Email: 217448 Autolearn: 0 AvgScore: 5.02 AvgScanTime: 1.30 sec Spam: 77683 Autolearn: 0 AvgScore: 13.63 AvgScanTime: 1.37 sec Ham: 139765 Autolearn: 0 AvgScore: 0.24 AvgScanTime: 1.26 sec Time Spent Running SA: 78.23 hours Time Spent Processing Spam: 29.48 hours Time Spent Processing Ham: 48.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 74378 84.42 95.75 78.13 2 DKIM_SIGNED 68101 77.73 87.67 72.21 3 XM_DK_Pass 65151 75.86 83.87 71.41 4 RELAYCOUNTRY_US 64979 77.45 83.65 74.00 5 DKIM_VALID 64735 75.35 83.33 70.91 6 XM_B_Unicode 63991 73.68 82.37 68.84 7 DCC_CHECK 59325 58.04 76.37 47.85 8 XMListUnsubscribeExists 55876 60.00 71.93 53.37 9 XM_B_SpammyWords 52926 52.67 68.13 44.07 10 DKIM_VALID_AU 52749 62.74 67.90 59.86 11 LOC_TINY_FONT_1 41324 38.00 53.20 29.56 12 XM_B_Unicode3 39820 46.70 51.26 44.16 13 HTML_FONT_LOW_CONTRAST 34328 36.05 44.19 31.52 14 RCVD_IN_MSPIKE_H2 33804 37.28 43.52 33.81 15 XM_B_SpammyWords2 31828 26.51 40.97 18.47 16 XM_DK_Undo_02 30648 18.06 39.45 6.17 17 BAYES_50 28888 51.23 37.19 59.03 18 BAYES_99 25170 14.73 32.40 4.92 19 FVGT_m_MULTI_ODD 24728 26.75 31.83 23.92 20 T_KAM_HTML_FONT_INVALID 23191 22.50 29.85 18.41 21 MIME_HTML_ONLY 21971 22.49 28.28 19.27 22 TR_XM_DKIM_Undo 20396 10.96 26.26 2.46 23 XM_Multi_Part_URI 20017 22.64 25.77 20.90 24 BAYES_999 19479 11.47 25.07 3.91 25 DCC_CHECK_NEGATIVE 18184 41.87 23.41 52.13 26 XMSubLong 18030 21.27 23.21 20.19 27 DKIM_VALID_EF 17896 24.56 23.04 25.41 28 TR_DCC_Bayes_99 17395 9.33 22.39 2.06 29 XM_B_Unsub 14010 12.19 18.03 8.95 30 TR_MAX_INTL_RELAY 13918 10.65 17.92 6.61 31 RELAYCOUNTRY_META 13758 8.93 17.71 4.05 32 TR_XM_BayesUnsub 13731 11.27 17.68 7.71 33 XM_B_SpammyWords3 13597 9.17 17.50 4.54 34 UNPARSEABLE_RELAY 13187 13.34 16.98 11.32 35 T_TM2_M_HEADER_IN_MSG 13122 19.40 16.89 20.80 36 TR_XM_DK_Unsub 12868 14.31 16.56 13.06 37 XM_Body_Dirty_Words 9273 6.99 11.94 4.24 38 TR_XM_SpammyRelay 9089 5.64 11.70 2.27 39 BOTNET_IPINHOSTNAME 8821 6.94 11.36 4.49 40 BAYES_80 8369 6.40 10.77 3.98 41 TR_XM_SpammyWords2 8359 4.08 10.76 0.37 42 RCVD_IN_BL_SPAMCOP_NET 8032 4.17 10.34 0.74 43 TR_XM_UnparsRelay 7882 4.87 10.15 1.94 44 BAYES_60 7776 10.87 10.01 11.35 45 FSL_BULK_SIG 7341 9.56 9.45 9.62 46 TR_XM_SPAMCOP 7180 3.59 9.24 0.45 47 TooManyTo_001 6902 7.75 8.88 7.12 48 LOTS_OF_MONEY 6673 5.77 8.59 4.20 49 BOTNET 6132 