Email: 255323 Autolearn: 0 AvgScore: 4.95 AvgScanTime: 1.36 sec Spam: 91330 Autolearn: 0 AvgScore: 13.73 AvgScanTime: 1.41 sec Ham: 163993 Autolearn: 0 AvgScore: 0.07 AvgScanTime: 1.33 sec Time Spent Running SA: 96.56 hours Time Spent Processing Spam: 35.81 hours Time Spent Processing Ham: 60.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 87439 87.65 95.74 83.14 2 DKIM_SIGNED 82558 81.42 90.40 76.43 3 RELAYCOUNTRY_US 78112 81.75 85.53 79.64 4 XM_DK_Pass 77868 78.78 85.26 75.17 5 XM_B_Unicode 77673 75.82 85.05 70.69 6 DKIM_VALID 76858 78.04 84.15 74.63 7 DCC_CHECK 72511 60.18 79.39 49.48 8 XMListUnsubscribeExists 70326 62.56 77.00 54.52 9 XM_B_SpammyWords 65937 54.96 72.20 45.36 10 DKIM_VALID_AU 61954 65.29 67.84 63.87 11 LOC_TINY_FONT_1 49726 40.47 54.45 32.68 12 XM_B_Unicode3 48220 48.55 52.80 46.19 13 RCVD_IN_MSPIKE_H2 39310 39.93 43.04 38.20 14 XM_B_SpammyWords2 38121 28.02 41.74 20.38 15 HTML_FONT_LOW_CONTRAST 37878 34.72 41.47 30.96 16 XM_DK_Undo_02 37649 17.78 41.22 4.73 17 BAYES_50 34590 54.65 37.87 64.00 18 T_KAM_HTML_FONT_INVALID 30875 26.02 33.81 21.68 19 BAYES_99 30365 14.19 33.25 3.58 20 FVGT_m_MULTI_ODD 28148 28.76 30.82 27.61 21 TR_XM_DKIM_Undo 27346 12.05 29.94 2.08 22 BAYES_999 23883 11.19 26.15 2.86 23 MIME_HTML_ONLY 23558 22.95 25.79 21.36 24 TR_DCC_Bayes_99 23461 10.06 25.69 1.35 25 DKIM_VALID_EF 23131 27.47 25.33 28.66 26 XM_Multi_Part_URI 21653 18.77 23.71 16.02 27 DCC_CHECK_NEGATIVE 18338 39.61 20.08 50.49 28 TR_XM_DK_Unsub 18329 16.10 20.07 13.89 29 XMSubLong 18098 22.53 19.82 24.05 30 T_TM2_M_HEADER_IN_MSG 16375 20.99 17.93 22.69 31 XM_B_SpammyWords3 14616 9.37 16.00 5.67 32 TR_MAX_INTL_RELAY 14362 9.34 15.73 5.79 33 UNPARSEABLE_RELAY 13939 13.86 15.26 13.08 34 RELAYCOUNTRY_META 13010 7.54 14.25 3.80 35 TR_XM_SpammyWords2 12589 5.22 13.78 0.45 36 XM_B_Unsub 11779 9.95 12.90 8.30 37 TR_XM_BayesUnsub 11431 8.55 12.52 6.35 38 LOTS_OF_MONEY 9954 7.53 10.90 5.66 39 TR_XM_SpammyRelay 9586 5.04 10.50 2.00 40 RCVD_IN_BL_SPAMCOP_NET 9431 4.09 10.33 0.62 41 XM_Body_Dirty_Words 9057 6.09 9.92 3.95 42 BAYES_80 8921 5.77 9.77 3.54 43 BAYES_60 8408 7.66 9.21 6.80 44 TR_XM_SpammyWords4 8284 5.68 9.07 3.79 45 BOTNET_IPINHOSTNAME 7984 5.38 8.74 3.51 46 BOTNET 7671 3.79 8.40 1.22 47 TR_XM_SPAMCOP 7338 3.10 8.03 0.35 48 TR_XM_UnparsRelay 7333 3.85 8.03 1.53 49 XM_Evil_Numbers_Gen 7077 9.24 