Email: 306976 Autolearn: 0 AvgScore: 5.07 AvgScanTime: 1.18 sec Spam: 118767 Autolearn: 0 AvgScore: 13.41 AvgScanTime: 1.22 sec Ham: 188209 Autolearn: 0 AvgScore: -0.20 AvgScanTime: 1.16 sec Time Spent Running SA: 100.66 hours Time Spent Processing Spam: 40.22 hours Time Spent Processing Ham: 60.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115099 87.53 96.91 81.62 2 DKIM_SIGNED 111769 84.00 94.11 77.62 3 XM_DK_Pass 108379 82.21 91.25 76.51 4 DKIM_VALID 107495 81.65 90.51 76.05 5 XM_B_Unicode 104898 78.38 88.32 72.10 6 RELAYCOUNTRY_US 103122 81.65 86.83 78.38 7 XMListUnsubscribeExists 94811 66.88 79.83 58.71 8 DCC_CHECK 93888 59.99 79.05 47.96 9 DKIM_VALID_AU 90750 70.09 76.41 66.11 10 XM_B_SpammyWords 90222 58.77 75.97 47.92 11 XM_DK_Undo_02 62594 24.07 52.70 6.01 12 BAYES_99 55159 20.98 46.44 4.91 13 RCVD_IN_MSPIKE_H2 53989 38.33 45.46 33.83 14 HTML_FONT_LOW_CONTRAST 52271 38.69 44.01 35.33 15 XM_B_Unicode3 51298 45.25 43.19 46.54 16 LOC_TINY_FONT_1 51029 36.24 42.97 31.99 17 XM_B_SpammyWords2 50368 30.09 42.41 22.31 18 TR_XM_DKIM_Undo 49533 18.03 41.71 3.09 19 FVGT_m_MULTI_ODD 46412 32.82 39.08 28.88 20 BAYES_999 45661 17.21 38.45 3.81 21 TR_DCC_Bayes_99 43272 15.47 36.43 2.24 22 T_KAM_HTML_FONT_INVALID 35491 24.18 29.88 20.58 23 BAYES_50 35282 48.61 29.71 60.54 24 DKIM_VALID_EF 32095 27.15 27.02 27.23 25 TR_XM_DK_Unsub 25102 17.24 21.14 14.79 26 DCC_CHECK_NEGATIVE 24868 39.99 20.94 52.01 27 T_TM2_M_HEADER_IN_MSG 24854 21.29 20.93 21.51 28 MIME_HTML_ONLY 23973 20.19 20.18 20.20 29 XM_Multi_Part_URI 23135 19.45 19.48 19.44 30 TR_XM_SpammyWords2 22992 8.09 19.36 0.98 31 XMSubLong 21411 20.85 18.03 22.63 32 LOTS_OF_MONEY 21292 11.35 17.93 7.19 33 TR_XM_SpammyWords4 20064 9.97 16.89 5.60 34 TR_MAX_INTL_RELAY 16949 10.33 14.27 7.84 35 UNPARSEABLE_RELAY 16281 12.33 13.71 11.45 36 RELAYCOUNTRY_META 15489 7.65 13.04 4.25 37 XM_B_SpammyWords3 15305 8.36 12.89 5.50 38 BOTNET_IPINHOSTNAME 14629 6.82 12.32 3.35 39 XM_B_Unsub 14586 9.00 12.28 6.93 40 TR_XM_BayesUnsub 14123 8.25 11.89 5.95 41 TR_LOTS_OF_MONEY3 11377 4.43 9.58 1.18 42 TR_XM_SpammyRelay 11231 5.32 9.46 2.71 43 RCVD_IN_BL_SPAMCOP_NET 10627 3.93 8.95 0.76 44 BAYES_80 10118 6.25 8.52 4.81 45 TR_XM_UnparsRelay 9883 4.32 8.32 1.79 46 XMBody_17 9644 3.81 8.12 1.09 47 TR_XM_SPAMCOP 8708 3.08 7.33 0.40 48 XM_Evil_Numbers_Gen 8499 8.97 7.16 10.11 