Email: 255556 Autolearn: 0 AvgScore: 5.18 AvgScanTime: 1.32 sec Spam: 92639 Autolearn: 0 AvgScore: 13.78 AvgScanTime: 1.37 sec Ham: 162917 Autolearn: 0 AvgScore: 0.29 AvgScanTime: 1.30 sec Time Spent Running SA: 93.98 hours Time Spent Processing Spam: 35.21 hours Time Spent Processing Ham: 58.77 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86858 87.02 93.76 83.18 2 DKIM_SIGNED 82146 81.09 88.67 76.77 3 RELAYCOUNTRY_US 78831 81.65 85.09 79.69 4 XM_DK_Pass 78619 79.07 84.87 75.77 5 DKIM_VALID 77807 78.40 83.99 75.22 6 XM_B_Unicode 76674 75.06 82.77 70.68 7 DCC_CHECK 73381 60.13 79.21 49.28 8 XMListUnsubscribeExists 68553 60.87 74.00 53.41 9 XM_B_SpammyWords 64929 54.72 70.09 45.98 10 DKIM_VALID_AU 64131 66.17 69.23 64.43 11 LOC_TINY_FONT_1 48186 39.04 52.01 31.67 12 XM_B_Unicode3 47715 48.16 51.51 46.25 13 XM_B_SpammyWords2 39536 28.94 42.68 21.13 14 XM_DK_Undo_02 37792 18.30 40.79 5.51 15 HTML_FONT_LOW_CONTRAST 37053 35.18 40.00 32.44 16 RCVD_IN_MSPIKE_H2 36602 36.97 39.51 35.52 17 BAYES_50 33220 50.73 35.86 59.18 18 BAYES_99 30413 14.44 32.83 3.98 19 FVGT_m_MULTI_ODD 28689 28.86 30.97 27.65 20 T_KAM_HTML_FONT_INVALID 27487 24.00 29.67 20.78 21 TR_XM_DKIM_Undo 26982 12.00 29.13 2.26 22 DKIM_VALID_EF 25864 28.47 27.92 28.78 23 MIME_HTML_ONLY 23955 22.21 25.86 20.14 24 BAYES_999 23561 11.17 25.43 3.06 25 TR_DCC_Bayes_99 23346 10.07 25.20 1.47 26 XM_Multi_Part_URI 22990 19.07 24.82 15.81 27 XMSubLong 19376 22.78 20.92 23.85 28 DCC_CHECK_NEGATIVE 18833 39.68 20.33 50.69 29 TR_XM_DK_Unsub 18146 16.00 19.59 13.96 30 T_TM2_M_HEADER_IN_MSG 16828 20.87 18.17 22.41 31 TR_MAX_INTL_RELAY 16671 10.57 18.00 6.35 32 UNPARSEABLE_RELAY 15913 14.11 17.18 12.36 33 XM_B_SpammyWords3 15839 10.58 17.10 6.87 34 RELAYCOUNTRY_META 14068 8.08 15.19 4.04 35 XM_B_Unsub 12889 11.32 13.91 9.85 36 TR_XM_BayesUnsub 12547 9.65 13.54 7.44 37 TR_XM_SpammyWords2 12546 5.20 13.54 0.45 38 BOTNET_IPINHOSTNAME 10803 6.55 11.66 3.65 39 LOTS_OF_MONEY 10741 8.25 11.59 6.35 40 BAYES_80 10329 6.53 11.15 3.90 41 TR_XM_SpammyWords4 10005 6.92 10.80 4.72 42 TR_XM_SpammyRelay 9789 5.43 10.57 2.51 43 TR_XM_UnparsRelay 9177 4.66 9.91 1.68 44 XM_Body_Dirty_Words 8728 5.28 9.42 2.93 45 BAYES_60 8681 10.54 9.37 11.21 46 RCVD_IN_BL_SPAMCOP_NET 8562 3.86 9.24 0.80 47 FSL_BULK_SIG 8443 9.65 9.11 9.95 48 BOTNET 8270 4.14 8.93 1.42 49 XM_Evil_Numbers_Gen 