Email: 261670 Autolearn: 0 AvgScore: 4.68 AvgScanTime: 1.34 sec Spam: 90149 Autolearn: 0 AvgScore: 13.79 AvgScanTime: 1.42 sec Ham: 171521 Autolearn: 0 AvgScore: -0.11 AvgScanTime: 1.31 sec Time Spent Running SA: 97.76 hours Time Spent Processing Spam: 35.54 hours Time Spent Processing Ham: 62.22 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86309 88.05 95.74 84.01 2 DKIM_SIGNED 80537 82.70 89.34 79.22 3 XM_DK_Pass 77760 80.86 86.26 78.02 4 DKIM_VALID 77450 80.42 85.91 77.53 5 XM_B_Unicode 77175 77.10 85.61 72.62 6 RELAYCOUNTRY_US 72828 81.60 80.79 82.03 7 DCC_CHECK 72050 61.24 79.92 51.42 8 XMListUnsubscribeExists 63846 60.80 70.82 55.53 9 XM_B_SpammyWords 62814 55.12 69.68 47.46 10 DKIM_VALID_AU 62006 66.86 68.78 65.85 11 LOC_TINY_FONT_1 46310 41.32 51.37 36.04 12 XM_B_Unicode3 45752 48.18 50.75 46.83 13 XM_DK_Undo_02 38292 19.23 42.48 7.01 14 T_SCC_BODY_TEXT_LINE 36800 41.72 40.82 42.20 15 XM_B_SpammyWords2 35845 27.76 39.76 21.45 16 HTML_FONT_LOW_CONTRAST 35765 34.79 39.67 32.22 17 BAYES_50 33710 53.07 37.39 61.31 18 BAYES_99 30281 15.25 33.59 5.61 19 T_KAM_HTML_FONT_INVALID 29371 25.73 32.58 22.13 20 FVGT_m_MULTI_ODD 28827 29.00 31.98 27.44 21 TR_XM_DKIM_Undo 28036 12.87 31.10 3.29 22 MIME_HTML_ONLY 27942 25.67 31.00 22.87 23 DKIM_VALID_EF 26348 30.79 29.23 31.61 24 BAYES_999 23639 11.91 26.22 4.39 25 TR_DCC_Bayes_99 22595 10.05 25.06 2.16 26 TR_XM_DK_Unsub 20513 18.84 22.75 16.79 27 XM_Multi_Part_URI 20434 18.85 22.67 16.84 28 XMSubLong 18586 22.37 20.62 23.29 29 DCC_CHECK_NEGATIVE 17693 38.58 19.63 48.55 30 T_TM2_M_HEADER_IN_MSG 17171 21.25 19.05 22.40 31 RELAYCOUNTRY_META 17115 9.01 18.99 3.77 32 XM_B_Unsub 16546 12.89 18.35 10.02 33 UNPARSEABLE_RELAY 16462 16.20 18.26 15.11 34 TR_XM_BayesUnsub 16056 11.23 17.81 7.77 35 TR_MAX_INTL_RELAY 14036 9.86 15.57 6.86 36 RCVD_IN_MSPIKE_H2 13462 14.31 14.93 13.98 37 XM_B_SpammyWords3 12135 8.67 13.46 6.16 38 TR_XM_SpammyRelay 11429 5.94 12.68 2.40 39 BOTNET_IPINHOSTNAME 11142 6.72 12.36 3.75 40 TR_XM_SpammyWords2 11038 4.77 12.24 0.84 41 FSL_BULK_SIG 10655 11.31 11.82 11.04 42 BOTNET 9540 4.55 10.58 1.38 43 TR_XM_UnparsRelay 9312 5.31 10.33 2.68 44 LOTS_OF_MONEY 9073 8.04 10.06 6.98 45 BAYES_80 8671 5.90 9.62 3.94 46 BAYES_60 8448 7.90 9.37 7.13 47 TR_XM_SpammyWords4 8340 6.60 9.25 5.20 48 RCVD_IN_BL_SPAMCOP_NET 7738 3.49 8.58 0.82 49 RELAYCOUNTRY_CA 