Email: 315428 Autolearn: 0 AvgScore: 5.08 AvgScanTime: 1.34 sec Spam: 114859 Autolearn: 0 AvgScore: 13.59 AvgScanTime: 1.38 sec Ham: 200569 Autolearn: 0 AvgScore: 0.20 AvgScanTime: 1.32 sec Time Spent Running SA: 117.43 hours Time Spent Processing Spam: 43.97 hours Time Spent Processing Ham: 73.46 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 110231 86.36 95.97 80.85 2 DKIM_SIGNED 105852 81.59 92.16 75.54 3 XM_DK_Pass 102312 79.93 89.08 74.70 4 DKIM_VALID 101512 79.39 88.38 74.24 5 XM_B_Unicode 99440 76.34 86.58 70.48 6 RELAYCOUNTRY_US 97159 80.29 84.59 77.83 7 DCC_CHECK 89262 59.46 77.71 49.01 8 XMListUnsubscribeExists 86015 63.17 74.89 56.46 9 DKIM_VALID_AU 84554 67.42 73.62 63.88 10 XM_B_SpammyWords 83378 55.70 72.59 46.03 11 XM_DK_Undo_02 56812 22.02 49.46 6.30 12 XM_B_Unicode3 54768 47.06 47.68 46.70 13 LOC_TINY_FONT_1 54400 38.12 47.36 32.83 14 RCVD_IN_MSPIKE_H2 49066 36.28 42.72 32.59 15 HTML_FONT_LOW_CONTRAST 48355 36.57 42.10 33.40 16 XM_B_SpammyWords2 48179 29.26 41.95 22.00 17 BAYES_99 47594 18.99 41.44 6.14 18 TR_XM_DKIM_Undo 42346 15.63 36.87 3.46 19 FVGT_m_MULTI_ODD 39530 28.65 34.42 25.35 20 BAYES_999 39077 15.43 34.02 4.78 21 BAYES_50 38386 49.50 33.42 58.70 22 TR_DCC_Bayes_99 36637 13.31 31.90 2.67 23 T_KAM_HTML_FONT_INVALID 33026 23.67 28.75 20.75 24 DKIM_VALID_EF 28775 26.08 25.05 26.68 25 MIME_HTML_ONLY 27259 22.14 23.73 21.24 26 DCC_CHECK_NEGATIVE 25115 40.37 21.87 50.96 27 XM_Multi_Part_URI 24545 20.35 21.37 19.76 28 T_TM2_M_HEADER_IN_MSG 23391 22.14 20.36 23.16 29 XMSubLong 22183 21.91 19.31 23.39 30 TR_XM_DK_Unsub 21427 15.71 18.66 14.02 31 TR_XM_SpammyWords2 20048 7.34 17.45 1.56 32 UNPARSEABLE_RELAY 18408 13.25 16.03 11.67 33 XM_B_Unsub 17941 11.01 15.62 8.37 34 TR_XM_BayesUnsub 17561 9.99 15.29 6.95 35 RELAYCOUNTRY_META 17558 8.04 15.29 3.89 36 XM_B_SpammyWords3 16883 9.37 14.70 6.32 37 TR_MAX_INTL_RELAY 16611 10.70 14.46 8.55 38 BOTNET_IPINHOSTNAME 15762 7.09 13.72 3.30 39 LOTS_OF_MONEY 14377 8.07 12.52 5.52 40 TR_XM_SpammyRelay 12962 5.52 11.29 2.22 41 TR_XM_SpammyWords4 12830 6.72 11.17 4.18 42 TR_XM_UnparsRelay 11421 4.92 9.94 2.05 43 BAYES_80 10102 6.45 8.80 5.10 44 XM_Evil_Numbers_Gen 9498 9.81 8.27 10.70 45 BOTNET 9467 3.67 8.24 1.04 46 HTML_IMAGE_RATIO_02 9159 7.00 7.97 6.44 47 BAYES_60 9050 9.66 7.88 10.68 48 RCVD_IN_BL_SPAMCOP_NET 8523 3.20 7.42 0.78 49 