7.75 10.07 50 LotsOfNums_01 6505 7.00 7.12 6.94 51 FSL_BULK_SIG 6437 8.13 7.05 8.73 52 XM_B_Phish_Phrases 6352 5.22 6.95 4.26 53 RELAYCOUNTRY_CA 6050 3.39 6.62 1.58 54 XMSubMetaSx_00 5990 5.26 6.56 4.54 55 HTML_IMAGE_RATIO_02 5835 6.04 6.39 5.85 56 DKIM_INVALID 5700 3.39 6.24 1.80 57 XM_UncommonTLD01 5416 5.56 5.93 5.36 58 MPART_ALT_DIFF 5245 4.96 5.74 4.52 59 BAYES_95 5109 3.44 5.59 2.25 60 TR_XM_PhishingBody 4914 3.01 5.38 1.69 61 XM_H_GMP 4471 6.01 4.90 6.62 62 T_XMDrugObfuBody_14 4464 2.99 4.89 1.93 63 XM_H_Long_From01 4447 5.42 4.87 5.72 64 UNTRUSTED_Relay 4246 2.85 4.65 1.85 65 HTML_IMAGE_RATIO_04 4131 4.87 4.52 5.06 66 XMSexyCombo_05 4088 3.28 4.48 2.62 67 XM_B_PhoneNumber 4078 5.43 4.47 5.96 68 RCVD_IN_VALIDITY_RPBL 4000 1.66 4.38 0.14 69 XM_B_Investor 3890 2.30 4.26 1.21 70 XMStrtUSub 3800 5.08 4.16 5.59 71 HTML_IMAGE_RATIO_06 3693 3.39 4.04 3.02 72 TR_XM_SpammyWords5 3687 2.45 4.04 1.56 73 NO_DNS_FOR_FROM 3566 1.70 3.90 0.47 74 TR_XM_MaxWHORU 3561 1.65 3.90 0.39 75 DKIM_ADSP_NXDOMAIN 3544 1.73 3.88 0.53 76 TM2_M_VERY_LONG_WORD 3528 2.55 3.86 1.82 77 XM_CamelCaseFrm001 3369 3.20 3.69 2.93 78 XM_B_SpammyTLD 3302 2.99 3.62 2.64 79 MIME_HTML_ONLY_MULTI 3122 2.83 3.42 2.50 80 RCVD_IN_MSPIKE_WL 3111 4.07 3.41 4.44 81 RCVD_IN_MSPIKE_H3 3111 4.07 3.41 4.44 82 HTML_IMAGE_RATIO_08 3065 3.23 3.36 3.16 83 XMNumbers 3033 3.82 3.32 4.09 84 TooManyTo_001 3000 5.39 3.28 6.56 85 MIME_HTML_MOSTLY 2945 3.02 3.22 2.91 86 XMPhish30 2657 1.57 2.91 0.83 87 XM_B_SpammyWords4 2536 1.60 2.78 0.94 88 RCVD_IN_VALIDITY_SAFE 2516 5.43 2.75 6.92 89 NORDNS_LOW_CONTRAST 2511 0.99 2.75 0.01 90 XMBody_17 2451 1.46 2.68 0.78 91 T_XMHurry_00 2403 1.49 2.63 0.85 92 XMNoVowels 2392 2.11 2.62 1.83 93 XM_OfRef6 2356 1.48 2.58 0.87 94 T_XMDrugObfuBody_08 2231 2.03 2.44 1.80 95 TM2_M_URI_OPT_OUT 2215 2.00 2.43 1.76 96 RCVD_IN_VALIDITY_CERTIFIED 2166 4.40 2.37 5.52 97 DIET_1 2166 1.26 2.37 0.65 98 USER_IN_DEF_DKIM_WL 2149 12.62 2.35 18.34 99 RELAYCOUNTRY_AU 2144 1.13 2.35 0.46 100 TR_XM_INV_DKIM 2135 0.98 2.34 0.22 101 FROM_EXCESS_BASE64 2101 2.37 2.30 2.41 102 XM_URI_RBL 2057 1.12 2.25 0.48 103 TR_XM_NoHeaderRelay 2022 0.92 2.21 0.20 104 XM_SPF_SoftFail 1982 1.68 2.17 1.40 105 XMDiploma_00 1967 1.54 2.15 1.20 106 XM_UB50 1961 1.43 2.15 1.03 107 T_TooManySym_01 1936 6.16 2.12 8.41 108 T_FILL_THIS_FORM_SHORT 1877 1.10 2.06 0.56 109 