Email: 271478 Autolearn: 0 AvgScore: 4.98 AvgScanTime: 1.36 sec Spam: 92273 Autolearn: 0 AvgScore: 14.52 AvgScanTime: 1.41 sec Ham: 179205 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.33 sec Time Spent Running SA: 102.51 hours Time Spent Processing Spam: 36.08 hours Time Spent Processing Ham: 66.43 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86914 87.25 94.19 83.67 2 DKIM_SIGNED 80981 78.45 87.76 73.66 3 RELAYCOUNTRY_US 77045 82.24 83.50 81.59 4 XM_DK_Pass 77001 76.11 83.45 72.33 5 XM_B_Unicode 76621 73.18 83.04 68.10 6 DKIM_VALID 76504 75.61 82.91 71.85 7 DCC_CHECK 72321 56.71 78.38 45.55 8 XMListUnsubscribeExists 66081 57.35 71.61 50.00 9 XM_B_SpammyWords 65726 54.38 71.23 45.70 10 DKIM_VALID_AU 62654 63.84 67.90 61.75 11 LOC_TINY_FONT_1 47294 36.94 51.25 29.56 12 XM_B_Unicode3 47140 45.33 51.09 42.37 13 XM_DK_Undo_02 38617 17.42 41.85 4.85 14 RCVD_IN_MSPIKE_H2 38398 37.54 41.61 35.44 15 XM_B_SpammyWords2 37866 27.21 41.04 20.09 16 HTML_FONT_LOW_CONTRAST 35036 31.80 37.97 28.62 17 BAYES_50 34109 50.36 36.97 57.26 18 BAYES_99 31315 13.91 33.94 3.60 19 T_KAM_HTML_FONT_INVALID 29869 23.69 32.37 19.22 20 FVGT_m_MULTI_ODD 28657 26.00 31.06 23.40 21 TR_XM_DKIM_Undo 28310 11.71 30.68 1.94 22 DKIM_VALID_EF 25549 27.94 27.69 28.07 23 MIME_HTML_ONLY 24905 26.23 26.99 25.84 24 BAYES_999 24098 10.64 26.12 2.68 25 TR_DCC_Bayes_99 23920 9.73 25.92 1.39 26 XM_Multi_Part_URI 22071 18.01 23.92 14.96 27 DCC_CHECK_NEGATIVE 19462 43.10 21.09 54.43 28 T_TM2_M_HEADER_IN_MSG 19235 23.18 20.85 24.38 29 TR_XM_DK_Unsub 19174 15.71 20.78 13.10 30 XMSubLong 18847 21.61 20.43 22.21 31 UNPARSEABLE_RELAY 16773 13.70 18.18 11.39 32 TR_MAX_INTL_RELAY 15613 9.88 16.92 6.25 33 RELAYCOUNTRY_META 15195 7.79 16.47 3.32 34 XM_B_Unsub 13714 13.87 14.86 13.36 35 TR_XM_BayesUnsub 13198 9.90 14.30 7.64 36 XM_B_SpammyWords3 12912 8.19 13.99 5.21 37 TR_XM_SpammyWords2 12139 4.78 13.16 0.47 38 TR_XM_SpammyRelay 10969 5.34 11.89 1.96 39 LOTS_OF_MONEY 10441 7.47 11.32 5.50 40 RCVD_IN_BL_SPAMCOP_NET 10169 4.23 11.02 0.73 41 BOTNET 10018 4.48 10.86 1.19 42 BOTNET_IPINHOSTNAME 9904 5.98 10.73 3.53 43 XM_Body_Dirty_Words 9630 4.98 10.44 2.17 44 TR_XM_SpammyWords4 9531 6.09 10.33 3.90 45 BAYES_80 9234 5.92 10.01 3.82 46 TR_XM_UnparsRelay 9163 4.58 9.93 1.82 47 BAYES_60 8339 9.57 9.04 9.84 48 FSL_BULK_SIG 8158 9.17 8.84 9.35 49 TR_XM_SPAMCOP 