Email: 251873 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.38 sec Spam: 88628 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.39 sec Ham: 163245 Autolearn: 0 AvgScore: -0.24 AvgScanTime: 1.37 sec Time Spent Running SA: 96.45 hours Time Spent Processing Spam: 34.15 hours Time Spent Processing Ham: 62.31 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85086 87.67 96.00 83.14 2 DKIM_SIGNED 79373 81.19 89.56 76.64 3 XM_DK_Pass 75866 78.92 85.60 75.29 4 DKIM_VALID 75283 78.21 84.94 74.55 5 RELAYCOUNTRY_US 74905 81.67 84.52 80.13 6 XM_B_Unicode 74328 75.65 83.87 71.19 7 DCC_CHECK 70816 59.92 79.90 49.07 8 XMListUnsubscribeExists 65993 60.39 74.46 52.76 9 XM_B_SpammyWords 62428 54.30 70.44 45.54 10 DKIM_VALID_AU 59448 65.00 67.08 63.87 11 LOC_TINY_FONT_1 45204 38.59 51.00 31.86 12 XM_B_Unicode3 44100 47.82 49.76 46.76 13 RCVD_IN_MSPIKE_H2 37923 39.28 42.79 37.37 14 HTML_FONT_LOW_CONTRAST 36087 34.28 40.72 30.78 15 XM_B_SpammyWords2 35718 28.51 40.30 22.10 16 XM_DK_Undo_02 35046 17.11 39.54 4.93 17 BAYES_50 33033 53.45 37.27 62.24 18 T_KAM_HTML_FONT_INVALID 30068 25.28 33.93 20.59 19 FVGT_m_MULTI_ODD 28732 27.61 32.42 24.99 20 BAYES_99 28290 13.54 31.92 3.57 21 MIME_HTML_ONLY 25883 24.06 29.20 21.26 22 TR_XM_DKIM_Undo 25047 11.30 28.26 2.09 23 DKIM_VALID_EF 24693 28.65 27.86 29.08 24 BAYES_999 21658 10.36 24.44 2.72 25 TR_DCC_Bayes_99 21626 9.50 24.40 1.41 26 TR_XM_DK_Unsub 18777 16.18 21.19 13.46 27 XM_Multi_Part_URI 18710 17.99 21.11 16.29 28 XMSubLong 18169 22.10 20.50 22.97 29 DCC_CHECK_NEGATIVE 17185 39.82 19.39 50.91 30 T_TM2_M_HEADER_IN_MSG 16013 21.24 18.07 22.96 31 TR_MAX_INTL_RELAY 15390 10.06 17.36 6.10 32 UNPARSEABLE_RELAY 14203 13.88 16.03 12.72 33 RELAYCOUNTRY_META 13853 8.03 15.63 3.90 34 XM_B_SpammyWords3 13320 9.07 15.03 5.83 35 XM_B_Unsub 12662 11.42 14.29 9.86 36 TR_XM_BayesUnsub 12209 9.55 13.78 7.25 37 TR_XM_SpammyWords2 11270 4.70 12.72 0.35 38 TR_XM_SpammyRelay 10229 5.37 11.54 2.01 39 XM_Body_Dirty_Words 9864 6.22 11.13 3.55 40 BAYES_80 9601 6.23 10.83 3.73 41 BOTNET_IPINHOSTNAME 8794 5.79 9.92 3.54 42 BAYES_60 8728 8.09 9.85 7.13 43 BOTNET 8447 4.22 9.53 1.34 44 FSL_BULK_SIG 8128 9.49 9.17 9.66 45 RCVD_IN_BL_SPAMCOP_NET 8005 3.59 9.03 0.63 46 LOTS_OF_MONEY 7370 6.32 8.32 5.23 47 XM_UncommonTLD01 7321 6.56 8.26 5.64 48 TR_XM_UnparsRelay 7283 3.84 8.22 1.46 49 HTML_IMAGE_RATIO_02 