Email: 357787 Autolearn: 0 AvgScore: 5.91 AvgScanTime: 1.42 sec Spam: 140232 Autolearn: 0 AvgScore: 14.75 AvgScanTime: 1.48 sec Ham: 217555 Autolearn: 0 AvgScore: 0.21 AvgScanTime: 1.39 sec Time Spent Running SA: 141.29 hours Time Spent Processing Spam: 57.46 hours Time Spent Processing Ham: 83.82 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131172 88.46 93.54 85.19 2 DKIM_SIGNED 126869 84.51 90.47 80.67 3 XM_B_Unicode 126255 81.15 90.03 75.42 4 XM_DK_Pass 123376 82.98 87.98 79.75 5 DKIM_VALID 122591 82.49 87.42 79.31 6 RELAYCOUNTRY_US 118134 82.81 84.24 81.88 7 DCC_CHECK 113361 63.44 80.84 52.22 8 XMListUnsubscribeExists 106236 67.52 75.76 62.22 9 XM_B_SpammyWords 105212 59.63 75.03 49.70 10 DKIM_VALID_AU 99750 68.33 71.13 66.53 11 XM_B_Unicode3 72912 50.82 51.99 50.07 12 LOC_TINY_FONT_1 72520 41.92 51.71 35.61 13 HTML_FONT_LOW_CONTRAST 65569 40.66 46.76 36.73 14 XM_DK_Undo_02 63681 21.43 45.41 5.97 15 RCVD_IN_MSPIKE_H2 56778 36.57 40.49 34.04 16 XM_B_SpammyWords2 55795 28.67 39.79 21.50 17 BAYES_50 52287 51.86 37.29 61.26 18 BAYES_99 49935 16.66 35.61 4.45 19 FVGT_m_MULTI_ODD 49773 31.10 35.49 28.27 20 TR_XM_DKIM_Undo 47395 14.77 33.80 2.50 21 BAYES_999 40016 13.21 28.54 3.33 22 TR_DCC_Bayes_99 39120 12.20 27.90 2.09 23 T_KAM_HTML_FONT_INVALID 36521 23.21 26.04 21.39 24 DKIM_VALID_EF 35678 26.37 25.44 26.96 25 MIME_HTML_ONLY 34678 21.61 24.73 19.60 26 XM_Multi_Part_URI 31900 20.83 22.75 19.59 27 T_TM2_M_HEADER_IN_MSG 30348 19.99 21.64 18.92 28 TR_XM_DK_Unsub 27639 16.86 19.71 15.03 29 UNPARSEABLE_RELAY 27397 16.30 19.54 14.21 30 DCC_CHECK_NEGATIVE 26389 36.41 18.82 47.75 31 XMSubLong 25362 20.42 18.09 21.92 32 RELAYCOUNTRY_META 21974 8.55 15.67 3.97 33 TR_MAX_INTL_RELAY 21229 10.59 15.14 7.66 34 XM_B_SpammyWords3 20314 9.48 14.49 6.26 35 LOTS_OF_MONEY 20169 8.61 14.38 4.88 36 TR_XM_SpammyWords2 20033 6.10 14.29 0.82 37 XM_B_Unsub 19347 10.34 13.80 8.10 38 TR_XM_BayesUnsub 18912 9.54 13.49 7.00 39 TR_XM_SpammyWords4 18867 7.45 13.45 3.58 40 TR_XM_SpammyRelay 17639 6.51 12.58 2.59 41 BOTNET_IPINHOSTNAME 17488 7.13 12.47 3.69 42 TR_XM_UnparsRelay 15999 6.01 11.41 2.53 43 XM_Evil_Numbers_Gen 14844 10.96 10.59 11.19 44 FSL_BULK_SIG 14287 7.94 10.19 6.50 45 BAYES_80 13201 6.55 9.41 4.71 46 HTML_IMAGE_RATIO_02 13021 8.36 9.29 7.76 47 UNTRUSTED_Relay 12384 4.76 8.83 2.13 48 BAYES_60 12274 10.59 8.75 11.77 