Email: 295079 Autolearn: 0 AvgScore: 4.05 AvgScanTime: 1.43 sec Spam: 96662 Autolearn: 0 AvgScore: 13.25 AvgScanTime: 1.47 sec Ham: 198417 Autolearn: 0 AvgScore: -0.43 AvgScanTime: 1.41 sec Time Spent Running SA: 117.10 hours Time Spent Processing Spam: 39.46 hours Time Spent Processing Ham: 77.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 93046 87.63 96.26 83.42 2 DKIM_SIGNED 88292 81.10 91.34 76.10 3 XM_DK_Pass 85636 79.63 88.59 75.27 4 DKIM_VALID 84893 79.09 87.82 74.83 5 XM_B_Unicode 83298 77.96 86.17 73.97 6 RELAYCOUNTRY_US 80908 80.78 83.70 79.35 7 DCC_CHECK 74312 58.83 76.88 50.04 8 XMListUnsubscribeExists 72489 60.85 74.99 53.95 9 XM_B_SpammyWords 69264 55.18 71.66 47.15 10 DKIM_VALID_AU 68289 66.82 70.65 64.95 11 XM_B_Unicode3 50113 50.08 51.84 49.23 12 LOC_TINY_FONT_1 48262 38.92 49.93 33.56 13 HTML_FONT_LOW_CONTRAST 40038 37.26 41.42 35.23 14 XM_B_SpammyWords2 40037 27.97 41.42 21.41 15 RCVD_IN_MSPIKE_H2 39917 37.59 41.30 35.78 16 XM_DK_Undo_02 39176 16.29 40.53 4.48 17 BAYES_50 36761 54.51 38.03 62.54 18 BAYES_99 32333 13.36 33.45 3.57 19 FVGT_m_MULTI_ODD 31757 28.18 32.85 25.91 20 T_KAM_HTML_FONT_INVALID 28804 22.11 29.80 18.37 21 TR_XM_DKIM_Undo 28516 11.04 29.50 2.05 22 MIME_HTML_ONLY 28078 22.43 29.05 19.21 23 DKIM_VALID_EF 25646 27.73 26.53 28.31 24 BAYES_999 25233 10.36 26.10 2.69 25 XM_Multi_Part_URI 23362 22.85 24.17 22.20 26 TR_DCC_Bayes_99 23259 8.94 24.06 1.58 27 DCC_CHECK_NEGATIVE 21960 41.02 22.72 49.94 28 XMSubLong 20115 21.82 20.81 22.32 29 TR_XM_DK_Unsub 19090 15.07 19.75 12.79 30 T_TM2_M_HEADER_IN_MSG 17782 20.51 18.40 21.55 31 UNPARSEABLE_RELAY 17044 13.65 17.63 11.71 32 RELAYCOUNTRY_META 16284 8.09 16.85 3.82 33 XM_B_Unsub 15776 11.86 16.32 9.69 34 TR_MAX_INTL_RELAY 15408 9.44 15.94 6.28 35 TR_XM_BayesUnsub 14886 10.48 15.40 8.08 36 XM_B_SpammyWords3 14259 8.85 14.75 5.97 37 BOTNET_IPINHOSTNAME 12695 6.45 13.13 3.20 38 TR_XM_SpammyRelay 12553 5.80 12.99 2.31 39 TR_XM_SpammyWords2 12285 4.43 12.71 0.39 40 XM_Evil_Numbers_Gen 9612 10.24 9.94 10.39 41 BAYES_80 9544 5.86 9.87 3.91 42 TR_XM_UnparsRelay 8981 4.21 9.29 1.73 43 HTML_IMAGE_RATIO_02 8975 7.45 9.28 6.55 44 LOTS_OF_MONEY 8874 5.86 9.18 4.25 45 BAYES_60 8220 9.95 8.50 10.66 46 TR_XM_SpammyWords4 8013 4.76 8.29 3.05 47 RELAYCOUNTRY_CA 7848 3.72 8.12 1.57 48 XM_Body_Dirty_Words 7469 4.94 7.73 3.58 49 XMSubMetaSx_00 