7461 3.85 8.28 1.53 50 XM_Evil_Numbers_Gen 7387 9.48 8.19 10.15 51 HTML_IMAGE_RATIO_02 7286 6.92 8.08 6.31 52 XM_B_Phish_Phrases 7008 5.97 7.77 5.02 53 UNTRUSTED_Relay 6794 3.55 7.54 1.45 54 XM_Body_Dirty_Words 6475 4.02 7.18 2.36 55 XMSubMetaSx_00 5866 4.66 6.51 3.70 56 MPART_ALT_DIFF 5430 5.20 6.02 4.77 57 XM_UncommonTLD01 5267 5.25 5.84 4.94 58 RCVD_IN_MSPIKE_WL 5168 8.87 5.73 10.52 59 BAYES_95 5051 3.85 5.60 2.92 60 XM_H_Long_From01 5018 5.90 5.57 6.08 61 XMSexyCombo_05 4697 2.70 5.21 1.38 62 XM_H_GMP 4679 5.87 5.19 6.22 63 LotsOfNums_01 4671 6.46 5.18 7.13 64 HTML_IMAGE_RATIO_04 4428 4.21 4.91 3.85 65 XMStrtUSub 4419 5.68 4.90 6.08 66 XM_OfRef6 4385 2.55 4.86 1.34 67 TooManyTo_001 4315 5.40 4.79 5.72 68 XM_CamelCaseFrm001 4301 3.34 4.77 2.59 69 T_XMDrugObfuBody_14 3759 2.89 4.17 2.21 70 XM_B_PhoneNumber 3690 5.37 4.09 6.04 71 TR_XM_PhishingBody 3666 2.58 4.07 1.80 72 XM_B_SpammyTLD 3661 3.47 4.06 3.16 73 MIME_HTML_MOSTLY 3579 3.00 3.97 2.49 74 TM2_M_VERY_LONG_WORD 3484 2.22 3.86 1.36 75 HTML_IMAGE_RATIO_06 3427 3.63 3.80 3.55 76 XM_UB50 3423 1.85 3.80 0.82 77 TR_XM_NoHeaderRelay 3409 1.46 3.78 0.24 78 RCVD_IN_VALIDITY_RPBL 3319 1.30 3.68 0.04 79 TR_XM_SPAMCOP 3297 1.38 3.66 0.18 80 FROM_EXCESS_BASE64 3290 2.73 3.65 2.25 81 XM_B_Investor 3254 2.37 3.61 1.72 82 MIME_HTML_ONLY_MULTI 3197 3.23 3.55 3.06 83 DKIM_INVALID 3087 2.29 3.42 1.69 84 RCVD_IN_VALIDITY_SAFE 2995 4.91 3.32 5.75 85 XMNumbers 2977 4.21 3.30 4.68 86 RCVD_IN_MSPIKE_H3 2925 4.60 3.24 5.31 87 XM_SPF_SoftFail 2805 1.78 3.11 1.08 88 TR_XM_MSPIKECOMBO 2804 1.24 3.11 0.26 89 RCVD_IN_MSPIKE_BL 2804 1.24 3.11 0.26 90 XMBody_17 2752 1.47 3.05 0.65 91 T_FILL_THIS_FORM_SHORT 2741 1.49 3.04 0.68 92 TR_XM_SpammyWords5 2710 2.50 3.01 2.23 93 TM2_M_URI_OPT_OUT 2663 2.37 2.95 2.07 94 XM_B_Unsub2 2634 1.83 2.92 1.26 95 DKIM_ADSP_NXDOMAIN 2622 1.34 2.91 0.52 96 XMDiploma_00 2613 1.79 2.90 1.21 97 USER_IN_DEF_DKIM_WL 2607 12.99 2.89 18.30 98 XM_URI_RBL 2488 1.37 2.76 0.65 99 T_XMHurry_00 2408 1.44 2.67 0.79 100 HTML_IMAGE_RATIO_08 2231 1.96 2.47 1.70 101 XM_B_SpammyWords4 2207 1.52 2.45 1.03 102 MIME_QP_LONG_LINE 2188 3.01 2.43 3.31 103 RCVD_IN_VALIDITY_CERTIFIED 2139 3.65 2.37 4.32 104 RELAYCOUNTRY_AU 2112 1.32 2.34 0.79 105 XMStockSpam_06 2032 1.97 2.25 1.82 106 T_XMDrugObfuBody_08 2024 1.61 2.25 1.28 107 XM_B_URI_Unicode 2001 1.74 2.22 1.49 108 