Email: 250477 Autolearn: 0 AvgScore: 5.02 AvgScanTime: 1.35 sec Spam: 89672 Autolearn: 0 AvgScore: 13.94 AvgScanTime: 1.39 sec Ham: 160805 Autolearn: 0 AvgScore: 0.04 AvgScanTime: 1.33 sec Time Spent Running SA: 94.13 hours Time Spent Processing Spam: 34.65 hours Time Spent Processing Ham: 59.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86421 88.57 96.37 84.22 2 DKIM_SIGNED 80655 82.17 89.94 77.83 3 XM_DK_Pass 76543 79.64 85.36 76.44 4 XM_B_Unicode 75969 77.15 84.72 72.93 5 DKIM_VALID 75926 79.03 84.67 75.89 6 RELAYCOUNTRY_US 75527 81.99 84.23 80.74 7 DCC_CHECK 71114 61.16 79.30 51.04 8 XMListUnsubscribeExists 66644 62.70 74.32 56.22 9 XM_B_SpammyWords 63283 56.07 70.57 47.98 10 DKIM_VALID_AU 61795 66.65 68.91 65.39 11 XM_B_Unicode3 47349 49.76 52.80 48.06 12 LOC_TINY_FONT_1 47015 40.43 52.43 33.74 13 RCVD_IN_MSPIKE_H2 38952 39.93 43.44 37.98 14 XM_DK_Undo_02 37391 17.96 41.70 4.72 15 XM_B_SpammyWords2 36804 29.54 41.04 23.13 16 HTML_FONT_LOW_CONTRAST 36675 35.26 40.90 32.11 17 BAYES_50 32211 52.47 35.92 61.70 18 BAYES_99 31614 14.97 35.26 3.66 19 T_KAM_HTML_FONT_INVALID 30752 26.20 34.29 21.68 20 FVGT_m_MULTI_ODD 28097 28.55 31.33 27.00 21 TR_XM_DKIM_Undo 26218 11.91 29.24 2.24 22 MIME_HTML_ONLY 25017 23.99 27.90 21.81 23 TR_DCC_Bayes_99 24779 10.89 27.63 1.56 24 BAYES_999 24419 11.53 27.23 2.77 25 DKIM_VALID_EF 22914 27.29 25.55 28.26 26 XM_Multi_Part_URI 21034 18.45 23.46 15.66 27 XMSubLong 19153 22.37 21.36 22.94 28 T_TM2_M_HEADER_IN_MSG 18183 21.25 20.28 21.79 29 DCC_CHECK_NEGATIVE 18094 38.63 20.18 48.93 30 TR_XM_DK_Unsub 17200 15.89 19.18 14.06 31 UNPARSEABLE_RELAY 15218 14.19 16.97 12.64 32 TR_MAX_INTL_RELAY 14311 10.06 15.96 6.77 33 XM_B_Unsub 13497 11.04 15.05 8.81 34 XM_B_SpammyWords3 13373 9.30 14.91 6.18 35 RELAYCOUNTRY_META 13222 7.75 14.74 3.85 36 TR_XM_BayesUnsub 13092 9.53 14.60 6.70 37 TR_XM_SpammyWords2 12627 5.44 14.08 0.62 38 TR_XM_SpammyRelay 9429 5.11 10.51 2.10 39 BAYES_80 8773 6.14 9.78 4.10 40 LOTS_OF_MONEY 8743 7.00 9.75 5.46 41 TR_XM_UnparsRelay 8451 4.57 9.42 1.87 42 RCVD_IN_BL_SPAMCOP_NET 8354 3.73 9.32 0.62 43 BOTNET_IPINHOSTNAME 8306 5.42 9.26 3.28 44 XM_Body_Dirty_Words 8115 4.88 9.05 2.56 45 BOTNET 7944 3.90 8.86 1.13 46 BAYES_60 7798 7.83 8.70 7.35 47 TR_XM_SpammyWords4 7589 5.46 8.46 3.79 48 FSL_BULK_SIG 7464 8.58 8.32 8.73 49 XM_Evil_Numbers_Gen 6791 