7442 9.24 8.03 9.93 50 TR_XM_SPAMCOP 7399 3.22 7.99 0.51 51 XM_H_GMP 6625 6.53 7.15 6.17 52 HTML_IMAGE_RATIO_02 6600 6.43 7.12 6.04 53 LotsOfNums_01 6435 6.88 6.95 6.84 54 MPART_ALT_DIFF 6340 5.31 6.84 4.44 55 XM_UncommonTLD01 6158 5.84 6.65 5.38 56 BAYES_95 6015 3.91 6.49 2.44 57 XMSubMetaSx_00 5898 6.01 6.37 5.80 58 XM_B_Phish_Phrases 5894 5.31 6.36 4.71 59 XM_H_Long_From01 5464 5.61 5.90 5.45 60 RELAYCOUNTRY_CA 5223 3.24 5.64 1.87 61 UNTRUSTED_Relay 5114 3.05 5.52 1.65 62 XMStrtUSub 4541 5.25 4.90 5.44 63 DKIM_INVALID 4339 2.69 4.68 1.55 64 T_XMDrugObfuBody_14 4287 2.85 4.63 1.83 65 XM_B_Investor 4024 2.46 4.34 1.39 66 HTML_IMAGE_RATIO_04 4008 4.64 4.33 4.82 67 TM2_M_VERY_LONG_WORD 3895 2.76 4.20 1.94 68 RCVD_IN_MSPIKE_H3 3879 4.79 4.19 5.13 69 RCVD_IN_MSPIKE_WL 3879 4.79 4.19 5.13 70 DKIM_ADSP_NXDOMAIN 3857 1.80 4.16 0.46 71 XMSexyCombo_05 3770 3.05 4.07 2.47 72 TR_XM_PhishingBody 3758 2.60 4.06 1.78 73 TooManyTo_001 3656 5.47 3.95 6.33 74 MIME_HTML_MOSTLY 3593 3.07 3.88 2.61 75 XM_B_PhoneNumber 3552 5.37 3.83 6.24 76 RCVD_IN_VALIDITY_SAFE 3517 5.86 3.80 7.03 77 RCVD_IN_VALIDITY_RPBL 3513 1.46 3.79 0.14 78 TR_XM_SpammyWords5 3427 2.19 3.70 1.33 79 MIME_HTML_ONLY_MULTI 3426 2.96 3.70 2.54 80 XM_OfRef6 3365 1.90 3.63 0.91 81 XM_CamelCaseFrm001 3273 2.94 3.53 2.60 82 XMNumbers 3153 3.63 3.40 3.76 83 HTML_IMAGE_RATIO_06 3116 3.28 3.36 3.24 84 HTML_IMAGE_RATIO_08 3115 2.60 3.36 2.17 85 XM_B_SpammyTLD 3107 2.79 3.35 2.47 86 SUBJ_ALL_CAPS 3095 1.75 3.34 0.84 87 NO_DNS_FOR_FROM 2949 1.44 3.18 0.44 88 TR_XM_MaxWHORU 2943 1.38 3.18 0.36 89 XM_SPF_SoftFail 2874 1.75 3.10 0.99 90 T_XMDrugObfuBody_08 2646 2.10 2.86 1.67 91 T_XMHurry_00 2624 1.37 2.83 0.54 92 T_FILL_THIS_FORM_SHORT 2590 1.50 2.80 0.77 93 XMDiploma_00 2455 1.86 2.65 1.41 94 RCVD_IN_VALIDITY_CERTIFIED 2416 4.47 2.61 5.53 95 XM_H_Undi_Recip 2397 1.01 2.59 0.12 96 FROM_EXCESS_BASE64 2382 2.24 2.57 2.05 97 XM_UB50 2341 1.47 2.53 0.87 98 T_TooManySym_01 2311 6.24 2.49 8.37 99 XM_URI_RBL 2301 1.29 2.48 0.60 100 RELAYCOUNTRY_AU 2270 1.25 2.45 0.56 101 HTML_MIME_NO_HTML_TAG 2223 2.12 2.40 1.95 102 USER_IN_DEF_DKIM_WL 2197 12.61 2.37 18.44 103 XM_B_SpammyWords4 2126 1.24 2.29 0.64 104 TR_XM_Undi_Recip19 2097 0.87 2.26 0.08 105 XMBody_17 2078 1.12 2.24 0.49 106 SpammyFromTLD_02 2074 0.96 2.24 0.24 107 SUSP_UTF8_WORD_SUBJ 2067 0.87 2.23 0.09 108 