FSL_BULK_SIG 7891 6.60 6.87 6.44 50 XM_Body_Dirty_Words 7818 3.84 6.81 2.15 51 MPART_ALT_DIFF 7422 4.98 6.46 4.13 52 UNTRUSTED_Relay 7419 3.43 6.46 1.70 53 XMSubMetaSx_00 7057 4.98 6.14 4.31 54 RELAYCOUNTRY_CA 6953 3.26 6.05 1.66 55 RCVD_IN_VALIDITY_SAFE 6945 7.72 6.05 8.68 56 LotsOfNums_01 6778 6.80 5.90 7.32 57 XM_UncommonTLD01 6642 5.18 5.78 4.83 58 TR_XM_SPAMCOP 6580 2.31 5.73 0.35 59 XM_H_Long_From01 6364 5.10 5.54 4.84 60 HTML_IMAGE_RATIO_04 6240 5.44 5.43 5.44 61 BAYES_95 6049 4.11 5.27 3.44 62 USER_IN_DEF_DKIM_WL 5864 14.03 5.11 19.13 63 TooManyTo_001 5862 5.89 5.10 6.34 64 XM_H_GMP 5761 5.09 5.02 5.14 65 RCVD_IN_VALIDITY_CERTIFIED 5644 6.53 4.91 7.46 66 XM_SPF_SoftFail 5407 2.55 4.71 1.32 67 MIME_HTML_MOSTLY 5226 3.53 4.55 2.94 68 T_XMDrugObfuBody_14 5225 2.67 4.55 1.59 69 XM_CamelCaseFrm001 5037 4.57 4.39 4.68 70 XMStrtUSub 4952 4.72 4.31 4.95 71 TR_LOTS_OF_MONEY3 4918 1.81 4.28 0.39 72 XMSexyCombo_05 4847 3.14 4.22 2.52 73 XM_B_Phish_Phrases 4559 4.61 3.97 4.98 74 XM_B_PhoneNumber 4486 5.76 3.91 6.82 75 XM_B_SEO 4464 2.38 3.89 1.52 76 DKIM_INVALID 4340 2.20 3.78 1.30 77 XM_B_Investor 4316 2.04 3.76 1.05 78 HTML_IMAGE_RATIO_08 4239 3.14 3.69 2.83 79 XMBody_17 4236 1.90 3.69 0.87 80 TR_XM_SpammyWords5 4185 2.06 3.64 1.15 81 TM2_M_VERY_LONG_WORD 4142 2.41 3.61 1.73 82 XM_URI_RBL 4016 1.62 3.50 0.55 83 XM_OfRef6 4013 1.78 3.49 0.80 84 TR_XM_PhishingBody 3979 2.46 3.46 1.89 85 XMBrknScrpt_02 3862 2.26 3.36 1.63 86 TR_XM_SEO4 3856 1.82 3.36 0.94 87 XM_B_SpammyTLD 3648 5.76 3.18 7.24 88 XMNumbers 3531 3.13 3.07 3.16 89 MIME_HTML_ONLY_MULTI 3509 2.43 3.06 2.08 90 XM_UB50 3317 1.64 2.89 0.92 91 XM_B_SpammyWords4 3315 1.41 2.89 0.56 92 TM2_M_URI_OPT_OUT 3314 2.19 2.89 1.80 93 HTML_IMAGE_RATIO_06 3173 2.33 2.76 2.09 94 T_XMHurry_00 3088 1.40 2.69 0.66 95 RCVD_IN_MSPIKE_WL 3044 4.03 2.65 4.82 96 RCVD_IN_MSPIKE_H3 3044 4.03 2.65 4.82 97 SUBJ_ALL_CAPS 3009 1.56 2.62 0.95 98 RELAYCOUNTRY_AU 2954 1.29 2.57 0.56 99 SpammyFromTLD_01 2883 1.44 2.51 0.83 100 XM_B_URI_Unicode 2805 2.04 2.44 1.80 101 FROM_EXCESS_BASE64 2791 2.60 2.43 2.69 102 RCVD_IN_VALIDITY_RPBL 2740 0.97 2.39 0.16 103 TR_XM_NoHeaderRelay 2445 0.86 2.13 0.14 104 T_XMDrugObfuBody_08 2434 1.48 2.12 1.12 105 URI_NOVOWEL 2287 3.64 1.99 4.59 106 XM_HighProb1 2216 0.71 1.93 0.02 107 TR_XM_PHPForged 2086 0.79 1.82 0.20 108 TR_XM_PHPDW 2083 0.79 