Email: 329868 Autolearn: 0 AvgScore: 3.97 AvgScanTime: 1.14 sec Spam: 100568 Autolearn: 0 AvgScore: 13.72 AvgScanTime: 1.30 sec Ham: 229300 Autolearn: 0 AvgScore: -0.30 AvgScanTime: 1.06 sec Time Spent Running SA: 104.21 hours Time Spent Processing Spam: 36.44 hours Time Spent Processing Ham: 67.78 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 97263 74.85 96.71 65.27 2 DKIM_SIGNED 93909 71.01 93.38 61.20 3 XM_DK_Pass 91148 69.58 90.63 60.35 4 DKIM_VALID 89916 68.96 89.41 59.99 5 XM_B_Unicode 87761 65.81 87.27 56.40 6 T_SCC_BODY_TEXT_LINE 81577 82.79 81.12 83.53 7 XMListUnsubscribeExists 77203 54.17 76.77 44.26 8 XM_B_SpammyWords 75637 47.38 75.21 35.17 9 DCC_CHECK 75390 43.50 74.96 29.70 10 RELAYCOUNTRY_US 74927 66.87 74.50 63.53 11 DKIM_VALID_AU 68064 56.24 67.68 51.22 12 XM_DK_Undo_02 52474 19.77 52.18 5.55 13 XM_B_Unicode3 48885 38.72 48.61 34.39 14 XM_B_SpammyWords2 43781 23.57 43.53 14.81 15 BAYES_99 42898 16.87 42.66 5.57 16 TR_XM_DKIM_Undo 42364 14.35 42.12 2.16 17 LOC_TINY_FONT_1 37739 26.98 37.53 22.36 18 HTML_FONT_LOW_CONTRAST 34368 28.12 34.17 25.46 19 BAYES_999 34008 13.39 33.82 4.42 20 FVGT_m_MULTI_ODD 33299 24.70 33.11 21.00 21 BAYES_50 31962 53.44 31.78 62.94 22 MIME_HTML_ONLY 31947 21.35 31.77 16.78 23 TR_DCC_Bayes_99 31553 10.70 31.37 1.63 24 DKIM_VALID_EF 31387 26.02 31.21 23.75 25 T_KAM_HTML_FONT_INVALID 28486 19.68 28.33 15.89 26 RCVD_IN_MSPIKE_H2 26513 22.96 26.36 21.47 27 DCC_CHECK_NEGATIVE 25164 56.48 25.02 70.27 28 TR_XM_DK_Unsub 24948 16.57 24.81 12.96 29 RELAYCOUNTRY_META 24542 9.82 24.40 3.42 30 T_TM2_M_HEADER_IN_MSG 21736 32.68 21.61 37.53 31 XMSubLong 21466 19.32 21.34 18.44 32 TR_XM_SpammyRelay 20821 7.75 20.70 2.08 33 TR_XM_SpammyWords2 18485 6.02 18.38 0.59 34 XM_Multi_Part_URI 18435 14.58 18.33 12.93 35 RCVD_IN_BL_SPAMCOP_NET 17253 5.60 17.16 0.53 36 RELAYCOUNTRY_CA 16890 6.20 16.79 1.55 37 TR_MAX_INTL_RELAY 15470 9.68 15.38 7.18 38 XM_B_Unsub 15357 9.08 15.27 6.37 39 TR_XM_BayesUnsub 14925 8.11 14.84 5.15 40 XM_B_SpammyWords3 14713 7.24 14.63 4.00 41 UNPARSEABLE_RELAY 14047 10.43 13.97 8.88 42 TR_XM_SPAMCOP 13788 4.35 13.71 0.24 43 BOTNET_IPINHOSTNAME 12429 6.97 12.36 4.61 44 LOTS_OF_MONEY 12176 6.81 12.11 4.48 45 RCVD_IN_MSPIKE_WL 11949 6.93 11.88 4.75 46 RCVD_IN_MSPIKE_H3 11949 6.93 11.88 4.75 47 TR_XM_SpammyWords4 10406 5.38 10.35 3.20 48 XMBody_17 10041 3.52 9.98 