2 40354 31.43 45.41 21.44 22 T_KAM_HTML_FONT_INVALID 40176 25.25 30.70 21.34 23 MIME_HTML_ONLY 40057 20.84 20.23 21.28 24 XM_Multi_Part_URI 35055 18.04 17.24 18.62 25 USER_IN_DEF_DKIM_WL 34146 12.17 3.82 18.14 26 TR_XM_DK_Unsub 29931 18.41 21.91 15.90 27 ALL_TRUSTED 28517 9.35 1.24 15.15 28 UNPARSEABLE_RELAY 21851 12.60 13.98 11.61 29 BAYES_60 21415 9.48 6.82 11.38 30 XM_DKIMWhitelistDomains 19377 6.11 0.26 10.29 31 XM_Evil_Numbers_Gen 17139 8.45 7.52 9.11 32 XM_B_Unsub 15769 10.03 12.35 8.38 33 LotsOfNums_01 14440 6.65 5.23 7.67 34 TR_MAX_INTL_RELAY 14386 10.48 14.44 7.64 35 XM_DK_Undo_02 14336 26.67 53.30 7.62 36 TR_XM_BayesUnsub 13672 9.30 12.15 7.26 37 LOTS_OF_MONEY 13634 12.53 19.92 7.24 38 FSL_BULK_SIG 13618 8.02 9.11 7.23 39 BAYES_00 13086 4.16 0.27 6.95 40 RCVD_IN_VALIDITY_SAFE 12800 6.08 5.07 6.80 41 BAYES_99 11982 22.80 45.78 6.37 42 XM_B_PhoneNumber 11809 4.92 3.02 6.27 43 T_TooManySym_01 11635 4.43 1.99 6.18 44 XMStrtUSub 11309 5.14 3.92 6.01 45 XM_H_GMP 11180 5.08 3.87 5.94 46 IN_ZIMBRA_NJ_WHITELIST 11176 3.49 0.07 5.94 47 XM_B_SpammyWords3 11115 9.40 14.28 5.90 48 TR_XM_DK_Bayes 11109 3.53 0.21 5.90 49 TR_XM_DK_Bayes1 11031 3.50 0.20 5.86 50 HTML_IMAGE_RATIO_02 10837 5.97 6.28 5.76 51 TooManyTo_001 10445 4.89 3.96 5.55 52 TR_XM_SpammyWords4 10087 11.01 18.90 5.36 53 XM_B_SpammyTLD 10045 4.24 2.72 5.34 54 RCVD_IN_VALIDITY_CERTIFIED 9781 4.67 3.93 5.20 55 XM_H_Long_From01 9742 4.73 4.10 5.18 56 BAYES_999 9560 18.88 38.18 5.08 57 TR_XM_DK_Bayes2 9482 3.00 0.14 5.04 58 RCVD_IN_MSPIKE_H3 9170 3.78 2.26 4.87 59 RCVD_IN_MSPIKE_WL 9170 3.78 2.26 4.87 60 XM_UncommonTLD01 9029 4.52 4.13 4.80 61 MPART_ALT_DIFF 8728 4.78 4.99 4.64 62 BAYES_80 8674 6.33 8.74 4.61 63 BAYES_40 8430 2.98 0.87 4.48 64 RELAYCOUNTRY_META 8418 9.03 15.41 4.47 65 XM_B_Phish_Phrases 8300 4.18 3.85 4.41 66 XMSubMetaSx_00 7888 4.61 5.19 4.19 67 HTML_IMAGE_RATIO_04 7875 4.34 4.56 4.18 68 URI_NOVOWEL 7421 2.91 1.46 3.94 69 BOTNET_IPINHOSTNAME 7338 7.14 11.67 3.90 70 MIME_QP_LONG_LINE 7258 2.85 1.44 3.86 71 T_TooManySym_02 7247 2.50 0.61 3.85 72 ANY_BOUNCE_MESSAGE 7096 2.46 0.63 3.77 73 BOUNCE_MESSAGE 7096 2.46 0.63 3.77 74 TR_XM_DKIM_Undo 7000 19.54 41.66 3.72 75 INVALID_MSGID 6917 2.19 0.12 3.67 76 T_REMOTE_IMAGE 6872 2.89 1.83 3.65 77 TO_MALFORMED 6270 1.94 0.01 3.33 78 BAYES_95 5707 3.97 5.28 3.03 79 TR_DCC_Bayes_99 5585 16.87 36.30 2.97 80 RCVD_IN_IADB_LISTED 5542 1.95 0.57 2.94 81 