Email: 340877 Autolearn: 0 AvgScore: 5.26 AvgScanTime: 1.32 sec Spam: 125502 Autolearn: 0 AvgScore: 13.64 AvgScanTime: 1.38 sec Ham: 215375 Autolearn: 0 AvgScore: 0.38 AvgScanTime: 1.28 sec Time Spent Running SA: 125.04 hours Time Spent Processing Spam: 48.21 hours Time Spent Processing Ham: 76.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 121326 87.75 96.67 82.55 2 DKIM_SIGNED 112826 81.86 89.90 77.17 3 XM_DK_Pass 108525 79.88 86.47 76.04 4 DKIM_VALID 107685 79.27 85.80 75.47 5 RELAYCOUNTRY_US 107317 81.32 85.51 78.88 6 XM_B_Unicode 105114 76.50 83.75 72.28 7 DCC_CHECK 97608 58.23 77.77 46.84 8 XMListUnsubscribeExists 93088 63.21 74.17 56.83 9 XM_B_SpammyWords 88818 54.97 70.77 45.76 10 DKIM_VALID_AU 86330 65.51 68.79 63.60 11 LOC_TINY_FONT_1 64581 39.73 51.46 32.89 12 XM_B_Unicode3 63596 47.80 50.67 46.13 13 XM_B_SpammyWords2 53066 29.31 42.28 21.75 14 HTML_FONT_LOW_CONTRAST 52571 34.61 41.89 30.37 15 XM_DK_Undo_02 50940 18.62 40.59 5.82 16 RCVD_IN_MSPIKE_H2 48631 36.67 38.75 35.47 17 BAYES_50 48304 52.19 38.49 60.17 18 BAYES_99 42237 15.38 33.65 4.73 19 FVGT_m_MULTI_ODD 41637 29.00 33.18 26.57 20 T_KAM_HTML_FONT_INVALID 41044 25.68 32.70 21.58 21 TR_XM_DKIM_Undo 35933 12.00 28.63 2.31 22 MIME_HTML_ONLY 34485 21.75 27.48 18.42 23 BAYES_999 33279 12.07 26.52 3.65 24 DKIM_VALID_EF 32722 27.19 26.07 27.83 25 TR_DCC_Bayes_99 29922 9.75 23.84 1.53 26 XM_Multi_Part_URI 29647 20.51 23.62 18.69 27 XMSubLong 28855 22.11 22.99 21.60 28 DCC_CHECK_NEGATIVE 27292 41.58 21.75 53.14 29 T_TM2_M_HEADER_IN_MSG 23642 21.14 18.84 22.48 30 TR_XM_DK_Unsub 23153 15.99 18.45 14.56 31 UNPARSEABLE_RELAY 21657 14.39 17.26 12.71 32 XM_B_Unsub 21090 11.54 16.80 8.48 33 TR_XM_BayesUnsub 20390 10.48 16.25 7.12 34 RELAYCOUNTRY_META 19648 8.09 15.66 3.68 35 XM_B_SpammyWords3 19317 9.05 15.39 5.36 36 TR_MAX_INTL_RELAY 19289 10.09 15.37 7.01 37 BOTNET_IPINHOSTNAME 14545 6.28 11.59 3.19 38 TR_XM_SpammyWords2 14485 4.58 11.54 0.52 39 TR_XM_SpammyRelay 14158 5.49 11.28 2.12 40 LOTS_OF_MONEY 12528 7.08 9.98 5.39 41 XM_Body_Dirty_Words 11940 5.99 9.51 3.93 42 BAYES_80 11774 6.09 9.38 4.17 43 XM_Evil_Numbers_Gen 11746 10.02 9.36 10.41 44 TR_XM_UnparsRelay 11578 4.81 9.23 2.24 45 BAYES_60 11195 9.52 8.92 9.88 46 TR_XM_SpammyWords4 10906 5.67 8.69 3.91 47 RCVD_IN_BL_SPAMCOP_NET 10528 3.47 8.39 0.61 48 FSL_BULK_SIG 10153 7.86 8.09 7.73 49 