Email: 310238 Autolearn: 0 AvgScore: 4.48 AvgScanTime: 1.39 sec Spam: 106863 Autolearn: 0 AvgScore: 13.54 AvgScanTime: 1.46 sec Ham: 203375 Autolearn: 0 AvgScore: -0.28 AvgScanTime: 1.35 sec Time Spent Running SA: 119.80 hours Time Spent Processing Spam: 43.31 hours Time Spent Processing Ham: 76.49 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103145 87.26 96.52 82.40 2 DKIM_SIGNED 94928 81.76 88.83 78.04 3 XM_DK_Pass 92298 80.30 86.37 77.11 4 XM_B_Unicode 91951 76.55 86.05 71.56 5 DKIM_VALID 91598 79.76 85.72 76.63 6 RELAYCOUNTRY_US 89486 81.20 83.74 79.86 7 DCC_CHECK 81468 57.62 76.24 47.83 8 XMListUnsubscribeExists 77203 61.10 72.24 55.24 9 XM_B_SpammyWords 74041 55.27 69.29 47.90 10 DKIM_VALID_AU 73852 67.05 69.11 65.96 11 XM_B_Unicode3 54626 48.59 51.12 47.27 12 LOC_TINY_FONT_1 51101 37.99 47.82 32.82 13 XM_DK_Undo_02 45162 18.59 42.26 6.14 14 RCVD_IN_MSPIKE_H2 43749 37.51 40.94 35.70 15 HTML_FONT_LOW_CONTRAST 42987 36.01 40.23 33.80 16 BAYES_50 40319 52.25 37.73 59.88 17 XM_B_SpammyWords2 39903 26.18 37.34 20.31 18 BAYES_99 37705 15.08 35.28 4.46 19 FVGT_m_MULTI_ODD 35604 28.14 33.32 25.42 20 MIME_HTML_ONLY 32692 23.90 30.59 20.38 21 TR_XM_DKIM_Undo 31756 11.91 29.72 2.55 22 T_KAM_HTML_FONT_INVALID 30817 23.22 28.84 20.27 23 BAYES_999 30569 12.12 28.61 3.45 24 DKIM_VALID_EF 27183 27.27 25.44 28.23 25 TR_DCC_Bayes_99 26645 9.71 24.93 1.71 26 DCC_CHECK_NEGATIVE 24880 42.20 23.28 52.14 27 XM_Multi_Part_URI 24664 21.56 23.08 20.76 28 XMSubLong 22751 21.03 21.29 20.90 29 T_TM2_M_HEADER_IN_MSG 20728 21.58 19.40 22.72 30 TR_XM_DK_Unsub 19567 15.10 18.31 13.41 31 UNPARSEABLE_RELAY 19467 13.75 18.22 11.40 32 XM_B_Unsub 18545 12.21 17.35 9.50 33 TR_XM_BayesUnsub 18081 11.06 16.92 7.98 34 RELAYCOUNTRY_META 17967 8.20 16.81 3.67 35 TR_MAX_INTL_RELAY 15352 9.29 14.37 6.62 36 XM_B_SpammyWords3 15111 9.67 14.14 7.32 37 BOTNET_IPINHOSTNAME 12555 6.52 11.75 3.77 38 TR_XM_SpammyRelay 12240 5.36 11.45 2.16 39 TR_XM_SpammyWords2 11640 4.15 10.89 0.61 40 TR_XM_UnparsRelay 10999 4.69 10.29 1.75 41 XM_Evil_Numbers_Gen 10663 10.98 9.98 11.51 42 LOTS_OF_MONEY 10382 7.14 9.72 5.79 43 HTML_IMAGE_RATIO_02 9831 7.09 9.20 5.98 44 BAYES_80 9680 5.74 9.06 3.99 45 FSL_BULK_SIG 9559 8.05 8.95 7.59 46 BAYES_60 9368 10.05 8.77 10.73 47 TR_XM_SpammyWords4 9250 5.81 8.66 4.31 48 BOTNET 8967 3.85 8.39 1.46 49 XM_B_Phish_Phrases 