XMSubMetaI_00 1953 1.36 2.17 0.94 109 ANY_BOUNCE_MESSAGE 1951 3.32 2.16 3.93 110 BOUNCE_MESSAGE 1951 3.32 2.16 3.93 111 XMBrknScrpt_02 1913 1.49 2.12 1.16 112 DIET_1 1873 1.01 2.08 0.45 113 RCVD_IN_MSPIKE_L5 1849 0.71 2.05 0.01 114 HTML_MIME_NO_HTML_TAG 1818 2.13 2.02 2.19 115 XM_H_Long_From02 1809 1.22 2.01 0.81 116 MAILING_LIST_MULTI 1800 2.10 2.00 2.15 117 XMBdyGiftCard01 1703 1.58 1.89 1.41 118 ALL_TRUSTED 1680 10.18 1.86 14.54 119 T_TooManySym_01 1654 5.48 1.83 7.39 120 SpammyFromTLD_02 1613 0.93 1.79 0.47 121 RCVD_IN_PBL 1603 0.97 1.78 0.55 122 SUBJ_ALL_CAPS 1597 1.73 1.77 1.71 123 SHOPIFY_IMG_NOT_RCVD_SFY 1576 0.94 1.75 0.51 124 TR_Mismatch_TLD_01 1545 0.78 1.71 0.28 125 XMBounce_01 1518 0.59 1.68 0.01 126 BOTNET_NORDNS 1512 0.59 1.68 0.03 127 T_XMDrugObfuBody_00 1501 0.93 1.67 0.55 128 SpammyFromTLD_01 1499 0.86 1.66 0.43 129 BAYES_40 1497 3.76 1.66 4.86 130 KHOP_HELO_FCRDNS 1478 1.40 1.64 1.28 131 THIS_AD 1447 0.92 1.61 0.56 132 RCVD_IN_MSPIKE_H5 1424 3.49 1.58 4.50 133 XM_DK_Undo_01 1406 1.52 1.56 1.50 134 TR_XM_PHPDW 1382 0.79 1.53 0.40 135 TR_XM_INV_DKIM 1370 0.68 1.52 0.24 136 TR_XM_PHPForged 1357 0.79 1.51 0.41 137 HTML_FONT_TINY_NORDNS 1355 0.54 1.50 0.03 138 TR_XM_FormFill2 1330 0.78 1.48 0.41 139 TM2_M_OBFU_COMMENT 1320 1.03 1.46 0.80 140 RCVD_IN_PSBL 1301 0.84 1.44 0.52 141 XM_H_PHPOS 1300 0.75 1.44 0.38 142 URI_HEX 1289 1.11 1.43 0.94 143 XMPhish30 1289 1.02 1.43 0.80 144 T_REMOTE_IMAGE 1261 2.55 1.40 3.16 145 URI_NOVOWEL 1257 1.68 1.39 1.83 146 TR_XM_Base64_M1 1218 0.96 1.35 0.76 147 RCVD_IN_SBL_CSS 1204 0.49 1.34 0.04 148 TR_XM_SpammyWords3 1202 0.52 1.33 0.10 149 HTTPS_HTTP_MISMATCH 1199 0.67 1.33 0.32 150 RDNS_DYNAMIC 1161 0.61 1.29 0.25 151 T_STY_INVIS_DIRECT 1154 0.93 1.28 0.74 152 TR_LOTS_OF_MONEY3 1152 0.72 1.28 0.43 153 MPART_ALT_DIFF_COUNT 1148 0.82 1.27 0.57 154 HTML_TAG_BALANCE_BODY 1136 0.90 1.26 0.71 155 TR_XM_InvalidRelay 1116 0.43 1.24 0.01 156 TVD_RCVD_IP 1112 1.25 1.23 1.26 157 XMReplyNow 1111 0.59 1.23 0.26 158 XM_OfRef7 1103 0.58 1.22 0.24 159 TR_Mismatch_TLD_02 1098 0.47 1.22 0.08 160 XM_B_COPY_HTML 1097 1.27 1.22 1.29 161 RELAYCOUNTRY_TH 1083 0.42 1.20 0.00 162 XM_ProductURIs 1038 0.80 1.15 0.61 163 XPRIO 1038 0.40 1.15 0.00 164 XM_UB60 1032 0.42 1.14 0.04 165 XM_HighProb1 1021 0.40 1.13 0.01 166 BAYES_20 1013 2.57 1.12 3.34 167 LongTLD 994 0.51 1.10 0.20 168 