T_XMDrugObfuBody_00 1865 1.18 2.04 0.69 110 SpammyFromTLD_02 1806 0.85 1.98 0.22 111 XM_B_URI_Unicode 1747 1.89 1.91 1.87 112 XMBrknScrpt_02 1686 1.42 1.85 1.18 113 MAILING_LIST_MULTI 1677 2.37 1.84 2.67 114 RCVD_IN_PBL 1630 1.08 1.78 0.68 115 SUBJ_ALL_CAPS 1611 1.31 1.76 1.05 116 SpammyFromTLD_01 1566 1.01 1.71 0.61 117 LongTLD 1538 0.73 1.68 0.20 118 SHOPIFY_IMG_NOT_RCVD_SFY 1508 0.87 1.65 0.43 119 XM_DIRTYINTL 1506 0.68 1.65 0.14 120 XM_B_Unsub2 1471 1.33 1.61 1.17 121 KHOP_HELO_FCRDNS 1470 1.21 1.61 0.99 122 XM_B_COPY_HTML 1455 1.74 1.59 1.82 123 XMStockSpam_06 1448 1.63 1.59 1.65 124 ALL_TRUSTED 1422 11.19 1.56 16.55 125 T_REMOTE_IMAGE 1393 2.38 1.53 2.86 126 MIME_QP_LONG_LINE 1330 2.44 1.46 2.98 127 RCVD_IN_XBL 1304 0.52 1.43 0.02 128 URI_HEX 1304 1.19 1.43 1.06 129 XMSlimDrugH 1301 1.03 1.42 0.81 130 ANY_BOUNCE_MESSAGE 1298 3.03 1.42 3.93 131 BOUNCE_MESSAGE 1297 3.03 1.42 3.93 132 MIME_CHARSET_FARAWAY 1287 0.92 1.41 0.65 133 XMSexyCombo_01 1234 0.66 1.35 0.28 134 BAYES_40 1221 3.82 1.34 5.20 135 T_STY_INVIS_DIRECT 1185 0.79 1.30 0.51 136 XMSubMetaI_00 1171 1.20 1.28 1.15 137 MISSING_HEADERS 1148 0.61 1.26 0.26 138 HTML_MIME_NO_HTML_TAG 1140 1.95 1.25 2.35 139 TR_LOTS_OF_MONEY3 1139 0.59 1.25 0.22 140 HTML_TAG_BALANCE_BODY 1131 1.08 1.24 0.99 141 XM_SendGrid 1122 1.18 1.23 1.15 142 TR_XM_PHPDW 1115 0.55 1.22 0.18 143 XM_B_DNDMA 1107 0.96 1.21 0.82 144 TR_XM_PHPForged 1106 0.55 1.21 0.18 145 TR_XM_FormFill2 1086 0.54 1.19 0.18 146 RCVD_IN_PSBL 1073 0.85 1.17 0.67 147 XM_B_REG_HTML 1068 0.56 1.17 0.21 148 XM_H_PHPOS 1057 0.52 1.16 0.17 149 REPLYTO_WITHOUT_TO_CC 1027 0.41 1.12 0.01 150 XMReplyNow 1022 0.57 1.12 0.26 151 TM2_M_OBFU_COMMENT 1002 0.88 1.10 0.75 152 MPART_ALT_DIFF_COUNT 1000 0.69 1.09 0.46 153 MultiRelay_CC 991 0.52 1.09 0.20 154 XMClaimOffer 974 0.67 1.07 0.44 155 HTML_FONT_FACE_BAD 969 0.63 1.06 0.38 156 TR_LOTS_OF_MONEY2 948 0.50 1.04 0.19 157 T_MONEY_PERCENT 948 0.50 1.04 0.19 158 XM_RXBody 939 0.66 1.03 0.45 159 XMSubMetaSSx_00 923 0.53 1.01 0.26 160 TR_LOTS_OF_MONEY1 910 0.36 1.00 0.01 161 XM_ProductURIs 901 0.88 0.99 0.82 162 TR_Mismatch_TLD_02 895 0.39 0.98 0.06 163 BAYES_00 892 6.40 0.98 9.42 164 BAYES_20 860 2.54 0.94 3.43 165 XM_H_Long_From02 853 1.02 0.93 1.06 166 URI_TRY_3LD 851 0.62 0.93 0.45 167 PLING_QUERY 846 0.59 0.93 0.41 168 XM_DK_Undo_01 836 1.23 0.92 1.41 169 