Email: 319590 Autolearn: 0 AvgScore: 5.19 AvgScanTime: 1.20 sec Spam: 126513 Autolearn: 0 AvgScore: 13.60 AvgScanTime: 1.24 sec Ham: 193077 Autolearn: 0 AvgScore: -0.31 AvgScanTime: 1.18 sec Time Spent Running SA: 106.82 hours Time Spent Processing Spam: 43.63 hours Time Spent Processing Ham: 63.19 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 122507 88.17 96.83 82.49 2 DKIM_SIGNED 118936 84.19 94.01 77.76 3 XM_DK_Pass 115918 82.55 91.63 76.61 4 DKIM_VALID 114808 81.85 90.75 76.03 5 XM_B_Unicode 113568 78.99 89.77 71.92 6 RELAYCOUNTRY_US 109773 82.25 86.77 79.29 7 XMListUnsubscribeExists 102138 66.57 80.73 57.29 8 DCC_CHECK 99002 60.14 78.25 48.27 9 DKIM_VALID_AU 97185 70.34 76.82 66.09 10 XM_B_SpammyWords 96011 58.84 75.89 47.67 11 XM_DK_Undo_02 68948 25.22 54.50 6.04 12 BAYES_99 59687 21.64 47.18 4.90 13 XM_B_SpammyWords2 55993 31.42 44.26 23.00 14 XM_B_Unicode3 55865 44.81 44.16 45.24 15 LOC_TINY_FONT_1 55850 36.33 44.15 31.21 16 HTML_FONT_LOW_CONTRAST 55489 38.18 43.86 34.45 17 TR_XM_DKIM_Undo 54852 18.95 43.36 2.96 18 BAYES_999 49301 17.68 38.97 3.72 19 RCVD_IN_MSPIKE_H2 49189 34.82 38.88 32.16 20 FVGT_m_MULTI_ODD 48481 31.78 38.32 27.49 21 TR_DCC_Bayes_99 46189 15.80 36.51 2.23 22 T_KAM_HTML_FONT_INVALID 38799 24.75 30.67 20.87 23 BAYES_50 35550 47.00 28.10 59.39 24 DKIM_VALID_EF 34847 27.87 27.54 28.08 25 TR_XM_DK_Unsub 27913 17.49 22.06 14.50 26 T_TM2_M_HEADER_IN_MSG 27684 22.82 21.88 23.44 27 DCC_CHECK_NEGATIVE 27500 39.84 21.74 51.70 28 TR_XM_SpammyWords2 26956 9.09 21.31 1.08 29 MIME_HTML_ONLY 25210 20.22 19.93 20.41 30 XM_Multi_Part_URI 22734 18.61 17.97 19.03 31 XMSubLong 22468 20.55 17.76 22.38 32 LOTS_OF_MONEY 21430 10.13 16.94 5.66 33 TR_XM_SpammyWords4 20166 8.86 15.94 4.23 34 XM_B_SpammyWords3 19770 9.88 15.63 6.12 35 TR_MAX_INTL_RELAY 18586 10.73 14.69 8.13 36 RELAYCOUNTRY_META 17165 8.08 13.57 4.49 37 UNPARSEABLE_RELAY 16411 12.04 12.97 11.44 38 BOTNET_IPINHOSTNAME 16213 7.21 12.82 3.54 39 XM_B_Unsub 14616 8.98 11.55 7.30 40 TR_XM_BayesUnsub 14191 8.16 11.22 6.16 41 TR_XM_SpammyRelay 12156 5.41 9.61 2.66 42 RCVD_IN_BL_SPAMCOP_NET 11656 4.17 9.21 0.87 43 TR_LOTS_OF_MONEY3 11467 4.19 9.06 1.00 44 BAYES_80 11061 6.33 8.74 4.75 45 TR_XM_UnparsRelay 9983 4.15 7.89 1.71 46 XMBody_17 9572 3.60 7.57 1.00 47 TR_XM_SPAMCOP 9415 3.20 7.44 0.42 48 BAYES_60 9349 9.80 7.39 11.38 