7293 5.32 7.54 4.24 50 BOTNET 7287 3.11 7.54 0.96 51 LotsOfNums_01 6817 7.55 7.05 7.79 52 XM_B_Phish_Phrases 6770 6.39 7.00 6.08 53 RCVD_IN_BL_SPAMCOP_NET 6618 2.62 6.85 0.57 54 FSL_BULK_SIG 6587 7.61 6.81 8.00 55 MPART_ALT_DIFF 6426 6.34 6.65 6.19 56 TooManyTo_001 6277 6.52 6.49 6.54 57 XM_UncommonTLD01 5883 4.98 6.09 4.44 58 XM_H_Long_From01 5771 5.54 5.97 5.33 59 BAYES_95 5553 3.47 5.74 2.36 60 TR_XM_SPAMCOP 5340 1.99 5.52 0.27 61 XM_B_PhoneNumber 5248 5.33 5.43 5.29 62 XMSexyCombo_05 5237 2.55 5.42 1.15 63 UNTRUSTED_Relay 5092 2.85 5.27 1.67 64 XM_H_GMP 5024 5.29 5.20 5.33 65 T_XMDrugObfuBody_14 4962 2.94 5.13 1.87 66 XMStrtUSub 4657 5.25 4.82 5.46 67 HTML_IMAGE_RATIO_04 4586 7.66 4.74 9.08 68 XM_CamelCaseFrm001 4573 3.78 4.73 3.31 69 XM_B_SEO 4310 2.33 4.46 1.29 70 MIME_HTML_MOSTLY 4293 4.69 4.44 4.81 71 XM_SPF_SoftFail 4100 2.32 4.24 1.39 72 TR_XM_PhishingBody 4099 2.91 4.24 2.27 73 TM2_M_VERY_LONG_WORD 3810 2.57 3.94 1.91 74 RCVD_IN_MSPIKE_H3 3798 4.13 3.93 4.22 75 RCVD_IN_MSPIKE_WL 3798 4.13 3.93 4.22 76 TR_XM_SEO4 3793 1.90 3.92 0.91 77 RCVD_IN_VALIDITY_SAFE 3715 6.88 3.84 8.36 78 HTML_IMAGE_RATIO_06 3541 2.92 3.66 2.56 79 XM_B_SpammyTLD 3466 5.01 3.59 5.70 80 DKIM_INVALID 3399 2.01 3.52 1.28 81 XM_B_Investor 3352 1.95 3.47 1.21 82 MIME_HTML_ONLY_MULTI 3258 2.62 3.37 2.25 83 TM2_M_URI_OPT_OUT 3235 3.32 3.35 3.30 84 TR_XM_SpammyWords5 3117 1.70 3.22 0.96 85 RCVD_IN_VALIDITY_CERTIFIED 3028 5.83 3.13 7.15 86 RELAYCOUNTRY_AU 3003 1.33 3.11 0.47 87 XMNumbers 2943 2.77 3.04 2.64 88 RCVD_IN_VALIDITY_RPBL 2800 1.14 2.90 0.28 89 XM_URI_RBL 2753 1.27 2.85 0.50 90 FROM_EXCESS_BASE64 2729 3.10 2.82 3.23 91 XMBody_17 2673 1.22 2.77 0.46 92 T_XMHurry_00 2555 1.65 2.64 1.17 93 XM_UB50 2466 1.48 2.55 0.96 94 T_XMDrugObfuBody_08 2463 1.55 2.55 1.06 95 XM_OfRef6 2428 1.20 2.51 0.57 96 USER_IN_DEF_DKIM_WL 2399 13.56 2.48 18.96 97 HTML_IMAGE_RATIO_08 2287 2.24 2.37 2.18 98 T_TooManySym_01 2272 5.26 2.35 6.67 99 TR_XM_NoHeaderRelay 2181 0.90 2.26 0.24 100 XMBrknScrpt_02 2142 1.43 2.22 1.04 101 DIET_1 2142 1.16 2.22 0.64 102 T_FILL_THIS_FORM_SHORT 2093 1.07 2.17 0.54 103 XMDiploma_00 2016 1.45 2.09 1.14 104 XM_B_Unsub2 1996 1.51 2.06 1.24 105 SHOPIFY_IMG_NOT_RCVD_SFY 1978 0.90 2.05 0.34 106 XM_B_SpammyWords4 1948 1.17 2.02 0.76 107 XM_B_URI_Unicode 1892 1.78 1.96 1.70 108 MIME_QP_LONG_LINE 1885 3.74 1.95 