TM2_M_URI_OPT_OUT 2041 2.20 2.20 2.20 109 HTML_TAG_BALANCE_BODY 1950 1.34 2.10 0.91 110 XMBrknScrpt_02 1911 1.51 2.06 1.20 111 UNDISC_MONEY 1899 0.75 2.05 0.00 112 T_XMDrugObfuBody_00 1894 1.22 2.04 0.74 113 DIET_1 1888 1.14 2.04 0.63 114 XMStockSpam_06 1822 1.83 1.97 1.75 115 SUSP_UTF8_WORD_COMBO 1792 0.79 1.93 0.13 116 TR_XM_NoHeaderRelay 1791 0.89 1.93 0.30 117 XM_B_URI_Unicode 1749 1.78 1.89 1.71 118 TR_XM_PHPDW 1694 0.92 1.83 0.40 119 XM_B_COPY_HTML 1689 1.85 1.82 1.87 120 TR_XM_PHPForged 1688 0.92 1.82 0.40 121 MAILING_LIST_MULTI 1683 2.25 1.82 2.50 122 TR_XM_FormFill2 1658 0.90 1.79 0.40 123 XM_H_PHPOS 1635 0.88 1.76 0.38 124 TR_Sbj_FN_Bdy 1623 0.70 1.75 0.10 125 TR_LOTS_OF_MONEY3 1589 0.95 1.72 0.52 126 T_REMOTE_IMAGE 1558 2.45 1.68 2.88 127 XM_DK_Undo_01 1503 1.56 1.62 1.53 128 BAYES_40 1494 3.54 1.61 4.63 129 XMPhish30 1490 1.06 1.61 0.75 130 SpammyFromTLD_01 1463 0.97 1.58 0.62 131 URI_TRY_3LD 1458 0.99 1.57 0.66 132 XM_B_Unsub2 1443 1.35 1.56 1.22 133 ALL_TRUSTED 1383 10.98 1.49 16.38 134 T_STY_INVIS_DIRECT 1312 0.81 1.42 0.46 135 LongTLD 1288 0.65 1.39 0.23 136 MIME_QP_LONG_LINE 1284 2.43 1.39 3.03 137 SHOPIFY_IMG_NOT_RCVD_SFY 1270 0.75 1.37 0.39 138 TR_XM_Undi_Recip2 1218 0.48 1.31 0.01 139 KHOP_HELO_FCRDNS 1206 1.09 1.30 0.97 140 DEAR_FRIEND 1188 0.48 1.28 0.03 141 TR_XM_Undi_RecipCombo2 1187 0.47 1.28 0.00 142 TR_XM_INV_DKIM 1185 0.53 1.28 0.10 143 XMSubMetaI_00 1172 1.14 1.27 1.07 144 BOTNET_NORDNS 1168 0.47 1.26 0.01 145 XMBdyGiftCard01 1165 1.18 1.26 1.14 146 TR_Caps_n_Bayes_99 1163 0.46 1.26 0.01 147 MIME_CHARSET_FARAWAY 1140 0.76 1.23 0.49 148 THIS_AD 1138 0.78 1.23 0.52 149 TR_XM_Base64_M1 1073 0.84 1.16 0.67 150 TR_Mismatch_TLD_02 1065 0.46 1.15 0.06 151 BAYES_20 1060 2.35 1.14 3.04 152 XM_ProductURIs 1039 1.35 1.12 1.47 153 URI_HEX 1034 1.05 1.12 1.01 154 RCVD_IN_PBL 1033 0.81 1.12 0.63 155 XMReplyNow 1027 0.55 1.11 0.24 156 FROM_SUSPICIOUS_NTLD 1019 0.44 1.10 0.06 157 TooManyTo_002 1005 1.80 1.08 2.21 158 RELAYCOUNTRY_GB 1001 0.55 1.08 0.25 159 DKIM_ADSP_CUSTOM_MED 996 0.95 1.08 0.87 160 RDNS_DYNAMIC 990 0.62 1.07 0.37 161 PDS_RDNS_DYNAMIC_FP 978 0.43 1.06 0.07 162 XM_H_Long_From02 961 1.07 1.04 1.09 163 XMSlimDrugH 959 0.89 1.04 0.81 164 XMBody_78 959 0.49 1.04 0.18 165 TVD_RCVD_IP 951 1.02 1.03 1.02 166 TooManyTo_003 946 1.04 1.02 1.05 167 XM_OfRef7 941 0.46 1.02 0.15 