49 BAYES_60 8498 9.71 7.16 11.32 50 HTML_IMAGE_RATIO_02 7945 6.07 6.69 5.68 51 XM_Body_Dirty_Words 7704 4.29 6.49 2.91 52 HTML_IMAGE_RATIO_04 7342 5.14 6.18 4.48 53 BOTNET 7226 3.03 6.08 1.10 54 LotsOfNums_01 7076 7.02 5.96 7.69 55 FSL_BULK_SIG 7034 6.15 5.92 6.30 56 MPART_ALT_DIFF 6465 4.57 5.44 4.02 57 RCVD_IN_VALIDITY_SAFE 6440 7.42 5.42 8.68 58 UNTRUSTED_Relay 6365 3.23 5.36 1.89 59 XMSubMetaSx_00 6358 5.58 5.35 5.72 60 BAYES_95 6305 3.91 5.31 3.03 61 RELAYCOUNTRY_CA 6250 3.06 5.26 1.67 62 XM_SPF_SoftFail 5464 3.28 4.60 2.45 63 HTML_IMAGE_RATIO_06 5330 4.05 4.49 3.77 64 TooManyTo_001 5188 5.73 4.37 6.59 65 TR_XM_SpammyWords5 5179 2.44 4.36 1.22 66 XM_OfRef6 5080 2.19 4.28 0.87 67 XM_UncommonTLD01 4979 4.54 4.19 4.75 68 MIME_HTML_MOSTLY 4975 3.40 4.19 2.90 69 T_XMDrugObfuBody_14 4934 2.92 4.15 2.15 70 XM_H_GMP 4926 5.06 4.15 5.63 71 URI_TRY_3LD 4723 2.26 3.98 1.18 72 RCVD_IN_VALIDITY_CERTIFIED 4723 5.85 3.98 7.04 73 XMBrknScrpt_02 4672 2.60 3.93 1.76 74 XM_H_Long_From01 4629 4.38 3.90 4.69 75 XMSexyCombo_05 4576 3.00 3.85 2.45 76 XM_B_Investor 4568 2.32 3.85 1.35 77 HTML_IMAGE_RATIO_08 4516 3.07 3.80 2.60 78 XMStrtUSub 4373 4.63 3.68 5.23 79 DKIM_INVALID 4274 2.35 3.60 1.57 80 XM_B_PhoneNumber 4261 4.82 3.59 5.60 81 XM_B_SEO 4235 2.41 3.57 1.69 82 TR_XM_PhishingBody 4227 2.74 3.56 2.23 83 T_XMHurry_00 4180 1.85 3.52 0.80 84 XM_B_Phish_Phrases 4136 4.09 3.48 4.48 85 USER_IN_DEF_DKIM_WL 4091 13.23 3.44 19.41 86 TM2_M_VERY_LONG_WORD 4087 2.31 3.44 1.60 87 TR_XM_SEO4 3832 2.00 3.23 1.23 88 XMNumbers 3785 3.68 3.19 3.99 89 T_XMDrugObfuBody_08 3566 1.91 3.00 1.22 90 XM_CamelCaseFrm001 3545 3.00 2.98 3.01 91 SUBJ_ALL_CAPS 3364 1.72 2.83 1.01 92 XM_URI_RBL 3360 1.28 2.83 0.30 93 MIME_HTML_ONLY_MULTI 3337 2.30 2.81 1.97 94 RCVD_IN_MSPIKE_H3 3323 4.02 2.80 4.78 95 RCVD_IN_MSPIKE_WL 3323 4.02 2.80 4.78 96 RCVD_IN_VALIDITY_RPBL 3036 1.08 2.56 0.15 97 XM_UB50 2953 1.55 2.49 0.97 98 LONGLN_LOW_CONTRAST 2839 1.13 2.39 0.33 99 XM_B_SpammyTLD 2748 4.76 2.31 6.31 100 HTML_TAG_BALANCE_BODY 2732 1.42 2.30 0.86 101 T_TooManySym_01 2556 5.57 2.15 7.72 102 TM2_M_URI_OPT_OUT 2469 1.93 2.08 1.84 103 XM_B_SpammyWords4 2424 1.28 2.04 0.80 104 AC_BR_BONANZA 2387 0.91 2.01 0.21 105 XMReplyNow 2302 0.86 1.94 0.18 106 RELAYCOUNTRY_AU 2262 1.20 1.90 0.76 107 FROM_EXCESS_BASE64 2241 2.26 1.89 2.50 108 XMDiploma_00 2203 1.72 