Email: 261146 Autolearn: 0 AvgScore: 5.06 AvgScanTime: 1.38 sec Spam: 94275 Autolearn: 0 AvgScore: 13.91 AvgScanTime: 1.48 sec Ham: 166871 Autolearn: 0 AvgScore: 0.05 AvgScanTime: 1.32 sec Time Spent Running SA: 100.01 hours Time Spent Processing Spam: 38.69 hours Time Spent Processing Ham: 61.32 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 89623 87.72 95.07 83.57 2 DKIM_SIGNED 85115 82.16 90.28 77.57 3 XM_DK_Pass 81880 79.93 86.85 76.03 4 RELAYCOUNTRY_US 81515 82.48 86.47 80.24 5 DKIM_VALID 81357 79.40 86.30 75.51 6 XM_B_Unicode 80224 76.16 85.10 71.12 7 DCC_CHECK 74553 59.50 79.08 48.43 8 XMListUnsubscribeExists 68269 60.46 72.41 53.70 9 DKIM_VALID_AU 66440 66.51 70.47 64.27 10 XM_B_SpammyWords 65943 54.37 69.95 45.57 11 LOC_TINY_FONT_1 49640 38.93 52.65 31.18 12 XM_B_Unicode3 48860 47.62 51.83 45.25 13 XM_DK_Undo_02 40513 19.23 42.97 5.81 14 RCVD_IN_MSPIKE_H2 39871 39.14 42.29 37.36 15 XM_B_SpammyWords2 38038 27.55 40.35 20.32 16 HTML_FONT_LOW_CONTRAST 36927 33.30 39.17 29.98 17 BAYES_50 33338 49.97 35.36 58.22 18 BAYES_99 32843 15.33 34.84 4.31 19 FVGT_m_MULTI_ODD 30900 27.87 32.78 25.10 20 T_KAM_HTML_FONT_INVALID 30565 24.61 32.42 20.20 21 TR_XM_DKIM_Undo 28272 12.48 29.99 2.58 22 BAYES_999 25546 11.84 27.10 3.22 23 DKIM_VALID_EF 25337 29.09 26.88 30.33 24 TR_DCC_Bayes_99 25202 10.79 26.73 1.79 25 MIME_HTML_ONLY 24873 23.75 26.38 22.27 26 XMSubLong 21610 22.83 22.92 22.77 27 XM_Multi_Part_URI 19887 17.53 21.09 15.51 28 DCC_CHECK_NEGATIVE 19211 40.29 20.38 51.54 29 TR_XM_DK_Unsub 18459 16.49 19.58 14.74 30 T_TM2_M_HEADER_IN_MSG 18258 21.37 19.37 22.51 31 UNPARSEABLE_RELAY 17300 14.36 18.35 12.10 32 TR_MAX_INTL_RELAY 15575 10.08 16.52 6.44 33 XM_B_Unsub 15459 11.71 16.40 9.07 34 TR_XM_BayesUnsub 15035 10.38 15.95 7.23 35 XM_B_SpammyWords3 14249 8.99 15.11 5.53 36 RELAYCOUNTRY_META 13096 7.75 13.89 4.28 37 TR_XM_SpammyWords2 12121 5.25 12.86 0.95 38 RCVD_IN_BL_SPAMCOP_NET 10250 4.46 10.87 0.84 39 LOTS_OF_MONEY 9822 7.41 10.42 5.72 40 BAYES_80 9407 6.03 9.98 3.80 41 TR_XM_UnparsRelay 9338 4.77 9.91 1.87 42 XM_Body_Dirty_Words 9103 5.09 9.66 2.50 43 TR_XM_SpammyRelay 9100 5.19 9.65 2.67 44 TR_XM_SpammyWords4 8841 5.94 9.38 4.01 45 TR_XM_SPAMCOP 8618 3.69 9.14 0.60 46 FSL_BULK_SIG 8592 9.65 9.11 9.95 47 BAYES_60 8431 9.91 8.94 10.45 48 XM_B_Phish_Phrases 8343 6.25 8.85 4.78 49 BOTNET_IPINHOSTNAME 8193 5.68 8.69 3.98 50 BOTNET 7715 3.99 8.18 1.63 51 