Email: 263532 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.35 sec Spam: 92777 Autolearn: 0 AvgScore: 13.68 AvgScanTime: 1.41 sec Ham: 170755 Autolearn: 0 AvgScore: -0.08 AvgScanTime: 1.31 sec Time Spent Running SA: 98.71 hours Time Spent Processing Spam: 36.36 hours Time Spent Processing Ham: 62.34 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 87792 87.33 94.63 83.37 2 DKIM_SIGNED 83292 82.26 89.78 78.18 3 XM_DK_Pass 79868 79.95 86.09 76.61 4 DKIM_VALID 79192 79.36 85.36 76.10 5 RELAYCOUNTRY_US 77325 81.69 83.35 80.80 6 XM_B_Unicode 76522 75.13 82.48 71.13 7 DCC_CHECK 71516 58.09 77.08 47.77 8 XMListUnsubscribeExists 66732 60.79 71.93 54.74 9 DKIM_VALID_AU 64842 66.72 69.89 64.99 10 XM_B_SpammyWords 63185 53.57 68.10 45.67 11 LOC_TINY_FONT_1 48979 38.66 52.79 30.98 12 XM_B_Unicode3 48825 47.83 52.63 45.22 13 XM_DK_Undo_02 39472 18.89 42.55 6.04 14 RCVD_IN_MSPIKE_H2 37376 38.19 40.29 37.05 15 XM_B_SpammyWords2 37177 27.27 40.07 20.31 16 HTML_FONT_LOW_CONTRAST 35819 33.85 38.61 31.27 17 BAYES_99 33096 15.51 35.67 4.55 18 BAYES_50 32888 50.26 35.45 58.31 19 T_KAM_HTML_FONT_INVALID 32521 26.83 35.05 22.37 20 FVGT_m_MULTI_ODD 30501 28.85 32.88 26.66 21 TR_XM_DKIM_Undo 26162 11.42 28.20 2.30 22 DKIM_VALID_EF 26069 28.97 28.10 29.44 23 BAYES_999 25732 12.05 27.74 3.53 24 MIME_HTML_ONLY 24104 22.87 25.98 21.18 25 TR_DCC_Bayes_99 23812 10.08 25.67 1.60 26 XM_Multi_Part_URI 21972 18.67 23.68 15.95 27 XMSubLong 21274 23.12 22.93 23.23 28 DCC_CHECK_NEGATIVE 20772 41.70 22.39 52.20 29 T_TM2_M_HEADER_IN_MSG 19031 22.48 20.51 23.55 30 TR_XM_DK_Unsub 18992 16.77 20.47 14.75 31 UNPARSEABLE_RELAY 16877 14.15 18.19 11.95 32 TR_MAX_INTL_RELAY 15546 10.06 16.76 6.43 33 XM_B_Unsub 15371 11.91 16.57 9.38 34 TR_XM_BayesUnsub 14711 10.46 15.86 7.52 35 RELAYCOUNTRY_META 14645 7.91 15.79 3.64 36 XM_B_SpammyWords3 14447 9.60 15.57 6.36 37 TR_XM_SpammyWords2 11774 4.83 12.69 0.57 38 TR_XM_SpammyRelay 9807 4.96 10.57 1.92 39 XM_Body_Dirty_Words 9365 5.30 10.09 2.69 40 LOTS_OF_MONEY 9347 7.27 10.07 5.74 41 BOTNET_IPINHOSTNAME 9336 5.91 10.06 3.65 42 TR_XM_UnparsRelay 9250 4.60 9.97 1.68 43 BAYES_80 9034 5.94 9.74 3.88 44 RCVD_IN_BL_SPAMCOP_NET 8911 3.91 9.60 0.82 45 FSL_BULK_SIG 8137 9.57 8.77 10.01 46 TR_XM_SpammyWords4 8051 5.67 8.68 4.04 47 BOTNET 7948 3.92 8.57 1.39 48 BAYES_60 7890 9.89 8.50 10.64 49 