Email: 344377 Autolearn: 0 AvgScore: 5.15 AvgScanTime: 1.15 sec Spam: 128969 Autolearn: 0 AvgScore: 13.70 AvgScanTime: 1.24 sec Ham: 215408 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 1.09 sec Time Spent Running SA: 109.55 hours Time Spent Processing Spam: 44.46 hours Time Spent Processing Ham: 65.09 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 124944 84.99 96.88 77.87 2 DKIM_SIGNED 121706 80.59 94.37 72.34 3 XM_DK_Pass 118724 79.05 92.06 71.26 4 DKIM_VALID 117812 78.51 91.35 70.82 5 XM_B_Unicode 115561 75.23 89.60 66.63 6 RELAYCOUNTRY_US 112641 80.30 87.34 76.09 7 XMListUnsubscribeExists 103899 63.25 80.56 52.88 8 DCC_CHECK 102189 56.40 79.24 42.73 9 DKIM_VALID_AU 99630 67.03 77.25 60.92 10 XM_B_SpammyWords 98254 56.33 76.18 44.44 11 XM_DK_Undo_02 71318 24.69 55.30 6.37 12 BAYES_99 61495 21.04 47.68 5.08 13 XM_B_SpammyWords2 58672 30.09 45.49 20.87 14 LOC_TINY_FONT_1 57447 34.40 44.54 28.32 15 RCVD_IN_MSPIKE_H2 56058 35.35 43.47 30.50 16 XM_B_Unicode3 55457 42.04 43.00 41.46 17 TR_XM_DKIM_Undo 55367 18.05 42.93 3.16 18 HTML_FONT_LOW_CONTRAST 55116 35.85 42.74 31.73 19 BAYES_999 50879 17.20 39.45 3.88 20 FVGT_m_MULTI_ODD 48810 30.09 37.85 25.44 21 TR_DCC_Bayes_99 48100 15.46 37.30 2.38 22 T_KAM_HTML_FONT_INVALID 40574 24.17 31.46 19.81 23 BAYES_50 37228 47.50 28.87 58.65 24 DKIM_VALID_EF 34830 26.37 27.01 25.99 25 T_TM2_M_HEADER_IN_MSG 28399 25.67 22.02 27.85 26 TR_XM_SpammyWords2 27867 8.74 21.61 1.04 27 TR_XM_DK_Unsub 27403 16.37 21.25 13.45 28 DCC_CHECK_NEGATIVE 26769 43.58 20.76 57.25 29 MIME_HTML_ONLY 26361 20.29 20.44 20.20 30 XM_Multi_Part_URI 23845 18.43 18.49 18.39 31 LOTS_OF_MONEY 23538 11.01 18.25 6.68 32 XMSubLong 23272 19.04 18.04 19.63 33 TR_XM_SpammyWords4 21865 9.25 16.95 4.64 34 XM_B_SpammyWords3 19238 9.45 14.92 6.18 35 TR_MAX_INTL_RELAY 18506 10.17 14.35 7.67 36 UNPARSEABLE_RELAY 18440 11.83 14.30 10.35 37 RELAYCOUNTRY_META 17413 7.27 13.50 3.53 38 BOTNET_IPINHOSTNAME 15866 6.57 12.30 3.14 39 XM_B_Unsub 15474 9.02 12.00 7.24 40 TR_XM_BayesUnsub 14991 8.05 11.62 5.91 41 TR_XM_SpammyRelay 12756 4.95 9.89 2.00 42 RCVD_IN_BL_SPAMCOP_NET 12263 4.18 9.51 0.98 43 TR_XM_UnparsRelay 11405 4.34 8.84 1.64 44 TR_LOTS_OF_MONEY3 11402 4.09 8.84 1.25 45 BAYES_80 11171 6.20 8.66 4.72 46 XM_Evil_Numbers_Gen 10128 8.39 7.85 8.72 47 TR_XM_SPAMCOP 10117 3.26 7.84 0.52 48 XM_Body_Dirty_Words 