1.81 0.20 109 TR_XM_FormFill2 2051 0.79 1.79 0.22 110 T_TooManySym_01 2036 5.20 1.77 7.16 111 XM_H_PHPOS 2023 0.76 1.76 0.19 112 THIS_AD 1958 1.13 1.70 0.80 113 HTML_TAG_BALANCE_BODY 1953 1.21 1.70 0.93 114 T_XMDrugObfuBody_00 1951 0.95 1.70 0.52 115 XM_B_Unsub2 1918 1.26 1.67 1.03 116 URI_HEX 1910 1.39 1.66 1.24 117 ALL_TRUSTED 1890 12.28 1.65 18.37 118 URI_TRY_3LD 1860 0.91 1.62 0.51 119 XMDiploma_00 1855 1.54 1.62 1.49 120 MAILING_LIST_MULTI 1829 1.98 1.59 2.20 121 MIME_QP_LONG_LINE 1818 2.63 1.58 3.23 122 RELAYCOUNTRY_IN 1795 0.59 1.56 0.03 123 XMStockSpam_06 1760 1.95 1.53 2.19 124 T_FILL_THIS_FORM_SHORT 1736 0.92 1.51 0.58 125 XMReplyNow 1718 0.65 1.50 0.17 126 TM2_M_OBFU_COMMENT 1698 0.74 1.48 0.32 127 T_STY_INVIS_DIRECT 1675 0.76 1.46 0.36 128 XM_DK_Undo_01 1661 1.43 1.45 1.42 129 XM_B_COPY_HTML 1643 1.26 1.43 1.16 130 XM_ProductURIs 1601 1.67 1.39 1.83 131 XM_DIRTYINTL 1569 0.56 1.37 0.10 132 KHOP_HELO_FCRDNS 1550 0.99 1.35 0.78 133 AC_BR_BONANZA 1550 0.58 1.35 0.14 134 HTML_MIME_NO_HTML_TAG 1499 1.39 1.31 1.43 135 XMPhish30 1457 1.04 1.27 0.91 136 RCVD_IN_PBL 1450 0.76 1.26 0.47 137 TR_XM_INV_DKIM 1402 0.48 1.22 0.05 138 TR_Caps_n_Bayes_99 1394 0.47 1.21 0.04 139 XMSubMetaI_00 1390 0.79 1.21 0.54 140 SpammyFromTLD_02 1376 0.54 1.20 0.16 141 XM_UB60 1371 0.47 1.19 0.06 142 T_MONEY_PERCENT 1334 0.62 1.16 0.30 143 TR_LOTS_OF_MONEY2 1334 0.62 1.16 0.30 144 XM_SendGrid 1307 1.16 1.14 1.17 145 T_REMOTE_IMAGE 1302 2.09 1.13 2.64 146 XM_B_REG_HTML 1285 0.73 1.12 0.50 147 MIME_CHARSET_FARAWAY 1282 0.65 1.12 0.38 148 ANY_BOUNCE_MESSAGE 1265 2.69 1.10 3.59 149 BOUNCE_MESSAGE 1265 2.69 1.10 3.59 150 TR_XM_InvalidRelay 1265 0.42 1.10 0.03 151 SHOPIFY_IMG_NOT_RCVD_SFY 1255 0.74 1.09 0.54 152 TooManyTo_002 1245 1.75 1.08 2.13 153 BAYES_40 1240 3.54 1.08 4.95 154 MPART_ALT_DIFF_COUNT 1208 0.84 1.05 0.72 155 RDNS_DYNAMIC 1173 0.56 1.02 0.30 156 PDS_RDNS_DYNAMIC_FP 1147 0.39 1.00 0.04 157 RCVD_IN_PSBL 1143 0.43 1.00 0.11 158 TVD_RCVD_IP 1139 0.76 0.99 0.63 159 XMBdyGiftCard01 1115 1.55 0.97 1.89 160 XM_UB99 1115 0.36 0.97 0.00 161 XMSubMetaSxObfu_03 1083 1.13 0.94 1.23 162 XM_B_DNDMA 1079 0.96 0.94 0.96 163 BOTNET_NORDNS 1065 0.34 0.93 0.01 164 TooManyTo_003 1055 0.87 0.92 0.84 165 HTTPS_HTTP_MISMATCH 1033 0.68 0.90 0.55 166 TooManyTo_004 1017 0.75 0.89 0.68 167 RCVD_IN_XBL 1013 0.33 0.88 0.02 168 