XM_Evil_Numbers_Gen 7210 9.23 7.65 10.12 52 XMSubMetaSx_00 7153 5.24 7.59 3.92 53 HTML_IMAGE_RATIO_02 6837 6.54 7.25 6.15 54 LotsOfNums_01 6274 7.36 6.65 7.76 55 MPART_ALT_DIFF 6088 5.70 6.46 5.27 56 BAYES_95 5878 3.94 6.23 2.64 57 XM_H_GMP 5827 6.23 6.18 6.25 58 XM_UncommonTLD01 5423 5.48 5.75 5.33 59 T_XMDrugObfuBody_14 5321 3.14 5.64 1.72 60 XM_H_Long_From01 5247 5.61 5.57 5.63 61 XMSexyCombo_05 5174 2.88 5.49 1.41 62 UNTRUSTED_Relay 5100 3.07 5.41 1.75 63 HTML_IMAGE_RATIO_04 4964 4.83 5.27 4.58 64 RELAYCOUNTRY_CA 4882 2.93 5.18 1.66 65 XM_OfRef6 4643 2.54 4.92 1.19 66 RCVD_IN_VALIDITY_RPBL 4290 1.67 4.55 0.05 67 XMStrtUSub 4253 5.53 4.51 6.11 68 XM_B_PhoneNumber 4159 5.64 4.41 6.34 69 TR_XM_PhishingBody 3988 2.75 4.23 1.92 70 DKIM_INVALID 3758 2.76 3.99 2.06 71 XM_CamelCaseFrm001 3692 3.06 3.92 2.57 72 XM_B_Investor 3652 2.26 3.87 1.34 73 RCVD_IN_MSPIKE_WL 3535 4.59 3.75 5.06 74 RCVD_IN_MSPIKE_H3 3535 4.59 3.75 5.06 75 XM_B_SpammyTLD 3522 3.17 3.74 2.85 76 MIME_HTML_ONLY_MULTI 3385 3.31 3.59 3.15 77 XMBody_17 3359 1.66 3.56 0.59 78 TM2_M_VERY_LONG_WORD 3298 2.22 3.50 1.50 79 TooManyTo_001 3154 5.46 3.35 6.66 80 HTML_IMAGE_RATIO_08 3117 2.46 3.31 1.98 81 MIME_HTML_MOSTLY 2995 2.83 3.18 2.63 82 XM_SPF_SoftFail 2822 1.90 2.99 1.29 83 RCVD_IN_VALIDITY_SAFE 2799 4.90 2.97 5.98 84 SUSP_UTF8_WORD_SUBJ 2644 1.02 2.80 0.01 85 HTML_IMAGE_RATIO_06 2628 3.23 2.79 3.48 86 T_XMHurry_00 2598 1.48 2.76 0.76 87 XM_URI_RBL 2556 1.28 2.71 0.48 88 XM_B_SpammyWords4 2537 1.47 2.69 0.77 89 USER_IN_DEF_DKIM_WL 2503 12.44 2.65 17.97 90 TR_XM_NoHeaderRelay 2496 1.14 2.65 0.28 91 TR_XM_SpammyWords5 2493 1.61 2.64 1.02 92 T_XMDrugObfuBody_08 2483 1.91 2.63 1.50 93 DKIM_ADSP_NXDOMAIN 2475 1.27 2.63 0.50 94 TM2_M_URI_OPT_OUT 2457 2.19 2.61 1.96 95 XMNumbers 2377 3.29 2.52 3.72 96 XMDiploma_00 2345 1.84 2.49 1.48 97 RELAYCOUNTRY_AU 2337 1.43 2.48 0.84 98 NO_DNS_FOR_FROM 2325 1.18 2.47 0.45 99 TR_XM_MaxWHORU 2310 1.12 2.45 0.37 100 XM_B_Unsub2 2269 1.60 2.41 1.14 101 FROM_EXCESS_BASE64 2255 2.37 2.39 2.35 102 XM_UB50 2118 1.48 2.25 1.05 103 SpammyFromTLD_02 2102 0.97 2.23 0.26 104 T_FILL_THIS_FORM_SHORT 2067 1.16 2.19 0.57 105 XM_ProductURIs 1946 1.15 2.06 0.64 106 RCVD_IN_VALIDITY_CERTIFIED 1898 3.35 2.01 4.10 107 T_TooManySym_01 1786 5.71 1.89 7.86 108 XMSubMetaI_00 1743 1.19 1.85 0.82 109 MAILING_LIST_MULTI 1740 2.16 1.85 2.34 110 XMStockSpam_06 1739 1.83 1.84 1.82 111 XM_B_URI_Unicode 