6825 6.41 7.70 5.70 50 TR_XM_SpammyWords4 6497 4.97 7.33 3.69 51 RELAYCOUNTRY_CA 6484 3.73 7.32 1.78 52 XMSubMetaSx_00 6340 5.89 7.15 5.20 53 XMSexyCombo_05 6317 4.06 7.13 2.40 54 XM_Evil_Numbers_Gen 6254 8.69 7.06 9.58 55 LotsOfNums_01 6136 6.95 6.92 6.96 56 TR_XM_SPAMCOP 6093 2.67 6.87 0.39 57 MPART_ALT_DIFF 5837 5.53 6.59 4.96 58 XM_B_Phish_Phrases 5661 5.70 6.39 5.32 59 BAYES_95 5490 3.72 6.19 2.37 60 XM_H_GMP 5270 6.48 5.95 6.76 61 RCVD_IN_VALIDITY_RPBL 5222 2.18 5.89 0.16 62 TR_XM_PhishingBody 4771 3.03 5.38 1.75 63 T_XMDrugObfuBody_14 4740 3.33 5.35 2.23 64 XM_H_Long_From01 4469 5.48 5.04 5.72 65 UNTRUSTED_Relay 4435 2.88 5.00 1.72 66 DKIM_INVALID 4090 2.98 4.61 2.09 67 MIME_HTML_MOSTLY 4085 3.46 4.61 2.84 68 HTML_IMAGE_RATIO_04 3926 4.88 4.43 5.13 69 XMStrtUSub 3669 5.44 4.14 6.15 70 HTML_IMAGE_RATIO_06 3582 3.27 4.04 2.85 71 SpammyFromTLD_02 3516 1.50 3.97 0.17 72 XM_OfRef6 3421 1.95 3.86 0.91 73 XM_B_Investor 3396 2.12 3.83 1.20 74 XM_CamelCaseFrm001 3335 2.79 3.76 2.25 75 XM_B_PhoneNumber 3326 5.50 3.75 6.45 76 TooManyTo_001 3206 5.66 3.62 6.76 77 RCVD_IN_MSPIKE_WL 3156 4.51 3.56 5.02 78 RCVD_IN_MSPIKE_H3 3156 4.51 3.56 5.02 79 TM2_M_VERY_LONG_WORD 3076 2.41 3.47 1.84 80 RCVD_IN_PSBL 3064 1.74 3.46 0.80 81 HTML_IMAGE_RATIO_08 3048 2.39 3.44 1.83 82 MIME_HTML_ONLY_MULTI 3003 2.89 3.39 2.62 83 XM_B_SpammyTLD 2938 3.08 3.31 2.96 84 DKIM_ADSP_NXDOMAIN 2759 1.43 3.11 0.51 85 XMNoVowels 2731 2.26 3.08 1.81 86 T_XMHurry_00 2690 1.56 3.04 0.76 87 NO_DNS_FOR_FROM 2667 1.37 3.01 0.47 88 TR_XM_MaxWHORU 2662 1.30 3.00 0.38 89 T_REMOTE_IMAGE 2626 3.19 2.96 3.32 90 TR_XM_SpammyWords5 2621 1.88 2.96 1.30 91 XM_SPF_SoftFail 2583 1.81 2.91 1.21 92 XMPhish30 2478 1.46 2.80 0.74 93 RCVD_IN_VALIDITY_SAFE 2458 4.70 2.77 5.75 94 XMNumbers 2452 3.60 2.77 4.05 95 TM2_M_URI_OPT_OUT 2413 2.39 2.72 2.21 96 XM_URI_RBL 2369 1.27 2.67 0.51 97 T_FILL_THIS_FORM_SHORT 2286 1.30 2.58 0.61 98 XM_DK_Undo_01 2253 1.98 2.54 1.67 99 T_XMDrugObfuBody_08 2217 1.77 2.50 1.37 100 FROM_EXCESS_BASE64 2208 2.37 2.49 2.31 101 RCVD_IN_VALIDITY_CERTIFIED 2183 3.89 2.46 4.67 102 DIET_1 2135 1.37 2.41 0.81 103 RELAYCOUNTRY_AU 2134 1.11 2.41 0.40 104 USER_IN_DEF_DKIM_WL 1988 12.52 2.24 18.10 105 XM_UB50 1965 1.41 2.22 0.97 106 T_TooManySym_01 1872 6.48 2.11 8.85 107 SpammyFromTLD_01 1856 1.24 2.09 0.78 108 XM_B_SpammyWords4 1849 1.34 2.09 