3.87 7.89 1.64 50 MPART_ALT_DIFF 5869 5.51 7.56 4.37 51 XM_Evil_Numbers_Gen 5825 9.01 7.50 9.86 52 TR_XM_SpammyWords4 5783 4.65 7.44 3.09 53 HTML_IMAGE_RATIO_02 5699 6.70 7.34 6.34 54 UNTRUSTED_Relay 5607 3.86 7.22 2.00 55 LotsOfNums_01 5475 7.32 7.05 7.47 56 XM_H_GMP 5217 5.62 6.72 5.01 57 XMSubMetaSx_00 5198 4.86 6.69 3.84 58 T_XMDrugObfuBody_14 4969 3.27 6.40 1.53 59 XMSexyCombo_05 4956 2.91 6.38 0.98 60 RELAYCOUNTRY_CA 4859 3.35 6.25 1.73 61 BAYES_95 4837 3.92 6.23 2.63 62 XM_UncommonTLD01 4563 5.80 5.87 5.75 63 XM_B_Phish_Phrases 4374 4.47 5.63 3.82 64 RCVD_IN_VALIDITY_RPBL 3976 1.90 5.12 0.11 65 XM_H_Long_From01 3763 4.88 4.84 4.89 66 HTML_IMAGE_RATIO_04 3743 4.28 4.82 3.98 67 XM_B_PhoneNumber 3588 5.09 4.62 5.35 68 XM_B_SEO 3536 2.56 4.55 1.45 69 XM_B_SpammyTLD 3450 5.82 4.44 6.59 70 TR_XM_NoHeaderRelay 3391 1.63 4.37 0.11 71 DKIM_INVALID 3366 2.39 4.33 1.30 72 XM_CamelCaseFrm001 3321 3.54 4.28 3.14 73 XM_SPF_SoftFail 3304 2.39 4.25 1.35 74 MIME_HTML_ONLY_MULTI 3215 3.19 4.14 2.66 75 TR_XM_SEO4 3193 2.14 4.11 1.05 76 TR_XM_PhishingBody 3052 2.43 3.93 1.60 77 HTML_IMAGE_RATIO_06 3024 3.07 3.89 2.61 78 TM2_M_VERY_LONG_WORD 2981 2.40 3.84 1.60 79 MIME_HTML_MOSTLY 2827 2.73 3.64 2.23 80 XM_UB50 2560 1.77 3.30 0.92 81 XM_B_Investor 2559 2.12 3.29 1.47 82 XMNumbers 2391 3.09 3.08 3.09 83 TR_XM_SpammyWords5 2325 2.22 2.99 1.80 84 TM2_M_URI_OPT_OUT 2261 4.19 2.91 4.90 85 TooManyTo_002 2197 1.55 2.83 0.83 86 USER_IN_DEF_DKIM_WL 2094 12.03 2.70 17.21 87 XMStrtUSub 2075 4.05 2.67 4.82 88 XM_URI_RBL 2035 1.30 2.62 0.56 89 RCVD_IN_MSPIKE_H3 2034 3.86 2.62 4.55 90 RCVD_IN_MSPIKE_WL 2034 3.86 2.62 4.55 91 HTML_IMAGE_RATIO_08 2024 3.15 2.61 3.46 92 XMBody_17 1996 1.20 2.57 0.44 93 T_TooManySym_01 1992 5.51 2.56 7.15 94 KHOP_HELO_FCRDNS 1983 1.49 2.55 0.90 95 XM_B_SpammyWords4 1977 1.29 2.54 0.59 96 FROM_EXCESS_BASE64 1940 2.17 2.50 1.99 97 SUSP_UTF8_WORD_SUBJ 1876 0.88 2.41 0.03 98 RELAYCOUNTRY_AU 1856 1.32 2.39 0.73 99 TR_XM_FormFill 1847 0.86 2.38 0.02 100 T_XMDrugObfuBody_08 1819 1.61 2.34 1.20 101 MIME_QP_LONG_LINE 1733 4.22 2.23 5.32 102 MAILING_LIST_MULTI 1715 2.03 2.21 1.93 103 RCVD_IN_VALIDITY_SAFE 1690 5.05 2.18 6.65 104 XMStockSpam_06 1669 1.85 2.15 1.68 105 TR_XM_PHPDW 1665 0.89 2.14 0.20 106 TR_XM_PHPForged 1637 0.88 2.11 0.20 107 TR_XM_FormFill2 1634 0.88 2.10 0.20 108 XM_H_PHPOS 1601 