XM_Body_Dirty_Words 5471 4.48 6.68 2.91 82 MIME_HTML_MOSTLY 5455 3.23 3.71 2.90 83 XM_CamelCaseFrm001 5267 2.79 2.77 2.80 84 HTML_IMAGE_RATIO_06 4976 3.13 3.80 2.64 85 RCVD_IN_IADB_SPF 4972 1.74 0.49 2.64 86 TR_XM_SpammyRelay 4965 6.39 11.63 2.64 87 BAYES_20 4908 1.77 0.60 2.61 88 FROM_EXCESS_BASE64 4825 2.20 1.70 2.56 89 HTML_IMAGE_RATIO_08 4675 2.93 3.55 2.48 90 MIME_HTML_ONLY_MULTI 4648 2.67 2.95 2.47 91 RCVD_IN_IADB_SENDERID 4572 1.61 0.45 2.43 92 XMSexyCombo_05 4534 3.21 4.34 2.41 93 XMNumbers 4526 2.83 3.43 2.40 94 XM_SPF_SoftFail 4483 3.86 5.91 2.38 95 RCVD_IN_IADB_DK 4421 1.56 0.46 2.35 96 MAILING_LIST_MULTI 4352 1.96 1.48 2.31 97 TR_XM_UnparsRelay 3961 4.61 8.11 2.10 98 TM2_M_URI_OPT_OUT 3800 1.96 1.87 2.02 99 XM_DK_Undo_01 3506 1.64 1.32 1.86 100 XMStockSpam_06 3505 1.99 2.17 1.86 101 RCVD_IN_IADB_VOUCHED 3427 1.19 0.31 1.82 102 XM_PDF 3376 1.15 0.25 1.79 103 UNTRUSTED_Relay 3374 3.08 4.89 1.79 104 IN_HORDE_ADDRESS_BOOK 3334 1.06 0.08 1.77 105 TooManyTo_002 3328 1.36 0.79 1.77 106 XMBrknScrpt_02 3263 2.56 3.71 1.73 107 RELAYCOUNTRY_CA 3195 3.46 5.93 1.70 108 T_XMDrugObfuBody_14 3193 2.49 3.60 1.70 109 TR_XM_PhishingBody 3186 2.56 3.78 1.69 110 TVD_SPACE_RATIO 3183 1.03 0.10 1.69 111 XMDiploma_00 3109 1.94 2.34 1.65 112 DKIM_INVALID 3087 2.09 2.73 1.64 113 XMGappySubj_01 3031 0.98 0.10 1.61 114 TM2_M_VERY_LONG_WORD 2942 2.11 2.88 1.56 115 XM_TLDProd2 2940 1.02 0.26 1.56 116 HTML_MIME_NO_HTML_TAG 2926 1.27 0.88 1.55 117 BAYES_05 2836 1.02 0.33 1.51 118 T_XMDrugObfuBody_08 2819 2.42 3.70 1.50 119 TR_LOTS_OF_MONEY3 2743 4.54 8.85 1.46 120 XMGappySubj_02 2467 0.78 0.03 1.31 121 T_TooManySym_03 2432 0.81 0.14 1.29 122 RCVD_IN_IADB_OPTIN 2412 0.82 0.18 1.28 123 BOTNET 2350 3.41 6.43 1.25 124 XM_B_Investor 2282 2.37 3.99 1.21 125 TR_Symld_Words 2243 1.11 0.99 1.19 126 TR_XM_SpammyWords2 2228 8.98 19.89 1.18 127 XM_GoogleGroups 2192 0.90 0.54 1.16 128 XMSubMetaSxObfu_03 2165 0.82 0.35 1.15 129 URI_TRY_3LD 2123 1.99 3.20 1.13 130 XM_SendGrid 2116 1.01 0.85 1.12 131 XM_B_Unsub2 2077 1.26 1.48 1.10 132 XM_B_COPY_HTML 2041 1.12 1.17 1.08 133 TR_XM_SpammyWords5 2008 2.47 4.44 1.07 134 SUBJ_ALL_CAPS 1960 1.80 2.87 1.04 135 LOW_PRICE 1952 0.70 0.23 1.04 136 XM_UB50 1950 1.83 2.94 1.04 137 XMBdyGiftCard01 1942 1.16 1.34 1.03 138 KHOP_HELO_FCRDNS 1936 1.04 1.05 1.03 139 XM_H_Long_From02 1936 1.00 0.96 1.03 140 USER_IN_WELCOMELIST 1917 0.59 0.00 1.02 141 USER_IN_WHITELIST 1917 