49 HTML_IMAGE_RATIO_02 9031 6.42 7.14 5.95 50 XM_Body_Dirty_Words 8578 4.21 6.78 2.53 51 BOTNET 8528 3.33 6.74 1.09 52 XM_Evil_Numbers_Gen 8056 8.20 6.37 9.39 53 LotsOfNums_01 7586 6.50 6.00 6.83 54 HTML_IMAGE_RATIO_04 7216 5.11 5.70 4.72 55 MPART_ALT_DIFF 7094 4.93 5.61 4.48 56 BAYES_95 7078 4.25 5.59 3.37 57 RELAYCOUNTRY_CA 6964 3.33 5.50 1.90 58 UNTRUSTED_Relay 6810 3.31 5.38 1.96 59 XMBrknScrpt_02 6686 3.20 5.28 1.83 60 FSL_BULK_SIG 6496 6.44 5.13 7.30 61 XM_B_Investor 6337 2.82 5.01 1.38 62 XMSubMetaSx_00 6329 3.83 5.00 3.06 63 RCVD_IN_VALIDITY_SAFE 6256 7.00 4.94 8.34 64 XM_UncommonTLD01 5976 4.74 4.72 4.75 65 XM_H_Long_From01 5710 4.83 4.51 5.03 66 T_XMDrugObfuBody_14 5576 2.72 4.41 1.62 67 HTML_IMAGE_RATIO_08 5568 3.36 4.40 2.68 68 MIME_HTML_MOSTLY 5527 3.41 4.37 2.78 69 XM_H_GMP 5367 5.25 4.24 5.91 70 TooManyTo_001 5302 5.35 4.19 6.10 71 XM_OfRef6 5281 2.28 4.17 1.03 72 XM_SPF_SoftFail 5260 2.95 4.16 2.15 73 USER_IN_DEF_DKIM_WL 5204 12.84 4.11 18.55 74 XMStrtUSub 5070 4.99 4.01 5.63 75 XMSexyCombo_05 4955 2.27 3.92 1.18 76 RCVD_IN_VALIDITY_RPBL 4949 1.70 3.91 0.25 77 TR_XM_SpammyWords5 4944 2.27 3.91 1.19 78 XM_B_SEO 4769 2.49 3.77 1.65 79 HTML_IMAGE_RATIO_06 4761 3.49 3.76 3.32 80 XM_B_Phish_Phrases 4724 3.71 3.73 3.70 81 RCVD_IN_VALIDITY_CERTIFIED 4692 5.67 3.71 6.96 82 T_XMHurry_00 4651 2.05 3.68 0.98 83 XM_B_PhoneNumber 4626 5.00 3.66 5.88 84 TR_XM_PhishingBody 4543 2.52 3.59 1.82 85 TM2_M_VERY_LONG_WORD 4424 2.37 3.50 1.63 86 XM_CamelCaseFrm001 4413 3.09 3.49 2.83 87 TR_XM_SEO4 4272 1.99 3.38 1.09 88 XM_URI_RBL 4200 1.60 3.32 0.48 89 DKIM_INVALID 4128 2.34 3.26 1.74 90 SUBJ_ALL_CAPS 3838 1.78 3.03 0.96 91 MIME_HTML_ONLY_MULTI 3548 2.54 2.80 2.37 92 XM_B_SpammyTLD 3540 4.34 2.80 5.36 93 XMNumbers 3520 3.12 2.78 3.34 94 T_XMDrugObfuBody_08 3493 2.00 2.76 1.50 95 URI_TRY_3LD 3258 1.95 2.58 1.54 96 RCVD_IN_MSPIKE_WL 3248 3.74 2.57 4.50 97 RCVD_IN_MSPIKE_H3 3248 3.74 2.57 4.50 98 XM_UB50 3204 1.66 2.53 1.08 99 HTML_TAG_BALANCE_BODY 2951 1.24 2.33 0.53 100 XM_B_SpammyWords4 2931 1.35 2.32 0.72 101 TM2_M_URI_OPT_OUT 2894 1.92 2.29 1.69 102 T_TooManySym_01 2806 4.93 2.22 6.71 103 RELAYCOUNTRY_AU 2645 1.25 2.09 0.70 104 XMDiploma_00 2629 1.66 2.08 1.39 105 FROM_EXCESS_BASE64 2488 2.25 1.97 2.43 106 AC_BR_BONANZA 2444 0.86 1.93 0.16 107 TR_Caps_n_Bayes_99 2415 0.76 1.91 0.01 108 XM_HighProb1 