Email: 300597 Autolearn: 0 AvgScore: 5.24 AvgScanTime: 1.17 sec Spam: 115778 Autolearn: 0 AvgScore: 13.50 AvgScanTime: 1.19 sec Ham: 184819 Autolearn: 0 AvgScore: 0.06 AvgScanTime: 1.15 sec Time Spent Running SA: 97.47 hours Time Spent Processing Spam: 38.19 hours Time Spent Processing Ham: 59.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 111493 87.39 96.30 81.82 2 DKIM_SIGNED 103215 80.85 89.15 75.66 3 XM_B_Unicode 102534 77.47 88.56 70.53 4 XM_DK_Pass 100336 79.25 86.66 74.61 5 DKIM_VALID 99475 78.64 85.92 74.09 6 RELAYCOUNTRY_US 94550 80.00 81.66 78.96 7 DCC_CHECK 87172 58.45 75.29 47.90 8 XMListUnsubscribeExists 85907 63.09 74.20 56.13 9 DKIM_VALID_AU 83871 67.42 72.44 64.28 10 XM_B_SpammyWords 80068 55.83 69.16 47.48 11 LOC_TINY_FONT_1 56736 38.34 49.00 31.66 12 XM_DK_Undo_02 56735 22.73 49.00 6.27 13 XM_B_Unicode3 56059 47.82 48.42 47.45 14 BAYES_99 54039 21.02 46.67 4.95 15 RCVD_IN_MSPIKE_H2 47294 36.27 40.85 33.41 16 BAYES_999 45173 17.36 39.02 3.79 17 HTML_FONT_LOW_CONTRAST 45134 35.47 38.98 33.26 18 XM_B_SpammyWords2 43530 28.00 37.60 21.99 19 TR_XM_DKIM_Undo 42622 16.12 36.81 3.15 20 TR_DCC_Bayes_99 38715 14.35 33.44 2.40 21 FVGT_m_MULTI_ODD 37953 28.60 32.78 25.98 22 BAYES_50 34777 48.31 30.04 59.76 23 T_KAM_HTML_FONT_INVALID 33553 23.15 28.98 19.50 24 MIME_HTML_ONLY 30740 23.90 26.55 22.23 25 DCC_CHECK_NEGATIVE 28597 41.53 24.70 52.08 26 DKIM_VALID_EF 28010 25.54 24.19 26.39 27 T_TM2_M_HEADER_IN_MSG 22851 21.61 19.74 22.79 28 XM_Multi_Part_URI 21856 19.02 18.88 19.12 29 XMSubLong 20499 20.81 17.71 22.75 30 TR_XM_DK_Unsub 20289 15.02 17.52 13.44 31 TR_XM_SpammyWords2 18312 6.82 15.82 1.18 32 LOTS_OF_MONEY 17419 10.25 15.05 7.24 33 RELAYCOUNTRY_META 16650 8.16 14.38 4.27 34 TR_MAX_INTL_RELAY 16027 9.88 13.84 7.39 35 XM_B_Unsub 15636 9.74 13.51 7.38 36 TR_XM_BayesUnsub 15108 8.88 13.05 6.27 37 UNPARSEABLE_RELAY 14923 12.05 12.89 11.53 38 TR_XM_SpammyWords4 14634 8.46 12.64 5.83 39 XM_B_SpammyWords3 13722 9.16 11.85 7.47 40 BOTNET_IPINHOSTNAME 13551 6.75 11.70 3.65 41 TR_XM_SpammyRelay 11864 5.63 10.25 2.73 42 HTML_IMAGE_RATIO_02 9699 6.93 8.38 6.02 43 BAYES_80 9631 5.95 8.32 4.46 44 XM_Evil_Numbers_Gen 9438 9.52 8.15 10.38 45 RCVD_IN_BL_SPAMCOP_NET 9104 3.50 7.86 0.77 46 TR_XM_UnparsRelay 8702 4.15 7.52 2.04 47 BAYES_60 8037 9.59 6.94 11.24 48 FSL_BULK_SIG 7868 7.03 6.80 7.18 49 BOTNET 