Email: 260540 Autolearn: 0 AvgScore: 5.14 AvgScanTime: 1.36 sec Spam: 96651 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.41 sec Ham: 163889 Autolearn: 0 AvgScore: 0.01 AvgScanTime: 1.33 sec Time Spent Running SA: 98.19 hours Time Spent Processing Spam: 37.85 hours Time Spent Processing Ham: 60.34 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 92657 88.22 95.87 83.71 2 DKIM_SIGNED 83569 80.32 86.46 76.70 3 XM_B_Unicode 81993 77.14 84.83 72.60 4 RELAYCOUNTRY_US 78774 80.58 81.50 80.03 5 XM_DK_Pass 78113 77.44 80.82 75.44 6 DKIM_VALID 77482 76.84 80.17 74.88 7 DCC_CHECK 75922 59.88 78.55 48.87 8 XM_B_SpammyWords 67955 55.32 70.31 46.48 9 XMListUnsubscribeExists 66277 59.34 68.57 53.90 10 DKIM_VALID_AU 63301 64.44 65.49 63.83 11 XM_B_Unicode3 52995 49.71 54.83 46.69 12 LOC_TINY_FONT_1 46552 38.82 48.17 33.31 13 RCVD_IN_MSPIKE_H2 40805 39.71 42.22 38.24 14 XM_B_SpammyWords2 39453 28.48 40.82 21.21 15 BAYES_50 39413 53.84 40.78 61.54 16 XM_DK_Undo_02 36602 17.30 37.87 5.17 17 HTML_FONT_LOW_CONTRAST 35761 34.11 37.00 32.40 18 T_KAM_HTML_FONT_INVALID 30027 24.98 31.07 21.39 19 BAYES_99 30018 14.17 31.06 4.21 20 FVGT_m_MULTI_ODD 28514 28.27 29.50 27.55 21 TR_XM_DKIM_Undo 27175 11.83 28.12 2.23 22 MIME_HTML_ONLY 25770 23.03 26.66 20.89 23 DKIM_VALID_EF 25264 27.76 26.14 28.71 24 TR_DCC_Bayes_99 23238 10.03 24.04 1.77 25 BAYES_999 23007 10.89 23.80 3.27 26 XM_Multi_Part_URI 22582 18.85 23.36 16.19 27 XMSubLong 22482 23.18 23.26 23.12 28 DCC_CHECK_NEGATIVE 20228 39.90 20.93 51.09 29 TR_XM_DK_Unsub 18068 15.71 18.69 13.95 30 T_TM2_M_HEADER_IN_MSG 17872 21.57 18.49 23.38 31 XM_B_Unsub 16677 12.55 17.25 9.78 32 TR_XM_BayesUnsub 16188 11.20 16.75 7.93 33 RELAYCOUNTRY_META 15798 8.60 16.35 4.04 34 TR_MAX_INTL_RELAY 14998 9.79 15.52 6.42 35 UNPARSEABLE_RELAY 14924 13.99 15.44 13.14 36 XM_B_SpammyWords3 13918 9.14 14.40 6.04 37 TR_XM_SpammyWords2 11585 4.75 11.99 0.49 38 BOTNET_IPINHOSTNAME 11255 6.54 11.64 3.53 39 TR_XM_SpammyRelay 10739 5.38 11.11 2.01 40 FSL_BULK_SIG 9874 9.62 10.22 9.28 41 LotsOfNums_01 9727 8.56 10.06 7.67 42 BOTNET 9459 4.32 9.79 1.09 43 BAYES_80 9100 5.89 9.42 3.80 44 UNTRUSTED_Relay 9061 4.57 9.37 1.73 45 BAYES_60 8883 7.92 9.19 7.17 46 XM_UncommonTLD01 8642 6.79 8.94 5.52 47 LOTS_OF_MONEY 8209 6.42 8.49 5.20 48 TR_XM_UnparsRelay 8102 4.18 8.38 1.70 49 RCVD_IN_BL_SPAMCOP_NET 7717 