49 RCVD_IN_BL_SPAMCOP_NET 12233 3.94 8.72 0.85 50 XM_SPF_SoftFail 10702 3.86 7.63 1.43 51 XM_H_GMP 10038 5.85 7.16 5.00 52 BOTNET 9992 3.56 7.13 1.26 53 TR_XM_SPAMCOP 9872 2.99 7.04 0.37 54 XM_Body_Dirty_Words 8703 3.70 6.21 2.09 55 LotsOfNums_01 8504 7.29 6.06 8.08 56 TR_XM_SpammyWords5 8152 3.27 5.81 1.63 57 XM_UB50 7916 2.98 5.64 1.26 58 MPART_ALT_DIFF 7797 4.84 5.56 4.38 59 USER_IN_DEF_DKIM_WL 7667 14.55 5.47 20.40 60 BAYES_95 7611 3.92 5.43 2.94 61 XM_H_Long_From01 7560 5.58 5.39 5.70 62 XM_UncommonTLD01 7484 4.76 5.34 4.39 63 HTML_IMAGE_RATIO_04 7334 5.88 5.23 6.31 64 SUBJ_ALL_CAPS 7324 3.26 5.22 2.00 65 XMSubMetaSx_00 7094 4.43 5.06 4.02 66 XM_B_SpammyTLD 6594 4.76 4.70 4.80 67 XM_B_PhoneNumber 6583 6.38 4.69 7.47 68 RCVD_IN_VALIDITY_SAFE 5976 6.82 4.26 8.48 69 RCVD_IN_XBL 5951 1.68 4.24 0.02 70 XM_B_SEO 5896 2.97 4.20 2.18 71 LOADSA_MONEY_COMBO 5882 1.83 4.19 0.30 72 TooManyTo_001 5854 5.00 4.17 5.53 73 XMBody_17 5814 2.15 4.15 0.87 74 XM_CamelCaseFrm001 5803 3.44 4.14 2.99 75 RELAYCOUNTRY_CA 5774 2.54 4.12 1.52 76 TR_XM_InvalidRelay 5633 1.59 4.02 0.02 77 XM_B_Phish_Phrases 5571 4.23 3.97 4.40 78 XMSexyCombo_05 5551 2.63 3.96 1.77 79 XMStrtUSub 5534 4.89 3.95 5.49 80 RCVD_IN_SBL_CSS 5468 1.53 3.90 0.01 81 RELAYCOUNTRY_IN 5432 1.53 3.87 0.03 82 TM2_M_VERY_LONG_WORD 5390 2.68 3.84 1.93 83 ADVANCE_FEE_5_NEW_MONEY 5363 1.50 3.82 0.00 84 DKIM_ADSP_CUSTOM_MED 5319 1.99 3.79 0.83 85 HTML_IMAGE_RATIO_06 5307 3.10 3.78 2.67 86 XFER_LOTSA_MONEY 5257 1.64 3.75 0.28 87 FORGED_GMAIL_RCVD 5206 1.76 3.71 0.51 88 NML_ADSP_CUSTOM_MED 5161 1.76 3.68 0.52 89 T_XMDrugObfuBody_14 5115 2.32 3.65 1.47 90 TR_XM_SEO4 5090 2.09 3.63 1.10 91 XM_URI_RBL 4965 1.68 3.54 0.48 92 XM_B_Investor 4941 2.02 3.52 1.05 93 TM2_M_URI_OPT_OUT 4832 2.46 3.45 1.82 94 MIME_HTML_MOSTLY 4822 3.08 3.44 2.85 95 RCVD_IN_VALIDITY_CERTIFIED 4810 5.72 3.43 7.19 96 HTML_IMAGE_RATIO_08 4756 2.50 3.39 1.93 97 TR_LOTS_OF_MONEY3 4672 1.63 3.33 0.53 98 XMBrknScrpt_02 4588 2.23 3.27 1.55 99 TR_Sbj_FN_Bdy 4557 1.38 3.25 0.18 100 MONEY_FRAUD_8 4550 1.44 3.24 0.28 101 T_XMHurry_00 4537 2.02 3.24 1.23 102 RCVD_IN_SBL 4515 1.26 3.22 0.00 103 DEAR_BENEFICIARY 4413 1.40 3.15 0.27 104 SUBJ_ATTENTION 4302 1.20 3.07 0.00 105 DKIM_INVALID 4278 2.02 3.05 1.36 106 XMWstrFakes 4253 1.19 3.03 0.00 107 XMRply2Header_01 4249 1.19 3.03 0.00 108 RCVD_IN_MSPIKE_H3 4225 4.17 3.01 