7655 3.30 6.61 1.22 50 XMBody_17 7303 2.91 6.31 0.78 51 TR_XM_SPAMCOP 7288 2.64 6.29 0.35 52 MPART_ALT_DIFF 7231 4.86 6.25 3.99 53 UNTRUSTED_Relay 7030 3.55 6.07 1.98 54 LotsOfNums_01 6847 6.71 5.91 7.21 55 XM_H_Long_From01 6811 5.44 5.88 5.16 56 TR_LOTS_OF_MONEY3 6775 2.68 5.85 0.69 57 XM_Body_Dirty_Words 6549 4.14 5.66 3.20 58 ALL_TRUSTED 6507 12.60 5.62 16.97 59 RCVD_IN_VALIDITY_SAFE 6426 7.73 5.55 9.10 60 RELAYCOUNTRY_CA 6341 3.13 5.48 1.65 61 XM_H_GMP 6101 5.41 5.27 5.50 62 BAYES_95 6010 3.80 5.19 2.93 63 XMSubMetaSx_00 5693 5.02 4.92 5.09 64 HTML_IMAGE_RATIO_04 5609 4.79 4.84 4.76 65 USER_IN_DEF_DKIM_WL 5463 13.75 4.72 19.41 66 HTML_IMAGE_RATIO_08 5446 3.84 4.70 3.30 67 XM_UncommonTLD01 5357 4.70 4.63 4.75 68 MIME_HTML_MOSTLY 5289 3.50 4.57 2.84 69 T_XMDrugObfuBody_14 5210 3.07 4.50 2.17 70 FROM_MISSP_EH_MATCH 5163 1.72 4.46 0.00 71 TO_NO_BRKTS_FROM_MSSP 5117 1.71 4.42 0.01 72 XM_SPF_SoftFail 5110 2.64 4.41 1.53 73 URI_WP_HACKED_2 5083 1.70 4.39 0.01 74 XMNumbers 5083 4.01 4.39 3.78 75 XM_BadFromFormat 5062 1.76 4.37 0.12 76 TooManyTo_001 4972 6.24 4.29 7.46 77 RCVD_IN_VALIDITY_CERTIFIED 4957 6.45 4.28 7.80 78 XM_B_Investor 4947 2.56 4.27 1.48 79 XM_B_Phish_Phrases 4919 5.34 4.25 6.03 80 HTML_IMAGE_RATIO_06 4875 3.84 4.21 3.60 81 XMBrknScrpt_02 4560 2.42 3.94 1.47 82 TR_XM_SpammyWords5 4538 2.70 3.92 1.94 83 XM_B_SEO 4474 2.38 3.86 1.45 84 XM_CamelCaseFrm001 4224 3.10 3.65 2.76 85 XMSexyCombo_05 4222 3.37 3.65 3.20 86 RCVD_IN_VALIDITY_RPBL 4119 1.43 3.56 0.10 87 XMStrtUSub 4087 4.70 3.53 5.43 88 XM_B_PhoneNumber 4028 5.58 3.48 6.90 89 XM_URI_RBL 3946 1.64 3.41 0.53 90 XM_B_SpammyTLD 3909 4.74 3.38 5.60 91 TR_XM_PhishingBody 3823 2.50 3.30 1.99 92 DKIM_INVALID 3740 2.21 3.23 1.57 93 TM2_M_VERY_LONG_WORD 3731 2.13 3.22 1.44 94 TR_XM_SEO4 3698 1.88 3.19 1.06 95 XM_UB50 3690 1.92 3.19 1.12 96 MIME_HTML_ONLY_MULTI 3558 2.47 3.07 2.10 97 SUBJ_ALL_CAPS 3548 1.85 3.06 1.09 98 XM_OfRef6 3530 1.63 3.05 0.74 99 RCVD_IN_MSPIKE_WL 3430 3.87 2.96 4.45 100 RCVD_IN_MSPIKE_H3 3430 3.87 2.96 4.45 101 TM2_M_URI_OPT_OUT 3389 2.36 2.93 2.00 102 T_XMDrugObfuBody_08 2887 1.70 2.49 1.20 103 T_XMHurry_00 2746 1.39 2.37 0.78 104 RELAYCOUNTRY_AU 2704 1.30 2.34 0.65 105 FROM_EXCESS_BASE64 2548 2.27 2.20 2.32 106 T_TooManySym_01 2534 5.10 2.19 6.93 107 MIME_QP_LONG_LINE 2334 2.88 2.02 3.42 108 XMSubMetaI_00 2287 1.48 1.98 1.16 