BOTNET 10117 3.65 8.06 1.07 50 TooManyTo_001 9638 7.16 7.68 6.85 51 LotsOfNums_01 9411 8.34 7.50 8.83 52 TR_XM_SPAMCOP 9348 2.99 7.45 0.39 53 HTML_IMAGE_RATIO_02 9307 6.49 7.42 5.94 54 RELAYCOUNTRY_CA 8201 3.32 6.53 1.45 55 XM_B_PhoneNumber 7878 5.97 6.28 5.79 56 XM_B_SpammyTLD 7837 5.95 6.24 5.78 57 XMSubMetaSx_00 7679 4.43 6.12 3.44 58 XM_B_Phish_Phrases 7564 5.04 6.03 4.46 59 XM_H_Long_From01 7417 5.56 5.91 5.36 60 MPART_ALT_DIFF 7354 4.73 5.86 4.08 61 XM_B_SEO 7146 3.17 5.69 1.70 62 BAYES_95 7057 3.87 5.62 2.84 63 XM_UncommonTLD01 6666 4.65 5.31 4.27 64 XMSexyCombo_05 6632 2.67 5.28 1.15 65 XM_H_GMP 6606 4.86 5.26 4.63 66 UNTRUSTED_Relay 6568 3.09 5.23 1.84 67 TR_XM_SEO4 6345 2.57 5.06 1.13 68 HTML_IMAGE_RATIO_04 5972 4.93 4.76 5.03 69 XM_SPF_SoftFail 5703 2.65 4.54 1.55 70 TR_XM_PhishingBody 5563 2.66 4.43 1.63 71 TM2_M_VERY_LONG_WORD 5504 2.63 4.39 1.60 72 T_XMDrugObfuBody_14 5423 2.57 4.32 1.56 73 DKIM_INVALID 5141 2.59 4.10 1.71 74 MIME_HTML_MOSTLY 4846 2.95 3.86 2.41 75 RCVD_IN_MSPIKE_H3 4801 4.70 3.83 5.22 76 RCVD_IN_MSPIKE_WL 4801 4.70 3.83 5.22 77 TR_XM_SpammyWords5 4766 2.44 3.80 1.65 78 XM_CamelCaseFrm001 4668 3.21 3.72 2.91 79 HTML_IMAGE_RATIO_06 4527 3.05 3.61 2.73 80 XMStrtUSub 4512 4.38 3.60 4.83 81 MIME_HTML_ONLY_MULTI 4504 2.75 3.59 2.26 82 XM_B_Investor 4043 1.93 3.22 1.17 83 RCVD_IN_VALIDITY_RPBL 3978 1.22 3.17 0.08 84 SUSP_UTF8_WORD_SUBJ 3949 1.19 3.15 0.04 85 XMNumbers 3910 3.28 3.12 3.38 86 XMBody_17 3847 1.55 3.07 0.67 87 T_XMHurry_00 3785 1.57 3.02 0.72 88 TooManyTo_002 3743 1.88 2.98 1.24 89 TR_XM_NoHeaderRelay 3583 1.15 2.85 0.15 90 FROM_EXCESS_BASE64 3542 2.53 2.82 2.37 91 USER_IN_DEF_DKIM_WL 3513 12.01 2.80 17.37 92 RCVD_IN_VALIDITY_SAFE 3396 5.92 2.71 7.79 93 RELAYCOUNTRY_AU 3347 1.24 2.67 0.41 94 XM_URI_RBL 3346 1.41 2.67 0.69 95 HTML_IMAGE_RATIO_08 3291 2.09 2.62 1.77 96 XM_UB50 3280 1.57 2.61 0.96 97 TR_XM_FormFill 3245 0.96 2.59 0.02 98 SUBJ_ALL_CAPS 3160 1.80 2.52 1.38 99 XM_OfRef6 3143 1.27 2.50 0.56 100 TM2_M_URI_OPT_OUT 3052 3.18 2.43 3.62 101 XM_B_SpammyWords4 2892 1.31 2.30 0.73 102 MIME_QP_LONG_LINE 2757 4.16 2.20 5.31 103 TR_LOTS_OF_MONEY3 2641 1.11 2.10 0.53 104 RCVD_IN_VALIDITY_CERTIFIED 2565 4.65 2.04 6.17 105 T_TooManySym_01 2506 4.48 2.00 5.93 106 URI_HEX 2465 1.47 1.96 1.18 107 XMBrknScrpt_02 2465 1.43 1.96 1.11 108 XM_B_FormFill 2452 0.79 1.95 0.11 109 