FROM_MISSP_REPLYTO 984 0.38 1.09 0.00 169 URI_TRY_3LD 980 0.88 1.09 0.77 170 XM_SendGrid 950 1.17 1.05 1.23 171 XM_B_DNDMA 949 0.95 1.05 0.90 172 XM_BadFromFormat 944 0.45 1.05 0.14 173 HDRS_MISSP 934 0.36 1.04 0.01 174 XM_B_REG_HTML 932 0.56 1.03 0.31 175 HELO_DYNAMIC_SPLIT_IP 928 0.36 1.03 0.01 176 RELAYCOUNTRY_PL 918 0.36 1.02 0.02 177 TR_XM_RelayPhish 914 0.41 1.01 0.10 178 J_POPCORN_WO_D 914 0.64 1.01 0.44 179 XM_UB99 911 0.35 1.01 0.01 180 XM_DIRTYINTL 902 0.38 1.00 0.06 181 HTML_FONT_FACE_BAD 899 0.71 1.00 0.56 182 XM_B_Phish66 884 0.56 0.98 0.34 183 MultiRelay_CC 879 0.40 0.98 0.10 184 XMSlimDrugH 868 0.70 0.96 0.56 185 TR_MetaPhish_Combo_01 868 1.13 0.96 1.22 186 XMSubMetaSxObfu_03 867 0.60 0.96 0.41 187 XMSexyCombo_01 854 0.41 0.95 0.13 188 XM_H_PHPMailer 851 0.87 0.94 0.83 189 DKIM_ADSP_CUSTOM_MED 847 0.82 0.94 0.75 190 XMGenDplmaNmb 835 0.63 0.93 0.47 191 RCVD_IN_MSPIKE_H4 819 0.78 0.91 0.71 192 RELAYCOUNTRY_BR 817 0.31 0.91 0.00 193 TR_XM_Base64_L1 815 0.37 0.90 0.09 194 TRACKER_ID 808 0.43 0.90 0.18 195 XMBody_78 808 0.55 0.90 0.36 196 MIME_HEADER_CTYPE_ONLY 806 0.43 0.89 0.19 197 TR_LOTS_OF_MONEY2 796 0.53 0.88 0.35 198 T_MONEY_PERCENT 796 0.53 0.88 0.35 199 DEAR_FRIEND 781 0.33 0.87 0.05 200 XMHTMLBadTable_001 774 0.50 0.86 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144096 88.05 95.74 84.01 2 RELAYCOUNTRY_US 140695 81.60 80.79 82.03 3 DKIM_SIGNED 135871 82.70 89.34 79.22 4 XM_DK_Pass 133814 80.86 86.26 78.02 5 DKIM_VALID 132973 80.42 85.91 77.53 6 XM_B_Unicode 124560 77.10 85.61 72.62 7 DKIM_VALID_AU 112952 66.86 68.78 65.85 8 BAYES_50 105154 53.07 37.39 61.31 9 XMListUnsubscribeExists 95240 60.80 70.82 55.53 10 DCC_CHECK 88204 61.24 79.92 51.42 11 DCC_CHECK_NEGATIVE 83268 38.58 19.63 48.55 12 XM_B_SpammyWords 81408 55.12 69.68 47.46 13 XM_B_Unicode3 80326 48.18 50.75 46.83 14 T_SCC_BODY_TEXT_LINE 72380 41.72 40.82 42.20 15 LOC_TINY_FONT_1 61816 41.32 51.37 36.04 16 HTML_FONT_LOW_CONTRAST 55268 34.79 39.67 32.22 17 DKIM_VALID_EF 54221 30.79 29.23 31.61 18 FVGT_m_MULTI_ODD 47067 29.00 31.98 27.44 19 XMSubLong 39950 22.37 20.62 23.29 20 MIME_HTML_ONLY 39231 25.67 31.00 22.87 21 T_TM2_M_HEADER_IN_MSG 38427 21.25 19.05 22.40 22 T_KAM_HTML_FONT_INVALID 37951 25.73 32.58 22.13 23 XM_B_SpammyWords2 36797 27.76 39.76 21.45 24 USER_IN_DEF_DKIM_WL 31386 12.99 2.89 18.30 25 XM_Multi_Part_URI 28890 