109 XMDiploma_00 2275 1.66 1.96 1.47 110 HTML_TAG_BALANCE_BODY 2239 1.17 1.93 0.70 111 TR_XM_NoHeaderRelay 2170 0.82 1.87 0.16 112 XM_DK_Undo_01 2077 1.75 1.79 1.73 113 XM_HighProb1 2064 0.69 1.78 0.01 114 XM_B_SpammyWords4 1990 1.19 1.72 0.85 115 SpammyFromTLD_02 1962 0.76 1.69 0.18 116 T_MONEY_PERCENT 1937 0.86 1.67 0.35 117 TR_LOTS_OF_MONEY2 1937 0.86 1.67 0.35 118 TR_Caps_n_Bayes_99 1932 0.67 1.67 0.05 119 SpammyFromTLD_01 1932 0.96 1.67 0.51 120 XMStockSpam_06 1912 2.22 1.65 2.58 121 XM_B_Unsub2 1858 1.28 1.60 1.08 122 MAILING_LIST_MULTI 1803 1.99 1.56 2.27 123 AC_BR_BONANZA 1770 0.67 1.53 0.14 124 T_XMDrugObfuBody_00 1739 1.23 1.50 1.06 125 XMReplyNow 1666 0.69 1.44 0.21 126 T_FILL_THIS_FORM_SHORT 1641 0.87 1.42 0.53 127 URI_NOVOWEL 1633 2.95 1.41 3.92 128 URIBL_DBL_SPAM 1628 0.55 1.41 0.01 129 XMBdyGiftCard01 1613 2.21 1.39 2.71 130 XM_B_COPY_HTML 1598 1.36 1.38 1.35 131 TR_XM_PHPForged 1566 0.66 1.35 0.22 132 XM_H_Long_From02 1546 1.24 1.34 1.18 133 T_STY_INVIS_DIRECT 1543 0.72 1.33 0.34 134 THIS_AD 1536 0.97 1.33 0.74 135 TR_XM_PHPDW 1531 0.64 1.32 0.21 136 XMPhish30 1519 0.93 1.31 0.69 137 TR_XM_FormFill2 1508 0.64 1.30 0.23 138 XM_H_PHPOS 1495 0.62 1.29 0.20 139 TR_Symld_Words 1475 1.56 1.27 1.73 140 URI_HEX 1462 1.04 1.26 0.90 141 XM_H_Undi_Recip 1440 0.57 1.24 0.15 142 KHOP_HELO_FCRDNS 1419 0.96 1.23 0.79 143 URI_TRY_3LD 1408 1.09 1.22 1.02 144 DIET_1 1352 0.64 1.17 0.31 145 BAYES_40 1336 3.40 1.15 4.81 146 T_REMOTE_IMAGE 1322 2.13 1.14 2.74 147 TR_XM_INV_DKIM 1316 0.50 1.14 0.10 148 TR_XM_InvalidRelay 1277 0.44 1.10 0.03 149 TR_XM_Undi_Recip19 1271 0.48 1.10 0.09 150 XM_ProductURIs 1265 0.94 1.09 0.84 151 XMSlimDrugH 1169 0.75 1.01 0.58 152 SHOPIFY_IMG_NOT_RCVD_SFY 1152 0.75 1.00 0.60 153 XMGenDplmaNmb 1137 0.83 0.98 0.73 154 T_Symld_Words_02 1102 0.51 0.95 0.23 155 XM_SendGrid 1099 1.05 0.95 1.11 156 TVD_RCVD_IP 1094 0.78 0.94 0.68 157 RDNS_DYNAMIC 1093 0.57 0.94 0.34 158 PDS_RDNS_DYNAMIC_FP 1080 0.40 0.93 0.06 159 RELAYCOUNTRY_IN 1049 0.37 0.91 0.03 160 XM_B_DNDMA 1035 0.92 0.89 0.94 161 TR_XM_FormFill 1030 0.35 0.89 0.01 162 XM_DIRTYINTL 1019 0.40 0.88 0.11 163 RCVD_IN_IADB_LISTED 1013 1.75 0.87 2.30 164 DKIM_ADSP_CUSTOM_MED 1006 0.88 0.87 0.88 165 XM_B_REG_HTML 991 0.66 0.86 0.54 166 XM_UB60 976 0.39 0.84 0.10 167 TR_Mismatch_TLD_02 974 0.35 0.84 0.05 168 XM_UB99 971 0.33 0.84 0.01 169 