XMClaimOffer 1012 0.80 0.88 0.75 169 TooManyTo_005 992 0.68 0.86 0.57 170 BAYES_20 985 2.10 0.86 2.81 171 TR_Symld_Words 966 1.06 0.84 1.19 172 PLING_QUERY 964 0.57 0.84 0.42 173 HELO_DYNAMIC_SPLIT_IP 958 0.31 0.83 0.01 174 TR_XM_DK_SendGrid 942 0.83 0.82 0.84 175 SUBJ_DOLLARS 935 0.49 0.81 0.30 176 FROM_MISSP_REPLYTO 933 0.30 0.81 0.00 177 TR_Mismatch_TLD_01 932 0.42 0.81 0.20 178 RCVD_IN_IADB_LISTED 932 1.86 0.81 2.46 179 JH_SPAMMY_HEADERS 921 0.29 0.80 0.00 180 TR_XM_Base64_M1 920 0.78 0.80 0.77 181 XM_H_Long_From02 902 0.89 0.79 0.94 182 XM_B_Phish66 894 0.45 0.78 0.26 183 NO_DNS_FOR_FROM 872 0.53 0.76 0.40 184 XM_UB80 867 0.29 0.75 0.02 185 LongTLD 864 0.39 0.75 0.19 186 TR_XM_MaxWHORU 864 0.49 0.75 0.35 187 DIET_1 843 0.65 0.73 0.60 188 XMHTML_After_End 843 0.40 0.73 0.20 189 DKIM_ADSP_CUSTOM_MED 841 0.74 0.73 0.74 190 XMPhish08 828 0.48 0.72 0.34 191 TR_XM_FormFill 825 0.28 0.72 0.03 192 RCVD_IN_IADB_SPF 820 1.64 0.71 2.17 193 XM_H_Undi_Recip 812 0.34 0.71 0.12 194 XM_UB999 800 0.26 0.70 0.00 195 XMSexyCombo_01 798 0.32 0.69 0.11 196 DKIM_ADSP_NXDOMAIN 797 0.52 0.69 0.43 197 TR_XM_Base64_L1 794 0.34 0.69 0.13 198 XMFrmHeader_28 788 0.25 0.69 0.00 199 XMEqualsVooDoo_00 775 0.27 0.67 0.04 200 XMPhish14 774 0.46 0.67 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 162162 86.36 95.97 80.85 2 RELAYCOUNTRY_US 156107 80.29 84.59 77.83 3 DKIM_SIGNED 151515 81.59 92.16 75.54 4 XM_DK_Pass 149821 79.93 89.08 74.70 5 DKIM_VALID 148904 79.39 88.38 74.24 6 XM_B_Unicode 141365 76.34 86.58 70.48 7 DKIM_VALID_AU 128117 67.42 73.62 63.88 8 BAYES_50 117741 49.50 33.42 58.70 9 XMListUnsubscribeExists 113250 63.17 74.89 56.46 10 DCC_CHECK_NEGATIVE 102210 40.37 21.87 50.96 11 DCC_CHECK 98294 59.46 77.71 49.01 12 XM_B_Unicode3 93674 47.06 47.68 46.70 13 XM_B_SpammyWords 92328 55.70 72.59 46.03 14 HTML_FONT_LOW_CONTRAST 66990 36.57 42.10 33.40 15 LOC_TINY_FONT_1 65850 38.12 47.36 32.83 16 RCVD_IN_MSPIKE_H2 65357 36.28 42.72 32.59 17 DKIM_VALID_EF 53503 26.08 25.05 26.68 18 FVGT_m_MULTI_ODD 50844 28.65 34.42 25.35 19 XMSubLong 46913 21.91 19.31 23.39 20 T_TM2_M_HEADER_IN_MSG 46443 22.14 20.36 23.16 21 XM_B_SpammyWords2 44120 29.26 41.95 22.00 22 MIME_HTML_ONLY 42592 22.14 23.73 21.24 23 T_KAM_HTML_FONT_INVALID 41623 23.67 28.75 20.75 24 XM_Multi_Part_URI 39632 20.35 21.37 19.76 25 USER_IN_DEF_DKIM_WL 38378 14.03 