Email: 260869 Autolearn: 0 AvgScore: 5.06 AvgScanTime: 1.37 sec Spam: 92937 Autolearn: 0 AvgScore: 13.76 AvgScanTime: 1.44 sec Ham: 167932 Autolearn: 0 AvgScore: 0.24 AvgScanTime: 1.34 sec Time Spent Running SA: 99.47 hours Time Spent Processing Spam: 37.07 hours Time Spent Processing Ham: 62.39 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88966 87.96 95.73 83.66 2 DKIM_SIGNED 84251 82.32 90.65 77.70 3 RELAYCOUNTRY_US 80879 83.27 87.03 81.19 4 XM_DK_Pass 80606 80.25 86.73 76.66 5 DKIM_VALID 79926 79.66 86.00 76.15 6 XM_B_Unicode 79466 76.03 85.51 70.78 7 DCC_CHECK 73391 59.64 78.97 48.95 8 XMListUnsubscribeExists 68397 60.25 73.60 52.87 9 XM_B_SpammyWords 67255 56.19 72.37 47.23 10 DKIM_VALID_AU 65758 67.20 70.76 65.23 11 LOC_TINY_FONT_1 51766 40.38 55.70 31.91 12 XM_B_Unicode3 48312 48.40 51.98 46.41 13 XM_DK_Undo_02 40292 19.30 43.35 5.99 14 XM_B_SpammyWords2 39066 28.18 42.03 20.51 15 RCVD_IN_MSPIKE_H2 38050 37.69 40.94 35.89 16 HTML_FONT_LOW_CONTRAST 36826 33.74 39.62 30.48 17 BAYES_50 33523 51.43 36.07 59.92 18 BAYES_99 31911 14.91 34.34 4.15 19 FVGT_m_MULTI_ODD 31286 28.37 33.66 25.45 20 T_KAM_HTML_FONT_INVALID 31116 24.99 33.48 20.29 21 TR_XM_DKIM_Undo 29466 12.87 31.71 2.44 22 DKIM_VALID_EF 25153 28.55 27.06 29.37 23 XM_Multi_Part_URI 24910 19.70 26.80 15.77 24 BAYES_999 24667 11.48 26.54 3.14 25 TR_DCC_Bayes_99 24592 10.50 26.46 1.66 26 MIME_HTML_ONLY 23279 23.21 25.05 22.19 27 XMSubLong 19553 22.14 21.04 22.76 28 DCC_CHECK_NEGATIVE 19118 40.18 20.57 51.03 29 T_TM2_M_HEADER_IN_MSG 18820 22.23 20.25 23.32 30 TR_XM_DK_Unsub 18146 15.59 19.53 13.41 31 UNPARSEABLE_RELAY 17225 14.64 18.53 12.49 32 XM_B_SpammyWords3 15986 10.47 17.20 6.75 33 TR_MAX_INTL_RELAY 15972 10.13 17.19 6.22 34 XM_B_Unsub 15111 12.02 16.26 9.68 35 TR_XM_BayesUnsub 14786 10.42 15.91 7.37 36 RELAYCOUNTRY_META 12940 7.42 13.92 3.81 37 TR_XM_SpammyWords2 12333 5.04 13.27 0.49 38 LOTS_OF_MONEY 11612 8.46 12.49 6.23 39 XM_Body_Dirty_Words 10855 5.71 11.68 2.41 40 TR_XM_SpammyWords4 10292 6.79 11.07 4.42 41 RCVD_IN_BL_SPAMCOP_NET 9944 4.47 10.70 1.02 42 BOTNET_IPINHOSTNAME 9673 6.01 10.41 3.57 43 BAYES_80 9611 6.16 10.34 3.85 44 TR_XM_UnparsRelay 9266 4.56 9.97 1.56 45 TR_XM_SpammyRelay 9239 4.89 9.94 2.09 46 TR_XM_SPAMCOP 8721 3.74 9.38 0.62 47 BAYES_60 8224 10.05 8.85 10.72 48 XM_Evil_Numbers_Gen 7497 9.16 8.07 9.76 49 