9957 4.43 7.72 2.45 49 XMBody_17 9460 3.29 7.34 0.87 50 BAYES_60 9134 9.89 7.08 11.57 51 BOTNET 8214 3.01 6.37 0.99 52 LotsOfNums_01 7944 6.95 6.16 7.42 53 HTML_IMAGE_RATIO_02 7484 5.24 5.80 4.91 54 FSL_BULK_SIG 7484 6.47 5.80 6.87 55 XMSubMetaSx_00 7369 4.56 5.71 3.87 56 MPART_ALT_DIFF 7306 4.71 5.66 4.13 57 RELAYCOUNTRY_CA 7092 2.94 5.50 1.40 58 BAYES_95 6887 3.84 5.34 2.94 59 RCVD_IN_VALIDITY_SAFE 6769 5.97 5.25 6.40 60 XM_B_Investor 6664 2.74 5.17 1.28 61 UNTRUSTED_Relay 6515 2.74 5.05 1.35 62 XMBrknScrpt_02 6252 2.91 4.85 1.75 63 HTML_IMAGE_RATIO_04 6251 4.65 4.85 4.54 64 XM_H_Long_From01 6248 4.66 4.84 4.55 65 XMSexyCombo_05 6110 3.05 4.74 2.05 66 XM_OfRef6 6034 2.42 4.68 1.08 67 XM_UncommonTLD01 5909 4.31 4.58 4.15 68 HTML_IMAGE_RATIO_06 5842 3.05 4.53 2.16 69 T_XMDrugObfuBody_14 5403 2.54 4.19 1.56 70 RCVD_IN_VALIDITY_CERTIFIED 5325 4.51 4.13 4.74 71 USER_IN_DEF_DKIM_WL 5303 12.60 4.11 17.68 72 TR_XM_SpammyWords5 5303 2.34 4.11 1.28 73 XM_H_GMP 5203 4.71 4.03 5.11 74 HTML_IMAGE_RATIO_08 5111 2.80 3.96 2.10 75 XM_SPF_SoftFail 5094 2.60 3.95 1.79 76 XM_B_Phish_Phrases 5031 3.75 3.90 3.66 77 XM_B_SEO 4930 2.02 3.82 0.94 78 XMStrtUSub 4785 4.72 3.71 5.32 79 MIME_HTML_MOSTLY 4759 3.02 3.69 2.63 80 TR_XM_SEO4 4564 1.67 3.54 0.56 81 TooManyTo_001 4520 5.62 3.50 6.89 82 XM_B_PhoneNumber 4462 5.38 3.46 6.53 83 XM_CamelCaseFrm001 4266 2.93 3.31 2.71 84 T_XMDrugObfuBody_08 4140 1.88 3.21 1.08 85 TR_XM_PhishingBody 4091 2.24 3.17 1.69 86 XMNumbers 4090 3.19 3.17 3.21 87 XM_URI_RBL 4074 1.42 3.16 0.38 88 T_XMHurry_00 3988 1.60 3.09 0.71 89 DKIM_INVALID 3894 2.08 3.02 1.52 90 TM2_M_VERY_LONG_WORD 3826 2.03 2.97 1.47 91 MIME_HTML_ONLY_MULTI 3790 2.40 2.94 2.07 92 XMDiploma_00 3729 2.07 2.89 1.58 93 SUBJ_ALL_CAPS 3620 1.64 2.81 0.94 94 XM_B_SpammyTLD 3403 4.54 2.64 5.67 95 URI_TRY_3LD 3240 1.85 2.51 1.45 96 RCVD_IN_MSPIKE_WL 3235 3.49 2.51 4.07 97 RCVD_IN_MSPIKE_H3 3235 3.49 2.51 4.07 98 XM_UB50 3019 1.35 2.34 0.76 99 XM_B_SpammyWords4 2956 1.49 2.29 1.02 100 T_TooManySym_01 2911 4.41 2.26 5.70 101 RCVD_IN_VALIDITY_RPBL 2867 0.92 2.22 0.15 102 HTML_TAG_BALANCE_BODY 2827 1.17 2.19 0.56 103 T_FILL_THIS_FORM_SHORT 2645 1.08 2.05 0.50 104 RELAYCOUNTRY_AU 2592 1.17 2.01 0.67 105 AC_BR_BONANZA 2564 0.83 1.99 0.14 106 MIME_QP_LONG_LINE 2534 2.92 1.96 3.49 107 TM2_M_URI_OPT_OUT 2512 1.64 1.95 1.46 108 