Email: 281510 Autolearn: 0 AvgScore: 4.11 AvgScanTime: 1.13 sec Spam: 96959 Autolearn: 0 AvgScore: 13.56 AvgScanTime: 1.18 sec Ham: 184551 Autolearn: 0 AvgScore: -0.86 AvgScanTime: 1.11 sec Time Spent Running SA: 88.74 hours Time Spent Processing Spam: 31.82 hours Time Spent Processing Ham: 56.92 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 96749 99.72 99.78 99.69 2 HTML_MESSAGE 93460 86.73 96.39 81.65 3 DKIM_SIGNED 89025 82.79 91.82 78.05 4 XM_DK_Pass 85848 80.92 88.54 76.92 5 DKIM_VALID 84762 80.18 87.42 76.38 6 XM_B_Unicode 83249 76.60 85.86 71.73 7 RELAYCOUNTRY_US 75130 78.80 77.49 79.48 8 XM_B_SpammyWords 73379 56.06 75.68 45.76 9 XMListUnsubscribeExists 73314 63.67 75.61 57.40 10 DCC_CHECK 71685 52.85 73.93 41.77 11 DKIM_VALID_AU 64689 66.22 66.72 65.96 12 XM_DK_Undo_02 48245 21.75 49.76 7.03 13 XM_B_Unicode3 44817 45.92 46.22 45.76 14 XM_B_SpammyWords2 42892 28.74 44.24 20.60 15 BAYES_99 39667 17.94 40.91 5.87 16 LOC_TINY_FONT_1 37806 33.66 38.99 30.86 17 TR_XM_DKIM_Undo 37720 15.48 38.90 3.18 18 HTML_FONT_LOW_CONTRAST 34924 34.24 36.02 33.31 19 BAYES_50 31722 49.68 32.72 58.60 20 BAYES_999 31429 14.21 32.41 4.64 21 FVGT_m_MULTI_ODD 30510 29.09 31.47 27.84 22 RCVD_IN_MSPIKE_H2 30480 30.93 31.44 30.66 23 MIME_HTML_ONLY 28918 23.12 29.82 19.60 24 DKIM_VALID_EF 28763 29.64 29.67 29.63 25 TR_DCC_Bayes_99 28759 11.83 29.66 2.47 26 T_KAM_HTML_FONT_INVALID 27448 23.80 28.31 21.43 27 DCC_CHECK_NEGATIVE 25263 47.13 26.06 58.20 28 TR_XM_DK_Unsub 22526 18.62 23.23 16.20 29 RELAYCOUNTRY_META 21479 10.44 22.15 4.28 30 T_TM2_M_HEADER_IN_MSG 20284 21.40 20.92 21.65 31 XM_Multi_Part_URI 18516 17.30 19.10 16.35 32 XMSubLong 18229 21.38 18.80 22.73 33 TR_XM_SpammyRelay 17842 8.04 18.40 2.59 34 TR_XM_SpammyWords2 17193 6.55 17.73 0.68 35 TR_MAX_INTL_RELAY 14743 10.76 15.21 8.43 36 XM_B_Unsub 14630 10.33 15.09 7.82 37 TR_XM_BayesUnsub 14284 9.44 14.73 6.66 38 RCVD_IN_BL_SPAMCOP_NET 13678 5.45 14.11 0.90 39 UNPARSEABLE_RELAY 13551 12.65 13.98 11.95 40 RELAYCOUNTRY_CA 12644 5.94 13.04 2.22 41 BOTNET_IPINHOSTNAME 12636 8.01 13.03 5.37 42 XM_B_SpammyWords3 12034 8.11 12.41 5.85 43 LOTS_OF_MONEY 11758 8.33 12.13 6.33 44 TR_XM_SPAMCOP 11184 4.28 11.53 0.47 45 TR_XM_SpammyWords4 10603 6.91 10.94 4.80 46 RCVD_IN_MSPIKE_WL 9287 7.30 9.58 6.11 47 RCVD_IN_MSPIKE_H3 9287 7.30 9.58 6.11 48 BAYES_80 9030 6.53 9.31 5.07 49 