BOTNET 7441 3.80 8.01 1.47 50 HTML_IMAGE_RATIO_02 7365 6.78 7.92 6.14 51 XM_B_Phish_Phrases 7341 6.68 7.90 6.01 52 FSL_BULK_SIG 7261 9.37 7.81 10.23 53 LotsOfNums_01 6952 7.29 7.48 7.19 54 MPART_ALT_DIFF 6105 5.52 6.57 4.93 55 BAYES_95 6038 3.83 6.50 2.36 56 XMSubMetaSx_00 5844 5.94 6.29 5.74 57 XM_UncommonTLD01 5717 5.58 6.15 5.26 58 XM_H_GMP 5428 5.73 5.84 5.67 59 XM_H_Long_From01 5401 5.66 5.81 5.58 60 T_XMDrugObfuBody_14 5003 3.18 5.38 1.96 61 XMStrtUSub 4766 5.81 5.13 6.19 62 XM_B_Investor 4739 2.86 5.10 1.63 63 UNTRUSTED_Relay 4526 2.84 4.87 1.72 64 DKIM_INVALID 4325 2.66 4.65 1.56 65 HTML_IMAGE_RATIO_04 4315 4.97 4.64 5.15 66 XMSexyCombo_05 4236 3.25 4.56 2.53 67 RELAYCOUNTRY_CA 4229 2.65 4.55 1.60 68 TM2_M_VERY_LONG_WORD 4005 2.65 4.31 1.73 69 XM_CamelCaseFrm001 3887 3.28 4.18 2.78 70 HTML_IMAGE_RATIO_06 3880 3.18 4.17 2.63 71 RCVD_IN_VALIDITY_RPBL 3685 1.46 3.97 0.08 72 XM_B_PhoneNumber 3662 5.57 3.94 6.47 73 MIME_HTML_ONLY_MULTI 3594 3.33 3.87 3.03 74 TooManyTo_001 3592 5.38 3.86 6.22 75 MIME_HTML_MOSTLY 3530 3.15 3.80 2.80 76 HTML_IMAGE_RATIO_08 3526 2.83 3.79 2.30 77 XM_B_SpammyTLD 3442 2.87 3.70 2.41 78 TR_XM_PhishingBody 3366 2.36 3.62 1.66 79 RCVD_IN_VALIDITY_SAFE 3196 5.62 3.44 6.82 80 XM_OfRef6 3146 1.73 3.39 0.81 81 DKIM_ADSP_NXDOMAIN 3025 1.44 3.25 0.44 82 T_XMHurry_00 3019 1.60 3.25 0.69 83 NO_DNS_FOR_FROM 2917 1.39 3.14 0.42 84 TR_XM_MaxWHORU 2877 1.33 3.10 0.36 85 XM_B_SpammyWords4 2768 1.64 2.98 0.90 86 FROM_EXCESS_BASE64 2765 2.65 2.98 2.47 87 XM_SPF_SoftFail 2746 1.71 2.95 1.02 88 XMStockSpam_06 2568 2.12 2.76 1.77 89 USER_IN_DEF_DKIM_WL 2498 12.99 2.69 18.69 90 XM_URI_RBL 2483 1.30 2.67 0.54 91 RELAYCOUNTRY_AU 2437 1.24 2.62 0.48 92 T_XMDrugObfuBody_08 2358 1.70 2.54 1.24 93 XMDiploma_00 2346 1.60 2.52 1.08 94 XMNumbers 2200 3.23 2.37 3.70 95 XM_B_Unsub2 2130 1.68 2.29 1.35 96 XM_UB50 2127 1.44 2.29 0.96 97 RCVD_IN_VALIDITY_CERTIFIED 2076 4.08 2.23 5.10 98 T_TooManySym_01 2034 5.40 2.19 7.17 99 TR_XM_SpammyWords5 2018 1.50 2.17 1.13 100 RCVD_IN_MSPIKE_WL 1989 4.19 2.14 5.32 101 RCVD_IN_MSPIKE_H3 1989 4.19 2.14 5.32 102 XM_DK_Undo_01 1974 1.77 2.12 1.57 103 SpammyFromTLD_02 1955 0.85 2.10 0.15 104 XMBrknScrpt_02 1940 1.54 2.09 1.24 105 TM2_M_URI_OPT_OUT 1936 2.04 2.08 2.02 106 SUSP_UTF8_WORD_SUBJ 1920 0.77 2.07 0.06 107 XMBody_17 1920 1.10 2.07 0.56 108 MAILING_LIST_MULTI 