9.15 7.57 10.03 50 TR_XM_SPAMCOP 6742 2.92 7.52 0.36 51 LotsOfNums_01 6489 7.34 7.24 7.40 52 HTML_IMAGE_RATIO_02 6280 6.23 7.00 5.81 53 XM_UncommonTLD01 6054 5.95 6.75 5.50 54 XM_B_Phish_Phrases 5989 5.93 6.68 5.52 55 UNTRUSTED_Relay 5630 3.42 6.28 1.83 56 RELAYCOUNTRY_CA 5465 3.18 6.09 1.55 57 MPART_ALT_DIFF 5404 5.43 6.03 5.10 58 BAYES_95 5267 3.82 5.87 2.67 59 XMSubMetaSx_00 5229 4.93 5.83 4.43 60 HTML_IMAGE_RATIO_04 5091 5.86 5.68 5.95 61 RCVD_IN_VALIDITY_RPBL 5027 2.06 5.61 0.09 62 XM_H_GMP 4890 6.07 5.45 6.42 63 DKIM_INVALID 4729 3.13 5.27 1.94 64 XM_H_Long_From01 4693 5.70 5.23 5.96 65 T_XMDrugObfuBody_14 4661 3.03 5.20 1.83 66 TR_XM_PhishingBody 4170 3.06 4.65 2.17 67 HTML_IMAGE_RATIO_06 4080 3.99 4.55 3.67 68 XMSexyCombo_05 3977 2.62 4.44 1.60 69 XM_B_Investor 3829 2.34 4.27 1.27 70 XMStrtUSub 3821 5.08 4.26 5.54 71 MIME_HTML_MOSTLY 3558 3.39 3.97 3.07 72 XMBody_17 3521 1.78 3.93 0.58 73 TooManyTo_001 3486 5.47 3.89 6.36 74 DKIM_ADSP_NXDOMAIN 3396 1.68 3.79 0.51 75 TM2_M_VERY_LONG_WORD 3306 2.38 3.69 1.64 76 XM_B_SpammyTLD 3193 2.88 3.56 2.50 77 MIME_HTML_ONLY_MULTI 3190 3.12 3.56 2.88 78 NO_DNS_FOR_FROM 3170 1.57 3.54 0.47 79 TR_XM_MaxWHORU 3146 1.50 3.51 0.38 80 RCVD_IN_MSPIKE_WL 3136 4.45 3.50 4.97 81 RCVD_IN_MSPIKE_H3 3136 4.45 3.50 4.97 82 XM_B_PhoneNumber 3071 5.40 3.42 6.51 83 XM_CamelCaseFrm001 2910 3.09 3.25 3.01 84 T_XMHurry_00 2826 1.81 3.15 1.05 85 XM_OfRef6 2779 1.93 3.10 1.28 86 XMNoVowels 2728 2.31 3.04 1.90 87 HTML_IMAGE_RATIO_08 2706 2.66 3.02 2.46 88 TR_XM_SpammyWords5 2680 2.24 2.99 1.82 89 TM2_M_URI_OPT_OUT 2646 2.20 2.95 1.78 90 XMNumbers 2629 3.70 2.93 4.12 91 T_XMDrugObfuBody_08 2601 2.15 2.90 1.73 92 XM_UB50 2550 1.67 2.84 1.01 93 T_TooManySym_01 2507 5.84 2.80 7.54 94 RCVD_IN_PSBL 2503 1.55 2.79 0.86 95 XM_URI_RBL 2480 1.30 2.77 0.48 96 T_REMOTE_IMAGE 2433 2.96 2.71 3.09 97 USER_IN_DEF_DKIM_WL 2429 12.93 2.71 18.62 98 FROM_EXCESS_BASE64 2340 2.77 2.61 2.85 99 RCVD_IN_VALIDITY_SAFE 2327 5.43 2.60 7.01 100 DIET_1 2303 1.42 2.57 0.78 101 RELAYCOUNTRY_AU 2284 1.21 2.55 0.46 102 XM_SPF_SoftFail 2240 1.51 2.50 0.97 103 XMDiploma_00 2105 1.79 2.35 1.48 104 RCVD_IN_VALIDITY_CERTIFIED 2043 4.50 2.28 5.74 105 NORDNS_LOW_CONTRAST 2018 0.83 2.25 0.04 106 XM_B_SpammyWords4 1997 1.42 2.23 0.97 107 XM_B_URI_Unicode 1966 2.23 2.19 2.25 108 TR_XM_NoHeaderRelay 1913 0.88 2.13 0.17 