Email: 364589 Autolearn: 0 AvgScore: 5.26 AvgScanTime: 1.51 sec Spam: 138706 Autolearn: 0 AvgScore: 13.34 AvgScanTime: 1.59 sec Ham: 225883 Autolearn: 0 AvgScore: 0.29 AvgScanTime: 1.46 sec Time Spent Running SA: 153.13 hours Time Spent Processing Spam: 61.24 hours Time Spent Processing Ham: 91.89 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134809 88.23 97.19 82.73 2 DKIM_SIGNED 130554 84.18 94.12 78.07 3 XM_DK_Pass 127111 82.63 91.64 77.09 4 DKIM_VALID 126339 82.24 91.08 76.80 5 XM_B_Unicode 125108 78.76 90.20 71.74 6 RELAYCOUNTRY_US 121550 82.95 87.63 80.08 7 DCC_CHECK 112149 62.35 80.85 50.98 8 XMListUnsubscribeExists 108336 66.13 78.10 58.78 9 DKIM_VALID_AU 103253 68.45 74.44 64.78 10 XM_B_SpammyWords 101452 57.35 73.14 47.66 11 LOC_TINY_FONT_1 73620 40.76 53.08 33.19 12 XM_B_Unicode3 70803 49.26 51.05 48.17 13 XM_DK_Undo_02 68038 22.52 49.05 6.22 14 HTML_FONT_LOW_CONTRAST 66206 38.92 47.73 33.50 15 RCVD_IN_MSPIKE_H2 57449 35.82 41.42 32.38 16 XM_B_SpammyWords2 55252 28.76 39.83 21.97 17 BAYES_99 53355 17.57 38.47 4.73 18 TR_XM_DKIM_Undo 50148 15.56 36.15 2.92 19 FVGT_m_MULTI_ODD 49072 29.69 35.38 26.20 20 BAYES_50 48369 50.82 34.87 60.62 21 TR_DCC_Bayes_99 42748 13.14 30.82 2.28 22 BAYES_999 42650 13.87 30.75 3.51 23 T_KAM_HTML_FONT_INVALID 38661 23.39 27.87 20.64 24 DKIM_VALID_EF 37036 26.78 26.70 26.82 25 MIME_HTML_ONLY 36561 22.90 26.36 20.77 26 XM_Multi_Part_URI 32106 21.10 23.15 19.84 27 UNPARSEABLE_RELAY 28145 16.19 20.29 13.67 28 TR_XM_DK_Unsub 27979 16.52 20.17 14.29 29 T_TM2_M_HEADER_IN_MSG 26650 20.49 19.21 21.27 30 DCC_CHECK_NEGATIVE 26163 37.53 18.86 49.00 31 XMSubLong 25502 19.76 18.39 20.60 32 TR_MAX_INTL_RELAY 21402 10.62 15.43 7.67 33 XM_B_Unsub 20798 11.05 14.99 8.64 34 TR_XM_SpammyWords2 20671 6.15 14.90 0.78 35 TR_XM_BayesUnsub 20291 10.13 14.63 7.37 36 XM_B_SpammyWords3 19660 9.89 14.17 7.26 37 BOTNET_IPINHOSTNAME 16902 6.85 12.19 3.57 38 RELAYCOUNTRY_META 16736 6.84 12.07 3.63 39 TR_XM_UnparsRelay 16339 6.13 11.78 2.67 40 LOTS_OF_MONEY 16085 7.41 11.60 4.84 41 XM_Evil_Numbers_Gen 15097 11.15 10.88 11.31 42 TR_XM_SpammyWords4 14724 6.10 10.62 3.33 43 RCVD_IN_BL_SPAMCOP_NET 14571 4.55 10.50 0.89 44 BAYES_80 13389 6.49 9.65 4.55 45 TR_XM_SpammyRelay 12729 4.83 9.18 2.16 46 HTML_IMAGE_RATIO_02 12401 8.50 8.94 8.22 47 TR_XM_SPAMCOP 11991 3.59 8.64 0.48 48 BAYES_60 11419 10.29 