BAYES_60 8129 10.41 8.38 11.47 50 BOTNET 8083 3.55 8.34 1.03 51 TR_XM_UnparsRelay 7967 4.11 8.22 1.95 52 XMBody_17 7870 3.39 8.12 0.91 53 XM_Body_Dirty_Words 7385 4.60 7.62 3.02 54 HTML_IMAGE_RATIO_02 6936 6.30 7.15 5.84 55 XM_Evil_Numbers_Gen 6562 8.03 6.77 8.69 56 FSL_BULK_SIG 6318 4.80 6.52 3.90 57 UNTRUSTED_Relay 6226 3.37 6.42 1.76 58 LotsOfNums_01 5709 6.82 5.89 7.31 59 XM_H_GMP 5411 7.19 5.58 8.03 60 TooManyTo_001 5362 6.08 5.53 6.37 61 BAYES_95 5353 4.10 5.52 3.35 62 XMSubMetaSx_00 5329 4.35 5.50 3.75 63 XM_UncommonTLD01 5323 4.90 5.49 4.59 64 MPART_ALT_DIFF 5313 4.31 5.48 3.70 65 XM_OfRef6 4759 2.59 4.91 1.37 66 XM_SPF_SoftFail 4630 3.39 4.78 2.66 67 T_FILL_THIS_FORM_SHORT 4577 2.08 4.72 0.69 68 T_XMDrugObfuBody_14 4576 2.75 4.72 1.72 69 RCVD_IN_VALIDITY_SAFE 4435 7.20 4.57 8.58 70 HTML_IMAGE_RATIO_04 4287 4.93 4.42 5.19 71 XMSexyCombo_05 4285 2.44 4.42 1.40 72 DKIM_INVALID 4263 2.61 4.40 1.68 73 MIME_HTML_MOSTLY 4144 3.26 4.27 2.72 74 XM_B_Investor 4036 2.56 4.16 1.72 75 XM_H_Long_From01 3855 4.68 3.98 5.05 76 RCVD_IN_VALIDITY_CERTIFIED 3794 6.40 3.91 7.71 77 TR_XM_SpammyWords5 3767 2.34 3.89 1.53 78 TM2_M_URI_OPT_OUT 3527 2.44 3.64 1.81 79 XMStrtUSub 3520 5.42 3.63 6.36 80 HTML_IMAGE_RATIO_06 3497 3.23 3.61 3.03 81 XM_B_Phish_Phrases 3448 3.24 3.56 3.08 82 TR_XM_BayesRelay 3273 1.16 3.38 0.00 83 USER_IN_DEF_DKIM_WL 3268 14.03 3.37 19.62 84 MIME_HTML_ONLY_MULTI 3248 2.42 3.35 1.92 85 TR_XM_FormFill 3161 1.14 3.26 0.03 86 TR_LOTS_OF_MONEY3 3143 1.69 3.24 0.88 87 TR_XM_PhishingBody 3132 2.24 3.23 1.72 88 XM_B_SpammyTLD 3112 2.88 3.21 2.70 89 XM_UB50 3077 1.69 3.17 0.92 90 T_XMDrugObfuBody_08 2994 2.07 3.09 1.54 91 XM_URI_RBL 2966 1.21 3.06 0.24 92 XM_CamelCaseFrm001 2960 2.72 3.05 2.54 93 XMNumbers 2942 3.58 3.03 3.86 94 HTML_IMAGE_RATIO_08 2860 2.76 2.95 2.66 95 TM2_M_VERY_LONG_WORD 2830 1.86 2.92 1.31 96 SpammyFromTLD_01 2795 1.31 2.88 0.48 97 FONT_INVIS_LONG_LINE 2685 0.98 2.77 0.03 98 SUBJ_ALL_CAPS 2676 1.48 2.76 0.81 99 TR_XM_NoHeaderRelay 2555 0.96 2.64 0.08 100 RELAYCOUNTRY_AU 2343 1.12 2.42 0.44 101 XMDiploma_00 2290 2.23 2.36 2.16 102 MIME_QP_LONG_LINE 2104 2.76 2.17 3.08 103 T_TooManySym_01 2082 4.82 2.15 6.23 104 FROM_EXCESS_BASE64 2075 2.33 2.14 2.43 105 T_XMHurry_00 2015 1.13 2.08 0.62 106 TR_XM_PHPForged 1961 0.82 2.02 0.19 107 URI_TRY_3LD 1929 1.23 1.99 0.84 108 XMReplyNow 1918 