Email: 262079 Autolearn: 0 AvgScore: 5.46 AvgScanTime: 1.32 sec Spam: 96921 Autolearn: 0 AvgScore: 14.44 AvgScanTime: 1.37 sec Ham: 165158 Autolearn: 0 AvgScore: 0.19 AvgScanTime: 1.29 sec Time Spent Running SA: 95.77 hours Time Spent Processing Spam: 36.77 hours Time Spent Processing Ham: 59.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91493 87.04 94.40 82.72 2 DKIM_SIGNED 86787 81.26 89.54 76.39 3 XM_DK_Pass 83483 79.32 86.14 75.33 4 RELAYCOUNTRY_US 83202 82.35 85.85 80.30 5 DKIM_VALID 82846 78.74 85.48 74.78 6 XM_B_Unicode 82523 75.52 85.14 69.87 7 DCC_CHECK 77234 59.74 79.69 48.04 8 XMListUnsubscribeExists 71452 60.29 73.72 52.40 9 XM_B_SpammyWords 69822 55.76 72.04 46.20 10 DKIM_VALID_AU 67978 66.20 70.14 63.89 11 LOC_TINY_FONT_1 51966 39.37 53.62 31.00 12 XM_B_Unicode3 48649 47.28 50.19 45.57 13 XM_B_SpammyWords2 43441 30.18 44.82 21.58 14 XM_DK_Undo_02 42308 20.23 43.65 6.49 15 HTML_FONT_LOW_CONTRAST 38676 33.75 39.90 30.14 16 RCVD_IN_MSPIKE_H2 38556 37.10 39.78 35.53 17 BAYES_50 35458 50.86 36.58 59.24 18 BAYES_99 34293 15.95 35.38 4.54 19 FVGT_m_MULTI_ODD 32044 28.02 33.06 25.06 20 T_KAM_HTML_FONT_INVALID 30559 24.24 31.53 19.95 21 TR_XM_DKIM_Undo 30270 13.16 31.23 2.55 22 TR_DCC_Bayes_99 26612 11.34 27.46 1.89 23 BAYES_999 26114 12.13 26.94 3.44 24 XM_Multi_Part_URI 25989 20.14 26.81 16.22 25 DKIM_VALID_EF 25214 28.05 26.02 29.24 26 MIME_HTML_ONLY 22638 22.74 23.36 22.38 27 XMSubLong 22205 23.78 22.91 24.29 28 DCC_CHECK_NEGATIVE 19238 40.06 19.85 51.92 29 T_TM2_M_HEADER_IN_MSG 18533 21.89 19.12 23.52 30 TR_XM_DK_Unsub 18099 15.53 18.67 13.69 31 UNPARSEABLE_RELAY 17493 14.00 18.05 11.63 32 XM_B_SpammyWords3 17289 10.77 17.84 6.62 33 TR_MAX_INTL_RELAY 16543 10.08 17.07 5.98 34 TR_XM_SpammyWords2 14908 6.02 15.38 0.52 35 XM_B_Unsub 14339 11.71 14.79 9.90 36 TR_XM_BayesUnsub 13933 9.78 14.38 7.08 37 RELAYCOUNTRY_META 13561 7.64 13.99 3.91 38 LOTS_OF_MONEY 12061 7.69 12.44 4.90 39 RCVD_IN_BL_SPAMCOP_NET 11332 5.17 11.69 1.35 40 XM_Body_Dirty_Words 10930 5.71 11.28 2.44 41 TR_XM_SpammyWords4 10590 5.91 10.93 2.97 42 TR_XM_SPAMCOP 9952 4.36 10.27 0.89 43 TR_XM_SpammyRelay 9844 5.14 10.16 2.19 44 BOTNET_IPINHOSTNAME 9435 5.90 9.73 3.65 45 BAYES_80 9217 5.73 9.51 3.51 46 TR_XM_UnparsRelay 9205 4.62 9.50 1.75 47 BOTNET 9175 4.41 9.47 1.43 48 FSL_BULK_SIG 8972 9.84 9.26 10.19 49 BAYES_60 8464 