Email: 294669 Autolearn: 0 AvgScore: 5.22 AvgScanTime: 1.23 sec Spam: 108771 Autolearn: 0 AvgScore: 13.12 AvgScanTime: 1.27 sec Ham: 185898 Autolearn: 0 AvgScore: 0.60 AvgScanTime: 1.21 sec Time Spent Running SA: 100.76 hours Time Spent Processing Spam: 38.23 hours Time Spent Processing Ham: 62.53 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 104613 89.05 96.18 84.88 2 XM_B_Unicode 94089 77.04 86.50 71.50 3 DCC_CHECK 85255 56.37 78.38 43.49 4 DKIM_SIGNED 84538 72.76 77.72 69.85 5 XM_DK_Pass 81323 71.03 74.77 68.85 6 DKIM_VALID 80688 70.56 74.18 68.45 7 RELAYCOUNTRY_US 79993 73.34 73.54 73.22 8 XMListUnsubscribeExists 69754 53.78 64.13 47.72 9 DKIM_VALID_AU 68184 59.84 62.69 58.17 10 XM_B_SpammyWords 66014 49.44 60.69 42.86 11 LOC_TINY_FONT_1 50867 34.17 46.77 26.81 12 XM_B_Unicode3 49600 42.27 45.60 40.31 13 BAYES_99 41481 16.45 38.14 3.76 14 XM_B_SpammyWords2 39862 26.29 36.65 20.23 15 HTML_FONT_LOW_CONTRAST 38350 30.50 35.26 27.72 16 XM_DK_Undo_02 38349 16.61 35.26 5.70 17 MIME_HTML_ONLY 37422 28.01 34.40 24.27 18 BAYES_50 35942 48.40 33.04 57.38 19 RCVD_IN_MSPIKE_H2 34343 32.02 31.57 32.27 20 XMSubLong 34217 25.89 31.46 22.64 21 TR_DCC_Bayes_99 31996 11.76 29.42 1.44 22 T_KAM_HTML_FONT_INVALID 30825 22.55 28.34 19.16 23 BAYES_999 30291 12.09 27.85 2.87 24 FVGT_m_MULTI_ODD 30044 25.00 27.62 23.46 25 TR_XM_DKIM_Undo 26991 10.38 24.81 1.94 26 DCC_CHECK_NEGATIVE 23120 43.49 21.26 56.49 27 DKIM_VALID_EF 22167 24.30 20.38 26.60 28 XM_Multi_Part_URI 22010 16.97 20.24 15.06 29 T_TM2_M_HEADER_IN_MSG 21505 24.02 19.77 26.51 30 TR_MAX_INTL_RELAY 18550 10.51 17.05 6.68 31 XM_B_SpammyWords3 17591 10.53 16.17 7.24 32 ALL_TRUSTED 16594 20.19 15.26 23.08 33 TR_XM_DK_Unsub 15886 13.04 14.60 12.12 34 UNPARSEABLE_RELAY 15625 12.27 14.37 11.04 35 XM_B_Unsub 14235 10.97 13.09 9.72 36 RELAYCOUNTRY_META 14158 7.12 13.02 3.68 37 TR_XM_BayesUnsub 13911 9.38 12.79 7.39 38 XMNoVowels 12611 5.76 11.59 2.34 39 TR_XM_SpammyWords2 12441 4.54 11.44 0.50 40 T_HTML_ATTACH 12180 6.63 11.20 3.96 41 BAYES_80 11088 6.44 10.19 4.24 42 TR_XMSubLong 10302 4.06 9.47 0.89 43 BOTNET_IPINHOSTNAME 10123 6.16 9.31 4.31 44 TR_XM_SpammyRelay 9935 4.84 9.13 2.33 45 BAYES_60 9878 12.29 9.08 14.17 46 LOTS_OF_MONEY 8887 5.44 8.17 3.84 47 XM_Body_Dirty_Words 8746 4.36 8.04 2.21 48 TR_XM_UnparsRelay 8681 3.91 7.98 1.53 49 FSL_BULK_SIG 8381 