168 URI_NOVOWEL 937 1.05 1.01 1.08 169 TooManyTo_004 922 0.90 1.00 0.84 170 RCVD_IN_XBL 917 0.37 0.99 0.02 171 XMGenDplmaNmb 908 0.77 0.98 0.65 172 XM_B_REG_HTML 902 0.52 0.97 0.26 173 TooManyTo_005 900 0.80 0.97 0.70 174 TR_XM_Undi_Recip11 894 0.37 0.97 0.03 175 TR_XM_RelayPhish 892 0.38 0.96 0.05 176 XM_UB60 889 0.38 0.96 0.05 177 XM_B_SEO 885 0.57 0.96 0.35 178 TR_XM_FormFill 874 0.35 0.94 0.01 179 TM2_M_OBFU_COMMENT 867 0.88 0.94 0.85 180 BOUNCE_MESSAGE 853 3.29 0.92 4.64 181 ANY_BOUNCE_MESSAGE 853 3.29 0.92 4.64 182 T_MONEY_PERCENT 852 0.48 0.92 0.23 183 TR_LOTS_OF_MONEY2 852 0.48 0.92 0.23 184 TR_Mismatch_TLD_01 852 0.49 0.92 0.24 185 TR_XM_Undi_Recip6 840 0.33 0.91 0.00 186 XM_B_Phish66 835 0.52 0.90 0.31 187 XM_SendGrid 823 1.07 0.89 1.18 188 MPART_ALT_DIFF_COUNT 822 0.53 0.89 0.32 189 NML_ADSP_CUSTOM_MED 822 0.66 0.89 0.53 190 XM_HighProb1 796 0.31 0.86 0.01 191 HELO_DYNAMIC_SPLIT_IP 786 0.32 0.85 0.01 192 XMPhish14 778 0.59 0.84 0.45 193 XM_UB99 777 0.31 0.84 0.00 194 HOSTED_IMG_MULTI_PUB_01 772 0.34 0.83 0.05 195 TR_XM_Undi_Recip5 765 0.30 0.83 0.00 196 PLING_QUERY 763 0.61 0.82 0.49 197 TR_XM_Undi_RecipCombo3 762 0.30 0.82 0.00 198 XM_DIRTYINTL 750 0.34 0.81 0.08 199 XM_GoogleGroups 748 1.05 0.81 1.19 200 HTML_FONT_FACE_BAD 742 0.81 0.80 0.82 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 135515 87.02 93.76 83.18 2 RELAYCOUNTRY_US 129830 81.65 85.09 79.69 3 DKIM_SIGNED 125074 81.09 88.67 76.77 4 XM_DK_Pass 123440 79.07 84.87 75.77 5 DKIM_VALID 122546 78.40 83.99 75.22 6 XM_B_Unicode 115146 75.06 82.77 70.68 7 DKIM_VALID_AU 104960 66.17 69.23 64.43 8 BAYES_50 96412 50.73 35.86 59.18 9 XMListUnsubscribeExists 87008 60.87 74.00 53.41 10 DCC_CHECK_NEGATIVE 82582 39.68 20.33 50.69 11 DCC_CHECK 80291 60.13 79.21 49.28 12 XM_B_Unicode3 75350 48.16 51.51 46.25 13 XM_B_SpammyWords 74912 54.72 70.09 45.98 14 RCVD_IN_MSPIKE_H2 57870 36.97 39.51 35.52 15 HTML_FONT_LOW_CONTRAST 52854 35.18 40.00 32.44 16 LOC_TINY_FONT_1 51590 39.04 52.01 31.67 17 DKIM_VALID_EF 46895 28.47 27.92 28.78 18 FVGT_m_MULTI_ODD 45053 28.86 30.97 27.65 19 XMSubLong 38849 22.78 20.92 23.85 20 T_TM2_M_HEADER_IN_MSG 36506 20.87 18.17 22.41 21 XM_B_SpammyWords2 34431 28.94 42.68 21.13 22 T_KAM_HTML_FONT_INVALID 33854 24.00 29.67 20.78 23 MIME_HTML_ONLY 32815 22.21 25.86 20.14 24 USER_IN_DEF_DKIM_WL 30038 12.61 2.37 18.44 