FROM_EXCESS_BASE64 2465 2.19 1.91 2.35 109 TR_Caps_n_Bayes_99 2290 0.68 1.78 0.02 110 SpammyFromTLD_01 2168 0.94 1.68 0.50 111 XM_B_Unsub2 2160 1.33 1.67 1.13 112 XM_HighProb1 2149 0.63 1.67 0.01 113 XM_ProductURIs 2113 1.45 1.64 1.34 114 URI_NOVOWEL 2032 3.43 1.58 4.54 115 MAILING_LIST_MULTI 2012 1.86 1.56 2.04 116 T_REMOTE_IMAGE 1888 2.59 1.46 3.26 117 HOSTED_IMG_MULTI_PUB_01 1821 0.59 1.41 0.09 118 XMBdyGiftCard01 1792 1.41 1.39 1.42 119 XM_DK_Undo_01 1787 1.52 1.39 1.61 120 URIBL_DBL_SPAM 1776 0.52 1.38 0.00 121 XM_B_COPY_HTML 1735 0.98 1.35 0.76 122 TR_XM_FormFill 1726 0.51 1.34 0.01 123 XMStockSpam_06 1714 1.80 1.33 2.08 124 TR_XM_NoHeaderRelay 1699 0.57 1.32 0.12 125 T_XMDrugObfuBody_00 1643 1.06 1.27 0.94 126 TR_XM_PHPDW 1626 0.63 1.26 0.26 127 TR_XM_PHPForged 1609 0.62 1.25 0.25 128 PLING_QUERY 1604 0.76 1.24 0.47 129 KHOP_HELO_FCRDNS 1581 1.02 1.23 0.90 130 TR_XM_FormFill2 1570 0.62 1.22 0.27 131 XM_H_PHPOS 1568 0.61 1.22 0.24 132 SpammyFromTLD_02 1542 0.58 1.20 0.21 133 RDNS_DYNAMIC 1538 0.63 1.19 0.29 134 XM_B_REG_HTML 1518 0.66 1.18 0.35 135 XMReplyNow 1513 0.57 1.17 0.20 136 PDS_RDNS_DYNAMIC_FP 1502 0.47 1.16 0.06 137 XMPhish30 1486 0.82 1.15 0.62 138 THIS_AD 1455 0.76 1.13 0.53 139 TVD_RCVD_IP 1400 0.74 1.09 0.54 140 URI_HEX 1394 0.89 1.08 0.77 141 XMGenDplmaNmb 1348 0.75 1.05 0.58 142 TR_XM_INV_DKIM 1320 0.42 1.02 0.07 143 RELAYCOUNTRY_IN 1295 0.40 1.00 0.04 144 T_STY_INVIS_DIRECT 1268 0.59 0.98 0.36 145 ALL_TRUSTED 1235 13.34 0.96 20.75 146 XM_DIRTYINTL 1205 0.39 0.93 0.06 147 BAYES_40 1174 3.46 0.91 4.99 148 XM_UB99 1173 0.34 0.91 0.00 149 T_TooManySym_02 1159 2.35 0.90 3.22 150 XM_B_Phish66 1129 0.48 0.88 0.25 151 XM_SendGrid 1125 0.97 0.87 1.02 152 DIET_1 1120 0.47 0.87 0.24 153 XM_Dr_From 1117 0.42 0.87 0.16 154 RELAYCOUNTRY_FR 1106 0.41 0.86 0.14 155 TR_XM_Spammywords 1090 0.39 0.85 0.12 156 XM_S_SpammyWords 1090 0.39 0.85 0.12 157 LongTLD 1087 0.44 0.84 0.21 158 HTML_MIME_NO_HTML_TAG 1061 1.12 0.82 1.29 159 MPART_ALT_DIFF_COUNT 1060 0.50 0.82 0.31 160 URG_BIZ 1030 0.33 0.80 0.05 161 XMHTMLBadTable_001 1029 0.52 0.80 0.36 162 XM_DrOz_From 1022 0.34 0.79 0.06 163 HTML_OBFUSCATE_05_10 1019 0.39 0.79 0.15 164 XMSubMetaI_00 1013 0.74 0.79 0.71 165 TR_Mismatch_TLD_01 1012 0.46 0.78 0.27 166 SUBJ_DOLLARS 1009 0.66 0.78 0.58 167 XMSlimDrugH 1006 0.52 0.78 0.37 168 TM2_M_OBFU_COMMENT 998 0.51 0.77 