0.69 49 XM_Body_Dirty_Words 9503 5.27 9.45 3.44 50 BAYES_80 9301 5.84 9.25 4.35 51 TR_XM_UnparsRelay 8622 3.59 8.57 1.40 52 XM_Evil_Numbers_Gen 8151 6.51 8.10 5.82 53 BAYES_60 7806 8.59 7.76 8.95 54 HTML_IMAGE_RATIO_02 7193 6.17 7.15 5.73 55 T_FILL_THIS_FORM_SHORT 6825 2.45 6.79 0.55 56 FSL_BULK_SIG 6726 3.66 6.69 2.33 57 XMSubMetaSx_00 6395 4.67 6.36 3.93 58 BOTNET 6384 2.62 6.35 0.98 59 XM_UncommonTLD01 6286 10.77 6.25 12.75 60 LotsOfNums_01 6200 6.13 6.16 6.12 61 BAYES_95 5796 3.72 5.76 2.83 62 MPART_ALT_DIFF 5703 4.05 5.67 3.34 63 XMSexyCombo_05 5243 2.89 5.21 1.87 64 TooManyTo_001 5236 11.68 5.21 14.53 65 HTML_IMAGE_RATIO_04 5198 3.80 5.17 3.20 66 UNTRUSTED_Relay 5192 2.48 5.16 1.31 67 XM_H_Long_From01 5000 4.47 4.97 4.25 68 XM_B_Phish_Phrases 4960 3.08 4.93 2.26 69 XM_H_GMP 4933 6.06 4.91 6.57 70 USER_IN_DEF_DKIM_WL 4867 10.28 4.84 12.66 71 TR_XM_PhishingBody 4573 2.31 4.55 1.33 72 TR_XM_FormFill 4532 1.39 4.51 0.03 73 TR_XM_BayesRelay 4503 1.37 4.48 0.00 74 XM_B_Investor 4498 2.31 4.47 1.36 75 FONT_INVIS_LONG_LINE 4341 1.34 4.32 0.03 76 MIME_HTML_MOSTLY 4333 2.74 4.31 2.06 77 TR_XM_SpammyWords5 4243 1.87 4.22 0.84 78 XM_SPF_SoftFail 4241 2.68 4.22 2.00 79 T_XMDrugObfuBody_14 4241 2.21 4.22 1.34 80 HTML_IMAGE_RATIO_08 4158 2.37 4.13 1.60 81 DKIM_INVALID 3993 2.05 3.97 1.20 82 RCVD_IN_VALIDITY_SAFE 3941 4.80 3.92 5.19 83 HK_RANDOM_REPLYTO 3905 1.26 3.88 0.12 84 XM_OfRef6 3875 1.91 3.85 1.05 85 XMStrtUSub 3620 4.42 3.60 4.78 86 MIME_HTML_ONLY_MULTI 3578 2.45 3.56 1.96 87 XM_B_SpammyTLD 3551 3.24 3.53 3.11 88 HTML_IMAGE_RATIO_06 3474 2.37 3.45 1.89 89 TM2_M_URI_OPT_OUT 3380 2.19 3.36 1.67 90 RCVD_IN_VALIDITY_CERTIFIED 3354 4.14 3.34 4.49 91 T_XMDrugObfuBody_08 3331 1.97 3.31 1.38 92 XMNumbers 3305 2.72 3.29 2.48 93 TM2_M_VERY_LONG_WORD 3090 1.66 3.07 1.04 94 FROM_EXCESS_BASE64 3071 2.36 3.05 2.05 95 TR_LOTS_OF_MONEY3 3056 1.22 3.04 0.43 96 SpammyFromTLD_01 2754 1.14 2.74 0.44 97 XM_CamelCaseFrm001 2623 2.72 2.61 2.77 98 XM_URI_RBL 2604 0.90 2.59 0.17 99 SUBJ_ALL_CAPS 2391 1.29 2.38 0.82 100 TR_XM_NoHeaderRelay 2367 0.77 2.35 0.08 101 XM_UB50 2276 1.17 2.26 0.68 102 XMBrknScrpt_02 2238 1.09 2.23 0.59 103 T_TooManySym_01 2197 4.95 2.18 6.17 104 XM_B_SpammyWords4 2180 0.96 2.17 0.43 105 XM_B_Phish66 2086 0.78 2.07 0.22 106 XMStockSpam_06 2083 1.20 2.07 0.81 107 RELAYCOUNTRY_AU 2081 0.90 2.07 0.39 108 