25 ALL_TRUSTED 26680 10.98 1.49 16.38 26 XM_Multi_Part_URI 25754 19.07 24.82 15.81 27 TR_XM_DK_Unsub 22741 16.00 19.59 13.96 28 UNPARSEABLE_RELAY 20136 14.11 17.18 12.36 29 BAYES_60 18262 10.54 9.37 11.21 30 FSL_BULK_SIG 16209 9.65 9.11 9.95 31 XM_Evil_Numbers_Gen 16171 9.24 8.03 9.93 32 BAYES_00 16077 6.49 0.56 9.87 33 XM_B_Unsub 16046 11.32 13.91 9.85 34 XM_DKIMWhitelistDomains 15321 6.02 0.06 9.40 35 T_TooManySym_01 13643 6.24 2.49 8.37 36 TR_XM_DK_Bayes 12222 4.96 0.50 7.50 37 TR_XM_DK_Bayes1 12139 4.93 0.50 7.45 38 TR_XM_BayesUnsub 12118 9.65 13.54 7.44 39 RCVD_IN_VALIDITY_SAFE 11450 5.86 3.80 7.03 40 XM_B_SpammyWords3 11190 10.58 17.10 6.87 41 LotsOfNums_01 11146 6.88 6.95 6.84 42 TR_XM_DK_Bayes2 10779 4.35 0.37 6.62 43 TR_MAX_INTL_RELAY 10344 10.57 18.00 6.35 44 LOTS_OF_MONEY 10343 8.25 11.59 6.35 45 TooManyTo_001 10314 5.47 3.95 6.33 46 XM_B_PhoneNumber 10166 5.37 3.83 6.24 47 XM_H_GMP 10056 6.53 7.15 6.17 48 HTML_IMAGE_RATIO_02 9841 6.43 7.12 6.04 49 XMSubMetaSx_00 9455 6.01 6.37 5.80 50 IN_ZIMBRA_NJ_WHITELIST 9326 3.67 0.06 5.72 51 RCVD_IN_VALIDITY_CERTIFIED 9015 4.47 2.61 5.53 52 XM_DK_Undo_02 8981 18.30 40.79 5.51 53 XM_H_Long_From01 8874 5.61 5.90 5.45 54 XMStrtUSub 8866 5.25 4.90 5.44 55 XM_UncommonTLD01 8771 5.84 6.65 5.38 56 T_TooManySym_02 8724 3.65 0.64 5.35 57 RCVD_IN_MSPIKE_H3 8355 4.79 4.19 5.13 58 RCVD_IN_MSPIKE_WL 8355 4.79 4.19 5.13 59 HTML_IMAGE_RATIO_04 7853 4.64 4.33 4.82 60 TR_XM_SpammyWords4 7690 6.92 10.80 4.72 61 XM_B_Phish_Phrases 7680 5.31 6.36 4.71 62 ANY_BOUNCE_MESSAGE 7557 3.29 0.92 4.64 63 BOUNCE_MESSAGE 7556 3.29 0.92 4.64 64 BAYES_40 7541 3.54 1.61 4.63 65 MPART_ALT_DIFF 7238 5.31 6.84 4.44 66 INVALID_MSGID 6745 2.74 0.27 4.14 67 RELAYCOUNTRY_META 6582 8.08 15.19 4.04 68 BAYES_99 6485 14.44 32.83 3.98 69 BAYES_80 6359 6.53 11.15 3.90 70 TO_MALFORMED 6208 2.48 0.13 3.81 71 XMNumbers 6130 3.63 3.40 3.76 72 BOTNET_IPINHOSTNAME 5946 6.55 11.66 3.65 73 HTML_IMAGE_RATIO_06 5278 3.28 3.36 3.24 74 BAYES_999 4986 11.17 25.43 3.06 75 BAYES_20 4946 2.35 1.14 3.04 76 MIME_QP_LONG_LINE 4930 2.43 1.39 3.03 77 XM_Body_Dirty_Words 4773 5.28 9.42 2.93 78 T_REMOTE_IMAGE 4694 2.45 1.68 2.88 79 MIME_HTML_MOSTLY 4252 3.07 3.88 2.61 80 XM_CamelCaseFrm001 4234 2.94 3.53 2.60 81 MIME_HTML_ONLY_MULTI 4133 2.96 3.70 2.54 82 TR_XM_SpammyRelay 4088 5.43 10.57 2.51 83 MAILING_LIST_MULTI 