XMSubMetaSx_00 7050 5.15 7.60 3.82 50 HTML_IMAGE_RATIO_02 7006 6.40 7.55 5.78 51 XM_Evil_Numbers_Gen 6952 8.78 7.49 9.48 52 TR_XM_SPAMCOP 6937 3.00 7.48 0.56 53 XM_B_Phish_Phrases 6660 5.69 7.18 4.88 54 MPART_ALT_DIFF 6616 5.67 7.13 4.88 55 XM_UncommonTLD01 6165 5.77 6.64 5.29 56 RCVD_IN_VALIDITY_RPBL 6021 2.38 6.49 0.14 57 LotsOfNums_01 5893 6.91 6.35 7.21 58 RELAYCOUNTRY_CA 5724 3.11 6.17 1.44 59 BAYES_95 5697 3.81 6.14 2.54 60 UNTRUSTED_Relay 5620 3.28 6.06 1.77 61 XM_H_GMP 5433 6.21 5.86 6.40 62 T_XMDrugObfuBody_14 5216 3.37 5.62 2.15 63 XMSexyCombo_05 4947 2.75 5.33 1.35 64 XM_H_Long_From01 4784 5.24 5.16 5.28 65 XM_B_Investor 4223 2.45 4.55 1.30 66 DKIM_INVALID 4100 2.90 4.42 2.08 67 XM_B_PhoneNumber 4015 5.69 4.33 6.43 68 HTML_IMAGE_RATIO_04 3870 4.68 4.17 4.96 69 MIME_HTML_ONLY_MULTI 3717 3.17 4.01 2.71 70 MIME_HTML_MOSTLY 3636 2.94 3.92 2.42 71 XMStrtUSub 3590 5.51 3.87 6.40 72 TR_XM_PhishingBody 3503 2.35 3.78 1.57 73 HTML_IMAGE_RATIO_08 3408 2.73 3.67 2.21 74 XM_B_SpammyTLD 3401 3.04 3.67 2.69 75 XM_OfRef6 3338 1.85 3.60 0.90 76 XM_CamelCaseFrm001 3292 2.98 3.55 2.67 77 TooManyTo_001 3050 4.87 3.29 5.72 78 HTML_IMAGE_RATIO_06 2972 3.01 3.20 2.91 79 RCVD_IN_MSPIKE_H3 2887 4.53 3.11 5.31 80 RCVD_IN_MSPIKE_WL 2887 4.53 3.11 5.31 81 XM_SPF_SoftFail 2877 1.93 3.10 1.29 82 DKIM_ADSP_NXDOMAIN 2783 1.37 3.00 0.48 83 TM2_M_VERY_LONG_WORD 2773 2.13 2.99 1.67 84 RCVD_IN_VALIDITY_SAFE 2603 4.60 2.81 5.57 85 XM_URI_RBL 2471 1.34 2.66 0.62 86 NO_DNS_FOR_FROM 2436 1.22 2.63 0.45 87 TR_XM_SpammyWords5 2421 1.94 2.61 1.58 88 TR_XM_MaxWHORU 2421 1.16 2.61 0.38 89 T_XMDrugObfuBody_08 2383 1.81 2.57 1.39 90 TR_XM_NoHeaderRelay 2322 1.05 2.50 0.26 91 XM_B_SpammyWords4 2255 1.52 2.43 1.03 92 RELAYCOUNTRY_AU 2255 1.16 2.43 0.47 93 ALL_TRUSTED 2227 10.93 2.40 15.57 94 RCVD_IN_VALIDITY_CERTIFIED 2208 3.47 2.38 4.07 95 TM2_M_URI_OPT_OUT 2199 2.11 2.37 1.96 96 T_XMHurry_00 2196 1.34 2.37 0.78 97 XMBody_17 2147 1.20 2.31 0.60 98 XMDiploma_00 2112 1.56 2.28 1.17 99 MAILING_LIST_MULTI 2085 2.25 2.25 2.25 100 USER_IN_DEF_DKIM_WL 2077 12.74 2.24 18.44 101 XM_UB50 2053 1.46 2.21 1.05 102 SUSP_UTF8_WORD_COMBO 2013 0.80 2.17 0.06 103 XM_B_Unsub2 2000 1.45 2.16 1.07 104 XMNumbers 1999 3.46 2.15 4.18 105 SUSP_UTF8_WORD_SUBJ 1999 0.77 2.15 0.03 106 FROM_EXCESS_BASE64 1978 2.43 2.13 2.60 107 XM_B_COPY_HTML 1930 1.52 2.08 1.21 108 