2304 0.73 1.82 0.02 109 SpammyFromTLD_01 2235 0.98 1.77 0.47 110 T_FILL_THIS_FORM_SHORT 2112 0.97 1.67 0.51 111 XM_ProductURIs 2031 0.94 1.61 0.50 112 URIBL_DBL_SPAM 1980 0.63 1.57 0.01 113 XMClaimOffer 1939 0.98 1.53 0.62 114 XM_B_Unsub2 1920 1.22 1.52 1.02 115 TR_XM_NoHeaderRelay 1907 0.70 1.51 0.16 116 T_REMOTE_IMAGE 1865 2.41 1.47 3.02 117 MAILING_LIST_MULTI 1839 2.16 1.45 2.63 118 TR_XM_PHPDW 1809 0.69 1.43 0.20 119 TR_XM_PHPForged 1792 0.69 1.42 0.21 120 TR_XM_FormFill2 1746 0.68 1.38 0.21 121 MIME_QP_LONG_LINE 1737 2.52 1.37 3.26 122 XM_H_PHPOS 1735 0.66 1.37 0.19 123 URI_NOVOWEL 1727 2.81 1.37 3.76 124 XMStockSpam_06 1706 1.57 1.35 1.72 125 XMSubMetaI_00 1680 0.91 1.33 0.63 126 HOSTED_IMG_MULTI_PUB_01 1672 0.61 1.32 0.14 127 T_XMDrugObfuBody_00 1625 1.18 1.28 1.12 128 SpammyFromTLD_02 1619 0.61 1.28 0.17 129 XMReplyNow 1584 0.63 1.25 0.23 130 XMPhish30 1577 1.01 1.25 0.86 131 URI_HEX 1532 0.91 1.21 0.71 132 KHOP_HELO_FCRDNS 1486 1.01 1.17 0.90 133 XM_B_COPY_HTML 1479 1.33 1.17 1.43 134 T_STY_INVIS_DIRECT 1463 0.68 1.16 0.36 135 THIS_AD 1454 0.85 1.15 0.66 136 XM_DK_Undo_01 1444 1.50 1.14 1.73 137 ALL_TRUSTED 1437 10.37 1.14 16.43 138 HTTPS_HTTP_MISMATCH 1404 0.76 1.11 0.54 139 TR_XM_INV_DKIM 1388 0.48 1.10 0.07 140 TR_Symld_Words 1372 1.35 1.08 1.52 141 T_Symld_Words_02 1366 0.57 1.08 0.23 142 TR_XM_FormFill 1302 0.42 1.03 0.01 143 RELAYCOUNTRY_IN 1286 0.42 1.02 0.03 144 BAYES_40 1266 3.28 1.00 4.77 145 TR_MetaPhish_Combo_01 1260 0.76 1.00 0.61 146 TM2_M_A_HREF_HREF 1247 0.51 0.99 0.19 147 RDNS_DYNAMIC 1242 0.56 0.98 0.29 148 PDS_RDNS_DYNAMIC_FP 1207 0.40 0.95 0.04 149 BAYES_00 1207 4.57 0.95 6.93 150 XM_B_DNDMA 1198 0.76 0.95 0.63 151 XM_UB99 1198 0.38 0.95 0.00 152 MPART_ALT_DIFF_COUNT 1169 0.67 0.92 0.50 153 XMSlimDrugH 1164 0.64 0.92 0.46 154 PLING_QUERY 1160 0.79 0.92 0.71 155 HTML_MIME_NO_HTML_TAG 1154 1.24 0.91 1.45 156 TVD_RCVD_IP 1130 0.87 0.89 0.85 157 XMBdyGiftCard01 1127 1.19 0.89 1.39 158 DIET_1 1094 0.73 0.86 0.63 159 TR_XM_DK_Bayes 1081 3.75 0.85 5.64 160 XMPhish14 1079 0.60 0.85 0.43 161 XM_B_REG_HTML 1068 0.63 0.84 0.49 162 SHOPIFY_IMG_NOT_RCVD_SFY 1063 0.65 0.84 0.53 163 BOTNET_NORDNS 1058 0.34 0.84 0.01 164 XM_Dr_From 1053 0.41 0.83 0.13 165 TR_XM_DK_Bayes1 1052 3.69 0.83 5.56 166 XMHTMLBadTable_001 1039 0.45 0.82 0.21 167 TooManyTo_002 1030 1.47 0.81 1.90 168 XM_DIRTYINTL 