XM_Appointment_Request 2441 0.72 1.94 0.01 110 XM_B_URI_Unicode 2397 1.48 1.91 1.23 111 T_XMDrugObfuBody_08 2396 1.36 1.91 1.04 112 XMDiploma_00 2395 1.45 1.91 1.19 113 SpammyFromTLD_01 2354 1.04 1.88 0.55 114 T_FILL_THIS_FORM_SHORT 2351 1.01 1.87 0.51 115 T_XMDrugObfuBody_00 1999 0.92 1.59 0.53 116 XMSubMetaI_00 1968 1.25 1.57 1.06 117 SHOPIFY_IMG_NOT_RCVD_SFY 1968 0.75 1.57 0.28 118 XMStockSpam_06 1929 1.47 1.54 1.42 119 XMPhish30 1928 0.95 1.54 0.61 120 DIET_1 1911 0.91 1.52 0.56 121 TR_XM_PHPDW 1898 0.67 1.51 0.18 122 DKIM_ADSP_NXDOMAIN 1896 0.82 1.51 0.42 123 TR_XM_PHPForged 1893 0.67 1.51 0.18 124 MAILING_LIST_MULTI 1887 1.85 1.50 2.06 125 BAYES_40 1883 3.64 1.50 4.89 126 XMBody_78 1875 0.80 1.49 0.40 127 TR_XM_FormFill2 1871 0.67 1.49 0.19 128 TR_XM_Base64_M1 1856 1.05 1.48 0.80 129 XM_H_PHPOS 1842 0.65 1.47 0.17 130 XM_ProductURIs 1817 1.37 1.45 1.33 131 XM_B_Unsub2 1814 1.14 1.45 0.96 132 KHOP_HELO_FCRDNS 1779 1.06 1.42 0.85 133 XM_DK_Undo_01 1777 1.36 1.42 1.32 134 XMReplyNow 1716 0.73 1.37 0.35 135 XM_SendGrid 1673 1.33 1.33 1.33 136 TR_XM_INV_DKIM 1636 0.57 1.30 0.15 137 T_STY_INVIS_DIRECT 1625 0.70 1.29 0.36 138 HTML_MIME_NO_HTML_TAG 1622 1.45 1.29 1.54 139 XM_B_COPY_HTML 1607 1.31 1.28 1.33 140 SpammyFromTLD_02 1597 0.58 1.27 0.18 141 ALL_TRUSTED 1552 11.43 1.24 17.37 142 HTTPS_HTTP_MISMATCH 1538 0.78 1.23 0.52 143 PLING_QUERY 1524 0.76 1.21 0.49 144 HTML_TAG_BALANCE_BODY 1522 1.11 1.21 1.05 145 URIBL_CSS_A 1513 0.51 1.21 0.10 146 URIBL_CSS 1513 0.51 1.21 0.10 147 SH_BODYURI_REVERSE_CSS 1511 0.50 1.20 0.10 148 HOSTED_IMG_MULTI_PUB_01 1491 0.46 1.19 0.03 149 TR_XM_InvalidRelay 1469 0.45 1.17 0.03 150 ANY_BOUNCE_MESSAGE 1467 2.79 1.17 3.74 151 BOUNCE_MESSAGE 1466 2.79 1.17 3.74 152 XMHTMLBadTable_001 1443 0.60 1.15 0.27 153 TR_XM_Base64_L1 1432 0.50 1.14 0.13 154 TR_Caps_n_Bayes_99 1427 0.46 1.14 0.07 155 T_REMOTE_IMAGE 1427 2.20 1.14 2.82 156 TR_MetaPhish_Combo_01 1427 0.76 1.14 0.55 157 MPART_ALT_DIFF_COUNT 1409 0.65 1.12 0.37 158 TR_Symld_Words 1406 1.22 1.12 1.27 159 URI_NOVOWEL 1344 3.15 1.07 4.37 160 DKIM_ADSP_CUSTOM_MED 1297 0.83 1.03 0.71 161 XMBdyGiftCard01 1294 1.23 1.03 1.35 162 XM_B_Phish66 1288 0.56 1.03 0.28 163 RDNS_DYNAMIC 1256 0.56 1.00 0.31 164 AC_BR_BONANZA 1252 0.50 1.00 0.20 165 PDS_RDNS_DYNAMIC_FP 1241 0.40 0.99 0.06 166 TooManyTo_003 1229 0.96 0.98 0.94 167 XM_UB99 1220 0.36 0.97 