XM_DK_Undo_01 1891 1.77 2.04 1.63 109 LongTLD 1886 0.91 2.03 0.30 110 XM_B_URI_Unicode 1816 1.70 1.96 1.56 111 DIET_1 1810 1.03 1.95 0.53 112 SpammyFromTLD_02 1806 0.86 1.95 0.28 113 SUBJ_ALL_CAPS 1722 1.18 1.86 0.81 114 T_REMOTE_IMAGE 1680 2.85 1.81 3.41 115 XMStockSpam_06 1667 1.72 1.80 1.68 116 T_FILL_THIS_FORM_SHORT 1659 1.07 1.79 0.68 117 T_TooManySym_01 1650 5.59 1.78 7.66 118 XMBrknScrpt_02 1643 1.32 1.77 1.08 119 T_XMDrugObfuBody_00 1602 0.94 1.73 0.51 120 XMPhish30 1558 1.02 1.68 0.66 121 HTML_MIME_NO_HTML_TAG 1557 1.69 1.68 1.70 122 SpammyFromTLD_01 1541 1.01 1.66 0.66 123 XM_UB99 1511 0.58 1.63 0.01 124 BAYES_40 1449 3.78 1.56 4.98 125 BOTNET_NORDNS 1410 0.54 1.52 0.01 126 MIME_QP_LONG_LINE 1388 2.86 1.50 3.60 127 URI_NOVOWEL 1352 1.45 1.46 1.44 128 TR_XM_PHPForged 1307 0.63 1.41 0.20 129 URI_HEX 1295 1.22 1.40 1.12 130 TR_XM_PHPDW 1281 0.61 1.38 0.19 131 TR_XM_FormFill2 1259 0.61 1.36 0.20 132 RCVD_IN_PSBL 1253 0.81 1.35 0.52 133 T_STY_INVIS_DIRECT 1244 0.74 1.34 0.41 134 XM_H_PHPOS 1235 0.59 1.33 0.19 135 XMReplyNow 1191 0.59 1.28 0.22 136 SHOPIFY_IMG_NOT_RCVD_SFY 1186 0.66 1.28 0.32 137 XMBdyGiftCard01 1183 0.95 1.28 0.77 138 XM_B_DNDMA 1173 0.86 1.26 0.64 139 KHOP_HELO_FCRDNS 1148 1.17 1.24 1.13 140 TR_Symld_Words 1146 1.19 1.24 1.17 141 XM_DIRTYINTL 1145 0.49 1.23 0.08 142 TR_XM_INV_DKIM 1139 0.60 1.23 0.26 143 TM2_M_OBFU_COMMENT 1102 0.92 1.19 0.77 144 XM_SendGrid 1070 1.13 1.15 1.12 145 RELAYCOUNTRY_RU 1056 0.42 1.14 0.03 146 XM_UB999 1051 0.40 1.13 0.01 147 XMSubMetaI_00 1050 0.96 1.13 0.87 148 XM_ProductURIs 1049 1.33 1.13 1.44 149 HTML_TAG_BALANCE_BODY 1044 0.83 1.13 0.67 150 XM_HighProb1 1037 0.40 1.12 0.01 151 BAYES_20 1006 2.62 1.08 3.46 152 TR_LOTS_OF_MONEY3 1002 0.58 1.08 0.31 153 TM2_M_BODY_EMPTY 991 0.57 1.07 0.30 154 XM_B_SEO 975 0.53 1.05 0.24 155 XMEmptyBody_01 969 0.43 1.04 0.10 156 XM_B_REG_HTML 908 0.52 0.98 0.27 157 XMSlimDrugH 908 0.60 0.98 0.40 158 XM_H_Long_From02 905 0.95 0.98 0.94 159 T_Symld_Words_02 905 0.57 0.98 0.35 160 THIS_AD 899 0.62 0.97 0.44 161 TR_LOTS_OF_MONEY2 899 0.49 0.97 0.23 162 T_MONEY_PERCENT 899 0.49 0.97 0.23 163 HOSTED_IMG_MULTI_PUB_01 893 0.35 0.96 0.01 164 XMBody_78 893 0.52 0.96 0.28 165 RELAYCOUNTRY_GB 889 0.54 0.96 0.31 166 DKIM_ADSP_CUSTOM_MED 889 0.93 0.96 0.91 167 MPART_ALT_DIFF_COUNT 883 0.64 0.95 0.46 168 XM_H_Undi_Recip 865 