1.85 1.63 109 MIME_QP_LONG_LINE 2075 2.68 1.75 3.27 110 T_FILL_THIS_FORM_SHORT 2009 0.93 1.69 0.44 111 XM_HighProb1 1974 0.65 1.66 0.02 112 THIS_AD 1974 1.05 1.66 0.66 113 XM_B_Unsub2 1881 1.22 1.58 1.00 114 T_XMDrugObfuBody_00 1851 1.06 1.56 0.74 115 TR_XM_NoHeaderRelay 1806 0.73 1.52 0.23 116 TR_XM_PHPDW 1744 0.71 1.47 0.23 117 URI_HEX 1722 0.98 1.45 0.68 118 T_REMOTE_IMAGE 1716 2.28 1.44 2.81 119 TR_XM_PHPForged 1713 0.69 1.44 0.22 120 HOSTED_IMG_MULTI_PUB_01 1712 0.57 1.44 0.01 121 XMStockSpam_06 1697 1.97 1.43 2.31 122 MAILING_LIST_MULTI 1676 2.04 1.41 2.43 123 TR_Caps_n_Bayes_99 1662 0.55 1.40 0.02 124 XM_B_COPY_HTML 1659 1.24 1.40 1.14 125 TR_XM_FormFill2 1656 0.68 1.39 0.23 126 XM_H_PHPOS 1653 0.67 1.39 0.21 127 XM_ProductURIs 1629 1.31 1.37 1.27 128 DIET_1 1627 0.99 1.37 0.76 129 ALL_TRUSTED 1533 11.27 1.29 17.57 130 BAYES_40 1518 3.42 1.28 4.77 131 SpammyFromTLD_01 1504 0.81 1.27 0.53 132 TR_XM_INV_DKIM 1504 0.53 1.27 0.06 133 XMBdyGiftCard01 1463 1.87 1.23 2.28 134 XM_DK_Undo_01 1423 1.50 1.20 1.69 135 T_STY_INVIS_DIRECT 1410 0.72 1.19 0.43 136 KHOP_HELO_FCRDNS 1405 0.82 1.18 0.59 137 URI_NOVOWEL 1404 3.40 1.18 4.79 138 XMSubMetaI_00 1383 0.92 1.16 0.77 139 SpammyFromTLD_02 1281 0.52 1.08 0.17 140 TR_XM_FormFill 1269 0.42 1.07 0.01 141 HTTPS_HTTP_MISMATCH 1267 0.76 1.07 0.57 142 XMPhish30 1245 1.19 1.05 1.28 143 TR_XM_InvalidRelay 1235 0.42 1.04 0.03 144 XMHTMLBadTable_001 1224 0.62 1.03 0.36 145 HTML_MIME_NO_HTML_TAG 1166 1.19 0.98 1.32 146 URIBL_DBL_SPAM 1163 0.38 0.98 0.01 147 SHOPIFY_IMG_NOT_RCVD_SFY 1118 0.70 0.94 0.55 148 XMPhish14 1111 0.59 0.94 0.37 149 BOTNET_NORDNS 1108 0.36 0.93 0.00 150 XM_DIRTYINTL 1106 0.56 0.93 0.33 151 XM_UB99 1103 0.36 0.93 0.00 152 XM_B_Phish66 1091 0.52 0.92 0.27 153 HTML_FONT_FACE_BAD 1073 0.74 0.90 0.64 154 TM2_M_A_HREF_HREF 1071 0.50 0.90 0.25 155 XM_H_Long_From02 1060 0.96 0.89 1.01 156 DKIM_ADSP_CUSTOM_MED 1027 0.80 0.86 0.76 157 PLING_QUERY 1014 0.60 0.85 0.44 158 BAYES_20 996 1.88 0.84 2.53 159 RDNS_DYNAMIC 992 0.52 0.84 0.32 160 HTML_TAG_BALANCE_HEAD 980 0.37 0.83 0.08 161 PDS_RDNS_DYNAMIC_FP 973 0.35 0.82 0.05 162 XM_SendGrid 969 1.06 0.82 1.21 163 TM2_M_OBFU_COMMENT 924 0.47 0.78 0.27 164 TVD_RCVD_IP 918 0.67 0.77 0.61 165 XMClaimOffer 915 0.70 0.77 0.65 166 XM_B_REG_HTML 914 0.52 0.77 0.37 167 HTML_OBFUSCATE_05_10 896 0.43 0.75 0.22 168 