109 MAILING_LIST_MULTI 1880 2.47 2.10 2.69 110 KHOP_HELO_FCRDNS 1861 1.42 2.08 1.06 111 XM_B_COPY_HTML 1815 1.82 2.02 1.71 112 XMPhish30 1806 1.31 2.01 0.92 113 XM_B_Unsub2 1729 1.45 1.93 1.18 114 SpammyFromTLD_01 1698 1.18 1.89 0.78 115 T_FILL_THIS_FORM_SHORT 1601 0.98 1.79 0.54 116 XMStockSpam_06 1581 1.75 1.76 1.74 117 T_XMDrugObfuBody_00 1552 1.13 1.73 0.80 118 T_STY_INVIS_DIRECT 1512 0.88 1.69 0.43 119 BAYES_40 1472 3.94 1.64 5.22 120 SpammyFromTLD_02 1470 0.72 1.64 0.20 121 TR_XM_INV_DKIM 1451 0.72 1.62 0.21 122 XMBrknScrpt_02 1442 1.28 1.61 1.10 123 XMBdyGiftCard01 1409 1.53 1.57 1.51 124 SHOPIFY_IMG_NOT_RCVD_SFY 1390 0.82 1.55 0.42 125 XM_UB99 1388 0.56 1.55 0.00 126 SUBJ_ALL_CAPS 1387 1.41 1.55 1.33 127 XM_B_REG_HTML 1383 0.72 1.54 0.27 128 HTML_MIME_NO_HTML_TAG 1374 1.69 1.53 1.77 129 XMReplyNow 1342 0.71 1.50 0.27 130 MIME_QP_LONG_LINE 1335 2.51 1.49 3.08 131 MIME_CHARSET_FARAWAY 1321 0.89 1.47 0.57 132 LongTLD 1314 0.73 1.47 0.31 133 ALL_TRUSTED 1292 10.46 1.44 15.48 134 HTML_TAG_BALANCE_BODY 1235 1.17 1.38 1.05 135 TR_XM_PHPForged 1234 0.60 1.38 0.17 136 TR_XM_PHPDW 1234 0.60 1.38 0.17 137 TR_XM_FormFill2 1217 0.60 1.36 0.18 138 XM_H_PHPOS 1187 0.58 1.32 0.16 139 HK_RANDOM_REPLYTO 1156 0.58 1.29 0.18 140 TM2_M_OBFU_COMMENT 1154 1.02 1.29 0.87 141 THIS_AD 1141 0.72 1.27 0.41 142 XM_UB999 1136 0.46 1.27 0.00 143 PLING_QUERY 1127 0.75 1.26 0.46 144 ANY_BOUNCE_MESSAGE 1095 3.04 1.22 4.06 145 BOTNET_NORDNS 1095 0.44 1.22 0.01 146 BOUNCE_MESSAGE 1094 3.04 1.22 4.06 147 XMGenDplmaNmb 1088 0.87 1.21 0.68 148 XM_SendGrid 1058 1.18 1.18 1.19 149 XM_HighProb1 1050 0.43 1.17 0.02 150 RCVD_IN_PBL 1049 0.88 1.17 0.71 151 URI_HEX 1042 1.14 1.16 1.13 152 BAYES_20 1034 2.62 1.15 3.43 153 HOSTED_IMG_MULTI_PUB_01 1027 0.44 1.15 0.05 154 XMSubMetaI_00 1025 0.85 1.14 0.69 155 RDNS_DYNAMIC 1005 0.53 1.12 0.20 156 XM_H_Long_From02 982 1.08 1.10 1.08 157 PDS_RDNS_DYNAMIC_FP 980 0.42 1.09 0.05 158 XM_B_COVIDMETA 972 0.49 1.08 0.15 159 XM_RXBody 968 0.56 1.08 0.27 160 SUSP_UTF8_WORD_SUBJ 965 0.39 1.08 0.01 161 T_MONEY_PERCENT 951 0.47 1.06 0.13 162 TR_LOTS_OF_MONEY2 951 0.47 1.06 0.13 163 TR_MetaPhish_Combo_01 942 1.10 1.05 1.12 164 XM_B_Phish66 920 0.58 1.03 0.32 165 URI_TRY_3LD 918 0.62 1.02 0.39 166 J_POPCORN_WO_D 916 0.50 1.02 0.20 167 TVD_RCVD_IP 911 1.00 1.02 1.00 168 T_Symld_Words_02 907 0.54 1.01 0.27 