4.62 109 MAILING_LIST_MULTI 1843 2.20 1.91 2.34 110 THIS_AD 1832 0.92 1.90 0.44 111 SpammyFromTLD_01 1818 0.98 1.88 0.54 112 SUBJ_ALL_CAPS 1813 1.23 1.88 0.91 113 XMStockSpam_06 1783 1.65 1.84 1.56 114 TooManyTo_002 1780 1.30 1.84 1.03 115 SpammyFromTLD_02 1765 0.70 1.83 0.16 116 TR_XM_FormFill 1716 0.59 1.78 0.01 117 BAYES_40 1637 3.40 1.69 4.23 118 XMReplyNow 1632 0.71 1.69 0.24 119 XMSubMetaI_00 1602 0.98 1.66 0.66 120 XMPhish30 1553 1.34 1.61 1.22 121 T_MONEY_PERCENT 1450 0.61 1.50 0.17 122 TR_LOTS_OF_MONEY2 1450 0.61 1.50 0.17 123 XMBdyGiftCard01 1441 1.72 1.49 1.83 124 TR_XM_PHPForged 1418 0.58 1.47 0.15 125 TR_LOTS_OF_MONEY3 1395 0.64 1.44 0.25 126 TR_XM_PHPDW 1392 0.57 1.44 0.14 127 URI_HEX 1384 1.10 1.43 0.93 128 XM_ProductURIs 1382 0.89 1.43 0.62 129 TR_XM_FormFill2 1381 0.57 1.43 0.15 130 XM_DK_Undo_01 1342 1.72 1.39 1.88 131 XM_H_PHPOS 1341 0.55 1.39 0.14 132 HTTPS_HTTP_MISMATCH 1335 0.68 1.38 0.34 133 ALL_TRUSTED 1319 11.89 1.36 17.02 134 XM_SendGrid 1317 1.13 1.36 1.02 135 LongTLD 1308 0.56 1.35 0.17 136 KHOP_HELO_FCRDNS 1303 1.04 1.35 0.89 137 HTML_TAG_BALANCE_BODY 1273 1.05 1.32 0.93 138 TR_Symld_Words 1257 1.19 1.30 1.14 139 T_REMOTE_IMAGE 1251 2.26 1.29 2.73 140 T_STY_INVIS_DIRECT 1238 0.66 1.28 0.36 141 RDNS_DYNAMIC 1196 0.62 1.24 0.32 142 PLING_QUERY 1185 0.71 1.23 0.45 143 PDS_RDNS_DYNAMIC_FP 1174 0.42 1.21 0.04 144 XM_B_COPY_HTML 1164 1.31 1.20 1.36 145 XMSexyCombo_01 1163 0.51 1.20 0.17 146 TVD_RCVD_IP 1100 0.87 1.14 0.73 147 TR_XM_DK_SendGrid 1059 0.84 1.10 0.72 148 XM_H_Long_From02 1052 0.96 1.09 0.90 149 XM_B_FormFill 1043 0.40 1.08 0.06 150 XM_B_REG_HTML 1038 0.52 1.07 0.25 151 MPART_ALT_DIFF_COUNT 1035 0.89 1.07 0.80 152 XM_Appointment_Request 1028 0.35 1.06 0.00 153 TR_MetaPhish_Combo_01 1026 0.82 1.06 0.70 154 TM2_M_OBFU_COMMENT 1021 0.83 1.06 0.72 155 TR_XM_InvalidRelay 1020 0.36 1.06 0.02 156 URI_TRY_3LD 1011 0.66 1.05 0.48 157 XMHTMLBadTable_001 1006 0.53 1.04 0.28 158 XMClaimOffer 1000 0.67 1.03 0.50 159 HTML_FONT_FACE_BAD 998 0.76 1.03 0.63 160 HK_RANDOM_REPLYTO 996 0.41 1.03 0.11 161 XM_B_Phish66 991 0.50 1.03 0.25 162 HELO_DYNAMIC_SPLIT_IP 989 0.34 1.02 0.00 163 XM_HighProb1 988 0.34 1.02 0.01 164 T_XMDrugObfuBody_00 964 0.56 1.00 0.35 165 DKIM_ADSP_CUSTOM_MED 963 0.79 1.00 0.69 166 RCVD_IN_PBL 957 0.61 0.99 0.42 167 XM_DIRTYINTL 954 0.36 0.99 0.06 168 BAYES_20 951 