8598 6.78 8.05 6.11 50 UNTRUSTED_Relay 7971 3.65 7.46 1.64 51 XMSubMetaSx_00 7832 4.63 7.33 3.21 52 XM_Body_Dirty_Words 7553 4.64 7.07 3.36 53 LotsOfNums_01 7341 7.33 6.87 7.58 54 TooManyTo_001 7340 5.86 6.87 5.33 55 XM_UncommonTLD01 7216 5.24 6.75 4.44 56 RCVD_IN_BL_SPAMCOP_NET 7162 2.94 6.70 0.96 57 MPART_ALT_DIFF 6799 5.70 6.36 5.35 58 XMSexyCombo_05 6608 3.45 6.18 2.01 59 XM_H_Long_From01 6552 5.91 6.13 5.79 60 RELAYCOUNTRY_CA 6483 3.10 6.07 1.54 61 HTML_IMAGE_RATIO_04 6460 6.28 6.05 6.41 62 XM_B_PhoneNumber 6364 5.99 5.96 6.01 63 TR_XM_SPAMCOP 5628 2.12 5.27 0.47 64 BAYES_95 5361 3.45 5.02 2.63 65 XM_H_GMP 5240 5.15 4.90 5.27 66 T_XMDrugObfuBody_14 5194 2.83 4.86 1.77 67 XM_CamelCaseFrm001 5095 3.62 4.77 3.01 68 XMStrtUSub 4956 5.62 4.64 6.14 69 XM_SPF_SoftFail 4893 2.45 4.58 1.33 70 MIME_HTML_MOSTLY 4583 4.18 4.29 4.12 71 TR_XM_PhishingBody 4352 2.57 4.07 1.79 72 XM_B_SEO 4331 1.97 4.05 0.88 73 HTML_IMAGE_RATIO_06 4273 3.48 4.00 3.21 74 XMBody_17 4140 1.83 3.87 0.75 75 MIME_HTML_ONLY_MULTI 4042 2.76 3.78 2.22 76 TR_XM_SpammyWords5 3869 2.66 3.62 2.15 77 XM_UB50 3842 1.81 3.60 0.86 78 XM_B_Investor 3838 1.96 3.59 1.11 79 TR_XM_SEO4 3770 1.55 3.53 0.51 80 XM_B_SpammyTLD 3742 4.88 3.50 5.60 81 RCVD_IN_VALIDITY_SAFE 3502 6.31 3.28 7.91 82 TM2_M_VERY_LONG_WORD 3459 2.03 3.24 1.40 83 DKIM_INVALID 3330 2.00 3.12 1.41 84 T_FILL_THIS_FORM_SHORT 3320 1.51 3.11 0.68 85 RCVD_IN_MSPIKE_WL 3265 4.31 3.06 4.97 86 RCVD_IN_MSPIKE_H3 3265 4.31 3.06 4.97 87 TM2_M_URI_OPT_OUT 3177 2.22 2.97 1.83 88 XMNumbers 3167 3.46 2.96 3.71 89 XM_OfRef6 3122 1.43 2.92 0.65 90 USER_IN_DEF_DKIM_WL 3066 14.77 2.87 21.03 91 RELAYCOUNTRY_AU 2983 1.29 2.79 0.50 92 T_XMDrugObfuBody_08 2975 1.69 2.78 1.11 93 XM_B_Unsub2 2877 1.80 2.69 1.33 94 XMStockSpam_06 2845 2.51 2.66 2.43 95 HTML_IMAGE_RATIO_08 2829 2.33 2.65 2.17 96 XM_URI_RBL 2820 1.41 2.64 0.76 97 RCVD_IN_VALIDITY_RPBL 2811 1.01 2.63 0.16 98 TR_XM_NoHeaderRelay 2781 0.98 2.60 0.13 99 XM_B_URI_Unicode 2709 2.19 2.54 2.01 100 TR_XM_FormFill 2691 0.89 2.52 0.03 101 TooManyTo_002 2636 1.67 2.47 1.25 102 SpammyFromTLD_01 2608 1.20 2.44 0.55 103 XM_B_SpammyWords4 2575 1.56 2.41 1.12 104 FROM_EXCESS_BASE64 2575 2.77 2.41 2.96 105 RCVD_IN_VALIDITY_CERTIFIED 2574 4.94 2.41 6.27 106 MIME_QP_LONG_LINE 2481 3.08 2.32 3.47 107 XMDiploma_00 2450 1.63 2.29 1.29 108 XMSubMetaI_00 2438 1.49 2.28 