1897 2.29 2.04 2.43 109 T_REMOTE_IMAGE 1885 2.84 2.03 3.29 110 XM_B_URI_Unicode 1872 1.57 2.01 1.32 111 TR_XM_PHPDW 1782 0.96 1.92 0.42 112 TR_XM_PHPForged 1775 0.95 1.91 0.42 113 TR_XM_FormFill2 1743 0.94 1.88 0.43 114 TR_XM_NoHeaderRelay 1728 0.80 1.86 0.21 115 XM_H_PHPOS 1727 0.92 1.86 0.41 116 T_XMDrugObfuBody_00 1708 1.32 1.84 1.04 117 TR_XM_INV_DKIM 1615 0.67 1.74 0.08 118 XM_B_COPY_HTML 1581 1.40 1.70 1.24 119 SpammyFromTLD_01 1578 1.01 1.70 0.63 120 DIET_1 1472 0.88 1.58 0.49 121 HTML_TAG_BALANCE_BODY 1470 1.02 1.58 0.72 122 XMPhish30 1469 1.04 1.58 0.74 123 SUSP_UTF8_WORD_COMBO 1451 0.60 1.56 0.07 124 HTTPS_HTTP_MISMATCH 1427 0.82 1.54 0.43 125 URI_HEX 1427 1.23 1.54 1.06 126 TR_XM_Base64_M1 1416 1.13 1.52 0.92 127 XM_DIRTYINTL 1394 0.64 1.50 0.16 128 MIME_QP_LONG_LINE 1371 2.78 1.48 3.50 129 T_STY_INVIS_DIRECT 1363 0.79 1.47 0.41 130 URI_TRY_3LD 1356 0.96 1.46 0.69 131 XMBdyGiftCard01 1346 1.03 1.45 0.80 132 T_Symld_Words_02 1342 0.65 1.44 0.21 133 ALL_TRUSTED 1333 10.22 1.43 15.08 134 TR_LOTS_OF_MONEY3 1291 0.78 1.39 0.44 135 T_FILL_THIS_FORM_SHORT 1274 0.98 1.37 0.76 136 TR_Symld_Words 1269 1.29 1.37 1.25 137 LongTLD 1258 0.63 1.35 0.23 138 SHOPIFY_IMG_NOT_RCVD_SFY 1235 0.68 1.33 0.32 139 XMSubMetaI_00 1217 0.99 1.31 0.82 140 SUBJ_ALL_CAPS 1216 0.96 1.31 0.77 141 THIS_AD 1197 0.75 1.29 0.45 142 MIME_CHARSET_FARAWAY 1182 0.76 1.27 0.47 143 BAYES_40 1156 3.37 1.24 4.54 144 KHOP_HELO_FCRDNS 1141 1.33 1.23 1.39 145 XMReplyNow 1102 0.63 1.19 0.32 146 MPART_ALT_DIFF_COUNT 1102 0.70 1.19 0.43 147 HTML_MIME_NO_HTML_TAG 1100 1.55 1.18 1.76 148 XM_H_Long_From02 1097 1.13 1.18 1.10 149 XM_ProductURIs 1087 1.53 1.17 1.73 150 XM_HighProb1 1050 0.41 1.13 0.01 151 XM_H_Undi_Recip 1049 0.48 1.13 0.12 152 TooManyTo_002 1041 1.76 1.12 2.12 153 XMSexyCombo_01 1020 0.52 1.10 0.20 154 TR_LOTS_OF_MONEY2 1004 0.53 1.08 0.23 155 T_MONEY_PERCENT 1004 0.53 1.08 0.23 156 URI_NOVOWEL 999 1.32 1.07 1.46 157 BOTNET_NORDNS 987 0.39 1.06 0.01 158 TooManyTo_003 979 1.05 1.05 1.04 159 RELAYCOUNTRY_GB 973 0.54 1.05 0.26 160 TooManyTo_004 953 0.90 1.03 0.83 161 TM2_M_OBFU_COMMENT 949 0.75 1.02 0.61 162 TR_XM_RelayPhish 944 0.41 1.02 0.07 163 XM_B_SEO 942 0.52 1.01 0.25 164 XM_B_REG_HTML 933 0.54 1.00 0.28 165 TooManyTo_005 928 0.83 1.00 0.74 166 RCVD_IN_PBL 902 0.71 0.97 0.56 167 DKIM_ADSP_CUSTOM_MED 901 0.89 0.97 0.85 168 