8.23 11.56 49 FSL_BULK_SIG 10148 7.07 7.32 6.92 50 BOTNET 9681 3.38 6.98 1.17 51 XM_Body_Dirty_Words 9120 4.32 6.58 2.93 52 LotsOfNums_01 8777 7.24 6.33 7.81 53 MPART_ALT_DIFF 8354 4.91 6.02 4.22 54 XM_H_Long_From01 8198 5.69 5.91 5.56 55 USER_IN_DEF_DKIM_WL 7762 14.23 5.60 19.53 56 BAYES_95 7690 4.04 5.54 3.12 57 HTML_IMAGE_RATIO_04 7668 5.70 5.53 5.80 58 XMSubMetaSx_00 7313 4.47 5.27 3.98 59 UNTRUSTED_Relay 6977 3.06 5.03 1.85 60 XM_B_PhoneNumber 6921 6.35 4.99 7.18 61 XM_UncommonTLD01 6741 4.37 4.86 4.06 62 XMBody_17 6493 2.48 4.68 1.13 63 XMStrtUSub 6466 5.25 4.66 5.60 64 RELAYCOUNTRY_CA 6427 2.62 4.63 1.38 65 XM_SPF_SoftFail 6345 2.62 4.57 1.43 66 XMSexyCombo_05 6084 2.74 4.39 1.73 67 XM_B_Phish_Phrases 6014 4.42 4.34 4.47 68 RCVD_IN_VALIDITY_SAFE 5989 6.51 4.32 7.86 69 TooManyTo_001 5962 5.14 4.30 5.66 70 TR_XM_SpammyWords5 5949 2.96 4.29 2.14 71 HTML_IMAGE_RATIO_06 5812 2.93 4.19 2.16 72 T_XMHurry_00 5695 2.38 4.11 1.33 73 XM_B_Investor 5541 2.18 3.99 1.07 74 XMBrknScrpt_02 5425 2.46 3.91 1.56 75 HTML_IMAGE_RATIO_08 5354 2.63 3.86 1.88 76 XM_H_GMP 5343 4.26 3.85 4.52 77 XM_CamelCaseFrm001 5271 3.20 3.80 2.83 78 XM_B_SpammyTLD 5120 5.04 3.69 5.87 79 T_XMDrugObfuBody_14 5072 2.42 3.66 1.66 80 TR_XM_PhishingBody 5053 2.26 3.64 1.42 81 MIME_HTML_MOSTLY 5038 3.11 3.63 2.79 82 RCVD_IN_MSPIKE_WL 4877 4.17 3.52 4.57 83 RCVD_IN_MSPIKE_H3 4877 4.17 3.52 4.57 84 TM2_M_VERY_LONG_WORD 4874 2.26 3.51 1.49 85 TM2_M_URI_OPT_OUT 4857 2.53 3.50 1.93 86 XM_B_SEO 4749 2.16 3.42 1.38 87 RCVD_IN_VALIDITY_CERTIFIED 4661 5.09 3.36 6.16 88 MIME_HTML_ONLY_MULTI 4583 2.62 3.30 2.21 89 SUBJ_ALL_CAPS 4468 2.69 3.22 2.36 90 XMNumbers 4432 2.87 3.20 2.67 91 TR_LOTS_OF_MONEY3 4431 1.45 3.19 0.38 92 T_XMDrugObfuBody_08 4417 1.94 3.18 1.18 93 FROM_EXCESS_BASE64 4359 2.92 3.14 2.79 94 XM_OfRef6 4300 1.65 3.10 0.76 95 DKIM_INVALID 4215 1.94 3.04 1.26 96 TR_XM_SEO4 4080 1.79 2.94 1.08 97 XM_B_SpammyWords4 3970 1.44 2.86 0.57 98 XM_URI_RBL 3894 1.43 2.81 0.58 99 T_TooManySym_01 3762 4.65 2.71 5.84 100 XM_B_URI_Unicode 3597 1.97 2.59 1.59 101 XM_UB50 3557 1.66 2.56 1.11 102 XMSubMetaI_00 2998 1.66 2.16 1.35 103 RELAYCOUNTRY_AU 2930 1.13 2.11 0.52 104 THIS_AD 2711 1.60 1.95 1.39 105 XMStockSpam_06 2603 1.89 1.88 1.89 106 XMBdyGiftCard01 2594 1.54 1.87 1.33 107 SHOPIFY_IMG_NOT_RCVD_SFY 2586 1.14 1.86 0.70 108 XMDiploma_00 2511 1.45 1.81 1.23 