7803 3.21 8.46 0.50 50 UNTRUSTED_Relay 7173 3.60 7.77 1.45 51 LotsOfNums_01 7157 7.76 7.76 7.76 52 RCVD_IN_VALIDITY_RPBL 6948 2.67 7.53 0.17 53 XM_H_Long_From01 6891 6.46 7.47 5.94 54 XMSubMetaSx_00 6683 4.97 7.24 3.80 55 XM_Evil_Numbers_Gen 6652 9.30 7.21 10.37 56 HTML_IMAGE_RATIO_02 6455 5.98 7.00 5.45 57 XM_B_Phish_Phrases 6412 6.64 6.95 6.49 58 XM_UncommonTLD01 6149 5.57 6.66 5.01 59 BAYES_95 5910 3.78 6.40 2.43 60 MPART_ALT_DIFF 5526 4.83 5.99 4.23 61 XM_H_GMP 5218 5.87 5.65 5.97 62 XMSexyCombo_05 5018 3.00 5.44 1.75 63 RELAYCOUNTRY_CA 4911 2.76 5.32 1.45 64 XM_SPF_SoftFail 4885 2.54 5.29 1.12 65 T_XMDrugObfuBody_14 4863 3.11 5.27 2.00 66 XM_B_PhoneNumber 4696 8.01 5.09 9.52 67 DKIM_INVALID 4477 2.84 4.85 1.80 68 XM_B_Investor 4262 2.42 4.62 1.29 69 HTML_IMAGE_RATIO_04 4076 4.87 4.42 5.10 70 XM_OfRef6 4056 2.46 4.40 1.46 71 XM_UB50 3753 1.91 4.07 0.80 72 XMStrtUSub 3727 5.33 4.04 6.00 73 TR_XM_PhishingBody 3611 2.44 3.91 1.67 74 TM2_M_VERY_LONG_WORD 3459 2.54 3.75 1.91 75 TooManyTo_001 3427 7.88 3.71 10.03 76 XM_CamelCaseFrm001 3399 2.74 3.68 2.26 77 HTML_IMAGE_RATIO_06 3355 2.94 3.64 2.59 78 XM_B_SpammyTLD 3320 2.99 3.60 2.67 79 MIME_HTML_ONLY_MULTI 3238 2.90 3.51 2.59 80 T_XMDrugObfuBody_08 3140 2.09 3.40 1.41 81 MIME_HTML_MOSTLY 3135 2.46 3.40 1.98 82 HTML_IMAGE_RATIO_08 3060 2.10 3.32 1.47 83 RCVD_IN_MSPIKE_H3 2923 4.30 3.17 4.88 84 RCVD_IN_MSPIKE_WL 2923 4.30 3.17 4.88 85 RELAYCOUNTRY_AU 2836 1.32 3.07 0.41 86 TR_XM_InvalidRelay 2754 1.02 2.98 0.01 87 DKIM_ADSP_NXDOMAIN 2705 1.27 2.93 0.42 88 NO_DNS_FOR_FROM 2485 1.18 2.69 0.40 89 TR_XM_MaxWHORU 2475 1.13 2.68 0.33 90 KHOP_HELO_FCRDNS 2437 1.96 2.64 1.61 91 T_FILL_THIS_FORM_SHORT 2434 1.39 2.64 0.75 92 DIET_1 2346 1.26 2.54 0.60 93 RCVD_IN_VALIDITY_SAFE 2322 5.18 2.52 6.55 94 XMDiploma_00 2289 1.67 2.48 1.26 95 XM_B_SpammyWords4 2277 1.19 2.47 0.53 96 XM_URI_RBL 2257 1.15 2.45 0.48 97 TR_XM_PHPForged 2245 0.97 2.43 0.21 98 TR_XM_PHPDW 2221 0.96 2.41 0.21 99 TR_XM_FormFill2 2208 0.96 2.39 0.22 100 XM_DK_Undo_01 2185 1.77 2.37 1.46 101 XM_H_PHPOS 2184 0.94 2.37 0.20 102 XMNumbers 2141 3.26 2.32 3.75 103 TM2_M_URI_OPT_OUT 2141 2.03 2.32 1.88 104 T_XMHurry_00 2107 1.13 2.28 0.53 105 XM_B_Unsub2 2077 1.48 2.25 1.09 106 XMBrknScrpt_02 2036 1.44 2.21 1.04 107 SUSP_UTF8_WORD_SUBJ 2034 0.77 2.20 0.03 108 FROM_EXCESS_BASE64 1999 2.64 2.17 2.89 109 