0.85 2.06 0.18 109 T_STY_INVIS_DIRECT 1584 1.01 2.04 0.43 110 XMBrknScrpt_02 1464 1.37 1.88 1.09 111 XMBody_78 1452 0.91 1.87 0.38 112 SpammyFromTLD_01 1384 1.05 1.78 0.64 113 T_FILL_THIS_FORM_SHORT 1382 0.91 1.78 0.42 114 XM_B_URI_Unicode 1367 1.60 1.76 1.51 115 T_XMHurry_00 1366 0.83 1.76 0.32 116 DKIM_ADSP_NXDOMAIN 1361 0.96 1.75 0.52 117 XM_OfRef6 1354 0.88 1.74 0.40 118 RCVD_IN_VALIDITY_CERTIFIED 1339 4.05 1.72 5.34 119 SH_BODYURI_REVERSE_CSS 1286 0.63 1.66 0.05 120 URIBL_CSS 1285 0.63 1.65 0.06 121 URIBL_CSS_A 1285 0.63 1.65 0.06 122 ALL_TRUSTED 1277 14.69 1.64 21.95 123 SHOPIFY_IMG_NOT_RCVD_SFY 1222 0.77 1.57 0.33 124 XM_B_FormFill 1200 0.61 1.54 0.09 125 XM_UB99 1197 0.55 1.54 0.01 126 XM_Appointment_Request 1192 0.56 1.53 0.02 127 SpammyFromTLD_02 1136 0.63 1.46 0.17 128 XM_DK_Undo_01 1128 1.35 1.45 1.29 129 XMPhish30 1115 0.90 1.44 0.61 130 XM_ProductURIs 1109 0.89 1.43 0.59 131 URI_HEX 1101 1.32 1.42 1.27 132 SUBJ_ALL_CAPS 1100 1.59 1.42 1.68 133 ANY_BOUNCE_MESSAGE 1092 3.18 1.41 4.16 134 BOUNCE_MESSAGE 1092 3.18 1.41 4.16 135 BOTNET_NORDNS 1084 0.50 1.40 0.01 136 XM_B_REG_HTML 1081 0.63 1.39 0.21 137 BAYES_40 1075 3.48 1.38 4.64 138 HTML_TAG_BALANCE_BODY 1066 0.95 1.37 0.71 139 FVGT_m_MULTI_ODD_EMAIL 1057 0.51 1.36 0.04 140 XMDiploma_00 1033 0.99 1.33 0.79 141 XM_B_COPY_HTML 1016 1.10 1.31 0.98 142 XMReplyNow 1000 0.60 1.29 0.21 143 XMSubNoVowel 994 0.79 1.28 0.51 144 MPART_ALT_DIFF_COUNT 993 0.71 1.28 0.40 145 XM_B_Unsub2 987 1.11 1.27 1.02 146 RCVD_IN_PSBL 969 0.53 1.25 0.14 147 RELAYCOUNTRY_CN 967 0.47 1.24 0.05 148 RELAYCOUNTRY_FR 966 0.54 1.24 0.15 149 TooManyTo_003 965 0.82 1.24 0.59 150 LongTLD 951 0.54 1.22 0.16 151 TooManyTo_004 944 0.70 1.22 0.41 152 XMSlimDrugH 944 0.60 1.22 0.26 153 TooManyTo_005 927 0.65 1.19 0.34 154 XM_UB999 911 0.42 1.17 0.01 155 MIME_CHARSET_FARAWAY 901 0.79 1.16 0.59 156 T_XMDrugObfuBody_00 887 0.68 1.14 0.42 157 FROM_DOMAIN_NOVOWEL 881 0.41 1.13 0.00 158 NO_DNS_FOR_FROM 873 0.74 1.12 0.52 159 XM_SendGrid 866 1.12 1.11 1.13 160 TR_XM_MaxWHORU 865 0.67 1.11 0.43 161 XMBdyGiftCard01 860 1.66 1.11 1.97 162 RCVD_IN_PBL 858 0.71 1.10 0.49 163 RELAYCOUNTRY_TH 849 0.39 1.09 0.01 164 HTML_FONT_TINY_NORDNS 844 0.43 1.09 0.06 165 DIET_1 840 0.57 1.08 0.29 166 XM_DIRTYINTL 827 0.42 1.06 0.06 167 XMSubMetaI_00 823 0.62 1.06 0.37 168 HTML_MIME_NO_HTML_TAG 810 