109 TR_XM_PHPDW 2509 0.81 1.81 0.19 110 TR_XM_PHPForged 2479 0.79 1.79 0.18 111 RCVD_IN_VALIDITY_RPBL 2437 0.77 1.76 0.17 112 TR_XM_FormFill2 2428 0.78 1.75 0.19 113 MIME_QP_LONG_LINE 2419 3.01 1.74 3.79 114 XM_H_PHPOS 2408 0.77 1.74 0.17 115 T_FILL_THIS_FORM_SHORT 2295 0.95 1.65 0.51 116 XM_DK_Undo_01 2233 1.46 1.61 1.36 117 XM_B_REG_HTML 2203 0.80 1.59 0.31 118 XM_B_Unsub2 2189 1.26 1.58 1.07 119 XM_ProductURIs 2188 1.44 1.58 1.35 120 SpammyFromTLD_01 2119 0.88 1.53 0.48 121 TR_XM_Base64_M1 2038 1.04 1.47 0.77 122 HTML_TAG_BALANCE_BODY 2001 1.03 1.44 0.77 123 MAILING_LIST_MULTI 1974 1.75 1.42 1.95 124 URI_TRY_3LD 1948 1.00 1.40 0.76 125 MPART_ALT_DIFF_COUNT 1932 0.86 1.39 0.54 126 TR_XM_NoHeaderRelay 1916 0.58 1.38 0.09 127 TM2_M_OBFU_COMMENT 1903 0.71 1.37 0.30 128 DIET_1 1872 1.28 1.35 1.24 129 ALL_TRUSTED 1867 10.59 1.35 16.26 130 SpammyFromTLD_02 1845 0.64 1.33 0.22 131 URI_HEX 1813 1.05 1.31 0.90 132 XM_H_Long_From02 1705 1.22 1.23 1.21 133 XM_HighProb1 1702 0.48 1.23 0.02 134 XMPhish30 1677 0.82 1.21 0.58 135 TR_Symld_Words 1658 2.27 1.20 2.93 136 BAYES_40 1657 3.17 1.19 4.39 137 XM_SendGrid 1653 1.28 1.19 1.33 138 XM_B_COPY_HTML 1614 0.90 1.16 0.74 139 TR_XM_INV_DKIM 1612 0.48 1.16 0.05 140 TR_XM_Base64_L1 1585 0.55 1.14 0.19 141 TR_Caps_n_Bayes_99 1578 0.47 1.14 0.06 142 AC_BR_BONANZA 1578 0.52 1.14 0.14 143 TR_LOTS_OF_MONEY2 1515 0.62 1.09 0.32 144 T_MONEY_PERCENT 1515 0.62 1.09 0.32 145 T_XMDrugObfuBody_00 1513 0.96 1.09 0.89 146 URI_NOVOWEL 1496 3.17 1.08 4.45 147 XMSolicitRefs_0 1440 0.72 1.04 0.52 148 KHOP_HELO_FCRDNS 1437 0.94 1.04 0.88 149 RDNS_DYNAMIC 1435 0.59 1.03 0.31 150 PDS_RDNS_DYNAMIC_FP 1416 0.43 1.02 0.07 151 ACT_NOW_CAPS 1415 0.45 1.02 0.10 152 XMReplyNow 1401 0.50 1.01 0.18 153 XM_H_PHPMailer 1385 0.72 1.00 0.54 154 T_REMOTE_IMAGE 1383 2.22 1.00 2.97 155 BAYES_20 1345 1.92 0.97 2.50 156 XM_B_Phish66 1329 0.51 0.96 0.23 157 XM_RXBody 1319 0.94 0.95 0.93 158 TVD_RCVD_IP 1318 0.73 0.95 0.59 159 XMGenDplmaNmb 1307 0.72 0.94 0.58 160 MONEY_BACK 1301 0.45 0.94 0.15 161 T_STY_INVIS_DIRECT 1290 0.63 0.93 0.45 162 LOW_PRICE 1255 0.60 0.90 0.42 163 XMSlimDrugH 1250 0.55 0.90 0.34 164 TooManyTo_002 1232 1.32 0.89 1.58 165 TR_XM_InvalidRelay 1218 0.35 0.88 0.02 166 TR_XM_DK_SendGrid 1217 0.92 0.88 0.94 167 XMHTMLBadTable_001 1182 0.45 0.85 0.21 168 HELO_DYNAMIC_SPLIT_IP 1179 0.33 0.85 0.00 