4.92 109 RCVD_IN_MSPIKE_WL 4225 4.17 3.01 4.92 110 TR_XM_PhishingBody 4219 2.63 3.01 2.38 111 XM_OfRef6 4146 1.70 2.96 0.89 112 MIME_HTML_ONLY_MULTI 4123 2.63 2.94 2.42 113 XM_B_URI_Unicode 4014 2.17 2.86 1.73 114 XM_B_SpammyWords4 3714 1.55 2.65 0.84 115 XMNumbers 3590 2.76 2.56 2.89 116 RELAYCOUNTRY_AU 3536 1.30 2.52 0.52 117 FROM_EXCESS_BASE64 3444 2.71 2.46 2.88 118 XMSubMetaI_00 3389 1.52 2.42 0.94 119 XMStockSpam_06 3330 1.94 2.37 1.65 120 T_XMDrugObfuBody_08 3213 2.03 2.29 1.86 121 T_TooManySym_01 2981 4.55 2.13 6.12 122 SHOPIFY_IMG_NOT_RCVD_SFY 2799 1.26 2.00 0.78 123 THIS_AD 2777 1.54 1.98 1.25 124 HTML_TAG_BALANCE_BODY 2555 1.10 1.82 0.64 125 XM_B_REG_HTML 2536 0.84 1.81 0.22 126 RCVD_IN_VALIDITY_RPBL 2474 0.78 1.76 0.15 127 XMDiploma_00 2456 1.63 1.75 1.56 128 TR_XM_NoHeaderRelay 2372 0.72 1.69 0.09 129 MIME_QP_LONG_LINE 2358 3.05 1.68 3.93 130 T_XMDrugObfuBody_00 2349 1.10 1.68 0.73 131 XM_HighProb1 2348 0.67 1.67 0.02 132 TR_XM_PHPDW 2315 0.77 1.65 0.20 133 TR_XM_PHPForged 2308 0.77 1.65 0.20 134 TR_XM_FormFill2 2246 0.75 1.60 0.19 135 XM_DK_Undo_01 2238 1.59 1.60 1.58 136 XM_H_PHPOS 2231 0.73 1.59 0.18 137 XMBdyGiftCard01 2174 1.68 1.55 1.76 138 XM_H_Long_From02 2162 1.21 1.54 0.99 139 URI_HEX 2119 1.24 1.51 1.07 140 XMSubMetaSxObfu_03 2081 1.39 1.48 1.32 141 T_FILL_THIS_FORM_SHORT 2068 0.87 1.47 0.49 142 SpammyFromTLD_01 2059 0.90 1.47 0.53 143 TR_Caps_n_Bayes_99 2054 0.62 1.46 0.07 144 MAILING_LIST_MULTI 2030 1.97 1.45 2.31 145 MPART_ALT_DIFF_COUNT 2006 0.84 1.43 0.45 146 URI_TRY_3LD 2002 0.98 1.43 0.69 147 XMReplyNow 1991 0.74 1.42 0.30 148 SpammyFromTLD_02 1972 0.67 1.41 0.19 149 XM_ProductURIs 1956 1.17 1.39 1.02 150 PLING_QUERY 1924 0.96 1.37 0.69 151 XM_B_Unsub2 1821 1.10 1.30 0.97 152 BAYES_40 1807 3.02 1.29 4.13 153 TM2_M_OBFU_COMMENT 1795 0.67 1.28 0.28 154 XM_SendGrid 1773 1.35 1.26 1.40 155 XM_H_Undi_Recip 1741 0.57 1.24 0.14 156 XM_B_COPY_HTML 1734 0.89 1.24 0.67 157 T_Symld_Words_02 1642 0.68 1.17 0.36 158 XM_RXBody 1633 1.05 1.16 0.97 159 T_MONEY_PERCENT 1631 0.57 1.16 0.19 160 XMPhish30 1631 1.19 1.16 1.21 161 TR_LOTS_OF_MONEY2 1631 0.57 1.16 0.19 162 XMSolicitRefs_0 1600 0.67 1.14 0.36 163 XMHTMLBadTable_001 1546 0.59 1.10 0.26 164 URI_NOVOWEL 1535 2.47 1.09 3.36 165 T_REMOTE_IMAGE 1522 2.05 1.09 2.67 166 TR_XM_Base64_M1 1516 1.00 1.08 0.95 167 RDNS_DYNAMIC 1507 0.61 1.07 0.30 