1.15 1.04 1.20 169 TR_XM_INV_DKIM 808 0.42 1.04 0.08 170 LONGLN_LOW_CONTRAST 785 0.57 1.01 0.32 171 XM_HighProb1 783 0.36 1.01 0.01 172 XMLngstWrd_00 782 0.67 1.01 0.49 173 XMSexyCombo_01 780 0.42 1.00 0.10 174 LONG_JUNK_URI 763 0.37 0.98 0.03 175 T_REMOTE_IMAGE 744 2.06 0.96 2.67 176 XM_H_Long_From02 739 1.58 0.95 1.93 177 XMLngstWrd_01 737 0.56 0.95 0.35 178 TR_Mismatch_TLD_01 731 0.47 0.94 0.20 179 HOSTED_IMG_MULTI_PUB_01 726 0.35 0.93 0.03 180 HTTPS_HTTP_MISMATCH 713 0.60 0.92 0.42 181 RCVD_IN_XBL 709 0.34 0.91 0.02 182 RDNS_DYNAMIC 701 0.57 0.90 0.39 183 TR_XM_InvalidRelay 700 0.34 0.90 0.03 184 XMSubMetaSxObfu_03 695 0.45 0.89 0.21 185 T_Symld_Words_02 694 0.43 0.89 0.18 186 XM_H_PHPMailer 692 0.78 0.89 0.71 187 XMLngstWrd_02 690 0.49 0.89 0.26 188 URI_NOVOWEL 677 3.61 0.87 5.13 189 PDS_RDNS_DYNAMIC_FP 673 0.35 0.87 0.06 190 TR_XM_Spammywords 673 0.36 0.87 0.07 191 XM_S_SpammyWords 673 0.36 0.87 0.07 192 BAYES_20 667 1.93 0.86 2.52 193 XMLngstWrd_03 666 0.42 0.86 0.18 194 XMPhish08 663 0.48 0.85 0.27 195 XMWghtMeta_00 659 0.31 0.85 0.01 196 XMHTMLBadTable_001 659 0.44 0.85 0.22 197 XMSlimDrugs 657 0.31 0.85 0.01 198 XM_B_Phish66 649 0.45 0.84 0.23 199 TVD_RCVD_IP 649 0.92 0.84 0.96 200 XM_UB60 642 0.33 0.83 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 109193 84.42 95.75 78.13 2 RELAYCOUNTRY_US 103433 77.45 83.65 74.00 3 DKIM_SIGNED 100927 77.73 87.67 72.21 4 XM_DK_Pass 99811 75.86 83.87 71.41 5 DKIM_VALID 99105 75.35 83.33 70.91 6 XM_B_Unicode 96215 73.68 82.37 68.84 7 DKIM_VALID_AU 83669 62.74 67.90 59.86 8 BAYES_50 82503 51.23 37.19 59.03 9 XMListUnsubscribeExists 74598 60.00 71.93 53.37 10 DCC_CHECK_NEGATIVE 72866 41.87 23.41 52.13 11 DCC_CHECK 66873 58.04 76.37 47.85 12 XM_B_Unicode3 61722 46.70 51.26 44.16 13 XM_B_SpammyWords 61595 52.67 68.13 44.07 14 RCVD_IN_MSPIKE_H2 47260 37.28 43.52 33.81 15 HTML_FONT_LOW_CONTRAST 44059 36.05 44.19 31.52 16 LOC_TINY_FONT_1 41313 38.00 53.20 29.56 17 DKIM_VALID_EF 35512 24.56 23.04 25.41 18 FVGT_m_MULTI_ODD 33437 26.75 31.83 23.92 19 ALL_TRUSTED 30672 14.69 1.64 21.95 20 XM_Multi_Part_URI 29209 22.64 25.77 20.90 21 T_TM2_M_HEADER_IN_MSG 29067 19.40 16.89 20.80 22 XMSubLong 28217 21.27 23.21 20.19 23 MIME_HTML_ONLY 26927 22.49 28.28 19.27 24 XM_B_SpammyWords2 25817 26.51 40.97 18.47 25 T_KAM_HTML_FONT_INVALID 25734 22.50 29.85 18.41 26 