3.37 7.98 0.64 50 TR_XM_SpammyWords4 7422 5.11 7.68 3.59 51 XM_Evil_Numbers_Gen 7326 9.51 7.58 10.65 52 HTML_IMAGE_RATIO_02 7107 6.57 7.35 6.10 53 TM2_M_VERY_LONG_WORD 6299 4.13 6.52 2.73 54 RELAYCOUNTRY_CA 6200 3.41 6.41 1.63 55 MPART_ALT_DIFF 6186 5.31 6.40 4.67 56 XM_Body_Dirty_Words 6092 4.02 6.30 2.68 57 DKIM_INVALID 6087 3.48 6.30 1.82 58 XM_UB50 5939 2.89 6.14 0.97 59 XM_B_Phish_Phrases 5637 5.57 5.83 5.41 60 XMSubMetaSx_00 5587 4.65 5.78 3.98 61 TR_XM_PhishingBody 5578 3.29 5.77 1.83 62 TR_XM_SPAMCOP 5505 2.31 5.70 0.31 63 ANY_BOUNCE_MESSAGE 5464 5.21 5.65 4.94 64 BOUNCE_MESSAGE 5464 5.20 5.65 4.94 65 BAYES_95 5345 3.69 5.53 2.61 66 MIME_QP_LONG_LINE 5189 3.97 5.37 3.14 67 HTML_IMAGE_RATIO_04 4769 5.25 4.93 5.44 68 XM_B_SpammyTLD 4656 3.44 4.82 2.62 69 XM_H_Long_From01 4636 5.56 4.80 6.01 70 TooManyTo_001 4538 5.52 4.70 6.01 71 HTML_IMAGE_RATIO_06 4432 3.51 4.59 2.87 72 XM_H_GMP 4398 6.10 4.55 7.01 73 XM_B_Investor 4133 2.37 4.28 1.24 74 XMSexyCombo_05 3994 2.38 4.13 1.35 75 XMStrtUSub 3927 5.00 4.06 5.55 76 MIME_CHARSET_FARAWAY 3926 1.80 4.06 0.47 77 XM_B_PhoneNumber 3743 5.55 3.87 6.54 78 T_XMDrugObfuBody_14 3580 2.92 3.70 2.45 79 XM_B_Unsub2 3543 2.10 3.67 1.17 80 MIME_HTML_MOSTLY 3442 2.93 3.56 2.56 81 CHARSET_FARAWAY_HEADER 3419 1.35 3.54 0.05 82 XMEqualsVooDoo_00 3359 1.31 3.48 0.03 83 KHOP_HELO_FCRDNS 3317 2.25 3.43 1.56 84 XMEqualsVooDoo_01 3307 1.27 3.42 0.00 85 XMEqualsVooDoo_02 3304 1.27 3.42 0.00 86 XMEqualsVooDoo_03 3301 1.27 3.42 0.00 87 MAY_BE_FORGED 3285 1.97 3.40 1.13 88 RCVD_IN_MSPIKE_WL 3261 4.18 3.37 4.65 89 RCVD_IN_MSPIKE_H3 3261 4.18 3.37 4.65 90 RCVD_IN_VALIDITY_RPBL 3089 1.21 3.20 0.03 91 TR_XM_SpammyWords5 3059 1.85 3.16 1.08 92 TR_XM_NoHeaderRelay 3053 1.35 3.16 0.29 93 FROM_EXCESS_BASE64 3001 2.77 3.10 2.57 94 DKIM_ADSP_NXDOMAIN 2973 1.46 3.08 0.51 95 XMNumbers 2952 3.38 3.05 3.57 96 MIME_HTML_ONLY_MULTI 2881 2.84 2.98 2.76 97 HTML_IMAGE_RATIO_08 2838 2.28 2.94 1.89 98 XM_CamelCaseFrm001 2753 2.69 2.85 2.59 99 XM_OfRef6 2752 1.75 2.85 1.10 100 T_FILL_THIS_FORM_SHORT 2733 1.51 2.83 0.73 101 RCVD_IN_VALIDITY_SAFE 2729 5.43 2.82 6.96 102 TR_XM_InvalidRelay 2689 1.04 2.78 0.02 103 T_XMDrugObfuBody_08 2598 1.94 2.69 1.50 104 XMPhish30 2556 1.51 2.64 0.85 105 XMBody_17 2532 1.22 2.62 0.39 106 XM_SPF_SoftFail 2483 1.59 2.57 1.01 107 T_XMHurry_00 2482 2.11 2.57 1.84 108 