0.01 168 BAYES_20 1207 2.22 0.96 2.95 169 NO_DNS_FOR_FROM 1196 0.66 0.95 0.48 170 BOTNET_NORDNS 1184 0.35 0.94 0.01 171 TVD_RCVD_IP 1180 0.80 0.94 0.71 172 TooManyTo_004 1179 0.81 0.94 0.74 173 RCVD_IN_PSBL 1166 0.41 0.93 0.10 174 XM_HighProb1 1165 0.34 0.93 0.00 175 TR_XM_MaxWHORU 1157 0.58 0.92 0.39 176 TooManyTo_005 1146 0.74 0.91 0.64 177 THIS_AD 1144 0.54 0.91 0.33 178 LONGLN_LOW_CONTRAST 1134 0.51 0.90 0.28 179 RELAYCOUNTRY_CN 1128 0.36 0.90 0.04 180 TM2_M_OBFU_COMMENT 1122 0.69 0.89 0.57 181 XMSubMetaSxObfu_03 1114 0.53 0.89 0.33 182 HELO_DYNAMIC_SPLIT_IP 1085 0.33 0.86 0.02 183 NML_ADSP_CUSTOM_MED 1084 0.60 0.86 0.44 184 XM_B_REG_HTML 1083 0.43 0.86 0.17 185 FORGED_GMAIL_RCVD 1081 0.61 0.86 0.46 186 XM_H_Undi_Recip 1079 0.46 0.86 0.23 187 RCVD_IN_PBL 1075 0.63 0.86 0.50 188 LongTLD 1073 0.42 0.85 0.17 189 XMGenDplmaNmb 1057 0.55 0.84 0.38 190 XMPhish08 1044 0.49 0.83 0.29 191 XM_B_DNDMA 1043 1.13 0.83 1.31 192 RCVD_IN_IADB_LISTED 1019 2.43 0.81 3.38 193 HK_RANDOM_REPLYTO 1014 0.43 0.81 0.21 194 XMSlimDrugH 1003 0.53 0.80 0.38 195 XMSexyCombo_01 1001 0.38 0.80 0.13 196 RELAYCOUNTRY_FR 986 0.47 0.79 0.28 197 TR_XM_Undi_Recip19 974 0.33 0.78 0.06 198 XMPhish14 965 0.53 0.77 0.40 199 HTML_FONT_FACE_BAD 963 0.50 0.77 0.35 200 URI_TRY_3LD 957 0.64 0.76 0.57 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 177793 87.75 96.67 82.55 2 RELAYCOUNTRY_US 169889 81.32 85.51 78.88 3 DKIM_SIGNED 166214 81.86 89.90 77.17 4 XM_DK_Pass 163764 79.88 86.47 76.04 5 DKIM_VALID 162535 79.27 85.80 75.47 6 XM_B_Unicode 155668 76.50 83.75 72.28 7 DKIM_VALID_AU 136988 65.51 68.79 63.60 8 BAYES_50 129597 52.19 38.49 60.17 9 XMListUnsubscribeExists 122392 63.21 74.17 56.83 10 DCC_CHECK_NEGATIVE 114460 41.58 21.75 53.14 11 DCC_CHECK 100875 58.23 77.77 46.84 12 XM_B_Unicode3 99351 47.80 50.67 46.13 13 XM_B_SpammyWords 98555 54.97 70.77 45.76 14 RCVD_IN_MSPIKE_H2 76385 36.67 38.75 35.47 15 LOC_TINY_FONT_1 70842 39.73 51.46 32.89 16 HTML_FONT_LOW_CONTRAST 65408 34.61 41.89 30.37 17 DKIM_VALID_EF 59949 27.19 26.07 27.83 18 FVGT_m_MULTI_ODD 57228 29.00 33.18 26.57 19 T_TM2_M_HEADER_IN_MSG 48415 21.14 18.84 22.48 20 XM_B_SpammyWords2 46841 29.31 42.28 21.75 21 XMSubLong 46516 22.11 22.99 21.60 22 T_KAM_HTML_FONT_INVALID 46484 25.68 32.70 21.58 23 XM_Multi_Part_URI 40256 20.51 23.62 18.69 24 MIME_HTML_ONLY 39664 21.75 27.48 18.42 