HTML_FONT_TINY_NORDNS 825 0.35 0.90 0.05 170 T_Symld_Words_02 825 0.88 0.90 0.86 171 TR_MetaPhish_Combo_01 825 0.71 0.90 0.60 172 TR_XM_DK_Bayes 819 5.03 0.90 7.33 173 TR_XM_DK_Bayes1 817 4.98 0.89 7.25 174 XMBdyGiftCard01 807 1.24 0.88 1.44 175 CHARSET_FARAWAY_HEADER 805 0.36 0.88 0.07 176 TR_XM_DK_SendGrid 805 0.83 0.88 0.80 177 XM_HighProb1 786 0.32 0.86 0.01 178 SUBJ_DOLLARS 777 0.44 0.85 0.21 179 XM_B_Phish66 776 0.47 0.85 0.26 180 J_POPCORN_WO_D 776 0.48 0.85 0.27 181 RCVD_IN_SBL_CSS 773 0.31 0.85 0.01 182 MAY_BE_FORGED 766 0.50 0.84 0.31 183 XMGenDplmaNmb 764 0.64 0.84 0.54 184 SUSP_UTF8_WORD_SUBJ 754 0.31 0.83 0.03 185 XMSubMetaSx_01 752 0.36 0.82 0.11 186 XM_UB99 748 0.30 0.82 0.00 187 HTTPS_HTTP_MISMATCH 744 0.63 0.81 0.53 188 RDNS_DYNAMIC 743 0.47 0.81 0.28 189 LOADSA_MONEY_COMBO 741 0.30 0.81 0.02 190 XMSexyCombo_02 740 0.39 0.81 0.15 191 TR_Mismatch_TLD_01 734 0.46 0.80 0.27 192 URI_NOVOWEL 731 1.24 0.80 1.48 193 TM2_M_A_HREF_HREF 729 0.40 0.80 0.18 194 PDS_RDNS_DYNAMIC_FP 728 0.33 0.80 0.07 195 FORGED_MUA_OUTLOOK 722 0.31 0.79 0.04 196 AXB_XMAILER_MIMEOLE_OL_024C2 714 0.28 0.78 0.00 197 XMHTMLBadTable_001 714 0.43 0.78 0.24 198 FSL_CTYPE_WIN1251 711 0.28 0.78 0.00 199 DKIM_ADSP_CUSTOM_MED 707 0.81 0.77 0.83 200 TVD_RCVD_IP 705 0.98 0.77 1.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136346 87.65 95.74 83.14 2 RELAYCOUNTRY_US 130611 81.75 85.53 79.64 3 DKIM_SIGNED 125338 81.42 90.40 76.43 4 XM_DK_Pass 123275 78.78 85.26 75.17 5 DKIM_VALID 122386 78.04 84.15 74.63 6 XM_B_Unicode 115922 75.82 85.05 70.69 7 BAYES_50 104956 54.65 37.87 64.00 8 DKIM_VALID_AU 104746 65.29 67.84 63.87 9 XMListUnsubscribeExists 89404 62.56 77.00 54.52 10 DCC_CHECK_NEGATIVE 82796 39.61 20.08 50.49 11 DCC_CHECK 81150 60.18 79.39 49.48 12 XM_B_Unicode3 75751 48.55 52.80 46.19 13 XM_B_SpammyWords 74385 54.96 72.20 45.36 14 RCVD_IN_MSPIKE_H2 62638 39.93 43.04 38.20 15 LOC_TINY_FONT_1 53597 40.47 54.45 32.68 16 HTML_FONT_LOW_CONTRAST 50772 34.72 41.47 30.96 17 DKIM_VALID_EF 47006 27.47 25.33 28.66 18 FVGT_m_MULTI_ODD 45276 28.76 30.82 27.61 19 XMSubLong 39439 22.53 19.82 24.05 20 T_TM2_M_HEADER_IN_MSG 37208 20.99 17.93 22.69 21 T_KAM_HTML_FONT_INVALID 35552 26.02 33.81 21.68 22 MIME_HTML_ONLY 35034 22.95 25.79 21.36 23 XM_B_SpammyWords2 33416 28.02 41.74 20.38 24 USER_IN_DEF_DKIM_WL 30073 12.62 2.35 18.34 25 ALL_TRUSTED 