Email: 384001 Autolearn: 0 AvgScore: 5.00 AvgScanTime: 1.42 sec Spam: 138616 Autolearn: 0 AvgScore: 13.11 AvgScanTime: 1.47 sec Ham: 245385 Autolearn: 0 AvgScore: 0.42 AvgScanTime: 1.39 sec Time Spent Running SA: 151.04 hours Time Spent Processing Spam: 56.55 hours Time Spent Processing Ham: 94.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133814 87.64 96.54 82.62 2 DKIM_SIGNED 128841 83.75 92.95 78.56 3 XM_DK_Pass 124958 82.17 90.15 77.66 4 DKIM_VALID 124175 81.75 89.58 77.33 5 XM_B_Unicode 122259 78.82 88.20 73.52 6 RELAYCOUNTRY_US 119370 81.90 86.12 79.51 7 DCC_CHECK 109208 61.32 78.78 51.46 8 XMListUnsubscribeExists 104093 66.28 75.09 61.30 9 DKIM_VALID_AU 100270 66.67 72.34 63.47 10 XM_B_SpammyWords 98266 54.48 70.89 45.21 11 XM_B_Unicode3 74540 52.29 53.77 51.44 12 LOC_TINY_FONT_1 70600 40.30 50.93 34.30 13 HTML_FONT_LOW_CONTRAST 64150 37.99 46.28 33.31 14 XM_DK_Undo_02 63233 20.68 45.62 6.60 15 RCVD_IN_MSPIKE_H2 62865 37.72 45.35 33.41 16 XM_B_SpammyWords2 56899 28.29 41.05 21.08 17 BAYES_99 51202 16.60 36.94 5.12 18 BAYES_50 48987 51.16 35.34 60.10 19 FVGT_m_MULTI_ODD 48354 30.65 34.88 28.25 20 TR_XM_DKIM_Undo 44284 13.46 31.95 3.02 21 BAYES_999 40946 13.17 29.54 3.92 22 TR_DCC_Bayes_99 39121 11.80 28.22 2.52 23 T_KAM_HTML_FONT_INVALID 38201 23.44 27.56 21.12 24 DKIM_VALID_EF 35222 25.54 25.41 25.61 25 MIME_HTML_ONLY 34869 22.90 25.16 21.62 26 XM_Multi_Part_URI 33843 21.16 24.41 19.32 27 DCC_CHECK_NEGATIVE 29131 38.59 21.02 48.52 28 UNPARSEABLE_RELAY 28927 15.88 20.87 13.06 29 XMSubLong 24611 19.53 17.75 20.53 30 TR_XM_DK_Unsub 24542 15.61 17.71 14.43 31 T_TM2_M_HEADER_IN_MSG 23800 19.72 17.17 21.15 32 TR_MAX_INTL_RELAY 22234 11.05 16.04 8.24 33 XM_B_Unsub 22210 12.15 16.02 9.97 34 TR_XM_BayesUnsub 21673 11.26 15.64 8.79 35 XM_B_SpammyWords3 20404 9.48 14.72 6.52 36 TR_XM_SpammyWords2 20229 5.84 14.59 0.89 37 RELAYCOUNTRY_META 18438 8.01 13.30 5.01 38 TR_XM_UnparsRelay 17960 6.31 12.96 2.56 39 BOTNET_IPINHOSTNAME 16191 6.64 11.68 3.80 40 XM_Evil_Numbers_Gen 15067 11.64 10.87 12.08 41 BAYES_80 14109 6.95 10.18 5.13 42 RCVD_IN_BL_SPAMCOP_NET 13501 4.07 9.74 0.87 43 LOTS_OF_MONEY 13095 7.19 9.45 5.91 44 TR_XM_SpammyRelay 12786 5.25 9.22 3.01 45 HTML_IMAGE_RATIO_02 12750 8.39 9.20 7.93 46 BAYES_60 12383 11.03 8.93 12.21 47 FSL_BULK_SIG 11974 7.13 8.64 6.27 48 TR_XM_SpammyWords4 11788 5.76 8.50 