HELO_DYNAMIC_SPLIT_IP 963 0.33 0.83 0.02 170 ANY_BOUNCE_MESSAGE 960 2.50 0.83 3.54 171 BOUNCE_MESSAGE 960 2.50 0.83 3.54 172 TR_Sbj_FN_Bdy 956 0.39 0.83 0.11 173 PLING_QUERY 954 0.81 0.82 0.81 174 DKIM_ADSP_NXDOMAIN 952 0.61 0.82 0.48 175 TR_MetaPhish_Combo_01 950 0.68 0.82 0.60 176 RCVD_IN_IADB_SPF 925 1.58 0.80 2.07 177 HTML_TAG_BALANCE_CENTER 920 0.51 0.79 0.33 178 BOTNET_NORDNS 912 0.31 0.79 0.01 179 HTML_MIME_NO_HTML_TAG 906 1.23 0.78 1.50 180 XM_B_Phish66 895 0.45 0.77 0.24 181 TM2_M_OBFU_COMMENT 887 0.48 0.77 0.30 182 HTTPS_HTTP_MISMATCH 884 0.62 0.76 0.52 183 TR_XM_Base64_L1 879 0.42 0.76 0.20 184 TR_XM_Base64_M1 876 0.87 0.76 0.95 185 TR_Mismatch_TLD_01 872 0.43 0.75 0.23 186 RCVD_IN_IADB_DK 867 1.44 0.75 1.87 187 BAYES_20 867 2.15 0.75 3.02 188 TR_XM_DK_SendGrid 864 0.78 0.75 0.79 189 RCVD_IN_IADB_SENDERID 860 1.46 0.74 1.90 190 TooManyTo_002 858 2.29 0.74 3.26 191 XM_B_COVIDMETA 843 0.33 0.73 0.08 192 TR_XM_Undi_RecipCombo2 842 0.28 0.73 0.00 193 XMSexyCombo_01 833 0.88 0.72 0.99 194 NML_ADSP_CUSTOM_MED 824 0.64 0.71 0.60 195 ADVANCE_FEE_5_NEW_MONEY 824 0.27 0.71 0.00 196 SUBJ_DOLLARS 808 0.46 0.70 0.31 197 MPART_ALT_DIFF_COUNT 801 0.50 0.69 0.38 198 HTML_TEXT_INVISIBLE_STYLE 797 0.47 0.69 0.33 199 RCVD_IN_PSBL 794 0.35 0.69 0.14 200 TR_XM_Undi_Recip6 793 0.26 0.68 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 151211 87.39 96.30 81.82 2 RELAYCOUNTRY_US 145937 80.00 81.66 78.96 3 DKIM_SIGNED 139828 80.85 89.15 75.66 4 XM_DK_Pass 137891 79.25 86.66 74.61 5 DKIM_VALID 136925 78.64 85.92 74.09 6 XM_B_Unicode 130350 77.47 88.56 70.53 7 DKIM_VALID_AU 118804 67.42 72.44 64.28 8 BAYES_50 110444 48.31 30.04 59.76 9 XMListUnsubscribeExists 103743 63.09 74.20 56.13 10 DCC_CHECK_NEGATIVE 96247 41.53 24.70 52.08 11 DCC_CHECK 88530 58.45 75.29 47.90 12 XM_B_SpammyWords 87759 55.83 69.16 47.48 13 XM_B_Unicode3 87695 47.82 48.42 47.45 14 RCVD_IN_MSPIKE_H2 61742 36.27 40.85 33.41 15 HTML_FONT_LOW_CONTRAST 61478 35.47 38.98 33.26 16 LOC_TINY_FONT_1 58505 38.34 49.00 31.66 17 DKIM_VALID_EF 48772 25.54 24.19 26.39 18 FVGT_m_MULTI_ODD 48020 28.60 32.78 25.98 19 T_TM2_M_HEADER_IN_MSG 42112 21.61 19.74 22.79 20 XMSubLong 42045 20.81 17.71 22.75 21 MIME_HTML_ONLY 41092 23.90 26.55 22.23 22 XM_B_SpammyWords2 40636 28.00 37.60 21.99 23 T_KAM_HTML_FONT_INVALID 36045 23.15 28.98 19.50 24 USER_IN_DEF_DKIM_WL 35880 