0.35 169 SHOPIFY_IMG_NOT_RCVD_SFY 996 0.56 0.77 0.43 170 XM_OfRef7 993 0.39 0.77 0.17 171 DKIM_ADSP_CUSTOM_MED 991 0.76 0.77 0.76 172 TR_Mismatch_TLD_02 983 0.32 0.76 0.05 173 HTTPS_HTTP_MISMATCH 976 0.57 0.76 0.46 174 RCVD_IN_IADB_LISTED 945 1.80 0.73 2.44 175 HELO_DYNAMIC_SPLIT_IP 931 0.27 0.72 0.01 176 BOTNET_NORDNS 930 0.27 0.72 0.01 177 XMSexyCombo_01 916 0.34 0.71 0.12 178 MIME_CHARSET_FARAWAY 905 0.45 0.70 0.30 179 T_MONEY_PERCENT 892 0.37 0.69 0.17 180 TR_LOTS_OF_MONEY2 892 0.37 0.69 0.17 181 HTML_TAG_BALANCE_HEAD 890 0.31 0.69 0.08 182 XMClaimOffer 882 0.67 0.68 0.65 183 JH_SPAMMY_HEADERS 881 0.26 0.68 0.00 184 BAYES_20 876 2.20 0.68 3.11 185 XM_UB60 866 0.28 0.67 0.05 186 TR_XM_Base64_M1 860 0.66 0.67 0.66 187 XMSubMetaSxObfu_03 852 0.43 0.66 0.30 188 TR_XM_DK_SendGrid 850 0.67 0.66 0.68 189 FORGED_GMAIL_RCVD 843 0.53 0.65 0.45 190 XM_UB999 839 0.25 0.65 0.00 191 RCVD_IN_IADB_SPF 833 1.63 0.65 2.22 192 TR_XM_InvalidRelay 819 0.25 0.64 0.02 193 TooManyTo_002 804 2.16 0.62 3.07 194 XM_UB80 802 0.24 0.62 0.01 195 TR_MetaPhish_Combo_01 792 0.62 0.61 0.62 196 RCVD_IN_IADB_DK 791 1.48 0.61 2.00 197 RCVD_IN_IADB_SENDERID 790 1.50 0.61 2.04 198 TR_Symld_Words 782 4.18 0.61 6.33 199 HTML_FONT_FACE_BAD 766 0.54 0.59 0.51 200 XM_B_DNDMA 739 0.76 0.57 0.87 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 167741 84.99 96.88 77.87 2 RELAYCOUNTRY_US 163908 80.30 87.34 76.09 3 DKIM_SIGNED 155821 80.59 94.37 72.34 4 XM_DK_Pass 153505 79.05 92.06 71.26 5 DKIM_VALID 152547 78.51 91.35 70.82 6 XM_B_Unicode 143524 75.23 89.60 66.63 7 DKIM_VALID_AU 131216 67.03 77.25 60.92 8 BAYES_50 126338 47.50 28.87 58.65 9 DCC_CHECK_NEGATIVE 123311 43.58 20.76 57.25 10 XMListUnsubscribeExists 113917 63.25 80.56 52.88 11 XM_B_SpammyWords 95733 56.33 76.18 44.44 12 DCC_CHECK 92052 56.40 79.24 42.73 13 XM_B_Unicode3 89302 42.04 43.00 41.46 14 HTML_FONT_LOW_CONTRAST 68357 35.85 42.74 31.73 15 RCVD_IN_MSPIKE_H2 65692 35.35 43.47 30.50 16 LOC_TINY_FONT_1 61014 34.40 44.54 28.32 17 T_TM2_M_HEADER_IN_MSG 59987 25.67 22.02 27.85 18 DKIM_VALID_EF 55982 26.37 27.01 25.99 19 FVGT_m_MULTI_ODD 54798 30.09 37.85 25.44 20 XM_B_SpammyWords2 44960 30.09 45.49 20.87 21 ALL_TRUSTED 44702 13.34 0.96 20.75 22 MIME_HTML_ONLY 43516 20.29 20.44 20.20 23 T_KAM_HTML_FONT_INVALID 42673 24.17 31.46 19.81 24 XMSubLong 42295 19.04 18.04 19.63 25 