7.77 7.71 7.81 50 TR_XM_SpammyWords4 8018 4.18 7.37 2.32 51 HTML_IMAGE_RATIO_02 7900 5.89 7.26 5.08 52 XM_Evil_Numbers_Gen 7873 7.44 7.24 7.55 53 BOTNET 7187 3.74 6.61 2.06 54 XM_B_Phish_Phrases 7181 5.24 6.60 4.44 55 BAYES_95 7057 3.93 6.49 2.44 56 LotsOfNums_01 7046 6.59 6.48 6.66 57 RCVD_IN_BL_SPAMCOP_NET 6823 2.65 6.27 0.53 58 XM_UncommonTLD01 6789 5.41 6.24 4.92 59 XM_B_SpammyTLD 6781 4.07 6.23 2.81 60 XMSubMetaSx_00 5845 4.10 5.37 3.35 61 RELAYCOUNTRY_CA 5789 3.00 5.32 1.64 62 TR_XM_SPAMCOP 5484 2.08 5.04 0.35 63 MPART_ALT_DIFF 5333 4.57 4.90 4.37 64 XM_H_Long_From01 5221 4.81 4.80 4.81 65 XM_H_GMP 4981 4.88 4.58 5.05 66 T_XMDrugObfuBody_14 4817 2.74 4.43 1.76 67 UNTRUSTED_Relay 4813 2.64 4.42 1.59 68 XMStrtUSub 4261 5.11 3.92 5.81 69 XM_B_Investor 4158 2.09 3.82 1.08 70 MIME_HTML_MOSTLY 3894 2.87 3.58 2.46 71 DKIM_INVALID 3850 2.19 3.54 1.41 72 TM2_M_VERY_LONG_WORD 3777 2.24 3.47 1.51 73 SUSP_UTF8_WORD_SUBJ 3691 1.27 3.39 0.03 74 TR_XM_PhishingBody 3675 2.10 3.38 1.35 75 XM_B_PhoneNumber 3493 4.98 3.21 6.01 76 TooManyTo_001 3447 5.77 3.17 7.30 77 XMSexyCombo_05 3427 2.00 3.15 1.33 78 XM_B_SpammyWords4 3405 1.66 3.13 0.80 79 SUSP_UTF8_WORD_COMBO 3333 1.16 3.06 0.05 80 XM_OfRef6 3186 1.56 2.93 0.76 81 RCVD_IN_VALIDITY_SAFE 3020 4.56 2.78 5.60 82 MIME_HTML_ONLY_MULTI 3012 2.69 2.77 2.64 83 TR_XM_SpoofStaff 2978 1.28 2.74 0.43 84 T_XMHurry_00 2977 1.27 2.74 0.41 85 XMSpoofStaff2 2955 1.25 2.72 0.39 86 TR_XM_PSC1 2948 1.25 2.71 0.39 87 XM_H_SpoofStaff4 2946 1.27 2.71 0.43 88 HTML_IMAGE_RATIO_04 2920 3.20 2.68 3.51 89 XM_CamelCaseFrm001 2914 3.43 2.68 3.87 90 TR_XM_SpammyWords5 2761 1.57 2.54 1.01 91 HTML_IMAGE_RATIO_06 2720 2.29 2.50 2.17 92 RELAYCOUNTRY_AU 2597 1.19 2.39 0.49 93 XM_URI_RBL 2548 1.22 2.34 0.56 94 XMNumbers 2527 3.50 2.32 4.19 95 RCVD_IN_MSPIKE_H3 2477 3.42 2.28 4.08 96 RCVD_IN_MSPIKE_WL 2477 3.42 2.28 4.08 97 RCVD_IN_VALIDITY_RPBL 2418 0.93 2.22 0.17 98 USER_IN_DEF_DKIM_WL 2414 11.11 2.22 16.30 99 XM_SPF_SoftFail 2409 1.40 2.21 0.92 100 HTML_IMAGE_RATIO_08 2371 1.96 2.18 1.84 101 XMBody_17 2343 1.15 2.15 0.56 102 SpammyFromTLD_02 2268 1.01 2.09 0.38 103 FROM_EXCESS_BASE64 2249 2.15 2.07 2.20 104 RCVD_IN_VALIDITY_CERTIFIED 2221 3.56 2.04 4.44 105 T_TooManySym_01 2199 5.07 2.02 6.86 106 XMDiploma_00 2170 1.46 2.00 1.15 107 T_XMDrugObfuBody_00 2169 1.17 1.99 0.68 108 XM_B_Unsub2 2137 