XMSlimDrugH 879 0.74 0.95 0.63 169 PLING_QUERY 863 0.61 0.93 0.43 170 XM_B_Phish66 859 0.54 0.92 0.33 171 BAYES_20 858 2.23 0.92 2.95 172 HTML_FONT_FACE_BAD 853 0.77 0.92 0.68 173 TR_Mismatch_TLD_01 850 0.51 0.91 0.29 174 XMHTML_After_End 824 0.52 0.89 0.32 175 HOSTED_IMG_MULTI_PUB_01 800 0.33 0.86 0.03 176 RCVD_IN_SBL_CSS 798 0.32 0.86 0.02 177 TR_XM_Base64_M2 798 0.39 0.86 0.13 178 RDNS_DYNAMIC 793 0.52 0.85 0.34 179 XM_DKIMWhitelistDomains 789 6.21 0.85 9.18 180 TR_Mismatch_TLD_02 787 0.35 0.85 0.07 181 XMBody_78 782 0.47 0.84 0.26 182 HTML_IMAGE_ONLY_20 778 0.57 0.84 0.42 183 NML_ADSP_CUSTOM_MED 775 0.68 0.83 0.59 184 RCVD_IN_XBL 772 0.31 0.83 0.01 185 PDS_RDNS_DYNAMIC_FP 761 0.34 0.82 0.07 186 BOUNCE_MESSAGE 757 3.11 0.81 4.38 187 ANY_BOUNCE_MESSAGE 757 3.11 0.81 4.38 188 XM_SendGrid 753 1.02 0.81 1.14 189 FROM_SUSPICIOUS_NTLD 749 0.31 0.81 0.04 190 XM_GoogleGroups 747 1.05 0.80 1.18 191 XMGenDplmaNmb 744 0.58 0.80 0.46 192 XM_B_DNDMA 742 0.72 0.80 0.67 193 TR_XM_Undi_Recip19 739 0.33 0.80 0.08 194 RELAYCOUNTRY_RU 738 0.29 0.79 0.01 195 TVD_RCVD_IP 719 0.86 0.77 0.91 196 XM_UB99 711 0.28 0.77 0.01 197 TR_XM_SEO4 704 0.32 0.76 0.08 198 FORGED_GMAIL_RCVD 703 0.62 0.76 0.54 199 RELAYCOUNTRY_FR 700 0.40 0.75 0.20 200 RCVD_IN_IADB_LISTED 690 1.82 0.74 2.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140498 87.96 95.73 83.66 2 RELAYCOUNTRY_US 136348 83.27 87.03 81.19 3 DKIM_SIGNED 130489 82.32 90.65 77.70 4 XM_DK_Pass 128735 80.25 86.73 76.66 5 DKIM_VALID 127875 79.66 86.00 76.15 6 XM_B_Unicode 118869 76.03 85.51 70.78 7 DKIM_VALID_AU 109544 67.20 70.76 65.23 8 BAYES_50 100630 51.43 36.07 59.92 9 XMListUnsubscribeExists 88784 60.25 73.60 52.87 10 DCC_CHECK_NEGATIVE 85702 40.18 20.57 51.03 11 DCC_CHECK 82197 59.64 78.97 48.95 12 XM_B_SpammyWords 79315 56.19 72.37 47.23 13 XM_B_Unicode3 77940 48.40 51.98 46.41 14 RCVD_IN_MSPIKE_H2 60266 37.69 40.94 35.89 15 LOC_TINY_FONT_1 53584 40.38 55.70 31.91 16 HTML_FONT_LOW_CONTRAST 51189 33.74 39.62 30.48 17 DKIM_VALID_EF 49329 28.55 27.06 29.37 18 FVGT_m_MULTI_ODD 42731 28.37 33.66 25.45 19 T_TM2_M_HEADER_IN_MSG 39169 22.23 20.25 23.32 20 XMSubLong 38215 22.14 21.04 22.76 21 MIME_HTML_ONLY 37257 23.21 25.05 22.19 22 XM_B_SpammyWords2 34449 28.18 42.03 20.51 23 T_KAM_HTML_FONT_INVALID 34074 24.99 33.48 20.29 24 USER_IN_DEF_DKIM_WL 31387 12.99 2.69 18.69 25 