Email: 316448 Autolearn: 0 AvgScore: 3.41 AvgScanTime: 1.37 sec Spam: 90789 Autolearn: 0 AvgScore: 13.07 AvgScanTime: 1.37 sec Ham: 225659 Autolearn: 0 AvgScore: -0.48 AvgScanTime: 1.38 sec Time Spent Running SA: 120.79 hours Time Spent Processing Spam: 34.54 hours Time Spent Processing Ham: 86.25 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 90767 99.97 99.98 99.97 2 HTML_MESSAGE 86805 89.10 95.61 86.48 3 DKIM_SIGNED 83048 84.58 91.47 81.81 4 XM_DK_Pass 79915 82.70 88.02 80.56 5 DKIM_VALID 78542 81.95 86.51 80.11 6 XM_B_Unicode 76905 78.64 84.71 76.20 7 XM_B_SpammyWords 67883 57.27 74.77 50.22 8 RELAYCOUNTRY_US 67337 80.40 74.17 82.91 9 XMListUnsubscribeExists 67004 65.82 73.80 62.61 10 XM_DK_Undo_02 57216 25.29 63.02 10.12 11 DKIM_VALID_AU 56051 67.24 61.74 69.45 12 TR_XM_DKIM_Undo 45262 17.65 49.85 4.70 13 BAYES_99 44733 20.00 49.27 8.22 14 XM_B_SpammyWords2 41609 31.58 45.83 25.85 15 XM_B_Unicode3 36094 45.67 39.76 48.05 16 BAYES_999 35501 15.89 39.10 6.55 17 RCVD_IN_MSPIKE_H2 32637 34.00 35.95 33.22 18 HTML_FONT_LOW_CONTRAST 32425 35.18 35.71 34.96 19 DKIM_VALID_EF 32060 31.43 35.31 29.86 20 LOC_TINY_FONT_1 31308 33.86 34.48 33.61 21 FVGT_m_MULTI_ODD 29717 30.51 32.73 29.62 22 MIME_HTML_ONLY 27883 23.38 30.71 20.43 23 T_KAM_HTML_FONT_INVALID 26503 25.34 29.19 23.79 24 BAYES_50 25547 48.45 28.14 56.62 25 TR_XM_DK_Unsub 25086 20.55 27.63 17.70 26 RELAYCOUNTRY_META 24190 11.33 26.64 5.17 27 TR_XM_SpammyWords2 20205 7.65 22.25 1.77 28 RCVD_IN_BL_SPAMCOP_NET 19653 7.38 21.65 1.63 29 T_TM2_M_HEADER_IN_MSG 19593 22.20 21.58 22.46 30 TR_XM_SpammyRelay 19171 8.45 21.12 3.35 31 TR_XM_SPAMCOP 18377 6.47 20.24 0.93 32 XMSubLong 16108 20.49 17.74 21.60 33 LOTS_OF_MONEY 15229 9.52 16.77 6.60 34 XM_Multi_Part_URI 15026 17.11 16.55 17.34 35 RELAYCOUNTRY_CA 14997 6.53 16.52 2.51 36 XM_B_Unsub 14403 10.98 15.86 9.01 37 TR_XM_BayesUnsub 14125 9.96 15.56 7.71 38 TR_XM_SpammyWords4 13575 7.77 14.95 4.88 39 XM_B_SpammyWords3 13535 10.23 14.91 8.35 40 TR_MAX_INTL_RELAY 12947 10.76 14.26 9.35 41 RCVD_IN_MSPIKE_H3 12124 7.46 13.35 5.09 42 RCVD_IN_MSPIKE_WL 12124 7.46 13.35 5.09 43 UNPARSEABLE_RELAY 12012 12.76 13.23 12.58 44 BOTNET_IPINHOSTNAME 11004 7.70 12.12 5.92 45 XMBody_17 9770 4.08 10.76 1.40 46 BOTNET 8787 3.71 9.68 1.31 47 TR_XM_UnparsRelay 8036 4.54 8.85 2.81 48 BAYES_80 7821 6.42 8.61 5.54 49 XM_Body_Dirty_Words 