168 PDS_RDNS_DYNAMIC_FP 1484 0.45 1.06 0.06 169 DKIM_ADSP_NXDOMAIN 1479 0.68 1.05 0.43 170 AC_BR_BONANZA 1478 0.48 1.05 0.11 171 ALL_TRUSTED 1472 8.91 1.05 13.97 172 T_STY_INVIS_DIRECT 1459 0.63 1.04 0.37 173 RCVD_IN_IADB_LISTED 1430 2.67 1.02 3.74 174 TVD_RCVD_IP 1427 0.76 1.02 0.60 175 SUBJ_DOLLARS 1410 0.67 1.01 0.46 176 NO_DNS_FOR_FROM 1398 0.65 1.00 0.43 177 BAYES_20 1397 1.83 1.00 2.38 178 TR_XM_MaxWHORU 1393 0.61 0.99 0.36 179 KHOP_HELO_FCRDNS 1378 0.85 0.98 0.76 180 TR_XM_INV_DKIM 1347 0.41 0.96 0.06 181 TooManyTo_002 1323 1.21 0.94 1.38 182 LOW_PRICE 1323 0.53 0.94 0.26 183 DIET_1 1322 0.60 0.94 0.38 184 MONEY_BACK 1314 0.48 0.94 0.18 185 HTTPS_HTTP_MISMATCH 1304 0.68 0.93 0.52 186 XM_UB60 1300 0.41 0.93 0.08 187 XMUrgent 1297 0.52 0.92 0.25 188 XM_UB99 1295 0.37 0.92 0.01 189 HELO_DYNAMIC_SPLIT_IP 1264 0.36 0.90 0.01 190 TooManyTo_003 1260 0.83 0.90 0.79 191 URG_BIZ 1238 0.35 0.88 0.01 192 TR_XM_Base64_L1 1232 0.45 0.88 0.18 193 TR_XM_DK_SendGrid 1224 0.92 0.87 0.95 194 RCVD_IN_IADB_SPF 1214 2.39 0.87 3.37 195 XMGenDplmaNmb 1208 0.85 0.86 0.84 196 TooManyTo_004 1205 0.71 0.86 0.61 197 FORGED_MUA_OUTLOOK 1188 0.35 0.85 0.03 198 HOSTED_IMG_MULTI_PUB_01 1176 0.37 0.84 0.06 199 AXB_XMAILER_MIMEOLE_OL_024C2 1171 0.33 0.84 0.00 200 RCVD_IN_IADB_DK 1161 2.15 0.83 3.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 185341 88.46 93.54 85.19 2 RELAYCOUNTRY_US 178144 82.81 84.24 81.88 3 DKIM_SIGNED 175503 84.51 90.47 80.67 4 XM_DK_Pass 173501 82.98 87.98 79.75 5 DKIM_VALID 172536 82.49 87.42 79.31 6 XM_B_Unicode 164076 81.15 90.03 75.42 7 DKIM_VALID_AU 144731 68.33 71.13 66.53 8 XMListUnsubscribeExists 135355 67.52 75.76 62.22 9 BAYES_50 133265 51.86 37.29 61.26 10 DCC_CHECK 113613 63.44 80.84 52.22 11 XM_B_Unicode3 108920 50.82 51.99 50.07 12 XM_B_SpammyWords 108129 59.63 75.03 49.70 13 DCC_CHECK_NEGATIVE 103893 36.41 18.82 47.75 14 HTML_FONT_LOW_CONTRAST 79914 40.66 46.76 36.73 15 LOC_TINY_FONT_1 77464 41.92 51.71 35.61 16 RCVD_IN_MSPIKE_H2 74059 36.57 40.49 34.04 17 FVGT_m_MULTI_ODD 61503 31.10 35.49 28.27 18 DKIM_VALID_EF 58655 26.37 25.44 26.96 19 XMSubLong 47697 20.42 18.09 21.92 20 XM_B_SpammyWords2 46773 28.67 39.79 21.50 21 T_KAM_HTML_FONT_INVALID 46530 23.21 26.04 21.39 22 USER_IN_DEF_DKIM_WL 44392 14.55 5.47 20.40 23 MIME_HTML_ONLY 42635 21.61 24.73 19.60 24 XM_Multi_Part_URI 42629 20.83 22.75 