0.42 0.93 0.14 169 TR_XM_FormFill 852 0.33 0.92 0.01 170 URI_TRY_3LD 842 0.72 0.91 0.62 171 RELAYCOUNTRY_FR 835 0.45 0.90 0.20 172 TR_XM_SEO4 832 0.36 0.90 0.07 173 XM_H_USPS_Spoof 832 0.34 0.90 0.03 174 XM_GoogleGroups 832 1.13 0.90 1.26 175 MIME_CHARSET_FARAWAY 820 0.56 0.88 0.39 176 XMClaimOffer 812 0.48 0.88 0.26 177 TR_XM_InvalidRelay 803 0.31 0.87 0.01 178 FROM_SUSPICIOUS_NTLD 796 0.34 0.86 0.06 179 TR_Mismatch_TLD_01 783 0.47 0.84 0.26 180 XMSubMetaSxObfu_03 783 0.53 0.84 0.35 181 RCVD_IN_PBL 776 0.65 0.84 0.55 182 TR_XM_DK_SendGrid 773 0.85 0.83 0.86 183 XM_OfRef7 767 0.39 0.83 0.15 184 RELAYCOUNTRY_NL 766 0.34 0.83 0.08 185 T_PDS_OTHER_BAD_TLD 749 0.42 0.81 0.21 186 HTTPS_HTTP_MISMATCH 748 0.57 0.81 0.44 187 TR_Mismatch_TLD_02 746 0.33 0.80 0.08 188 TR_XM_Base64_M1 745 0.86 0.80 0.89 189 NML_ADSP_CUSTOM_MED 744 0.67 0.80 0.60 190 J_POPCORN_WO_D 742 0.51 0.80 0.35 191 XMGenDplmaNmb 738 0.61 0.80 0.51 192 XMHTMLBadTable_001 736 0.44 0.79 0.25 193 HTML_SHORT_LINK_IMG_1 721 0.32 0.78 0.07 194 PLING_QUERY 718 0.77 0.77 0.77 195 TR_XM_RelayPhish 709 0.30 0.76 0.05 196 XM_B_Phish66 704 0.46 0.76 0.30 197 RCVD_IN_IADB_LISTED 704 2.12 0.76 2.85 198 XM_H_PHPMailer 686 0.65 0.74 0.60 199 XM_UB60 680 0.30 0.73 0.07 200 BAYES_05 677 1.45 0.73 1.83 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142359 87.33 94.63 83.37 2 RELAYCOUNTRY_US 137964 81.69 83.35 80.80 3 DKIM_SIGNED 133491 82.26 89.78 78.18 4 XM_DK_Pass 130822 79.95 86.09 76.61 5 DKIM_VALID 129941 79.36 85.36 76.10 6 XM_B_Unicode 121462 75.13 82.48 71.13 7 DKIM_VALID_AU 110980 66.72 69.89 64.99 8 BAYES_50 99568 50.26 35.45 58.31 9 XMListUnsubscribeExists 93474 60.79 71.93 54.74 10 DCC_CHECK_NEGATIVE 89127 41.70 22.39 52.20 11 DCC_CHECK 81578 58.09 77.08 47.77 12 XM_B_SpammyWords 77984 53.57 68.10 45.67 13 XM_B_Unicode3 77220 47.83 52.63 45.22 14 RCVD_IN_MSPIKE_H2 63258 38.19 40.29 37.05 15 HTML_FONT_LOW_CONTRAST 53389 33.85 38.61 31.27 16 LOC_TINY_FONT_1 52895 38.66 52.79 30.98 17 DKIM_VALID_EF 50278 28.97 28.10 29.44 18 FVGT_m_MULTI_ODD 45516 28.85 32.88 26.66 19 T_TM2_M_HEADER_IN_MSG 40219 22.48 20.51 23.55 20 XMSubLong 39660 23.12 22.93 23.23 21 T_KAM_HTML_FONT_INVALID 38190 26.83 35.05 22.37 22 MIME_HTML_ONLY 36158 22.87 25.98 21.18 23 XM_B_SpammyWords2 34675 27.27 40.07 20.31 24 USER_IN_DEF_DKIM_WL 31486 12.74 2.24 18.44 25 XM_Multi_Part_URI 