169 TR_MetaPhish_Combo_01 1153 0.60 0.83 0.46 170 HTML_MIME_NO_HTML_TAG 1150 1.22 0.83 1.45 171 XM_B_DNDMA 1146 0.90 0.83 0.95 172 RCVD_IN_IADB_LISTED 1139 2.13 0.82 2.93 173 RCVD_IN_XBL 1138 0.32 0.82 0.01 174 XM_UB99 1126 0.31 0.81 0.01 175 TooManyTo_003 1108 0.71 0.80 0.66 176 LongTLD 1102 0.43 0.79 0.21 177 TooManyTo_004 1081 0.59 0.78 0.47 178 RCVD_IN_PBL 1063 0.53 0.77 0.38 179 TooManyTo_005 1054 0.54 0.76 0.40 180 TR_Mismatch_TLD_01 1046 0.39 0.75 0.16 181 HOSTED_IMG_MULTI_PUB_01 1034 0.32 0.75 0.06 182 TR_XM_FormFill 1018 0.29 0.73 0.01 183 HTTPS_HTTP_MISMATCH 983 0.51 0.71 0.39 184 XM_H_Undi_Recip 981 0.33 0.71 0.10 185 XMBody_78 975 0.36 0.70 0.14 186 XMPhish14 972 0.44 0.70 0.27 187 RCVD_IN_IADB_SPF 959 1.91 0.69 2.66 188 SUBJ_DOLLARS 958 0.56 0.69 0.48 189 T_TooManySym_02 952 2.22 0.69 3.16 190 XMSubMetaSxObfu_03 948 0.71 0.68 0.73 191 PLING_QUERY 927 0.63 0.67 0.61 192 DKIM_ADSP_CUSTOM_MED 916 0.67 0.66 0.68 193 RCVD_IN_IADB_DK 909 1.73 0.66 2.39 194 RCVD_IN_IADB_SENDERID 909 1.76 0.66 2.44 195 BOTNET_NORDNS 892 0.25 0.64 0.00 196 HTML_FONT_FACE_BAD 881 0.52 0.64 0.45 197 XM_H_PHPOS_M 873 0.28 0.63 0.06 198 TR_Mismatch_TLD_02 842 0.27 0.61 0.07 199 TR_XM_Base64_C 835 0.26 0.60 0.05 200 XM_ShortIntro_01 831 0.41 0.60 0.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 186864 88.23 97.19 82.73 2 RELAYCOUNTRY_US 180892 82.95 87.63 80.08 3 DKIM_SIGNED 176339 84.18 94.12 78.07 4 XM_DK_Pass 174135 82.63 91.64 77.09 5 DKIM_VALID 173484 82.24 91.08 76.80 6 XM_B_Unicode 162047 78.76 90.20 71.74 7 DKIM_VALID_AU 146323 68.45 74.44 64.78 8 BAYES_50 136933 50.82 34.87 60.62 9 XMListUnsubscribeExists 132773 66.13 78.10 58.78 10 DCC_CHECK 115159 62.35 80.85 50.98 11 DCC_CHECK_NEGATIVE 110685 37.53 18.86 49.00 12 XM_B_Unicode3 108811 49.26 51.05 48.17 13 XM_B_SpammyWords 107650 57.35 73.14 47.66 14 HTML_FONT_LOW_CONTRAST 75682 38.92 47.73 33.50 15 LOC_TINY_FONT_1 74973 40.76 53.08 33.19 16 RCVD_IN_MSPIKE_H2 73151 35.82 41.42 32.38 17 DKIM_VALID_EF 60585 26.78 26.70 26.82 18 FVGT_m_MULTI_ODD 59172 29.69 35.38 26.20 19 XM_B_SpammyWords2 49622 28.76 39.83 21.97 20 T_TM2_M_HEADER_IN_MSG 48053 20.49 19.21 21.27 21 MIME_HTML_ONLY 46925 22.90 26.36 20.77 22 T_KAM_HTML_FONT_INVALID 46625 23.39 27.87 20.64 23 XMSubLong 46543 19.76 18.39 20.60 24 XM_Multi_Part_URI 44817 21.10 23.15 19.84 25 USER_IN_DEF_DKIM_WL 