169 MPART_ALT_DIFF_COUNT 895 0.89 1.00 0.82 170 TR_LOTS_OF_MONEY3 882 0.61 0.98 0.40 171 XM_DK_Undo_01 879 1.35 0.98 1.56 172 TR_XM_Base64_M1 862 1.18 0.96 1.30 173 URI_NOVOWEL 856 1.40 0.95 1.64 174 HELO_DYNAMIC_SPLIT_IP 808 0.33 0.90 0.01 175 MultiRelay_CC 808 0.42 0.90 0.15 176 TR_Mismatch_TLD_01 804 0.50 0.90 0.28 177 DATE_IN_PAST_03_06 796 0.39 0.89 0.11 178 XMSlimDrugH 783 0.74 0.87 0.66 179 DKIM_ADSP_CUSTOM_MED 776 0.86 0.87 0.86 180 HTTPS_HTTP_MISMATCH 770 0.65 0.86 0.54 181 XM_DIRTYINTL 757 0.35 0.84 0.07 182 XMClaimOffer 742 0.51 0.83 0.34 183 XM_H_PHPMailer 738 0.85 0.82 0.86 184 XM_GoogleGroups 727 1.16 0.81 1.35 185 TooManyTo_002 722 1.82 0.81 2.39 186 XMSexyCombo_01 714 0.48 0.80 0.30 187 TR_XM_DK_SendGrid 713 0.79 0.80 0.79 188 TR_XM_RelayPhish 711 0.32 0.79 0.06 189 HTML_FONT_FACE_BAD 704 0.68 0.79 0.63 190 XM_ProductURIs 701 0.62 0.78 0.53 191 XMPhish14 697 0.57 0.78 0.45 192 TooManyTo_003 663 1.02 0.74 1.18 193 XM_Body_Dirty_Words_01 658 0.31 0.73 0.07 194 TM2_M_A_HREF_HREF 655 0.39 0.73 0.20 195 TR_XM_InvalidRelay 640 0.26 0.71 0.01 196 SUBJ_DOLLARS 635 0.40 0.71 0.23 197 HTML_IMAGE_ONLY_12 633 0.38 0.71 0.20 198 XM_B_SEO 633 0.39 0.71 0.21 199 TooManyTo_004 626 0.82 0.70 0.88 200 XM_UB60 624 0.32 0.70 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135425 88.57 96.37 84.22 2 RELAYCOUNTRY_US 129829 81.99 84.23 80.74 3 DKIM_SIGNED 125155 82.17 89.94 77.83 4 XM_DK_Pass 122927 79.64 85.36 76.44 5 DKIM_VALID 122035 79.03 84.67 75.89 6 XM_B_Unicode 117282 77.15 84.72 72.93 7 DKIM_VALID_AU 105146 66.65 68.91 65.39 8 BAYES_50 99210 52.47 35.92 61.70 9 XMListUnsubscribeExists 90409 62.70 74.32 56.22 10 DCC_CHECK 82081 61.16 79.30 51.04 11 DCC_CHECK_NEGATIVE 78676 38.63 20.18 48.93 12 XM_B_Unicode3 77281 49.76 52.80 48.06 13 XM_B_SpammyWords 77152 56.07 70.57 47.98 14 RCVD_IN_MSPIKE_H2 61068 39.93 43.44 37.98 15 LOC_TINY_FONT_1 54259 40.43 52.43 33.74 16 HTML_FONT_LOW_CONTRAST 51633 35.26 40.90 32.11 17 DKIM_VALID_EF 45449 27.29 25.55 28.26 18 FVGT_m_MULTI_ODD 43414 28.55 31.33 27.00 19 XM_B_SpammyWords2 37193 29.54 41.04 23.13 20 XMSubLong 36889 22.37 21.36 22.94 21 MIME_HTML_ONLY 35074 23.99 27.90 21.81 22 T_TM2_M_HEADER_IN_MSG 35035 21.25 20.28 21.79 23 T_KAM_HTML_FONT_INVALID 34863 26.20 34.29 21.68 24 USER_IN_DEF_DKIM_WL 29949 12.93 2.71 18.62 25 XM_Multi_Part_URI 25178 18.45 