25 ALL_TRUSTED 37417 11.43 1.24 17.37 26 USER_IN_DEF_DKIM_WL 37413 12.01 2.80 17.37 27 TR_XM_DK_Unsub 31362 15.99 18.45 14.56 28 UNPARSEABLE_RELAY 27384 14.39 17.26 12.71 29 XM_Evil_Numbers_Gen 22416 10.02 9.36 10.41 30 BAYES_60 21269 9.52 8.92 9.88 31 LotsOfNums_01 19027 8.34 7.50 8.83 32 BAYES_00 18642 5.64 0.46 8.66 33 XM_B_Unsub 18254 11.54 16.80 8.48 34 XM_DKIMWhitelistDomains 17895 5.28 0.07 8.31 35 RCVD_IN_VALIDITY_SAFE 16780 5.92 2.71 7.79 36 FSL_BULK_SIG 16638 7.86 8.09 7.73 37 TR_XM_DK_Bayes 15869 4.79 0.37 7.37 38 TR_XM_DK_Bayes1 15764 4.76 0.36 7.32 39 TR_XM_BayesUnsub 15342 10.48 16.25 7.12 40 TR_MAX_INTL_RELAY 15106 10.09 15.37 7.01 41 TooManyTo_001 14754 7.16 7.68 6.85 42 TR_XM_DK_Bayes2 14180 4.25 0.25 6.58 43 RCVD_IN_VALIDITY_CERTIFIED 13293 4.65 2.04 6.17 44 HTML_IMAGE_RATIO_02 12799 6.49 7.42 5.94 45 T_TooManySym_01 12769 4.48 2.00 5.93 46 XM_DK_Undo_02 12540 18.62 40.59 5.82 47 XM_B_PhoneNumber 12463 5.97 6.28 5.79 48 XM_B_SpammyTLD 12449 5.95 6.24 5.78 49 IN_ZIMBRA_NJ_WHITELIST 11713 3.46 0.07 5.44 50 LOTS_OF_MONEY 11599 7.08 9.98 5.39 51 XM_H_Long_From01 11551 5.56 5.91 5.36 52 XM_B_SpammyWords3 11534 9.05 15.39 5.36 53 MIME_QP_LONG_LINE 11430 4.16 2.20 5.31 54 RCVD_IN_MSPIKE_WL 11235 4.70 3.83 5.22 55 RCVD_IN_MSPIKE_H3 11235 4.70 3.83 5.22 56 HTML_IMAGE_RATIO_04 10844 4.93 4.76 5.03 57 BAYES_40 10522 3.64 1.50 4.89 58 XMStrtUSub 10405 4.38 3.60 4.83 59 BAYES_99 10182 15.38 33.65 4.73 60 XM_H_GMP 9964 4.86 5.26 4.63 61 XM_B_Phish_Phrases 9600 5.04 6.03 4.46 62 URI_NOVOWEL 9410 3.15 1.07 4.37 63 XM_UncommonTLD01 9186 4.65 5.31 4.27 64 BAYES_80 8980 6.09 9.38 4.17 65 MPART_ALT_DIFF 8781 4.73 5.86 4.08 66 XM_Body_Dirty_Words 8470 5.99 9.51 3.93 67 TR_XM_SpammyWords4 8419 5.67 8.69 3.91 68 ANY_BOUNCE_MESSAGE 8060 2.79 1.17 3.74 69 BOUNCE_MESSAGE 8059 2.79 1.17 3.74 70 RELAYCOUNTRY_META 7931 8.09 15.66 3.68 71 BAYES_999 7852 12.07 26.52 3.65 72 TM2_M_URI_OPT_OUT 7793 3.18 2.43 3.62 73 XMSubMetaSx_00 7419 4.43 6.12 3.44 74 RCVD_IN_IADB_LISTED 7272 2.43 0.81 3.38 75 XMNumbers 7270 3.28 3.12 3.38 76 BOTNET_IPINHOSTNAME 6869 6.28 11.59 3.19 77 T_TooManySym_02 6850 2.24 0.63 3.18 78 RCVD_IN_IADB_SPF 6529 2.17 0.70 3.03 79 INVALID_MSGID 6473 1.96 0.16 3.01 80 BAYES_20 6350 2.22 0.96 2.95 81 XM_CamelCaseFrm001 6277 3.21 3.72 2.91 82 TO_MALFORMED 6260 1.84 0.00 2.91 83 BAYES_95 6125 3.87 5.62 2.84 