6616 4.78 7.29 3.78 50 UNTRUSTED_Relay 6209 3.13 6.84 1.64 51 TR_LOTS_OF_MONEY3 6172 2.97 6.80 1.44 52 RCVD_IN_VALIDITY_RPBL 6101 2.40 6.72 0.66 53 BAYES_60 6034 10.23 6.65 11.67 54 XMStrtUSub 5649 5.69 6.22 5.48 55 HK_RANDOM_REPLYTO 5541 1.93 6.10 0.25 56 XM_H_GMP 5444 6.36 6.00 6.50 57 XM_OfRef6 5331 2.75 5.87 1.49 58 XM_UncommonTLD01 5220 4.65 5.75 4.21 59 TR_XM_SpammyWords5 5109 2.67 5.63 1.48 60 XMSubMetaSx_00 4970 4.61 5.47 4.26 61 XM_Evil_Numbers_Gen 4799 7.26 5.29 8.05 62 TR_XM_BayesRelay 4674 1.48 5.15 0.00 63 BAYES_95 4618 4.18 5.09 3.81 64 DKIM_INVALID 4506 2.64 4.96 1.70 65 XMSexyCombo_05 4397 2.86 4.84 2.06 66 MPART_ALT_DIFF 4358 4.82 4.80 4.83 67 T_FILL_THIS_FORM_SHORT 4313 1.85 4.75 0.69 68 T_XMDrugObfuBody_14 4305 2.76 4.74 1.96 69 FONT_INVIS_LONG_LINE 4248 1.42 4.68 0.11 70 HTML_IMAGE_RATIO_02 4029 6.08 4.44 6.74 71 T_XMHurry_00 3873 1.89 4.27 0.94 72 XM_B_SEO 3857 2.05 4.25 1.17 73 SUBJ_ALL_CAPS 3857 1.85 4.25 0.89 74 LotsOfNums_01 3797 6.93 4.18 8.04 75 XM_SPF_SoftFail 3774 3.06 4.16 2.61 76 XM_B_Phish_Phrases 3746 3.61 4.13 3.40 77 XMNumbers 3677 3.72 4.05 3.59 78 TR_XM_SEO4 3611 1.65 3.98 0.71 79 TR_XM_PhishingBody 3601 2.76 3.97 2.27 80 HTML_IMAGE_RATIO_06 3572 3.21 3.93 2.92 81 TooManyTo_001 3552 5.25 3.91 5.78 82 HTML_IMAGE_RATIO_04 3498 4.21 3.85 4.35 83 T_XMDrugObfuBody_08 3435 2.29 3.78 1.69 84 XM_B_Investor 3314 2.17 3.65 1.57 85 XM_H_Long_From01 3211 4.69 3.54 5.15 86 XM_UB50 3200 1.71 3.52 0.99 87 HTML_IMAGE_RATIO_08 3176 2.64 3.50 2.30 88 HOSTED_IMG_MULTI_PUB_01 3136 1.06 3.45 0.09 89 MIME_HTML_MOSTLY 3059 3.21 3.37 3.14 90 XM_URI_RBL 3053 1.12 3.36 0.21 91 T_TooManySym_01 3049 5.35 3.36 6.15 92 TR_XM_FormFill 2974 0.97 3.28 0.04 93 XM_B_SpammyTLD 2943 2.76 3.24 2.57 94 TM2_M_VERY_LONG_WORD 2706 2.10 2.98 1.75 95 TR_XM_NoHeaderRelay 2484 0.89 2.74 0.14 96 MIME_HTML_ONLY_MULTI 2476 2.59 2.73 2.54 97 XM_B_PhoneNumber 2473 5.38 2.72 6.45 98 XM_CamelCaseFrm001 2444 2.64 2.69 2.62 99 XMDiploma_00 2378 1.88 2.62 1.58 100 XM_B_Unsub2 2347 1.65 2.59 1.27 101 URI_TRY_3LD 2188 1.53 2.41 1.17 102 SpammyFromTLD_01 2080 1.03 2.29 0.52 103 TM2_M_URI_OPT_OUT 2047 2.16 2.25 2.13 104 XM_HighProb1 2027 0.64 2.23 0.00 105 TR_XM_INV_DKIM 2020 0.68 2.22 0.06 106 XMReplyNow 1982 0.80 2.18 0.25 107 HTML_MIME_NO_HTML_TAG 1943 1.46 2.14 1.18 108 RELAYCOUNTRY_AU 1931 1.22 2.13 0.86 109 T_TooManySym_02 