0.59 0.00 1.02 142 XMBody_17 1905 4.60 9.62 1.01 143 XM_B_SEO 1880 2.02 3.44 1.00 144 T_TVD_MIME_NO_HEADERS 1809 0.57 0.02 0.96 145 XM_B_DNDMA 1785 0.77 0.51 0.95 146 RELAYCOUNTRY_AU 1708 1.29 1.83 0.91 147 TooManyTo_003 1693 0.83 0.74 0.90 148 RCVD_IN_BL_SPAMCOP_NET 1632 4.38 9.30 0.87 149 TVD_RCVD_IP 1607 0.79 0.69 0.85 150 URI_HEX 1598 0.94 1.07 0.85 151 DKIM_ADSP_CUSTOM_MED 1588 0.75 0.62 0.84 152 HTML_EXTRA_CLOSE 1586 0.50 0.02 0.84 153 XM_OfRef6 1565 2.27 4.27 0.83 154 XMBody_95 1565 0.52 0.08 0.83 155 TR_XM_Base64_M1 1516 0.81 0.81 0.81 156 T_XMHurry_00 1433 1.64 2.88 0.76 157 TR_XM_DK_SendGrid 1409 0.68 0.59 0.75 158 T_XMDrugObfuBody_00 1396 0.99 1.33 0.74 159 XMPhish30 1375 0.86 1.03 0.73 160 XMClaimOffer 1366 0.60 0.43 0.73 161 XMSubMetaI_00 1315 0.88 1.14 0.70 162 HTML_TAG_BALANCE_BODY 1308 1.25 2.02 0.69 163 TooManyTo_004 1305 0.70 0.70 0.69 164 XMBSHREFv2 1269 0.46 0.16 0.67 165 XM_ProductURIs 1258 1.06 1.60 0.67 166 XM_H_PHPMailer 1246 0.60 0.51 0.66 167 XMNoVowels 1210 0.47 0.24 0.64 168 HTML_FONT_FACE_BAD 1179 0.77 0.97 0.63 169 XM_B_FormFill 1132 0.37 0.04 0.60 170 XM_B_SpammyWords4 1125 1.04 1.66 0.60 171 TooManyTo_005 1119 0.63 0.68 0.59 172 TR_MetaPhish_Combo_01 1108 0.72 0.91 0.59 173 SpammyFromTLD_01 1107 0.89 1.31 0.59 174 TR_XM_SEO4 1105 1.67 3.18 0.59 175 XMGenDplmaNmb 1098 0.67 0.79 0.58 176 HTTPS_HTTP_MISMATCH 1081 0.78 1.07 0.57 177 THIS_AD 1030 0.83 1.23 0.55 178 NML_ADSP_CUSTOM_MED 1007 0.52 0.51 0.53 179 T_TooManySym_04 996 0.33 0.05 0.53 180 FORGED_GMAIL_RCVD 993 0.52 0.52 0.53 181 T_FILL_THIS_FORM_SHORT 975 0.96 1.58 0.52 182 PLING_QUERY 973 0.64 0.81 0.52 183 SHOPIFY_IMG_NOT_RCVD_SFY 888 0.65 0.90 0.47 184 MPART_ALT_DIFF_COUNT 883 0.60 0.78 0.47 185 DKIM_ADSP_NXDOMAIN 877 0.53 0.61 0.47 186 TR_XM_SPAMCOP 856 3.49 7.73 0.45 187 T_STY_INVIS_DIRECT 843 0.68 1.00 0.45 188 XMPhish14 833 0.69 1.03 0.44 189 NO_DNS_FOR_FROM 808 0.38 0.32 0.43 190 XMCapTrack 779 0.37 0.31 0.41 191 XM_S_SubURI 766 0.25 0.03 0.41 192 MIME_CHARSET_FARAWAY 749 0.47 0.58 0.40 193 FROM_GOV_DKIM_AU 743 0.24 0.03 0.39 194 CTE_8BIT_MISMATCH 738 0.24 0.02 0.39 195 RELAYCOUNTRY_DE 710 0.32 0.25 0.38 196 LONGLN_LOW_CONTRAST 706 0.93 1.71 0.38 197 HTML_IMAGE_ONLY_16 696 0.29 0.18 0.37 198 XM_S_SpammyWords 692 0.38 0.39 0.37 199 T_OBFU_PDF_ATTACH 691 0.24 0.07 0.37 200 TR_XM_MaxWHORU 689 0.34 0.30 0.37 ----------------------------------------------------------------------