84 T_REMOTE_IMAGE 6084 2.20 1.14 2.82 85 RCVD_IN_IADB_SENDERID 5922 1.98 0.66 2.75 86 HTML_IMAGE_RATIO_06 5885 3.05 3.61 2.73 87 RCVD_IN_IADB_DK 5779 1.94 0.66 2.68 88 MIME_HTML_MOSTLY 5195 2.95 3.86 2.41 89 FROM_EXCESS_BASE64 5097 2.53 2.82 2.37 90 TR_XM_DKIM_Undo 4967 12.00 28.63 2.31 91 MIME_HTML_ONLY_MULTI 4872 2.75 3.59 2.26 92 TR_XM_UnparsRelay 4826 4.81 9.23 2.24 93 TR_XM_SpammyRelay 4572 5.49 11.28 2.12 94 XM_PDF 4502 1.45 0.35 2.09 95 RCVD_IN_IADB_VOUCHED 4459 1.46 0.40 2.07 96 MAILING_LIST_MULTI 4430 1.85 1.50 2.06 97 UNTRUSTED_Relay 3963 3.09 5.23 1.84 98 HTML_IMAGE_RATIO_08 3819 2.09 2.62 1.77 99 XM_TLDProd2 3705 1.22 0.36 1.72 100 BAYES_05 3703 1.29 0.55 1.72 101 DKIM_INVALID 3679 2.59 4.10 1.71 102 XM_B_SEO 3655 3.17 5.69 1.70 103 TR_XM_SpammyWords5 3563 2.44 3.80 1.65 104 TR_XM_PhishingBody 3514 2.66 4.43 1.63 105 TM2_M_VERY_LONG_WORD 3452 2.63 4.39 1.60 106 IN_HORDE_ADDRESS_BOOK 3423 1.04 0.11 1.59 107 RCVD_IN_IADB_OPTIN 3360 1.09 0.28 1.56 108 T_XMDrugObfuBody_14 3351 2.57 4.32 1.56 109 XM_SPF_SoftFail 3333 2.65 4.54 1.55 110 HTML_MIME_NO_HTML_TAG 3310 1.45 1.29 1.54 111 TR_DCC_Bayes_99 3301 9.75 23.84 1.53 112 TVD_SPACE_RATIO 3239 1.00 0.14 1.50 113 XMGappySubj_01 3204 1.00 0.17 1.49 114 RELAYCOUNTRY_CA 3128 3.32 6.53 1.45 115 XMStockSpam_06 3066 1.47 1.54 1.42 116 SUBJ_ALL_CAPS 2977 1.80 2.52 1.38 117 XMBdyGiftCard01 2908 1.23 1.03 1.35 118 XM_SendGrid 2868 1.33 1.33 1.33 119 XM_B_COPY_HTML 2868 1.31 1.28 1.33 120 XM_ProductURIs 2867 1.37 1.45 1.33 121 XM_DK_Undo_01 2847 1.36 1.42 1.32 122 XM_B_DNDMA 2815 1.13 0.83 1.31 123 TR_Symld_Words 2736 1.22 1.12 1.27 124 TooManyTo_002 2662 1.88 2.98 1.24 125 XM_B_URI_Unicode 2642 1.48 1.91 1.23 126 XMGappySubj_02 2588 0.77 0.04 1.20 127 XMDiploma_00 2555 1.45 1.91 1.19 128 URI_HEX 2536 1.47 1.96 1.18 129 XM_B_Investor 2530 1.93 3.22 1.17 130 XMSexyCombo_05 2482 2.67 5.28 1.15 131 T_TooManySym_03 2479 0.78 0.13 1.15 132 XMBody_95 2448 0.81 0.26 1.14 133 TR_XM_SEO4 2430 2.57 5.06 1.13 134 XMBrknScrpt_02 2400 1.43 1.96 1.11 135 BOTNET 2313 3.65 8.06 1.07 136 XMSubMetaI_00 2280 1.25 1.57 1.06 137 HTML_TAG_BALANCE_BODY 2264 1.11 1.21 1.05 138 T_XMDrugObfuBody_08 2239 1.36 1.91 1.04 139 XM_GoogleGroups 2126 0.81 0.50 0.99 140 TR_XM_DK_SendGrid 2112 0.89 0.73 0.98 141 XM_UB50 2070 1.57 2.61 0.96 142 XM_B_Unsub2 2058 1.14 1.45 0.96 143 TooManyTo_003 2028 