4.20 49 TR_XM_SPAMCOP 10874 3.15 7.84 0.50 50 XM_Body_Dirty_Words 10737 4.20 7.75 2.20 51 LotsOfNums_01 10101 8.45 7.29 9.10 52 UNTRUSTED_Relay 9887 4.16 7.13 2.48 53 BOTNET 9855 3.45 7.11 1.39 54 MPART_ALT_DIFF 8619 4.84 6.22 4.07 55 XM_UncommonTLD01 8271 4.90 5.97 4.30 56 XM_H_Long_From01 7950 5.31 5.74 5.07 57 XMSubMetaSx_00 7950 3.85 5.74 2.79 58 USER_IN_DEF_DKIM_WL 7943 15.48 5.73 20.98 59 BAYES_95 7586 3.95 5.47 3.09 60 HTML_IMAGE_RATIO_04 7368 6.56 5.32 7.26 61 XM_B_PhoneNumber 7235 6.41 5.22 7.08 62 XM_SPF_SoftFail 7124 2.83 5.14 1.52 63 RCVD_IN_VALIDITY_SAFE 7097 6.52 5.12 7.31 64 XM_H_GMP 6777 4.32 4.89 4.01 65 TR_XM_SpammyWords5 6492 3.34 4.68 2.59 66 HTML_IMAGE_RATIO_06 6246 4.11 4.51 3.88 67 XMSexyCombo_05 6055 2.15 4.37 0.90 68 TooManyTo_001 5859 5.23 4.23 5.80 69 RELAYCOUNTRY_CA 5789 2.55 4.18 1.64 70 MIME_HTML_MOSTLY 5631 3.23 4.06 2.76 71 XM_B_SEO 5512 1.93 3.98 0.77 72 SUBJ_ALL_CAPS 5479 3.06 3.95 2.56 73 XM_CamelCaseFrm001 5469 3.12 3.95 2.65 74 XM_B_SpammyTLD 5465 5.15 3.94 5.83 75 RCVD_IN_VALIDITY_CERTIFIED 5294 5.36 3.82 6.23 76 HTML_IMAGE_RATIO_08 5236 2.70 3.78 2.09 77 XM_B_Phish_Phrases 5138 4.40 3.71 4.79 78 TR_XM_PhishingBody 5137 2.28 3.71 1.47 79 XM_B_Investor 5065 1.89 3.65 0.89 80 T_XMDrugObfuBody_14 5042 2.27 3.64 1.50 81 TM2_M_VERY_LONG_WORD 5013 2.15 3.62 1.33 82 XM_UB50 4808 2.27 3.47 1.59 83 TR_XM_SEO4 4774 1.51 3.44 0.41 84 XM_B_SpammyWords4 4713 1.58 3.40 0.55 85 DKIM_INVALID 4666 2.00 3.37 1.22 86 XMNumbers 4386 2.75 3.16 2.51 87 MIME_HTML_ONLY_MULTI 4310 2.52 3.11 2.18 88 XMStrtUSub 3999 3.58 2.88 3.98 89 RCVD_IN_MSPIKE_H3 3971 4.29 2.86 5.10 90 RCVD_IN_MSPIKE_WL 3971 4.29 2.86 5.10 91 XM_URI_RBL 3963 1.40 2.86 0.58 92 XMBrknScrpt_02 3882 1.78 2.80 1.20 93 TM2_M_URI_OPT_OUT 3852 2.12 2.78 1.74 94 XMBody_17 3748 1.31 2.70 0.52 95 MIME_QP_LONG_LINE 3659 3.84 2.64 4.53 96 FROM_EXCESS_BASE64 3614 2.48 2.61 2.40 97 T_XMHurry_00 3449 1.27 2.49 0.59 98 T_XMDrugObfuBody_08 3397 1.98 2.45 1.72 99 XM_B_URI_Unicode 3394 1.99 2.45 1.73 100 TR_XM_NoHeaderRelay 3211 0.98 2.32 0.23 101 XM_OfRef6 3206 1.08 2.31 0.38 102 RCVD_IN_VALIDITY_RPBL 3184 0.93 2.30 0.16 103 TR_LOTS_OF_MONEY3 3152 0.93 2.27 0.17 104 T_XMDrugObfuBody_00 3122 1.72 2.25 1.41 105 XMBdyGiftCard01 2978 2.50 2.15 2.69 106 SpammyFromTLD_02 2883 1.04 2.08 0.45 107 RELAYCOUNTRY_AU 2834 1.28 2.04 0.85 108 THIS_AD 2687 1.41 