1.98 1.96 2.00 109 T_XMDrugObfuBody_08 2107 1.43 1.94 1.14 110 TR_Mismatch_TLD_02 2084 0.75 1.92 0.06 111 XMBody_78 1981 0.78 1.82 0.17 112 TM2_M_URI_OPT_OUT 1981 2.83 1.82 3.41 113 SpammyFromTLD_01 1977 1.04 1.82 0.58 114 XM_B_URI_Unicode 1930 1.59 1.77 1.47 115 XM_UB50 1907 1.23 1.75 0.92 116 TR_XM_NoHeaderRelay 1839 0.76 1.69 0.21 117 MAILING_LIST_MULTI 1798 1.91 1.65 2.06 118 XMBrknScrpt_02 1787 1.31 1.64 1.12 119 TR_XM_INV_DKIM 1762 0.64 1.62 0.07 120 XMStockSpam_06 1747 1.05 1.61 0.72 121 XMBdyGiftCard01 1732 1.04 1.59 0.72 122 NO_DNS_FOR_FROM 1687 0.84 1.55 0.42 123 XM_DK_Undo_01 1684 1.49 1.55 1.45 124 TR_XM_MaxWHORU 1666 0.79 1.53 0.35 125 XM_B_COPY_HTML 1612 1.19 1.48 1.01 126 HTML_TAG_BALANCE_BODY 1589 0.90 1.46 0.57 127 DKIM_ADSP_NXDOMAIN 1582 0.80 1.45 0.42 128 MIME_QP_LONG_LINE 1517 3.62 1.39 4.93 129 TR_Symld_Words 1495 1.23 1.37 1.14 130 SUBJ_ALL_CAPS 1484 0.89 1.36 0.61 131 TR_XM_PHPDW 1474 0.61 1.36 0.18 132 TR_XM_PHPForged 1456 0.61 1.34 0.18 133 DIET_1 1434 0.69 1.32 0.32 134 TR_XM_FormFill2 1422 0.60 1.31 0.19 135 XM_H_PHPOS 1400 0.58 1.29 0.16 136 XMPhish30 1396 0.83 1.28 0.56 137 T_FILL_THIS_FORM_SHORT 1385 0.81 1.27 0.54 138 XM_B_REG_HTML 1320 0.58 1.21 0.21 139 T_REMOTE_IMAGE 1318 2.62 1.21 3.44 140 LongTLD 1314 0.55 1.21 0.17 141 THIS_AD 1300 0.83 1.20 0.62 142 URI_HEX 1253 1.12 1.15 1.10 143 KHOP_HELO_FCRDNS 1224 1.13 1.13 1.14 144 T_STY_INVIS_DIRECT 1219 0.70 1.12 0.45 145 SH_BODYURI_REVERSE_CSS 1182 0.44 1.09 0.06 146 XM_H_Long_From02 1179 1.10 1.08 1.11 147 URIBL_CSS 1177 0.44 1.08 0.06 148 URIBL_CSS_A 1177 0.44 1.08 0.06 149 HTTPS_HTTP_MISMATCH 1173 0.75 1.08 0.57 150 BAYES_40 1153 2.83 1.06 3.87 151 XMSubMetaI_00 1144 0.86 1.05 0.74 152 XMReplyNow 1130 0.54 1.04 0.24 153 TM2_M_OBFU_COMMENT 1110 0.81 1.02 0.69 154 RDNS_DYNAMIC 1103 0.58 1.01 0.32 155 MPART_ALT_DIFF_COUNT 1091 0.64 1.00 0.43 156 URI_TRY_3LD 1076 0.76 0.99 0.63 157 PDS_RDNS_DYNAMIC_FP 1076 0.42 0.99 0.08 158 TM2_M_A_HREF_HREF 1067 0.45 0.98 0.14 159 TVD_RCVD_IP 1057 0.89 0.97 0.84 160 HTML_MIME_NO_HTML_TAG 1055 1.30 0.97 1.49 161 XM_ShortIntro_01 1024 0.55 0.94 0.32 162 XMSexyCombo_01 1006 0.45 0.92 0.17 163 TR_LOTS_OF_MONEY3 998 0.42 0.92 0.14 164 XM_ProductURIs 988 0.67 0.91 0.53 165 AC_BR_BONANZA 962 0.42 0.88 0.15 166 RELAYCOUNTRY_FR 942 0.42 0.87 0.16 167 XM_UB99 926 0.32 0.85 0.01 168 URI_NOVOWEL 