TR_Mismatch_TLD_01 889 0.44 0.75 0.24 169 RELAYCOUNTRY_FR 881 0.40 0.74 0.19 170 FORGED_GMAIL_RCVD 875 0.56 0.74 0.45 171 XM_H_PHPMailer 863 0.74 0.73 0.74 172 T_MONEY_PERCENT 852 0.45 0.72 0.29 173 TR_LOTS_OF_MONEY2 852 0.45 0.72 0.29 174 HELO_DYNAMIC_SPLIT_IP 849 0.28 0.71 0.01 175 NML_ADSP_CUSTOM_MED 847 0.56 0.71 0.46 176 TR_Symld_Words 843 1.00 0.71 1.18 177 TR_MetaPhish_Combo_01 841 0.70 0.71 0.69 178 XMGenDplmaNmb 826 0.61 0.70 0.55 179 MPART_ALT_DIFF_COUNT 824 0.49 0.69 0.36 180 RELAYCOUNTRY_IN 821 0.29 0.69 0.04 181 TooManyTo_002 803 1.20 0.68 1.53 182 T_TooManySym_02 794 2.66 0.67 3.91 183 XM_GoogleGroups 791 1.03 0.67 1.26 184 RCVD_IN_IADB_LISTED 781 1.74 0.66 2.42 185 XM_UB999 778 0.25 0.66 0.00 186 XM_DrOz_From 778 0.29 0.66 0.06 187 XM_UB60 771 0.30 0.65 0.09 188 LongTLD 762 0.40 0.64 0.25 189 TooManyTo_003 747 0.81 0.63 0.93 190 DKIM_ADSP_NXDOMAIN 735 0.54 0.62 0.48 191 XMHTML_After_End 733 0.35 0.62 0.19 192 XMWhlSbjSex 723 0.40 0.61 0.26 193 TooManyTo_004 719 0.68 0.61 0.72 194 TR_XM_DK_SendGrid 706 0.76 0.59 0.87 195 RCVD_IN_IADB_SPF 705 1.56 0.59 2.16 196 TooManyTo_005 703 0.61 0.59 0.62 197 TR_XM_Base64_M1 703 0.90 0.59 1.09 198 XM_B_DNDMA 694 1.03 0.58 1.32 199 XMPhish08 681 0.39 0.57 0.27 200 XM_Dr_From 676 0.31 0.57 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 153611 87.53 96.91 81.62 2 RELAYCOUNTRY_US 147511 81.65 86.83 78.38 3 DKIM_SIGNED 146093 84.00 94.11 77.62 4 XM_DK_Pass 143998 82.21 91.25 76.51 5 DKIM_VALID 143142 81.65 90.51 76.05 6 XM_B_Unicode 135705 78.38 88.32 72.10 7 DKIM_VALID_AU 124418 70.09 76.41 66.11 8 BAYES_50 113939 48.61 29.71 60.54 9 XMListUnsubscribeExists 110496 66.88 79.83 58.71 10 DCC_CHECK_NEGATIVE 97888 39.99 20.94 52.01 11 DCC_CHECK 90273 59.99 79.05 47.96 12 XM_B_SpammyWords 90198 58.77 75.97 47.92 13 XM_B_Unicode3 87598 45.25 43.19 46.54 14 HTML_FONT_LOW_CONTRAST 66486 38.69 44.01 35.33 15 RCVD_IN_MSPIKE_H2 63673 38.33 45.46 33.83 16 LOC_TINY_FONT_1 60204 36.24 42.97 31.99 17 FVGT_m_MULTI_ODD 54352 32.82 39.08 28.88 18 DKIM_VALID_EF 51257 27.15 27.02 27.23 19 XMSubLong 42589 20.85 18.03 22.63 20 XM_B_SpammyWords2 41998 30.09 42.41 22.31 21 T_TM2_M_HEADER_IN_MSG 40487 21.29 20.93 21.51 22 T_KAM_HTML_FONT_INVALID 38730 24.18 29.88 20.58 23 MIME_HTML_ONLY 38018 20.19 20.18 20.20 24 XM_Multi_Part_URI 36584 19.45 19.48 19.44 25 USER_IN_DEF_DKIM_WL 