TR_Mismatch_TLD_02 2071 0.68 2.06 0.07 109 XMDiploma_00 2008 1.51 2.00 1.29 110 T_XMHurry_00 1974 0.82 1.96 0.32 111 MIME_QP_LONG_LINE 1891 2.62 1.88 2.95 112 XMSlimDrugH 1887 0.83 1.88 0.37 113 AC_BR_BONANZA 1872 0.64 1.86 0.11 114 XM_B_Unsub2 1863 1.24 1.85 0.97 115 XMBdyGiftCard01 1799 1.07 1.79 0.75 116 TM2_M_A_HREF_HREF 1765 0.71 1.76 0.25 117 SpammyFromTLD_02 1761 0.66 1.75 0.18 118 XMReplyNow 1754 0.76 1.74 0.33 119 XM_DIRTYINTL 1743 0.60 1.73 0.10 120 XM_HighProb1 1724 0.53 1.71 0.00 121 HTML_MIME_NO_HTML_TAG 1659 1.28 1.65 1.11 122 HTML_TAG_BALANCE_BODY 1637 0.71 1.63 0.31 123 RCVD_IN_PSBL 1622 0.87 1.61 0.55 124 URI_TRY_3LD 1588 1.00 1.58 0.75 125 TR_XM_INV_DKIM 1545 0.51 1.54 0.06 126 ALL_TRUSTED 1489 23.63 1.48 33.34 127 T_REMOTE_IMAGE 1480 2.27 1.47 2.62 128 URI_HEX 1449 1.03 1.44 0.85 129 MAILING_LIST_MULTI 1422 1.89 1.41 2.09 130 THIS_AD 1405 0.69 1.40 0.38 131 XM_DK_Undo_01 1378 1.43 1.37 1.45 132 HTTPS_HTTP_MISMATCH 1364 0.76 1.36 0.50 133 URI_NOVOWEL 1345 1.05 1.34 0.93 134 DIET_1 1303 0.55 1.30 0.23 135 XMPhish30 1294 0.79 1.29 0.57 136 XM_SendGrid 1290 1.17 1.28 1.12 137 TR_XM_PHPForged 1290 0.56 1.28 0.24 138 XMSubMetaI_00 1259 0.67 1.25 0.41 139 XM_UB99 1247 0.38 1.24 0.01 140 TR_Caps_n_Bayes_99 1220 0.37 1.21 0.00 141 T_XMDrugObfuBody_00 1214 0.73 1.21 0.53 142 TR_XM_InvalidRelay 1204 0.37 1.20 0.01 143 FORGED_RELAY_MUA_TO_MX 1158 0.37 1.15 0.03 144 MPART_ALT_DIFF_COUNT 1153 0.82 1.15 0.68 145 XMSexyCombo_01 1152 0.51 1.15 0.23 146 TR_XM_PHPDW 1147 0.51 1.14 0.23 147 ANY_BOUNCE_MESSAGE 1128 9.49 1.12 13.17 148 BOUNCE_MESSAGE 1125 9.49 1.12 13.16 149 TR_XM_FormFill2 1108 0.51 1.10 0.25 150 XMHTML_After_End 1108 0.54 1.10 0.29 151 XM_H_PHPOS 1100 0.49 1.09 0.22 152 RCVD_IN_VALIDITY_RPBL 1095 0.36 1.09 0.04 153 KHOP_HELO_FCRDNS 1079 0.60 1.07 0.40 154 BAYES_40 1056 3.01 1.05 3.87 155 HOSTED_IMG_MULTI_PUB_01 1055 0.34 1.05 0.02 156 TR_Symld_Words 1033 1.00 1.03 0.99 157 T_XMDrugObfuBody_10 1032 0.33 1.03 0.03 158 DKIM_ADSP_CUSTOM_MED 1019 0.89 1.01 0.83 159 XM_B_COPY_HTML 996 0.85 0.99 0.79 160 RDNS_DYNAMIC 994 0.53 0.99 0.33 161 SHOPIFY_IMG_NOT_RCVD_SFY 985 0.49 0.98 0.27 162 XM_UB999 982 0.30 0.98 0.00 163 TR_XM_Base64_M1 980 0.93 0.97 0.91 164 TR_XM_DK_SendGrid 966 0.87 0.96 0.83 165 TR_Mismatch_TLD_01 956 1.20 0.95 1.32 166 XM_H_Undi_Recip 955 0.39 0.95 0.15 167 NML_ADSP_CUSTOM_MED 942 0.70 