USER_IN_DEF_DKIM_WL 24055 12.03 2.70 17.21 27 TR_XM_DK_Unsub 18253 14.31 16.56 13.06 28 BAYES_60 15858 10.87 10.01 11.35 29 UNPARSEABLE_RELAY 15827 13.34 16.98 11.32 30 XM_Evil_Numbers_Gen 13774 9.01 7.50 9.86 31 FSL_BULK_SIG 13450 9.56 9.45 9.62 32 BAYES_00 13376 6.30 0.43 9.57 33 XM_DKIMWhitelistDomains 12749 5.89 0.09 9.12 34 XM_B_Unsub 12504 12.19 18.03 8.95 35 TR_XM_DK_Bayes 11993 5.65 0.37 8.58 36 TR_XM_DK_Bayes1 11918 5.61 0.37 8.53 37 TR_XM_BayesUnsub 10771 11.27 17.68 7.71 38 LotsOfNums_01 10444 7.32 7.05 7.47 39 T_TooManySym_01 9995 5.51 2.56 7.15 40 TooManyTo_001 9957 7.75 8.88 7.12 41 TR_XM_DK_Bayes2 9620 4.49 0.18 6.88 42 RCVD_IN_VALIDITY_SAFE 9294 5.05 2.18 6.65 43 TR_MAX_INTL_RELAY 9242 10.65 17.92 6.61 44 XM_B_SpammyTLD 9211 5.82 4.44 6.59 45 HTML_IMAGE_RATIO_02 8868 6.70 7.34 6.34 46 XM_DK_Undo_02 8620 18.06 39.45 6.17 47 XM_UncommonTLD01 8043 5.80 5.87 5.75 48 XM_B_PhoneNumber 7482 5.09 4.62 5.35 49 RCVD_IN_VALIDITY_CERTIFIED 7467 4.05 1.72 5.34 50 MIME_QP_LONG_LINE 7435 4.22 2.23 5.32 51 URI_NOVOWEL 7168 3.61 0.87 5.13 52 XM_H_GMP 7008 5.62 6.72 5.01 53 BAYES_99 6870 14.73 32.40 4.92 54 TM2_M_URI_OPT_OUT 6853 4.19 2.91 4.90 55 XM_H_Long_From01 6839 4.88 4.84 4.89 56 IN_ZIMBRA_NJ_WHITELIST 6785 3.14 0.06 4.85 57 XMStrtUSub 6730 4.05 2.67 4.82 58 BAYES_40 6484 3.48 1.38 4.64 59 RCVD_IN_MSPIKE_WL 6366 3.86 2.62 4.55 60 RCVD_IN_MSPIKE_H3 6366 3.86 2.62 4.55 61 XM_B_SpammyWords3 6345 9.17 17.50 4.54 62 T_TooManySym_02 6282 3.05 0.46 4.49 63 BOTNET_IPINHOSTNAME 6279 6.94 11.36 4.49 64 TO_MALFORMED 6237 2.87 0.00 4.46 65 INVALID_MSGID 6194 2.91 0.18 4.43 66 MPART_ALT_DIFF 6105 5.51 7.56 4.37 67 XM_Body_Dirty_Words 5923 6.99 11.94 4.24 68 LOTS_OF_MONEY 5875 5.77 8.59 4.20 69 BOUNCE_MESSAGE 5818 3.18 1.41 4.16 70 ANY_BOUNCE_MESSAGE 5818 3.18 1.41 4.16 71 RELAYCOUNTRY_META 5660 8.93 17.71 4.05 72 HTML_IMAGE_RATIO_04 5560 4.28 4.82 3.98 73 BAYES_80 5556 6.40 10.77 3.98 74 BAYES_999 5460 11.47 25.07 3.91 75 XMSubMetaSx_00 5365 4.86 6.69 3.84 76 XM_B_Phish_Phrases 5346 4.47 5.63 3.82 77 HTML_IMAGE_RATIO_08 4834 3.15 2.61 3.46 78 XM_CamelCaseFrm001 4383 3.54 4.28 3.14 79 TR_XM_SpammyWords4 4321 4.65 7.44 3.09 80 XMNumbers 4318 3.09 3.08 3.09 81 RCVD_IN_IADB_LISTED 4026 2.08 0.65 2.88 82 T_REMOTE_IMAGE 3732 2.06 0.96 2.67 83 MIME_HTML_ONLY_MULTI 3713 3.19 4.14 2.66 84 BAYES_95 3680 3.92 