1892 2.86 2.08 3.17 110 URIBL_DBL_SPAM 1836 0.59 2.02 0.01 111 TR_XM_PHPForged 1814 0.73 2.00 0.21 112 HTML_TAG_BALANCE_BODY 1811 1.04 1.99 0.66 113 XM_B_SpammyWords4 1794 1.20 1.98 0.89 114 TR_XM_PHPDW 1773 0.71 1.95 0.21 115 XMBrknScrpt_02 1753 1.75 1.93 1.68 116 TR_XM_FormFill2 1735 0.71 1.91 0.22 117 XM_H_PHPOS 1732 0.69 1.91 0.20 118 TR_Mismatch_TLD_02 1718 0.61 1.89 0.09 119 TR_Caps_n_Bayes_99 1714 0.56 1.89 0.02 120 RCVD_IN_VALIDITY_SAFE 1668 6.15 1.84 7.89 121 SpammyFromTLD_02 1635 0.70 1.80 0.26 122 T_STY_INVIS_DIRECT 1634 0.80 1.80 0.39 123 AC_BR_BONANZA 1616 0.87 1.78 0.50 124 KHOP_HELO_FCRDNS 1485 1.06 1.64 0.83 125 HTTPS_HTTP_MISMATCH 1440 0.89 1.59 0.61 126 XM_DIRTYINTL 1419 0.70 1.56 0.36 127 URIBL_CSS_A 1387 0.49 1.53 0.07 128 URIBL_CSS 1387 0.49 1.53 0.07 129 HTML_FONT_SIZE_LARGE 1377 0.47 1.52 0.05 130 XMStockSpam_06 1370 1.19 1.51 1.05 131 ANY_BOUNCE_MESSAGE 1368 3.01 1.51 3.62 132 BOUNCE_MESSAGE 1368 3.01 1.51 3.62 133 HTML_IMAGE_ONLY_08 1311 0.48 1.44 0.10 134 RCVD_IN_VALIDITY_CERTIFIED 1297 5.13 1.43 6.61 135 MAILING_LIST_MULTI 1214 1.75 1.34 1.92 136 FROM_EXCESS_BASE64 1208 2.15 1.33 2.48 137 RDNS_DYNAMIC 1183 0.59 1.30 0.31 138 HTML_SHORT_LINK_IMG_1 1179 0.38 1.30 0.01 139 XM_B_Phish66 1174 0.62 1.29 0.34 140 T_REMOTE_IMAGE 1164 2.49 1.28 2.97 141 T_XMDrugObfuBody_00 1162 0.93 1.28 0.79 142 DKIM_ADSP_NXDOMAIN 1154 0.81 1.27 0.62 143 MIME_HEADER_CTYPE_ONLY 1144 0.67 1.26 0.43 144 ALL_TRUSTED 1141 9.30 1.26 12.54 145 TVD_RCVD_IP 1128 1.75 1.24 1.95 146 RELAYCOUNTRY_HU 1127 0.36 1.24 0.00 147 SHORTENER_SHORT_IMG 1119 0.35 1.23 0.00 148 RCVD_IN_PSBL 1073 0.89 1.18 0.77 149 XM_H_Undi_Recip 1070 0.43 1.18 0.12 150 TR_XM_InvalidRelay 1064 0.36 1.17 0.03 151 URI_HEX 1061 0.96 1.17 0.88 152 XM_DK_Undo_01 1052 1.59 1.16 1.76 153 TooManyTo_002 1040 1.34 1.15 1.42 154 TR_MetaPhish_Combo_01 1036 0.78 1.14 0.63 155 AC_HTML_NONSENSE_TAGS 1020 0.34 1.12 0.02 156 TR_Symld_Words 987 1.05 1.09 1.04 157 URI_NOVOWEL 980 1.17 1.08 1.21 158 XM_UB99 975 0.31 1.07 0.01 159 TooManyTo_003 965 0.81 1.06 0.71 160 XMSexyCombo_01 961 0.46 1.06 0.22 161 BAYES_40 957 2.82 1.05 3.53 162 XMPhish14 942 0.67 1.04 0.52 163 XMGenDplmaNmb 932 0.82 1.03 0.74 164 TooManyTo_004 932 0.68 1.03 0.54 165 BOTNET_NORDNS 921 0.30 1.01 0.01 166 T_XMDrugObfuBody_10 917 0.33 1.01 0.05 167 TooManyTo_005 916 0.63 1.01 0.48 168 