1722 1.68 1.83 1.60 112 T_REMOTE_IMAGE 1690 2.91 1.79 3.54 113 XMBody_78 1648 0.83 1.75 0.31 114 SUBJ_ALL_CAPS 1608 1.19 1.71 0.91 115 XM_B_DNDMA 1605 1.05 1.70 0.68 116 NORDNS_LOW_CONTRAST 1594 0.64 1.69 0.04 117 DIET_1 1573 1.22 1.67 0.96 118 XM_DK_Undo_01 1566 1.59 1.66 1.55 119 XMBrknScrpt_02 1524 1.39 1.62 1.27 120 XMBdyGiftCard01 1520 1.16 1.61 0.90 121 URI_NOVOWEL 1492 1.40 1.58 1.29 122 RCVD_IN_PSBL 1491 0.90 1.58 0.52 123 SHOPIFY_IMG_NOT_RCVD_SFY 1478 0.80 1.57 0.37 124 XMPhish30 1474 1.14 1.56 0.91 125 MIME_QP_LONG_LINE 1437 2.82 1.52 3.55 126 XM_B_COPY_HTML 1431 1.32 1.52 1.21 127 DEAR_FRIEND 1412 0.59 1.50 0.08 128 HTTPS_HTTP_MISMATCH 1398 0.86 1.48 0.51 129 SpammyFromTLD_01 1371 0.99 1.45 0.73 130 STY_INVIS_DIRECT 1350 0.72 1.43 0.31 131 BAYES_40 1345 3.74 1.43 5.05 132 TM2_M_OBFU_COMMENT 1323 0.94 1.40 0.68 133 ALL_TRUSTED 1321 10.63 1.40 15.85 134 TR_XM_PHPDW 1316 0.67 1.40 0.25 135 HTML_MIME_NO_HTML_TAG 1315 1.70 1.39 1.88 136 XMReplyNow 1280 0.66 1.36 0.27 137 TR_XM_PHPForged 1278 0.65 1.36 0.26 138 TR_XM_FormFill2 1266 0.65 1.34 0.26 139 XM_OfRef7 1250 0.56 1.33 0.12 140 BAYES_20 1246 2.76 1.32 3.57 141 THIS_AD 1244 1.07 1.32 0.93 142 T_XMDrugObfuBody_00 1240 0.81 1.32 0.53 143 XM_H_PHPOS 1228 0.62 1.30 0.24 144 URI_HEX 1220 1.29 1.29 1.29 145 XM_SendGrid 1213 1.25 1.29 1.24 146 XMClaimOffer 1211 0.77 1.28 0.49 147 XM_UB99 1189 0.46 1.26 0.00 148 XM_B_SEO 1168 0.68 1.24 0.37 149 TR_XM_INV_DKIM 1134 0.56 1.20 0.20 150 RCVD_IN_PBL 1116 0.83 1.18 0.63 151 KHOP_HELO_FCRDNS 1108 1.14 1.18 1.12 152 HTML_TAG_BALANCE_BODY 1098 0.93 1.16 0.80 153 XM_DIRTYINTL 1046 0.45 1.11 0.07 154 MPART_ALT_DIFF_COUNT 1024 0.84 1.09 0.70 155 XMPhish14 1012 0.65 1.07 0.41 156 BOTNET_NORDNS 1003 0.40 1.06 0.02 157 LongTLD 1003 0.53 1.06 0.22 158 XM_H_Long_From02 996 1.07 1.06 1.07 159 XMSexyCombo_01 994 0.47 1.05 0.15 160 TR_Mismatch_TLD_02 988 0.44 1.05 0.10 161 TR_Mismatch_TLD_01 978 0.54 1.04 0.26 162 PLING_QUERY 974 0.84 1.03 0.73 163 TR_XM_RelayPhish 964 0.43 1.02 0.09 164 TR_LOTS_OF_MONEY3 960 0.55 1.02 0.29 165 HK_RANDOM_REPLYTO 957 0.54 1.02 0.27 166 XM_B_REG_HTML 957 0.51 1.02 0.23 167 TR_XM_DK_SendGrid 953 0.93 1.01 0.89 168 URI_TRY_3LD 950 0.77 1.01 0.63 169 J_POPCORN_WO_D 921 0.58 0.98 0.36 170 HTML_FONT_TINY_NORDNS 912 0.40 0.97 0.07 171 TR_XM_Base64_M1 912 0.95 0.97 0.93 172 MIME_CHARSET_FARAWAY 904 0.60 0.96 0.39 173 XM_HighProb1 901 0.35 0.96 0.01 174 