925 0.99 0.85 1.07 169 ANY_BOUNCE_MESSAGE 924 4.53 0.85 6.69 170 BOUNCE_MESSAGE 924 4.53 0.85 6.69 171 XM_SendGrid 908 1.06 0.83 1.19 172 XM_B_SEO 903 0.47 0.83 0.25 173 HELO_DYNAMIC_SPLIT_IP 899 0.31 0.83 0.01 174 XMSubNoVowel 898 0.45 0.83 0.24 175 TR_XM_RelayPhish 877 0.33 0.81 0.06 176 XM_B_Phish66 867 0.44 0.80 0.23 177 SHOPIFY_IMG_NOT_RCVD_SFY 867 0.55 0.80 0.40 178 XM_HighProb1 860 0.30 0.79 0.01 179 XM_H_Undi_Recip 850 0.35 0.78 0.10 180 TR_Mismatch_TLD_01 849 0.49 0.78 0.32 181 RELAYCOUNTRY_SG 835 0.29 0.77 0.02 182 DKIM_ADSP_CUSTOM_MED 828 0.75 0.76 0.74 183 MIME_CHARSET_FARAWAY 828 0.54 0.76 0.41 184 PLING_QUERY 815 0.51 0.75 0.37 185 BAYES_20 803 2.02 0.74 2.77 186 XM_UB60 796 0.29 0.73 0.04 187 XMSubMetaSxObfu_03 788 0.49 0.72 0.35 188 XMGenDplmaNmb 786 0.54 0.72 0.44 189 TR_XM_Base64_M1 762 0.61 0.70 0.55 190 TR_MetaPhish_Combo_01 750 1.42 0.69 1.85 191 T_MONEY_PERCENT 741 0.30 0.68 0.07 192 TR_LOTS_OF_MONEY2 741 0.30 0.68 0.07 193 RCVD_IN_PBL 739 0.56 0.68 0.48 194 FROM_SUSPICIOUS_NTLD 734 0.27 0.67 0.03 195 XM_OfRef7 732 0.34 0.67 0.14 196 HTML_TEXT_INVISIBLE_STYLE 729 0.39 0.67 0.23 197 XM_GoogleGroups 729 0.92 0.67 1.06 198 XM_DIRTYINTL 721 0.33 0.66 0.13 199 J_POPCORN_W_RD 707 0.44 0.65 0.32 200 HTML_FONT_FACE_BAD 706 0.52 0.65 0.45 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 157785 89.05 96.18 84.88 2 RELAYCOUNTRY_US 136114 73.34 73.54 73.22 3 XM_B_Unicode 132917 77.04 86.50 71.50 4 DKIM_SIGNED 129855 72.76 77.72 69.85 5 XM_DK_Pass 127994 71.03 74.77 68.85 6 DKIM_VALID 127241 70.56 74.18 68.45 7 DKIM_VALID_AU 108141 59.84 62.69 58.17 8 BAYES_50 106664 48.40 33.04 57.38 9 DCC_CHECK_NEGATIVE 105020 43.49 21.26 56.49 10 XMListUnsubscribeExists 88715 53.78 64.13 47.72 11 DCC_CHECK 80844 56.37 78.38 43.49 12 XM_B_SpammyWords 79685 49.44 60.69 42.86 13 XM_B_Unicode3 74943 42.27 45.60 40.31 14 RCVD_IN_MSPIKE_H2 59996 32.02 31.57 32.27 15 HTML_FONT_LOW_CONTRAST 51527 30.50 35.26 27.72 16 LOC_TINY_FONT_1 49835 34.17 46.77 26.81 17 DKIM_VALID_EF 49446 24.30 20.38 26.60 18 T_TM2_M_HEADER_IN_MSG 49277 24.02 19.77 26.51 19 MIME_HTML_ONLY 45115 28.01 34.40 24.27 20 FVGT_m_MULTI_ODD 43620 25.00 27.62 23.46 21 ALL_TRUSTED 42914 20.19 15.26 23.08 22 XMSubLong 42080 25.89 31.46 22.64 23 XM_B_SpammyWords2 37602 26.29 36.65 20.23 24 T_KAM_HTML_FONT_INVALID 35612 22.55 28.34 19.16 25 