XM_Multi_Part_URI 39607 18.43 18.49 18.39 26 USER_IN_DEF_DKIM_WL 38090 12.60 4.11 17.68 27 TR_XM_DK_Unsub 28975 16.37 21.25 13.45 28 BAYES_60 24924 9.89 7.08 11.57 29 UNPARSEABLE_RELAY 22294 11.83 14.30 10.35 30 XM_Evil_Numbers_Gen 18782 8.39 7.85 8.72 31 XM_DKIMWhitelistDomains 17598 5.17 0.16 8.17 32 TR_MAX_INTL_RELAY 16517 10.17 14.35 7.67 33 LotsOfNums_01 15981 6.95 6.16 7.42 34 XM_B_Unsub 15591 9.02 12.00 7.24 35 BAYES_00 15579 4.67 0.38 7.23 36 TooManyTo_001 14840 5.62 3.50 6.89 37 FSL_BULK_SIG 14805 6.47 5.80 6.87 38 LOTS_OF_MONEY 14385 11.01 18.25 6.68 39 XM_B_PhoneNumber 14056 5.38 3.46 6.53 40 RCVD_IN_VALIDITY_SAFE 13779 5.97 5.25 6.40 41 XM_DK_Undo_02 13720 24.69 55.30 6.37 42 TR_Symld_Words 13630 4.18 0.61 6.33 43 XM_B_SpammyWords3 13305 9.45 14.92 6.18 44 TR_XM_DK_Bayes 12885 3.86 0.32 5.98 45 TR_XM_DK_Bayes1 12735 3.82 0.32 5.91 46 TR_XM_BayesUnsub 12724 8.05 11.62 5.91 47 T_TooManySym_01 12271 4.41 2.26 5.70 48 XM_B_SpammyTLD 12216 4.54 2.64 5.67 49 IN_ZIMBRA_NJ_WHITELIST 11684 3.41 0.06 5.42 50 XMStrtUSub 11469 4.72 3.71 5.32 51 TR_XM_DK_Bayes2 11131 3.31 0.21 5.17 52 XM_H_GMP 11015 4.71 4.03 5.11 53 BAYES_99 10948 21.04 47.68 5.08 54 BAYES_40 10753 3.46 0.91 4.99 55 HTML_IMAGE_RATIO_02 10566 5.24 5.80 4.91 56 RCVD_IN_VALIDITY_CERTIFIED 10208 4.51 4.13 4.74 57 BAYES_80 10176 6.20 8.66 4.72 58 TR_XM_SpammyWords4 10004 9.25 16.95 4.64 59 XM_H_Long_From01 9803 4.66 4.84 4.55 60 HTML_IMAGE_RATIO_04 9778 4.65 4.85 4.54 61 URI_NOVOWEL 9770 3.43 1.58 4.54 62 XM_UncommonTLD01 8936 4.31 4.58 4.15 63 MPART_ALT_DIFF 8906 4.71 5.66 4.13 64 RCVD_IN_MSPIKE_WL 8774 3.49 2.51 4.07 65 RCVD_IN_MSPIKE_H3 8774 3.49 2.51 4.07 66 BAYES_999 8362 17.20 39.45 3.88 67 XMSubMetaSx_00 8337 4.56 5.71 3.87 68 XM_B_Phish_Phrases 7878 3.75 3.90 3.66 69 RELAYCOUNTRY_META 7610 7.27 13.50 3.53 70 MIME_QP_LONG_LINE 7526 2.92 1.96 3.49 71 INVALID_MSGID 7260 2.15 0.11 3.37 72 ANY_BOUNCE_MESSAGE 7197 2.29 0.54 3.34 73 BOUNCE_MESSAGE 7197 2.29 0.53 3.34 74 T_REMOTE_IMAGE 7032 2.59 1.46 3.26 75 T_TooManySym_02 6935 2.35 0.90 3.22 76 XMNumbers 6909 3.19 3.17 3.21 77 TR_XM_DKIM_Undo 6804 18.05 42.93 3.16 78 BOTNET_IPINHOSTNAME 6761 6.57 12.30 3.14 79 BAYES_20 6689 2.20 0.68 3.11 80 TO_MALFORMED 6643 1.93 0.00 3.08 81 TooManyTo_002 6618 2.16 0.62 3.07 82 BAYES_95 6339 3.84 5.34 2.94 83 XM_CamelCaseFrm001 5831 2.93 3.31 2.71 84 