TR_XM_SpammyWords5 1999 1.75 2.17 1.53 110 RCVD_IN_VALIDITY_CERTIFIED 1949 3.36 2.11 4.00 111 MAILING_LIST_MULTI 1911 2.20 2.07 2.27 112 SUSP_UTF8_WORD_COMBO 1908 0.73 2.07 0.05 113 T_XMDrugObfuBody_00 1907 1.23 2.07 0.81 114 XMBody_17 1906 1.14 2.07 0.66 115 BOTNET_NORDNS 1898 0.71 2.06 0.02 116 TVD_RCVD_IP 1880 1.34 2.04 0.97 117 TR_XM_INV_DKIM 1875 0.77 2.03 0.12 118 T_REMOTE_IMAGE 1859 3.10 2.01 3.66 119 RCVD_IN_PSBL 1852 1.02 2.01 0.52 120 T_TooManySym_01 1849 6.12 2.00 8.24 121 SpammyFromTLD_02 1810 1.01 1.96 0.53 122 XM_B_COPY_HTML 1771 1.34 1.92 1.04 123 USER_IN_DEF_DKIM_WL 1769 12.81 1.92 18.42 124 XMStockSpam_06 1752 1.71 1.90 1.61 125 TR_XM_NoHeaderRelay 1749 0.73 1.90 0.13 126 MIME_CHARSET_FARAWAY 1651 0.99 1.79 0.57 127 SpammyFromTLD_01 1620 1.00 1.76 0.62 128 XM_H_Undi_Recip 1544 0.66 1.67 0.15 129 XM_B_URI_Unicode 1542 1.46 1.67 1.35 130 XM_OfRef7 1525 0.77 1.65 0.31 131 XMSexyCombo_01 1506 0.68 1.63 0.19 132 LongTLD 1496 0.71 1.62 0.23 133 T_STY_INVIS_DIRECT 1489 0.87 1.61 0.49 134 XMPhish30 1471 1.11 1.59 0.86 135 ADVANCE_FEE_5_NEW_MONEY 1395 0.51 1.51 0.00 136 HOSTED_IMG_MULTI_PUB_01 1391 0.54 1.51 0.04 137 TR_XM_COVIDMETA4 1391 0.53 1.51 0.03 138 HK_SCAM 1378 0.53 1.49 0.04 139 MONEY_FRAUD_8 1375 0.53 1.49 0.03 140 MIME_QP_LONG_LINE 1374 2.64 1.49 3.24 141 ALL_TRUSTED 1342 10.49 1.45 15.15 142 MILLION_USD 1334 0.52 1.45 0.04 143 XMReplyNow 1320 0.65 1.43 0.25 144 TM2_M_OBFU_COMMENT 1306 0.83 1.42 0.53 145 RELAYCOUNTRY_AT 1306 0.58 1.42 0.16 146 XMSlimDrugH 1233 0.80 1.34 0.53 147 SUBJ_ALL_CAPS 1216 1.13 1.32 1.04 148 TR_XM_Undi_RecipCombo2 1215 0.45 1.32 0.01 149 HTML_TAG_BALANCE_BODY 1213 0.90 1.31 0.68 150 FORGED_MUA_OUTLOOK 1187 0.46 1.29 0.04 151 AXB_XMAILER_MIMEOLE_OL_024C2 1186 0.44 1.29 0.00 152 FSL_NEW_HELO_USER 1185 0.44 1.28 0.00 153 XM_UB60 1176 0.46 1.27 0.05 154 TR_XM_Undi_Recip11 1170 0.45 1.27 0.03 155 XM_DIRTYINTL 1161 0.49 1.26 0.09 156 URI_HEX 1149 1.09 1.25 1.01 157 XM_ProductURIs 1144 0.71 1.24 0.44 158 XM_H_Long_From02 1142 1.07 1.24 0.98 159 UNDISC_MONEY 1141 0.42 1.24 0.00 160 FROM_MISSP_REPLYTO 1131 0.42 1.23 0.00 161 TooManyTo_002 1121 4.31 1.21 5.90 162 TR_XM_FormFill 1102 0.41 1.19 0.01 163 SHOPIFY_IMG_NOT_RCVD_SFY 1100 0.60 1.19 0.29 164 TR_XM_Undi_Recip5 1091 0.40 1.18 0.00 165 URI_TRY_3LD 1078 0.69 1.17 0.44 166 BAYES_40 1074 3.36 1.16 4.48 167 TooManyTo_003 1074 