44116 14.23 5.60 19.53 26 ALL_TRUSTED 36735 10.59 1.35 16.26 27 TR_XM_DK_Unsub 32268 16.52 20.17 14.29 28 UNPARSEABLE_RELAY 30871 16.19 20.29 13.67 29 BAYES_60 26112 10.29 8.23 11.56 30 XM_Evil_Numbers_Gen 25545 11.15 10.88 11.31 31 XM_DKIMWhitelistDomains 22198 6.22 0.35 9.83 32 XM_B_Unsub 19507 11.05 14.99 8.64 33 HTML_IMAGE_RATIO_02 18576 8.50 8.94 8.22 34 RCVD_IN_VALIDITY_SAFE 17754 6.51 4.32 7.86 35 LotsOfNums_01 17635 7.24 6.33 7.81 36 TR_MAX_INTL_RELAY 17328 10.62 15.43 7.67 37 TR_XM_BayesUnsub 16654 10.13 14.63 7.37 38 XM_B_SpammyWords3 16399 9.89 14.17 7.26 39 XM_B_PhoneNumber 16224 6.35 4.99 7.18 40 BAYES_00 15877 4.47 0.31 7.03 41 FSL_BULK_SIG 15642 7.07 7.32 6.92 42 XM_DK_Undo_02 14059 22.52 49.05 6.22 43 TR_XM_DK_Bayes 13961 3.92 0.23 6.18 44 RCVD_IN_VALIDITY_CERTIFIED 13912 5.09 3.36 6.16 45 TR_XM_DK_Bayes1 13863 3.89 0.22 6.14 46 XM_B_SpammyTLD 13259 5.04 3.69 5.87 47 T_TooManySym_01 13190 4.65 2.71 5.84 48 HTML_IMAGE_RATIO_04 13104 5.70 5.53 5.80 49 TooManyTo_001 12783 5.14 4.30 5.66 50 XMStrtUSub 12658 5.25 4.66 5.60 51 XM_H_Long_From01 12558 5.69 5.91 5.56 52 TR_XM_DK_Bayes2 12232 3.41 0.14 5.42 53 IN_ZIMBRA_NJ_WHITELIST 11577 3.19 0.05 5.13 54 LOTS_OF_MONEY 10922 7.41 11.60 4.84 55 BAYES_99 10694 17.57 38.47 4.73 56 RCVD_IN_MSPIKE_H3 10314 4.17 3.52 4.57 57 RCVD_IN_MSPIKE_WL 10314 4.17 3.52 4.57 58 BAYES_80 10281 6.49 9.65 4.55 59 XM_H_GMP 10201 4.26 3.85 4.52 60 XM_B_Phish_Phrases 10088 4.42 4.34 4.47 61 URI_NOVOWEL 10046 3.17 1.08 4.45 62 BAYES_40 9905 3.17 1.19 4.39 63 MPART_ALT_DIFF 9530 4.91 6.02 4.22 64 XM_UncommonTLD01 9179 4.37 4.86 4.06 65 XMSubMetaSx_00 8983 4.47 5.27 3.98 66 MIME_QP_LONG_LINE 8565 3.01 1.74 3.79 67 ANY_BOUNCE_MESSAGE 8550 2.54 0.51 3.79 68 BOUNCE_MESSAGE 8548 2.54 0.51 3.78 69 RELAYCOUNTRY_META 8201 6.84 12.07 3.63 70 BOTNET_IPINHOSTNAME 8074 6.85 12.19 3.57 71 BAYES_999 7924 13.87 30.75 3.51 72 TR_XM_SpammyWords4 7524 6.10 10.62 3.33 73 T_TooManySym_02 7135 2.22 0.69 3.16 74 BAYES_95 7041 4.04 5.54 3.12 75 INVALID_MSGID 6954 1.95 0.11 3.08 76 T_REMOTE_IMAGE 6715 2.22 1.00 2.97 77 TR_Symld_Words 6626 2.27 1.20 2.93 78 RCVD_IN_IADB_LISTED 6626 2.13 0.82 2.93 79 XM_Body_Dirty_Words 6614 4.32 6.58 2.93 80 TR_XM_DKIM_Undo 6592 15.56 36.15 2.92 81 XM_CamelCaseFrm001 6389 3.20 3.80 2.83 82 MIME_HTML_MOSTLY 6310 3.11 3.63 2.79 83 FROM_EXCESS_BASE64 6296 2.92 3.14 2.79 84 