2.18 0.98 2.77 169 MIME_CHARSET_FARAWAY 950 0.65 0.98 0.49 170 TR_XM_Base64_M1 925 1.02 0.96 1.04 171 XM_UB99 894 0.31 0.92 0.01 172 RCVD_IN_XBL 888 0.32 0.92 0.03 173 URI_NOVOWEL 873 3.29 0.90 4.45 174 TR_Mismatch_TLD_01 871 0.42 0.90 0.19 175 TR_XM_INV_DKIM 858 0.34 0.89 0.08 176 XMPhish08 845 0.44 0.87 0.23 177 BOUNCE_MESSAGE 841 2.66 0.87 3.53 178 ANY_BOUNCE_MESSAGE 841 2.66 0.87 3.53 179 NML_ADSP_CUSTOM_MED 832 0.61 0.86 0.49 180 T_Symld_Words_02 829 0.44 0.86 0.23 181 SUBJ_DOLLARS 805 0.46 0.83 0.28 182 FROM_SUSPICIOUS_NTLD 788 0.29 0.82 0.03 183 BAYES_00 787 5.83 0.81 8.27 184 TR_XM_RelayPhish 786 0.30 0.81 0.05 185 TR_XM_Spammywords 776 0.38 0.80 0.18 186 XM_S_SpammyWords 776 0.38 0.80 0.18 187 FORGED_GMAIL_RCVD 762 0.55 0.79 0.44 188 HOSTED_IMG_MULTI_PUB_01 759 0.28 0.79 0.03 189 XM_B_DNDMA 756 1.07 0.78 1.22 190 HTML_MIME_NO_HTML_TAG 745 1.09 0.77 1.24 191 TM2_M_A_HREF_HREF 737 0.34 0.76 0.14 192 TR_XM_DK_Bayes 737 5.25 0.76 7.44 193 NO_DNS_FOR_FROM 734 0.52 0.76 0.41 194 TR_XM_DK_Bayes1 733 5.22 0.76 7.39 195 LONGLN_LOW_CONTRAST 731 0.48 0.76 0.34 196 XM_GoogleGroups 727 0.89 0.75 0.96 197 TR_XM_MaxWHORU 726 0.47 0.75 0.33 198 TR_XM_Base64_L1 708 0.33 0.73 0.14 199 XMGenDplmaNmb 706 0.53 0.73 0.44 200 FROM_SUSPICIOUS_NTLD_FP 704 0.26 0.73 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 165518 87.63 96.26 83.42 2 RELAYCOUNTRY_US 157448 80.78 83.70 79.35 3 DKIM_SIGNED 151005 81.10 91.34 76.10 4 XM_DK_Pass 149345 79.63 88.59 75.27 5 DKIM_VALID 148472 79.09 87.82 74.83 6 XM_B_Unicode 146760 77.96 86.17 73.97 7 DKIM_VALID_AU 128873 66.82 70.65 64.95 8 BAYES_50 124084 54.51 38.03 62.54 9 XMListUnsubscribeExists 107053 60.85 74.99 53.95 10 DCC_CHECK 99290 58.83 76.88 50.04 11 DCC_CHECK_NEGATIVE 99081 41.02 22.72 49.94 12 XM_B_Unicode3 97676 50.08 51.84 49.23 13 XM_B_SpammyWords 93563 55.18 71.66 47.15 14 RCVD_IN_MSPIKE_H2 70993 37.59 41.30 35.78 15 HTML_FONT_LOW_CONTRAST 69896 37.26 41.42 35.23 16 LOC_TINY_FONT_1 66579 38.92 49.93 33.56 17 DKIM_VALID_EF 56175 27.73 26.53 28.31 18 FVGT_m_MULTI_ODD 51410 28.18 32.85 25.91 19 XMSubLong 44281 21.82 20.81 22.32 20 XM_Multi_Part_URI 44055 22.85 24.17 22.20 21 T_TM2_M_HEADER_IN_MSG 42753 20.51 18.40 21.55 22 XM_B_SpammyWords2 42485 27.97 41.42 21.41 23 MIME_HTML_ONLY 38110 22.43 29.05 19.21 24 USER_IN_DEF_DKIM_WL 37616 13.56 2.48 18.96 25 