TR_MetaPhish_Combo_01 899 0.79 0.95 0.70 175 XM_H_Undi_Recip 880 0.44 0.93 0.17 176 HOSTED_IMG_MULTI_PUB_01 874 0.35 0.93 0.02 177 TR_XM_Undi_Recip19 837 0.38 0.89 0.09 178 XMGenDplmaNmb 837 0.72 0.89 0.62 179 XM_B_Phish66 835 0.47 0.89 0.23 180 AC_HTML_NONSENSE_TAGS 817 0.37 0.87 0.09 181 DKIM_ADSP_CUSTOM_MED 814 0.82 0.86 0.79 182 ANY_BOUNCE_MESSAGE 809 2.96 0.86 4.14 183 BOUNCE_MESSAGE 809 2.95 0.86 4.14 184 RDNS_DYNAMIC 797 0.53 0.85 0.35 185 RCVD_IN_XBL 791 0.32 0.84 0.02 186 XM_UB999 790 0.30 0.84 0.00 187 PDS_RDNS_DYNAMIC_FP 775 0.33 0.82 0.06 188 TVD_RCVD_IP 770 0.93 0.82 1.00 189 BAYES_05 768 1.61 0.81 2.05 190 XM_GoogleGroups 766 1.00 0.81 1.11 191 XMSubMetaSxObfu_03 739 0.48 0.78 0.31 192 XM_H_PHPMailer 725 0.81 0.77 0.83 193 RELAYCOUNTRY_FR 720 0.43 0.76 0.24 194 TR_XM_SEO4 713 0.37 0.76 0.14 195 TR_XM_FormFill 707 0.28 0.75 0.02 196 MISSING_HEADERS 705 0.43 0.75 0.25 197 XMPhish08 682 0.45 0.72 0.29 198 TooManyTo_002 678 1.68 0.72 2.22 199 TR_LOTS_OF_MONEY2 676 0.36 0.72 0.15 200 T_MONEY_PERCENT 676 0.36 0.72 0.15 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139460 87.72 95.07 83.57 2 RELAYCOUNTRY_US 133889 82.48 86.47 80.24 3 DKIM_SIGNED 129445 82.16 90.28 77.57 4 XM_DK_Pass 126866 79.93 86.85 76.03 5 DKIM_VALID 126004 79.40 86.30 75.51 6 XM_B_Unicode 118672 76.16 85.10 71.12 7 DKIM_VALID_AU 107245 66.51 70.47 64.27 8 BAYES_50 97157 49.97 35.36 58.22 9 XMListUnsubscribeExists 89618 60.46 72.41 53.70 10 DCC_CHECK_NEGATIVE 86000 40.29 20.38 51.54 11 DCC_CHECK 80819 59.50 79.08 48.43 12 XM_B_SpammyWords 76042 54.37 69.95 45.57 13 XM_B_Unicode3 75502 47.62 51.83 45.25 14 RCVD_IN_MSPIKE_H2 62347 39.14 42.29 37.36 15 LOC_TINY_FONT_1 52025 38.93 52.65 31.18 16 DKIM_VALID_EF 50618 29.09 26.88 30.33 17 HTML_FONT_LOW_CONTRAST 50023 33.30 39.17 29.98 18 FVGT_m_MULTI_ODD 41892 27.87 32.78 25.10 19 XMSubLong 37998 22.83 22.92 22.77 20 T_TM2_M_HEADER_IN_MSG 37556 21.37 19.37 22.51 21 MIME_HTML_ONLY 37162 23.75 26.38 22.27 22 XM_B_SpammyWords2 33905 27.55 40.35 20.32 23 T_KAM_HTML_FONT_INVALID 33700 24.61 32.42 20.20 24 USER_IN_DEF_DKIM_WL 29992 12.44 2.65 17.97 25 ALL_TRUSTED 26445 10.63 1.40 15.85 26 XM_Multi_Part_URI 25884 17.53 21.09 15.51 27 TR_XM_DK_Unsub 24600 16.49 19.58 14.74 28 UNPARSEABLE_RELAY 20189 14.36 18.35 12.10 29 BAYES_60 17443 9.91 8.94 10.45 30 XM_Evil_Numbers_Gen 16888 9.23 7.65 10.12 31 FSL_BULK_SIG 16612 9.65 9.11 9.95 32 BAYES_00 