1.07 109 T_TooManySym_01 2422 5.05 2.27 6.52 110 DIET_1 2412 1.63 2.26 1.30 111 TR_Mismatch_TLD_02 2293 0.78 2.15 0.06 112 THIS_AD 2267 1.12 2.12 0.59 113 XMBrknScrpt_02 2215 1.65 2.07 1.42 114 XM_DK_Undo_01 2209 1.71 2.07 1.52 115 T_XMDrugObfuBody_00 2177 1.24 2.04 0.82 116 XM_B_REG_HTML 2073 0.82 1.94 0.23 117 MAILING_LIST_MULTI 2070 2.02 1.94 2.07 118 T_XMHurry_00 2069 1.09 1.94 0.64 119 SUBJ_ALL_CAPS 2036 1.27 1.91 0.94 120 XMBdyGiftCard01 1957 2.23 1.83 2.43 121 XMSlimDrugH 1929 0.97 1.81 0.53 122 SpammyFromTLD_02 1882 0.95 1.76 0.52 123 RCVD_IN_PSBL 1842 0.70 1.72 0.16 124 SHOPIFY_IMG_NOT_RCVD_SFY 1841 0.81 1.72 0.33 125 XM_B_FormFill 1716 0.65 1.61 0.14 126 XM_Appointment_Request 1680 0.55 1.57 0.02 127 URI_HEX 1657 1.24 1.55 1.07 128 XMPhish30 1650 1.01 1.54 0.73 129 T_REMOTE_IMAGE 1624 2.54 1.52 3.07 130 XM_UB60 1616 0.57 1.51 0.08 131 LongTLD 1593 0.63 1.49 0.17 132 TR_Symld_Words 1589 1.97 1.49 2.22 133 XMHTMLBadTable_001 1512 0.69 1.41 0.30 134 BAYES_40 1490 3.65 1.39 4.83 135 MPART_ALT_DIFF_COUNT 1471 0.79 1.38 0.48 136 XM_ProductURIs 1448 0.76 1.36 0.45 137 ANY_BOUNCE_MESSAGE 1441 3.17 1.35 4.13 138 BOUNCE_MESSAGE 1437 3.17 1.34 4.13 139 XM_SendGrid 1417 1.17 1.33 1.09 140 HTML_TAG_BALANCE_BODY 1402 1.04 1.31 0.90 141 ALL_TRUSTED 1397 11.30 1.31 16.55 142 TR_LOTS_OF_MONEY3 1351 0.60 1.26 0.24 143 T_STY_INVIS_DIRECT 1299 0.73 1.22 0.48 144 DKIM_ADSP_NXDOMAIN 1283 0.67 1.20 0.39 145 XMGenDplmaNmb 1249 0.82 1.17 0.64 146 HOSTED_IMG_MULTI_PUB_01 1230 0.43 1.15 0.05 147 URI_NOVOWEL 1213 2.93 1.14 3.88 148 XM_B_DNDMA 1189 1.16 1.11 1.18 149 AC_BR_BONANZA 1187 0.44 1.11 0.09 150 TR_XM_PHPDW 1182 0.56 1.11 0.28 151 TM2_M_OBFU_COMMENT 1178 0.80 1.10 0.65 152 TR_XM_PHPForged 1178 0.56 1.10 0.27 153 HTTPS_HTTP_MISMATCH 1177 0.74 1.10 0.55 154 XM_H_Long_From02 1159 0.98 1.08 0.92 155 RDNS_DYNAMIC 1149 0.58 1.08 0.32 156 BAYES_20 1133 2.20 1.06 2.79 157 PDS_RDNS_DYNAMIC_FP 1131 0.40 1.06 0.05 158 TR_XM_FormFill2 1126 0.54 1.05 0.28 159 XM_H_PHPOS 1109 0.53 1.04 0.26 160 RCVD_IN_IADB_LISTED 1097 2.14 1.03 2.73 161 XM_B_COPY_HTML 1071 0.95 1.00 0.92 162 TR_XM_RelayPhish 1051 0.40 0.98 0.09 163 TVD_RCVD_IP 1037 0.80 0.97 0.72 164 KHOP_HELO_FCRDNS 1036 1.05 0.97 1.10 165 XMClaimOffer 1020 0.76 0.95 0.66 166 RELAYCOUNTRY_CN 1003 0.34 0.94 0.02 167 XM_B_Phish66 1001 0.50 0.94 0.27 168 DATE_IN_PAST_03_06 995 