MIME_QP_LONG_LINE 909 2.87 1.00 3.62 169 LongTLD 895 0.50 0.99 0.30 170 TR_XM_Undi_Recip19 891 0.33 0.98 0.07 171 XMBdyGiftCard01 886 1.29 0.98 1.42 172 MPART_ALT_DIFF_COUNT 880 0.77 0.97 0.69 173 XM_TLDProd2 878 0.48 0.97 0.28 174 SUBJ_DOLLARS 839 0.65 0.92 0.53 175 TR_XM_Undi_RecipCombo2 829 0.27 0.91 0.01 176 XMPhish30 819 0.91 0.90 0.91 177 DKIM_ADSP_CUSTOM_MED 816 0.71 0.90 0.63 178 XM_SendGrid 810 1.18 0.89 1.29 179 XMFrmHeader_28 809 0.26 0.89 0.00 180 XMSubMetaSxObfu_03 808 0.47 0.89 0.29 181 XM_H_PHPMailer 794 0.64 0.87 0.55 182 UNDISC_MONEY 778 0.25 0.86 0.01 183 XMLngstWrd_00 771 0.67 0.85 0.60 184 HELO_DYNAMIC_SPLIT_IP 759 0.26 0.84 0.02 185 XM_UB60 754 0.32 0.83 0.11 186 T_Symld_Words_02 750 0.54 0.83 0.43 187 TR_Sbj_FN_Bdy 733 0.32 0.81 0.12 188 THIS_AD 730 0.77 0.80 0.76 189 USER_IN_DEF_DKIM_WL 728 12.57 0.80 17.30 190 URG_BIZ 718 0.25 0.79 0.03 191 FORGED_GMAIL_RCVD 714 0.50 0.79 0.39 192 NML_ADSP_CUSTOM_MED 707 0.51 0.78 0.40 193 TR_XM_Undi_Recip5 705 0.23 0.78 0.00 194 RELAYCOUNTRY_FR 701 0.36 0.77 0.19 195 XMSlimDrugH 696 0.50 0.77 0.39 196 DIET_1 693 0.53 0.76 0.44 197 XM_UB999 679 0.22 0.75 0.01 198 LOADSA_MONEY_COMBO 672 0.27 0.74 0.08 199 XM_UB80 662 0.23 0.73 0.03 200 HTML_FONT_FACE_BAD 660 0.66 0.73 0.64 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 DCC_CHECK_NEGATIVE 225597 99.97 99.98 99.97 2 HTML_MESSAGE 195140 89.10 95.61 86.48 3 RELAYCOUNTRY_US 187094 80.40 74.17 82.91 4 DKIM_SIGNED 184614 84.58 91.47 81.81 5 XM_DK_Pass 181801 82.70 88.02 80.56 6 DKIM_VALID 180778 81.95 86.51 80.11 7 XM_B_Unicode 171942 78.64 84.71 76.20 8 DKIM_VALID_AU 156718 67.24 61.74 69.45 9 XMListUnsubscribeExists 141289 65.82 73.80 62.61 10 BAYES_50 127765 48.45 28.14 56.62 11 XM_B_SpammyWords 113337 57.27 74.77 50.22 12 XM_B_Unicode3 108440 45.67 39.76 48.05 13 HTML_FONT_LOW_CONTRAST 78901 35.18 35.71 34.96 14 LOC_TINY_FONT_1 75833 33.86 34.48 33.61 15 RCVD_IN_MSPIKE_H2 74955 34.00 35.95 33.22 16 DKIM_VALID_EF 67392 31.43 35.31 29.86 17 FVGT_m_MULTI_ODD 66834 30.51 32.73 29.62 18 XM_B_SpammyWords2 58329 31.58 45.83 25.85 19 T_KAM_HTML_FONT_INVALID 53687 25.34 29.19 23.79 20 T_TM2_M_HEADER_IN_MSG 50672 22.20 21.58 22.46 21 XMSubLong 48737 20.49 17.74 21.60 22 MIME_HTML_ONLY 46097 23.38 30.71 20.43 23 TR_XM_DK_Unsub 39949 20.55 27.63 17.70 24 XM_Multi_Part_URI 39134 17.11 16.55 17.34 25 USER_IN_DEF_DKIM_WL 