19.59 25 T_TM2_M_HEADER_IN_MSG 41160 19.99 21.64 18.92 26 TR_XM_DK_Unsub 32691 16.86 19.71 15.03 27 UNPARSEABLE_RELAY 30905 16.30 19.54 14.21 28 ALL_TRUSTED 30390 8.91 1.05 13.97 29 BAYES_60 25599 10.59 8.75 11.77 30 XM_Evil_Numbers_Gen 24352 10.96 10.59 11.19 31 XM_DKIMWhitelistDomains 20883 5.85 0.02 9.60 32 RCVD_IN_VALIDITY_SAFE 18442 6.82 4.26 8.48 33 XM_B_Unsub 17632 10.34 13.80 8.10 34 LotsOfNums_01 17571 7.29 6.06 8.08 35 HTML_IMAGE_RATIO_02 16881 8.36 9.29 7.76 36 TR_MAX_INTL_RELAY 16658 10.59 15.14 7.66 37 XM_B_PhoneNumber 16250 6.38 4.69 7.47 38 RCVD_IN_VALIDITY_CERTIFIED 15648 5.72 3.43 7.19 39 TR_XM_BayesUnsub 15238 9.54 13.49 7.00 40 BAYES_00 15076 4.33 0.31 6.93 41 FSL_BULK_SIG 14135 7.94 10.19 6.50 42 HTML_IMAGE_RATIO_04 13721 5.88 5.23 6.31 43 XM_B_SpammyWords3 13618 9.48 14.49 6.26 44 T_TooManySym_01 13313 4.55 2.13 6.12 45 TR_XM_DK_Bayes 13012 3.73 0.24 5.98 46 XM_DK_Undo_02 12996 21.43 45.41 5.97 47 TR_XM_DK_Bayes1 12913 3.70 0.24 5.94 48 XM_H_Long_From01 12402 5.58 5.39 5.70 49 TooManyTo_001 12036 5.00 4.17 5.53 50 XMStrtUSub 11945 4.89 3.95 5.49 51 TR_XM_DK_Bayes2 11400 3.26 0.18 5.24 52 IN_ZIMBRA_NJ_WHITELIST 11204 3.16 0.07 5.15 53 XM_H_GMP 10886 5.85 7.16 5.00 54 RCVD_IN_MSPIKE_H3 10709 4.17 3.01 4.92 55 RCVD_IN_MSPIKE_WL 10709 4.17 3.01 4.92 56 LOTS_OF_MONEY 10627 8.61 14.38 4.88 57 XM_B_SpammyTLD 10439 4.76 4.70 4.80 58 BAYES_80 10250 6.55 9.41 4.71 59 BAYES_99 9686 16.66 35.61 4.45 60 XM_B_Phish_Phrases 9574 4.23 3.97 4.40 61 XM_UncommonTLD01 9546 4.76 5.34 4.39 62 MPART_ALT_DIFF 9530 4.84 5.56 4.38 63 BAYES_40 8981 3.02 1.29 4.13 64 XMSubMetaSx_00 8741 4.43 5.06 4.02 65 RELAYCOUNTRY_META 8632 8.55 15.67 3.97 66 MIME_QP_LONG_LINE 8558 3.05 1.68 3.93 67 ANY_BOUNCE_MESSAGE 8306 2.52 0.51 3.82 68 BOUNCE_MESSAGE 8306 2.52 0.51 3.82 69 RCVD_IN_IADB_LISTED 8128 2.67 1.02 3.74 70 BOTNET_IPINHOSTNAME 8037 7.13 12.47 3.69 71 TR_XM_SpammyWords4 7792 7.45 13.45 3.58 72 RCVD_IN_IADB_SPF 7336 2.39 0.87 3.37 73 T_TooManySym_02 7318 2.23 0.48 3.36 74 URI_NOVOWEL 7314 2.47 1.09 3.36 75 BAYES_999 7239 13.21 28.54 3.33 76 RCVD_IN_IADB_SENDERID 6712 2.20 0.82 3.09 77 INVALID_MSGID 6694 1.91 0.10 3.08 78 RCVD_IN_IADB_DK 6525 2.15 0.83 3.00 79 TO_MALFORMED 6504 1.82 0.00 2.99 80 XM_CamelCaseFrm001 6495 3.44 4.14 2.99 81 BAYES_95 6399 3.92 5.43 2.94 82 XMNumbers 6289 2.76 2.56 2.89 83 FROM_EXCESS_BASE64 