0.87 1.98 0.29 109 TR_XM_PHPDW 1897 0.79 1.96 0.18 110 XM_HighProb1 1859 0.66 1.92 0.00 111 TR_XM_FormFill2 1839 0.78 1.90 0.19 112 XM_H_PHPOS 1834 0.76 1.89 0.17 113 XM_B_SpammyWords4 1831 1.24 1.89 0.90 114 TR_XM_INV_DKIM 1820 0.70 1.88 0.08 115 T_XMDrugObfuBody_00 1778 1.14 1.83 0.77 116 XMBrknScrpt_02 1705 1.16 1.76 0.85 117 HTML_TAG_BALANCE_BODY 1626 1.11 1.68 0.81 118 HTML_MIME_NO_HTML_TAG 1567 1.42 1.62 1.32 119 XMStockSpam_06 1498 1.66 1.54 1.72 120 T_REMOTE_IMAGE 1484 2.47 1.53 2.97 121 XM_B_Unsub2 1467 1.35 1.51 1.27 122 HOSTED_IMG_MULTI_PUB_01 1441 0.53 1.49 0.02 123 THIS_AD 1388 0.87 1.43 0.58 124 KHOP_HELO_FCRDNS 1386 0.86 1.43 0.57 125 ALL_TRUSTED 1375 11.17 1.42 16.29 126 HTTPS_HTTP_MISMATCH 1372 0.80 1.42 0.47 127 T_STY_INVIS_DIRECT 1368 0.63 1.41 0.22 128 URI_HEX 1348 1.13 1.39 0.99 129 HK_RANDOM_REPLYTO 1342 0.57 1.38 0.14 130 RCVD_IN_VALIDITY_RPBL 1340 0.52 1.38 0.06 131 SpammyFromTLD_02 1337 0.59 1.38 0.17 132 PLING_QUERY 1335 0.77 1.38 0.45 133 XMPhish30 1314 0.93 1.36 0.70 134 MAILING_LIST_MULTI 1308 1.93 1.35 2.24 135 RELAYCOUNTRY_RU 1286 0.47 1.33 0.02 136 BAYES_40 1241 3.03 1.28 3.95 137 TR_XM_InvalidRelay 1211 0.44 1.25 0.02 138 XM_SendGrid 1208 1.25 1.25 1.25 139 XM_DK_Undo_01 1205 1.45 1.24 1.56 140 XM_DIRTYINTL 1204 0.51 1.24 0.12 141 BOTNET_NORDNS 1186 0.43 1.22 0.01 142 AC_HTML_NONSENSE_TAGS 1147 0.43 1.18 0.04 143 XMBdyGiftCard01 1144 1.42 1.18 1.55 144 TR_Mismatch_TLD_02 1137 0.44 1.17 0.06 145 PDS_OTHER_BAD_TLD 1124 0.48 1.16 0.12 146 RDNS_DYNAMIC 1088 0.60 1.12 0.33 147 XM_ProductURIs 1083 0.79 1.12 0.61 148 BAYES_20 1078 2.06 1.11 2.56 149 XM_B_SEO 1069 0.45 1.10 0.11 150 MPART_ALT_DIFF_COUNT 1069 1.01 1.10 0.96 151 TooManyTo_002 1063 1.48 1.10 1.68 152 GOOG_STO_NOIMG_HTML 1048 0.37 1.08 0.00 153 TR_XM_Base64_M1 1040 1.05 1.07 1.04 154 TooManyTo_003 1012 0.94 1.04 0.88 155 DIET_1 985 0.78 1.02 0.65 156 XM_H_PHPMailer 981 0.87 1.01 0.80 157 TVD_RCVD_IP 972 2.04 1.00 2.59 158 RCVD_IN_PSBL 960 0.82 0.99 0.74 159 TooManyTo_004 955 0.79 0.98 0.69 160 XM_B_COPY_HTML 951 1.32 0.98 1.51 161 SCC_BODY_URI_ONLY 937 2.99 0.97 4.06 162 TR_XM_DK_SendGrid 937 0.93 0.97 0.91 163 TR_Mismatch_TLD_01 929 0.50 0.96 0.26 164 XM_UB60 923 0.36 0.95 0.05 165 TooManyTo_005 923 0.71 0.95 0.59 166 TR_XM_SEO4 919 0.36 0.95 0.05 167 XMGenDplmaNmb 916 0.97 0.94 0.99 168 TR_MetaPhish_Combo_01 903 0.85 