1.08 1.16 1.04 168 XMSubMetaI_00 1074 0.89 1.16 0.76 169 FORM_FRAUD_5 1068 0.39 1.16 0.00 170 HTML_FONT_FACE_BAD 1064 0.73 1.15 0.51 171 TooManyTo_004 1049 0.93 1.14 0.83 172 URI_NOVOWEL 1037 1.23 1.12 1.28 173 XM_UB99 1036 0.39 1.12 0.01 174 TooManyTo_005 1035 0.85 1.12 0.71 175 FILL_THIS_FORM 1017 0.88 1.10 0.77 176 MILLION_HUNDRED 1005 0.38 1.09 0.02 177 RCVD_IN_XBL 1004 0.38 1.09 0.02 178 MSOE_MID_WRONG_CASE 997 0.37 1.08 0.00 179 MPART_ALT_DIFF_COUNT 997 0.72 1.08 0.53 180 TR_XM_Undi_RecipCombo3 997 0.37 1.08 0.00 181 RCVD_IN_PBL 978 0.81 1.06 0.68 182 DEAR_BENEFICIARY 968 0.37 1.05 0.02 183 FROM_MISSP_EH_MATCH 966 0.36 1.05 0.00 184 TR_Mismatch_TLD_02 956 0.40 1.04 0.07 185 THIS_AD 945 0.62 1.02 0.41 186 DATE_IN_PAST_12_24 945 0.53 1.02 0.27 187 MONEY_FORM 939 0.36 1.02 0.02 188 ANY_BOUNCE_MESSAGE 936 3.56 1.01 4.87 189 BOUNCE_MESSAGE 936 3.56 1.01 4.87 190 XMHTMLBadTable_001 935 0.53 1.01 0.29 191 XMBody_78 932 0.49 1.01 0.21 192 XPRIO 931 0.34 1.01 0.00 193 HTML_MIME_NO_HTML_TAG 925 1.51 1.00 1.77 194 XM_B_SEO 895 0.50 0.97 0.25 195 TR_XM_Undi_Recip14 888 0.35 0.96 0.03 196 T_FILL_THIS_FORM_LOAN 873 0.37 0.95 0.07 197 FORGED_OUTLOOK_TAGS 872 0.32 0.95 0.00 198 XM_SendGrid 872 1.09 0.95 1.17 199 FORGED_OUTLOOK_HTML 871 0.32 0.94 0.00 200 MONEY_FRAUD_5 871 0.33 0.94 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 149939 87.25 94.19 83.67 2 RELAYCOUNTRY_US 146208 82.24 83.50 81.59 3 DKIM_SIGNED 131997 78.45 87.76 73.66 4 XM_DK_Pass 129622 76.11 83.45 72.33 5 DKIM_VALID 128763 75.61 82.91 71.85 6 XM_B_Unicode 122046 73.18 83.04 68.10 7 DKIM_VALID_AU 110655 63.84 67.90 61.75 8 BAYES_50 102606 50.36 36.97 57.26 9 DCC_CHECK_NEGATIVE 97541 43.10 21.09 54.43 10 XMListUnsubscribeExists 89600 57.35 71.61 50.00 11 XM_B_SpammyWords 81892 54.38 71.23 45.70 12 DCC_CHECK 81627 56.71 78.38 45.55 13 XM_B_Unicode3 75924 45.33 51.09 42.37 14 RCVD_IN_MSPIKE_H2 63507 37.54 41.61 35.44 15 LOC_TINY_FONT_1 52980 36.94 51.25 29.56 16 HTML_FONT_LOW_CONTRAST 51287 31.80 37.97 28.62 17 DKIM_VALID_EF 50302 27.94 27.69 28.07 18 MIME_HTML_ONLY 46298 26.23 26.99 25.84 19 T_TM2_M_HEADER_IN_MSG 43696 23.18 20.85 24.38 20 FVGT_m_MULTI_ODD 41939 26.00 31.06 23.40 21 XMSubLong 39810 21.61 20.43 22.21 22 XM_B_SpammyWords2 35998 27.21 41.04 20.09 23 T_KAM_HTML_FONT_INVALID 34443 23.69 32.37 19.22 24 USER_IN_DEF_DKIM_WL 33010 12.81 1.92 