0.93 109 NORDNS_LOW_CONTRAST 1818 0.74 2.05 0.03 110 TO_NO_BRKTS_HTML_ONLY 1799 0.93 2.03 0.34 111 TR_XM_NoHeaderRelay 1782 0.82 2.01 0.17 112 MAILING_LIST_MULTI 1776 2.34 2.00 2.53 113 TO_NO_BRKTS_FROM_MSSP 1771 0.71 2.00 0.01 114 FROM_MISSP_REPLYTO 1738 0.69 1.96 0.00 115 XM_BadFromFormat 1732 0.79 1.95 0.15 116 XMDiploma_00 1689 1.52 1.91 1.30 117 XM_B_URI_Unicode 1671 1.83 1.89 1.79 118 HTML_IMAGE_ONLY_16 1658 0.83 1.87 0.26 119 XM_B_Unsub2 1617 1.51 1.82 1.34 120 MALE_ENHANCE 1585 0.64 1.79 0.02 121 XMBody_17 1576 0.96 1.78 0.51 122 XMSubMetaI_00 1545 0.92 1.74 0.47 123 SUBJ_ALL_CAPS 1520 1.23 1.72 0.97 124 XMBrknScrpt_02 1517 1.27 1.71 1.03 125 XM_B_COPY_HTML 1433 1.25 1.62 1.06 126 LongTLD 1399 0.78 1.58 0.35 127 HOSTED_IMG_MULTI_PUB_01 1393 0.57 1.57 0.03 128 T_XMDrugObfuBody_00 1374 0.87 1.55 0.50 129 XM_SendGrid 1360 1.36 1.53 1.26 130 SHOPIFY_IMG_NOT_RCVD_SFY 1332 0.79 1.50 0.40 131 XMStockSpam_06 1302 1.60 1.47 1.68 132 MIME_QP_LONG_LINE 1286 2.51 1.45 3.08 133 HTML_MIME_NO_HTML_TAG 1286 1.80 1.45 1.99 134 TR_Mismatch_TLD_02 1264 0.54 1.43 0.06 135 HTML_TAG_BALANCE_BODY 1252 1.40 1.41 1.39 136 XM_B_Phish66 1231 0.65 1.39 0.25 137 TR_XM_INV_DKIM 1209 0.60 1.36 0.18 138 BOTNET_NORDNS 1206 0.49 1.36 0.01 139 ALL_TRUSTED 1201 10.89 1.36 16.06 140 BAYES_40 1201 4.04 1.36 5.49 141 XMReplyNow 1182 0.64 1.33 0.26 142 TR_XM_PHPDW 1173 0.60 1.32 0.20 143 KHOP_HELO_FCRDNS 1172 1.32 1.32 1.32 144 TR_XM_PHPForged 1172 0.58 1.32 0.18 145 T_STY_INVIS_DIRECT 1158 0.78 1.31 0.49 146 TR_XM_FormFill2 1143 0.58 1.29 0.20 147 XM_H_PHPOS 1119 0.55 1.26 0.17 148 FONT_INVIS_LONG_LINE 1111 0.49 1.25 0.08 149 URI_HEX 1106 1.15 1.25 1.09 150 XMSexyCombo_01 1101 1.21 1.24 1.19 151 RCVD_IN_PBL 1097 0.81 1.24 0.58 152 TR_Symld_Words 1088 1.32 1.23 1.38 153 XM_OfRef7 1049 0.59 1.18 0.27 154 XM_B_REG_HTML 1013 0.55 1.14 0.23 155 TM2_M_OBFU_COMMENT 1012 0.89 1.14 0.75 156 SUBJ_YOUR_FAMILY 1001 0.49 1.13 0.15 157 XM_ProductURIs 940 0.93 1.06 0.87 158 DKIM_ADSP_CUSTOM_MED 940 0.90 1.06 0.81 159 XM_H_Long_From02 927 1.03 1.05 1.02 160 PLING_QUERY 927 0.72 1.05 0.54 161 XMClaimOffer 925 0.61 1.04 0.37 162 XM_HighProb1 925 0.38 1.04 0.01 163 MPART_ALT_DIFF_COUNT 904 0.80 1.02 0.68 164 XM_DIRTYINTL 901 0.42 1.02 0.10 165 TR_Mismatch_TLD_01 894 0.51 1.01 0.25 166 XMBdyGiftCard01 884 1.35 1.00 1.55 167 XM_UB99 878 0.35 0.99 0.01 168 