1016 0.39 0.80 0.12 169 TR_Mismatch_TLD_01 996 0.46 0.79 0.24 170 XM_B_Phish66 970 0.43 0.77 0.21 171 TR_XM_InvalidRelay 960 0.32 0.76 0.02 172 TR_Mismatch_TLD_02 959 0.33 0.76 0.05 173 XMSexyCombo_01 956 0.36 0.76 0.10 174 XM_SendGrid 954 0.98 0.75 1.13 175 XMSubMetaSxObfu_03 949 0.51 0.75 0.36 176 HELO_DYNAMIC_SPLIT_IP 946 0.30 0.75 0.01 177 RCVD_IN_PSBL 941 0.35 0.74 0.09 178 XMGenDplmaNmb 935 0.63 0.74 0.57 179 MIME_CHARSET_FARAWAY 931 0.53 0.74 0.39 180 TooManyTo_003 926 0.86 0.73 0.94 181 JH_SPAMMY_HEADERS 924 0.29 0.73 0.00 182 XM_UB60 918 0.34 0.73 0.09 183 XM_H_Long_From02 917 0.84 0.72 0.92 184 TM2_M_OBFU_COMMENT 894 0.44 0.71 0.26 185 TooManyTo_004 891 0.73 0.70 0.75 186 XM_DrOz_From 883 0.32 0.70 0.08 187 HTML_TAG_BALANCE_HEAD 882 0.33 0.70 0.09 188 RCVD_IN_IADB_LISTED 876 1.65 0.69 2.28 189 LongTLD 876 0.43 0.69 0.26 190 TooManyTo_005 864 0.66 0.68 0.65 191 DEAR_FRIEND 863 0.30 0.68 0.05 192 DKIM_ADSP_CUSTOM_MED 857 0.82 0.68 0.91 193 BAYES_20 826 2.01 0.65 2.90 194 XM_UB999 822 0.26 0.65 0.00 195 HTML_FONT_FACE_BAD 790 0.59 0.62 0.56 196 RELAYCOUNTRY_FR 784 0.38 0.62 0.22 197 TR_XM_Base64_M1 778 0.69 0.61 0.73 198 HTML_OBFUSCATE_05_10 769 0.33 0.61 0.14 199 XMPhish08 767 0.40 0.61 0.26 200 NML_ADSP_CUSTOM_MED 760 0.58 0.60 0.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 159269 88.17 96.83 82.49 2 RELAYCOUNTRY_US 153083 82.25 86.77 79.29 3 DKIM_SIGNED 150142 84.19 94.01 77.76 4 XM_DK_Pass 147918 82.55 91.63 76.61 5 DKIM_VALID 146792 81.85 90.75 76.03 6 XM_B_Unicode 138866 78.99 89.77 71.92 7 DKIM_VALID_AU 127608 70.34 76.82 66.09 8 BAYES_50 114671 47.00 28.10 59.39 9 XMListUnsubscribeExists 110612 66.57 80.73 57.29 10 DCC_CHECK_NEGATIVE 99830 39.84 21.74 51.70 11 DCC_CHECK 93191 60.14 78.25 48.27 12 XM_B_SpammyWords 92039 58.84 75.89 47.67 13 XM_B_Unicode3 87341 44.81 44.16 45.24 14 HTML_FONT_LOW_CONTRAST 66521 38.18 43.86 34.45 15 RCVD_IN_MSPIKE_H2 62093 34.82 38.88 32.16 16 LOC_TINY_FONT_1 60254 36.33 44.15 31.21 17 DKIM_VALID_EF 54221 27.87 27.54 28.08 18 FVGT_m_MULTI_ODD 53078 31.78 38.32 27.49 19 T_TM2_M_HEADER_IN_MSG 45261 22.82 21.88 23.44 20 XM_B_SpammyWords2 44409 31.42 44.26 23.00 21 XMSubLong 43208 20.55 17.76 22.38 22 T_KAM_HTML_FONT_INVALID 40302 24.75 30.67 20.87 23 MIME_HTML_ONLY 39399 20.22 19.93 20.41 24 XM_Multi_Part_URI 36749 18.61 17.97 19.03 25 