36526 13.23 3.44 19.41 26 ALL_TRUSTED 33070 11.27 1.29 17.57 27 TR_XM_DK_Unsub 27835 17.24 21.14 14.79 28 UNPARSEABLE_RELAY 21554 12.33 13.71 11.45 29 BAYES_60 21304 9.71 7.16 11.32 30 XM_DKIMWhitelistDomains 19221 6.27 0.03 10.21 31 XM_Evil_Numbers_Gen 19027 8.97 7.16 10.11 32 RCVD_IN_VALIDITY_SAFE 16340 7.42 5.42 8.68 33 TR_MAX_INTL_RELAY 14762 10.33 14.27 7.84 34 T_TooManySym_01 14534 5.57 2.15 7.72 35 LotsOfNums_01 14468 7.02 5.96 7.69 36 LOTS_OF_MONEY 13538 11.35 17.93 7.19 37 RCVD_IN_VALIDITY_CERTIFIED 13243 5.85 3.98 7.04 38 XM_B_Unsub 13051 9.00 12.28 6.93 39 TooManyTo_001 12409 5.73 4.37 6.59 40 BAYES_00 12351 4.15 0.32 6.56 41 XM_B_SpammyTLD 11873 4.76 2.31 6.31 42 FSL_BULK_SIG 11860 6.15 5.92 6.30 43 XM_DK_Undo_02 11306 24.07 52.70 6.01 44 TR_XM_BayesUnsub 11199 8.25 11.89 5.95 45 XMSubMetaSx_00 10769 5.58 5.35 5.72 46 HTML_IMAGE_RATIO_02 10687 6.07 6.69 5.68 47 XM_H_GMP 10604 5.06 4.15 5.63 48 TR_XM_DK_Bayes 10545 3.53 0.25 5.60 49 XM_B_PhoneNumber 10533 4.82 3.59 5.60 50 TR_XM_SpammyWords4 10532 9.97 16.89 5.60 51 TR_XM_DK_Bayes1 10470 3.50 0.22 5.56 52 XM_B_SpammyWords3 10350 8.36 12.89 5.50 53 IN_ZIMBRA_NJ_WHITELIST 10257 3.36 0.06 5.45 54 XMStrtUSub 9852 4.63 3.68 5.23 55 BAYES_99 9250 20.98 46.44 4.91 56 TR_XM_DK_Bayes2 9228 3.07 0.17 4.90 57 BAYES_80 9058 6.25 8.52 4.81 58 URI_NOVOWEL 9023 3.40 1.18 4.79 59 RCVD_IN_MSPIKE_WL 9003 4.02 2.80 4.78 60 RCVD_IN_MSPIKE_H3 9003 4.02 2.80 4.78 61 BAYES_40 8974 3.42 1.28 4.77 62 XM_UncommonTLD01 8949 4.54 4.19 4.75 63 XM_H_Long_From01 8823 4.38 3.90 4.69 64 XM_B_Phish_Phrases 8430 4.09 3.48 4.48 65 HTML_IMAGE_RATIO_04 8429 5.14 6.18 4.48 66 RELAYCOUNTRY_META 7994 7.65 13.04 4.25 67 MPART_ALT_DIFF 7569 4.57 5.44 4.02 68 XMNumbers 7510 3.68 3.19 3.99 69 T_TooManySym_02 7367 2.66 0.67 3.91 70 BAYES_999 7162 17.21 38.45 3.81 71 HTML_IMAGE_RATIO_06 7095 4.05 4.49 3.77 72 INVALID_MSGID 6758 2.26 0.15 3.59 73 BOTNET_IPINHOSTNAME 6305 6.82 12.32 3.35 74 TO_MALFORMED 6243 2.04 0.01 3.32 75 MIME_QP_LONG_LINE 6159 2.68 1.75 3.27 76 BOUNCE_MESSAGE 5930 2.15 0.55 3.15 77 ANY_BOUNCE_MESSAGE 5930 2.15 0.56 3.15 78 TR_XM_DKIM_Undo 5817 18.03 41.71 3.09 79 BAYES_95 5701 3.91 5.31 3.03 80 XM_CamelCaseFrm001 5670 3.00 2.98 3.01 81 XM_Body_Dirty_Words 5468 4.29 6.49 2.91 82 MIME_HTML_MOSTLY 5454 3.40 4.19 2.90 83 T_REMOTE_IMAGE 5285 2.28 1.44 2.81 