6.23 2.63 85 RCVD_IN_IADB_SPF 3658 1.87 0.54 2.62 86 HTML_IMAGE_RATIO_06 3641 3.07 3.89 2.61 87 BAYES_20 3521 1.93 0.86 2.52 88 TR_XM_DKIM_Undo 3443 10.96 26.26 2.46 89 RCVD_IN_IADB_SENDERID 3348 1.72 0.50 2.40 90 RCVD_IN_IADB_DK 3243 1.67 0.51 2.32 91 TR_XM_SpammyRelay 3174 5.64 11.70 2.27 92 MIME_HTML_MOSTLY 3115 2.73 3.64 2.23 93 TVD_SPACE_RATIO 3073 1.46 0.14 2.20 94 XM_TLDProd2 3033 1.46 0.19 2.17 95 TR_DCC_Bayes_99 2884 9.33 22.39 2.06 96 UNTRUSTED_Relay 2793 3.86 7.22 2.00 97 FROM_EXCESS_BASE64 2779 2.17 2.50 1.99 98 XMBdyGiftCard01 2759 1.66 1.11 1.97 99 TR_XM_UnparsRelay 2711 4.87 10.15 1.94 100 MAILING_LIST_MULTI 2702 2.03 2.21 1.93 101 XM_H_Long_From02 2693 1.58 0.95 1.93 102 HTML_OBFUSCATE_05_10 2561 1.30 0.36 1.83 103 TR_XM_SpammyWords5 2510 2.22 2.99 1.80 104 RCVD_IN_IADB_VOUCHED 2483 1.27 0.36 1.78 105 XMGappySubj_01 2433 1.16 0.10 1.74 106 RELAYCOUNTRY_CA 2416 3.35 6.25 1.73 107 T_TooManySym_03 2360 1.13 0.11 1.69 108 XMStockSpam_06 2352 1.85 2.15 1.68 109 SUBJ_ALL_CAPS 2350 1.59 1.42 1.68 110 BOTNET 2294 3.87 7.89 1.64 111 IN_HORDE_ADDRESS_BOOK 2252 1.08 0.13 1.61 112 TM2_M_VERY_LONG_WORD 2241 2.40 3.84 1.60 113 TR_XM_PhishingBody 2235 2.43 3.93 1.60 114 T_XMDrugObfuBody_14 2132 3.27 6.40 1.53 115 XM_B_URI_Unicode 2112 1.60 1.76 1.51 116 XM_B_Investor 2052 2.12 3.29 1.47 117 XM_PDF 2034 1.01 0.20 1.46 118 XM_B_SEO 2030 2.56 4.55 1.45 119 RCVD_IN_IADB_OPTIN 1953 0.97 0.21 1.40 120 BAYES_05 1914 1.07 0.53 1.37 121 XM_SPF_SoftFail 1892 2.39 4.25 1.35 122 XMGappySubj_02 1890 0.88 0.04 1.35 123 DKIM_INVALID 1822 2.39 4.33 1.30 124 XM_DK_Undo_01 1801 1.35 1.45 1.29 125 URI_HEX 1769 1.32 1.42 1.27 126 HTML_MIME_NO_HTML_TAG 1684 1.15 1.04 1.20 127 T_XMDrugObfuBody_08 1677 1.61 2.34 1.20 128 XM_B_DNDMA 1622 0.89 0.39 1.16 129 XM_SendGrid 1578 1.12 1.11 1.13 130 XMBrknScrpt_02 1518 1.37 1.88 1.09 131 TR_Symld_Words 1516 0.99 0.83 1.08 132 TR_XM_SEO4 1467 2.14 4.11 1.05 133 XM_B_Unsub2 1431 1.11 1.27 1.02 134 XM_GoogleGroups 1403 0.93 0.80 1.00 135 XM_B_COPY_HTML 1376 1.10 1.31 0.98 136 XMSexyCombo_05 1369 2.91 6.38 0.98 137 XMBody_95 1366 0.67 0.11 0.98 138 TVD_RCVD_IP 1346 0.92 0.84 0.96 139 XM_UB50 1292 1.77 3.30 0.92 140 KHOP_HELO_FCRDNS 1258 1.49 2.55 0.90 141 TooManyTo_002 1163 1.55 2.83 0.83 142 XMDiploma_00 1109 0.99 1.33 0.79 143 T_TVD_MIME_NO_HEADERS 1103 0.53 0.06 0.79 144 