0.39 0.93 0.11 169 TR_XM_InvalidRelay 987 0.33 0.92 0.02 170 RCVD_IN_IADB_SPF 978 1.93 0.92 2.46 171 LONGLN_LOW_CONTRAST 965 0.56 0.90 0.38 172 TR_XM_DK_SendGrid 957 0.79 0.90 0.74 173 HELO_DYNAMIC_SPLIT_IP 948 0.31 0.89 0.01 174 RELAYCOUNTRY_NO 948 0.31 0.89 0.01 175 XM_UB99 945 0.31 0.88 0.00 176 RCVD_IN_IADB_DK 932 1.75 0.87 2.20 177 HTML_MIME_NO_HTML_TAG 931 1.19 0.87 1.35 178 FROM_SUSPICIOUS_NTLD 930 0.32 0.87 0.03 179 RCVD_IN_IADB_SENDERID 920 1.77 0.86 2.25 180 TR_XM_INV_DKIM 914 0.35 0.86 0.08 181 RELAYCOUNTRY_DE 910 0.46 0.85 0.25 182 XMSubMetaSxObfu_02 896 0.45 0.84 0.25 183 TooManyTo_003 890 0.77 0.83 0.74 184 URI_TRY_3LD 889 0.77 0.83 0.73 185 XM_UB80 885 0.30 0.83 0.02 186 FROM_SUSPICIOUS_NTLD_FP 877 0.30 0.82 0.02 187 TooManyTo_004 866 0.67 0.81 0.60 188 RCVD_IN_PBL 863 0.57 0.81 0.44 189 RELAYCOUNTRY_FR 863 0.44 0.81 0.25 190 DKIM_ADSP_CUSTOM_MED 859 0.71 0.80 0.66 191 XM_S_SpammyWords 850 0.73 0.80 0.69 192 TR_XM_Spammywords 850 0.73 0.80 0.69 193 TooManyTo_005 830 0.60 0.78 0.51 194 XM_H_Undi_Recip 816 0.35 0.76 0.13 195 XM_HighProb1 812 0.26 0.76 0.00 196 BAYES_05 806 1.31 0.75 1.61 197 T_Symld_Words_02 802 0.39 0.75 0.20 198 XMReplyNow 798 0.42 0.75 0.24 199 XMPhish08 792 0.56 0.74 0.47 200 HTML_FONT_FACE_BAD 785 0.56 0.73 0.48 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 167584 87.26 96.52 82.40 2 RELAYCOUNTRY_US 162420 81.20 83.74 79.86 3 DKIM_SIGNED 158714 81.76 88.83 78.04 4 XM_DK_Pass 156830 80.30 86.37 77.11 5 DKIM_VALID 155843 79.76 85.72 76.63 6 XM_B_Unicode 145532 76.55 86.05 71.56 7 DKIM_VALID_AU 134156 67.05 69.11 65.96 8 BAYES_50 121776 52.25 37.73 59.88 9 XMListUnsubscribeExists 112342 61.10 72.24 55.24 10 DCC_CHECK_NEGATIVE 106049 42.20 23.28 52.14 11 XM_B_SpammyWords 97415 55.27 69.29 47.90 12 DCC_CHECK 97283 57.62 76.24 47.83 13 XM_B_Unicode3 96131 48.59 51.12 47.27 14 RCVD_IN_MSPIKE_H2 72607 37.51 40.94 35.70 15 HTML_FONT_LOW_CONTRAST 68743 36.01 40.23 33.80 16 LOC_TINY_FONT_1 66754 37.99 47.82 32.82 17 DKIM_VALID_EF 57413 27.27 25.44 28.23 18 FVGT_m_MULTI_ODD 51701 28.14 33.32 25.42 19 T_TM2_M_HEADER_IN_MSG 46216 21.58 19.40 22.72 20 USER_IN_DEF_DKIM_WL 42763 14.77 2.87 21.03 21 XMSubLong 42505 21.03 21.29 20.90 22 XM_Multi_Part_URI 42221 21.56 23.08 20.76 23 MIME_HTML_ONLY 41441 23.90 30.59 20.38 24 XM_B_SpammyWords2 41315 26.18 37.34 20.31 25 T_KAM_HTML_FONT_INVALID 