USER_IN_DEF_DKIM_WL 30309 11.11 2.22 16.30 26 XM_Multi_Part_URI 28003 16.97 20.24 15.06 27 BAYES_60 26348 12.29 9.08 14.17 28 TR_XM_DK_Unsub 22537 13.04 14.60 12.12 29 UNPARSEABLE_RELAY 20529 12.27 14.37 11.04 30 BAYES_00 18117 6.31 0.45 9.75 31 XM_B_Unsub 18078 10.97 13.09 9.72 32 FSL_BULK_SIG 14520 7.77 7.71 7.81 33 XM_DKIMWhitelistDomains 14098 4.79 0.01 7.58 34 XM_Evil_Numbers_Gen 14041 7.44 7.24 7.55 35 TR_XM_DK_Bayes 13977 4.88 0.37 7.52 36 TR_XM_DK_Bayes1 13900 4.85 0.36 7.48 37 TR_XM_BayesUnsub 13742 9.38 12.79 7.39 38 TooManyTo_001 13562 5.77 3.17 7.30 39 XM_B_SpammyWords3 13451 10.53 16.17 7.24 40 T_TooManySym_01 12750 5.07 2.02 6.86 41 ANY_BOUNCE_MESSAGE 12431 4.53 0.85 6.69 42 BOUNCE_MESSAGE 12431 4.53 0.85 6.69 43 TR_MAX_INTL_RELAY 12425 10.51 17.05 6.68 44 LotsOfNums_01 12382 6.59 6.48 6.66 45 TR_XM_DK_Bayes2 12276 4.23 0.17 6.60 46 XM_B_PhoneNumber 11172 4.98 3.21 6.01 47 XMStrtUSub 10804 5.11 3.92 5.81 48 XM_DK_Undo_02 10603 16.61 35.26 5.70 49 RCVD_IN_VALIDITY_SAFE 10404 4.56 2.78 5.60 50 HTML_IMAGE_RATIO_02 9451 5.89 7.26 5.08 51 XM_H_GMP 9389 4.88 4.58 5.05 52 IN_ZIMBRA_NJ_WHITELIST 9262 3.16 0.05 4.98 53 MIME_QP_LONG_LINE 9158 3.62 1.39 4.93 54 XM_UncommonTLD01 9139 5.41 6.24 4.92 55 XM_H_Long_From01 8945 4.81 4.80 4.81 56 RCVD_IN_VALIDITY_CERTIFIED 8255 3.56 2.04 4.44 57 XM_B_Phish_Phrases 8255 5.24 6.60 4.44 58 MPART_ALT_DIFF 8133 4.57 4.90 4.37 59 BOTNET_IPINHOSTNAME 8020 6.16 9.31 4.31 60 BAYES_80 7877 6.44 10.19 4.24 61 XMNumbers 7792 3.50 2.32 4.19 62 RCVD_IN_MSPIKE_H3 7589 3.42 2.28 4.08 63 RCVD_IN_MSPIKE_WL 7589 3.42 2.28 4.08 64 T_HTML_ATTACH 7366 6.63 11.20 3.96 65 BAYES_40 7199 2.83 1.06 3.87 66 XM_CamelCaseFrm001 7186 3.43 2.68 3.87 67 LOTS_OF_MONEY 7137 5.44 8.17 3.84 68 BAYES_99 6997 16.45 38.14 3.76 69 T_TooManySym_02 6973 2.55 0.50 3.75 70 INVALID_MSGID 6943 2.44 0.23 3.73 71 RELAYCOUNTRY_META 6836 7.12 13.02 3.68 72 HTML_IMAGE_RATIO_04 6522 3.20 2.68 3.51 73 T_REMOTE_IMAGE 6388 2.62 1.21 3.44 74 TM2_M_URI_OPT_OUT 6345 2.83 1.82 3.41 75 XMSubMetaSx_00 6229 4.10 5.37 3.35 76 TO_MALFORMED 6210 2.12 0.04 3.34 77 BAYES_999 5329 12.09 27.85 2.87 78 XM_B_SpammyTLD 5217 4.07 6.23 2.81 79 BAYES_20 5151 2.02 0.74 2.77 80 MIME_HTML_ONLY_MULTI 4912 2.69 2.77 2.64 81 XM_PDF 4730 1.69 0.22 2.54 82 MIME_HTML_MOSTLY 4566 2.87 3.58 2.46 83 BAYES_95 4533 3.93 6.49 2.44 84 XMNoVowels 