0.94 0.60 168 BAYES_20 928 1.98 0.92 2.45 169 TR_XM_Base64_L1 923 0.42 0.92 0.20 170 LongTLD 917 0.37 0.91 0.13 171 URIBL_DBL_SPAM 916 0.28 0.91 0.01 172 PDS_OTHER_BAD_TLD 914 0.39 0.91 0.16 173 XMGenDplmaNmb 906 0.78 0.90 0.73 174 TVD_RCVD_IP 897 1.68 0.89 2.03 175 RCVD_IN_IADB_LISTED 887 1.95 0.88 2.42 176 HELO_DYNAMIC_SPLIT_IP 868 0.27 0.86 0.00 177 T_STY_INVIS_DIRECT 866 0.41 0.86 0.22 178 XMBody_78 860 0.44 0.86 0.25 179 XM_ProductURIs 851 0.63 0.85 0.53 180 RCVD_IN_RP_SAFE 836 0.96 0.83 1.02 181 TM2_M_OBFU_COMMENT 829 0.45 0.82 0.29 182 FORGED_GMAIL_RCVD 820 0.60 0.82 0.51 183 TR_XM_Undi_Recip19 812 0.29 0.81 0.06 184 RCVD_IN_IADB_SPF 809 1.78 0.80 2.21 185 HTML_FONT_FACE_BAD 785 0.52 0.78 0.40 186 SUBJ_DOLLARS 779 0.53 0.77 0.43 187 XM_B_DNDMA 774 0.46 0.77 0.32 188 RCVD_IN_IADB_DK 768 1.62 0.76 1.99 189 T_Symld_Words_02 768 0.42 0.76 0.26 190 RCVD_IN_IADB_SENDERID 754 1.64 0.75 2.04 191 XM_UB60 743 0.27 0.74 0.06 192 SCC_BODY_URI_ONLY 742 2.30 0.74 2.99 193 AC_HTML_NONSENSE_TAGS 732 0.23 0.73 0.01 194 XM_H_Long_From02 728 0.96 0.72 1.06 195 XMPhish14 710 0.43 0.71 0.31 196 RCVD_IN_RP_CERTIFIED 707 0.82 0.70 0.88 197 XMSubMetaSSx_00 701 0.31 0.70 0.14 198 XM_H_PHPMailer 690 1.27 0.69 1.52 199 RELAYCOUNTRY_IN 684 0.23 0.68 0.03 200 TR_XM_Undi_RecipCombo2 683 0.21 0.68 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 191528 82.79 81.12 83.53 2 DCC_CHECK_NEGATIVE 161140 56.48 25.02 70.27 3 HTML_MESSAGE 149653 74.85 96.71 65.27 4 RELAYCOUNTRY_US 145669 66.87 74.50 63.53 5 BAYES_50 144331 53.44 31.78 62.94 6 DKIM_SIGNED 140321 71.01 93.38 61.20 7 XM_DK_Pass 138377 69.58 90.63 60.35 8 DKIM_VALID 137568 68.96 89.41 59.99 9 XM_B_Unicode 129322 65.81 87.27 56.40 10 DKIM_VALID_AU 117456 56.24 67.68 51.22 11 XMListUnsubscribeExists 101495 54.17 76.77 44.26 12 T_TM2_M_HEADER_IN_MSG 86053 32.68 21.61 37.53 13 XM_B_SpammyWords 80646 47.38 75.21 35.17 14 XM_B_Unicode3 78846 38.72 48.61 34.39 15 ALL_TRUSTED 76445 23.63 1.48 33.34 16 DCC_CHECK 68111 43.50 74.96 29.70 17 HTML_FONT_LOW_CONTRAST 58388 28.12 34.17 25.46 18 DKIM_VALID_EF 54459 26.02 31.21 23.75 19 LOC_TINY_FONT_1 51273 26.98 37.53 22.36 20 RCVD_IN_MSPIKE_H2 49222 22.96 26.36 21.47 21 FVGT_m_MULTI_ODD 48164 24.70 33.11 21.00 22 XMSubLong 42279 19.32 21.34 18.44 23 MIME_HTML_ONLY 38466 21.35 31.77 16.78 24 T_KAM_HTML_FONT_INVALID 36431 19.68 28.33 15.89 