23.46 15.66 26 ALL_TRUSTED 24900 10.46 1.44 15.48 27 TR_XM_DK_Unsub 22602 15.89 19.18 14.06 28 UNPARSEABLE_RELAY 20319 14.19 16.97 12.64 29 XM_Evil_Numbers_Gen 16121 9.15 7.57 10.03 30 BAYES_00 15845 6.53 0.58 9.85 31 XM_DKIMWhitelistDomains 15266 6.11 0.05 9.49 32 XM_B_Unsub 14165 11.04 15.05 8.81 33 FSL_BULK_SIG 14036 8.58 8.32 8.73 34 TR_XM_DK_Bayes 12476 5.16 0.49 7.76 35 TR_XM_DK_Bayes1 12346 5.10 0.49 7.68 36 T_TooManySym_01 12123 5.84 2.80 7.54 37 LotsOfNums_01 11900 7.34 7.24 7.40 38 BAYES_60 11824 7.83 8.70 7.35 39 RCVD_IN_VALIDITY_SAFE 11274 5.43 2.60 7.01 40 TR_XM_DK_Bayes2 11004 4.49 0.27 6.84 41 TR_MAX_INTL_RELAY 10892 10.06 15.96 6.77 42 TR_XM_BayesUnsub 10772 9.53 14.60 6.70 43 XM_B_PhoneNumber 10467 5.40 3.42 6.51 44 XM_H_GMP 10316 6.07 5.45 6.42 45 TooManyTo_001 10224 5.47 3.89 6.36 46 XM_B_SpammyWords3 9930 9.30 14.91 6.18 47 XM_H_Long_From01 9586 5.70 5.23 5.96 48 HTML_IMAGE_RATIO_04 9575 5.86 5.68 5.95 49 HTML_IMAGE_RATIO_02 9337 6.23 7.00 5.81 50 RCVD_IN_VALIDITY_CERTIFIED 9234 4.50 2.28 5.74 51 XMStrtUSub 8910 5.08 4.26 5.54 52 XM_B_Phish_Phrases 8871 5.93 6.68 5.52 53 XM_UncommonTLD01 8840 5.95 6.75 5.50 54 LOTS_OF_MONEY 8779 7.00 9.75 5.46 55 IN_ZIMBRA_NJ_WHITELIST 8613 3.48 0.13 5.36 56 BAYES_40 8397 3.94 1.64 5.22 57 MPART_ALT_DIFF 8196 5.43 6.03 5.10 58 RCVD_IN_MSPIKE_H3 8000 4.45 3.50 4.97 59 RCVD_IN_MSPIKE_WL 8000 4.45 3.50 4.97 60 XM_DK_Undo_02 7587 17.96 41.70 4.72 61 T_TooManySym_02 7390 3.18 0.63 4.60 62 XMSubMetaSx_00 7121 4.93 5.83 4.43 63 XMNumbers 6633 3.70 2.93 4.12 64 BAYES_80 6596 6.14 9.78 4.10 65 ANY_BOUNCE_MESSAGE 6532 3.04 1.22 4.06 66 BOUNCE_MESSAGE 6526 3.04 1.22 4.06 67 INVALID_MSGID 6395 2.61 0.17 3.98 68 RELAYCOUNTRY_META 6193 7.75 14.74 3.85 69 TR_XM_SpammyWords4 6092 5.46 8.46 3.79 70 TO_MALFORMED 5994 2.42 0.08 3.73 71 HTML_IMAGE_RATIO_06 5908 3.99 4.55 3.67 72 BAYES_99 5882 14.97 35.26 3.66 73 BAYES_20 5520 2.62 1.15 3.43 74 BOTNET_IPINHOSTNAME 5279 5.42 9.26 3.28 75 T_REMOTE_IMAGE 4974 2.96 2.71 3.09 76 MIME_QP_LONG_LINE 4949 2.51 1.49 3.08 77 MIME_HTML_MOSTLY 4937 3.39 3.97 3.07 78 XM_CamelCaseFrm001 4833 3.09 3.25 3.01 79 MIME_HTML_ONLY_MULTI 4629 3.12 3.56 2.88 80 FROM_EXCESS_BASE64 4587 2.77 2.61 2.85 81 BAYES_999 4459 11.53 27.23 2.77 82 MAILING_LIST_MULTI 4319 2.47 2.10 2.69 83 BAYES_95 4292 3.82 5.87 2.67 84 XM_Body_Dirty_Words 4115 