MIME_HTML_MOSTLY 5656 3.02 3.69 2.63 85 XM_Body_Dirty_Words 5282 4.43 7.72 2.45 86 RCVD_IN_IADB_LISTED 5266 1.80 0.73 2.44 87 TR_DCC_Bayes_99 5131 15.46 37.30 2.38 88 FROM_EXCESS_BASE64 5072 2.19 1.91 2.35 89 XM_PDF 4919 1.52 0.26 2.28 90 RCVD_IN_IADB_SPF 4790 1.63 0.65 2.22 91 HTML_IMAGE_RATIO_06 4650 3.05 4.53 2.16 92 HTML_IMAGE_RATIO_08 4532 2.80 3.96 2.10 93 XMStockSpam_06 4489 1.80 1.33 2.08 94 MIME_HTML_ONLY_MULTI 4463 2.40 2.94 2.07 95 XMSexyCombo_05 4407 3.05 4.74 2.05 96 RCVD_IN_IADB_SENDERID 4386 1.50 0.61 2.04 97 MAILING_LIST_MULTI 4385 1.86 1.56 2.04 98 RCVD_IN_IADB_DK 4313 1.48 0.61 2.00 99 TR_XM_SpammyRelay 4307 4.95 9.89 2.00 100 XM_B_FormFill 4272 1.26 0.05 1.98 101 XM_SPF_SoftFail 3853 2.60 3.95 1.79 102 XMBrknScrpt_02 3778 2.91 4.85 1.75 103 BAYES_05 3661 1.21 0.39 1.70 104 XM_TLDProd2 3644 1.14 0.22 1.69 105 TR_XM_PhishingBody 3636 2.24 3.17 1.69 106 TR_XM_UnparsRelay 3524 4.34 8.84 1.64 107 XM_DK_Undo_01 3462 1.52 1.39 1.61 108 IN_HORDE_ADDRESS_BOOK 3445 1.03 0.08 1.60 109 XMDiploma_00 3414 2.07 2.89 1.58 110 T_XMDrugObfuBody_14 3358 2.54 4.19 1.56 111 TVD_SPACE_RATIO 3330 1.01 0.12 1.55 112 DKIM_INVALID 3274 2.08 3.02 1.52 113 TM2_M_VERY_LONG_WORD 3166 2.03 2.97 1.47 114 TM2_M_URI_OPT_OUT 3141 1.64 1.95 1.46 115 RCVD_IN_IADB_VOUCHED 3140 1.06 0.40 1.46 116 URI_TRY_3LD 3119 1.85 2.51 1.45 117 XMBdyGiftCard01 3051 1.41 1.39 1.42 118 RELAYCOUNTRY_CA 3020 2.94 5.50 1.40 119 UNTRUSTED_Relay 2904 2.74 5.05 1.35 120 XM_ProductURIs 2889 1.45 1.64 1.34 121 HTML_MIME_NO_HTML_TAG 2787 1.12 0.82 1.29 122 XM_B_Investor 2757 2.74 5.17 1.28 123 TR_XM_SpammyWords5 2751 2.34 4.11 1.28 124 TR_LOTS_OF_MONEY3 2692 4.09 8.84 1.25 125 XMGappySubj_01 2648 0.80 0.09 1.23 126 XM_H_Long_From02 2500 0.93 0.54 1.16 127 T_TooManySym_03 2479 0.80 0.21 1.15 128 XM_B_Unsub2 2433 1.33 1.67 1.13 129 XM_GoogleGroups 2348 0.88 0.52 1.09 130 T_XMDrugObfuBody_08 2320 1.88 3.21 1.08 131 XM_OfRef6 2317 2.42 4.68 1.08 132 RCVD_IN_IADB_OPTIN 2262 0.75 0.26 1.05 133 TR_XM_SpammyWords2 2237 8.74 21.61 1.04 134 XM_SendGrid 2200 0.97 0.87 1.02 135 XM_B_SpammyWords4 2188 1.49 2.29 1.02 136 BOTNET 2140 3.01 6.37 0.99 137 RCVD_IN_BL_SPAMCOP_NET 2119 4.18 9.51 0.98 138 SUBJ_ALL_CAPS 2024 1.64 2.81 0.94 139 XM_B_SEO 2023 2.02 3.82 0.94 140 T_XMDrugObfuBody_00 2017 1.06 1.27 0.94 141 T_TVD_MIME_NO_HEADERS 1953 0.58 0.02 0.91 142 