39037 12.57 0.80 17.30 26 UNPARSEABLE_RELAY 28382 12.76 13.23 12.58 27 ALL_TRUSTED 28292 9.30 1.26 12.54 28 BAYES_60 26342 10.23 6.65 11.67 29 XM_DK_Undo_02 22827 25.29 63.02 10.12 30 TR_MAX_INTL_RELAY 21100 10.76 14.26 9.35 31 XM_B_Unsub 20336 10.98 15.86 9.01 32 XM_DKIMWhitelistDomains 19330 6.26 0.54 8.57 33 XM_B_SpammyWords3 18849 10.23 14.91 8.35 34 BAYES_99 18547 20.00 49.27 8.22 35 XM_Evil_Numbers_Gen 18163 7.26 5.29 8.05 36 LotsOfNums_01 18134 6.93 4.18 8.04 37 RCVD_IN_VALIDITY_SAFE 17798 6.15 1.84 7.89 38 TR_XM_BayesUnsub 17409 9.96 15.56 7.71 39 HTML_IMAGE_RATIO_02 15206 6.08 4.44 6.74 40 RCVD_IN_VALIDITY_CERTIFIED 14924 5.13 1.43 6.61 41 LOTS_OF_MONEY 14903 9.52 16.77 6.60 42 BAYES_999 14774 15.89 39.10 6.55 43 XM_H_GMP 14677 6.36 6.00 6.50 44 BAYES_00 14676 4.70 0.21 6.50 45 XM_B_PhoneNumber 14558 5.38 2.72 6.45 46 T_TooManySym_01 13870 5.35 3.36 6.15 47 BOTNET_IPINHOSTNAME 13350 7.70 12.12 5.92 48 TooManyTo_001 13054 5.25 3.91 5.78 49 BAYES_80 12495 6.42 8.61 5.54 50 XMStrtUSub 12363 5.69 6.22 5.48 51 TR_XM_DK_Bayes 11971 3.83 0.17 5.30 52 TR_XM_DK_Bayes1 11875 3.80 0.16 5.26 53 RELAYCOUNTRY_META 11669 11.33 26.64 5.17 54 XM_H_Long_From01 11617 4.69 3.54 5.15 55 RCVD_IN_MSPIKE_WL 11480 7.46 13.35 5.09 56 RCVD_IN_MSPIKE_H3 11480 7.46 13.35 5.09 57 TR_XM_SpammyWords4 11010 7.77 14.95 4.88 58 MPART_ALT_DIFF 10902 4.82 4.80 4.83 59 IN_ZIMBRA_NJ_WHITELIST 10667 3.38 0.02 4.73 60 TR_XM_DKIM_Undo 10595 17.65 49.85 4.70 61 TR_XM_DK_Bayes2 10590 3.39 0.15 4.69 62 HTML_IMAGE_RATIO_04 9819 4.21 3.85 4.35 63 XMSubMetaSx_00 9616 4.61 5.47 4.26 64 XM_UncommonTLD01 9508 4.65 5.75 4.21 65 BAYES_95 8598 4.18 5.09 3.81 66 XM_Body_Dirty_Words 8526 4.78 7.29 3.78 67 ANY_BOUNCE_MESSAGE 8166 3.01 1.51 3.62 68 BOUNCE_MESSAGE 8166 3.01 1.51 3.62 69 MIME_QP_LONG_LINE 8161 2.87 1.00 3.62 70 XMNumbers 8090 3.72 4.05 3.59 71 BAYES_40 7966 2.82 1.05 3.53 72 XM_B_Phish_Phrases 7670 3.61 4.13 3.40 73 TR_XM_SpammyRelay 7563 8.45 21.12 3.35 74 TO_MALFORMED 7357 2.34 0.05 3.26 75 INVALID_MSGID 7265 2.33 0.14 3.22 76 T_TooManySym_02 7148 2.86 2.08 3.17 77 MIME_HTML_MOSTLY 7084 3.21 3.37 3.14 78 T_REMOTE_IMAGE 6711 2.49 1.28 2.97 79 HTML_IMAGE_RATIO_06 6582 3.21 3.93 2.92 80 TR_XM_UnparsRelay 6333 4.54 8.85 2.81 81 XM_CamelCaseFrm001 5919 2.64 2.69 2.62 82 XM_SPF_SoftFail 5900 3.06 4.16 2.61 83 XM_B_SpammyTLD 5802 2.76 3.24 2.57 