18.42 25 ALL_TRUSTED 27149 10.49 1.45 15.15 26 XM_Multi_Part_URI 26814 18.01 23.92 14.96 27 BAYES_00 24429 9.17 0.51 13.63 28 XM_B_Unsub 23947 13.87 14.86 13.36 29 TR_XM_DK_Unsub 23474 15.71 20.78 13.10 30 UNPARSEABLE_RELAY 20413 13.70 18.18 11.39 31 XM_Evil_Numbers_Gen 18584 9.30 7.21 10.37 32 TooManyTo_001 17978 7.88 3.71 10.03 33 BAYES_60 17634 9.57 9.04 9.84 34 XM_B_PhoneNumber 17053 8.01 5.09 9.52 35 FSL_BULK_SIG 16748 9.17 8.84 9.35 36 XM_DKIMWhitelistDomains 14767 5.49 0.16 8.24 37 T_TooManySym_01 14758 6.12 2.00 8.24 38 LotsOfNums_01 13898 7.76 7.76 7.76 39 TR_XM_BayesUnsub 13684 9.90 14.30 7.64 40 TR_XM_DK_Bayes 13678 5.19 0.45 7.63 41 TR_XM_DK_Bayes1 13532 5.14 0.44 7.55 42 TR_XM_DK_Bayes2 11975 4.50 0.26 6.68 43 RCVD_IN_VALIDITY_SAFE 11740 5.18 2.52 6.55 44 XM_B_Phish_Phrases 11622 6.64 6.95 6.49 45 TR_MAX_INTL_RELAY 11199 9.88 16.92 6.25 46 XMStrtUSub 10746 5.33 4.04 6.00 47 XM_H_GMP 10705 5.87 5.65 5.97 48 XM_H_Long_From01 10653 6.46 7.47 5.94 49 TooManyTo_002 10579 4.31 1.21 5.90 50 IN_ZIMBRA_NJ_WHITELIST 10240 3.80 0.09 5.71 51 LOTS_OF_MONEY 9849 7.47 11.32 5.50 52 HTML_IMAGE_RATIO_02 9770 5.98 7.00 5.45 53 T_TooManySym_02 9452 3.68 0.58 5.27 54 XM_B_SpammyWords3 9331 8.19 13.99 5.21 55 HTML_IMAGE_RATIO_04 9139 4.87 4.42 5.10 56 XM_UncommonTLD01 8975 5.57 6.66 5.01 57 RCVD_IN_MSPIKE_H3 8745 4.30 3.17 4.88 58 RCVD_IN_MSPIKE_WL 8745 4.30 3.17 4.88 59 ANY_BOUNCE_MESSAGE 8730 3.56 1.01 4.87 60 BOUNCE_MESSAGE 8730 3.56 1.01 4.87 61 XM_DK_Undo_02 8685 17.42 41.85 4.85 62 XM_B_FormFill 8045 2.97 0.02 4.49 63 BAYES_40 8036 3.36 1.16 4.48 64 MPART_ALT_DIFF 7582 4.83 5.99 4.23 65 RCVD_IN_VALIDITY_CERTIFIED 7167 3.36 2.11 4.00 66 TR_XM_SpammyWords4 6990 6.09 10.33 3.90 67 INVALID_MSGID 6906 2.61 0.20 3.85 68 BAYES_80 6842 5.92 10.01 3.82 69 XMSubMetaSx_00 6803 4.97 7.24 3.80 70 XMNumbers 6715 3.26 2.32 3.75 71 T_REMOTE_IMAGE 6555 3.10 2.01 3.66 72 BAYES_99 6448 13.91 33.94 3.60 73 BOTNET_IPINHOSTNAME 6320 5.98 10.73 3.53 74 TO_MALFORMED 6167 2.27 0.01 3.44 75 RELAYCOUNTRY_META 5951 7.79 16.47 3.32 76 MIME_QP_LONG_LINE 5802 2.64 1.49 3.24 77 BAYES_20 5536 2.35 0.92 3.09 78 FROM_EXCESS_BASE64 5176 2.64 2.17 2.89 79 BAYES_999 4795 10.64 26.12 2.68 80 XM_B_SpammyTLD 4786 2.99 3.60 2.67 81 MIME_HTML_ONLY_MULTI 4638 2.90 3.51 2.59 82 XM_PDF 4637 1.81 0.31 2.59 83 HTML_IMAGE_RATIO_06 4636 2.94 3.64 2.59 84 