4.88 9.05 2.56 85 XM_B_SpammyTLD 4027 2.88 3.56 2.50 86 HTML_IMAGE_RATIO_08 3959 2.66 3.02 2.46 87 XM_PDF 3880 1.69 0.38 2.41 88 TooManyTo_002 3841 1.82 0.81 2.39 89 RCVD_IN_IADB_LISTED 3668 1.67 0.59 2.28 90 XM_B_URI_Unicode 3613 2.23 2.19 2.25 91 TR_XM_DKIM_Undo 3603 11.91 29.24 2.24 92 TR_XM_PhishingBody 3487 3.06 4.65 2.17 93 TR_XM_SpammyRelay 3377 5.11 10.51 2.10 94 RCVD_IN_IADB_SPF 3268 1.49 0.52 2.03 95 BAYES_05 3233 1.50 0.59 2.01 96 T_TooManySym_03 3174 1.33 0.16 1.97 97 DKIM_INVALID 3120 3.13 5.27 1.94 98 XMNoVowels 3056 2.31 3.04 1.90 99 TR_XM_UnparsRelay 3008 4.57 9.42 1.87 100 IN_HORDE_ADDRESS_BOOK 3007 1.25 0.15 1.87 101 RCVD_IN_IADB_SENDERID 2959 1.36 0.49 1.84 102 UNTRUSTED_Relay 2941 3.42 6.28 1.83 103 T_XMDrugObfuBody_14 2937 3.03 5.20 1.83 104 TR_XM_SpammyWords5 2934 2.24 2.99 1.82 105 RCVD_IN_IADB_DK 2913 1.34 0.48 1.81 106 TM2_M_URI_OPT_OUT 2868 2.20 2.95 1.78 107 HTML_MIME_NO_HTML_TAG 2850 1.69 1.53 1.77 108 XMStockSpam_06 2791 1.75 1.76 1.74 109 T_XMDrugObfuBody_08 2783 2.15 2.90 1.73 110 XM_B_COPY_HTML 2752 1.82 2.02 1.71 111 TM2_M_VERY_LONG_WORD 2645 2.38 3.69 1.64 112 URI_NOVOWEL 2639 1.40 0.95 1.64 113 XMSexyCombo_05 2579 2.62 4.44 1.60 114 TVD_SPACE_RATIO 2559 1.08 0.16 1.59 115 XM_DK_Undo_01 2510 1.35 0.98 1.56 116 TR_DCC_Bayes_99 2507 10.89 27.63 1.56 117 RELAYCOUNTRY_CA 2493 3.18 6.09 1.55 118 RCVD_IN_IADB_VOUCHED 2475 1.10 0.30 1.54 119 XMBdyGiftCard01 2423 1.53 1.57 1.51 120 XMDiploma_00 2386 1.79 2.35 1.48 121 XMGappySubj_01 2236 0.95 0.15 1.39 122 XM_GoogleGroups 2169 1.16 0.81 1.35 123 SUBJ_ALL_CAPS 2146 1.41 1.55 1.33 124 TR_XM_Base64_M1 2094 1.18 0.96 1.30 125 XM_OfRef6 2057 1.93 3.10 1.28 126 XM_B_Investor 2042 2.34 4.27 1.27 127 TR_Symld_Words 1982 1.00 0.58 1.23 128 XM_SendGrid 1909 1.18 1.18 1.19 129 XM_B_Unsub2 1898 1.45 1.93 1.18 130 TooManyTo_003 1897 1.02 0.74 1.18 131 BOTNET 1818 3.90 8.86 1.13 132 XMGappySubj_02 1816 0.74 0.05 1.13 133 URI_HEX 1816 1.14 1.16 1.13 134 TR_MetaPhish_Combo_01 1803 1.10 1.05 1.12 135 RCVD_IN_IADB_OPTIN 1802 0.79 0.19 1.12 136 XMBrknScrpt_02 1762 1.28 1.61 1.10 137 XM_H_Long_From02 1734 1.08 1.10 1.08 138 KHOP_HELO_FCRDNS 1697 1.42 2.08 1.06 139 T_XMHurry_00 1696 1.81 3.15 1.05 140 HTML_TAG_BALANCE_BODY 1687 1.17 1.38 1.05 141 XM_UB50 1621 1.67 2.84 1.01 142 TVD_RCVD_IP 1603 1.00 1.02 1.00 143 XM_SPF_SoftFail 1554 1.51 2.50 