84 BAYES_20 5780 2.01 0.65 2.56 85 MIME_HTML_ONLY_MULTI 5733 2.59 2.73 2.54 86 RELAYCOUNTRY_CA 5669 6.53 16.52 2.51 87 FROM_EXCESS_BASE64 5602 2.15 1.33 2.48 88 RCVD_IN_IADB_LISTED 5220 1.83 0.65 2.31 89 HTML_IMAGE_RATIO_08 5181 2.64 3.50 2.30 90 TR_XM_PhishingBody 5131 2.76 3.97 2.27 91 XM_PDF 4882 1.64 0.34 2.16 92 RCVD_IN_IADB_SPF 4830 1.66 0.47 2.14 93 TM2_M_URI_OPT_OUT 4798 2.16 2.25 2.13 94 XMSexyCombo_05 4650 2.86 4.84 2.06 95 RCVD_IN_IADB_SENDERID 4470 1.53 0.41 1.98 96 T_XMDrugObfuBody_14 4419 2.76 4.74 1.96 97 TVD_RCVD_IP 4405 1.75 1.24 1.95 98 RCVD_IN_IADB_DK 4392 1.51 0.42 1.95 99 MAILING_LIST_MULTI 4322 1.75 1.34 1.92 100 TR_XM_SpammyWords2 3991 7.65 22.25 1.77 101 XM_DK_Undo_01 3970 1.59 1.16 1.76 102 TM2_M_VERY_LONG_WORD 3954 2.10 2.98 1.75 103 XMBSHREFv2 3840 1.28 0.21 1.70 104 DKIM_INVALID 3836 2.64 4.96 1.70 105 T_XMDrugObfuBody_08 3818 2.29 3.78 1.69 106 XMBrknScrpt_02 3789 1.75 1.93 1.68 107 UNTRUSTED_Relay 3697 3.13 6.84 1.64 108 RCVD_IN_BL_SPAMCOP_NET 3688 7.38 21.65 1.63 109 XMDiploma_00 3576 1.88 2.62 1.58 110 XM_B_Investor 3553 2.17 3.65 1.57 111 BAYES_05 3487 1.19 0.31 1.55 112 XM_OfRef6 3360 2.75 5.87 1.49 113 TVD_SPACE_RATIO 3335 1.08 0.08 1.48 114 TR_XM_SpammyWords5 3332 2.67 5.63 1.48 115 TR_LOTS_OF_MONEY3 3241 2.97 6.80 1.44 116 TooManyTo_002 3206 1.34 1.15 1.42 117 XMBdyGiftCard01 3194 1.29 0.98 1.42 118 IN_HORDE_ADDRESS_BOOK 3194 1.02 0.02 1.42 119 XMBody_17 3153 4.08 10.76 1.40 120 RCVD_IN_IADB_VOUCHED 3050 1.10 0.46 1.35 121 BOTNET 2953 3.71 9.68 1.31 122 XM_SendGrid 2912 1.18 0.89 1.29 123 XM_B_COPY_HTML 2897 1.09 0.60 1.28 124 XM_B_Unsub2 2867 1.65 2.59 1.27 125 URI_NOVOWEL 2728 1.17 1.08 1.21 126 HTML_MIME_NO_HTML_TAG 2670 1.46 2.14 1.18 127 URI_TRY_3LD 2649 1.53 2.41 1.17 128 XM_B_SEO 2630 2.05 4.25 1.17 129 XMGappySubj_01 2561 0.84 0.10 1.13 130 T_TooManySym_03 2485 0.94 0.52 1.10 131 XM_H_Long_From02 2453 0.96 0.63 1.09 132 XMStockSpam_06 2380 1.19 1.51 1.05 133 XM_GoogleGroups 2353 0.87 0.43 1.04 134 TR_Symld_Words 2342 1.05 1.09 1.04 135 XM_UB50 2226 1.71 3.52 0.99 136 TR_XM_DK_SendGrid 2218 0.88 0.63 0.98 137 T_XMHurry_00 2116 1.89 4.27 0.94 138 TR_XM_Base64_M1 2116 0.84 0.58 0.94 139 TR_XM_SPAMCOP 2107 6.47 20.24 0.93 140 XMPhish30 2056 0.91 0.90 0.91 141 RCVD_IN_IADB_OPTIN 2042 0.72 0.26 0.90 142 XM_B_SpammyWords4 2016 1.20 1.98 0.89 143 SUBJ_ALL_CAPS 2002 1.85 