MIME_CHARSET_FARAWAY 874 0.76 0.99 0.64 169 BAYES_20 865 2.54 0.98 3.40 170 XM_RXBody 838 0.56 0.95 0.35 171 J_POPCORN_WO_D 812 0.41 0.92 0.13 172 RDNS_DYNAMIC 809 0.49 0.91 0.26 173 PDS_RDNS_DYNAMIC_FP 803 0.35 0.91 0.04 174 TVD_RCVD_IP 795 1.09 0.90 1.20 175 MultiRelay_CC 794 0.38 0.90 0.10 176 XM_B_SEO 793 0.49 0.89 0.27 177 NML_ADSP_CUSTOM_MED 790 0.64 0.89 0.50 178 XMSlimDrugH 784 0.70 0.88 0.60 179 TR_XM_RelayPhish 767 0.34 0.87 0.05 180 XM_GoogleGroups 752 1.05 0.85 1.16 181 XM_B_COVIDMETA 732 0.36 0.83 0.11 182 XMSubMetaSSx_00 730 0.43 0.82 0.21 183 XMGenDplmaNmb 722 0.62 0.81 0.51 184 URI_NOVOWEL 719 1.19 0.81 1.39 185 T_XMDrugObfuBody_10 699 0.31 0.79 0.05 186 TR_XM_Base64_M1 694 0.80 0.78 0.81 187 TM2_M_A_HREF_HREF 693 0.37 0.78 0.14 188 FROM_SUSPICIOUS_NTLD 686 0.31 0.77 0.06 189 HTML_IMAGE_ONLY_20 681 0.72 0.77 0.69 190 THIS_AD 680 0.50 0.77 0.36 191 URI_TRY_3LD 672 0.56 0.76 0.46 192 HELO_DYNAMIC_SPLIT_IP 669 0.27 0.75 0.01 193 TR_XM_FormFill 665 0.27 0.75 0.01 194 XMMoneyMeta_00 657 0.49 0.74 0.35 195 HTML_FONT_FACE_BAD 653 0.57 0.74 0.49 196 TR_LOTS_OF_MONEY3 652 0.39 0.74 0.20 197 RELAYCOUNTRY_DE 646 0.51 0.73 0.39 198 XM_H_PHPMailer 641 0.85 0.72 0.91 199 SUSP_UTF8_WORD_SUBJ 640 0.27 0.72 0.02 200 RCVD_IN_IADB_LISTED 638 1.57 0.72 2.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135719 87.67 96.00 83.14 2 RELAYCOUNTRY_US 130803 81.67 84.52 80.13 3 DKIM_SIGNED 125115 81.19 89.56 76.64 4 XM_DK_Pass 122902 78.92 85.60 75.29 5 DKIM_VALID 121703 78.21 84.94 74.55 6 XM_B_Unicode 116217 75.65 83.87 71.19 7 DKIM_VALID_AU 104265 65.00 67.08 63.87 8 BAYES_50 101599 53.45 37.27 62.24 9 XMListUnsubscribeExists 86124 60.39 74.46 52.76 10 DCC_CHECK_NEGATIVE 83100 39.82 19.39 50.91 11 DCC_CHECK 80106 59.92 79.90 49.07 12 XM_B_Unicode3 76338 47.82 49.76 46.76 13 XM_B_SpammyWords 74340 54.30 70.44 45.54 14 RCVD_IN_MSPIKE_H2 61010 39.28 42.79 37.37 15 LOC_TINY_FONT_1 52005 38.59 51.00 31.86 16 HTML_FONT_LOW_CONTRAST 50250 34.28 40.72 30.78 17 DKIM_VALID_EF 47469 28.65 27.86 29.08 18 FVGT_m_MULTI_ODD 40802 27.61 32.42 24.99 19 XMSubLong 37497 22.10 20.50 22.97 20 T_TM2_M_HEADER_IN_MSG 37484 21.24 18.07 22.96 21 XM_B_SpammyWords2 36083 28.51 40.30 22.10 22 MIME_HTML_ONLY 34714 24.06 29.20 21.26 23 T_KAM_HTML_FONT_INVALID 33612 25.28 33.93 20.59 24 USER_IN_DEF_DKIM_WL 29543 12.52 2.24 18.10 25 XM_Multi_Part_URI 