18.85 22.67 16.84 26 TR_XM_DK_Unsub 28794 18.84 22.75 16.79 27 UNPARSEABLE_RELAY 25925 16.20 18.26 15.11 28 ALL_TRUSTED 24947 10.18 1.86 14.54 29 RCVD_IN_MSPIKE_H2 23975 14.31 14.93 13.98 30 FSL_BULK_SIG 18940 11.31 11.82 11.04 31 RCVD_IN_MSPIKE_WL 18051 8.87 5.73 10.52 32 XM_Evil_Numbers_Gen 17410 9.48 8.19 10.15 33 XM_B_Unsub 17192 12.89 18.35 10.02 34 XM_DKIMWhitelistDomains 16864 6.50 0.15 9.83 35 BAYES_00 15802 6.19 0.44 9.21 36 TR_XM_BayesUnsub 13324 11.23 17.81 7.77 37 TR_XM_DK_Bayes 12826 5.00 0.27 7.48 38 TR_XM_DK_Bayes1 12743 4.96 0.27 7.43 39 T_TooManySym_01 12681 5.48 1.83 7.39 40 BAYES_60 12224 7.90 9.37 7.13 41 LotsOfNums_01 12223 6.46 5.18 7.13 42 XM_DK_Undo_02 12021 19.23 42.48 7.01 43 LOTS_OF_MONEY 11973 8.04 10.06 6.98 44 TR_MAX_INTL_RELAY 11769 9.86 15.57 6.86 45 TR_XM_DK_Bayes2 11108 4.32 0.22 6.48 46 HTML_IMAGE_RATIO_02 10830 6.92 8.08 6.31 47 XM_H_GMP 10674 5.87 5.19 6.22 48 XM_B_SpammyWords3 10559 8.67 13.46 6.16 49 XMStrtUSub 10433 5.68 4.90 6.08 50 XM_H_Long_From01 10421 5.90 5.57 6.08 51 XM_B_PhoneNumber 10356 5.37 4.09 6.04 52 IN_ZIMBRA_NJ_WHITELIST 10346 3.99 0.10 6.03 53 RCVD_IN_VALIDITY_SAFE 9856 4.91 3.32 5.75 54 TooManyTo_001 9806 5.40 4.79 5.72 55 BAYES_99 9624 15.25 33.59 5.61 56 RCVD_IN_MSPIKE_H3 9113 4.60 3.24 5.31 57 TR_XM_SpammyWords4 8919 6.60 9.25 5.20 58 XM_B_Phish_Phrases 8606 5.97 7.77 5.02 59 XM_UncommonTLD01 8473 5.25 5.84 4.94 60 BAYES_40 8336 3.76 1.66 4.86 61 MPART_ALT_DIFF 8187 5.20 6.02 4.77 62 XMNumbers 8033 4.21 3.30 4.68 63 RCVD_IN_MSPIKE_H5 7714 3.49 1.58 4.50 64 T_TooManySym_02 7588 3.09 0.54 4.42 65 BAYES_999 7523 11.91 26.22 4.39 66 RCVD_IN_VALIDITY_CERTIFIED 7418 3.65 2.37 4.32 67 BAYES_80 6755 5.90 9.62 3.94 68 ANY_BOUNCE_MESSAGE 6747 3.32 2.16 3.93 69 BOUNCE_MESSAGE 6743 3.32 2.16 3.93 70 INVALID_MSGID 6630 2.66 0.37 3.87 71 HTML_IMAGE_RATIO_04 6596 4.21 4.91 3.85 72 RELAYCOUNTRY_META 6471 9.01 18.99 3.77 73 BOTNET_IPINHOSTNAME 6435 6.72 12.36 3.75 74 XMSubMetaSx_00 6340 4.66 6.51 3.70 75 TO_MALFORMED 6292 2.41 0.01 3.67 76 HTML_IMAGE_RATIO_06 6081 3.63 3.80 3.55 77 BAYES_20 5723 2.57 1.12 3.34 78 MIME_QP_LONG_LINE 5681 3.01 2.43 3.31 79 TR_XM_DKIM_Undo 5650 12.87 31.10 3.29 80 T_REMOTE_IMAGE 5417 2.55 1.40 3.16 81 XM_B_SpammyTLD 5414 3.47 4.06 3.16 82 MIME_HTML_ONLY_MULTI 5253 3.23 3.55 3.06 83 BAYES_95 5013 3.85 5.60 2.92 84 TR_XM_UnparsRelay 