0.93 0.80 169 XMSexyCombo_01 896 0.42 0.92 0.16 170 XM_H_Long_From02 895 1.00 0.92 1.04 171 HTML_FONT_FACE_BAD 885 0.66 0.91 0.53 172 XMSubMetaI_00 882 0.73 0.91 0.64 173 TR_Caps_n_Bayes_99 871 0.32 0.90 0.01 174 DKIM_ADSP_NXDOMAIN 857 0.61 0.88 0.47 175 XM_B_DNDMA 856 0.53 0.88 0.35 176 ANY_BOUNCE_MESSAGE 848 3.71 0.87 5.20 177 BOUNCE_MESSAGE 848 3.71 0.87 5.20 178 DKIM_ADSP_CUSTOM_MED 845 0.93 0.87 0.96 179 TR_Symld_Words 836 1.02 0.86 1.10 180 TR_XM_Base64_L1 836 0.41 0.86 0.17 181 HELO_DYNAMIC_SPLIT_IP 832 0.30 0.86 0.01 182 T_XMDrugObfuBody_10 830 0.33 0.86 0.05 183 XM_B_REG_HTML 803 0.64 0.83 0.54 184 XM_H_Undi_Recip 798 0.37 0.82 0.14 185 XM_B_Phish66 780 0.44 0.80 0.25 186 XM_UB99 765 0.27 0.79 0.00 187 XM_UB80 760 0.29 0.78 0.02 188 NML_ADSP_CUSTOM_MED 759 0.71 0.78 0.67 189 XM_Combo_Sbj 733 0.35 0.76 0.13 190 SHOPIFY_IMG_NOT_RCVD_SFY 731 0.70 0.75 0.66 191 XMHTMLBadTable_001 710 0.53 0.73 0.42 192 HDRS_MISSP 706 0.26 0.73 0.01 193 AC_BR_BONANZA 704 0.30 0.73 0.07 194 FORGED_GMAIL_RCVD 696 0.60 0.72 0.54 195 T_Symld_Words_02 692 0.37 0.71 0.19 196 TM2_M_OBFU_COMMENT 690 0.47 0.71 0.34 197 T_TooManySym_02 674 2.63 0.70 3.65 198 XM_RXBody 666 0.43 0.69 0.29 199 XMHTML_After_End 658 0.37 0.68 0.21 200 TM2_M_A_HREF_HREF 655 0.38 0.68 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 183972 99.72 99.78 99.69 2 HTML_MESSAGE 150684 86.73 96.39 81.65 3 RELAYCOUNTRY_US 146689 78.80 77.49 79.48 4 DKIM_SIGNED 144049 82.79 91.82 78.05 5 XM_DK_Pass 141950 80.92 88.54 76.92 6 DKIM_VALID 140954 80.18 87.42 76.38 7 XM_B_Unicode 132385 76.60 85.86 71.73 8 DKIM_VALID_AU 121731 66.22 66.72 65.96 9 BAYES_50 108145 49.68 32.72 58.60 10 DCC_CHECK_NEGATIVE 107400 47.13 26.06 58.20 11 XMListUnsubscribeExists 105933 63.67 75.61 57.40 12 XM_B_Unicode3 84449 45.92 46.22 45.76 13 XM_B_SpammyWords 84446 56.06 75.68 45.76 14 DCC_CHECK 77086 52.85 73.93 41.77 15 HTML_FONT_LOW_CONTRAST 61470 34.24 36.02 33.31 16 LOC_TINY_FONT_1 56951 33.66 38.99 30.86 17 RCVD_IN_MSPIKE_H2 56579 30.93 31.44 30.66 18 DKIM_VALID_EF 54681 29.64 29.67 29.63 19 FVGT_m_MULTI_ODD 51388 29.09 31.47 27.84 20 XMSubLong 41944 21.38 18.80 22.73 21 T_TM2_M_HEADER_IN_MSG 39963 21.40 20.92 21.65 22 T_KAM_HTML_FONT_INVALID 39544 23.80 28.31 21.43 23 XM_B_SpammyWords2 38022 28.74 44.24 20.60 24 USER_IN_DEF_DKIM_WL 36216 14.03 3.37 19.62 25 MIME_HTML_ONLY 