41215 23.22 28.84 20.27 26 ALL_TRUSTED 33656 11.30 1.31 16.55 27 TR_XM_DK_Unsub 27273 15.10 18.31 13.41 28 XM_Evil_Numbers_Gen 23406 10.98 9.98 11.51 29 UNPARSEABLE_RELAY 23191 13.75 18.22 11.40 30 XM_DKIMWhitelistDomains 22605 7.30 0.03 11.11 31 BAYES_60 21814 10.05 8.77 10.73 32 XM_B_Unsub 19325 12.21 17.35 9.50 33 BAYES_00 18446 6.10 0.45 9.07 34 TR_XM_DK_Bayes 16433 5.43 0.38 8.08 35 TR_XM_DK_Bayes1 16331 5.39 0.38 8.03 36 TR_XM_BayesUnsub 16229 11.06 16.92 7.98 37 RCVD_IN_VALIDITY_SAFE 16083 6.31 3.28 7.91 38 FSL_BULK_SIG 15429 8.05 8.95 7.59 39 LotsOfNums_01 15407 7.33 6.87 7.58 40 XM_B_SpammyWords3 14885 9.67 14.14 7.32 41 TR_XM_DK_Bayes2 14617 4.81 0.28 7.19 42 TR_MAX_INTL_RELAY 13466 9.29 14.37 6.62 43 T_TooManySym_01 13250 5.05 2.27 6.52 44 HTML_IMAGE_RATIO_04 13033 6.28 6.05 6.41 45 RCVD_IN_VALIDITY_CERTIFIED 12742 4.94 2.41 6.27 46 XM_DK_Undo_02 12497 18.59 42.26 6.14 47 XMStrtUSub 12493 5.62 4.64 6.14 48 XM_B_Phish_Phrases 12436 6.78 8.05 6.11 49 XM_B_PhoneNumber 12222 5.99 5.96 6.01 50 HTML_IMAGE_RATIO_02 12168 7.09 9.20 5.98 51 LOTS_OF_MONEY 11782 7.14 9.72 5.79 52 XM_H_Long_From01 11777 5.91 6.13 5.79 53 XM_B_SpammyTLD 11396 4.88 3.50 5.60 54 IN_ZIMBRA_NJ_WHITELIST 11255 3.66 0.08 5.53 55 MPART_ALT_DIFF 10884 5.70 6.36 5.35 56 TooManyTo_001 10836 5.86 6.87 5.33 57 XM_H_GMP 10726 5.15 4.90 5.27 58 RCVD_IN_MSPIKE_H3 10105 4.31 3.06 4.97 59 RCVD_IN_MSPIKE_WL 10105 4.31 3.06 4.97 60 BAYES_40 9825 3.65 1.39 4.83 61 BAYES_99 9069 15.08 35.28 4.46 62 XM_UncommonTLD01 9040 5.24 6.75 4.44 63 TR_XM_SpammyWords4 8772 5.81 8.66 4.31 64 ANY_BOUNCE_MESSAGE 8399 3.17 1.35 4.13 65 BOUNCE_MESSAGE 8399 3.17 1.34 4.13 66 MIME_HTML_MOSTLY 8370 4.18 4.29 4.12 67 BAYES_80 8117 5.74 9.06 3.99 68 URI_NOVOWEL 7881 2.93 1.14 3.88 69 BOTNET_IPINHOSTNAME 7677 6.52 11.75 3.77 70 XMNumbers 7554 3.46 2.96 3.71 71 RELAYCOUNTRY_META 7469 8.20 16.81 3.67 72 MIME_QP_LONG_LINE 7063 3.08 2.32 3.47 73 BAYES_999 7021 12.12 28.61 3.45 74 INVALID_MSGID 6993 2.32 0.20 3.44 75 XM_Body_Dirty_Words 6832 4.64 7.07 3.36 76 T_TooManySym_02 6800 2.41 0.63 3.34 77 XMSubMetaSx_00 6531 4.63 7.33 3.21 78 HTML_IMAGE_RATIO_06 6519 3.48 4.00 3.21 79 T_REMOTE_IMAGE 6249 2.54 1.52 3.07 80 TO_MALFORMED 6205 2.01 0.02 3.05 81 XM_CamelCaseFrm001 6125 3.62 4.77 3.01 82 FROM_EXCESS_BASE64 6012 2.77 2.41 2.96 83 BAYES_20 5678 2.20 1.06 2.79 