TO_MALFORMED 6213 1.71 0.01 2.75 85 TR_XM_UnparsRelay 6028 6.13 11.78 2.67 86 XMNumbers 6024 2.87 3.20 2.67 87 RCVD_IN_IADB_SPF 6013 1.91 0.69 2.66 88 BAYES_20 5657 1.92 0.97 2.50 89 RCVD_IN_IADB_SENDERID 5506 1.76 0.66 2.44 90 RCVD_IN_IADB_DK 5401 1.73 0.66 2.39 91 SUBJ_ALL_CAPS 5324 2.69 3.22 2.36 92 TR_DCC_Bayes_99 5143 13.14 30.82 2.28 93 MIME_HTML_ONLY_MULTI 4987 2.62 3.30 2.21 94 HTML_IMAGE_RATIO_06 4882 2.93 4.19 2.16 95 TR_XM_SpammyRelay 4869 4.83 9.18 2.16 96 TR_XM_SpammyWords5 4826 2.96 4.29 2.14 97 MAILING_LIST_MULTI 4408 1.75 1.42 1.95 98 TM2_M_URI_OPT_OUT 4364 2.53 3.50 1.93 99 XM_PDF 4350 1.26 0.18 1.93 100 XMStockSpam_06 4276 1.89 1.88 1.89 101 HTML_IMAGE_RATIO_08 4248 2.63 3.86 1.88 102 UNTRUSTED_Relay 4168 3.06 5.03 1.85 103 RCVD_IN_IADB_VOUCHED 4106 1.29 0.43 1.82 104 XMSexyCombo_05 3919 2.74 4.39 1.73 105 XM_TLDProd2 3831 1.19 0.37 1.70 106 T_XMDrugObfuBody_14 3743 2.42 3.66 1.66 107 XM_B_URI_Unicode 3592 1.97 2.59 1.59 108 TooManyTo_002 3575 1.32 0.89 1.58 109 XMBrknScrpt_02 3528 2.46 3.91 1.56 110 IN_HORDE_ADDRESS_BOOK 3395 0.95 0.06 1.50 111 BAYES_05 3379 1.11 0.48 1.50 112 TM2_M_VERY_LONG_WORD 3358 2.26 3.51 1.49 113 HTML_MIME_NO_HTML_TAG 3282 1.22 0.83 1.45 114 XMGappySubj_01 3253 0.97 0.21 1.44 115 XM_SPF_SoftFail 3225 2.62 4.57 1.43 116 TR_XM_PhishingBody 3202 2.26 3.64 1.42 117 TVD_SPACE_RATIO 3162 0.89 0.05 1.40 118 THIS_AD 3131 1.60 1.95 1.39 119 XM_B_SEO 3113 2.16 3.42 1.38 120 RELAYCOUNTRY_CA 3108 2.62 4.63 1.38 121 XM_DK_Undo_01 3079 1.46 1.61 1.36 122 XM_ProductURIs 3050 1.44 1.58 1.35 123 XMSubMetaI_00 3041 1.66 2.16 1.35 124 XMBdyGiftCard01 3004 1.54 1.87 1.33 125 XM_SendGrid 3000 1.28 1.19 1.33 126 T_XMHurry_00 2997 2.38 4.11 1.33 127 RCVD_IN_IADB_OPTIN 2934 0.90 0.24 1.30 128 XMBody_95 2928 0.96 0.42 1.30 129 DKIM_INVALID 2855 1.94 3.04 1.26 130 DIET_1 2793 1.28 1.35 1.24 131 XMDiploma_00 2773 1.45 1.81 1.23 132 XM_H_Long_From02 2735 1.22 1.23 1.21 133 XMGappySubj_02 2688 0.77 0.08 1.19 134 T_XMDrugObfuBody_08 2665 1.94 3.18 1.18 135 BOTNET 2633 3.38 6.98 1.17 136 XMBody_17 2556 2.48 4.68 1.13 137 T_TooManySym_03 2537 0.76 0.17 1.12 138 XM_UB50 2497 1.66 2.56 1.11 139 XMOemUri 2491 0.85 0.43 1.10 140 TR_XM_SEO4 2429 1.79 2.94 1.08 141 XM_B_Unsub2 2419 1.26 1.58 1.07 142 XM_B_Investor 2406 2.18 3.99 1.07 143 XM_B_DNDMA 2145 0.90 0.83 0.95 144 TR_XM_DK_SendGrid 2124 0.92 