4071 2.25 1.82 2.50 84 XM_B_SpammyTLD 4032 2.79 3.35 2.47 85 XMSexyCombo_05 4025 3.05 4.07 2.47 86 BAYES_95 3977 3.91 6.49 2.44 87 XM_PDF 3714 1.59 0.38 2.28 88 TR_XM_DKIM_Undo 3680 12.00 29.13 2.26 89 TooManyTo_002 3604 1.80 1.08 2.21 90 RCVD_IN_IADB_LISTED 3599 1.63 0.62 2.21 91 TM2_M_URI_OPT_OUT 3581 2.20 2.20 2.20 92 HTML_IMAGE_RATIO_08 3533 2.60 3.36 2.17 93 FROM_EXCESS_BASE64 3339 2.24 2.57 2.05 94 RCVD_IN_IADB_SPF 3237 1.47 0.55 1.99 95 TVD_SPACE_RATIO 3218 1.29 0.09 1.98 96 HTML_MIME_NO_HTML_TAG 3184 2.12 2.40 1.95 97 TM2_M_VERY_LONG_WORD 3161 2.76 4.20 1.94 98 IN_HORDE_ADDRESS_BOOK 3094 1.24 0.08 1.90 99 RELAYCOUNTRY_CA 3045 3.24 5.64 1.87 100 XM_B_COPY_HTML 3041 1.85 1.82 1.87 101 T_XMDrugObfuBody_14 2986 2.85 4.63 1.83 102 RCVD_IN_IADB_SENDERID 2915 1.33 0.52 1.79 103 TR_XM_PhishingBody 2895 2.60 4.06 1.78 104 XMGappySubj_01 2864 1.24 0.32 1.76 105 RCVD_IN_IADB_DK 2860 1.31 0.53 1.76 106 BAYES_05 2858 1.31 0.53 1.75 107 XMStockSpam_06 2843 1.83 1.97 1.75 108 XM_B_URI_Unicode 2794 1.78 1.89 1.71 109 TR_XM_UnparsRelay 2740 4.66 9.91 1.68 110 T_XMDrugObfuBody_08 2715 2.10 2.86 1.67 111 UNTRUSTED_Relay 2684 3.05 5.52 1.65 112 DKIM_INVALID 2528 2.69 4.68 1.55 113 T_TooManySym_03 2514 1.05 0.20 1.54 114 XM_DK_Undo_01 2489 1.56 1.62 1.53 115 RCVD_IN_IADB_VOUCHED 2458 1.07 0.29 1.51 116 XMGappySubj_02 2407 0.95 0.04 1.48 117 XM_ProductURIs 2403 1.35 1.12 1.47 118 TR_DCC_Bayes_99 2395 10.07 25.20 1.47 119 BOTNET 2306 4.14 8.93 1.42 120 XMDiploma_00 2293 1.86 2.65 1.41 121 XM_B_Investor 2260 2.46 4.34 1.39 122 TR_XM_SpammyWords5 2168 2.19 3.70 1.33 123 XM_B_Unsub2 1995 1.35 1.56 1.22 124 XMBrknScrpt_02 1948 1.51 2.06 1.20 125 XM_GoogleGroups 1940 1.05 0.81 1.19 126 XM_SendGrid 1922 1.07 0.89 1.18 127 XMBdyGiftCard01 1863 1.18 1.26 1.14 128 XMBody_95 1848 0.76 0.10 1.13 129 RCVD_IN_IADB_OPTIN 1806 0.76 0.16 1.11 130 XM_H_Long_From02 1777 1.07 1.04 1.09 131 URI_NOVOWEL 1759 1.05 1.01 1.08 132 XMSubMetaI_00 1739 1.14 1.27 1.07 133 TR_Symld_Words 1711 0.94 0.74 1.05 134 TooManyTo_003 1704 1.04 1.02 1.05 135 XMSubMetaD_03 1701 0.77 0.28 1.04 136 XM_Combo_Sbj 1673 0.79 0.39 1.03 137 TVD_RCVD_IP 1661 1.02 1.03 1.02 138 URI_HEX 1648 1.05 1.12 1.01 139 XM_SPF_SoftFail 1606 1.75 3.10 0.99 140 KHOP_HELO_FCRDNS 1575 1.09 1.30 0.97 141 T_TVD_MIME_NO_HEADERS 1570 0.65 0.09 0.96 142 XM_H_PHPMailer 1481 0.84 