XM_Multi_Part_URI 26482 19.70 26.80 15.77 26 ALL_TRUSTED 25318 10.22 1.43 15.08 27 TR_XM_DK_Unsub 22527 15.59 19.53 13.41 28 UNPARSEABLE_RELAY 20976 14.64 18.53 12.49 29 BAYES_60 17995 10.05 8.85 10.72 30 FSL_BULK_SIG 17174 9.37 7.81 10.23 31 XM_Evil_Numbers_Gen 16391 9.16 8.07 9.76 32 BAYES_00 16331 6.51 0.71 9.72 33 XM_B_Unsub 16248 12.02 16.26 9.68 34 XM_DKIMWhitelistDomains 15409 6.21 0.85 9.18 35 TR_XM_DK_Bayes 12574 5.04 0.62 7.49 36 TR_XM_DK_Bayes1 12498 5.01 0.62 7.44 37 TR_XM_BayesUnsub 12384 10.42 15.91 7.37 38 LotsOfNums_01 12078 7.29 7.48 7.19 39 T_TooManySym_01 12047 5.40 2.19 7.17 40 RCVD_IN_VALIDITY_SAFE 11456 5.62 3.44 6.82 41 XM_B_SpammyWords3 11336 10.47 17.20 6.75 42 TR_XM_DK_Bayes2 11027 4.38 0.42 6.57 43 XM_B_PhoneNumber 10867 5.57 3.94 6.47 44 LOTS_OF_MONEY 10466 8.46 12.49 6.23 45 TooManyTo_001 10453 5.38 3.86 6.22 46 TR_MAX_INTL_RELAY 10448 10.13 17.19 6.22 47 XMStrtUSub 10398 5.81 5.13 6.19 48 HTML_IMAGE_RATIO_02 10309 6.78 7.92 6.14 49 XM_B_Phish_Phrases 10088 6.68 7.90 6.01 50 XM_DK_Undo_02 10063 19.30 43.35 5.99 51 IN_ZIMBRA_NJ_WHITELIST 9986 3.85 0.07 5.95 52 XMSubMetaSx_00 9645 5.94 6.29 5.74 53 XM_H_GMP 9523 5.73 5.84 5.67 54 XM_H_Long_From01 9364 5.66 5.81 5.58 55 RCVD_IN_MSPIKE_H3 8936 4.19 2.14 5.32 56 RCVD_IN_MSPIKE_WL 8936 4.19 2.14 5.32 57 XM_UncommonTLD01 8833 5.58 6.15 5.26 58 HTML_IMAGE_RATIO_04 8646 4.97 4.64 5.15 59 RCVD_IN_VALIDITY_CERTIFIED 8560 4.08 2.23 5.10 60 MPART_ALT_DIFF 8282 5.52 6.57 4.93 61 BAYES_40 7627 3.37 1.24 4.54 62 TR_XM_SpammyWords4 7418 6.79 11.07 4.42 63 BOUNCE_MESSAGE 7349 3.11 0.81 4.38 64 ANY_BOUNCE_MESSAGE 7349 3.11 0.81 4.38 65 BAYES_99 6973 14.91 34.34 4.15 66 T_TooManySym_02 6939 2.81 0.43 4.13 67 INVALID_MSGID 6901 2.71 0.17 4.11 68 BAYES_80 6471 6.16 10.34 3.85 69 RELAYCOUNTRY_META 6404 7.42 13.92 3.81 70 TO_MALFORMED 6218 2.42 0.11 3.70 71 XMNumbers 6214 3.23 2.37 3.70 72 BOTNET_IPINHOSTNAME 5998 6.01 10.41 3.57 73 MIME_QP_LONG_LINE 5875 2.78 1.48 3.50 74 T_REMOTE_IMAGE 5529 2.84 2.03 3.29 75 BAYES_999 5280 11.48 26.54 3.14 76 MIME_HTML_ONLY_MULTI 5086 3.33 3.87 3.03 77 BAYES_20 4958 2.23 0.92 2.95 78 MIME_HTML_MOSTLY 4699 3.15 3.80 2.80 79 XM_CamelCaseFrm001 4666 3.28 4.18 2.78 80 XM_PDF 4501 1.83 0.31 2.68 81 HTML_IMAGE_RATIO_06 4413 3.18 4.17 2.63 82 XMSexyCombo_05 4246 3.25 4.56 2.53 83 FROM_EXCESS_BASE64 4144 2.65 2.98 