T_KAM_HTML_FONT_INVALID 36450 22.11 29.80 18.37 26 ALL_TRUSTED 33764 11.89 1.36 17.02 27 TR_XM_DK_Unsub 25376 15.07 19.75 12.79 28 UNPARSEABLE_RELAY 23241 13.65 17.63 11.71 29 BAYES_60 21149 9.95 8.50 10.66 30 XM_DKIMWhitelistDomains 21032 7.14 0.03 10.60 31 XM_Evil_Numbers_Gen 20613 10.24 9.94 10.39 32 XM_B_Unsub 19223 11.86 16.32 9.69 33 HTML_IMAGE_RATIO_04 18013 7.66 4.74 9.08 34 RCVD_IN_VALIDITY_SAFE 16589 6.88 3.84 8.36 35 BAYES_00 16417 5.83 0.81 8.27 36 TR_XM_BayesUnsub 16041 10.48 15.40 8.08 37 FSL_BULK_SIG 15883 7.61 6.81 8.00 38 LotsOfNums_01 15452 7.55 7.05 7.79 39 TR_XM_DK_Bayes 14767 5.25 0.76 7.44 40 TR_XM_DK_Bayes1 14661 5.22 0.76 7.39 41 RCVD_IN_VALIDITY_CERTIFIED 14186 5.83 3.13 7.15 42 T_TooManySym_01 13243 5.26 2.35 6.67 43 TR_XM_DK_Bayes2 13184 4.65 0.57 6.64 44 HTML_IMAGE_RATIO_02 12998 7.45 9.28 6.55 45 TooManyTo_001 12969 6.52 6.49 6.54 46 TR_MAX_INTL_RELAY 12458 9.44 15.94 6.28 47 MPART_ALT_DIFF 12286 6.34 6.65 6.19 48 XM_B_Phish_Phrases 12072 6.39 7.00 6.08 49 XM_B_SpammyWords3 11852 8.85 14.75 5.97 50 XM_B_SpammyTLD 11307 5.01 3.59 5.70 51 XMStrtUSub 10841 5.25 4.82 5.46 52 XM_H_GMP 10578 5.29 5.20 5.33 53 XM_H_Long_From01 10573 5.54 5.97 5.33 54 XM_B_PhoneNumber 10488 5.33 5.43 5.29 55 IN_ZIMBRA_NJ_WHITELIST 10190 3.47 0.06 5.14 56 MIME_HTML_MOSTLY 9545 4.69 4.44 4.81 57 MIME_QP_LONG_LINE 9164 3.74 1.95 4.62 58 XM_DK_Undo_02 8882 16.29 40.53 4.48 59 URI_NOVOWEL 8825 3.29 0.90 4.45 60 XM_UncommonTLD01 8805 4.98 6.09 4.44 61 LOTS_OF_MONEY 8432 5.86 9.18 4.25 62 XMSubMetaSx_00 8408 5.32 7.54 4.24 63 BAYES_40 8385 3.40 1.69 4.23 64 RCVD_IN_MSPIKE_H3 8382 4.13 3.93 4.22 65 RCVD_IN_MSPIKE_WL 8382 4.13 3.93 4.22 66 BAYES_80 7762 5.86 9.87 3.91 67 RELAYCOUNTRY_META 7586 8.09 16.85 3.82 68 T_TooManySym_02 7495 2.76 0.68 3.78 69 XM_Body_Dirty_Words 7099 4.94 7.73 3.58 70 BAYES_99 7083 13.36 33.45 3.57 71 BOUNCE_MESSAGE 7007 2.66 0.87 3.53 72 ANY_BOUNCE_MESSAGE 7007 2.66 0.87 3.53 73 INVALID_MSGID 6668 2.35 0.27 3.36 74 XM_CamelCaseFrm001 6568 3.78 4.73 3.31 75 TM2_M_URI_OPT_OUT 6550 3.32 3.35 3.30 76 FROM_EXCESS_BASE64 6416 3.10 2.82 3.23 77 BOTNET_IPINHOSTNAME 6343 6.45 13.13 3.20 78 TO_MALFORMED 6161 2.09 0.00 3.11 79 TR_XM_SpammyWords4 6046 4.76 8.29 3.05 80 BAYES_20 5488 2.18 0.98 2.77 81 T_REMOTE_IMAGE 5423 2.26 1.29 2.73 82 BAYES_999 5336 10.36 26.10 2.69 83 XMNumbers 5234 2.77 3.04 