84 RCVD_IN_IADB_LISTED 5553 2.14 1.03 2.73 85 BAYES_95 5344 3.45 5.02 2.63 86 TR_XM_DKIM_Undo 5181 11.91 29.72 2.55 87 RCVD_IN_IADB_SPF 5008 1.93 0.92 2.46 88 XMBdyGiftCard01 4949 2.23 1.83 2.43 89 XMStockSpam_06 4937 2.51 2.66 2.43 90 RCVD_IN_IADB_SENDERID 4573 1.77 0.86 2.25 91 MIME_HTML_ONLY_MULTI 4509 2.76 3.78 2.22 92 TR_Symld_Words 4509 1.97 1.49 2.22 93 RCVD_IN_IADB_DK 4482 1.75 0.87 2.20 94 HTML_IMAGE_RATIO_08 4407 2.33 2.65 2.17 95 TR_XM_SpammyRelay 4399 5.36 11.45 2.16 96 TR_XM_SpammyWords5 4368 2.66 3.62 2.15 97 XM_PDF 4345 1.48 0.22 2.14 98 MAILING_LIST_MULTI 4202 2.02 1.94 2.07 99 XM_B_URI_Unicode 4098 2.19 2.54 2.01 100 XMSexyCombo_05 4081 3.45 6.18 2.01 101 TM2_M_URI_OPT_OUT 3725 2.22 2.97 1.83 102 TR_XM_PhishingBody 3632 2.57 4.07 1.79 103 T_XMDrugObfuBody_14 3600 2.83 4.86 1.77 104 TR_XM_UnparsRelay 3551 4.69 10.29 1.75 105 TR_DCC_Bayes_99 3486 9.71 24.93 1.71 106 UNTRUSTED_Relay 3344 3.65 7.46 1.64 107 IN_HORDE_ADDRESS_BOOK 3343 1.12 0.14 1.64 108 RCVD_IN_IADB_VOUCHED 3305 1.23 0.49 1.63 109 BAYES_05 3273 1.31 0.75 1.61 110 XMGappySubj_01 3269 1.09 0.09 1.61 111 TVD_SPACE_RATIO 3177 1.04 0.05 1.56 112 RELAYCOUNTRY_CA 3139 3.10 6.07 1.54 113 XM_DK_Undo_01 3093 1.71 2.07 1.52 114 BOTNET 2972 3.85 8.39 1.46 115 XM_TLDProd2 2902 1.02 0.23 1.43 116 XMBrknScrpt_02 2897 1.65 2.07 1.42 117 DKIM_INVALID 2871 2.00 3.12 1.41 118 TM2_M_VERY_LONG_WORD 2847 2.03 3.24 1.40 119 HTML_MIME_NO_HTML_TAG 2753 1.19 0.87 1.35 120 XM_SPF_SoftFail 2704 2.45 4.58 1.33 121 XM_B_Unsub2 2695 1.80 2.69 1.33 122 DIET_1 2648 1.63 2.26 1.30 123 XMDiploma_00 2622 1.63 2.29 1.29 124 TooManyTo_002 2551 1.67 2.47 1.25 125 T_TVD_MIME_NO_HEADERS 2471 0.85 0.15 1.21 126 XM_B_DNDMA 2401 1.16 1.11 1.18 127 T_TooManySym_03 2383 0.85 0.23 1.17 128 RCVD_IN_IADB_OPTIN 2379 0.85 0.25 1.17 129 XM_B_SpammyWords4 2274 1.56 2.41 1.12 130 XM_B_Investor 2255 1.96 3.59 1.11 131 T_XMDrugObfuBody_08 2255 1.69 2.78 1.11 132 KHOP_HELO_FCRDNS 2234 1.05 0.97 1.10 133 XM_SendGrid 2209 1.17 1.33 1.09 134 XMGappySubj_02 2195 0.73 0.05 1.08 135 XMSubMetaI_00 2186 1.49 2.28 1.07 136 URI_HEX 2178 1.24 1.55 1.07 137 XM_GoogleGroups 2128 0.92 0.67 1.05 138 XMSolicitRefs_0 2086 0.83 0.46 1.03 139 XMBody_95 2032 0.85 0.57 1.00 140 RCVD_IN_BL_SPAMCOP_NET 1958 2.94 6.70 0.96 141 TR_XM_Base64_M1 1948 0.87 0.70 0.96 142 XM_RXBody 1903 0.86 0.71 0.94 143 