USER_IN_DEF_DKIM_WL 35818 12.84 4.11 18.55 26 ALL_TRUSTED 31720 10.37 1.14 16.43 27 TR_XM_DK_Unsub 27990 17.49 22.06 14.50 28 UNPARSEABLE_RELAY 22081 12.04 12.97 11.44 29 BAYES_60 21970 9.80 7.39 11.38 30 XM_Evil_Numbers_Gen 18139 8.20 6.37 9.39 31 XM_DKIMWhitelistDomains 18116 5.67 0.00 9.38 32 RCVD_IN_VALIDITY_SAFE 16101 7.00 4.94 8.34 33 TR_MAX_INTL_RELAY 15691 10.73 14.69 8.13 34 FSL_BULK_SIG 14101 6.44 5.13 7.30 35 XM_B_Unsub 14092 8.98 11.55 7.30 36 RCVD_IN_VALIDITY_CERTIFIED 13435 5.67 3.71 6.96 37 BAYES_00 13383 4.57 0.95 6.93 38 LotsOfNums_01 13178 6.50 6.00 6.83 39 T_TooManySym_01 12958 4.93 2.22 6.71 40 TR_XM_BayesUnsub 11892 8.16 11.22 6.16 41 XM_B_SpammyWords3 11808 9.88 15.63 6.12 42 TooManyTo_001 11784 5.35 4.19 6.10 43 XM_DK_Undo_02 11662 25.22 54.50 6.04 44 HTML_IMAGE_RATIO_02 11483 6.42 7.14 5.95 45 XM_H_GMP 11408 5.25 4.24 5.91 46 XM_B_PhoneNumber 11349 5.00 3.66 5.88 47 LOTS_OF_MONEY 10937 10.13 16.94 5.66 48 TR_XM_DK_Bayes 10888 3.75 0.85 5.64 49 XMStrtUSub 10869 4.99 4.01 5.63 50 TR_XM_DK_Bayes1 10741 3.69 0.83 5.56 51 IN_ZIMBRA_NJ_WHITELIST 10728 3.37 0.04 5.56 52 XM_B_SpammyTLD 10344 4.34 2.80 5.36 53 XM_H_Long_From01 9715 4.83 4.51 5.03 54 BAYES_99 9470 21.64 47.18 4.90 55 TR_XM_DK_Bayes2 9446 3.18 0.58 4.89 56 BAYES_40 9215 3.28 1.00 4.77 57 BAYES_80 9171 6.33 8.74 4.75 58 XM_UncommonTLD01 9169 4.74 4.72 4.75 59 HTML_IMAGE_RATIO_04 9116 5.11 5.70 4.72 60 RCVD_IN_MSPIKE_WL 8689 3.74 2.57 4.50 61 RCVD_IN_MSPIKE_H3 8689 3.74 2.57 4.50 62 RELAYCOUNTRY_META 8663 8.08 13.57 4.49 63 MPART_ALT_DIFF 8647 4.93 5.61 4.48 64 TR_XM_SpammyWords4 8158 8.86 15.94 4.23 65 T_TooManySym_02 7758 2.58 0.38 4.02 66 URI_NOVOWEL 7263 2.81 1.37 3.76 67 BAYES_999 7190 17.68 38.97 3.72 68 INVALID_MSGID 7188 2.33 0.21 3.72 69 XM_B_Phish_Phrases 7135 3.71 3.73 3.70 70 TO_MALFORMED 6874 2.15 0.00 3.56 71 BOTNET_IPINHOSTNAME 6832 7.21 12.82 3.54 72 ANY_BOUNCE_MESSAGE 6669 2.32 0.59 3.45 73 BOUNCE_MESSAGE 6668 2.32 0.59 3.45 74 BAYES_95 6516 4.25 5.59 3.37 75 XMNumbers 6444 3.12 2.78 3.34 76 HTML_IMAGE_RATIO_06 6407 3.49 3.76 3.32 77 MIME_QP_LONG_LINE 6301 2.52 1.37 3.26 78 XMSubMetaSx_00 5905 3.83 5.00 3.06 79 T_REMOTE_IMAGE 5835 2.41 1.47 3.02 80 TR_XM_DKIM_Undo 5718 18.95 43.36 2.96 81 BAYES_20 5603 2.01 0.65 2.90 82 XM_CamelCaseFrm001 5463 3.09 3.49 2.83 83 MIME_HTML_MOSTLY 5370 3.41 4.37 2.78 84 