6266 2.71 2.46 2.88 84 MIME_HTML_MOSTLY 6204 3.08 3.44 2.85 85 T_REMOTE_IMAGE 5805 2.05 1.09 2.67 86 HTML_IMAGE_RATIO_06 5800 3.10 3.78 2.67 87 TR_XM_SpammyRelay 5645 6.51 12.58 2.59 88 TR_XM_UnparsRelay 5498 6.01 11.41 2.53 89 TR_XM_DKIM_Undo 5446 14.77 33.80 2.50 90 MIME_HTML_ONLY_MULTI 5275 2.63 2.94 2.42 91 RCVD_IN_IADB_VOUCHED 5246 1.65 0.48 2.41 92 TR_XM_PhishingBody 5183 2.63 3.01 2.38 93 BAYES_20 5167 1.83 1.00 2.38 94 MAILING_LIST_MULTI 5018 1.97 1.45 2.31 95 XM_B_SEO 4737 2.97 4.20 2.18 96 UNTRUSTED_Relay 4644 4.76 8.83 2.13 97 TR_DCC_Bayes_99 4538 12.20 27.90 2.09 98 XM_Body_Dirty_Words 4538 3.70 6.21 2.09 99 SUBJ_ALL_CAPS 4347 3.26 5.22 2.00 100 TM2_M_VERY_LONG_WORD 4193 2.68 3.84 1.93 101 HTML_IMAGE_RATIO_08 4192 2.50 3.39 1.93 102 T_XMDrugObfuBody_08 4045 2.03 2.29 1.86 103 RCVD_IN_IADB_OPTIN 4029 1.24 0.29 1.85 104 TM2_M_URI_OPT_OUT 3967 2.46 3.45 1.82 105 XM_PDF 3908 1.17 0.19 1.80 106 XMSexyCombo_05 3852 2.63 3.96 1.77 107 XMBdyGiftCard01 3827 1.68 1.55 1.76 108 XM_B_URI_Unicode 3767 2.17 2.86 1.73 109 XMStockSpam_06 3596 1.94 2.37 1.65 110 TR_XM_SpammyWords5 3552 3.27 5.81 1.63 111 XM_DK_Undo_01 3438 1.59 1.60 1.58 112 XMDiploma_00 3386 1.63 1.75 1.56 113 XMBrknScrpt_02 3375 2.23 3.27 1.55 114 IN_HORDE_ADDRESS_BOOK 3322 0.97 0.10 1.53 115 RELAYCOUNTRY_CA 3298 2.54 4.12 1.52 116 T_XMDrugObfuBody_14 3191 2.32 3.65 1.47 117 TVD_SPACE_RATIO 3157 0.93 0.11 1.45 118 HTML_MIME_NO_HTML_TAG 3150 1.19 0.80 1.45 119 BAYES_05 3121 1.10 0.59 1.43 120 XM_SPF_SoftFail 3117 3.86 7.63 1.43 121 XM_SendGrid 3044 1.35 1.26 1.40 122 TooManyTo_002 2995 1.21 0.94 1.38 123 DKIM_INVALID 2967 2.02 3.05 1.36 124 XMGappySubj_01 2948 0.87 0.13 1.36 125 XMSubMetaSxObfu_03 2881 1.39 1.48 1.32 126 BOTNET 2740 3.56 7.13 1.26 127 XM_UB50 2739 2.98 5.64 1.26 128 THIS_AD 2722 1.54 1.98 1.25 129 T_XMHurry_00 2673 2.02 3.24 1.23 130 T_TooManySym_03 2663 0.78 0.09 1.22 131 XM_TLDProd2 2661 0.84 0.24 1.22 132 XMGappySubj_02 2658 0.75 0.02 1.22 133 XMPhish30 2643 1.19 1.16 1.21 134 XMBody_95 2614 0.80 0.19 1.20 135 TR_XM_SEO4 2384 2.09 3.63 1.10 136 XM_GoogleGroups 2362 0.85 0.49 1.09 137 URI_HEX 2319 1.24 1.51 1.07 138 XM_B_Investor 2280 2.02 3.52 1.05 139 XM_ProductURIs 2216 1.17 1.39 1.02 140 XM_H_Long_From02 2152 1.21 1.54 0.99 141 XM_RXBody 2117 1.05 1.16 0.97 142 XM_B_Unsub2 2105 1.10 1.30 0.97 143 TR_XM_DK_SendGrid 2066 0.92 