4355 5.76 11.59 2.34 85 TR_XM_SpammyRelay 4338 4.84 9.13 2.33 86 TR_XM_SpammyWords4 4307 4.18 7.37 2.32 87 RCVD_IN_IADB_LISTED 4211 1.63 0.53 2.27 88 XM_Body_Dirty_Words 4108 4.36 8.04 2.21 89 FROM_EXCESS_BASE64 4088 2.15 2.07 2.20 90 HTML_IMAGE_RATIO_06 4036 2.29 2.50 2.17 91 TooManyTo_002 3830 1.53 0.62 2.06 92 BOTNET 3829 3.74 6.61 2.06 93 MAILING_LIST_MULTI 3826 1.91 1.65 2.06 94 RCVD_IN_IADB_SPF 3774 1.45 0.45 2.03 95 XMGappySubj_01 3730 1.30 0.08 2.01 96 XM_B_Unsub2 3712 1.98 1.96 2.00 97 TR_XM_DKIM_Undo 3606 10.38 24.81 1.94 98 RCVD_IN_IADB_SENDERID 3448 1.33 0.42 1.85 99 TR_MetaPhish_Combo_01 3447 1.42 0.69 1.85 100 HTML_IMAGE_RATIO_08 3414 1.96 2.18 1.84 101 RCVD_IN_IADB_DK 3388 1.31 0.43 1.82 102 TVD_SPACE_RATIO 3303 1.16 0.11 1.78 103 T_XMDrugObfuBody_14 3265 2.74 4.43 1.76 104 IN_HORDE_ADDRESS_BOOK 3133 1.10 0.09 1.69 105 RELAYCOUNTRY_CA 3043 3.00 5.32 1.64 106 BAYES_05 3012 1.19 0.45 1.62 107 XMGappySubj_02 3004 1.03 0.04 1.62 108 UNTRUSTED_Relay 2962 2.64 4.42 1.59 109 TR_XM_UnparsRelay 2853 3.91 7.98 1.53 110 TM2_M_VERY_LONG_WORD 2816 2.24 3.47 1.51 111 RCVD_IN_IADB_VOUCHED 2796 1.07 0.32 1.50 112 HTML_MIME_NO_HTML_TAG 2763 1.30 0.97 1.49 113 XM_B_URI_Unicode 2741 1.59 1.77 1.47 114 XM_DK_Undo_01 2695 1.49 1.55 1.45 115 TR_DCC_Bayes_99 2668 11.76 29.42 1.44 116 DKIM_INVALID 2614 2.19 3.54 1.41 117 TR_XM_PhishingBody 2505 2.10 3.38 1.35 118 XMSexyCombo_05 2471 2.00 3.15 1.33 119 FROM_GOV_DKIM_AU 2429 0.85 0.08 1.31 120 T_TVD_MIME_NO_HEADERS 2356 0.81 0.04 1.27 121 T_TooManySym_03 2344 0.86 0.16 1.26 122 XMLngstWrd_00 2309 0.94 0.42 1.24 123 XM_SendGrid 2216 1.06 0.83 1.19 124 XMDiploma_00 2129 1.46 2.00 1.15 125 TR_Symld_Words 2120 1.23 1.37 1.14 126 KHOP_HELO_FCRDNS 2118 1.13 1.13 1.14 127 T_XMDrugObfuBody_08 2110 1.43 1.94 1.14 128 XMBrknScrpt_02 2084 1.31 1.64 1.12 129 XM_H_Long_From02 2056 1.10 1.08 1.11 130 URI_HEX 2044 1.12 1.15 1.10 131 XM_B_Investor 2005 2.09 3.82 1.08 132 URI_NOVOWEL 1993 0.99 0.85 1.07 133 XM_GoogleGroups 1968 0.92 0.67 1.06 134 RCVD_IN_IADB_OPTIN 1960 0.74 0.19 1.05 135 XM_B_COPY_HTML 1881 1.19 1.48 1.01 136 TR_XM_SpammyWords5 1878 1.57 2.54 1.01 137 XM_B_FormFill 1843 0.63 0.01 0.99 138 HTML_EXTRA_CLOSE 1841 0.67 0.13 0.99 139 XM_SPF_SoftFail 1715 1.40 2.21 0.92 140 XM_UB50 1709 1.23 1.75 0.92 141 XMBody_95 1709 0.61 0.08 0.92 142 XM_B_DNDMA 1676 0.79 0.59 