HTML_IMAGE_RATIO_08 5183 3.36 4.40 2.68 85 TR_XM_SpammyRelay 5142 5.41 9.61 2.66 86 MAILING_LIST_MULTI 5070 2.16 1.45 2.63 87 XM_Body_Dirty_Words 4884 4.21 6.78 2.53 88 FROM_EXCESS_BASE64 4695 2.25 1.97 2.43 89 MIME_HTML_ONLY_MULTI 4570 2.54 2.80 2.37 90 RCVD_IN_IADB_LISTED 4400 1.65 0.69 2.28 91 TR_DCC_Bayes_99 4300 15.80 36.51 2.23 92 XM_SPF_SoftFail 4156 2.95 4.16 2.15 93 RCVD_IN_IADB_SPF 3906 1.45 0.57 2.02 94 XM_PDF 3831 1.29 0.24 1.98 95 UNTRUSTED_Relay 3781 3.31 5.38 1.96 96 RELAYCOUNTRY_CA 3675 3.33 5.50 1.90 97 TooManyTo_002 3670 1.47 0.81 1.90 98 RCVD_IN_IADB_SENDERID 3539 1.31 0.52 1.83 99 XMBrknScrpt_02 3538 3.20 5.28 1.83 100 TR_XM_PhishingBody 3511 2.52 3.59 1.82 101 RCVD_IN_IADB_DK 3468 1.29 0.52 1.80 102 DKIM_INVALID 3350 2.34 3.26 1.74 103 XM_DK_Undo_01 3346 1.50 1.14 1.73 104 TVD_SPACE_RATIO 3338 1.10 0.14 1.73 105 XMStockSpam_06 3317 1.57 1.35 1.72 106 TR_XM_UnparsRelay 3294 4.15 7.89 1.71 107 TM2_M_URI_OPT_OUT 3254 1.92 2.29 1.69 108 XM_B_SEO 3179 2.49 3.77 1.65 109 IN_HORDE_ADDRESS_BOOK 3171 1.02 0.07 1.64 110 TM2_M_VERY_LONG_WORD 3139 2.37 3.50 1.63 111 T_XMDrugObfuBody_14 3131 2.72 4.41 1.62 112 BAYES_05 3076 1.11 0.38 1.59 113 URI_TRY_3LD 2965 1.95 2.58 1.54 114 RCVD_IN_IADB_VOUCHED 2957 1.10 0.44 1.53 115 TR_Symld_Words 2939 1.35 1.08 1.52 116 T_XMDrugObfuBody_08 2895 2.00 2.76 1.50 117 XM_TLDProd2 2845 0.96 0.18 1.47 118 HTML_MIME_NO_HTML_TAG 2805 1.24 0.91 1.45 119 XM_B_COPY_HTML 2763 1.33 1.17 1.43 120 T_TooManySym_03 2733 0.90 0.11 1.42 121 XMBdyGiftCard01 2687 1.19 0.89 1.39 122 XMDiploma_00 2678 1.66 2.08 1.39 123 XM_B_Investor 2666 2.82 5.01 1.38 124 XM_GoogleGroups 2530 0.99 0.49 1.31 125 XMGappySubj_01 2360 0.86 0.30 1.22 126 TR_XM_SpammyWords5 2303 2.27 3.91 1.19 127 XMSexyCombo_05 2285 2.27 3.92 1.18 128 XM_SendGrid 2179 0.98 0.75 1.13 129 T_XMDrugObfuBody_00 2161 1.18 1.28 1.12 130 BOTNET 2100 3.33 6.74 1.09 131 TR_XM_SEO4 2097 1.99 3.38 1.09 132 TR_XM_SpammyWords2 2087 9.09 21.31 1.08 133 XM_UB50 2086 1.66 2.53 1.08 134 RCVD_IN_IADB_OPTIN 2071 0.75 0.26 1.07 135 XM_RXBody 2033 0.77 0.33 1.05 136 XM_OfRef6 1997 2.28 4.17 1.03 137 XM_B_Unsub2 1967 1.22 1.52 1.02 138 XMGappySubj_02 1940 0.62 0.03 1.00 139 XMBody_17 1931 3.60 7.57 1.00 140 TR_LOTS_OF_MONEY3 1927 4.19 9.06 1.00 141 USER_IN_WHITELIST 1911 0.60 0.00 0.99 142 USER_IN_WELCOMELIST 1911 0.60 0.00 0.99 