26592 17.99 21.11 16.29 26 ALL_TRUSTED 26223 10.89 1.36 16.06 27 TR_XM_DK_Unsub 21972 16.18 21.19 13.46 28 UNPARSEABLE_RELAY 20757 13.88 16.03 12.72 29 BAYES_00 16453 6.68 0.42 10.08 30 XM_B_Unsub 16101 11.42 14.29 9.86 31 FSL_BULK_SIG 15764 9.49 9.17 9.66 32 XM_DKIMWhitelistDomains 15736 6.26 0.02 9.64 33 XM_Evil_Numbers_Gen 15636 8.69 7.06 9.58 34 T_TooManySym_01 14452 6.48 2.11 8.85 35 TR_XM_DK_Bayes 12856 5.23 0.35 7.88 36 TR_XM_DK_Bayes1 12660 5.15 0.34 7.76 37 TR_XM_BayesUnsub 11837 9.55 13.78 7.25 38 BAYES_60 11639 8.09 9.85 7.13 39 LotsOfNums_01 11368 6.95 6.92 6.96 40 TR_XM_DK_Bayes2 11322 4.58 0.24 6.94 41 XM_H_GMP 11042 6.48 5.95 6.76 42 TooManyTo_001 11041 5.66 3.62 6.76 43 XM_B_PhoneNumber 10529 5.50 3.75 6.45 44 XMStrtUSub 10038 5.44 4.14 6.15 45 TR_MAX_INTL_RELAY 9961 10.06 17.36 6.10 46 XM_B_SpammyWords3 9523 9.07 15.03 5.83 47 RCVD_IN_VALIDITY_SAFE 9391 4.70 2.77 5.75 48 XM_H_Long_From01 9343 5.48 5.04 5.72 49 HTML_IMAGE_RATIO_02 9310 6.41 7.70 5.70 50 XM_UncommonTLD01 9202 6.56 8.26 5.64 51 BAYES_40 8967 4.04 1.36 5.49 52 IN_ZIMBRA_NJ_WHITELIST 8779 3.55 0.17 5.38 53 XM_B_Phish_Phrases 8692 5.70 6.39 5.32 54 LOTS_OF_MONEY 8537 6.32 8.32 5.23 55 XMSubMetaSx_00 8488 5.89 7.15 5.20 56 HTML_IMAGE_RATIO_04 8376 4.88 4.43 5.13 57 RCVD_IN_MSPIKE_WL 8203 4.51 3.56 5.02 58 RCVD_IN_MSPIKE_H3 8203 4.51 3.56 5.02 59 MPART_ALT_DIFF 8100 5.53 6.59 4.96 60 XM_DK_Undo_02 8050 17.11 39.54 4.93 61 T_TooManySym_02 7915 3.33 0.52 4.85 62 RCVD_IN_VALIDITY_CERTIFIED 7623 3.89 2.46 4.67 63 ANY_BOUNCE_MESSAGE 7379 3.13 0.57 4.52 64 BOUNCE_MESSAGE 7365 3.12 0.56 4.51 65 INVALID_MSGID 6784 2.82 0.36 4.16 66 XMNumbers 6605 3.60 2.77 4.05 67 RELAYCOUNTRY_META 6374 8.03 15.63 3.90 68 TO_MALFORMED 6204 2.47 0.03 3.80 69 BAYES_80 6086 6.23 10.83 3.73 70 TR_XM_SpammyWords4 6021 4.97 7.33 3.69 71 BAYES_99 5823 13.54 31.92 3.57 72 XM_Body_Dirty_Words 5790 6.22 11.13 3.55 73 BOTNET_IPINHOSTNAME 5785 5.79 9.92 3.54 74 BAYES_20 5544 2.54 0.98 3.40 75 T_REMOTE_IMAGE 5418 3.19 2.96 3.32 76 MIME_QP_LONG_LINE 5024 2.51 1.45 3.08 77 XM_B_SpammyTLD 4832 3.08 3.31 2.96 78 HTML_IMAGE_RATIO_06 4658 3.27 4.04 2.85 79 MIME_HTML_MOSTLY 4637 3.46 4.61 2.84 80 BAYES_999 4442 10.36 24.44 2.72 81 MIME_HTML_ONLY_MULTI 4285 2.89 3.39 2.62 82 MAILING_LIST_MULTI 4125 2.34 2.00 2.53 83 XM_PDF 4065 1.75 0.38 2.49 84 TooManyTo_002 4051 