USER_IN_DEF_DKIM_WL 2429 12.36 2.51 18.16 109 XMDiploma_00 2415 1.79 2.50 1.38 110 RCVD_IN_VALIDITY_CERTIFIED 2359 4.44 2.44 5.63 111 XM_URI_RBL 2319 1.33 2.40 0.69 112 RELAYCOUNTRY_AU 2146 1.14 2.22 0.51 113 HTML_FONT_TINY_NORDNS 2129 0.84 2.20 0.04 114 SpammyFromTLD_01 2125 1.32 2.20 0.80 115 XMBrknScrpt_02 2118 1.62 2.19 1.28 116 TM2_M_URI_OPT_OUT 2097 2.06 2.17 2.00 117 DIET_1 2095 1.34 2.17 0.86 118 XM_B_SpammyWords4 2033 1.30 2.10 0.83 119 XM_B_URI_Unicode 2032 1.81 2.10 1.64 120 XMStockSpam_06 1912 1.85 1.98 1.77 121 HDRS_MISSP 1910 0.74 1.98 0.01 122 SpammyFromTLD_02 1889 0.83 1.95 0.17 123 TR_XM_INV_DKIM 1883 0.89 1.95 0.26 124 TVD_INCREASE_SIZE 1880 0.72 1.95 0.00 125 BOTNET_NORDNS 1841 0.71 1.90 0.01 126 RCVD_IN_PSBL 1796 1.09 1.86 0.64 127 URI_HEX 1765 1.46 1.83 1.24 128 XMBounce_01 1723 0.69 1.78 0.04 129 XMNoVowels 1718 1.75 1.78 1.73 130 T_TooManySym_01 1696 5.35 1.75 7.47 131 MAILING_LIST_MULTI 1671 2.07 1.73 2.27 132 MultiRelay_CC 1669 0.76 1.73 0.19 133 T_XMDrugObfuBody_00 1572 1.02 1.63 0.66 134 SHOPIFY_IMG_NOT_RCVD_SFY 1468 0.82 1.52 0.41 135 MPART_ALT_DIFF_COUNT 1457 0.90 1.51 0.54 136 SUBJ_ALL_CAPS 1449 1.16 1.50 0.96 137 T_REMOTE_IMAGE 1448 2.81 1.50 3.58 138 XMSlimDrugH 1429 1.06 1.48 0.81 139 HK_RANDOM_REPLYTO 1427 0.70 1.48 0.24 140 RCVD_IN_PBL 1420 0.94 1.47 0.63 141 TR_Mismatch_TLD_02 1377 0.63 1.42 0.16 142 BAYES_40 1366 3.76 1.41 5.14 143 LongTLD 1337 0.66 1.38 0.23 144 PLING_QUERY 1334 0.89 1.38 0.60 145 XM_B_COPY_HTML 1322 1.56 1.37 1.67 146 XM_B_REG_HTML 1310 0.67 1.36 0.27 147 XM_B_Phish66 1300 0.73 1.35 0.36 148 XM_DIRTYINTL 1299 0.55 1.34 0.08 149 HTML_TAG_BALANCE_BODY 1284 1.06 1.33 0.91 150 TR_XM_Base64_M1 1271 0.98 1.32 0.79 151 XMLngstWrd_00 1228 0.90 1.27 0.69 152 ALL_TRUSTED 1224 10.55 1.27 16.03 153 TR_XM_PHPForged 1200 0.59 1.24 0.20 154 TR_XM_FormFill2 1190 0.59 1.23 0.21 155 TR_XM_PHPDW 1188 0.58 1.23 0.20 156 XM_H_PHPOS 1167 0.57 1.21 0.19 157 NO_DNS_FOR_FROM 1157 0.74 1.20 0.47 158 RELAYCOUNTRY_TH 1107 0.43 1.15 0.00 159 TR_XM_MaxWHORU 1101 0.65 1.14 0.36 160 XMPhish14 1098 0.66 1.14 0.38 161 URI_TRY_3LD 1076 0.80 1.11 0.62 162 XMGenDplmaNmb 1076 0.73 1.11 0.50 163 XMReplyNow 1054 0.54 1.09 0.21 164 XMLngstWrd_01 1048 0.62 1.08 0.34 165 RELAYCOUNTRY_RU 1014 0.47 1.05 0.12 166 XMLngstWrd_02 1008 0.56 1.04 0.27 167 XMSubMetaI_00 1006 0.73 1.04 0.55 168 