25 XM_B_SpammyWords2 33966 23.57 43.53 14.81 26 TooManyTo_001 33306 11.68 5.21 14.53 27 ANY_BOUNCE_MESSAGE 30189 9.49 1.12 13.17 28 BOUNCE_MESSAGE 30184 9.49 1.12 13.16 29 TR_XM_DK_Unsub 29725 16.57 24.81 12.96 30 XM_Multi_Part_URI 29647 14.58 18.33 12.93 31 XM_UncommonTLD01 29227 10.77 6.25 12.75 32 USER_IN_DEF_DKIM_WL 29032 10.28 4.84 12.66 33 BAYES_60 20520 8.59 7.76 8.95 34 UNPARSEABLE_RELAY 20361 10.43 13.97 8.88 35 DKIM_ADSP_NXDOMAIN 19664 6.06 0.34 8.58 36 XM_DKIMWhitelistDomains 19510 5.92 0.01 8.51 37 TR_MAX_INTL_RELAY 16455 9.68 15.38 7.18 38 XM_H_GMP 15054 6.06 4.91 6.57 39 BAYES_00 14853 4.64 0.43 6.48 40 XM_B_Unsub 14597 9.08 15.27 6.37 41 T_TooManySym_01 14145 4.95 2.18 6.17 42 LotsOfNums_01 14025 6.13 6.16 6.12 43 XM_Evil_Numbers_Gen 13337 6.51 8.10 5.82 44 HTML_IMAGE_RATIO_02 13146 6.17 7.15 5.73 45 BAYES_99 12765 16.87 42.66 5.57 46 XM_DK_Undo_02 12731 19.77 52.18 5.55 47 TR_XM_DK_Bayes 12562 3.90 0.31 5.48 48 TR_XM_DK_Bayes1 12484 3.88 0.31 5.44 49 RCVD_IN_VALIDITY_SAFE 11902 4.80 3.92 5.19 50 TR_XM_BayesUnsub 11811 8.11 14.84 5.15 51 TR_XM_DK_Bayes2 11084 3.43 0.24 4.83 52 XMStrtUSub 10957 4.42 3.60 4.78 53 RCVD_IN_MSPIKE_H3 10903 6.93 11.88 4.75 54 RCVD_IN_MSPIKE_WL 10903 6.93 11.88 4.75 55 BOTNET_IPINHOSTNAME 10567 6.97 12.36 4.61 56 RCVD_IN_VALIDITY_CERTIFIED 10292 4.14 3.34 4.49 57 LOTS_OF_MONEY 10283 6.81 12.11 4.48 58 BAYES_999 10145 13.39 33.82 4.42 59 BAYES_80 9974 5.84 9.25 4.35 60 XM_H_Long_From01 9738 4.47 4.97 4.25 61 IN_ZIMBRA_NJ_WHITELIST 9516 2.90 0.06 4.15 62 XM_B_SpammyWords3 9169 7.24 14.63 4.00 63 XMSubMetaSx_00 9010 4.67 6.36 3.93 64 BAYES_40 8868 3.01 1.05 3.87 65 XM_Body_Dirty_Words 7881 5.27 9.45 3.44 66 RELAYCOUNTRY_META 7844 9.82 24.40 3.42 67 MPART_ALT_DIFF 7659 4.05 5.67 3.34 68 HTML_IMAGE_RATIO_04 7336 3.80 5.17 3.20 69 TR_XM_SpammyWords4 7333 5.38 10.35 3.20 70 XM_B_SpammyTLD 7132 3.24 3.53 3.11 71 T_TooManySym_02 6950 2.30 0.64 3.03 72 INVALID_MSGID 6938 2.16 0.19 3.03 73 SCC_BODY_URI_ONLY 6853 2.30 0.74 2.99 74 MIME_QP_LONG_LINE 6764 2.62 1.88 2.95 75 BAYES_95 6480 3.72 5.76 2.83 76 XM_CamelCaseFrm001 6362 2.72 2.61 2.77 77 TO_MALFORMED 6284 1.91 0.01 2.74 78 T_REMOTE_IMAGE 6013 2.27 1.47 2.62 79 BAYES_05 5896 1.90 0.37 2.57 80 XMNumbers 5678 2.72 3.29 2.48 81 BAYES_20 5613 1.98 0.92 2.45 82 RCVD_IN_IADB_LISTED 5556 1.95 0.88 2.42 83 FSL_BULK_SIG 5343 3.66 