27141 11.19 1.56 16.55 26 XM_Multi_Part_URI 26275 18.77 23.71 16.02 27 TR_XM_DK_Unsub 22777 16.10 20.07 13.89 28 UNPARSEABLE_RELAY 21448 13.86 15.26 13.08 29 XM_Evil_Numbers_Gen 16521 9.24 7.75 10.07 30 BAYES_00 15440 6.40 0.98 9.42 31 XM_DKIMWhitelistDomains 14372 5.64 0.04 8.76 32 FSL_BULK_SIG 14309 8.13 7.05 8.73 33 T_TooManySym_01 13789 6.16 2.12 8.41 34 XM_B_Unsub 13613 9.95 12.90 8.30 35 TR_XM_DK_Bayes 12023 5.03 0.90 7.33 36 TR_XM_DK_Bayes1 11892 4.98 0.89 7.25 37 LotsOfNums_01 11377 7.00 7.12 6.94 38 RCVD_IN_VALIDITY_SAFE 11350 5.43 2.75 6.92 39 BAYES_60 11145 7.66 9.21 6.80 40 XM_H_GMP 10862 6.01 4.90 6.62 41 TooManyTo_001 10759 5.39 3.28 6.56 42 TR_XM_BayesUnsub 10406 8.55 12.52 6.35 43 TR_XM_DK_Bayes2 10293 4.29 0.73 6.28 44 XM_B_PhoneNumber 9774 5.43 4.47 5.96 45 HTML_IMAGE_RATIO_02 9595 6.04 6.39 5.85 46 TR_MAX_INTL_RELAY 9493 9.34 15.73 5.79 47 XM_H_Long_From01 9388 5.42 4.87 5.72 48 XM_B_SpammyWords3 9300 9.37 16.00 5.67 49 LOTS_OF_MONEY 9281 7.53 10.90 5.66 50 XMStrtUSub 9160 5.08 4.16 5.59 51 IN_ZIMBRA_NJ_WHITELIST 9060 3.58 0.08 5.52 52 RCVD_IN_VALIDITY_CERTIFIED 9058 4.40 2.37 5.52 53 XM_UncommonTLD01 8785 5.56 5.93 5.36 54 BAYES_40 8528 3.82 1.34 5.20 55 HTML_IMAGE_RATIO_04 8303 4.87 4.52 5.06 56 T_TooManySym_02 8171 3.39 0.54 4.98 57 XM_DK_Undo_02 7756 17.78 41.22 4.73 58 XMSubMetaSx_00 7449 5.26 6.56 4.54 59 MPART_ALT_DIFF 7408 4.96 5.74 4.52 60 RCVD_IN_MSPIKE_H3 7279 4.07 3.41 4.44 61 RCVD_IN_MSPIKE_WL 7279 4.07 3.41 4.44 62 XM_B_Phish_Phrases 6978 5.22 6.95 4.26 63 INVALID_MSGID 6768 2.77 0.33 4.13 64 XMNumbers 6708 3.82 3.32 4.09 65 XM_Body_Dirty_Words 6485 6.09 9.92 3.95 66 ANY_BOUNCE_MESSAGE 6449 3.03 1.42 3.93 67 BOUNCE_MESSAGE 6445 3.03 1.42 3.93 68 TO_MALFORMED 6261 2.49 0.09 3.82 69 RELAYCOUNTRY_META 6239 7.54 14.25 3.80 70 TR_XM_SpammyWords4 6216 5.68 9.07 3.79 71 BAYES_99 5874 14.19 33.25 3.58 72 BAYES_80 5809 5.77 9.77 3.54 73 BOTNET_IPINHOSTNAME 5755 5.38 8.74 3.51 74 BAYES_20 5630 2.54 0.94 3.43 75 HTML_IMAGE_RATIO_08 5187 3.23 3.36 3.16 76 HTML_IMAGE_RATIO_06 4960 3.39 4.04 3.02 77 MIME_QP_LONG_LINE 4890 2.44 1.46 2.98 78 XM_CamelCaseFrm001 4812 3.20 3.69 2.93 79 MIME_HTML_MOSTLY 4776 3.02 3.22 2.91 80 T_REMOTE_IMAGE 4687 2.38 1.53 2.86 81 BAYES_999 4686 11.19 26.15 2.86 82 XM_PDF 4435 1.89 0.44 2.70 83 MAILING_LIST_MULTI 4385 2.37 1.84 2.67 84 XM_B_SpammyTLD 4331 