1.94 1.11 109 XMStockSpam_06 2570 2.38 1.85 2.68 110 XM_ProductURIs 2564 1.09 1.85 0.66 111 XMSubMetaI_00 2552 1.09 1.84 0.67 112 MAILING_LIST_MULTI 2534 2.37 1.83 2.68 113 XM_B_Unsub2 2478 1.14 1.79 0.77 114 T_TooManySym_01 2474 4.28 1.78 5.69 115 XM_SendGrid 2454 1.59 1.77 1.49 116 MPART_ALT_DIFF_COUNT 2305 1.03 1.66 0.67 117 XM_B_COPY_HTML 2283 1.06 1.65 0.73 118 SHOPIFY_IMG_NOT_RCVD_SFY 2242 0.96 1.62 0.59 119 TR_XM_PHPForged 2210 0.75 1.59 0.27 120 TR_XM_PHPDW 2190 0.75 1.58 0.27 121 TR_XM_FormFill2 2153 0.74 1.55 0.28 122 URI_HEX 2153 1.24 1.55 1.06 123 XM_H_PHPOS 2137 0.73 1.54 0.27 124 XMDiploma_00 2082 1.06 1.50 0.80 125 XM_DK_Undo_01 2076 1.31 1.50 1.21 126 T_FILL_THIS_FORM_SHORT 2037 0.78 1.47 0.39 127 XM_B_REG_HTML 2033 0.70 1.47 0.26 128 HTML_TAG_BALANCE_BODY 2017 0.97 1.46 0.69 129 TR_XM_Base64_M1 1946 0.94 1.40 0.67 130 URI_NOVOWEL 1925 3.29 1.39 4.37 131 XMPhish30 1919 0.87 1.38 0.58 132 SpammyFromTLD_01 1918 0.91 1.38 0.64 133 TM2_M_OBFU_COMMENT 1872 0.67 1.35 0.29 134 XM_UB99 1841 0.49 1.33 0.01 135 BOTNET_NORDNS 1826 0.48 1.32 0.01 136 TR_Caps_n_Bayes_99 1794 0.50 1.29 0.06 137 T_REMOTE_IMAGE 1752 1.82 1.26 2.13 138 TR_XM_INV_DKIM 1748 0.49 1.26 0.05 139 KHOP_HELO_FCRDNS 1728 0.77 1.25 0.50 140 RCVD_IN_IADB_LISTED 1718 2.84 1.24 3.75 141 XMSolicitRefs_0 1701 0.71 1.23 0.41 142 XM_HighProb1 1677 0.45 1.21 0.02 143 TR_XM_InvalidRelay 1662 0.46 1.20 0.04 144 BAYES_40 1621 3.00 1.17 4.03 145 HTML_MIME_NO_HTML_TAG 1613 1.25 1.16 1.30 146 URI_TRY_3LD 1582 0.85 1.14 0.69 147 XM_H_Long_From02 1550 1.08 1.12 1.06 148 XMSubMetaSxObfu_03 1530 0.74 1.10 0.54 149 TR_XM_DK_SendGrid 1511 0.98 1.09 0.92 150 RCVD_IN_IADB_SPF 1511 2.55 1.09 3.37 151 RCVD_IN_PSBL 1503 0.43 1.08 0.06 152 TR_Mismatch_TLD_02 1494 0.44 1.08 0.09 153 RCVD_IN_XBL 1480 0.39 1.07 0.01 154 LongTLD 1445 0.52 1.04 0.23 155 RCVD_IN_IADB_DK 1442 2.30 1.04 3.01 156 RCVD_IN_IADB_SENDERID 1436 2.35 1.04 3.09 157 T_STY_INVIS_DIRECT 1401 0.56 1.01 0.31 158 XM_UB999 1369 0.36 0.99 0.01 159 BAYES_20 1346 1.84 0.97 2.34 160 XMReplyNow 1328 0.44 0.96 0.14 161 RELAYCOUNTRY_DE 1305 0.75 0.94 0.64 162 RDNS_DYNAMIC 1302 0.50 0.94 0.26 163 HTTPS_HTTP_MISMATCH 1288 0.59 0.93 0.40 164 TR_LOTS_OF_MONEY2 1280 0.62 0.92 0.45 165 T_MONEY_PERCENT 1280 0.62 0.92 0.45 166 RELAYCOUNTRY_FR 1278 0.53 0.92 0.31 167 PDS_RDNS_DYNAMIC_FP 1276 0.36 0.92 0.05 168 