13.75 4.72 19.41 25 XM_Multi_Part_URI 35332 19.02 18.88 19.12 26 ALL_TRUSTED 31368 12.60 5.62 16.97 27 TR_XM_DK_Unsub 24848 15.02 17.52 13.44 28 UNPARSEABLE_RELAY 21312 12.05 12.89 11.53 29 BAYES_60 20776 9.59 6.94 11.24 30 XM_Evil_Numbers_Gen 19177 9.52 8.15 10.38 31 XM_DKIMWhitelistDomains 18513 6.20 0.10 10.02 32 RCVD_IN_VALIDITY_SAFE 16816 7.73 5.55 9.10 33 RCVD_IN_VALIDITY_CERTIFIED 14417 6.45 4.28 7.80 34 XM_B_SpammyWords3 13798 9.16 11.85 7.47 35 TooManyTo_001 13780 6.24 4.29 7.46 36 TR_MAX_INTL_RELAY 13660 9.88 13.84 7.39 37 XM_B_Unsub 13632 9.74 13.51 7.38 38 LOTS_OF_MONEY 13384 10.25 15.05 7.24 39 BAYES_00 13355 4.66 0.57 7.23 40 LotsOfNums_01 13326 6.71 5.91 7.21 41 FSL_BULK_SIG 13267 7.03 6.80 7.18 42 T_TooManySym_01 12810 5.10 2.19 6.93 43 XM_B_PhoneNumber 12754 5.58 3.48 6.90 44 XM_DK_Undo_02 11588 22.73 49.00 6.27 45 TR_XM_BayesUnsub 11586 8.88 13.05 6.27 46 TR_XM_DK_Bayes 11232 3.92 0.47 6.08 47 TR_XM_DK_Bayes1 11153 3.88 0.44 6.03 48 XM_B_Phish_Phrases 11145 5.34 4.25 6.03 49 HTML_IMAGE_RATIO_02 11122 6.93 8.38 6.02 50 TR_XM_SpammyWords4 10782 8.46 12.64 5.83 51 XM_B_SpammyTLD 10349 4.74 3.38 5.60 52 IN_ZIMBRA_NJ_WHITELIST 10217 3.42 0.04 5.53 53 XM_H_GMP 10167 5.41 5.27 5.50 54 XMStrtUSub 10033 4.70 3.53 5.43 55 TR_XM_DK_Bayes2 9818 3.39 0.33 5.31 56 XM_H_Long_From01 9539 5.44 5.88 5.16 57 XMSubMetaSx_00 9400 5.02 4.92 5.09 58 BAYES_99 9156 21.02 46.67 4.95 59 BAYES_40 8884 3.40 1.15 4.81 60 HTML_IMAGE_RATIO_04 8804 4.79 4.84 4.76 61 XM_UncommonTLD01 8779 4.70 4.63 4.75 62 BAYES_80 8252 5.95 8.32 4.46 63 RCVD_IN_MSPIKE_WL 8216 3.87 2.96 4.45 64 RCVD_IN_MSPIKE_H3 8216 3.87 2.96 4.45 65 RELAYCOUNTRY_META 7892 8.16 14.38 4.27 66 MPART_ALT_DIFF 7383 4.86 6.25 3.99 67 URI_NOVOWEL 7244 2.95 1.41 3.92 68 T_TooManySym_02 7082 2.58 0.58 3.83 69 BAYES_999 7013 17.36 39.02 3.79 70 XMNumbers 6984 4.01 4.39 3.78 71 BOTNET_IPINHOSTNAME 6747 6.75 11.70 3.65 72 INVALID_MSGID 6708 2.32 0.23 3.63 73 HTML_IMAGE_RATIO_06 6658 3.84 4.21 3.60 74 TO_MALFORMED 6610 2.20 0.00 3.58 75 BOUNCE_MESSAGE 6548 2.50 0.83 3.54 76 ANY_BOUNCE_MESSAGE 6548 2.50 0.83 3.54 77 MIME_QP_LONG_LINE 6316 2.88 2.02 3.42 78 HTML_IMAGE_RATIO_08 6101 3.84 4.70 3.30 79 TooManyTo_002 6034 2.29 0.74 3.26 80 XMSexyCombo_05 5918 3.37 3.65 3.20 81 XM_Body_Dirty_Words 5905 4.14 5.66 3.20 82 TR_XM_DKIM_Undo 5826 16.12 36.81 3.15 83 BAYES_20 