36170 23.12 29.82 19.60 26 XM_Multi_Part_URI 30172 17.30 19.10 16.35 27 ALL_TRUSTED 30059 11.17 1.42 16.29 28 TR_XM_DK_Unsub 29904 18.62 23.23 16.20 29 UNPARSEABLE_RELAY 22050 12.65 13.98 11.95 30 BAYES_60 21173 10.41 8.38 11.47 31 XM_DKIMWhitelistDomains 20496 7.29 0.03 11.11 32 XM_Evil_Numbers_Gen 16033 8.03 6.77 8.69 33 RCVD_IN_VALIDITY_SAFE 15827 7.20 4.57 8.58 34 TR_MAX_INTL_RELAY 15556 10.76 15.21 8.43 35 XM_H_GMP 14828 7.19 5.58 8.03 36 XM_B_Unsub 14437 10.33 15.09 7.82 37 RCVD_IN_VALIDITY_CERTIFIED 14221 6.40 3.91 7.71 38 LotsOfNums_01 13493 6.82 5.89 7.31 39 XM_DK_Undo_02 12978 21.75 49.76 7.03 40 TR_XM_BayesUnsub 12298 9.44 14.73 6.66 41 BAYES_00 11969 4.39 0.39 6.49 42 TooManyTo_001 11758 6.08 5.53 6.37 43 XMStrtUSub 11746 5.42 3.63 6.36 44 LOTS_OF_MONEY 11691 8.33 12.13 6.33 45 T_TooManySym_01 11494 4.82 2.15 6.23 46 RCVD_IN_MSPIKE_H3 11272 7.30 9.58 6.11 47 RCVD_IN_MSPIKE_WL 11272 7.30 9.58 6.11 48 BAYES_99 10841 17.94 40.91 5.87 49 XM_B_SpammyWords3 10789 8.11 12.41 5.85 50 HTML_IMAGE_RATIO_02 10786 6.30 7.15 5.84 51 BOTNET_IPINHOSTNAME 9906 8.01 13.03 5.37 52 TR_XM_DK_Bayes 9762 3.58 0.31 5.29 53 IN_ZIMBRA_NJ_WHITELIST 9718 3.47 0.06 5.27 54 TR_XM_DK_Bayes1 9667 3.53 0.28 5.24 55 BOUNCE_MESSAGE 9593 3.71 0.87 5.20 56 ANY_BOUNCE_MESSAGE 9593 3.71 0.87 5.20 57 HTML_IMAGE_RATIO_04 9580 4.93 4.42 5.19 58 BAYES_80 9362 6.53 9.31 5.07 59 XM_H_Long_From01 9327 4.68 3.98 5.05 60 TR_XM_SpammyWords4 8857 6.91 10.94 4.80 61 TR_XM_DK_Bayes2 8672 3.14 0.17 4.70 62 BAYES_999 8572 14.21 32.41 4.64 63 XM_UncommonTLD01 8468 4.90 5.49 4.59 64 RELAYCOUNTRY_META 7898 10.44 22.15 4.28 65 SCC_BODY_URI_ONLY 7489 2.99 0.97 4.06 66 BAYES_40 7284 3.03 1.28 3.95 67 FSL_BULK_SIG 7206 4.80 6.52 3.90 68 XMNumbers 7124 3.58 3.03 3.86 69 INVALID_MSGID 6952 2.53 0.17 3.77 70 XMSubMetaSx_00 6925 4.35 5.50 3.75 71 MPART_ALT_DIFF 6826 4.31 5.48 3.70 72 T_TooManySym_02 6743 2.63 0.70 3.65 73 TO_MALFORMED 6743 2.41 0.05 3.65 74 MSGID_NOFQDN1 6577 2.35 0.03 3.56 75 BAYES_95 6190 4.10 5.52 3.35 76 TR_XM_DKIM_Undo 5870 15.48 38.90 3.18 77 XM_B_Phish_Phrases 5679 3.24 3.56 3.08 78 MIME_QP_LONG_LINE 5675 2.76 2.17 3.08 79 HTML_IMAGE_RATIO_06 5589 3.23 3.61 3.03 80 XM_Body_Dirty_Words 5576 4.60 7.62 3.02 81 T_REMOTE_IMAGE 5476 2.47 1.53 2.97 82 MIME_HTML_MOSTLY 5029 3.26 4.27 2.72 83 XM_B_SpammyTLD 4991 2.88 3.21 2.70 84 HTML_IMAGE_RATIO_08 