9.67 8.73 10.22 50 XM_Evil_Numbers_Gen 7730 9.10 7.98 9.76 51 HTML_IMAGE_RATIO_02 7714 6.74 7.96 6.02 52 LotsOfNums_01 7435 7.66 7.67 7.66 53 XMSubMetaSx_00 7225 6.84 7.45 6.48 54 XM_H_GMP 6482 6.26 6.69 6.01 55 XM_B_Phish_Phrases 6264 5.48 6.46 4.91 56 UNTRUSTED_Relay 6093 3.30 6.29 1.54 57 BAYES_95 5697 3.73 5.88 2.47 58 RCVD_IN_VALIDITY_RPBL 5600 2.25 5.78 0.19 59 XM_UncommonTLD01 5544 5.44 5.72 5.27 60 XM_H_Long_From01 5396 5.75 5.57 5.85 61 MPART_ALT_DIFF 5308 5.29 5.48 5.18 62 T_XMDrugObfuBody_14 5202 2.86 5.37 1.39 63 XMStrtUSub 4932 5.86 5.09 6.32 64 RELAYCOUNTRY_CA 4906 3.08 5.06 1.91 65 XM_OfRef6 4668 2.42 4.82 1.01 66 XM_B_SpammyTLD 4578 3.17 4.72 2.25 67 XMSexyCombo_05 4561 3.58 4.71 2.92 68 XM_B_Investor 4500 2.57 4.64 1.35 69 TR_XM_SpammyWords5 3977 2.11 4.10 0.93 70 DKIM_INVALID 3941 2.52 4.07 1.61 71 SUSP_UTF8_WORD_SUBJ 3883 1.49 4.01 0.01 72 HTML_IMAGE_RATIO_06 3815 3.26 3.94 2.87 73 TR_XM_PhishingBody 3784 2.62 3.90 1.86 74 TooManyTo_001 3756 5.55 3.88 6.54 75 TM2_M_VERY_LONG_WORD 3716 2.80 3.83 2.20 76 SUSP_UTF8_WORD_COMBO 3688 1.42 3.81 0.03 77 HTML_IMAGE_RATIO_04 3660 4.42 3.78 4.80 78 XM_B_PhoneNumber 3581 5.74 3.69 6.93 79 RCVD_IN_MSPIKE_WL 3307 4.43 3.41 5.02 80 RCVD_IN_MSPIKE_H3 3307 4.43 3.41 5.02 81 XM_CamelCaseFrm001 3221 2.68 3.32 2.30 82 MIME_HTML_MOSTLY 3220 2.81 3.32 2.51 83 MIME_HTML_ONLY_MULTI 3087 3.14 3.19 3.12 84 SUBJ_ALL_CAPS 3050 1.57 3.15 0.64 85 XMDiploma_00 2976 2.20 3.07 1.69 86 XMNumbers 2894 3.14 2.99 3.24 87 RCVD_IN_VALIDITY_SAFE 2810 5.42 2.90 6.90 88 T_XMDrugObfuBody_00 2784 1.52 2.87 0.73 89 BOTNET_NORDNS 2626 1.01 2.71 0.01 90 XM_SPF_SoftFail 2606 1.74 2.69 1.18 91 FROM_EXCESS_BASE64 2508 2.43 2.59 2.33 92 HTML_IMAGE_RATIO_08 2498 2.31 2.58 2.15 93 FILL_THIS_FORM 2493 1.22 2.57 0.43 94 T_XMHurry_00 2450 1.36 2.53 0.67 95 XMBody_78 2446 1.08 2.52 0.23 96 DKIM_ADSP_NXDOMAIN 2352 1.19 2.43 0.47 97 XM_OfRef7 2323 1.03 2.40 0.22 98 RELAYCOUNTRY_AU 2323 1.16 2.40 0.43 99 XMBrknScrpt_02 2177 1.65 2.25 1.30 100 USER_IN_DEF_DKIM_WL 2119 12.58 2.19 18.68 101 XM_B_SpammyWords4 2111 1.45 2.18 1.02 102 XM_URI_RBL 2111 1.10 2.18 0.46 103 XM_UB99 2098 0.80 2.16 0.01 104 RCVD_IN_PBL 2077 1.14 2.14 0.56 105 T_TooManySym_01 2059 5.99 2.12 8.25 106 RCVD_IN_VALIDITY_CERTIFIED 2026 4.07 2.09 5.23 107 NO_DNS_FOR_FROM 2024 1.07 2.09 0.47 108 TR_XM_MaxWHORU 2005 1.01 2.07 