2.99 3.62 2.64 85 XMSexyCombo_05 4294 3.28 4.48 2.62 86 MIME_HTML_ONLY_MULTI 4096 2.83 3.42 2.50 87 FROM_EXCESS_BASE64 3958 2.37 2.30 2.41 88 TooManyTo_002 3889 1.71 0.51 2.37 89 HTML_MIME_NO_HTML_TAG 3846 1.95 1.25 2.35 90 BAYES_95 3682 3.44 5.59 2.25 91 T_TooManySym_03 3517 1.43 0.14 2.14 92 TR_XM_DKIM_Undo 3418 12.05 29.94 2.08 93 RCVD_IN_IADB_LISTED 3405 1.52 0.53 2.08 94 TR_XM_SpammyRelay 3282 5.04 10.50 2.00 95 XMGappySubj_01 3201 1.28 0.07 1.95 96 T_XMDrugObfuBody_14 3159 2.99 4.89 1.93 97 XM_B_URI_Unicode 3068 1.89 1.91 1.87 98 UNTRUSTED_Relay 3041 2.85 4.65 1.85 99 XMNoVowels 3005 2.11 2.62 1.83 100 RCVD_IN_IADB_SPF 2993 1.35 0.50 1.83 101 XM_B_COPY_HTML 2991 1.74 1.59 1.82 102 TM2_M_VERY_LONG_WORD 2982 2.55 3.86 1.82 103 T_XMDrugObfuBody_08 2960 2.03 2.44 1.80 104 DKIM_INVALID 2952 3.39 6.24 1.80 105 BAYES_05 2927 1.34 0.54 1.78 106 TM2_M_URI_OPT_OUT 2885 2.00 2.43 1.76 107 IN_HORDE_ADDRESS_BOOK 2854 1.15 0.10 1.74 108 XMGappySubj_02 2835 1.12 0.03 1.73 109 TR_XM_PhishingBody 2773 3.01 5.38 1.69 110 RCVD_IN_IADB_SENDERID 2722 1.24 0.49 1.66 111 XMStockSpam_06 2707 1.63 1.59 1.65 112 RCVD_IN_IADB_DK 2678 1.22 0.49 1.63 113 RELAYCOUNTRY_CA 2599 3.39 6.62 1.58 114 TVD_SPACE_RATIO 2582 1.06 0.14 1.57 115 TR_XM_SpammyWords5 2559 2.45 4.04 1.56 116 TR_XM_UnparsRelay 2503 3.85 8.03 1.53 117 URI_NOVOWEL 2435 1.24 0.80 1.48 118 XMBdyGiftCard01 2362 1.24 0.88 1.44 119 RCVD_IN_IADB_VOUCHED 2318 0.98 0.20 1.41 120 XM_DK_Undo_01 2311 1.23 0.92 1.41 121 XM_SPF_SoftFail 2298 1.68 2.17 1.40 122 TR_DCC_Bayes_99 2221 10.06 25.69 1.35 123 XM_GoogleGroups 2185 1.11 0.71 1.33 124 TooManyTo_003 2175 1.02 0.46 1.33 125 TR_Symld_Words 2037 1.03 0.66 1.24 126 BOTNET 1994 3.79 8.40 1.22 127 XM_B_Investor 1980 2.30 4.26 1.21 128 XMDiploma_00 1975 1.54 2.15 1.20 129 XMBrknScrpt_02 1931 1.42 1.85 1.18 130 XM_B_Unsub2 1922 1.33 1.61 1.17 131 XMSubMetaI_00 1892 1.20 1.28 1.15 132 XM_SendGrid 1887 1.18 1.23 1.15 133 TVD_RCVD_IP 1795 0.98 0.77 1.09 134 URI_HEX 1744 1.19 1.43 1.06 135 XM_H_Long_From02 1740 1.02 0.93 1.06 136 TR_XM_Base64_M1 1731 0.88 0.57 1.06 137 SUBJ_ALL_CAPS 1723 1.31 1.76 1.05 138 XM_UB50 1695 1.43 2.15 1.03 139 TooManyTo_004 1677 0.80 0.41 1.02 140 HTML_TAG_BALANCE_BODY 1629 1.08 1.24 0.99 141 XMBody_95 1626 0.68 0.11 0.99 142 KHOP_HELO_FCRDNS 1620 1.21 1.61 0.99 143 RCVD_IN_IADB_OPTIN 1597 0.67 0.13 0.97 