HTML_MIME_NO_HTML_TAG 997 1.70 1.03 2.10 169 XM_HighProb1 994 0.39 1.03 0.01 170 XM_UB99 988 0.38 1.02 0.00 171 XMLngstWrd_03 983 0.49 1.02 0.18 172 TR_LOTS_OF_MONEY3 964 0.55 1.00 0.29 173 TR_Symld_Words 957 1.26 0.99 1.42 174 XMLngstWrd_04 944 0.45 0.98 0.15 175 TM2_M_OBFU_COMMENT 941 0.88 0.97 0.83 176 XM_SendGrid 938 1.20 0.97 1.34 177 TR_MetaPhish_Combo_01 923 0.91 0.95 0.89 178 BAYES_20 915 2.69 0.95 3.72 179 XM_UB60 913 0.39 0.94 0.06 180 XM_DK_Undo_01 897 1.13 0.93 1.25 181 RCVD_IN_XBL 888 0.35 0.92 0.02 182 URI_NOVOWEL 882 1.22 0.91 1.41 183 RDNS_DYNAMIC 860 0.51 0.89 0.29 184 TR_XM_RelayPhish 847 0.35 0.88 0.05 185 PDS_RDNS_DYNAMIC_FP 844 0.37 0.87 0.07 186 DKIM_ADSP_CUSTOM_MED 840 0.95 0.87 1.00 187 XM_H_Long_From02 822 0.93 0.85 0.98 188 DEAR_FRIEND 816 0.35 0.84 0.05 189 HTML_IMAGE_ONLY_20 816 0.59 0.84 0.45 190 SUSP_UTF8_WORD_SUBJ 795 0.32 0.82 0.02 191 THIS_AD 792 0.48 0.82 0.28 192 XM_OfRef7 778 0.42 0.80 0.20 193 TR_Mismatch_TLD_01 777 0.45 0.80 0.24 194 HTTPS_HTTP_MISMATCH 776 0.64 0.80 0.55 195 FONT_INVIS_LONG_LINE 770 0.37 0.80 0.13 196 T_STY_INVIS_DIRECT 761 0.75 0.79 0.73 197 T_MONEY_PERCENT 759 0.48 0.79 0.31 198 TR_LOTS_OF_MONEY2 759 0.48 0.79 0.31 199 TM2_M_A_HREF_HREF 755 0.40 0.78 0.18 200 J_POPCORN_WO_D 730 0.43 0.76 0.24 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137187 88.22 95.87 83.71 2 RELAYCOUNTRY_US 131157 80.58 81.50 80.03 3 DKIM_SIGNED 125704 80.32 86.46 76.70 4 XM_DK_Pass 123645 77.44 80.82 75.44 5 DKIM_VALID 122720 76.84 80.17 74.88 6 XM_B_Unicode 118979 77.14 84.83 72.60 7 DKIM_VALID_AU 104604 64.44 65.49 63.83 8 BAYES_50 100859 53.84 40.78 61.54 9 XMListUnsubscribeExists 88331 59.34 68.57 53.90 10 DCC_CHECK_NEGATIVE 83725 39.90 20.93 51.09 11 DCC_CHECK 80100 59.88 78.55 48.87 12 XM_B_Unicode3 76517 49.71 54.83 46.69 13 XM_B_SpammyWords 76172 55.32 70.31 46.48 14 RCVD_IN_MSPIKE_H2 62667 39.71 42.22 38.24 15 LOC_TINY_FONT_1 54594 38.82 48.17 33.31 16 HTML_FONT_LOW_CONTRAST 53101 34.11 37.00 32.40 17 DKIM_VALID_EF 47059 27.76 26.14 28.71 18 FVGT_m_MULTI_ODD 45149 28.27 29.50 27.55 19 T_TM2_M_HEADER_IN_MSG 38314 21.57 18.49 23.38 20 XMSubLong 37899 23.18 23.26 23.12 21 T_KAM_HTML_FONT_INVALID 35062 24.98 31.07 21.39 22 XM_B_SpammyWords2 34754 28.48 40.82 21.21 23 MIME_HTML_ONLY 34229 23.03 26.66 20.89 24 USER_IN_DEF_DKIM_WL 29765 12.36 2.51 18.16 25 XM_Multi_Part_URI 