0.40 109 XMStockSpam_06 1994 1.93 2.06 1.86 110 XMBody_17 1976 1.24 2.04 0.77 111 XM_UB50 1940 1.26 2.00 0.82 112 T_XMDrugObfuBody_08 1934 1.43 2.00 1.09 113 MONEY_FORM 1869 0.72 1.93 0.01 114 FILL_THIS_FORM_LONG 1858 0.82 1.92 0.18 115 XM_DK_Undo_01 1856 1.82 1.91 1.76 116 XM_B_Unsub2 1837 1.48 1.90 1.24 117 TM2_M_URI_OPT_OUT 1795 1.97 1.85 2.04 118 T_REMOTE_IMAGE 1784 2.92 1.84 3.55 119 XM_B_COPY_HTML 1734 1.40 1.79 1.17 120 MAILING_LIST_MULTI 1685 2.09 1.74 2.29 121 TR_Caps_n_Bayes_99 1665 0.64 1.72 0.01 122 TR_XM_PHPDW 1655 0.76 1.71 0.21 123 XM_B_URI_Unicode 1655 1.59 1.71 1.52 124 TR_XM_PHPForged 1619 0.75 1.67 0.21 125 MONEY_FRAUD_8 1615 0.62 1.67 0.00 126 SpammyFromTLD_01 1591 0.88 1.64 0.44 127 TR_XM_FormFill2 1585 0.74 1.64 0.21 128 T_FILL_THIS_FORM_SHORT 1580 1.03 1.63 0.68 129 HK_SCAM 1558 0.60 1.61 0.01 130 XM_H_Undi_Recip 1549 0.70 1.60 0.18 131 TR_XM_NoHeaderRelay 1547 0.73 1.60 0.21 132 XM_H_PHPOS 1537 0.71 1.59 0.19 133 ADVANCE_FEE_5_NEW_FRM_MNY 1535 0.59 1.58 0.00 134 MONEY_ATM_CARD 1527 0.58 1.58 0.00 135 XMPhish30 1521 1.10 1.57 0.82 136 SpammyFromTLD_02 1502 0.71 1.55 0.22 137 XMBdyGiftCard01 1493 1.07 1.54 0.79 138 DIET_1 1472 1.00 1.52 0.70 139 SHOPIFY_IMG_NOT_RCVD_SFY 1471 0.71 1.52 0.24 140 RELAYCOUNTRY_CN 1469 0.58 1.52 0.03 141 TR_XM_INV_DKIM 1454 0.61 1.50 0.08 142 XM_H_Long_From02 1450 1.25 1.50 1.10 143 ALL_TRUSTED 1430 10.59 1.48 15.94 144 RELAYCOUNTRY_NG 1414 0.54 1.46 0.00 145 TR_XM_Undi_Recip19 1406 0.60 1.45 0.10 146 XM_ProductURIs 1399 0.90 1.44 0.58 147 XMReplyNow 1398 0.71 1.44 0.28 148 T_STY_INVIS_DIRECT 1396 0.74 1.44 0.33 149 URI_HEX 1377 1.13 1.42 0.95 150 MIME_QP_LONG_LINE 1323 2.79 1.37 3.62 151 BAYES_40 1287 3.30 1.33 4.45 152 HTML_MIME_NO_HTML_TAG 1287 1.60 1.33 1.75 153 XMSubMetaI_00 1195 1.08 1.23 0.99 154 TR_XM_Undi_RecipCombo2 1185 0.45 1.22 0.00 155 HTML_TAG_BALANCE_BODY 1184 0.90 1.22 0.71 156 KHOP_HELO_FCRDNS 1184 1.30 1.22 1.35 157 XMSexyCombo_01 1183 0.56 1.22 0.17 158 TM2_M_OBFU_COMMENT 1160 0.82 1.20 0.60 159 THIS_AD 1110 0.79 1.15 0.57 160 URI_TRY_3LD 1106 0.80 1.14 0.59 161 DKIM_ADSP_CUSTOM_MED 1095 1.17 1.13 1.19 162 XMSubMetaSxObfu_03 1067 1.22 1.10 1.30 163 HTTPS_HTTP_MISMATCH 1044 0.67 1.08 0.43 164 MPART_ALT_DIFF_COUNT 990 0.71 1.02 0.53 165 XM_SendGrid 985 1.18 1.02 1.28 166 XM_UB999 981 0.38 1.01 0.00 167 NML_ADSP_CUSTOM_MED 957 0.95 