84 TR_XM_SpammyRelay 5106 5.32 9.46 2.71 85 XM_PDF 5021 1.75 0.29 2.67 86 HTML_IMAGE_RATIO_08 4896 3.07 3.80 2.60 87 BAYES_20 4764 1.88 0.84 2.53 88 FROM_EXCESS_BASE64 4697 2.26 1.89 2.50 89 XMSexyCombo_05 4620 3.00 3.85 2.45 90 XM_SPF_SoftFail 4614 3.28 4.60 2.45 91 MAILING_LIST_MULTI 4573 2.04 1.41 2.43 92 RCVD_IN_IADB_LISTED 4546 1.74 0.66 2.42 93 XMStockSpam_06 4353 1.97 1.43 2.31 94 XMBdyGiftCard01 4284 1.87 1.23 2.28 95 TR_DCC_Bayes_99 4221 15.47 36.43 2.24 96 TR_XM_PhishingBody 4197 2.74 3.56 2.23 97 RCVD_IN_IADB_SPF 4073 1.56 0.59 2.16 98 T_XMDrugObfuBody_14 4045 2.92 4.15 2.15 99 RCVD_IN_IADB_SENDERID 3750 1.43 0.55 1.99 100 MIME_HTML_ONLY_MULTI 3712 2.30 2.81 1.97 101 RCVD_IN_IADB_DK 3661 1.41 0.56 1.95 102 XM_TLDProd2 3635 1.29 0.27 1.93 103 UNTRUSTED_Relay 3560 3.23 5.36 1.89 104 TM2_M_URI_OPT_OUT 3463 1.93 2.08 1.84 105 TR_XM_UnparsRelay 3370 4.32 8.32 1.79 106 XMBrknScrpt_02 3321 2.60 3.93 1.76 107 IN_HORDE_ADDRESS_BOOK 3271 1.08 0.05 1.74 108 TVD_SPACE_RATIO 3206 1.16 0.30 1.70 109 XM_DK_Undo_01 3186 1.50 1.20 1.69 110 XM_B_SEO 3173 2.41 3.57 1.69 111 RELAYCOUNTRY_CA 3140 3.06 5.26 1.67 112 RCVD_IN_IADB_VOUCHED 3109 1.14 0.34 1.65 113 XMDiploma_00 3069 1.72 1.85 1.63 114 TM2_M_VERY_LONG_WORD 3009 2.31 3.44 1.60 115 DKIM_INVALID 2951 2.35 3.60 1.57 116 TooManyTo_002 2872 1.20 0.68 1.53 117 BAYES_05 2868 1.10 0.43 1.52 118 T_TooManySym_03 2579 0.92 0.21 1.37 119 XM_B_Investor 2542 2.32 3.85 1.35 120 HTML_MIME_NO_HTML_TAG 2493 1.19 0.98 1.32 121 XM_B_DNDMA 2480 1.03 0.58 1.32 122 XMPhish30 2408 1.19 1.05 1.28 123 XM_ProductURIs 2382 1.31 1.37 1.27 124 XM_GoogleGroups 2376 1.03 0.67 1.26 125 TR_XM_SEO4 2319 2.00 3.23 1.23 126 T_XMDrugObfuBody_08 2301 1.91 3.00 1.22 127 TR_XM_SpammyWords5 2299 2.44 4.36 1.22 128 XM_SendGrid 2281 1.06 0.82 1.21 129 XMGappySubj_01 2240 0.77 0.11 1.19 130 URI_TRY_3LD 2224 2.26 3.98 1.18 131 TR_Symld_Words 2221 1.00 0.71 1.18 132 TR_LOTS_OF_MONEY3 2216 4.43 9.58 1.18 133 RCVD_IN_IADB_OPTIN 2188 0.79 0.19 1.16 134 XM_B_COPY_HTML 2153 1.24 1.40 1.14 135 XMSubMetaSxObfu_03 2152 0.91 0.53 1.14 136 BOTNET 2068 3.03 6.08 1.10 137 TR_XM_Base64_M1 2055 0.90 0.59 1.09 138 XMBody_17 2051 3.81 8.12 1.09 139 SUBJ_ALL_CAPS 1906 1.72 2.83 1.01 140 XM_H_Long_From02 1895 0.96 0.89 1.01 141 XM_B_Unsub2 1878 1.22 1.58 1.00 142 XMGappySubj_02 1877 0.63 0.06 1.00 143 LOW_PRICE 