27234 18.67 23.68 15.95 26 ALL_TRUSTED 26581 10.93 2.40 15.57 27 TR_XM_DK_Unsub 25190 16.77 20.47 14.75 28 UNPARSEABLE_RELAY 20410 14.15 18.19 11.95 29 BAYES_60 18168 9.89 8.50 10.64 30 FSL_BULK_SIG 17091 9.57 8.77 10.01 31 BAYES_00 16709 6.54 0.58 9.79 32 XM_Evil_Numbers_Gen 16182 8.78 7.49 9.48 33 XM_B_Unsub 16015 11.91 16.57 9.38 34 XM_DKIMWhitelistDomains 15419 5.87 0.07 9.03 35 T_TooManySym_01 13076 5.59 1.78 7.66 36 TR_XM_DK_Bayes 12859 5.05 0.50 7.53 37 TR_XM_BayesUnsub 12843 10.46 15.86 7.52 38 TR_XM_DK_Bayes1 12746 5.01 0.49 7.46 39 LotsOfNums_01 12305 6.91 6.35 7.21 40 TR_XM_DK_Bayes2 11370 4.45 0.37 6.66 41 TR_MAX_INTL_RELAY 10972 10.06 16.76 6.43 42 XM_B_PhoneNumber 10972 5.69 4.33 6.43 43 XM_H_GMP 10927 6.21 5.86 6.40 44 XMStrtUSub 10923 5.51 3.87 6.40 45 XM_B_SpammyWords3 10856 9.60 15.57 6.36 46 XM_DK_Undo_02 10318 18.89 42.55 6.04 47 HTML_IMAGE_RATIO_02 9870 6.40 7.55 5.78 48 LOTS_OF_MONEY 9806 7.27 10.07 5.74 49 TooManyTo_001 9771 4.87 3.29 5.72 50 IN_ZIMBRA_NJ_WHITELIST 9516 3.63 0.05 5.57 51 RCVD_IN_VALIDITY_SAFE 9514 4.60 2.81 5.57 52 RCVD_IN_MSPIKE_H3 9059 4.53 3.11 5.31 53 RCVD_IN_MSPIKE_WL 9059 4.53 3.11 5.31 54 XM_UncommonTLD01 9029 5.77 6.64 5.29 55 XM_H_Long_From01 9024 5.24 5.16 5.28 56 BAYES_40 8507 3.78 1.56 4.98 57 HTML_IMAGE_RATIO_04 8472 4.68 4.17 4.96 58 XM_B_Phish_Phrases 8340 5.69 7.18 4.88 59 MPART_ALT_DIFF 8333 5.67 7.13 4.88 60 T_TooManySym_02 7861 3.17 0.55 4.60 61 BAYES_99 7773 15.51 35.67 4.55 62 XMNumbers 7132 3.46 2.15 4.18 63 INVALID_MSGID 7032 2.74 0.20 4.12 64 RCVD_IN_VALIDITY_CERTIFIED 6949 3.47 2.38 4.07 65 TR_XM_SpammyWords4 6901 5.67 8.68 4.04 66 BOUNCE_MESSAGE 6766 2.76 0.54 3.96 67 ANY_BOUNCE_MESSAGE 6766 2.76 0.54 3.96 68 BAYES_80 6621 5.94 9.74 3.88 69 XMSubMetaSx_00 6528 5.15 7.60 3.82 70 BOTNET_IPINHOSTNAME 6236 5.91 10.06 3.65 71 TO_MALFORMED 6223 2.36 0.01 3.64 72 RELAYCOUNTRY_META 6209 7.91 15.79 3.64 73 MIME_QP_LONG_LINE 6147 2.86 1.50 3.60 74 BAYES_999 6034 12.05 27.74 3.53 75 BAYES_20 5910 2.62 1.08 3.46 76 T_REMOTE_IMAGE 5821 2.85 1.81 3.41 77 HTML_IMAGE_RATIO_06 4970 3.01 3.20 2.91 78 RCVD_IN_IADB_LISTED 4872 2.12 0.76 2.85 79 MIME_HTML_ONLY_MULTI 4629 3.17 4.01 2.71 80 XM_Body_Dirty_Words 4600 5.30 10.09 2.69 81 XM_B_SpammyTLD 4599 3.04 3.67 2.69 82 XM_CamelCaseFrm001 4566 2.98 3.55 2.67 83 XM_PDF 4498 1.84 0.37 2.63 84 