0.99 0.92 168 FROM_SUSPICIOUS_NTLD 957 0.39 0.99 0.04 169 XM_B_Phish66 934 0.58 0.96 0.36 170 TR_LOTS_OF_MONEY3 920 0.52 0.95 0.26 171 TR_XM_Undi_Recip2 918 0.35 0.95 0.01 172 TR_XM_Undi_RecipCombo3 914 0.35 0.94 0.00 173 AC_BR_BONANZA 903 0.45 0.93 0.17 174 XM_B_REG_HTML 902 0.49 0.93 0.24 175 XM_DIRTYINTL 897 0.39 0.93 0.07 176 XMMoneyMeta_00 895 0.51 0.92 0.27 177 PLING_QUERY 880 0.85 0.91 0.81 178 FORGED_GMAIL_RCVD 878 0.88 0.91 0.86 179 FROM_SUSPICIOUS_NTLD_FP 878 0.36 0.91 0.03 180 RDNS_DYNAMIC 875 0.55 0.90 0.35 181 J_POPCORN_W_RD 867 0.56 0.89 0.37 182 BAYES_20 867 2.25 0.89 3.04 183 LongTLD 866 0.56 0.89 0.36 184 URI_NOVOWEL 865 1.11 0.89 1.24 185 TR_XM_Spammywords 859 0.41 0.89 0.13 186 PDS_RDNS_DYNAMIC_FP 859 0.37 0.89 0.07 187 XM_S_SpammyWords 859 0.41 0.89 0.13 188 XM_H_PHPMailer 850 0.72 0.88 0.62 189 TVD_RCVD_IP 846 0.89 0.87 0.90 190 TooManyTo_002 841 1.94 0.87 2.57 191 XM_HighProb1 831 0.32 0.86 0.01 192 TR_XM_Undi_Recip11 818 0.35 0.84 0.06 193 XM_UB60 805 0.33 0.83 0.04 194 HOSTED_IMG_MULTI_PUB_01 803 0.33 0.83 0.03 195 TR_Mismatch_TLD_01 797 0.47 0.82 0.27 196 XMGenDplmaNmb 794 0.60 0.82 0.48 197 TR_XM_Base64_M1 791 0.74 0.82 0.70 198 AC_HTML_NONSENSE_TAGS 790 0.35 0.82 0.07 199 ANY_BOUNCE_MESSAGE 788 3.27 0.81 4.72 200 BOUNCE_MESSAGE 787 3.27 0.81 4.72 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136615 87.04 94.40 82.72 2 RELAYCOUNTRY_US 132618 82.35 85.85 80.30 3 DKIM_SIGNED 126171 81.26 89.54 76.39 4 XM_DK_Pass 124406 79.32 86.14 75.33 5 DKIM_VALID 123505 78.74 85.48 74.78 6 XM_B_Unicode 115391 75.52 85.14 69.87 7 DKIM_VALID_AU 105523 66.20 70.14 63.89 8 BAYES_50 97842 50.86 36.58 59.24 9 XMListUnsubscribeExists 86545 60.29 73.72 52.40 10 DCC_CHECK_NEGATIVE 85754 40.06 19.85 51.92 11 DCC_CHECK 79345 59.74 79.69 48.04 12 XM_B_SpammyWords 76311 55.76 72.04 46.20 13 XM_B_Unicode3 75261 47.28 50.19 45.57 14 RCVD_IN_MSPIKE_H2 58681 37.10 39.78 35.53 15 LOC_TINY_FONT_1 51206 39.37 53.62 31.00 16 HTML_FONT_LOW_CONTRAST 49782 33.75 39.90 30.14 17 DKIM_VALID_EF 48290 28.05 26.02 29.24 18 FVGT_m_MULTI_ODD 41395 28.02 33.06 25.06 19 XMSubLong 40125 23.78 22.91 24.29 20 T_TM2_M_HEADER_IN_MSG 38849 21.89 19.12 23.52 21 MIME_HTML_ONLY 36960 22.74 23.36 22.38 22 XM_B_SpammyWords2 35646 30.18 44.82 21.58 23 T_KAM_HTML_FONT_INVALID 32956 24.24 31.53 19.95 24 USER_IN_DEF_DKIM_WL 30846 