DKIM_ADSP_CUSTOM_MED 1266 0.79 0.91 0.71 169 ALL_TRUSTED 1263 10.42 0.91 15.79 170 XMPhish08 1230 0.51 0.89 0.30 171 XM_H_Undi_Recip 1215 0.37 0.88 0.09 172 XM_UB60 1166 0.36 0.84 0.08 173 TooManyTo_002 1141 1.55 0.82 1.96 174 TR_XM_FormFill 1138 0.30 0.82 0.01 175 RCVD_IN_PBL 1131 0.58 0.82 0.44 176 XM_B_Phish66 1102 0.45 0.80 0.25 177 TM2_M_A_HREF_HREF 1096 0.39 0.79 0.16 178 PLING_QUERY 1078 0.58 0.78 0.47 179 TVD_RCVD_IP 1072 0.62 0.77 0.53 180 XMGenDplmaNmb 1071 0.48 0.77 0.31 181 TooManyTo_003 1070 0.78 0.77 0.79 182 XM_UB80 1066 0.29 0.77 0.02 183 TR_MetaPhish_Combo_01 1065 0.64 0.77 0.57 184 DIET_1 1063 0.56 0.77 0.45 185 XM_Combo_Sbj 1056 0.36 0.76 0.13 186 TooManyTo_004 1046 0.66 0.75 0.61 187 TooManyTo_005 1026 0.58 0.74 0.49 188 FORGED_GMAIL_RCVD 1025 0.60 0.74 0.52 189 TR_XM_Undi_Recip19 1017 0.30 0.73 0.05 190 NML_ADSP_CUSTOM_MED 995 0.55 0.72 0.45 191 HELO_DYNAMIC_SPLIT_IP 990 0.26 0.71 0.01 192 XM_B_DNDMA 977 0.83 0.70 0.89 193 PDS_OTHER_BAD_TLD 972 0.32 0.70 0.11 194 XM_RXBody 959 1.22 0.69 1.52 195 TR_XM_Base64_L1 958 0.37 0.69 0.18 196 MISSING_HEADERS 957 0.38 0.69 0.20 197 MONEY_BACK 950 0.34 0.69 0.15 198 RCVD_IN_SBL_CSS 943 0.27 0.68 0.04 199 XMBody_78 942 0.41 0.68 0.26 200 DKIM_ADSP_NXDOMAIN 934 0.60 0.67 0.55 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 202741 87.64 96.54 82.62 2 RELAYCOUNTRY_US 195115 81.90 86.12 79.51 3 DKIM_SIGNED 192764 83.75 92.95 78.56 4 XM_DK_Pass 190572 82.17 90.15 77.66 5 DKIM_VALID 189762 81.75 89.58 77.33 6 XM_B_Unicode 180395 78.82 88.20 73.52 7 DKIM_VALID_AU 155749 66.67 72.34 63.47 8 XMListUnsubscribeExists 150413 66.28 75.09 61.30 9 BAYES_50 147466 51.16 35.34 60.10 10 DCC_CHECK 126263 61.32 78.78 51.46 11 XM_B_Unicode3 126235 52.29 53.77 51.44 12 DCC_CHECK_NEGATIVE 119060 38.59 21.02 48.52 13 XM_B_SpammyWords 110939 54.48 70.89 45.21 14 LOC_TINY_FONT_1 84168 40.30 50.93 34.30 15 RCVD_IN_MSPIKE_H2 81989 37.72 45.35 33.41 16 HTML_FONT_LOW_CONTRAST 81742 37.99 46.28 33.31 17 FVGT_m_MULTI_ODD 69330 30.65 34.88 28.25 18 DKIM_VALID_EF 62835 25.54 25.41 25.61 19 MIME_HTML_ONLY 53054 22.90 25.16 21.62 20 T_TM2_M_HEADER_IN_MSG 51911 19.72 17.17 21.15 21 T_KAM_HTML_FONT_INVALID 51824 23.44 27.56 21.12 22 XM_B_SpammyWords2 51736 28.29 41.05 21.08 23 USER_IN_DEF_DKIM_WL 51483 15.48 5.73 20.98 24 XMSubLong 50373 19.53 17.75 20.53 25 XM_Multi_Part_URI 47419 