5.11 19.13 26 ALL_TRUSTED 36850 12.28 1.65 18.37 27 TR_XM_DK_Unsub 28125 15.71 18.66 14.02 28 UNPARSEABLE_RELAY 23400 13.25 16.03 11.67 29 XM_Evil_Numbers_Gen 21457 9.81 8.27 10.70 30 BAYES_60 21426 9.66 7.88 10.68 31 XM_DKIMWhitelistDomains 20159 6.43 0.11 10.05 32 RCVD_IN_VALIDITY_SAFE 17407 7.72 6.05 8.68 33 TR_MAX_INTL_RELAY 17140 10.70 14.46 8.55 34 XM_B_Unsub 16797 11.01 15.62 8.37 35 RCVD_IN_VALIDITY_CERTIFIED 14964 6.53 4.91 7.46 36 LotsOfNums_01 14672 6.80 5.90 7.32 37 XM_B_SpammyTLD 14531 5.76 3.18 7.24 38 T_TooManySym_01 14353 5.20 1.77 7.16 39 TR_XM_BayesUnsub 13938 9.99 15.29 6.95 40 XM_B_PhoneNumber 13679 5.76 3.91 6.82 41 BAYES_00 13235 4.31 0.32 6.60 42 FSL_BULK_SIG 12918 6.60 6.87 6.44 43 HTML_IMAGE_RATIO_02 12910 7.00 7.97 6.44 44 TooManyTo_001 12719 5.89 5.10 6.34 45 XM_B_SpammyWords3 12680 9.37 14.70 6.32 46 XM_DK_Undo_02 12638 22.02 49.46 6.30 47 BAYES_99 12316 18.99 41.44 6.14 48 TR_XM_DK_Bayes 11132 3.62 0.25 5.55 49 LOTS_OF_MONEY 11074 8.07 12.52 5.52 50 TR_XM_DK_Bayes1 11054 3.59 0.25 5.51 51 HTML_IMAGE_RATIO_04 10913 5.44 5.43 5.44 52 IN_ZIMBRA_NJ_WHITELIST 10433 3.33 0.06 5.20 53 XM_H_GMP 10308 5.09 5.02 5.14 54 BAYES_80 10231 6.45 8.80 5.10 55 XM_B_Phish_Phrases 9983 4.61 3.97 4.98 56 XMStrtUSub 9933 4.72 4.31 4.95 57 BAYES_40 9927 3.54 1.08 4.95 58 XM_H_Long_From01 9708 5.10 5.54 4.84 59 XM_UncommonTLD01 9697 5.18 5.78 4.83 60 RCVD_IN_MSPIKE_H3 9663 4.03 2.65 4.82 61 RCVD_IN_MSPIKE_WL 9663 4.03 2.65 4.82 62 TR_XM_DK_Bayes2 9623 3.10 0.14 4.80 63 BAYES_999 9586 15.43 34.02 4.78 64 XM_CamelCaseFrm001 9387 4.57 4.39 4.68 65 URI_NOVOWEL 9205 3.64 1.99 4.59 66 XMSubMetaSx_00 8643 4.98 6.14 4.31 67 TR_XM_SpammyWords4 8376 6.72 11.17 4.18 68 MPART_ALT_DIFF 8293 4.98 6.46 4.13 69 RELAYCOUNTRY_META 7796 8.04 15.29 3.89 70 BOUNCE_MESSAGE 7206 2.69 1.10 3.59 71 ANY_BOUNCE_MESSAGE 7206 2.69 1.10 3.59 72 T_TooManySym_02 7116 2.45 0.54 3.55 73 TR_XM_DKIM_Undo 6945 15.63 36.87 3.46 74 BAYES_95 6906 4.11 5.27 3.44 75 BOTNET_IPINHOSTNAME 6612 7.09 13.72 3.30 76 MIME_QP_LONG_LINE 6487 2.63 1.58 3.23 77 XMNumbers 6347 3.13 3.07 3.16 78 TO_MALFORMED 5976 1.90 0.03 2.98 79 INVALID_MSGID 5964 1.95 0.16 2.97 80 MIME_HTML_MOSTLY 5903 3.53 4.55 2.94 81 HTML_IMAGE_RATIO_08 5677 3.14 3.69 2.83 82 BAYES_20 5630 2.10 0.86 2.81 83 FROM_EXCESS_BASE64 5397 2.60 2.43 2.69 84 TR_DCC_Bayes_99 5353 13.31 