4915 2.76 2.95 2.66 85 XM_SPF_SoftFail 4900 3.39 4.78 2.66 86 BAYES_05 4855 1.85 0.37 2.63 87 TR_XM_SpammyRelay 4780 8.04 18.40 2.59 88 TVD_RCVD_IP 4774 2.04 1.00 2.59 89 BAYES_20 4732 2.06 1.11 2.56 90 XM_CamelCaseFrm001 4685 2.72 3.05 2.54 91 TR_DCC_Bayes_99 4552 11.83 29.66 2.47 92 FROM_EXCESS_BASE64 4476 2.33 2.14 2.43 93 MAILING_LIST_MULTI 4132 1.93 1.35 2.24 94 RELAYCOUNTRY_CA 4089 5.94 13.04 2.22 95 RCVD_IN_IADB_LISTED 4062 1.66 0.63 2.20 96 XMBSHREFv2 4011 1.50 0.22 2.17 97 XMDiploma_00 3992 2.23 2.36 2.16 98 XM_PDF 3846 1.47 0.29 2.08 99 RCVD_IN_IADB_SPF 3658 1.50 0.57 1.98 100 TR_XM_UnparsRelay 3597 4.11 8.22 1.95 101 MIME_HTML_ONLY_MULTI 3551 2.42 3.35 1.92 102 TM2_M_URI_OPT_OUT 3338 2.44 3.64 1.81 103 RCVD_IN_IADB_SENDERID 3316 1.36 0.54 1.80 104 IN_HORDE_ADDRESS_BOOK 3292 1.18 0.04 1.78 105 RCVD_IN_IADB_DK 3263 1.35 0.54 1.77 106 UNTRUSTED_Relay 3247 3.37 6.42 1.76 107 XMGappySubj_01 3207 1.26 0.36 1.74 108 TVD_SPACE_RATIO 3202 1.18 0.11 1.74 109 XM_B_Investor 3177 2.56 4.16 1.72 110 T_XMDrugObfuBody_14 3173 2.75 4.72 1.72 111 XMStockSpam_06 3171 1.66 1.54 1.72 112 TR_XM_PhishingBody 3170 2.24 3.23 1.72 113 TooManyTo_002 3099 1.48 1.10 1.68 114 DKIM_INVALID 3095 2.61 4.40 1.68 115 XM_DK_Undo_01 2877 1.45 1.24 1.56 116 XMBdyGiftCard01 2860 1.42 1.18 1.55 117 T_XMDrugObfuBody_08 2840 2.07 3.09 1.54 118 TR_XM_SpammyWords5 2823 2.34 3.89 1.53 119 XM_B_COPY_HTML 2778 1.32 0.98 1.51 120 XMGappySubj_02 2703 1.00 0.11 1.46 121 RCVD_IN_IADB_VOUCHED 2647 1.03 0.27 1.43 122 XMSexyCombo_05 2575 2.44 4.42 1.40 123 XM_OfRef6 2533 2.59 4.91 1.37 124 XMBody_95 2526 0.95 0.15 1.37 125 HTML_MIME_NO_HTML_TAG 2432 1.42 1.62 1.32 126 TM2_M_VERY_LONG_WORD 2410 1.86 2.92 1.31 127 XM_B_Unsub2 2335 1.35 1.51 1.27 128 XM_SendGrid 2313 1.25 1.25 1.25 129 T_TooManySym_03 2298 0.91 0.29 1.25 130 XM_GoogleGroups 2175 0.95 0.51 1.18 131 TR_Symld_Words 2031 1.02 0.86 1.10 132 RCVD_IN_IADB_OPTIN 2004 0.79 0.21 1.09 133 TR_XM_Base64_M1 1925 1.05 1.07 1.04 134 XM_H_Long_From02 1920 1.00 0.92 1.04 135 BOTNET 1910 3.55 8.34 1.03 136 URI_HEX 1833 1.13 1.39 0.99 137 XMGenDplmaNmb 1826 0.97 0.94 0.99 138 DKIM_ADSP_CUSTOM_MED 1779 0.93 0.87 0.96 139 MPART_ALT_DIFF_COUNT 1770 1.01 1.10 0.96 140 USER_IN_WHITELIST 1756 0.62 0.00 0.95 141 USER_IN_WELCOMELIST 1756 0.62 0.00 0.95 142 XM_UB50 1692 1.69 3.17 0.92 143 TR_XM_DK_SendGrid 