0.90 143 TR_XMSubLong 1659 4.06 9.47 0.89 144 TVD_RCVD_IP 1553 0.89 0.97 0.84 145 TooManyTo_003 1550 0.74 0.58 0.83 146 TR_XM_DK_SendGrid 1517 0.75 0.64 0.82 147 XM_B_SpammyWords4 1482 1.66 3.13 0.80 148 XM_OfRef6 1420 1.56 2.93 0.76 149 XMSubMetaI_00 1384 0.86 1.05 0.74 150 DKIM_ADSP_CUSTOM_MED 1369 0.75 0.76 0.74 151 XMStockSpam_06 1343 1.05 1.61 0.72 152 XMBdyGiftCard01 1337 1.04 1.59 0.72 153 TM2_M_OBFU_COMMENT 1287 0.81 1.02 0.69 154 T_XMDrugObfuBody_00 1273 1.17 1.99 0.68 155 TooManyTo_004 1179 0.60 0.55 0.63 156 XMClaimOffer 1170 0.51 0.30 0.63 157 URI_TRY_3LD 1164 0.76 0.99 0.63 158 THIS_AD 1148 0.83 1.20 0.62 159 XMLngstWrd_01 1147 0.53 0.39 0.62 160 SUBJ_ALL_CAPS 1136 0.89 1.36 0.61 161 SpammyFromTLD_01 1074 1.04 1.82 0.58 162 HTML_TAG_BALANCE_BODY 1060 0.90 1.46 0.57 163 HTTPS_HTTP_MISMATCH 1051 0.75 1.08 0.57 164 XMPhish30 1050 0.83 1.28 0.56 165 XMBody_17 1036 1.15 2.15 0.56 166 XM_URI_RBL 1033 1.22 2.34 0.56 167 TR_XM_Base64_M1 1026 0.61 0.70 0.55 168 TooManyTo_005 1010 0.54 0.54 0.54 169 T_FILL_THIS_FORM_SHORT 1010 0.81 1.27 0.54 170 XMBSHREFv2 996 0.42 0.23 0.54 171 XM_ProductURIs 983 0.67 0.91 0.53 172 RCVD_IN_BL_SPAMCOP_NET 979 2.65 6.27 0.53 173 XM_H_PHPMailer 961 0.52 0.52 0.52 174 XMLngstWrd_02 948 0.45 0.36 0.51 175 NML_ADSP_CUSTOM_MED 941 0.55 0.64 0.51 176 TR_XM_SpammyWords2 926 4.54 11.44 0.50 177 T_TooManySym_04 919 0.32 0.03 0.49 178 RELAYCOUNTRY_AU 919 1.19 2.39 0.49 179 XMSubMetaD_03 918 0.39 0.21 0.49 180 RCVD_IN_PBL 897 0.56 0.68 0.48 181 SHORT_URI_3 875 0.34 0.11 0.47 182 FORGED_GMAIL_RCVD 854 0.51 0.59 0.46 183 T_STY_INVIS_DIRECT 844 0.70 1.12 0.45 184 HTML_FONT_FACE_BAD 833 0.52 0.65 0.45 185 XMCapTrack 816 0.40 0.33 0.44 186 XMGenDplmaNmb 815 0.54 0.72 0.44 187 TR_XM_SpoofStaff 803 1.28 2.74 0.43 188 MPART_ALT_DIFF_COUNT 799 0.64 1.00 0.43 189 AD_PREFS 792 0.31 0.10 0.43 190 XM_H_SpoofStaff4 792 1.27 2.71 0.43 191 DKIM_ADSP_NXDOMAIN 783 0.80 1.45 0.42 192 NO_DNS_FOR_FROM 779 0.84 1.55 0.42 193 T_XMHurry_00 764 1.27 2.74 0.41 194 MIME_CHARSET_FARAWAY 763 0.54 0.76 0.41 195 XMSlimDrugH 758 0.45 0.53 0.41 196 XM_S_SubURI 754 0.27 0.04 0.41 197 SHOPIFY_IMG_NOT_RCVD_SFY 748 0.55 0.80 0.40 198 XMSpoofStaff2 730 1.25 2.72 0.39 199 TR_XM_PSC1 724 1.25 2.71 0.39 200 SpammyFromTLD_02 713 1.01 2.09 0.38 ----------------------------------------------------------------------