XMClaimOffer 1086 0.67 0.49 0.78 145 TR_XM_DK_SendGrid 1070 0.75 0.73 0.77 146 RCVD_IN_BL_SPAMCOP_NET 1032 4.17 10.34 0.74 147 RELAYCOUNTRY_AU 1022 1.32 2.39 0.73 148 HTML_TAG_BALANCE_BODY 996 0.95 1.37 0.71 149 XM_H_PHPMailer 994 0.78 0.89 0.71 150 XMBSHREFv2 985 0.55 0.28 0.70 151 T_TooManySym_04 953 0.45 0.03 0.68 152 DKIM_ADSP_CUSTOM_MED 925 0.70 0.77 0.66 153 SpammyFromTLD_01 896 1.05 1.78 0.64 154 XMPhish30 850 0.90 1.44 0.61 155 TooManyTo_003 828 0.82 1.24 0.59 156 XM_B_SpammyWords4 823 1.29 2.54 0.59 157 MIME_CHARSET_FARAWAY 822 0.79 1.16 0.59 158 XM_ProductURIs 822 0.89 1.43 0.59 159 USER_IN_WELCOMELIST 807 0.37 0.00 0.58 160 USER_IN_WHITELIST 807 0.37 0.00 0.58 161 URI_TRY_3LD 801 0.64 0.75 0.57 162 XM_URI_RBL 783 1.30 2.62 0.56 163 XM_S_SubURI 765 0.37 0.06 0.55 164 TR_MetaPhish_Combo_01 761 0.59 0.67 0.54 165 TM2_M_OBFU_COMMENT 748 0.61 0.75 0.54 166 DKIM_ADSP_NXDOMAIN 731 0.96 1.75 0.52 167 TR_XM_Base64_M1 729 0.63 0.82 0.52 168 NO_DNS_FOR_FROM 727 0.74 1.12 0.52 169 HTML_IMAGE_ONLY_20 719 0.52 0.53 0.51 170 XMNoVowels 719 0.43 0.28 0.51 171 XMSubNoVowel 715 0.79 1.28 0.51 172 RCVD_IN_PBL 683 0.71 1.10 0.49 173 XMLngstWrd_00 679 0.67 1.01 0.49 174 XMHTML_After_End 645 0.53 0.65 0.46 175 NML_ADSP_CUSTOM_MED 630 0.51 0.62 0.45 176 TR_XM_SPAMCOP 626 3.59 9.24 0.45 177 XMBody_17 620 1.20 2.57 0.44 178 HTML_TAG_BALANCE_CENTER 617 0.33 0.14 0.44 179 FONT_INVIS_MSGID 607 0.38 0.29 0.43 180 T_STY_INVIS_DIRECT 607 1.01 2.04 0.43 181 HTML_TEXT_INVISIBLE_STYLE 604 0.35 0.21 0.43 182 XMPhish14 598 0.55 0.77 0.43 183 TR_XM_MaxWHORU 597 0.67 1.11 0.43 184 HTTPS_HTTP_MISMATCH 593 0.60 0.92 0.42 185 T_XMDrugObfuBody_00 592 0.68 1.14 0.42 186 T_FILL_THIS_FORM_SHORT 589 0.91 1.78 0.42 187 TooManyTo_004 580 0.70 1.22 0.41 188 HTML_FONT_FACE_BAD 578 0.55 0.79 0.41 189 XM_OfRef6 556 0.88 1.74 0.40 190 MPART_ALT_DIFF_COUNT 553 0.71 1.28 0.40 191 RDNS_DYNAMIC 546 0.57 0.90 0.39 192 FONT_INVIS_POSTEXTRAS 541 0.25 0.02 0.39 193 XM_Walgreens_Forge 537 0.25 0.02 0.38 194 RELAYCOUNTRY_DE 530 0.52 0.78 0.38 195 XMBody_78 529 0.91 1.87 0.38 196 XMSubMetaI_00 522 0.62 1.06 0.37 197 J_POPCORN_W_RD 518 0.36 0.35 0.37 198 FORGED_GMAIL_RCVD 516 0.43 0.54 0.37 199 TR_XM_SpammyWords2 511 4.08 10.76 0.37 200 MSGID_FROM_MTA_HEADER 494 0.28 0.15 0.35 ----------------------------------------------------------------------