1687 0.93 0.97 0.91 144 XMBody_17 1683 3.39 8.12 0.91 145 URI_NOVOWEL 1676 0.75 0.46 0.91 146 XM_B_SpammyWords4 1663 1.24 1.89 0.90 147 RCVD_IN_BL_SPAMCOP_NET 1655 5.45 14.11 0.90 148 TR_LOTS_OF_MONEY3 1628 1.69 3.24 0.88 149 TooManyTo_003 1622 0.94 1.04 0.88 150 LOW_PRICE 1595 0.70 0.38 0.86 151 T_MANY_PILL_PRICE 1591 0.57 0.00 0.86 152 XMBrknScrpt_02 1565 1.16 1.76 0.85 153 URI_TRY_3LD 1543 1.23 1.99 0.84 154 HTML_TAG_BALANCE_BODY 1500 1.11 1.68 0.81 155 SUBJ_ALL_CAPS 1497 1.48 2.76 0.81 156 TR_MetaPhish_Combo_01 1478 0.85 0.93 0.80 157 XM_H_PHPMailer 1474 0.87 1.01 0.80 158 T_XMDrugObfuBody_00 1422 1.14 1.83 0.77 159 RCVD_IN_PSBL 1361 0.82 0.99 0.74 160 XMPhish30 1293 0.93 1.36 0.70 161 T_FILL_THIS_FORM_SHORT 1274 2.08 4.72 0.69 162 TooManyTo_004 1266 0.79 0.98 0.69 163 TR_XM_SpammyWords2 1253 6.55 17.73 0.68 164 NML_ADSP_CUSTOM_MED 1232 0.71 0.78 0.67 165 SHOPIFY_IMG_NOT_RCVD_SFY 1227 0.70 0.75 0.66 166 XMSubMetaSxObfu_02 1219 0.54 0.30 0.66 167 DIET_1 1197 0.78 1.02 0.65 168 XMSubMetaI_00 1173 0.73 0.91 0.64 169 T_XMHurry_00 1152 1.13 2.08 0.62 170 XM_ProductURIs 1131 0.79 1.12 0.61 171 XMSolicitRefs_0 1130 0.53 0.36 0.61 172 TooManyTo_005 1082 0.71 0.95 0.59 173 AD_PREFS 1079 0.40 0.05 0.58 174 THIS_AD 1070 0.87 1.43 0.58 175 KHOP_HELO_FCRDNS 1049 0.86 1.43 0.57 176 XM_B_FormFill 1019 0.37 0.01 0.55 177 XM_B_REG_HTML 1000 0.64 0.83 0.54 178 FORGED_GMAIL_RCVD 993 0.60 0.72 0.54 179 FILL_THIS_FORM 992 0.48 0.38 0.54 180 HTML_FONT_FACE_BAD 973 0.66 0.91 0.53 181 XMNoVowels 931 0.52 0.55 0.50 182 T_TooManySym_04 905 0.39 0.20 0.49 183 SpammyFromTLD_01 880 1.31 2.88 0.48 184 TR_XM_SPAMCOP 874 4.28 11.53 0.47 185 DKIM_ADSP_NXDOMAIN 873 0.61 0.88 0.47 186 HTTPS_HTTP_MISMATCH 869 0.80 1.42 0.47 187 PLING_QUERY 828 0.77 1.38 0.45 188 RELAYCOUNTRY_AU 806 1.12 2.42 0.44 189 XMLngstWrd_00 804 0.41 0.37 0.44 190 XM_S_SubURI 775 0.32 0.14 0.42 191 XMHTMLBadTable_001 768 0.53 0.73 0.42 192 SUBJ_DOLLARS 748 0.42 0.45 0.41 193 CTE_8BIT_MISMATCH 748 0.29 0.08 0.41 194 HELO_NODOT 738 0.38 0.33 0.40 195 HELO_NO_DOMAIN 738 0.37 0.31 0.40 196 XMCapTrack 692 0.32 0.23 0.37 197 T_MONEY_PERCENT 690 0.38 0.39 0.37 198 TR_LOTS_OF_MONEY2 690 0.38 0.39 0.37 199 T_HTML_TAG_BALANCE_CENTER 684 0.30 0.16 0.37 200 HTML_TEXT_INVISIBLE_STYLE 678 0.35 0.32 0.37 ----------------------------------------------------------------------