143 T_XMHurry_00 1899 2.05 3.68 0.98 144 SUBJ_ALL_CAPS 1850 1.78 3.03 0.96 145 TooManyTo_003 1812 0.86 0.73 0.94 146 XM_H_Long_From02 1782 0.84 0.72 0.92 147 DKIM_ADSP_CUSTOM_MED 1753 0.82 0.68 0.91 148 KHOP_HELO_FCRDNS 1731 1.01 1.17 0.90 149 RCVD_IN_BL_SPAMCOP_NET 1676 4.17 9.21 0.87 150 XMPhish30 1664 1.01 1.25 0.86 151 TVD_RCVD_IP 1635 0.87 0.89 0.85 152 T_MANY_PILL_PRICE 1587 0.50 0.00 0.82 153 TR_XM_DK_SendGrid 1565 0.71 0.55 0.81 154 XMBody_95 1554 0.55 0.16 0.80 155 XMOemUri 1451 0.57 0.30 0.75 156 TooManyTo_004 1440 0.73 0.70 0.75 157 XM_H_PHPMailer 1420 0.67 0.58 0.74 158 TR_XM_Base64_M1 1417 0.69 0.61 0.73 159 XM_B_SpammyWords4 1387 1.35 2.32 0.72 160 PLING_QUERY 1367 0.79 0.92 0.71 161 URI_HEX 1366 0.91 1.21 0.71 162 RELAYCOUNTRY_AU 1350 1.25 2.09 0.70 163 THIS_AD 1267 0.85 1.15 0.66 164 TooManyTo_005 1261 0.66 0.68 0.65 165 XMNoVowels 1257 0.57 0.44 0.65 166 T_TVD_MIME_NO_HEADERS 1253 0.40 0.03 0.65 167 DIET_1 1225 0.73 0.86 0.63 168 XM_B_DNDMA 1219 0.76 0.95 0.63 169 XMSubMetaI_00 1215 0.91 1.33 0.63 170 T_TooManySym_04 1194 0.38 0.02 0.62 171 XMClaimOffer 1191 0.98 1.53 0.62 172 TR_MetaPhish_Combo_01 1174 0.76 1.00 0.61 173 XM_B_FormFill 1139 0.37 0.03 0.59 174 NML_ADSP_CUSTOM_MED 1100 0.58 0.60 0.57 175 XMGenDplmaNmb 1094 0.63 0.74 0.57 176 MSGID_FROM_MTA_HEADER 1090 0.37 0.07 0.56 177 HTML_FONT_FACE_BAD 1087 0.59 0.62 0.56 178 SUBJ_DOLLARS 1064 0.55 0.54 0.55 179 XMSolicitRefs_0 1045 0.41 0.22 0.54 180 HTTPS_HTTP_MISMATCH 1036 0.76 1.11 0.54 181 SHOPIFY_IMG_NOT_RCVD_SFY 1027 0.65 0.84 0.53 182 XM_Sams_Club_Forge 1025 0.33 0.03 0.53 183 HTML_TAG_BALANCE_BODY 1014 1.24 2.33 0.53 184 FORGED_GMAIL_RCVD 1012 0.54 0.57 0.52 185 DKIM_ADSP_NXDOMAIN 994 0.52 0.52 0.51 186 HELO_NODOT 987 0.42 0.28 0.51 187 HELO_NO_DOMAIN 987 0.40 0.24 0.51 188 T_FILL_THIS_FORM_SHORT 983 0.97 1.67 0.51 189 AD_PREFS 966 0.32 0.04 0.50 190 XM_ProductURIs 964 0.94 1.61 0.50 191 MPART_ALT_DIFF_COUNT 961 0.67 0.92 0.50 192 XM_B_REG_HTML 952 0.63 0.84 0.49 193 XM_URI_RBL 927 1.60 3.32 0.48 194 NO_DNS_FOR_FROM 913 0.46 0.44 0.47 195 SpammyFromTLD_01 901 0.98 1.77 0.47 196 XMSlimDrugH 893 0.64 0.92 0.46 197 XM_ShortIntro_01 853 0.50 0.59 0.44 198 XMBSHREFv2 831 0.34 0.19 0.43 199 XMPhish14 825 0.60 0.85 0.43 200 TR_XM_SPAMCOP 809 3.20 7.44 0.42 ----------------------------------------------------------------------