21.16 24.41 19.32 26 ALL_TRUSTED 38737 10.42 0.91 15.79 27 TR_XM_DK_Unsub 35407 15.61 17.71 14.43 28 UNPARSEABLE_RELAY 32058 15.88 20.87 13.06 29 BAYES_60 29958 11.03 8.93 12.21 30 XM_Evil_Numbers_Gen 29645 11.64 10.87 12.08 31 XM_DKIMWhitelistDomains 25147 6.59 0.10 10.25 32 XM_B_Unsub 24456 12.15 16.02 9.97 33 LotsOfNums_01 22331 8.45 7.29 9.10 34 TR_XM_BayesUnsub 21569 11.26 15.64 8.79 35 TR_MAX_INTL_RELAY 20208 11.05 16.04 8.24 36 HTML_IMAGE_RATIO_02 19460 8.39 9.20 7.93 37 RCVD_IN_VALIDITY_SAFE 17943 6.52 5.12 7.31 38 HTML_IMAGE_RATIO_04 17805 6.56 5.32 7.26 39 XM_B_PhoneNumber 17367 6.41 5.22 7.08 40 XM_DK_Undo_02 16187 20.68 45.62 6.60 41 XM_B_SpammyWords3 15993 9.48 14.72 6.52 42 BAYES_00 15960 4.29 0.37 6.50 43 FSL_BULK_SIG 15389 7.13 8.64 6.27 44 RCVD_IN_VALIDITY_CERTIFIED 15280 5.36 3.82 6.23 45 LOTS_OF_MONEY 14506 7.19 9.45 5.91 46 XM_B_SpammyTLD 14310 5.15 3.94 5.83 47 TooManyTo_001 14224 5.23 4.23 5.80 48 T_TooManySym_01 13969 4.28 1.78 5.69 49 TR_XM_DK_Bayes 13868 3.73 0.33 5.65 50 TR_XM_DK_Bayes1 13791 3.71 0.32 5.62 51 BAYES_80 12593 6.95 10.18 5.13 52 BAYES_99 12554 16.60 36.94 5.12 53 RCVD_IN_MSPIKE_WL 12506 4.29 2.86 5.10 54 RCVD_IN_MSPIKE_H3 12506 4.29 2.86 5.10 55 XM_H_Long_From01 12435 5.31 5.74 5.07 56 RELAYCOUNTRY_META 12304 8.01 13.30 5.01 57 IN_ZIMBRA_NJ_WHITELIST 12114 3.18 0.06 4.94 58 TR_XM_DK_Bayes2 11902 3.18 0.22 4.85 59 XM_B_Phish_Phrases 11760 4.40 3.71 4.79 60 MIME_QP_LONG_LINE 11105 3.84 2.64 4.53 61 URI_NOVOWEL 10722 3.29 1.39 4.37 62 XM_UncommonTLD01 10555 4.90 5.97 4.30 63 TR_XM_SpammyWords4 10317 5.76 8.50 4.20 64 MPART_ALT_DIFF 9976 4.84 6.22 4.07 65 BAYES_40 9893 3.00 1.17 4.03 66 XM_H_GMP 9829 4.32 4.89 4.01 67 XMStrtUSub 9762 3.58 2.88 3.98 68 BAYES_999 9631 13.17 29.54 3.92 69 HTML_IMAGE_RATIO_06 9524 4.11 4.51 3.88 70 BOTNET_IPINHOSTNAME 9319 6.64 11.68 3.80 71 RCVD_IN_IADB_LISTED 9206 2.84 1.24 3.75 72 TR_Symld_Words 8752 2.50 0.60 3.57 73 RCVD_IN_IADB_SPF 8266 2.55 1.09 3.37 74 T_TooManySym_02 8137 2.28 0.45 3.32 75 BOUNCE_MESSAGE 7912 2.24 0.50 3.22 76 ANY_BOUNCE_MESSAGE 7912 2.24 0.50 3.22 77 BAYES_95 7592 3.95 5.47 3.09 78 RCVD_IN_IADB_SENDERID 7585 2.35 1.04 3.09 79 TR_XM_DKIM_Undo 7401 13.46 31.95 3.02 80 RCVD_IN_IADB_DK 7384 2.30 1.04 3.01 81 TR_XM_SpammyRelay 7377 5.25 9.22 3.01 82 XMSubMetaSx_00 6852 3.85 5.74 2.79 83 MIME_HTML_MOSTLY 6768 3.23 4.06 