31.90 2.67 85 T_REMOTE_IMAGE 5300 2.09 1.13 2.64 86 XMSexyCombo_05 5062 3.14 4.22 2.52 87 RCVD_IN_IADB_LISTED 4930 1.86 0.81 2.46 88 TR_XM_SpammyRelay 4443 5.52 11.29 2.22 89 MAILING_LIST_MULTI 4414 1.98 1.59 2.20 90 XMStockSpam_06 4387 1.95 1.53 2.19 91 RCVD_IN_IADB_SPF 4349 1.64 0.71 2.17 92 XM_Body_Dirty_Words 4303 3.84 6.81 2.15 93 TooManyTo_002 4279 1.75 1.08 2.13 94 HTML_IMAGE_RATIO_06 4190 2.33 2.76 2.09 95 MIME_HTML_ONLY_MULTI 4170 2.43 3.06 2.08 96 TR_XM_UnparsRelay 4113 4.92 9.94 2.05 97 RCVD_IN_IADB_SENDERID 3912 1.48 0.66 1.95 98 RCVD_IN_IADB_DK 3791 1.45 0.67 1.89 99 TR_XM_PhishingBody 3783 2.46 3.46 1.89 100 XMBdyGiftCard01 3781 1.55 0.97 1.89 101 XM_TLDProd2 3770 1.32 0.35 1.88 102 XM_PDF 3688 1.25 0.23 1.84 103 XM_ProductURIs 3676 1.67 1.39 1.83 104 XM_B_URI_Unicode 3614 2.04 2.44 1.80 105 TM2_M_URI_OPT_OUT 3608 2.19 2.89 1.80 106 TM2_M_VERY_LONG_WORD 3473 2.41 3.61 1.73 107 UNTRUSTED_Relay 3412 3.43 6.46 1.70 108 RCVD_IN_IADB_VOUCHED 3340 1.23 0.46 1.67 109 RELAYCOUNTRY_CA 3337 3.26 6.05 1.66 110 IN_HORDE_ADDRESS_BOOK 3296 1.07 0.06 1.64 111 XMBrknScrpt_02 3274 2.26 3.36 1.63 112 TVD_SPACE_RATIO 3200 1.08 0.19 1.60 113 T_XMDrugObfuBody_14 3183 2.67 4.55 1.59 114 BAYES_05 3153 1.19 0.52 1.57 115 TR_XM_SpammyWords2 3119 7.34 17.45 1.56 116 XM_B_SEO 3051 2.38 3.89 1.52 117 XMDiploma_00 2989 1.54 1.62 1.49 118 HTML_MIME_NO_HTML_TAG 2876 1.39 1.31 1.43 119 XM_DK_Undo_01 2845 1.43 1.45 1.42 120 XMGappySubj_01 2757 0.93 0.15 1.37 121 XM_SPF_SoftFail 2648 2.55 4.71 1.32 122 DKIM_INVALID 2611 2.20 3.78 1.30 123 T_TooManySym_03 2597 0.90 0.20 1.29 124 URI_HEX 2481 1.39 1.66 1.24 125 XMSubMetaSxObfu_03 2467 1.13 0.94 1.23 126 RCVD_IN_IADB_OPTIN 2413 0.87 0.29 1.20 127 TR_Symld_Words 2382 1.06 0.84 1.19 128 XMManySubDom_06 2346 0.75 0.02 1.17 129 XM_SendGrid 2342 1.16 1.14 1.17 130 SPOOF_COM2OTH 2327 0.74 0.00 1.16 131 XM_B_COPY_HTML 2317 1.26 1.43 1.16 132 XMGappySubj_02 2311 0.75 0.06 1.15 133 TR_XM_SpammyWords5 2306 2.06 3.64 1.15 134 T_XMDrugObfuBody_08 2243 1.48 2.12 1.12 135 XM_B_Investor 2110 2.04 3.76 1.05 136 BOTNET 2094 3.67 8.24 1.04 137 XM_B_Unsub2 2062 1.26 1.67 1.03 138 XM_B_FormFill 2061 0.71 0.15 1.03 139 XM_GoogleGroups 2059 0.85 0.54 1.03 140 XM_RXBody 2010 0.77 0.36 1.00 141 XM_B_DNDMA 1935 0.96 0.94 0.96 142 SUBJ_ALL_CAPS 1903 1.56 2.62 0.95 143 TR_XM_SEO4 1892 1.82 3.36 