0.97 144 XM_B_SpammyWords4 1553 1.42 2.23 0.97 145 XMPhish30 1477 1.31 2.01 0.92 146 T_TVD_MIME_NO_HEADERS 1463 0.59 0.03 0.91 147 TooManyTo_004 1416 0.82 0.70 0.88 148 TM2_M_OBFU_COMMENT 1407 1.02 1.29 0.87 149 XM_H_PHPMailer 1384 0.85 0.82 0.86 150 DKIM_ADSP_CUSTOM_MED 1380 0.86 0.87 0.86 151 RCVD_IN_PSBL 1379 1.55 2.79 0.86 152 MPART_ALT_DIFF_COUNT 1326 0.89 1.00 0.82 153 XMBody_95 1306 0.61 0.24 0.81 154 XM_S_SpammyWords 1291 0.65 0.36 0.80 155 TR_XM_Spammywords 1291 0.65 0.36 0.80 156 T_XMDrugObfuBody_00 1288 1.13 1.73 0.80 157 TR_XM_DK_SendGrid 1277 0.79 0.80 0.79 158 DIET_1 1259 1.42 2.57 0.78 159 SpammyFromTLD_01 1249 1.18 1.89 0.78 160 TooManyTo_005 1206 0.72 0.67 0.75 161 HELO_MISC_IP 1188 0.50 0.08 0.74 162 XMBSHREFv2 1174 0.55 0.23 0.73 163 USER_IN_WHITELIST 1166 0.47 0.00 0.73 164 USER_IN_WELCOMELIST 1166 0.47 0.00 0.73 165 XM_B_DNDMA 1164 0.71 0.67 0.72 166 XM_B_FormFill 1163 0.47 0.01 0.72 167 RCVD_IN_PBL 1147 0.88 1.17 0.71 168 XMSubMetaI_00 1111 0.85 1.14 0.69 169 XMGenDplmaNmb 1095 0.87 1.21 0.68 170 XMSlimDrugH 1063 0.74 0.87 0.66 171 MSGID_FROM_MTA_HEADER 1025 0.45 0.12 0.64 172 HTML_FONT_FACE_BAD 1006 0.68 0.79 0.63 173 SUBJ_YOUR_FAMILY 1000 0.45 0.13 0.62 174 RCVD_IN_BL_SPAMCOP_NET 999 3.73 9.32 0.62 175 TR_XM_SpammyWords2 997 5.44 14.08 0.62 176 T_TooManySym_04 976 0.40 0.04 0.61 177 HTML_IMAGE_ONLY_20 932 0.57 0.56 0.58 178 XMBody_17 931 1.78 3.93 0.58 179 MIME_CHARSET_FARAWAY 918 0.89 1.47 0.57 180 NML_ADSP_CUSTOM_MED 901 0.60 0.67 0.56 181 T_FILL_THIS_FORM_SHORT 863 0.98 1.79 0.54 182 HTTPS_HTTP_MISMATCH 861 0.65 0.86 0.54 183 XM_ProductURIs 850 0.62 0.78 0.53 184 HTML_TAG_BALANCE_CENTER 822 0.49 0.44 0.51 185 DKIM_ADSP_NXDOMAIN 813 1.68 3.79 0.51 186 FORGED_GMAIL_RCVD 789 0.56 0.68 0.49 187 XM_URI_RBL 779 1.30 2.77 0.48 188 XMSubGiftCard1 754 0.33 0.07 0.47 189 NO_DNS_FOR_FROM 751 1.57 3.54 0.47 190 AD_PREFS 751 0.33 0.09 0.47 191 XM_S_SubURI 744 0.31 0.04 0.46 192 PLING_QUERY 742 0.75 1.26 0.46 193 RELAYCOUNTRY_AU 735 1.21 2.55 0.46 194 XMPhish14 728 0.57 0.78 0.45 195 HTML_TEXT_INVISIBLE_STYLE 724 0.37 0.23 0.45 196 XMOemUri 724 0.46 0.48 0.45 197 XMSubNoVowel 714 0.39 0.29 0.44 198 T_STY_INVIS_DIRECT 684 0.88 1.69 0.43 199 SHOPIFY_IMG_NOT_RCVD_SFY 672 0.82 1.55 0.42 200 THIS_AD 665 0.72 1.27 0.41 ----------------------------------------------------------------------