1.82 0.60 2.48 85 XMSexyCombo_05 3921 4.06 7.13 2.40 86 BAYES_95 3868 3.72 6.19 2.37 87 FROM_EXCESS_BASE64 3768 2.37 2.49 2.31 88 XM_CamelCaseFrm001 3681 2.79 3.76 2.25 89 T_XMDrugObfuBody_14 3641 3.33 5.35 2.23 90 TM2_M_URI_OPT_OUT 3614 2.39 2.72 2.21 91 TR_XM_DKIM_Undo 3419 11.30 28.26 2.09 92 DKIM_INVALID 3412 2.98 4.61 2.09 93 T_TooManySym_03 3339 1.37 0.14 2.05 94 RCVD_IN_IADB_LISTED 3311 1.57 0.72 2.03 95 TR_XM_SpammyRelay 3284 5.37 11.54 2.01 96 BAYES_05 3261 1.46 0.48 2.00 97 HTML_MIME_NO_HTML_TAG 3255 1.80 1.45 1.99 98 TM2_M_VERY_LONG_WORD 3005 2.41 3.47 1.84 99 HTML_IMAGE_RATIO_08 2983 2.39 3.44 1.83 100 IN_HORDE_ADDRESS_BOOK 2961 1.22 0.12 1.81 101 XMNoVowels 2961 2.26 3.08 1.81 102 RCVD_IN_IADB_SPF 2933 1.39 0.63 1.80 103 XM_B_URI_Unicode 2928 1.83 1.89 1.79 104 RELAYCOUNTRY_CA 2909 3.73 7.32 1.78 105 TR_XM_PhishingBody 2863 3.03 5.38 1.75 106 UNTRUSTED_Relay 2811 2.88 5.00 1.72 107 XMStockSpam_06 2738 1.60 1.47 1.68 108 XM_DK_Undo_01 2730 1.98 2.54 1.67 109 XMGappySubj_01 2714 1.11 0.08 1.66 110 RCVD_IN_IADB_SENDERID 2644 1.26 0.60 1.62 111 RCVD_IN_IADB_DK 2583 1.24 0.60 1.58 112 TVD_SPACE_RATIO 2557 1.10 0.24 1.57 113 XMBdyGiftCard01 2527 1.35 1.00 1.55 114 TR_XM_UnparsRelay 2390 3.84 8.22 1.46 115 XMGappySubj_02 2379 0.96 0.04 1.46 116 RCVD_IN_IADB_VOUCHED 2336 1.06 0.38 1.43 117 TR_DCC_Bayes_99 2306 9.50 24.40 1.41 118 URI_NOVOWEL 2272 1.19 0.81 1.39 119 HTML_TAG_BALANCE_BODY 2268 1.40 1.41 1.39 120 TR_Symld_Words 2245 1.32 1.23 1.38 121 T_XMDrugObfuBody_08 2241 1.77 2.50 1.37 122 XM_B_Unsub2 2194 1.51 1.82 1.34 123 BOTNET 2194 4.22 9.53 1.34 124 KHOP_HELO_FCRDNS 2158 1.32 1.32 1.32 125 XMDiploma_00 2128 1.52 1.91 1.30 126 TR_XM_SpammyWords5 2126 1.88 2.96 1.30 127 XM_SendGrid 2062 1.36 1.53 1.26 128 XM_SPF_SoftFail 1972 1.81 2.91 1.21 129 TVD_RCVD_IP 1956 1.09 0.90 1.20 130 XM_B_Investor 1951 2.12 3.83 1.20 131 XMSexyCombo_01 1939 1.21 1.24 1.19 132 XM_GoogleGroups 1894 1.05 0.85 1.16 133 TooManyTo_003 1872 0.94 0.55 1.15 134 URI_HEX 1787 1.15 1.25 1.09 135 XM_B_COPY_HTML 1724 1.25 1.62 1.06 136 XMBrknScrpt_02 1677 1.27 1.71 1.03 137 XM_H_Long_From02 1664 1.03 1.05 1.02 138 RCVD_IN_IADB_OPTIN 1627 0.72 0.21 1.00 139 XMSexyCombo_04 1604 0.75 0.33 0.98 140 SUBJ_ALL_CAPS 1585 1.23 1.72 0.97 141 XM_UB50 1577 1.41 2.22 0.97 142 HTML_TAG_BALANCE_CENTER 1568 0.78 0.43 0.96 143 XM_B_SpammyWords4 1525 