1864 0.68 0.19 0.99 144 USER_IN_WELCOMELIST 1857 0.60 0.00 0.99 145 USER_IN_WHITELIST 1857 0.60 0.00 0.99 146 TR_XM_SpammyWords2 1839 8.09 19.36 0.98 147 XM_UB50 1819 1.55 2.49 0.97 148 TooManyTo_003 1744 0.81 0.63 0.93 149 TR_XM_DK_SendGrid 1641 0.76 0.59 0.87 150 XM_OfRef6 1631 2.19 4.28 0.87 151 HTML_TAG_BALANCE_BODY 1623 1.42 2.30 0.86 152 XM_B_SpammyWords4 1505 1.28 2.04 0.80 153 T_XMHurry_00 1498 1.85 3.52 0.80 154 XMSubMetaI_00 1451 0.92 1.16 0.77 155 RCVD_IN_BL_SPAMCOP_NET 1435 3.93 8.95 0.76 156 RELAYCOUNTRY_AU 1427 1.20 1.90 0.76 157 DIET_1 1424 0.99 1.37 0.76 158 DKIM_ADSP_CUSTOM_MED 1422 0.80 0.86 0.76 159 T_XMDrugObfuBody_00 1398 1.06 1.56 0.74 160 XM_H_PHPMailer 1394 0.74 0.73 0.74 161 TooManyTo_004 1354 0.68 0.61 0.72 162 TR_MetaPhish_Combo_01 1304 0.70 0.71 0.69 163 URI_HEX 1281 0.98 1.45 0.68 164 XMBody_95 1269 0.47 0.16 0.67 165 THIS_AD 1245 1.05 1.66 0.66 166 XMClaimOffer 1222 0.70 0.77 0.65 167 HTML_FONT_FACE_BAD 1202 0.74 0.90 0.64 168 TooManyTo_005 1167 0.61 0.59 0.62 169 TVD_RCVD_IP 1150 0.67 0.77 0.61 170 KHOP_HELO_FCRDNS 1118 0.82 1.18 0.59 171 T_TooManySym_04 1107 0.37 0.04 0.59 172 HTTPS_HTTP_MISMATCH 1078 0.76 1.07 0.57 173 XMGenDplmaNmb 1037 0.61 0.70 0.55 174 SHOPIFY_IMG_NOT_RCVD_SFY 1028 0.70 0.94 0.55 175 XMSolicitRefs_0 1023 0.51 0.46 0.54 176 SpammyFromTLD_01 992 0.81 1.27 0.53 177 XMNoVowels 991 0.51 0.49 0.53 178 AD_PREFS 965 0.33 0.04 0.51 179 DKIM_ADSP_NXDOMAIN 910 0.54 0.62 0.48 180 MSGID_FROM_MTA_HEADER 896 0.32 0.08 0.48 181 NML_ADSP_CUSTOM_MED 866 0.56 0.71 0.46 182 XMOemUri 863 0.36 0.20 0.46 183 FORGED_GMAIL_RCVD 838 0.56 0.74 0.45 184 T_FILL_THIS_FORM_SHORT 832 0.93 1.69 0.44 185 NO_DNS_FOR_FROM 829 0.41 0.35 0.44 186 PLING_QUERY 819 0.60 0.85 0.44 187 T_STY_INVIS_DIRECT 815 0.72 1.19 0.43 188 MIME_CHARSET_FARAWAY 783 0.47 0.54 0.42 189 HELO_NO_DOMAIN 781 0.37 0.30 0.41 190 HELO_NODOT 781 0.37 0.30 0.41 191 RELAYCOUNTRY_DE 775 0.40 0.38 0.41 192 XMSlimDrugH 774 0.46 0.53 0.41 193 XM_S_SubURI 763 0.27 0.05 0.41 194 RCVD_IN_IADB_OPTIN_GT50 763 0.27 0.05 0.41 195 TR_XM_SPAMCOP 749 3.08 7.33 0.40 196 XMLngstWrd_00 746 0.38 0.35 0.40 197 XMBSHREFv2 742 0.31 0.17 0.39 198 T_TVD_MIME_NO_HEADERS 735 0.25 0.03 0.39 199 CTE_8BIT_MISMATCH 732 0.25 0.03 0.39 200 TR_XM_MaxWHORU 700 0.36 0.34 0.37 ----------------------------------------------------------------------