12.58 2.19 18.68 25 XM_Multi_Part_URI 26796 20.14 26.81 16.22 26 ALL_TRUSTED 26334 10.59 1.48 15.94 27 TR_XM_DK_Unsub 22612 15.53 18.67 13.69 28 UNPARSEABLE_RELAY 19203 14.00 18.05 11.63 29 BAYES_00 17689 7.02 0.73 10.71 30 BAYES_60 16883 9.67 8.73 10.22 31 FSL_BULK_SIG 16828 9.84 9.26 10.19 32 XM_B_Unsub 16356 11.71 14.79 9.90 33 XM_Evil_Numbers_Gen 16120 9.10 7.98 9.76 34 XM_DKIMWhitelistDomains 15959 6.14 0.12 9.66 35 T_TooManySym_01 13627 5.99 2.12 8.25 36 TR_XM_DK_Bayes 13600 5.42 0.61 8.23 37 TR_XM_DK_Bayes1 13487 5.37 0.61 8.17 38 LotsOfNums_01 12647 7.66 7.67 7.66 39 TR_XM_DK_Bayes2 11859 4.68 0.41 7.18 40 TR_XM_BayesUnsub 11698 9.78 14.38 7.08 41 XM_B_PhoneNumber 11452 5.74 3.69 6.93 42 RCVD_IN_VALIDITY_SAFE 11391 5.42 2.90 6.90 43 XM_B_SpammyWords3 10935 10.77 17.84 6.62 44 TooManyTo_001 10801 5.55 3.88 6.54 45 XM_DK_Undo_02 10719 20.23 43.65 6.49 46 XMSubMetaSx_00 10708 6.84 7.45 6.48 47 XMStrtUSub 10438 5.86 5.09 6.32 48 HTML_IMAGE_RATIO_02 9946 6.74 7.96 6.02 49 XM_H_GMP 9924 6.26 6.69 6.01 50 TR_MAX_INTL_RELAY 9871 10.08 17.07 5.98 51 XM_H_Long_From01 9663 5.75 5.57 5.85 52 IN_ZIMBRA_NJ_WHITELIST 9565 3.68 0.07 5.79 53 XM_UncommonTLD01 8711 5.44 5.72 5.27 54 RCVD_IN_VALIDITY_CERTIFIED 8646 4.07 2.09 5.23 55 MPART_ALT_DIFF 8552 5.29 5.48 5.18 56 RCVD_IN_MSPIKE_WL 8296 4.43 3.41 5.02 57 RCVD_IN_MSPIKE_H3 8296 4.43 3.41 5.02 58 XM_B_Phish_Phrases 8104 5.48 6.46 4.91 59 LOTS_OF_MONEY 8092 7.69 12.44 4.90 60 HTML_IMAGE_RATIO_04 7927 4.42 3.78 4.80 61 ANY_BOUNCE_MESSAGE 7795 3.27 0.81 4.72 62 BOUNCE_MESSAGE 7795 3.27 0.81 4.72 63 BAYES_99 7505 15.95 35.38 4.54 64 BAYES_40 7349 3.30 1.33 4.45 65 INVALID_MSGID 7049 2.75 0.17 4.27 66 T_TooManySym_02 6771 2.79 0.56 4.10 67 RELAYCOUNTRY_META 6457 7.64 13.99 3.91 68 TO_MALFORMED 6199 2.38 0.03 3.75 69 BOTNET_IPINHOSTNAME 6034 5.90 9.73 3.65 70 MIME_QP_LONG_LINE 5977 2.79 1.37 3.62 71 T_REMOTE_IMAGE 5870 2.92 1.84 3.55 72 BAYES_80 5789 5.73 9.51 3.51 73 BAYES_999 5680 12.13 26.94 3.44 74 XMNumbers 5347 3.14 2.99 3.24 75 MIME_HTML_ONLY_MULTI 5150 3.14 3.19 3.12 76 BAYES_20 5029 2.25 0.89 3.04 77 TR_XM_SpammyWords4 4901 5.91 10.93 2.97 78 XMSexyCombo_05 4820 3.58 4.71 2.92 79 HTML_IMAGE_RATIO_06 4732 3.26 3.94 2.87 80 XM_PDF 4549 1.90 0.43 2.75 81 RCVD_IN_IADB_LISTED 4254 1.87 0.66 2.58 82 TooManyTo_002 4241 1.94 0.87 2.57 83 TR_XM_DKIM_Undo 4209 