1.34 2.09 0.93 144 T_TVD_MIME_NO_HEADERS 1509 0.62 0.05 0.92 145 XM_OfRef6 1492 1.95 3.86 0.91 146 XM_H_PHPMailer 1490 0.85 0.72 0.91 147 XMBody_95 1469 0.65 0.19 0.90 148 TR_XM_DK_SendGrid 1428 0.81 0.69 0.87 149 XM_ProductURIs 1415 0.93 1.06 0.87 150 TooManyTo_004 1415 0.74 0.51 0.87 151 HELO_MISC_IP 1333 0.56 0.10 0.82 152 DIET_1 1323 1.37 2.41 0.81 153 TR_XM_Base64_M1 1317 0.80 0.78 0.81 154 DKIM_ADSP_CUSTOM_MED 1315 0.90 1.06 0.81 155 RCVD_IN_PSBL 1310 1.74 3.46 0.80 156 SpammyFromTLD_01 1278 1.24 2.09 0.78 157 TooManyTo_005 1247 0.67 0.49 0.76 158 T_XMHurry_00 1241 1.56 3.04 0.76 159 TM2_M_OBFU_COMMENT 1230 0.89 1.14 0.75 160 XMBSHREFv2 1204 0.56 0.23 0.74 161 XMPhish30 1201 1.46 2.80 0.74 162 USER_IN_WHITELIST 1195 0.47 0.00 0.73 163 USER_IN_WELCOMELIST 1195 0.47 0.00 0.73 164 XM_B_FormFill 1152 0.46 0.01 0.71 165 HTML_IMAGE_ONLY_20 1126 0.72 0.77 0.69 166 MPART_ALT_DIFF_COUNT 1113 0.80 1.02 0.68 167 TR_MetaPhish_Combo_01 1106 0.69 0.72 0.68 168 T_TooManySym_04 1063 0.44 0.04 0.65 169 MIME_CHARSET_FARAWAY 1050 0.76 0.99 0.64 170 MSGID_FROM_MTA_HEADER 1043 0.45 0.10 0.64 171 XM_B_DNDMA 1034 0.61 0.57 0.63 172 RCVD_IN_BL_SPAMCOP_NET 1031 3.59 9.03 0.63 173 T_FILL_THIS_FORM_SHORT 996 1.30 2.58 0.61 174 XMSlimDrugH 985 0.70 0.88 0.60 175 RCVD_IN_PBL 946 0.81 1.24 0.58 176 XMLngstWrd_00 943 0.46 0.25 0.58 177 PLING_QUERY 888 0.72 1.05 0.54 178 XM_URI_RBL 839 1.27 2.67 0.51 179 DKIM_ADSP_NXDOMAIN 836 1.43 3.11 0.51 180 XMGenDplmaNmb 833 0.62 0.81 0.51 181 XMBody_17 833 0.96 1.78 0.51 182 BASE64_LENGTH_79_INF 825 0.39 0.17 0.51 183 HTML_TEXT_INVISIBLE_STYLE 818 0.39 0.18 0.50 184 T_XMDrugObfuBody_00 817 0.87 1.55 0.50 185 NML_ADSP_CUSTOM_MED 813 0.64 0.89 0.50 186 T_STY_INVIS_DIRECT 808 0.78 1.31 0.49 187 XMPhish14 804 0.49 0.49 0.49 188 HTML_FONT_FACE_BAD 794 0.57 0.74 0.49 189 HTTPS_HTTP_MISMATCH 789 0.51 0.56 0.48 190 NO_DNS_FOR_FROM 775 1.37 3.01 0.47 191 XMSubMetaI_00 769 0.92 1.74 0.47 192 XMCapTrack 763 0.44 0.38 0.47 193 XM_S_SubURI 759 0.32 0.05 0.46 194 URI_TRY_3LD 750 0.56 0.76 0.46 195 MAY_BE_FORGED 742 0.31 0.05 0.45 196 FORGED_GMAIL_RCVD 724 0.53 0.68 0.44 197 XM_ShortIntro_01 686 0.48 0.59 0.42 198 XMSubMetaSxObfu_02 660 0.37 0.32 0.40 199 RELAYCOUNTRY_AU 659 1.11 2.41 0.40 200 SHOPIFY_IMG_NOT_RCVD_SFY 657 0.79 1.50 0.40 ----------------------------------------------------------------------