BAYES_95 4353 3.78 6.40 2.43 85 RCVD_IN_IADB_LISTED 4136 1.76 0.70 2.31 86 MAILING_LIST_MULTI 4073 2.20 2.07 2.27 87 XM_CamelCaseFrm001 4048 2.74 3.68 2.26 88 XM_Body_Dirty_Words 3889 4.98 10.44 2.17 89 RCVD_IN_IADB_SPF 3667 1.56 0.61 2.05 90 T_XMDrugObfuBody_14 3580 3.11 5.27 2.00 91 MIME_HTML_MOSTLY 3548 2.46 3.40 1.98 92 TR_XM_SpammyRelay 3517 5.34 11.89 1.96 93 TR_XM_DKIM_Undo 3475 11.71 30.68 1.94 94 XMGappySubj_01 3461 1.31 0.09 1.93 95 TM2_M_VERY_LONG_WORD 3428 2.54 3.75 1.91 96 TM2_M_URI_OPT_OUT 3373 2.03 2.32 1.88 97 BAYES_05 3321 1.39 0.50 1.85 98 RCVD_IN_IADB_SENDERID 3294 1.41 0.58 1.84 99 TR_XM_UnparsRelay 3261 4.58 9.93 1.82 100 DKIM_INVALID 3234 2.84 4.85 1.80 101 RCVD_IN_IADB_DK 3226 1.39 0.58 1.80 102 T_TooManySym_03 3215 1.24 0.16 1.79 103 HTML_MIME_NO_HTML_TAG 3180 1.51 1.00 1.77 104 XMSexyCombo_05 3135 3.00 5.44 1.75 105 IN_HORDE_ADDRESS_BOOK 3070 1.19 0.17 1.71 106 TR_XM_PhishingBody 3000 2.44 3.91 1.67 107 XMStockSpam_06 2882 1.71 1.90 1.61 108 KHOP_HELO_FCRDNS 2879 1.96 2.64 1.61 109 RCVD_IN_IADB_VOUCHED 2758 1.15 0.41 1.54 110 TR_XM_SpammyWords5 2747 1.75 2.17 1.53 111 TVD_SPACE_RATIO 2741 1.06 0.14 1.53 112 HTML_IMAGE_RATIO_08 2631 2.10 3.32 1.47 113 XM_DK_Undo_01 2617 1.77 2.37 1.46 114 XM_OfRef6 2612 2.46 4.40 1.46 115 UNTRUSTED_Relay 2598 3.60 7.77 1.45 116 RELAYCOUNTRY_CA 2592 2.76 5.32 1.45 117 T_XMDrugObfuBody_08 2521 2.09 3.40 1.41 118 TR_DCC_Bayes_99 2488 9.73 25.92 1.39 119 XM_B_URI_Unicode 2418 1.46 1.67 1.35 120 XMGappySubj_02 2323 0.87 0.03 1.30 121 XM_B_Investor 2309 2.42 4.62 1.29 122 URI_NOVOWEL 2293 1.23 1.12 1.28 123 XMDiploma_00 2253 1.67 2.48 1.26 124 T_TVD_MIME_NO_HEADERS 2160 0.81 0.04 1.21 125 BOTNET 2134 4.48 10.86 1.19 126 XM_SendGrid 2089 1.09 0.95 1.17 127 XM_GoogleGroups 2043 0.98 0.65 1.14 128 XMBdyGiftCard01 2042 1.06 0.91 1.14 129 XM_SPF_SoftFail 2016 2.54 5.29 1.12 130 RCVD_IN_IADB_OPTIN 1951 0.81 0.26 1.09 131 XM_B_Unsub2 1950 1.48 2.25 1.09 132 TR_Symld_Words 1911 0.89 0.55 1.07 133 TooManyTo_003 1869 1.08 1.16 1.04 134 SUBJ_ALL_CAPS 1865 1.13 1.32 1.04 135 XMBrknScrpt_02 1864 1.44 2.21 1.04 136 XM_B_COPY_HTML 1859 1.34 1.92 1.04 137 TR_XM_Base64_M1 1847 1.00 0.93 1.03 138 HTML_EXTRA_CLOSE 1820 0.68 0.03 1.02 139 URI_HEX 1806 1.09 1.25 1.01 140 XM_H_Long_From02 1751 1.07 1.24 0.98 141 TVD_RCVD_IP 1747 1.34 2.04 0.97 142 HTTPS_HTTP_MISMATCH 1681 0.89 