0.96 0.98 0.94 144 XM_H_Long_From02 1998 0.77 0.49 0.93 145 KHOP_HELO_FCRDNS 1833 1.06 1.42 0.85 146 HTML_IMAGE_ONLY_32 1773 0.58 0.15 0.82 147 TR_XM_Base64_M1 1721 1.05 1.48 0.80 148 TooManyTo_004 1593 0.81 0.94 0.74 149 XMClaimOffer 1583 0.69 0.61 0.73 150 XM_B_SpammyWords4 1572 1.31 2.30 0.73 151 T_XMHurry_00 1551 1.57 3.02 0.72 152 DKIM_ADSP_CUSTOM_MED 1539 0.83 1.03 0.71 153 TVD_RCVD_IP 1535 0.80 0.94 0.71 154 XM_URI_RBL 1476 1.41 2.67 0.69 155 XMBody_17 1443 1.55 3.07 0.67 156 XMOemUri 1397 0.49 0.21 0.65 157 T_TVD_MIME_NO_HEADERS 1394 0.43 0.06 0.65 158 TooManyTo_005 1383 0.74 0.91 0.64 159 XMPhish30 1317 0.95 1.54 0.61 160 RCVD_IN_BL_SPAMCOP_NET 1315 3.47 8.39 0.61 161 XM_H_PHPMailer 1290 0.61 0.64 0.60 162 XMLngstWrd_00 1282 0.52 0.40 0.60 163 TM2_M_OBFU_COMMENT 1235 0.69 0.89 0.57 164 XM_RXBody 1224 0.51 0.42 0.57 165 URI_TRY_3LD 1220 0.64 0.76 0.57 166 DIET_1 1205 0.91 1.52 0.56 167 XM_OfRef6 1202 1.27 2.50 0.56 168 SpammyFromTLD_01 1192 1.04 1.88 0.55 169 TR_MetaPhish_Combo_01 1175 0.76 1.14 0.55 170 TR_LOTS_OF_MONEY3 1150 1.11 2.10 0.53 171 T_XMDrugObfuBody_00 1147 0.92 1.59 0.53 172 TR_XM_SpammyWords2 1129 4.58 11.54 0.52 173 HTTPS_HTTP_MISMATCH 1114 0.78 1.23 0.52 174 T_FILL_THIS_FORM_SHORT 1107 1.01 1.87 0.51 175 RCVD_IN_PBL 1085 0.63 0.86 0.50 176 NUMERIC_HTTP_ADDR 1061 0.38 0.19 0.49 177 PLING_QUERY 1058 0.76 1.21 0.49 178 XMBSHREFv2 1045 0.51 0.55 0.49 179 NO_DNS_FOR_FROM 1044 0.66 0.95 0.48 180 USER_IN_WELCOMELIST 1004 0.29 0.00 0.47 181 USER_IN_WHITELIST 1004 0.29 0.00 0.47 182 HTML_TEXT_INVISIBLE_STYLE 989 0.35 0.16 0.46 183 FORGED_GMAIL_RCVD 983 0.61 0.86 0.46 184 HTML_TAG_BALANCE_CENTER 982 0.33 0.12 0.46 185 XMWrdNumbWrd 950 0.29 0.02 0.44 186 NML_ADSP_CUSTOM_MED 947 0.60 0.86 0.44 187 XMCapTrack 937 0.44 0.44 0.44 188 T_TooManySym_04 932 0.28 0.02 0.43 189 MIME_CHARSET_FARAWAY 917 0.50 0.63 0.43 190 DKIM_ADSP_NXDOMAIN 903 0.82 1.51 0.42 191 RELAYCOUNTRY_AU 891 1.24 2.67 0.41 192 HTML_OBFUSCATE_05_10 876 0.31 0.14 0.41 193 XM_ShortIntro_01 871 0.46 0.56 0.40 194 MSGID_FROM_MTA_HEADER 869 0.29 0.11 0.40 195 XMBody_78 867 0.80 1.49 0.40 196 BAD_CREDIT 863 0.30 0.13 0.40 197 FONT_INVIS_MSGID 862 0.32 0.18 0.40 198 XMNoVowels 854 0.39 0.39 0.40 199 XMPhish14 852 0.53 0.77 0.40 200 HTML_IMAGE_ONLY_20 850 0.48 0.64 0.39 ----------------------------------------------------------------------