4.25 0.89 144 URI_HEX 1989 0.96 1.17 0.88 145 XMGappySubj_02 1959 0.63 0.05 0.87 146 RELAYCOUNTRY_AU 1931 1.22 2.13 0.86 147 KHOP_HELO_FCRDNS 1879 1.06 1.64 0.83 148 XM_B_FormFill 1795 0.59 0.09 0.80 149 USER_IN_WHITELIST 1791 0.57 0.00 0.79 150 USER_IN_WELCOMELIST 1791 0.57 0.00 0.79 151 T_XMDrugObfuBody_00 1785 0.93 1.28 0.79 152 RCVD_IN_PSBL 1730 0.89 1.18 0.77 153 THIS_AD 1710 0.77 0.80 0.76 154 T_TVD_MIME_NO_HEADERS 1684 0.54 0.02 0.75 155 XM_ProductURIs 1665 0.72 0.68 0.74 156 XMGenDplmaNmb 1663 0.82 1.03 0.74 157 TooManyTo_003 1613 0.81 1.06 0.71 158 TR_XM_SEO4 1599 1.65 3.98 0.71 159 MPART_ALT_DIFF_COUNT 1560 0.77 0.97 0.69 160 T_FILL_THIS_FORM_SHORT 1551 1.85 4.75 0.69 161 XMBody_95 1543 0.51 0.07 0.68 162 XMSubMetaI_00 1509 0.61 0.45 0.67 163 HTML_TAG_BALANCE_BODY 1484 1.04 1.99 0.66 164 RCVD_IN_VALIDITY_RPBL 1480 2.40 6.72 0.66 165 SHOPIFY_IMG_NOT_RCVD_SFY 1465 0.66 0.69 0.65 166 HTML_FONT_FACE_BAD 1440 0.66 0.73 0.64 167 TR_MetaPhish_Combo_01 1425 0.78 1.14 0.63 168 DKIM_ADSP_CUSTOM_MED 1422 0.71 0.90 0.63 169 FILL_THIS_FORM 1398 0.63 0.67 0.62 170 DKIM_ADSP_NXDOMAIN 1397 0.81 1.27 0.62 171 HTTPS_HTTP_MISMATCH 1372 0.89 1.59 0.61 172 XMLngstWrd_00 1359 0.67 0.85 0.60 173 XM_B_DNDMA 1336 0.63 0.71 0.59 174 XMSubMetaSxObfu_02 1335 0.53 0.37 0.59 175 PLING_QUERY 1275 0.59 0.65 0.57 176 XM_H_PHPMailer 1244 0.64 0.87 0.55 177 XM_B_REG_HTML 1236 0.52 0.45 0.55 178 HTML_EXTRA_CLOSE 1234 0.41 0.07 0.55 179 TooManyTo_004 1217 0.68 1.03 0.54 180 SUBJ_DOLLARS 1206 0.65 0.92 0.53 181 SpammyFromTLD_01 1181 1.03 2.29 0.52 182 XMPhish14 1165 0.67 1.04 0.52 183 XMSolicitRefs_0 1150 0.52 0.55 0.51 184 AC_BR_BONANZA 1128 0.87 1.78 0.50 185 XMNoVowels 1105 0.51 0.57 0.49 186 TooManyTo_005 1078 0.63 1.01 0.48 187 LOW_PRICE 1062 0.39 0.18 0.47 188 MISSING_HEADERS 1039 0.51 0.64 0.46 189 XMPhish08 1011 0.52 0.69 0.45 190 GOOG_STO_IMG_NOHTML 1011 0.41 0.33 0.45 191 TM2_M_OBFU_COMMENT 995 0.49 0.61 0.44 192 DIET_1 983 0.53 0.76 0.44 193 MIME_HEADER_CTYPE_ONLY 981 0.67 1.26 0.43 194 T_TooManySym_04 967 0.32 0.03 0.43 195 T_Symld_Words_02 965 0.54 0.83 0.43 196 NML_ADSP_CUSTOM_MED 904 0.51 0.78 0.40 197 T_STY_INVIS_DIRECT 891 0.80 1.80 0.39 198 XMSlimDrugH 883 0.50 0.77 0.39 199 FORGED_GMAIL_RCVD 870 0.50 0.79 0.39 200 HELO_NO_DOMAIN 845 0.37 0.36 0.37 ----------------------------------------------------------------------