0.87 0.95 144 TR_XM_Base64_M1 2066 1.00 1.08 0.95 145 XMSubMetaI_00 2055 1.52 2.42 0.94 146 XM_OfRef6 1943 1.70 2.96 0.89 147 TR_Symld_Words 1920 0.80 0.68 0.88 148 XMBody_17 1890 2.15 4.15 0.87 149 RCVD_IN_BL_SPAMCOP_NET 1860 3.94 8.72 0.85 150 XM_B_SpammyWords4 1832 1.55 2.65 0.84 151 XMGenDplmaNmb 1818 0.85 0.86 0.84 152 DKIM_ADSP_CUSTOM_MED 1801 1.99 3.79 0.83 153 TR_XM_SpammyWords2 1780 6.10 14.29 0.82 154 XM_B_DNDMA 1751 0.80 0.80 0.80 155 TooManyTo_003 1719 0.83 0.90 0.79 156 TR_MetaPhish_Combo_01 1701 0.76 0.72 0.78 157 SHOPIFY_IMG_NOT_RCVD_SFY 1699 1.26 2.00 0.78 158 KHOP_HELO_FCRDNS 1646 0.85 0.98 0.76 159 T_XMDrugObfuBody_00 1596 1.10 1.68 0.73 160 T_TVD_MIME_NO_HEADERS 1513 0.44 0.06 0.70 161 PLING_QUERY 1495 0.96 1.37 0.69 162 URI_TRY_3LD 1495 0.98 1.43 0.69 163 AD_PREFS 1471 0.45 0.10 0.68 164 XM_B_COPY_HTML 1459 0.89 1.24 0.67 165 USER_IN_WELCOMELIST 1424 0.40 0.00 0.65 166 USER_IN_WHITELIST 1424 0.40 0.00 0.65 167 HTML_TAG_BALANCE_BODY 1383 1.10 1.82 0.64 168 TooManyTo_004 1324 0.71 0.86 0.61 169 TVD_RCVD_IP 1306 0.76 1.02 0.60 170 XM_H_PHPMailer 1198 0.61 0.71 0.55 171 XMClaimOffer 1196 0.57 0.59 0.55 172 TooManyTo_005 1159 0.65 0.82 0.53 173 XMOemUri 1159 0.41 0.22 0.53 174 SpammyFromTLD_01 1158 0.90 1.47 0.53 175 TR_LOTS_OF_MONEY3 1154 1.63 3.33 0.53 176 HTTPS_HTTP_MISMATCH 1138 0.68 0.93 0.52 177 NML_ADSP_CUSTOM_MED 1137 1.76 3.68 0.52 178 RELAYCOUNTRY_AU 1130 1.30 2.52 0.52 179 T_TooManySym_04 1119 0.32 0.02 0.51 180 FORGED_GMAIL_RCVD 1106 1.76 3.71 0.51 181 T_FILL_THIS_FORM_SHORT 1058 0.87 1.47 0.49 182 XM_URI_RBL 1047 1.68 3.54 0.48 183 SUBJ_DOLLARS 1002 0.67 1.01 0.46 184 HTML_IMAGE_ONLY_20 991 0.36 0.22 0.46 185 MPART_ALT_DIFF_COUNT 984 0.84 1.43 0.45 186 XM_Ancestry_Forge 983 0.28 0.00 0.45 187 XMNoVowels 979 0.42 0.38 0.45 188 XMPhish08 975 0.52 0.63 0.45 189 XM_B_FormFill 969 0.28 0.02 0.45 190 RCVD_IN_PBL 961 0.55 0.73 0.44 191 XMSubMetaD_03 958 0.41 0.36 0.44 192 DKIM_ADSP_NXDOMAIN 946 0.68 1.05 0.43 193 HTML_FONT_FACE_BAD 945 0.45 0.46 0.43 194 XMPhish14 938 0.46 0.50 0.43 195 NO_DNS_FOR_FROM 932 0.65 1.00 0.43 196 XMLngstWrd_00 926 0.36 0.25 0.43 197 RELAYCOUNTRY_DE 925 0.47 0.54 0.43 198 MSGID_FROM_MTA_HEADER 910 0.27 0.03 0.42 199 TR_XM_Spammywords 863 0.45 0.54 0.40 200 XM_S_SpammyWords 863 0.45 0.54 0.40 ----------------------------------------------------------------------