26536 18.85 23.36 16.19 26 ALL_TRUSTED 26273 10.55 1.27 16.03 27 TR_XM_DK_Unsub 22857 15.71 18.69 13.95 28 UNPARSEABLE_RELAY 21535 13.99 15.44 13.14 29 XM_Evil_Numbers_Gen 17448 9.51 7.58 10.65 30 BAYES_00 16065 6.39 0.60 9.80 31 XM_B_Unsub 16023 12.55 17.25 9.78 32 XM_DKIMWhitelistDomains 15433 5.94 0.05 9.42 33 FSL_BULK_SIG 15202 9.62 10.22 9.28 34 TR_XM_BayesUnsub 13002 11.20 16.75 7.93 35 LotsOfNums_01 12576 8.56 10.06 7.67 36 TR_XM_DK_Bayes 12386 4.95 0.52 7.56 37 TR_XM_DK_Bayes1 12276 4.90 0.51 7.49 38 T_TooManySym_01 12249 5.35 1.75 7.47 39 BAYES_60 11748 7.92 9.19 7.17 40 XM_H_GMP 11495 6.10 4.55 7.01 41 RCVD_IN_VALIDITY_SAFE 11410 5.43 2.82 6.96 42 TR_XM_DK_Bayes2 10979 4.34 0.35 6.70 43 XM_B_PhoneNumber 10723 5.55 3.87 6.54 44 TR_MAX_INTL_RELAY 10517 9.79 15.52 6.42 45 HTML_IMAGE_RATIO_02 10002 6.57 7.35 6.10 46 XM_B_SpammyWords3 9900 9.14 14.40 6.04 47 TooManyTo_001 9847 5.52 4.70 6.01 48 XM_H_Long_From01 9843 5.56 4.80 6.01 49 RCVD_IN_VALIDITY_CERTIFIED 9221 4.44 2.44 5.63 50 XMStrtUSub 9102 5.00 4.06 5.55 51 XM_UncommonTLD01 9042 6.79 8.94 5.52 52 HTML_IMAGE_RATIO_04 8912 5.25 4.93 5.44 53 XM_B_Phish_Phrases 8863 5.57 5.83 5.41 54 IN_ZIMBRA_NJ_WHITELIST 8597 3.34 0.11 5.25 55 LOTS_OF_MONEY 8519 6.42 8.49 5.20 56 XM_DK_Undo_02 8472 17.30 37.87 5.17 57 BAYES_40 8418 3.76 1.41 5.14 58 ANY_BOUNCE_MESSAGE 8098 5.21 5.65 4.94 59 BOUNCE_MESSAGE 8097 5.20 5.65 4.94 60 T_TooManySym_02 7801 3.14 0.39 4.76 61 MPART_ALT_DIFF 7648 5.31 6.40 4.67 62 RCVD_IN_MSPIKE_H3 7618 4.18 3.37 4.65 63 RCVD_IN_MSPIKE_WL 7618 4.18 3.37 4.65 64 BAYES_99 6905 14.17 31.06 4.21 65 INVALID_MSGID 6880 2.77 0.34 4.20 66 RELAYCOUNTRY_META 6616 8.60 16.35 4.04 67 XMSubMetaSx_00 6530 4.65 5.78 3.98 68 TO_MALFORMED 6269 2.42 0.04 3.83 69 BAYES_80 6235 5.89 9.42 3.80 70 BAYES_20 6097 2.69 0.95 3.72 71 TR_XM_SpammyWords4 5886 5.11 7.68 3.59 72 T_REMOTE_IMAGE 5867 2.81 1.50 3.58 73 XMNumbers 5848 3.38 3.05 3.57 74 BOTNET_IPINHOSTNAME 5791 6.54 11.64 3.53 75 BAYES_999 5358 10.89 23.80 3.27 76 MIME_QP_LONG_LINE 5143 3.97 5.37 3.14 77 HTML_IMAGE_RATIO_06 4701 3.51 4.59 2.87 78 MIME_HTML_ONLY_MULTI 4527 2.84 2.98 2.76 79 TM2_M_VERY_LONG_WORD 4468 4.13 6.52 2.73 80 XM_Body_Dirty_Words 4392 4.02 6.30 2.68 81 XM_B_SpammyTLD 4296 3.44 4.82 2.62 82 BAYES_95 4274 3.69 5.53 2.61 83 XM_CamelCaseFrm001 4252 2.69 2.85 2.59 84 FROM_EXCESS_BASE64 