13.16 31.23 2.55 84 MIME_HTML_MOSTLY 4149 2.81 3.32 2.51 85 BAYES_95 4077 3.73 5.88 2.47 86 XM_Body_Dirty_Words 4033 5.71 11.28 2.44 87 RCVD_IN_IADB_SPF 3891 1.68 0.53 2.36 88 FROM_EXCESS_BASE64 3856 2.43 2.59 2.33 89 XM_CamelCaseFrm001 3804 2.68 3.32 2.30 90 MAILING_LIST_MULTI 3787 2.09 1.74 2.29 91 XM_B_SpammyTLD 3724 3.17 4.72 2.25 92 TM2_M_VERY_LONG_WORD 3631 2.80 3.83 2.20 93 TR_XM_SpammyRelay 3614 5.14 10.16 2.19 94 HTML_IMAGE_RATIO_08 3559 2.31 2.58 2.15 95 TR_Symld_Words 3554 1.62 0.70 2.15 96 RCVD_IN_IADB_SENDERID 3541 1.53 0.48 2.14 97 RCVD_IN_IADB_DK 3507 1.51 0.47 2.12 98 TM2_M_URI_OPT_OUT 3374 1.97 1.85 2.04 99 TVD_SPACE_RATIO 3202 1.27 0.14 1.94 100 RELAYCOUNTRY_CA 3154 3.08 5.06 1.91 101 TR_DCC_Bayes_99 3118 11.34 27.46 1.89 102 XMStockSpam_06 3075 1.93 2.06 1.86 103 TR_XM_PhishingBody 3073 2.62 3.90 1.86 104 IN_HORDE_ADDRESS_BOOK 3069 1.21 0.10 1.86 105 XMGappySubj_01 3045 1.22 0.16 1.84 106 BAYES_05 2994 1.33 0.51 1.81 107 XM_DK_Undo_01 2913 1.82 1.91 1.76 108 HTML_MIME_NO_HTML_TAG 2897 1.60 1.33 1.75 109 TR_XM_UnparsRelay 2890 4.62 9.50 1.75 110 XMDiploma_00 2785 2.20 3.07 1.69 111 RCVD_IN_IADB_VOUCHED 2737 1.20 0.43 1.66 112 DKIM_INVALID 2666 2.52 4.07 1.61 113 XMGappySubj_02 2565 0.99 0.02 1.55 114 UNTRUSTED_Relay 2545 3.30 6.29 1.54 115 XM_B_URI_Unicode 2511 1.59 1.71 1.52 116 BOTNET 2370 4.41 9.47 1.43 117 T_TooManySym_03 2313 0.93 0.13 1.40 118 T_XMDrugObfuBody_14 2301 2.86 5.37 1.39 119 T_TVD_MIME_NO_HEADERS 2244 0.87 0.04 1.36 120 KHOP_HELO_FCRDNS 2233 1.30 1.22 1.35 121 XM_B_Investor 2227 2.57 4.64 1.35 122 RCVD_IN_BL_SPAMCOP_NET 2226 5.17 11.69 1.35 123 XMBrknScrpt_02 2145 1.65 2.25 1.30 124 XMSubMetaSxObfu_03 2143 1.22 1.10 1.30 125 XM_SendGrid 2107 1.18 1.02 1.28 126 XM_B_FormFill 2081 0.80 0.02 1.26 127 URI_NOVOWEL 2049 1.11 0.89 1.24 128 XM_B_Unsub2 2047 1.48 1.90 1.24 129 XM_GoogleGroups 2008 1.01 0.67 1.22 130 DKIM_ADSP_CUSTOM_MED 1968 1.17 1.13 1.19 131 XM_SPF_SoftFail 1951 1.74 2.69 1.18 132 XM_B_COPY_HTML 1932 1.40 1.79 1.17 133 RCVD_IN_IADB_OPTIN 1928 0.83 0.25 1.17 134 XM_H_Long_From02 1817 1.25 1.50 1.10 135 T_XMDrugObfuBody_08 1803 1.43 2.00 1.09 136 XMLngstWrd_00 1763 0.81 0.37 1.07 137 XMSubMetaSx_01 1748 0.75 0.24 1.06 138 HTML_EXTRA_CLOSE 1723 0.68 0.06 1.04 139 XM_B_SpammyWords4 1682 1.45 2.18 1.02 140 XM_OfRef6 1674 2.42 4.82 1.01 141 XMBody_95 1673 0.69 