0.94 144 XM_H_Long_From02 1890 0.89 0.79 0.94 145 HTML_TAG_BALANCE_BODY 1865 1.21 1.70 0.93 146 XM_UB50 1843 1.64 2.89 0.92 147 XMPhish30 1827 1.04 1.27 0.91 148 XMManySubDom_07 1776 0.56 0.00 0.89 149 XMBody_17 1750 1.90 3.69 0.87 150 TooManyTo_003 1693 0.87 0.92 0.84 151 TR_XM_DK_SendGrid 1681 0.83 0.82 0.84 152 XMBody_95 1666 0.60 0.19 0.83 153 SpammyFromTLD_01 1663 1.44 2.51 0.83 154 XM_OfRef6 1608 1.78 3.49 0.80 155 THIS_AD 1598 1.13 1.70 0.80 156 T_MANY_PILL_PRICE 1598 0.51 0.00 0.80 157 TR_MetaPhish_Combo_01 1578 0.72 0.60 0.79 158 KHOP_HELO_FCRDNS 1558 0.99 1.35 0.78 159 RCVD_IN_BL_SPAMCOP_NET 1557 3.20 7.42 0.78 160 TR_XM_Base64_M1 1545 0.78 0.80 0.77 161 XMClaimOffer 1496 0.80 0.88 0.75 162 DKIM_ADSP_CUSTOM_MED 1488 0.74 0.73 0.74 163 MPART_ALT_DIFF_COUNT 1445 0.84 1.05 0.72 164 USER_IN_WELCOMELIST 1424 0.45 0.00 0.71 165 USER_IN_WHITELIST 1424 0.45 0.00 0.71 166 TooManyTo_004 1358 0.75 0.89 0.68 167 T_XMHurry_00 1326 1.40 2.69 0.66 168 XMSolicitRefs_0 1303 0.65 0.65 0.65 169 TVD_RCVD_IP 1261 0.76 0.99 0.63 170 XMNoVowels 1258 0.51 0.31 0.63 171 XM_H_PHPMailer 1203 0.62 0.65 0.60 172 DIET_1 1199 0.65 0.73 0.60 173 HTML_TEXT_INVISIBLE_STYLE 1171 0.54 0.47 0.58 174 T_FILL_THIS_FORM_SHORT 1164 0.92 1.51 0.58 175 NUMERIC_HTTP_ADDR 1159 0.43 0.17 0.58 176 TooManyTo_005 1153 0.68 0.86 0.57 177 HTML_IMAGE_ONLY_20 1148 0.52 0.44 0.57 178 HTML_TAG_BALANCE_CENTER 1131 0.53 0.48 0.56 179 RELAYCOUNTRY_AU 1129 1.29 2.57 0.56 180 XM_B_SpammyWords4 1127 1.41 2.89 0.56 181 HTTPS_HTTP_MISMATCH 1101 0.68 0.90 0.55 182 XMSubNoVowel 1099 0.51 0.44 0.55 183 XM_URI_RBL 1094 1.62 3.50 0.55 184 XMSubMetaI_00 1091 0.79 1.21 0.54 185 SHOPIFY_IMG_NOT_RCVD_SFY 1086 0.74 1.09 0.54 186 T_TooManySym_04 1066 0.36 0.06 0.53 187 T_XMDrugObfuBody_00 1051 0.95 1.70 0.52 188 URI_TRY_3LD 1016 0.91 1.62 0.51 189 XMLngstWrd_00 1012 0.44 0.32 0.50 190 XM_B_REG_HTML 1008 0.73 1.12 0.50 191 AD_PREFS 1003 0.33 0.05 0.50 192 RCVD_IN_PBL 948 0.76 1.26 0.47 193 T_TVD_MIME_NO_HEADERS 941 0.32 0.05 0.47 194 NML_ADSP_CUSTOM_MED 917 0.52 0.63 0.46 195 XMBSHREFv2 912 0.38 0.26 0.45 196 XMGenDplmaNmb 908 0.52 0.63 0.45 197 FILL_THIS_FORM 889 0.38 0.27 0.44 198 FORGED_GMAIL_RCVD 881 0.51 0.62 0.44 199 LOW_PRICE 876 0.41 0.35 0.44 200 DKIM_ADSP_NXDOMAIN 853 0.52 0.69 0.43 ----------------------------------------------------------------------