144 XM_B_SpammyWords4 1542 1.60 2.78 0.94 145 T_TVD_MIME_NO_HEADERS 1452 0.59 0.05 0.89 146 XM_H_PHPMailer 1443 0.83 0.73 0.88 147 TooManyTo_005 1431 0.70 0.39 0.87 148 XM_OfRef6 1419 1.48 2.58 0.87 149 T_Symld_Words_02 1412 0.88 0.90 0.86 150 T_XMHurry_00 1397 1.49 2.63 0.85 151 XMPhish30 1362 1.57 2.91 0.83 152 DKIM_ADSP_CUSTOM_MED 1353 0.81 0.77 0.83 153 XM_ProductURIs 1352 0.88 0.99 0.82 154 XM_B_DNDMA 1337 0.96 1.21 0.82 155 XMSlimDrugH 1324 1.03 1.42 0.81 156 TR_XM_DK_SendGrid 1311 0.83 0.88 0.80 157 XMBody_17 1275 1.46 2.68 0.78 158 HELO_MISC_IP 1255 0.52 0.09 0.77 159 TM2_M_OBFU_COMMENT 1238 0.88 1.10 0.75 160 XMBSHREFv2 1179 0.54 0.23 0.72 161 T_XMDrugObfuBody_00 1139 1.18 2.04 0.69 162 T_TooManySym_04 1129 0.45 0.02 0.69 163 MSGID_FROM_MTA_HEADER 1121 0.47 0.10 0.68 164 RCVD_IN_PBL 1116 1.08 1.78 0.68 165 USER_IN_WHITELIST 1108 0.43 0.00 0.68 166 USER_IN_WELCOMELIST 1108 0.43 0.00 0.68 167 RCVD_IN_PSBL 1096 0.85 1.17 0.67 168 MIME_CHARSET_FARAWAY 1065 0.92 1.41 0.65 169 DIET_1 1061 1.26 2.37 0.65 170 HTML_TEXT_INVISIBLE_STYLE 1050 0.53 0.34 0.64 171 XMHTML_After_End 1023 0.61 0.60 0.62 172 RCVD_IN_BL_SPAMCOP_NET 1010 4.09 10.33 0.62 173 SpammyFromTLD_01 1007 1.01 1.71 0.61 174 TR_MetaPhish_Combo_01 977 0.71 0.90 0.60 175 T_FILL_THIS_FORM_SHORT 924 1.10 2.06 0.56 176 NML_ADSP_CUSTOM_MED 912 0.59 0.64 0.56 177 XMGenDplmaNmb 882 0.64 0.84 0.54 178 XM_B_FormFill 881 0.35 0.01 0.54 179 HTTPS_HTTP_MISMATCH 877 0.63 0.81 0.53 180 HTML_TAG_BALANCE_CENTER 874 0.43 0.25 0.53 181 DKIM_ADSP_NXDOMAIN 865 1.73 3.88 0.53 182 XMLngstWrd_00 858 0.47 0.37 0.52 183 FORGED_GMAIL_RCVD 846 0.53 0.55 0.52 184 T_STY_INVIS_DIRECT 837 0.79 1.30 0.51 185 XMSubMetaSxObfu_02 837 0.51 0.51 0.51 186 XMCapTrack 822 0.41 0.23 0.50 187 XM_Ancestry_Forge 799 0.31 0.00 0.49 188 HTML_IMAGE_ONLY_20 798 0.56 0.69 0.49 189 XM_URI_RBL 791 1.12 2.25 0.48 190 AD_PREFS 787 0.35 0.11 0.48 191 NO_DNS_FOR_FROM 773 1.70 3.90 0.47 192 XM_S_SubURI 760 0.32 0.05 0.46 193 RELAYCOUNTRY_AU 750 1.13 2.35 0.46 194 MPART_ALT_DIFF_COUNT 750 0.69 1.09 0.46 195 TR_XM_SpammyWords2 745 5.22 13.78 0.45 196 URI_TRY_3LD 737 0.62 0.93 0.45 197 XM_RXBody 734 0.66 1.03 0.45 198 XMClaimOffer 726 0.67 1.07 0.44 199 XMPhish14 719 0.53 0.68 0.44 200 SHOPIFY_IMG_NOT_RCVD_SFY 713 0.87 1.65 0.43 ----------------------------------------------------------------------