FROM_EXCESS_BASE64 4436 2.43 2.13 2.60 85 BAYES_95 4343 3.81 6.14 2.54 86 RCVD_IN_IADB_SPF 4303 1.85 0.62 2.52 87 MIME_HTML_MOSTLY 4125 2.94 3.92 2.42 88 TR_XM_DKIM_Undo 3930 11.42 28.20 2.30 89 RCVD_IN_IADB_SENDERID 3851 1.67 0.58 2.26 90 MAILING_LIST_MULTI 3840 2.25 2.25 2.25 91 RCVD_IN_IADB_DK 3804 1.65 0.59 2.23 92 HTML_IMAGE_RATIO_08 3781 2.73 3.67 2.21 93 T_XMDrugObfuBody_14 3668 3.37 5.62 2.15 94 DKIM_INVALID 3550 2.90 4.42 2.08 95 TM2_M_URI_OPT_OUT 3351 2.11 2.37 1.96 96 TooManyTo_002 3337 1.48 0.61 1.95 97 RCVD_IN_IADB_VOUCHED 3292 1.39 0.41 1.93 98 TR_XM_SpammyRelay 3275 4.96 10.57 1.92 99 T_TooManySym_03 3145 1.24 0.13 1.84 100 BAYES_05 3132 1.45 0.73 1.83 101 IN_HORDE_ADDRESS_BOOK 3045 1.18 0.07 1.78 102 UNTRUSTED_Relay 3022 3.28 6.06 1.77 103 HTML_MIME_NO_HTML_TAG 2906 1.69 1.68 1.70 104 TR_XM_UnparsRelay 2875 4.60 9.97 1.68 105 XMStockSpam_06 2864 1.72 1.80 1.68 106 TM2_M_VERY_LONG_WORD 2851 2.13 2.99 1.67 107 XM_DK_Undo_01 2779 1.77 2.04 1.63 108 XMGappySubj_01 2767 1.13 0.22 1.62 109 TR_DCC_Bayes_99 2740 10.08 25.67 1.60 110 TR_XM_SpammyWords5 2699 1.94 2.61 1.58 111 TR_XM_PhishingBody 2688 2.35 3.78 1.57 112 XM_B_URI_Unicode 2659 1.70 1.96 1.56 113 TVD_SPACE_RATIO 2593 1.04 0.17 1.52 114 RELAYCOUNTRY_CA 2463 3.11 6.17 1.44 115 URI_NOVOWEL 2458 1.45 1.46 1.44 116 XM_ProductURIs 2452 1.33 1.13 1.44 117 T_XMDrugObfuBody_08 2382 1.81 2.57 1.39 118 BOTNET 2373 3.92 8.57 1.39 119 XMSexyCombo_05 2301 2.75 5.33 1.35 120 RCVD_IN_IADB_OPTIN 2279 0.94 0.22 1.33 121 XMGappySubj_02 2266 0.87 0.04 1.33 122 XM_B_Investor 2226 2.45 4.55 1.30 123 XM_SPF_SoftFail 2196 1.93 3.10 1.29 124 XM_GoogleGroups 2147 1.13 0.90 1.26 125 XM_B_COPY_HTML 2063 1.52 2.08 1.21 126 XMDiploma_00 2000 1.56 2.28 1.17 127 TR_Symld_Words 1994 1.19 1.24 1.17 128 T_TVD_MIME_NO_HEADERS 1955 0.75 0.02 1.14 129 KHOP_HELO_FCRDNS 1929 1.17 1.24 1.13 130 XM_SendGrid 1912 1.13 1.15 1.12 131 URI_HEX 1907 1.22 1.40 1.12 132 XMBrknScrpt_02 1846 1.32 1.77 1.08 133 XM_B_Unsub2 1825 1.45 2.16 1.07 134 XM_UB50 1788 1.46 2.21 1.05 135 XM_B_SpammyWords4 1757 1.52 2.43 1.03 136 TooManyTo_003 1716 0.85 0.55 1.00 137 TVD_RCVD_IP 1709 0.85 0.58 1.00 138 XM_H_Long_From02 1607 0.95 0.98 0.94 139 TR_MetaPhish_Combo_01 1584 0.80 0.56 0.93 140 HTML_EXTRA_CLOSE 1581 0.62 0.05 0.93 141 DKIM_ADSP_CUSTOM_MED 1555 0.93 0.96 0.91 142 XM_OfRef6 1534 1.85 3.60 