0.88 0.94 145 XM_RXBody 2096 0.94 0.95 0.93 146 T_TVD_MIME_NO_HEADERS 2082 0.59 0.04 0.92 147 XM_GoogleGroups 2062 0.77 0.53 0.91 148 URI_HEX 2027 1.05 1.31 0.90 149 RCVD_IN_BL_SPAMCOP_NET 2015 4.55 10.50 0.89 150 T_XMDrugObfuBody_00 2004 0.96 1.09 0.89 151 KHOP_HELO_FCRDNS 1985 0.94 1.04 0.88 152 HTML_EXTRA_CLOSE 1803 0.50 0.01 0.80 153 TR_XM_SpammyWords2 1758 6.15 14.90 0.78 154 TR_XM_Base64_M1 1745 1.04 1.47 0.77 155 HTML_TAG_BALANCE_BODY 1743 1.03 1.44 0.77 156 XM_OfRef6 1717 1.65 3.10 0.76 157 URI_TRY_3LD 1712 1.00 1.40 0.76 158 XM_B_COPY_HTML 1663 0.90 1.16 0.74 159 XMSubMetaSxObfu_03 1643 0.71 0.68 0.73 160 SHOPIFY_IMG_NOT_RCVD_SFY 1573 1.14 1.86 0.70 161 DKIM_ADSP_CUSTOM_MED 1530 0.67 0.66 0.68 162 TooManyTo_003 1497 0.71 0.80 0.66 163 XM_B_FormFill 1493 0.44 0.08 0.66 164 USER_IN_WELCOMELIST 1443 0.40 0.00 0.64 165 USER_IN_WHITELIST 1443 0.40 0.00 0.64 166 PLING_QUERY 1383 0.63 0.67 0.61 167 TVD_RCVD_IP 1338 0.73 0.95 0.59 168 XMGenDplmaNmb 1314 0.72 0.94 0.58 169 XMPhish30 1307 0.82 1.21 0.58 170 XM_URI_RBL 1305 1.43 2.81 0.58 171 XM_B_SpammyWords4 1289 1.44 2.86 0.57 172 XMClaimOffer 1284 0.57 0.58 0.57 173 XM_H_PHPMailer 1229 0.72 1.00 0.54 174 MPART_ALT_DIFF_COUNT 1219 0.86 1.39 0.54 175 XMSolicitRefs_0 1183 0.72 1.04 0.52 176 RELAYCOUNTRY_AU 1178 1.13 2.11 0.52 177 T_FILL_THIS_FORM_SHORT 1163 0.95 1.65 0.51 178 FONT_INVIS_POSTEXTRAS 1102 0.31 0.03 0.49 179 TR_XM_SPAMCOP 1080 3.59 8.64 0.48 180 SpammyFromTLD_01 1078 0.88 1.53 0.48 181 SUBJ_DOLLARS 1076 0.56 0.69 0.48 182 XM_Walgreens_Forge 1074 0.32 0.07 0.48 183 TooManyTo_004 1053 0.59 0.78 0.47 184 TR_MetaPhish_Combo_01 1041 0.60 0.83 0.46 185 FORGED_GMAIL_RCVD 1035 0.49 0.55 0.46 186 HTML_FONT_FACE_BAD 1018 0.52 0.64 0.45 187 T_STY_INVIS_DIRECT 1010 0.63 0.93 0.45 188 XMUrgent 994 0.45 0.47 0.44 189 T_TooManySym_04 990 0.29 0.04 0.44 190 LOW_PRICE 942 0.60 0.90 0.42 191 NML_ADSP_CUSTOM_MED 937 0.47 0.56 0.41 192 DKIM_ADSP_NXDOMAIN 928 0.46 0.55 0.41 193 TooManyTo_005 906 0.54 0.76 0.40 194 NO_DNS_FOR_FROM 890 0.44 0.50 0.39 195 HTTPS_HTTP_MISMATCH 886 0.51 0.71 0.39 196 XM_Sams_Club_Forge 873 0.25 0.04 0.39 197 HTML_TEXT_INVISIBLE_STYLE 864 0.44 0.52 0.38 198 RCVD_IN_PBL 860 0.53 0.77 0.38 199 TR_LOTS_OF_MONEY3 857 1.45 3.19 0.38 200 HTML_IMAGE_ONLY_20 842 0.38 0.39 0.37 ----------------------------------------------------------------------