2.64 84 HTML_IMAGE_RATIO_06 5084 2.92 3.66 2.56 85 RCVD_IN_IADB_LISTED 5068 1.95 0.70 2.55 86 BAYES_95 4689 3.47 5.74 2.36 87 MAILING_LIST_MULTI 4638 2.20 1.91 2.34 88 RCVD_IN_IADB_SPF 4619 1.76 0.59 2.33 89 TR_XM_SpammyRelay 4575 5.80 12.99 2.31 90 TR_XM_PhishingBody 4501 2.91 4.24 2.27 91 MIME_HTML_ONLY_MULTI 4460 2.62 3.37 2.25 92 HTML_IMAGE_RATIO_08 4316 2.24 2.37 2.18 93 RCVD_IN_IADB_SENDERID 4217 1.60 0.53 2.13 94 RCVD_IN_IADB_DK 4153 1.59 0.55 2.09 95 TR_XM_DKIM_Undo 4060 11.04 29.50 2.05 96 HTML_IMAGE_ONLY_20 4053 1.51 0.42 2.04 97 XMSubNoVowel 3901 1.45 0.38 1.97 98 TM2_M_VERY_LONG_WORD 3782 2.57 3.94 1.91 99 XM_DK_Undo_01 3734 1.72 1.39 1.88 100 T_XMDrugObfuBody_14 3702 2.94 5.13 1.87 101 XMBdyGiftCard01 3626 1.72 1.49 1.83 102 XM_H_Trusted_IP 3625 1.23 0.00 1.83 103 XM_TLDProd2 3501 1.26 0.23 1.76 104 TR_XM_UnparsRelay 3431 4.21 9.29 1.73 105 XM_B_URI_Unicode 3367 1.78 1.96 1.70 106 BAYES_05 3357 1.31 0.52 1.69 107 UNTRUSTED_Relay 3316 2.85 5.27 1.67 108 IN_HORDE_ADDRESS_BOOK 3271 1.15 0.12 1.65 109 XM_PDF 3218 1.16 0.22 1.62 110 TVD_SPACE_RATIO 3203 1.12 0.10 1.61 111 XMGappySubj_01 3174 1.12 0.14 1.60 112 TR_DCC_Bayes_99 3132 8.94 24.06 1.58 113 RELAYCOUNTRY_CA 3115 3.72 8.12 1.57 114 XMStockSpam_06 3100 1.65 1.84 1.56 115 RCVD_IN_IADB_VOUCHED 3036 1.17 0.42 1.53 116 T_TooManySym_03 2866 1.04 0.21 1.44 117 XM_SPF_SoftFail 2756 2.32 4.24 1.39 118 XM_B_COPY_HTML 2702 1.31 1.20 1.36 119 XMGappySubj_02 2646 0.91 0.04 1.33 120 XM_B_SEO 2560 2.33 4.46 1.29 121 DKIM_INVALID 2533 2.01 3.52 1.28 122 XM_B_Unsub2 2464 1.51 2.06 1.24 123 HTML_MIME_NO_HTML_TAG 2463 1.09 0.77 1.24 124 XM_B_DNDMA 2416 1.07 0.78 1.22 125 XMPhish30 2411 1.34 1.61 1.22 126 XM_B_Investor 2398 1.95 3.47 1.21 127 T_XMHurry_00 2319 1.65 2.64 1.17 128 XMSexyCombo_05 2288 2.55 5.42 1.15 129 XMDiploma_00 2270 1.45 2.09 1.14 130 TR_Symld_Words 2261 1.19 1.30 1.14 131 SHORT_URI_3 2210 0.87 0.36 1.11 132 XMBody_95 2108 0.81 0.28 1.06 133 T_XMDrugObfuBody_08 2103 1.55 2.55 1.06 134 TR_XM_Base64_M1 2071 1.02 0.96 1.04 135 XMBrknScrpt_02 2064 1.43 2.22 1.04 136 TooManyTo_002 2053 1.30 1.84 1.03 137 XM_SendGrid 2025 1.13 1.36 1.02 138 RCVD_IN_IADB_OPTIN 1951 0.74 0.23 0.98 139 XM_UB50 1907 1.48 2.55 0.96 140 XM_GoogleGroups 1905 0.89 0.75 0.96 141 BOTNET 1904 3.11 7.54 0.96 142 TR_XM_SpammyWords5 1904 1.70 3.22 0.96 143 URI_HEX 1851 