2.76 84 XMBdyGiftCard01 6610 2.50 2.15 2.69 85 XMStockSpam_06 6577 2.38 1.85 2.68 86 MAILING_LIST_MULTI 6572 2.37 1.83 2.68 87 XM_CamelCaseFrm001 6493 3.12 3.95 2.65 88 TR_XM_SpammyWords5 6350 3.34 4.68 2.59 89 INVALID_MSGID 6342 1.69 0.11 2.58 90 TR_XM_UnparsRelay 6286 6.31 12.96 2.56 91 SUBJ_ALL_CAPS 6277 3.06 3.95 2.56 92 TO_MALFORMED 6202 1.62 0.01 2.53 93 TR_DCC_Bayes_99 6172 11.80 28.22 2.52 94 XMNumbers 6161 2.75 3.16 2.51 95 UNTRUSTED_Relay 6089 4.16 7.13 2.48 96 FROM_EXCESS_BASE64 5901 2.48 2.61 2.40 97 BAYES_20 5733 1.84 0.97 2.34 98 RCVD_IN_IADB_VOUCHED 5436 1.61 0.54 2.22 99 XM_Body_Dirty_Words 5401 4.20 7.75 2.20 100 MIME_HTML_ONLY_MULTI 5357 2.52 3.11 2.18 101 T_REMOTE_IMAGE 5221 1.82 1.26 2.13 102 HTML_IMAGE_RATIO_08 5121 2.70 3.78 2.09 103 TooManyTo_002 4817 1.55 0.82 1.96 104 XMBody_95 4796 1.34 0.25 1.95 105 TM2_M_URI_OPT_OUT 4276 2.12 2.78 1.74 106 XM_B_URI_Unicode 4247 1.99 2.45 1.73 107 T_XMDrugObfuBody_08 4219 1.98 2.45 1.72 108 RELAYCOUNTRY_CA 4017 2.55 4.18 1.64 109 XM_UB50 3896 2.27 3.47 1.59 110 RCVD_IN_IADB_OPTIN 3811 1.11 0.31 1.55 111 XM_TLDProd2 3795 1.13 0.38 1.55 112 XM_SPF_SoftFail 3742 2.83 5.14 1.52 113 XM_RXBody 3732 1.22 0.69 1.52 114 T_XMDrugObfuBody_14 3670 2.27 3.64 1.50 115 XM_SendGrid 3651 1.59 1.77 1.49 116 BAYES_05 3632 1.11 0.44 1.48 117 XMGappySubj_01 3620 0.99 0.14 1.48 118 TR_XM_PhishingBody 3608 2.28 3.71 1.47 119 T_XMDrugObfuBody_00 3467 1.72 2.25 1.41 120 IN_HORDE_ADDRESS_BOOK 3438 0.92 0.06 1.40 121 XM_PDF 3419 0.97 0.21 1.39 122 BOTNET 3411 3.45 7.11 1.39 123 TM2_M_VERY_LONG_WORD 3256 2.15 3.62 1.33 124 HTML_MIME_NO_HTML_TAG 3201 1.25 1.16 1.30 125 TVD_SPACE_RATIO 3112 0.84 0.07 1.27 126 DKIM_INVALID 3002 2.00 3.37 1.22 127 XM_DK_Undo_01 2964 1.31 1.50 1.21 128 XMBrknScrpt_02 2943 1.78 2.80 1.20 129 THIS_AD 2714 1.41 1.94 1.11 130 T_TooManySym_03 2624 0.74 0.15 1.07 131 XM_H_Long_From02 2604 1.08 1.12 1.06 132 URI_HEX 2592 1.24 1.55 1.06 133 XMGappySubj_02 2531 0.69 0.07 1.03 134 T_Symld_Words_02 2489 0.86 0.59 1.01 135 XM_GoogleGroups 2425 0.81 0.50 0.99 136 XM_B_FormFill 2349 0.62 0.03 0.96 137 TR_XM_DK_SendGrid 2258 0.98 1.09 0.92 138 XMOemUri 2251 0.70 0.32 0.92 139 XMSexyCombo_05 2204 2.15 4.37 0.90 140 XM_B_DNDMA 2196 0.83 0.70 0.89 141 TR_XM_SpammyWords2 2195 5.84 14.59 0.89 142 XM_B_Investor 2192 1.89 3.65 0.89 143 RCVD_IN_BL_SPAMCOP_NET 2132 4.07 