6.69 2.33 84 XM_B_Phish_Phrases 5192 3.08 4.93 2.26 85 RCVD_IN_IADB_SPF 5063 1.78 0.80 2.21 86 TR_XM_DKIM_Undo 4960 14.35 42.12 2.16 87 MAILING_LIST_MULTI 4803 1.89 1.41 2.09 88 TR_XM_SpammyRelay 4759 7.75 20.70 2.08 89 MIME_HTML_MOSTLY 4716 2.74 4.31 2.06 90 FROM_EXCESS_BASE64 4701 2.36 3.05 2.05 91 RCVD_IN_IADB_SENDERID 4668 1.64 0.75 2.04 92 TVD_RCVD_IP 4658 1.68 0.89 2.03 93 XM_SPF_SoftFail 4583 2.68 4.22 2.00 94 RCVD_IN_IADB_DK 4560 1.62 0.76 1.99 95 MIME_HTML_ONLY_MULTI 4494 2.45 3.56 1.96 96 HTML_IMAGE_RATIO_06 4333 2.37 3.45 1.89 97 XMSexyCombo_05 4292 2.89 5.21 1.87 98 XM_PDF 4169 1.35 0.29 1.82 99 XMBSHREFv2 4086 1.30 0.19 1.78 100 TooManyTo_002 4022 1.34 0.40 1.75 101 TM2_M_URI_OPT_OUT 3828 2.19 3.36 1.67 102 TR_DCC_Bayes_99 3743 10.70 31.37 1.63 103 XMGappySubj_01 3678 1.19 0.25 1.60 104 HTML_IMAGE_RATIO_08 3667 2.37 4.13 1.60 105 RELAYCOUNTRY_CA 3558 6.20 16.79 1.55 106 XM_H_PHPMailer 3495 1.27 0.69 1.52 107 XM_DK_Undo_01 3323 1.43 1.37 1.45 108 TVD_SPACE_RATIO 3295 1.03 0.10 1.44 109 IN_HORDE_ADDRESS_BOOK 3212 0.98 0.04 1.40 110 TR_XM_UnparsRelay 3206 3.59 8.57 1.40 111 RCVD_IN_IADB_VOUCHED 3160 1.07 0.37 1.38 112 T_XMDrugObfuBody_08 3156 1.97 3.31 1.38 113 XM_B_Investor 3128 2.31 4.47 1.36 114 XMGappySubj_02 3076 0.95 0.06 1.34 115 T_XMDrugObfuBody_14 3063 2.21 4.22 1.34 116 TR_XM_PhishingBody 3054 2.31 4.55 1.33 117 TR_Mismatch_TLD_01 3017 1.20 0.95 1.32 118 UNTRUSTED_Relay 2993 2.48 5.16 1.31 119 XMDiploma_00 2966 1.51 2.00 1.29 120 DKIM_INVALID 2753 2.05 3.97 1.20 121 XM_SendGrid 2578 1.17 1.28 1.12 122 HTML_MIME_NO_HTML_TAG 2552 1.28 1.65 1.11 123 XM_H_Long_From02 2425 0.96 0.72 1.06 124 XM_OfRef6 2409 1.91 3.85 1.05 125 XMBody_95 2406 0.77 0.12 1.05 126 TM2_M_VERY_LONG_WORD 2391 1.66 3.07 1.04 127 T_TooManySym_03 2369 0.81 0.29 1.03 128 XM_GoogleGroups 2369 0.85 0.43 1.03 129 RCVD_IN_RP_SAFE 2329 0.96 0.83 1.02 130 MSGID_NOFQDN1 2312 0.71 0.01 1.01 131 TR_Symld_Words 2260 1.00 1.03 0.99 132 BOTNET 2244 2.62 6.35 0.98 133 XM_B_Unsub2 2222 1.24 1.85 0.97 134 RCVD_IN_IADB_OPTIN 2127 0.73 0.27 0.93 135 URI_NOVOWEL 2126 1.05 1.34 0.93 136 TR_XM_Base64_M1 2077 0.93 0.97 0.91 137 RCVD_IN_RP_CERTIFIED 2011 0.82 0.70 0.88 138 TooManyTo_003 1962 0.69 0.33 0.86 139 URI_HEX 1951 1.03 1.44 0.85 140 TR_XM_SpammyWords5 1924 1.87 4.22 0.84 141 DKIM_ADSP_CUSTOM_MED 1901 0.89 1.01 0.83 142 TR_XM_DK_SendGrid 