1.10 1.43 0.93 144 HTML_TAG_BALANCE_BODY 1840 1.05 1.32 0.93 145 SUBJ_ALL_CAPS 1812 1.23 1.88 0.91 146 TR_XM_SEO4 1812 1.90 3.92 0.91 147 XM_H_Long_From02 1785 0.96 1.09 0.90 148 KHOP_HELO_FCRDNS 1767 1.04 1.35 0.89 149 MPART_ALT_DIFF_COUNT 1591 0.89 1.07 0.80 150 TooManyTo_003 1517 0.75 0.72 0.76 151 XM_B_SpammyWords4 1514 1.17 2.02 0.76 152 TVD_RCVD_IP 1455 0.87 1.14 0.73 153 USER_IN_WELCOMELIST 1440 0.49 0.00 0.73 154 USER_IN_WHITELIST 1440 0.49 0.00 0.73 155 TM2_M_OBFU_COMMENT 1435 0.83 1.06 0.72 156 TR_XM_DK_SendGrid 1429 0.84 1.10 0.72 157 TR_MetaPhish_Combo_01 1396 0.82 1.06 0.70 158 T_TooManySym_04 1391 0.49 0.04 0.70 159 DKIM_ADSP_CUSTOM_MED 1375 0.79 1.00 0.69 160 HTML_TEXT_INVISIBLE_STYLE 1311 0.50 0.18 0.66 161 HTML_TAG_BALANCE_CENTER 1309 0.52 0.23 0.66 162 XMSubMetaI_00 1304 0.98 1.66 0.66 163 DIET_1 1277 1.16 2.22 0.64 164 XM_H_PHPMailer 1246 0.63 0.65 0.63 165 HTML_FONT_FACE_BAD 1241 0.76 1.03 0.63 166 XM_ProductURIs 1230 0.89 1.43 0.62 167 TooManyTo_004 1162 0.62 0.69 0.59 168 MAY_BE_FORGED 1143 0.50 0.35 0.58 169 XM_OfRef6 1126 1.20 2.51 0.57 170 RCVD_IN_BL_SPAMCOP_NET 1123 2.62 6.85 0.57 171 T_FILL_THIS_FORM_SHORT 1071 1.07 2.17 0.54 172 SpammyFromTLD_01 1067 0.98 1.88 0.54 173 XM_Walgreens_Forge 1064 0.37 0.03 0.54 174 AD_PREFS 1057 0.38 0.05 0.53 175 XMPhish14 1045 0.59 0.73 0.53 176 T_TVD_MIME_NO_HEADERS 1043 0.36 0.03 0.53 177 FONT_INVIS_POSTEXTRAS 1035 0.36 0.03 0.52 178 XMBSHREFv2 1027 0.43 0.24 0.52 179 XMNoVowels 1008 0.49 0.44 0.51 180 XM_URI_RBL 997 1.27 2.85 0.50 181 XMClaimOffer 985 0.67 1.03 0.50 182 MIME_CHARSET_FARAWAY 981 0.65 0.98 0.49 183 MISSING_HEADERS 977 0.44 0.33 0.49 184 NML_ADSP_CUSTOM_MED 972 0.61 0.86 0.49 185 XMSolicitRefs_0 955 0.54 0.68 0.48 186 TooManyTo_005 952 0.54 0.67 0.48 187 URI_TRY_3LD 948 0.66 1.05 0.48 188 RELAYCOUNTRY_AU 933 1.33 3.11 0.47 189 XMBody_17 916 1.22 2.77 0.46 190 PLING_QUERY 897 0.71 1.23 0.45 191 MSGID_FROM_MTA_HEADER 897 0.33 0.07 0.45 192 FORGED_GMAIL_RCVD 873 0.55 0.79 0.44 193 XMGenDplmaNmb 872 0.53 0.73 0.44 194 THIS_AD 869 0.92 1.90 0.44 195 LOW_PRICE 861 0.42 0.40 0.43 196 RCVD_IN_PBL 839 0.61 0.99 0.42 197 NO_DNS_FOR_FROM 812 0.52 0.76 0.41 198 XMSlimDrugH 803 0.48 0.64 0.40 199 DKIM_ADSP_NXDOMAIN 786 0.49 0.68 0.40 200 XM_S_SubURI 777 0.28 0.05 0.39 ----------------------------------------------------------------------