16522 6.53 0.55 9.90 33 XM_DKIMWhitelistDomains 15487 5.98 0.13 9.28 34 XM_B_Unsub 15131 11.71 16.40 9.07 35 T_TooManySym_01 13122 5.71 1.89 7.86 36 LotsOfNums_01 12944 7.36 6.65 7.76 37 TR_XM_DK_Bayes 12427 4.92 0.46 7.45 38 TR_XM_DK_Bayes1 12350 4.89 0.46 7.40 39 TR_XM_BayesUnsub 12067 10.38 15.95 7.23 40 TooManyTo_001 11115 5.46 3.35 6.66 41 TR_XM_DK_Bayes2 10891 4.28 0.31 6.53 42 TR_MAX_INTL_RELAY 10754 10.08 16.52 6.44 43 XM_B_PhoneNumber 10573 5.64 4.41 6.34 44 XM_H_GMP 10433 6.23 6.18 6.25 45 HTML_IMAGE_RATIO_02 10255 6.54 7.25 6.15 46 XMStrtUSub 10190 5.53 4.51 6.11 47 RCVD_IN_VALIDITY_SAFE 9987 4.90 2.97 5.98 48 XM_DK_Undo_02 9693 19.23 42.97 5.81 49 IN_ZIMBRA_NJ_WHITELIST 9612 3.70 0.05 5.76 50 LOTS_OF_MONEY 9537 7.41 10.42 5.72 51 XM_H_Long_From01 9399 5.61 5.57 5.63 52 XM_B_SpammyWords3 9224 8.99 15.11 5.53 53 XM_UncommonTLD01 8893 5.48 5.75 5.33 54 MPART_ALT_DIFF 8791 5.70 6.46 5.27 55 RCVD_IN_MSPIKE_WL 8442 4.59 3.75 5.06 56 RCVD_IN_MSPIKE_H3 8442 4.59 3.75 5.06 57 BAYES_40 8419 3.74 1.43 5.05 58 T_TooManySym_02 8009 3.26 0.53 4.80 59 XM_B_Phish_Phrases 7980 6.25 8.85 4.78 60 HTML_IMAGE_RATIO_04 7647 4.83 5.27 4.58 61 BAYES_99 7195 15.33 34.84 4.31 62 RELAYCOUNTRY_META 7143 7.75 13.89 4.28 63 ANY_BOUNCE_MESSAGE 6908 2.96 0.86 4.14 64 BOUNCE_MESSAGE 6907 2.95 0.86 4.14 65 INVALID_MSGID 6867 2.73 0.29 4.12 66 RCVD_IN_VALIDITY_CERTIFIED 6850 3.35 2.01 4.10 67 TR_XM_SpammyWords4 6684 5.94 9.38 4.01 68 BOTNET_IPINHOSTNAME 6647 5.68 8.69 3.98 69 XMSubMetaSx_00 6534 5.24 7.59 3.92 70 BAYES_80 6347 6.03 9.98 3.80 71 XMNumbers 6202 3.29 2.52 3.72 72 TO_MALFORMED 6193 2.38 0.02 3.71 73 BAYES_20 5958 2.76 1.32 3.57 74 MIME_QP_LONG_LINE 5929 2.82 1.52 3.55 75 T_REMOTE_IMAGE 5900 2.91 1.79 3.54 76 HTML_IMAGE_RATIO_06 5811 3.23 2.79 3.48 77 BAYES_999 5367 11.84 27.10 3.22 78 MIME_HTML_ONLY_MULTI 5257 3.31 3.59 3.15 79 XM_B_SpammyTLD 4749 3.17 3.74 2.85 80 XM_PDF 4585 1.86 0.30 2.75 81 RCVD_IN_IADB_LISTED 4500 1.98 0.71 2.70 82 TR_XM_SpammyRelay 4452 5.19 9.65 2.67 83 BAYES_95 4399 3.94 6.23 2.64 84 MIME_HTML_MOSTLY 4390 2.83 3.18 2.63 85 TR_XM_DKIM_Undo 4312 12.48 29.99 2.58 86 XM_CamelCaseFrm001 4294 3.06 3.92 2.57 87 XM_Body_Dirty_Words 4180 5.09 9.66 2.50 88 RCVD_IN_IADB_SPF 4036 1.77 0.63 2.42 89 FROM_EXCESS_BASE64 3923 2.37 2.39 2.35 90 MAILING_LIST_MULTI 3905 2.16 1.85 2.34 91 TooManyTo_002 3699 1.68 0.72 2.22 92 RCVD_IN_IADB_SENDERID 3691 1.62 0.58 