2.47 84 TR_XM_DKIM_Undo 4096 12.87 31.71 2.44 85 MAILING_LIST_MULTI 4089 2.29 2.04 2.43 86 RCVD_IN_IADB_LISTED 4054 1.82 0.74 2.41 87 XM_B_SpammyTLD 4053 2.87 3.70 2.41 88 XM_Body_Dirty_Words 4051 5.71 11.68 2.41 89 BAYES_95 3962 3.83 6.50 2.36 90 HTML_IMAGE_RATIO_08 3869 2.83 3.79 2.30 91 RCVD_IN_IADB_SPF 3622 1.61 0.62 2.16 92 TooManyTo_002 3554 1.76 1.12 2.12 93 TR_XM_SpammyRelay 3513 4.89 9.94 2.09 94 TM2_M_URI_OPT_OUT 3389 2.04 2.08 2.02 95 T_XMDrugObfuBody_14 3299 3.18 5.38 1.96 96 TVD_SPACE_RATIO 3260 1.29 0.11 1.94 97 RCVD_IN_IADB_SENDERID 3248 1.45 0.57 1.93 98 RCVD_IN_IADB_DK 3213 1.44 0.58 1.91 99 IN_HORDE_ADDRESS_BOOK 3182 1.25 0.09 1.89 100 BAYES_05 2981 1.35 0.58 1.78 101 XMStockSpam_06 2975 2.12 2.76 1.77 102 HTML_MIME_NO_HTML_TAG 2955 1.55 1.18 1.76 103 TM2_M_VERY_LONG_WORD 2901 2.65 4.31 1.73 104 XM_ProductURIs 2900 1.53 1.17 1.73 105 UNTRUSTED_Relay 2890 2.84 4.87 1.72 106 TR_DCC_Bayes_99 2795 10.50 26.46 1.66 107 TR_XM_PhishingBody 2785 2.36 3.62 1.66 108 T_TVD_MIME_NO_HEADERS 2768 1.09 0.07 1.65 109 XM_B_Investor 2731 2.86 5.10 1.63 110 XMGappySubj_01 2702 1.07 0.11 1.61 111 RELAYCOUNTRY_CA 2685 2.65 4.55 1.60 112 RCVD_IN_IADB_VOUCHED 2680 1.18 0.43 1.60 113 XM_DK_Undo_01 2639 1.77 2.12 1.57 114 TR_XM_UnparsRelay 2620 4.56 9.97 1.56 115 DKIM_INVALID 2614 2.66 4.65 1.56 116 XMSubMetaSxObfu_03 2557 1.21 0.65 1.52 117 BOTNET 2465 3.80 8.01 1.47 118 URI_NOVOWEL 2454 1.32 1.07 1.46 119 T_TooManySym_03 2352 0.94 0.10 1.40 120 KHOP_HELO_FCRDNS 2330 1.33 1.23 1.39 121 XM_B_Unsub2 2260 1.68 2.29 1.35 122 XMGappySubj_02 2248 0.87 0.02 1.34 123 XM_B_URI_Unicode 2220 1.57 2.01 1.32 124 HTML_EXTRA_CLOSE 2180 0.87 0.08 1.30 125 TR_Symld_Words 2102 1.29 1.37 1.25 126 T_XMDrugObfuBody_08 2087 1.70 2.54 1.24 127 XM_B_COPY_HTML 2080 1.40 1.70 1.24 128 XMBrknScrpt_02 2075 1.54 2.09 1.24 129 XM_GoogleGroups 1983 1.05 0.80 1.18 130 XM_RXBody 1950 0.89 0.40 1.16 131 XM_SendGrid 1912 1.02 0.81 1.14 132 TR_XM_SpammyWords5 1906 1.50 2.17 1.13 133 RCVD_IN_IADB_OPTIN 1899 0.82 0.26 1.13 134 XM_H_Long_From02 1844 1.13 1.18 1.10 135 XMDiploma_00 1818 1.60 2.52 1.08 136 URI_HEX 1787 1.23 1.54 1.06 137 XMBody_95 1764 0.73 0.15 1.05 138 TooManyTo_003 1750 1.05 1.05 1.04 139 T_XMDrugObfuBody_00 1742 1.32 1.84 1.04 140 XM_SPF_SoftFail 1717 1.71 2.95 1.02 141 RCVD_IN_BL_SPAMCOP_NET 1708 4.47 10.70 1.02 142 XM_UB50 