9.74 0.87 144 RELAYCOUNTRY_AU 2097 1.28 2.04 0.85 145 XMDiploma_00 1974 1.06 1.50 0.80 146 TooManyTo_003 1928 0.78 0.77 0.79 147 XM_B_Unsub2 1892 1.14 1.79 0.77 148 XM_B_SEO 1888 1.93 3.98 0.77 149 XMClaimOffer 1809 0.60 0.35 0.74 150 XM_B_COPY_HTML 1801 1.06 1.65 0.73 151 DKIM_ADSP_CUSTOM_MED 1752 0.79 0.91 0.71 152 HTML_TAG_BALANCE_BODY 1696 0.97 1.46 0.69 153 URI_TRY_3LD 1693 0.85 1.14 0.69 154 XMSubMetaI_00 1648 1.09 1.84 0.67 155 TR_XM_Base64_M1 1647 0.94 1.40 0.67 156 MPART_ALT_DIFF_COUNT 1638 1.03 1.66 0.67 157 XM_ProductURIs 1622 1.09 1.85 0.66 158 RELAYCOUNTRY_DE 1567 0.75 0.94 0.64 159 SpammyFromTLD_01 1565 0.91 1.38 0.64 160 TooManyTo_004 1490 0.66 0.75 0.61 161 SHOPIFY_IMG_NOT_RCVD_SFY 1459 0.96 1.62 0.59 162 T_XMHurry_00 1447 1.27 2.49 0.59 163 XMPhish30 1426 0.87 1.38 0.58 164 XM_URI_RBL 1423 1.40 2.86 0.58 165 USER_IN_WELCOMELIST 1414 0.37 0.00 0.58 166 USER_IN_WHITELIST 1414 0.37 0.00 0.58 167 XM_Ancestry_Forge 1399 0.36 0.00 0.57 168 TR_MetaPhish_Combo_01 1393 0.64 0.77 0.57 169 XMNoVowels 1391 0.54 0.49 0.57 170 DKIM_ADSP_NXDOMAIN 1354 0.60 0.67 0.55 171 XM_B_SpammyWords4 1339 1.58 3.40 0.55 172 XMSubMetaSxObfu_03 1315 0.74 1.10 0.54 173 TVD_RCVD_IP 1302 0.62 0.77 0.53 174 FORGED_GMAIL_RCVD 1287 0.60 0.74 0.52 175 XMBody_17 1266 1.31 2.70 0.52 176 XM_H_PHPMailer 1243 0.55 0.63 0.51 177 TR_XM_SPAMCOP 1232 3.15 7.84 0.50 178 KHOP_HELO_FCRDNS 1223 0.77 1.25 0.50 179 TooManyTo_005 1206 0.58 0.74 0.49 180 FONT_INVIS_POSTEXTRAS 1180 0.32 0.03 0.48 181 PLING_QUERY 1153 0.58 0.78 0.47 182 XM_Walgreens_Forge 1150 0.31 0.03 0.47 183 SpammyFromTLD_02 1114 1.04 2.08 0.45 184 NML_ADSP_CUSTOM_MED 1113 0.55 0.72 0.45 185 XM_Sams_Club_Forge 1107 0.31 0.07 0.45 186 DIET_1 1098 0.56 0.77 0.45 187 TR_LOTS_OF_MONEY2 1095 0.62 0.92 0.45 188 T_MONEY_PERCENT 1095 0.62 0.92 0.45 189 RCVD_IN_PBL 1084 0.58 0.82 0.44 190 RELAYCOUNTRY_GB 1077 0.50 0.60 0.44 191 T_TooManySym_04 1032 0.29 0.06 0.42 192 XMSolicitRefs_0 1018 0.71 1.23 0.41 193 TR_XM_SEO4 1007 1.51 3.44 0.41 194 HTTPS_HTTP_MISMATCH 990 0.59 0.93 0.40 195 MIME_CHARSET_FARAWAY 985 0.47 0.60 0.40 196 T_FILL_THIS_FORM_SHORT 967 0.78 1.47 0.39 197 FONT_INVIS_MSGID 962 0.29 0.11 0.39 198 XMLngstWrd_00 942 0.33 0.24 0.38 199 XM_OfRef6 938 1.08 2.31 0.38 200 HTML_FONT_FACE_BAD 893 0.38 0.42 0.36 ----------------------------------------------------------------------