4207 2.77 3.10 2.57 85 MIME_HTML_MOSTLY 4201 2.93 3.56 2.56 86 XM_PDF 4031 1.68 0.35 2.46 87 T_XMDrugObfuBody_14 4017 2.92 3.70 2.45 88 MAILING_LIST_MULTI 3719 2.07 1.73 2.27 89 TR_XM_DKIM_Undo 3652 11.83 28.12 2.23 90 TooManyTo_002 3526 1.50 0.40 2.15 91 RCVD_IN_IADB_LISTED 3462 1.48 0.42 2.11 92 HTML_MIME_NO_HTML_TAG 3440 1.70 1.03 2.10 93 T_TooManySym_03 3324 1.32 0.11 2.03 94 TR_XM_SpammyRelay 3291 5.38 11.11 2.01 95 BAYES_05 3283 1.47 0.56 2.00 96 TM2_M_URI_OPT_OUT 3281 2.06 2.17 2.00 97 IN_HORDE_ADDRESS_BOOK 3125 1.24 0.10 1.91 98 RCVD_IN_IADB_SPF 3108 1.34 0.39 1.90 99 HTML_IMAGE_RATIO_08 3104 2.28 2.94 1.89 100 T_XMHurry_00 3020 2.11 2.57 1.84 101 TR_XM_PhishingBody 2991 3.29 5.77 1.83 102 DKIM_INVALID 2984 3.48 6.30 1.82 103 XMStockSpam_06 2908 1.85 1.98 1.77 104 TR_DCC_Bayes_99 2900 10.03 24.04 1.77 105 UNTRUSTED_Relay 2839 4.57 9.37 1.73 106 XMNoVowels 2831 1.75 1.78 1.73 107 RCVD_IN_IADB_SENDERID 2808 1.22 0.38 1.71 108 TR_XM_UnparsRelay 2786 4.18 8.38 1.70 109 RCVD_IN_IADB_DK 2775 1.21 0.38 1.69 110 XM_B_COPY_HTML 2733 1.56 1.37 1.67 111 XM_B_URI_Unicode 2694 1.81 2.10 1.64 112 RELAYCOUNTRY_CA 2672 3.41 6.41 1.63 113 TVD_SPACE_RATIO 2669 1.11 0.23 1.63 114 KHOP_HELO_FCRDNS 2556 2.25 3.43 1.56 115 T_XMDrugObfuBody_08 2454 1.94 2.69 1.50 116 XMBdyGiftCard01 2377 1.16 0.66 1.45 117 TR_Symld_Words 2326 1.26 0.99 1.42 118 RCVD_IN_IADB_VOUCHED 2313 0.95 0.16 1.41 119 URI_NOVOWEL 2303 1.22 0.91 1.41 120 XMDiploma_00 2259 1.79 2.50 1.38 121 XMSexyCombo_05 2206 2.38 4.13 1.35 122 XM_SendGrid 2191 1.20 0.97 1.34 123 XMBrknScrpt_02 2090 1.62 2.19 1.28 124 XMGappySubj_01 2048 0.89 0.29 1.25 125 XM_DK_Undo_01 2041 1.13 0.93 1.25 126 XM_B_Investor 2037 2.37 4.28 1.24 127 URI_HEX 2034 1.46 1.83 1.24 128 TooManyTo_003 2012 0.90 0.36 1.23 129 XM_B_Unsub2 1916 2.10 3.67 1.17 130 MAY_BE_FORGED 1859 1.97 3.40 1.13 131 TVD_RCVD_IP 1831 0.98 0.74 1.12 132 XM_GoogleGroups 1829 0.97 0.72 1.12 133 XM_OfRef6 1795 1.75 2.85 1.10 134 BOTNET 1786 4.32 9.79 1.09 135 TR_XM_SpammyWords5 1773 1.85 3.16 1.08 136 RCVD_IN_IADB_OPTIN 1668 0.68 0.11 1.02 137 XM_SPF_SoftFail 1661 1.59 2.57 1.01 138 DKIM_ADSP_CUSTOM_MED 1639 0.95 0.87 1.00 139 XMGappySubj_02 1617 0.66 0.11 0.99 140 XM_H_Long_From02 1599 0.93 0.85 0.98 141 T_TVD_MIME_NO_HEADERS 1594 0.64 0.07 0.97 142 XM_UB50 1591 2.89 6.14 0.97 143 SUBJ_ALL_CAPS 1576 1.16 