0.13 1.01 142 XMSubMetaI_00 1639 1.08 1.23 0.99 143 TooManyTo_003 1633 0.92 0.80 0.99 144 URI_HEX 1576 1.13 1.42 0.95 145 TR_XM_SpammyWords5 1540 2.11 4.10 0.93 146 NML_ADSP_CUSTOM_MED 1527 0.95 0.99 0.92 147 TVD_RCVD_IP 1491 0.89 0.87 0.90 148 TR_XM_SPAMCOP 1475 4.36 10.27 0.89 149 FORGED_GMAIL_RCVD 1424 0.88 0.91 0.86 150 XM_UB50 1362 1.26 2.00 0.82 151 TR_XM_DK_SendGrid 1355 0.76 0.65 0.82 152 XMPhish30 1350 1.10 1.57 0.82 153 PLING_QUERY 1341 0.85 0.91 0.81 154 TooManyTo_004 1304 0.79 0.78 0.79 155 XMBdyGiftCard01 1300 1.07 1.54 0.79 156 XMNoVowels 1278 0.67 0.48 0.77 157 XMBody_17 1271 1.24 2.04 0.77 158 T_XMDrugObfuBody_00 1199 1.52 2.87 0.73 159 HTML_TAG_BALANCE_BODY 1167 0.90 1.22 0.71 160 DIET_1 1161 1.00 1.52 0.70 161 TR_XM_Base64_M1 1154 0.74 0.82 0.70 162 MIME_CHARSET_FARAWAY 1153 0.74 0.81 0.70 163 T_FILL_THIS_FORM_SHORT 1124 1.03 1.63 0.68 164 T_XMHurry_00 1108 1.36 2.53 0.67 165 TooManyTo_005 1105 0.71 0.77 0.67 166 TR_MetaPhish_Combo_01 1093 0.70 0.76 0.66 167 XM_B_DNDMA 1081 0.67 0.70 0.65 168 SUBJ_ALL_CAPS 1055 1.57 3.15 0.64 169 XM_H_PHPMailer 1028 0.72 0.88 0.62 170 TM2_M_OBFU_COMMENT 996 0.82 1.20 0.60 171 URI_TRY_3LD 979 0.80 1.14 0.59 172 XMBSHREFv2 962 0.45 0.24 0.58 173 XM_ProductURIs 950 0.90 1.44 0.58 174 THIS_AD 948 0.79 1.15 0.57 175 RCVD_IN_PBL 922 1.14 2.14 0.56 176 T_TooManySym_04 899 0.35 0.02 0.54 177 MPART_ALT_DIFF_COUNT 875 0.71 1.02 0.53 178 TR_XM_SpammyWords2 862 6.02 15.38 0.52 179 HTML_FONT_FACE_BAD 821 0.53 0.59 0.50 180 XMSlimDrugH 796 0.58 0.75 0.48 181 XMGenDplmaNmb 787 0.60 0.82 0.48 182 DKIM_ADSP_NXDOMAIN 773 1.19 2.43 0.47 183 NO_DNS_FOR_FROM 772 1.07 2.09 0.47 184 XM_S_SubURI 770 0.31 0.04 0.47 185 XM_URI_RBL 766 1.10 2.18 0.46 186 XMLngstWrd_01 753 0.39 0.28 0.46 187 SUBJ_DOLLARS 732 0.49 0.57 0.44 188 XMSolicitRefs_0 727 0.49 0.58 0.44 189 SpammyFromTLD_01 726 0.88 1.64 0.44 190 FILL_THIS_FORM 716 1.22 2.57 0.43 191 XMCapTrack 715 0.42 0.40 0.43 192 HTTPS_HTTP_MISMATCH 710 0.67 1.08 0.43 193 RELAYCOUNTRY_AU 705 1.16 2.40 0.43 194 XM_ShortIntro_01 685 0.52 0.71 0.41 195 TR_XM_MaxWHORU 653 1.01 2.07 0.40 196 XMClaimOffer 636 0.35 0.28 0.39 197 FROM_GOV_DKIM_AU 635 0.27 0.07 0.38 198 J_POPCORN_W_RD 611 0.56 0.89 0.37 199 LongTLD 601 0.56 0.89 0.36 200 XM_B_Phish66 599 0.58 0.96 0.36 ----------------------------------------------------------------------