SUBJ_ALL_CAPS 1902 1.27 1.91 0.94 144 XM_B_COPY_HTML 1880 0.95 1.00 0.92 145 XM_H_Long_From02 1879 0.98 1.08 0.92 146 HTML_TAG_BALANCE_BODY 1839 1.04 1.31 0.90 147 HTML_EXTRA_CLOSE 1798 0.59 0.04 0.88 148 XM_B_SEO 1786 1.97 4.05 0.88 149 XM_UB50 1758 1.81 3.60 0.86 150 XM_B_COVIDMETA 1743 0.75 0.54 0.86 151 FROM_GOV_DKIM_AU 1735 0.57 0.04 0.85 152 T_XMDrugObfuBody_00 1665 1.24 2.04 0.82 153 XMSolicitRefs_4 1609 0.54 0.07 0.79 154 T_MANY_PILL_PRICE 1600 0.52 0.00 0.79 155 XM_URI_RBL 1550 1.41 2.64 0.76 156 XMBody_17 1534 1.83 3.87 0.75 157 TooManyTo_003 1499 0.77 0.83 0.74 158 TR_XM_DK_SendGrid 1497 0.79 0.90 0.74 159 URI_TRY_3LD 1487 0.77 0.83 0.73 160 XMPhish30 1478 1.01 1.54 0.73 161 TVD_RCVD_IP 1459 0.80 0.97 0.72 162 TR_XM_Spammywords 1403 0.73 0.80 0.69 163 XM_S_SpammyWords 1403 0.73 0.80 0.69 164 USER_IN_WELCOMELIST 1394 0.45 0.00 0.69 165 USER_IN_WHITELIST 1394 0.45 0.00 0.69 166 T_FILL_THIS_FORM_SHORT 1373 1.51 3.11 0.68 167 XMClaimOffer 1349 0.76 0.95 0.66 168 DKIM_ADSP_CUSTOM_MED 1348 0.71 0.80 0.66 169 TM2_M_OBFU_COMMENT 1318 0.80 1.10 0.65 170 TR_MetaPhish_Combo_01 1316 0.67 0.71 0.65 171 XM_OfRef6 1312 1.43 2.92 0.65 172 T_XMHurry_00 1303 1.09 1.94 0.64 173 XMGenDplmaNmb 1303 0.82 1.17 0.64 174 HTML_TEXT_INVISIBLE_STYLE 1282 0.48 0.19 0.63 175 TR_XM_SpammyWords2 1244 4.15 10.89 0.61 176 XM_H_PHPMailer 1239 0.60 0.57 0.61 177 TooManyTo_004 1223 0.67 0.81 0.60 178 HTML_TAG_BALANCE_CENTER 1204 0.43 0.13 0.59 179 PLING_QUERY 1199 0.63 0.70 0.59 180 THIS_AD 1198 1.12 2.12 0.59 181 HTTPS_HTTP_MISMATCH 1120 0.74 1.10 0.55 182 SpammyFromTLD_01 1113 1.20 2.44 0.55 183 XMSlimDrugH 1085 0.97 1.81 0.53 184 XMNoVowels 1083 0.48 0.38 0.53 185 HTML_IMAGE_ONLY_20 1062 0.57 0.66 0.52 186 SpammyFromTLD_02 1058 0.95 1.76 0.52 187 TooManyTo_005 1040 0.60 0.78 0.51 188 SUBJ_DOLLARS 1032 0.58 0.72 0.51 189 TR_XM_SEO4 1030 1.55 3.53 0.51 190 XMBSHREFv2 1020 0.43 0.30 0.50 191 RELAYCOUNTRY_AU 1016 1.29 2.79 0.50 192 XMLngstWrd_00 1011 0.43 0.30 0.50 193 XMWrdNumbWrd 989 0.33 0.04 0.49 194 MPART_ALT_DIFF_COUNT 984 0.79 1.38 0.48 195 XMOemUri 981 0.40 0.24 0.48 196 T_STY_INVIS_DIRECT 969 0.73 1.22 0.48 197 HTML_FONT_FACE_BAD 967 0.56 0.73 0.48 198 XMPhish08 959 0.56 0.74 0.47 199 TR_XM_SPAMCOP 947 2.12 5.27 0.47 200 XM_Ancestry_Forge 939 0.31 0.01 0.46 ----------------------------------------------------------------------