1.50 0.96 144 TooManyTo_004 1562 0.72 0.32 0.95 145 TR_XM_DK_SendGrid 1542 0.81 0.58 0.94 146 HTML_TAG_BALANCE_BODY 1489 1.06 1.33 0.91 147 XM_H_PHPMailer 1468 0.84 0.74 0.90 148 TR_MetaPhish_Combo_01 1459 0.91 0.95 0.89 149 DIET_1 1409 1.34 2.17 0.86 150 TooManyTo_005 1396 0.64 0.29 0.85 151 XMBody_95 1396 0.59 0.14 0.85 152 XMPhish30 1385 1.51 2.64 0.85 153 XM_B_SpammyWords4 1365 1.30 2.10 0.83 154 TM2_M_OBFU_COMMENT 1361 0.88 0.97 0.83 155 MSGID_FROM_MTA_HEADER 1332 0.55 0.12 0.81 156 XMSlimDrugH 1321 1.06 1.48 0.81 157 SpammyFromTLD_01 1317 1.32 2.20 0.80 158 HELO_MISC_IP 1306 0.54 0.09 0.80 159 TR_XM_Base64_M1 1287 0.98 1.32 0.79 160 XM_ProductURIs 1236 0.75 0.74 0.75 161 T_FILL_THIS_FORM_SHORT 1202 1.51 2.83 0.73 162 T_STY_INVIS_DIRECT 1190 0.75 0.79 0.73 163 LOW_PRICE 1178 0.56 0.29 0.72 164 USER_IN_WELCOMELIST 1167 0.45 0.00 0.71 165 USER_IN_WHITELIST 1167 0.45 0.00 0.71 166 NML_ADSP_CUSTOM_MED 1164 0.70 0.67 0.71 167 XMBSHREFv2 1163 0.52 0.19 0.71 168 XM_URI_RBL 1136 1.33 2.40 0.69 169 XMLngstWrd_00 1129 0.90 1.27 0.69 170 T_XMDrugObfuBody_00 1080 1.02 1.63 0.66 171 FORGED_GMAIL_RCVD 1075 0.67 0.68 0.66 172 RCVD_IN_BL_SPAMCOP_NET 1051 3.37 7.98 0.64 173 RCVD_IN_PSBL 1041 1.09 1.86 0.64 174 RCVD_IN_PBL 1034 0.94 1.47 0.63 175 URI_TRY_3LD 1019 0.80 1.11 0.62 176 T_TooManySym_04 1019 0.40 0.04 0.62 177 PLING_QUERY 980 0.89 1.38 0.60 178 HTML_FONT_FACE_BAD 974 0.65 0.73 0.59 179 XMSubMetaI_00 897 0.73 1.04 0.55 180 HTTPS_HTTP_MISMATCH 896 0.64 0.80 0.55 181 MPART_ALT_DIFF_COUNT 883 0.90 1.51 0.54 182 AD_PREFS 855 0.38 0.13 0.52 183 DKIM_ADSP_NXDOMAIN 841 1.46 3.08 0.51 184 RELAYCOUNTRY_AU 832 1.14 2.22 0.51 185 HTML_EXTRA_CLOSE 827 0.34 0.07 0.50 186 XM_B_DNDMA 821 0.58 0.72 0.50 187 XMGenDplmaNmb 814 0.73 1.11 0.50 188 XM_B_FormFill 813 0.32 0.03 0.50 189 TR_XM_SpammyWords2 800 4.75 11.99 0.49 190 XM_RXBody 779 0.50 0.55 0.48 191 NO_DNS_FOR_FROM 777 0.74 1.20 0.47 192 MIME_CHARSET_FARAWAY 775 1.80 4.06 0.47 193 XM_S_SubURI 761 0.31 0.06 0.46 194 XMCapTrack 749 0.37 0.23 0.46 195 HTML_TAG_BALANCE_CENTER 745 0.42 0.35 0.45 196 XM_B_SEO 736 0.53 0.67 0.45 197 HTML_IMAGE_ONLY_20 730 0.59 0.84 0.45 198 HTML_TEXT_INVISIBLE_STYLE 700 0.37 0.26 0.43 199 XM_ShortIntro_01 691 0.44 0.46 0.42 200 SHOPIFY_IMG_NOT_RCVD_SFY 664 0.82 1.52 0.41 ----------------------------------------------------------------------