0.71 0.91 143 XM_OfRef6 1481 1.90 3.63 0.91 144 HTML_TAG_BALANCE_BODY 1478 1.34 2.10 0.91 145 XM_UB50 1423 1.47 2.53 0.87 146 DKIM_ADSP_CUSTOM_MED 1422 0.95 1.08 0.87 147 TR_MetaPhish_Combo_01 1412 0.73 0.50 0.87 148 TM2_M_OBFU_COMMENT 1385 0.88 0.94 0.85 149 TooManyTo_004 1371 0.90 1.00 0.84 150 SUBJ_ALL_CAPS 1368 1.75 3.34 0.84 151 HTML_FONT_FACE_BAD 1332 0.81 0.80 0.82 152 XMSlimDrugH 1314 0.89 1.04 0.81 153 TR_XM_DK_SendGrid 1312 0.75 0.64 0.81 154 RCVD_IN_BL_SPAMCOP_NET 1297 3.86 9.24 0.80 155 T_FILL_THIS_FORM_SHORT 1253 1.50 2.80 0.77 156 XMNoVowels 1243 0.67 0.51 0.76 157 XMLngstWrd_00 1234 0.65 0.46 0.76 158 XMPhish30 1218 1.06 1.61 0.75 159 T_XMDrugObfuBody_00 1212 1.22 2.04 0.74 160 XM_B_FormFill 1167 0.46 0.01 0.72 161 TooManyTo_005 1142 0.80 0.97 0.70 162 XM_S_SubURI 1094 0.45 0.06 0.67 163 TR_XM_Base64_M1 1085 0.84 1.16 0.67 164 URI_TRY_3LD 1078 0.99 1.57 0.66 165 XMGenDplmaNmb 1055 0.77 0.98 0.65 166 XM_B_DNDMA 1045 0.60 0.51 0.64 167 XMBSHREFv2 1038 0.54 0.37 0.64 168 MSGID_FROM_MTA_HEADER 1037 0.45 0.12 0.64 169 XM_B_SpammyWords4 1036 1.24 2.29 0.64 170 RCVD_IN_PBL 1034 0.81 1.12 0.63 171 DIET_1 1024 1.14 2.04 0.63 172 AD_PREFS 1023 0.42 0.05 0.63 173 SpammyFromTLD_01 1014 0.97 1.58 0.62 174 T_TooManySym_04 1003 0.41 0.04 0.62 175 XM_URI_RBL 984 1.29 2.48 0.60 176 FORGED_GMAIL_RCVD 942 0.64 0.76 0.58 177 RELAYCOUNTRY_AU 912 1.25 2.45 0.56 178 HTML_TAG_BALANCE_CENTER 904 0.49 0.38 0.55 179 RCVD_IN_PSBL 887 0.57 0.63 0.54 180 T_XMHurry_00 877 1.37 2.83 0.54 181 NML_ADSP_CUSTOM_MED 870 0.66 0.89 0.53 182 THIS_AD 852 0.78 1.23 0.52 183 TR_LOTS_OF_MONEY3 847 0.95 1.72 0.52 184 TR_XM_SPAMCOP 826 3.22 7.99 0.51 185 XMCapTrack 809 0.49 0.47 0.50 186 MIME_CHARSET_FARAWAY 799 0.76 1.23 0.49 187 PLING_QUERY 799 0.61 0.82 0.49 188 XMBody_17 797 1.12 2.24 0.49 189 TRACKER_ID 771 0.31 0.03 0.47 190 HTML_TEXT_INVISIBLE_STYLE 755 0.36 0.18 0.46 191 DKIM_ADSP_NXDOMAIN 752 1.80 4.16 0.46 192 T_STY_INVIS_DIRECT 746 0.81 1.42 0.46 193 TR_XM_SpammyWords2 739 5.20 13.54 0.45 194 XMPhish14 730 0.59 0.84 0.45 195 NO_DNS_FOR_FROM 720 1.44 3.18 0.44 196 XM_ShortIntro_01 692 0.53 0.71 0.42 197 HTTPS_HTTP_MISMATCH 692 0.49 0.61 0.42 198 SUBJ_DOLLARS 678 0.46 0.55 0.42 199 TR_XM_PHPDW 657 0.92 1.83 0.40 200 TR_XM_PHPForged 656 0.92 1.82 0.40 ----------------------------------------------------------------------