5587 2.15 0.75 3.02 84 BAYES_95 5407 3.80 5.19 2.93 85 MIME_HTML_MOSTLY 5242 3.50 4.57 2.84 86 XM_CamelCaseFrm001 5096 3.10 3.65 2.76 87 T_REMOTE_IMAGE 5066 2.13 1.14 2.74 88 TR_XM_SpammyRelay 5045 5.63 10.25 2.73 89 XMBdyGiftCard01 5016 2.21 1.39 2.71 90 XMStockSpam_06 4770 2.22 1.65 2.58 91 TR_DCC_Bayes_99 4432 14.35 33.44 2.40 92 FROM_EXCESS_BASE64 4287 2.27 2.20 2.32 93 RCVD_IN_IADB_LISTED 4248 1.75 0.87 2.30 94 MAILING_LIST_MULTI 4189 1.99 1.56 2.27 95 T_XMDrugObfuBody_14 4012 3.07 4.50 2.17 96 MIME_HTML_ONLY_MULTI 3876 2.47 3.07 2.10 97 RCVD_IN_IADB_SPF 3828 1.58 0.80 2.07 98 TR_XM_UnparsRelay 3779 4.15 7.52 2.04 99 TM2_M_URI_OPT_OUT 3705 2.36 2.93 2.00 100 TR_XM_PhishingBody 3680 2.50 3.30 1.99 101 UNTRUSTED_Relay 3653 3.55 6.07 1.98 102 TR_XM_SpammyWords5 3583 2.70 3.92 1.94 103 XM_PDF 3574 1.29 0.27 1.93 104 XM_B_FormFill 3522 1.19 0.04 1.91 105 RCVD_IN_IADB_SENDERID 3519 1.46 0.74 1.90 106 RCVD_IN_IADB_DK 3447 1.44 0.75 1.87 107 TR_Symld_Words 3205 1.56 1.27 1.73 108 XM_DK_Undo_01 3189 1.75 1.79 1.73 109 TVD_SPACE_RATIO 3186 1.11 0.14 1.72 110 IN_HORDE_ADDRESS_BOOK 3060 1.03 0.04 1.66 111 RELAYCOUNTRY_CA 3055 3.13 5.48 1.65 112 XMGappySubj_01 3036 1.06 0.13 1.64 113 BAYES_05 2954 1.12 0.37 1.60 114 DKIM_INVALID 2903 2.21 3.23 1.57 115 XM_TLDProd2 2881 1.04 0.21 1.56 116 XM_SPF_SoftFail 2824 2.64 4.41 1.53 117 HTML_MIME_NO_HTML_TAG 2777 1.23 0.78 1.50 118 RCVD_IN_IADB_VOUCHED 2768 1.08 0.41 1.50 119 XM_B_Investor 2741 2.56 4.27 1.48 120 XMBrknScrpt_02 2717 2.42 3.94 1.47 121 XMDiploma_00 2717 1.66 1.96 1.47 122 XM_B_SEO 2683 2.38 3.86 1.45 123 TM2_M_VERY_LONG_WORD 2662 2.13 3.22 1.44 124 XMGappySubj_02 2503 0.86 0.08 1.35 125 XM_B_COPY_HTML 2493 1.36 1.38 1.35 126 T_TooManySym_03 2478 0.89 0.16 1.34 127 BOTNET 2264 3.30 6.61 1.22 128 T_XMDrugObfuBody_08 2211 1.70 2.49 1.20 129 TR_XM_SpammyWords2 2189 6.82 15.82 1.18 130 XM_H_Long_From02 2176 1.24 1.34 1.18 131 XMSubMetaI_00 2149 1.48 1.98 1.16 132 XMSubMetaSxObfu_03 2147 0.95 0.61 1.16 133 XM_UB50 2067 1.92 3.19 1.12 134 XM_SendGrid 2058 1.05 0.95 1.11 135 XM_GoogleGroups 2052 0.93 0.63 1.11 136 SUBJ_ALL_CAPS 2021 1.85 3.06 1.09 137 XM_B_Unsub2 1989 1.28 1.60 1.08 138 TR_XM_SEO4 1968 1.88 3.19 1.06 139 T_XMDrugObfuBody_00 1950 1.23 1.50 1.06 140 TooManyTo_003 1928 0.90 0.67 1.04 141 RCVD_IN_IADB_OPTIN 1924 0.75 0.28 1.04 142 URI_TRY_3LD 1881 1.09 