KHOP_HELO_FCRDNS 1944 1.02 1.23 0.90 143 XMBody_17 1873 3.29 7.34 0.87 144 XM_B_DNDMA 1872 0.76 0.57 0.87 145 XMBody_95 1847 0.58 0.12 0.86 146 USER_IN_WELCOMELIST 1818 0.53 0.00 0.84 147 USER_IN_WHITELIST 1818 0.53 0.00 0.84 148 XMGappySubj_02 1811 0.54 0.02 0.84 149 TooManyTo_003 1686 0.70 0.55 0.78 150 URI_HEX 1657 0.89 1.08 0.77 151 HTML_EXTRA_CLOSE 1653 0.49 0.01 0.77 152 XM_B_COPY_HTML 1644 0.98 1.35 0.76 153 DKIM_ADSP_CUSTOM_MED 1638 0.76 0.77 0.76 154 XM_UB50 1627 1.35 2.34 0.76 155 XMSubMetaI_00 1539 0.74 0.79 0.71 156 T_XMHurry_00 1521 1.60 3.09 0.71 157 TR_XM_DK_SendGrid 1462 0.67 0.66 0.68 158 RELAYCOUNTRY_AU 1443 1.17 2.01 0.67 159 TR_XM_Base64_M1 1425 0.66 0.67 0.66 160 XMClaimOffer 1409 0.67 0.68 0.65 161 TM2_M_BODY_EMPTY 1382 0.45 0.13 0.64 162 TR_MetaPhish_Combo_01 1345 0.62 0.61 0.62 163 XMPhish30 1342 0.82 1.15 0.62 164 XM_H_PHPMailer 1329 0.59 0.56 0.62 165 TooManyTo_004 1303 0.58 0.54 0.60 166 FILL_THIS_FORM 1270 0.45 0.23 0.59 167 SUBJ_DOLLARS 1257 0.66 0.78 0.58 168 XMGenDplmaNmb 1251 0.75 1.05 0.58 169 HTML_TAG_BALANCE_BODY 1202 1.17 2.19 0.56 170 TR_XM_SEO4 1196 1.67 3.54 0.56 171 TVD_RCVD_IP 1164 0.74 1.09 0.54 172 THIS_AD 1146 0.76 1.13 0.53 173 TooManyTo_005 1134 0.53 0.52 0.53 174 TR_XM_SPAMCOP 1118 3.26 7.84 0.52 175 XMOemUri 1113 0.41 0.23 0.52 176 HTML_FONT_FACE_BAD 1107 0.54 0.59 0.51 177 XMPhish14 1085 0.52 0.54 0.50 178 T_FILL_THIS_FORM_SHORT 1082 1.08 2.05 0.50 179 SpammyFromTLD_01 1080 0.94 1.68 0.50 180 NML_ADSP_CUSTOM_MED 1059 0.51 0.55 0.49 181 XMNoVowels 1013 0.38 0.24 0.47 182 PLING_QUERY 1005 0.76 1.24 0.47 183 HTTPS_HTTP_MISMATCH 996 0.57 0.76 0.46 184 T_TooManySym_04 985 0.31 0.05 0.46 185 FORGED_GMAIL_RCVD 968 0.53 0.65 0.45 186 SHOPIFY_IMG_NOT_RCVD_SFY 918 0.56 0.77 0.43 187 DKIM_ADSP_NXDOMAIN 904 0.47 0.56 0.42 188 T_OBFU_PDF_ATTACH 900 0.28 0.05 0.42 189 XM_Sams_Club_Forge 894 0.28 0.06 0.42 190 HELO_NODOT 853 0.36 0.29 0.40 191 HELO_NO_DOMAIN 851 0.34 0.25 0.40 192 NO_DNS_FOR_FROM 823 0.40 0.42 0.38 193 XM_URI_RBL 822 1.42 3.16 0.38 194 XMBSHREFv2 809 0.30 0.17 0.38 195 XMSlimDrugH 789 0.52 0.78 0.37 196 XM_S_SubURI 784 0.25 0.05 0.36 197 XMHTMLBadTable_001 775 0.52 0.80 0.36 198 XMEmptyBody_01 773 0.26 0.09 0.36 199 T_STY_INVIS_DIRECT 770 0.59 0.98 0.36 200 XMLngstWrd_00 761 0.31 0.25 0.35 ----------------------------------------------------------------------