0.78 0.94 143 XMBody_95 1674 0.69 0.21 0.93 144 TR_XM_DK_SendGrid 1588 0.81 0.66 0.89 145 TR_MetaPhish_Combo_01 1550 0.85 0.82 0.86 146 XMPhish30 1542 1.11 1.59 0.86 147 TooManyTo_004 1479 0.93 1.14 0.83 148 T_XMDrugObfuBody_00 1443 1.23 2.07 0.81 149 XM_UB50 1439 1.91 4.07 0.80 150 FILL_THIS_FORM 1373 0.88 1.10 0.77 151 DKIM_ADSP_CUSTOM_MED 1360 0.81 0.90 0.76 152 XMSubMetaI_00 1354 0.89 1.16 0.76 153 T_FILL_THIS_FORM_SHORT 1343 1.39 2.64 0.75 154 RCVD_IN_BL_SPAMCOP_NET 1307 4.23 11.02 0.73 155 TooManyTo_005 1278 0.85 1.12 0.71 156 URI_OPTOUT_3LD 1275 0.53 0.17 0.71 157 HTML_TAG_BALANCE_BODY 1227 0.90 1.31 0.68 158 RCVD_IN_PBL 1220 0.81 1.06 0.68 159 XM_H_PHPMailer 1193 0.74 0.89 0.67 160 XMGenDplmaNmb 1188 0.75 0.93 0.66 161 XMBody_17 1187 1.14 2.07 0.66 162 FILL_THIS_FORM_LONG 1118 0.45 0.12 0.62 163 SpammyFromTLD_01 1104 1.00 1.76 0.62 164 XMBSHREFv2 1090 0.58 0.52 0.61 165 DIET_1 1070 1.26 2.54 0.60 166 TRACKER_ID 1027 0.41 0.09 0.57 167 MIME_CHARSET_FARAWAY 1025 0.99 1.79 0.57 168 FROM_GOV_DKIM_AU 1000 0.40 0.10 0.56 169 XM_B_DNDMA 992 0.56 0.59 0.55 170 T_XMHurry_00 958 1.13 2.28 0.53 171 MPART_ALT_DIFF_COUNT 949 0.72 1.08 0.53 172 TM2_M_OBFU_COMMENT 946 0.83 1.42 0.53 173 SpammyFromTLD_02 943 1.01 1.96 0.53 174 XMSlimDrugH 943 0.80 1.34 0.53 175 XM_B_SpammyWords4 941 1.19 2.47 0.53 176 RCVD_IN_PSBL 925 1.02 2.01 0.52 177 T_TooManySym_04 924 0.35 0.03 0.52 178 HTML_FONT_FACE_BAD 912 0.73 1.15 0.51 179 TR_XM_SPAMCOP 898 3.21 8.46 0.50 180 T_STY_INVIS_DIRECT 886 0.87 1.61 0.49 181 XM_URI_RBL 869 1.15 2.45 0.48 182 XMLngstWrd_00 863 0.46 0.42 0.48 183 XMNoVowels 853 0.46 0.43 0.48 184 NML_ADSP_CUSTOM_MED 837 0.56 0.74 0.47 185 TR_XM_SpammyWords2 835 4.78 13.16 0.47 186 FORGED_GMAIL_RCVD 827 0.53 0.67 0.46 187 USER_IN_WELCOMELIST 813 0.30 0.00 0.45 188 USER_IN_WHITELIST 813 0.30 0.00 0.45 189 PLING_QUERY 802 0.61 0.91 0.45 190 XMSubMetaSxObfu_03 796 0.49 0.58 0.44 191 URI_TRY_3LD 793 0.69 1.17 0.44 192 XM_ProductURIs 792 0.71 1.24 0.44 193 XMCapTrack 785 0.42 0.37 0.44 194 MSGID_FROM_MTA_HEADER 781 0.37 0.24 0.44 195 XM_Ancestry_Forge 781 0.29 0.00 0.44 196 XM_S_SubURI 779 0.31 0.08 0.43 197 DKIM_ADSP_NXDOMAIN 753 1.27 2.93 0.42 198 RELAYCOUNTRY_AU 741 1.32 3.07 0.41 199 THIS_AD 729 0.62 1.02 0.41 200 NO_DNS_FOR_FROM 721 1.18 2.69 0.40 ----------------------------------------------------------------------