1.22 1.02 143 XM_RXBody 1848 0.72 0.27 1.00 144 XMSexyCombo_01 1824 0.88 0.72 0.99 145 TR_XM_Base64_M1 1749 0.87 0.76 0.95 146 XM_B_DNDMA 1745 0.92 0.89 0.94 147 URI_HEX 1670 1.04 1.26 0.90 148 DKIM_ADSP_CUSTOM_MED 1626 0.88 0.87 0.88 149 XM_B_SpammyWords4 1580 1.19 1.72 0.85 150 XMSexyCombo_04 1554 0.64 0.33 0.84 151 XM_ProductURIs 1550 0.94 1.09 0.84 152 TooManyTo_004 1510 0.74 0.63 0.82 153 PLING_QUERY 1490 0.81 0.82 0.81 154 USER_IN_WELCOMELIST 1482 0.49 0.00 0.80 155 USER_IN_WHITELIST 1482 0.49 0.00 0.80 156 TR_XM_DK_SendGrid 1467 0.78 0.75 0.79 157 KHOP_HELO_FCRDNS 1464 0.96 1.23 0.79 158 T_XMHurry_00 1443 1.39 2.37 0.78 159 XMBody_17 1441 2.91 6.31 0.78 160 RCVD_IN_BL_SPAMCOP_NET 1431 3.50 7.86 0.77 161 XM_OfRef6 1369 1.63 3.05 0.74 162 THIS_AD 1365 0.97 1.33 0.74 163 XMClaimOffer 1349 0.60 0.39 0.73 164 XMGenDplmaNmb 1345 0.83 0.98 0.73 165 TooManyTo_005 1292 0.66 0.61 0.70 166 HTML_TAG_BALANCE_BODY 1291 1.17 1.93 0.70 167 TR_LOTS_OF_MONEY3 1283 2.68 5.85 0.69 168 XMPhish30 1282 0.93 1.31 0.69 169 XMBody_95 1265 0.47 0.12 0.68 170 TVD_RCVD_IP 1255 0.78 0.94 0.68 171 RELAYCOUNTRY_AU 1202 1.30 2.34 0.65 172 XM_H_PHPMailer 1126 0.58 0.54 0.61 173 XMNoVowels 1122 0.49 0.31 0.61 174 NML_ADSP_CUSTOM_MED 1108 0.64 0.71 0.60 175 TR_MetaPhish_Combo_01 1107 0.68 0.82 0.60 176 SHOPIFY_IMG_NOT_RCVD_SFY 1102 0.75 1.00 0.60 177 T_TVD_MIME_NO_HEADERS 1095 0.39 0.06 0.59 178 XMSlimDrugH 1072 0.75 1.01 0.58 179 T_TooManySym_04 1034 0.35 0.01 0.56 180 FORGED_GMAIL_RCVD 1028 0.60 0.66 0.56 181 XMOemUri 1017 0.44 0.28 0.55 182 XM_Ancestry_Forge 1017 0.34 0.00 0.55 183 XM_B_REG_HTML 1005 0.66 0.86 0.54 184 XMPhish08 1003 0.58 0.63 0.54 185 XMLngstWrd_00 991 0.43 0.27 0.54 186 T_FILL_THIS_FORM_SHORT 978 0.87 1.42 0.53 187 XM_URI_RBL 975 1.64 3.41 0.53 188 HTTPS_HTTP_MISMATCH 970 0.62 0.76 0.52 189 SpammyFromTLD_01 950 0.96 1.67 0.51 190 FILL_THIS_FORM 945 0.41 0.25 0.51 191 MSGID_FROM_MTA_HEADER 912 0.32 0.04 0.49 192 DKIM_ADSP_NXDOMAIN 889 0.61 0.82 0.48 193 XM_Sams_Club_Forge 871 0.31 0.04 0.47 194 XMPhish14 862 0.48 0.51 0.47 195 NO_DNS_FOR_FROM 857 0.45 0.42 0.46 196 HELO_NO_DOMAIN 835 0.32 0.12 0.45 197 HELO_NODOT 835 0.32 0.12 0.45 198 XM_S_SubURI 830 0.30 0.06 0.45 199 XMLngstWrd_01 821 0.36 0.24 0.44 200 RELAYCOUNTRY_DE 820 0.43 0.41 0.44 ----------------------------------------------------------------------