1894 0.87 0.96 0.83 143 SUBJ_ALL_CAPS 1879 1.29 2.38 0.82 144 XMStockSpam_06 1861 1.20 2.07 0.81 145 XM_B_COPY_HTML 1816 0.85 0.99 0.79 146 URI_TRY_3LD 1719 1.00 1.58 0.75 147 XMBdyGiftCard01 1716 1.07 1.79 0.75 148 USER_IN_WHITELIST 1711 0.52 0.00 0.75 149 USER_IN_WELCOMELIST 1711 0.52 0.00 0.75 150 XMManySubDom_06 1684 0.52 0.03 0.73 151 SPOOF_COM2OTH 1674 0.51 0.00 0.73 152 XMGenDplmaNmb 1670 0.78 0.90 0.73 153 XM_B_FormFill 1637 0.51 0.04 0.71 154 XMBody_17 1581 3.52 9.98 0.69 155 TooManyTo_004 1576 0.57 0.29 0.69 156 MPART_ALT_DIFF_COUNT 1568 0.82 1.15 0.68 157 XM_UB50 1568 1.17 2.26 0.68 158 XMSubMetaSxObfu_02 1528 0.66 0.65 0.67 159 TR_MetaPhish_Combo_01 1471 0.65 0.68 0.64 160 TooManyTo_005 1396 0.50 0.26 0.61 161 NML_ADSP_CUSTOM_MED 1371 0.70 0.94 0.60 162 XMBrknScrpt_02 1364 1.09 2.23 0.59 163 TR_XM_SpammyWords2 1359 6.02 18.38 0.59 164 XMManySubDom_07 1338 0.41 0.00 0.58 165 XMPhish30 1297 0.79 1.29 0.57 166 T_FILL_THIS_FORM_SHORT 1269 2.45 6.79 0.55 167 RCVD_IN_PSBL 1258 0.87 1.61 0.55 168 XM_ProductURIs 1224 0.63 0.85 0.53 169 RCVD_IN_BL_SPAMCOP_NET 1215 5.60 17.16 0.53 170 T_XMDrugObfuBody_00 1204 0.73 1.21 0.53 171 FORGED_GMAIL_RCVD 1168 0.60 0.82 0.51 172 HTTPS_HTTP_MISMATCH 1150 0.76 1.36 0.50 173 FILL_THIS_FORM 1068 0.40 0.24 0.47 174 XM_H_Trusted_IP 1062 0.32 0.00 0.46 175 XMSubNoVowel 1059 0.50 0.59 0.46 176 SpammyFromTLD_01 1014 1.14 2.74 0.44 177 XM_B_SpammyWords4 992 0.96 2.17 0.43 178 SUBJ_DOLLARS 978 0.53 0.77 0.43 179 TR_LOTS_OF_MONEY3 977 1.22 3.04 0.43 180 XMSubMetaI_00 945 0.67 1.25 0.41 181 XMNoVowels 945 0.39 0.33 0.41 182 HELO_NODOT 932 0.31 0.09 0.41 183 HELO_NO_DOMAIN 932 0.31 0.09 0.41 184 HTML_FONT_FACE_BAD 923 0.52 0.78 0.40 185 KHOP_HELO_FCRDNS 910 0.60 1.07 0.40 186 RELAYCOUNTRY_AU 902 0.90 2.07 0.39 187 T_TooManySym_04 900 0.32 0.17 0.39 188 THIS_AD 882 0.69 1.40 0.38 189 XMSlimDrugH 853 0.83 1.88 0.37 190 XM_B_REG_HTML 837 0.42 0.56 0.37 191 T_MONEY_PERCENT 833 0.42 0.56 0.36 192 TR_LOTS_OF_MONEY2 833 0.42 0.56 0.36 193 XM_S_SubURI 805 0.27 0.07 0.35 194 XM_ShortIntro_01 787 0.32 0.27 0.34 195 XMLngstWrd_00 776 0.35 0.38 0.34 196 RDNS_DYNAMIC 749 0.53 0.99 0.33 197 XMReplyNow 747 0.76 1.74 0.33 198 T_XMHurry_00 745 0.82 1.96 0.32 199 XM_B_DNDMA 727 0.46 0.77 0.32 200 XMCapTrack 726 0.30 0.25 0.32 ----------------------------------------------------------------------