4593 5.31 10.33 2.68 85 XM_CamelCaseFrm001 4439 3.34 4.77 2.59 86 RCVD_IN_IADB_LISTED 4422 1.86 0.49 2.58 87 XM_PDF 4375 1.87 0.56 2.55 88 MIME_HTML_MOSTLY 4266 3.00 3.97 2.49 89 TR_XM_SpammyRelay 4109 5.94 12.68 2.40 90 XM_Body_Dirty_Words 4053 4.02 7.18 2.36 91 RCVD_IN_IADB_SPF 3925 1.65 0.42 2.29 92 FROM_EXCESS_BASE64 3866 2.73 3.65 2.25 93 TR_XM_SpammyWords5 3821 2.50 3.01 2.23 94 T_XMDrugObfuBody_14 3795 2.89 4.17 2.21 95 HTML_MIME_NO_HTML_TAG 3755 2.13 2.02 2.19 96 TR_DCC_Bayes_99 3707 10.05 25.06 2.16 97 MAILING_LIST_MULTI 3682 2.10 2.00 2.15 98 RCVD_IN_IADB_SENDERID 3565 1.50 0.41 2.08 99 TM2_M_URI_OPT_OUT 3544 2.37 2.95 2.07 100 RCVD_IN_IADB_DK 3492 1.48 0.41 2.04 101 T_TooManySym_03 3211 1.29 0.17 1.87 102 TooManyTo_002 3138 1.47 0.78 1.83 103 URI_NOVOWEL 3131 1.68 1.39 1.83 104 XMStockSpam_06 3128 1.97 2.25 1.82 105 TR_XM_PhishingBody 3092 2.58 4.07 1.80 106 XM_B_Investor 2942 2.37 3.61 1.72 107 SUBJ_ALL_CAPS 2934 1.73 1.77 1.71 108 HTML_IMAGE_RATIO_08 2908 1.96 2.47 1.70 109 DKIM_INVALID 2898 2.29 3.42 1.69 110 RCVD_IN_IADB_VOUCHED 2898 1.18 0.21 1.69 111 BAYES_05 2876 1.37 0.78 1.68 112 IN_HORDE_ADDRESS_BOOK 2845 1.14 0.16 1.66 113 XMGappySubj_01 2787 1.12 0.16 1.62 114 TVD_SPACE_RATIO 2651 1.07 0.18 1.55 115 RELAYCOUNTRY_CA 2623 3.85 8.28 1.53 116 XM_DK_Undo_01 2574 1.52 1.56 1.50 117 XM_B_URI_Unicode 2559 1.74 2.22 1.49 118 UNTRUSTED_Relay 2489 3.55 7.54 1.45 119 XMBdyGiftCard01 2420 1.58 1.89 1.41 120 XMSexyCombo_05 2373 2.70 5.21 1.38 121 BOTNET 2368 4.55 10.58 1.38 122 TM2_M_VERY_LONG_WORD 2332 2.22 3.86 1.36 123 XM_OfRef6 2292 2.55 4.86 1.34 124 T_TVD_MIME_NO_HEADERS 2228 0.87 0.05 1.30 125 XM_B_COPY_HTML 2220 1.27 1.22 1.29 126 T_XMDrugObfuBody_08 2189 1.61 2.25 1.28 127 KHOP_HELO_FCRDNS 2189 1.40 1.64 1.28 128 XM_B_Unsub2 2154 1.83 2.92 1.26 129 TVD_RCVD_IP 2153 1.25 1.23 1.26 130 XM_SendGrid 2117 1.17 1.05 1.23 131 TR_MetaPhish_Combo_01 2085 1.13 0.96 1.22 132 XMDiploma_00 2079 1.79 2.90 1.21 133 RCVD_IN_IADB_OPTIN 2038 0.83 0.15 1.19 134 XM_GoogleGroups 2022 1.05 0.80 1.18 135 XMGappySubj_02 2006 0.78 0.04 1.17 136 XMBrknScrpt_02 1994 1.49 2.12 1.16 137 TR_Symld_Words 1975 0.99 0.69 1.15 138 HTML_EXTRA_CLOSE 1873 0.74 0.07 1.09 139 XM_SPF_SoftFail 1849 1.78 3.11 1.08 140 XM_B_SpammyWords4 1761 1.52 2.45 1.03 141 URI_HEX 1618 1.11 1.43 0.94 142 XMSubMetaI_00 1617 1.36 2.17 0.94 