0.90 143 TR_XM_Base64_M1 1518 0.86 0.80 0.89 144 XMSubMetaI_00 1483 0.96 1.13 0.87 145 TR_XM_DK_SendGrid 1468 0.85 0.83 0.86 146 XMBody_95 1456 0.58 0.07 0.85 147 RCVD_IN_BL_SPAMCOP_NET 1406 3.91 9.60 0.82 148 SUBJ_ALL_CAPS 1384 1.18 1.86 0.81 149 TooManyTo_004 1364 0.70 0.53 0.80 150 T_XMHurry_00 1330 1.34 2.37 0.78 151 XMBdyGiftCard01 1321 0.95 1.28 0.77 152 XMNoVowels 1318 0.75 0.70 0.77 153 TM2_M_OBFU_COMMENT 1311 0.92 1.19 0.77 154 PLING_QUERY 1309 0.77 0.77 0.77 155 USER_IN_WHITELIST 1229 0.47 0.00 0.72 156 USER_IN_WELCOMELIST 1229 0.47 0.00 0.72 157 TooManyTo_005 1205 0.64 0.51 0.71 158 XM_H_OutlookMailer 1164 0.46 0.05 0.68 159 T_FILL_THIS_FORM_SHORT 1153 1.07 1.79 0.68 160 HTML_TAG_BALANCE_BODY 1140 0.83 1.13 0.67 161 SpammyFromTLD_01 1123 1.01 1.66 0.66 162 XMPhish30 1119 1.02 1.68 0.66 163 XM_B_DNDMA 1093 0.86 1.26 0.64 164 URI_TRY_3LD 1063 0.72 0.91 0.62 165 XMBSHREFv2 1061 0.53 0.35 0.62 166 XM_URI_RBL 1060 1.34 2.66 0.62 167 XM_H_PHPMailer 1031 0.65 0.74 0.60 168 XMBody_17 1025 1.20 2.31 0.60 169 NML_ADSP_CUSTOM_MED 1016 0.67 0.80 0.60 170 FORGED_GMAIL_RCVD 1010 0.60 0.63 0.59 171 TR_XM_SpammyWords2 967 4.83 12.69 0.57 172 TR_XM_SPAMCOP 957 3.00 7.48 0.56 173 XM_B_FormFill 947 0.36 0.01 0.55 174 SUBJ_DOLLARS 942 0.57 0.60 0.55 175 RCVD_IN_PBL 934 0.65 0.84 0.55 176 T_TooManySym_04 913 0.36 0.04 0.53 177 DIET_1 909 1.03 1.95 0.53 178 RCVD_IN_PSBL 889 0.81 1.35 0.52 179 XMLngstWrd_00 880 0.49 0.44 0.52 180 XMGenDplmaNmb 864 0.61 0.80 0.51 181 T_XMDrugObfuBody_00 864 0.94 1.73 0.51 182 XM_Nigeria_01 842 0.54 0.62 0.49 183 DKIM_ADSP_NXDOMAIN 827 1.37 3.00 0.48 184 XM_S_SubURI 808 0.33 0.06 0.47 185 RELAYCOUNTRY_AU 803 1.16 2.43 0.47 186 MPART_ALT_DIFF_COUNT 794 0.64 0.95 0.46 187 NO_DNS_FOR_FROM 773 1.22 2.63 0.45 188 XMCapTrack 764 0.46 0.50 0.45 189 HTTPS_HTTP_MISMATCH 755 0.57 0.81 0.44 190 THIS_AD 746 0.62 0.97 0.44 191 HTML_FONT_FACE_BAD 737 0.47 0.53 0.43 192 XM_ShortIntro_01 725 0.45 0.49 0.42 193 T_STY_INVIS_DIRECT 707 0.74 1.34 0.41 194 XMLngstWrd_01 690 0.40 0.38 0.40 195 HTML_IMAGE_ONLY_32 681 0.30 0.12 0.40 196 XMSlimDrugH 679 0.60 0.98 0.40 197 MIME_CHARSET_FARAWAY 667 0.56 0.88 0.39 198 BASE64_LENGTH_79_INF 656 0.28 0.10 0.38 199 HTML_IMAGE_ONLY_20 646 0.43 0.52 0.38 200 TR_XM_MaxWHORU 643 1.16 2.61 0.38 ----------------------------------------------------------------------