1617 1.44 2.29 0.96 143 TR_XM_Base64_M1 1543 1.13 1.52 0.92 144 TVD_RCVD_IP 1527 0.86 0.77 0.91 145 XM_B_SpammyWords4 1518 1.64 2.98 0.90 146 XM_H_PHPMailer 1436 0.81 0.74 0.86 147 DKIM_ADSP_CUSTOM_MED 1425 0.89 0.97 0.85 148 TooManyTo_004 1402 0.90 1.03 0.83 149 XMSubMetaI_00 1370 0.99 1.31 0.82 150 XM_OfRef6 1367 1.73 3.39 0.81 151 TR_XM_DK_SendGrid 1363 0.73 0.57 0.81 152 XMBdyGiftCard01 1348 1.03 1.45 0.80 153 SUBJ_ALL_CAPS 1297 0.96 1.31 0.77 154 T_FILL_THIS_FORM_SHORT 1275 0.98 1.37 0.76 155 TooManyTo_005 1239 0.83 1.00 0.74 156 XMPhish30 1235 1.04 1.58 0.74 157 HTML_TAG_BALANCE_BODY 1201 1.02 1.58 0.72 158 XM_B_FormFill 1179 0.46 0.01 0.70 159 URI_TRY_3LD 1160 0.96 1.46 0.69 160 T_XMHurry_00 1158 1.60 3.25 0.69 161 HTML_FONT_FACE_BAD 1145 0.77 0.92 0.68 162 XM_B_DNDMA 1125 0.72 0.80 0.67 163 XM_S_SubURI 1100 0.44 0.05 0.66 164 AD_PREFS 1096 0.43 0.04 0.65 165 XMNoVowels 1086 0.60 0.53 0.65 166 SpammyFromTLD_01 1064 1.01 1.70 0.63 167 XMSlimDrugH 1063 0.74 0.95 0.63 168 TR_MetaPhish_Combo_01 1056 0.62 0.60 0.63 169 TR_XM_SPAMCOP 1046 3.74 9.38 0.62 170 TM2_M_OBFU_COMMENT 1017 0.75 1.02 0.61 171 XMBSHREFv2 990 0.46 0.22 0.59 172 NML_ADSP_CUSTOM_MED 989 0.68 0.83 0.59 173 HTML_TEXT_INVISIBLE_STYLE 968 0.45 0.21 0.58 174 XMBody_17 941 1.10 2.07 0.56 175 RCVD_IN_PBL 938 0.71 0.97 0.56 176 XMLngstWrd_00 920 0.47 0.34 0.55 177 XM_URI_RBL 913 1.30 2.67 0.54 178 FORGED_GMAIL_RCVD 912 0.62 0.76 0.54 179 T_TooManySym_04 898 0.35 0.03 0.53 180 TR_XM_SpammyWords2 825 5.04 13.27 0.49 181 DIET_1 821 0.88 1.58 0.49 182 RELAYCOUNTRY_AU 809 1.24 2.62 0.48 183 MIME_CHARSET_FARAWAY 797 0.76 1.27 0.47 184 FROM_GOV_DKIM_AU 788 0.33 0.07 0.47 185 XMGenDplmaNmb 780 0.58 0.80 0.46 186 THIS_AD 761 0.75 1.29 0.45 187 RCVD_IN_PSBL 758 0.42 0.35 0.45 188 TR_LOTS_OF_MONEY3 745 0.78 1.39 0.44 189 DKIM_ADSP_NXDOMAIN 744 1.44 3.25 0.44 190 XMDateMe_00 732 0.37 0.26 0.44 191 HTTPS_HTTP_MISMATCH 722 0.82 1.54 0.43 192 PLING_QUERY 717 0.61 0.93 0.43 193 MPART_ALT_DIFF_COUNT 716 0.70 1.19 0.43 194 TR_XM_FormFill2 716 0.94 1.88 0.43 195 TR_XM_PHPDW 711 0.96 1.92 0.42 196 HTML_IMAGE_ONLY_20 711 0.57 0.84 0.42 197 NO_DNS_FOR_FROM 708 1.39 3.14 0.42 198 XMCapTrack 706 0.44 0.49 0.42 199 TR_XM_PHPForged 704 0.95 1.91 0.42 200 T_STY_INVIS_DIRECT 692 0.79 1.47 0.41 ----------------------------------------------------------------------