143 TooManyTo_003 1552 0.83 0.68 0.90 144 XM_B_DNDMA 1549 0.95 1.05 0.90 145 TR_XM_DK_SendGrid 1477 0.80 0.70 0.86 146 TR_XM_SpammyWords2 1436 4.77 12.24 0.84 147 XMBSHREFv2 1427 0.65 0.31 0.83 148 XM_H_PHPMailer 1421 0.87 0.94 0.83 149 XM_UB50 1412 1.85 3.80 0.82 150 RCVD_IN_BL_SPAMCOP_NET 1402 3.49 8.58 0.82 151 XM_H_Long_From02 1384 1.22 2.01 0.81 152 XMPhish30 1379 1.02 1.43 0.80 153 TM2_M_OBFU_COMMENT 1379 1.03 1.46 0.80 154 T_XMHurry_00 1352 1.44 2.67 0.79 155 RELAYCOUNTRY_AU 1348 1.32 2.34 0.79 156 SUBJ_DOLLARS 1341 0.73 0.63 0.78 157 URI_TRY_3LD 1320 0.88 1.09 0.77 158 TR_XM_Base64_M1 1296 0.96 1.35 0.76 159 DKIM_ADSP_CUSTOM_MED 1291 0.82 0.94 0.75 160 T_STY_INVIS_DIRECT 1276 0.93 1.28 0.74 161 RCVD_IN_MSPIKE_H4 1224 0.78 0.91 0.71 162 HTML_TAG_BALANCE_BODY 1216 0.90 1.26 0.71 163 USER_IN_WHITELIST 1174 0.45 0.00 0.68 164 USER_IN_WELCOMELIST 1174 0.45 0.00 0.68 165 T_FILL_THIS_FORM_SHORT 1164 1.49 3.04 0.68 166 TooManyTo_004 1152 0.66 0.64 0.67 167 FONT_INVIS_MSGID 1135 0.47 0.11 0.66 168 XMBody_17 1107 1.47 3.05 0.65 169 XM_URI_RBL 1107 1.37 2.76 0.65 170 FROM_GOV_DKIM_AU 1065 0.42 0.05 0.62 171 XMSubMetaSxObfu_02 1065 0.57 0.47 0.62 172 XM_ProductURIs 1053 0.80 1.15 0.61 173 XM_B_FormFill 1044 0.41 0.02 0.61 174 XMNoVowels 1039 0.53 0.38 0.61 175 MPART_ALT_DIFF_COUNT 986 0.82 1.27 0.57 176 XMClaimOffer 982 0.52 0.41 0.57 177 XMBody_95 981 0.42 0.14 0.57 178 TooManyTo_005 976 0.59 0.62 0.57 179 T_TooManySym_04 961 0.38 0.04 0.56 180 XMSlimDrugH 958 0.70 0.96 0.56 181 THIS_AD 958 0.92 1.61 0.56 182 HTML_FONT_FACE_BAD 956 0.71 1.00 0.56 183 RCVD_IN_PBL 946 0.97 1.78 0.55 184 T_XMDrugObfuBody_00 935 0.93 1.67 0.55 185 XMSolicitRefs_0 908 0.54 0.55 0.53 186 HELO_MISC_IP 907 0.36 0.03 0.53 187 RCVD_IN_PSBL 889 0.84 1.44 0.52 188 DKIM_ADSP_NXDOMAIN 888 1.34 2.91 0.52 189 SHOPIFY_IMG_NOT_RCVD_SFY 871 0.94 1.75 0.51 190 XMLngstWrd_00 871 0.46 0.36 0.51 191 XM_TLDProd2 861 0.47 0.40 0.50 192 XMHTML_After_End 853 0.53 0.60 0.50 193 MSGID_FROM_MTA_HEADER 826 0.35 0.10 0.48 194 XMGenDplmaNmb 810 0.63 0.93 0.47 195 NML_ADSP_CUSTOM_MED 809 0.55 0.71 0.47 196 SpammyFromTLD_02 809 0.93 1.79 0.47 197 FORGED_GMAIL_RCVD 801 0.57 0.77 0.47 198 NO_DNS_FOR_FROM 791 0.52 0.64 0.46 199 DIET_1 774 1.01 2.08 0.45 200 XM_ShortIntro_01 764 0.47 0.53 0.45 ----------------------------------------------------------------------