2.21 93 RCVD_IN_IADB_DK 3625 1.60 0.59 2.17 94 DKIM_INVALID 3441 2.76 3.99 2.06 95 BAYES_05 3429 1.61 0.81 2.05 96 T_TooManySym_03 3392 1.35 0.15 2.03 97 HTML_IMAGE_RATIO_08 3303 2.46 3.31 1.98 98 TM2_M_URI_OPT_OUT 3265 2.19 2.61 1.96 99 TR_XM_PhishingBody 3198 2.75 4.23 1.92 100 IN_HORDE_ADDRESS_BOOK 3147 1.24 0.09 1.89 101 HTML_MIME_NO_HTML_TAG 3129 1.70 1.39 1.88 102 TR_XM_UnparsRelay 3128 4.77 9.91 1.87 103 XMGappySubj_01 3081 1.21 0.09 1.85 104 XMStockSpam_06 3037 1.83 1.84 1.82 105 TR_DCC_Bayes_99 2985 10.79 26.73 1.79 106 UNTRUSTED_Relay 2923 3.07 5.41 1.75 107 T_XMDrugObfuBody_14 2873 3.14 5.64 1.72 108 RCVD_IN_IADB_VOUCHED 2816 1.21 0.35 1.69 109 RELAYCOUNTRY_CA 2770 2.93 5.18 1.66 110 BOTNET 2714 3.99 8.18 1.63 111 XM_B_URI_Unicode 2668 1.68 1.83 1.60 112 TVD_SPACE_RATIO 2641 1.05 0.12 1.58 113 XM_DK_Undo_01 2582 1.59 1.66 1.55 114 TM2_M_VERY_LONG_WORD 2511 2.22 3.50 1.50 115 XMGappySubj_02 2508 0.97 0.03 1.50 116 T_XMDrugObfuBody_08 2504 1.91 2.63 1.50 117 XMDiploma_00 2464 1.84 2.49 1.48 118 XMSexyCombo_05 2357 2.88 5.49 1.41 119 TR_Symld_Words 2348 1.13 0.63 1.41 120 XM_B_Investor 2238 2.26 3.87 1.34 121 URI_NOVOWEL 2159 1.40 1.58 1.29 122 XM_SPF_SoftFail 2152 1.90 2.99 1.29 123 URI_HEX 2145 1.29 1.29 1.29 124 XMBrknScrpt_02 2114 1.39 1.62 1.27 125 T_TVD_MIME_NO_HEADERS 2070 0.81 0.05 1.24 126 XM_SendGrid 2061 1.25 1.29 1.24 127 RCVD_IN_IADB_OPTIN 2061 0.88 0.26 1.24 128 XM_B_COPY_HTML 2012 1.32 1.52 1.21 129 XM_OfRef6 1994 2.54 4.92 1.19 130 TooManyTo_003 1952 0.99 0.68 1.17 131 XM_B_Unsub2 1904 1.60 2.41 1.14 132 KHOP_HELO_FCRDNS 1872 1.14 1.18 1.12 133 LOW_PRICE 1872 0.83 0.30 1.12 134 XM_GoogleGroups 1846 1.00 0.81 1.11 135 XM_H_Long_From02 1793 1.07 1.06 1.07 136 XM_UB50 1754 1.48 2.25 1.05 137 HTML_EXTRA_CLOSE 1718 0.69 0.09 1.03 138 TR_XM_SpammyWords5 1707 1.61 2.64 1.02 139 TVD_RCVD_IP 1670 0.93 0.82 1.00 140 DIET_1 1603 1.22 1.67 0.96 141 TR_XM_SpammyWords2 1578 5.25 12.86 0.95 142 THIS_AD 1559 1.07 1.32 0.93 143 TR_XM_Base64_M1 1556 0.95 0.97 0.93 144 TooManyTo_004 1521 0.82 0.66 0.91 145 XMPhish30 1514 1.14 1.56 0.91 146 SUBJ_ALL_CAPS 1512 1.19 1.71 0.91 147 XMBdyGiftCard01 1509 1.16 1.61 0.90 148 TR_XM_DK_SendGrid 1478 0.93 1.01 0.89 149 XMBody_95 1447 0.59 0.11 0.87 150 RELAYCOUNTRY_AU 1402 1.43 2.48 0.84 151 RCVD_IN_BL_SPAMCOP_NET 1395 4.46 10.87 0.84 152 XM_H_PHPMailer 1392 0.81 0.77 0.83 153 XMSubMetaI_00 1370 1.19 1.85 0.82 154 TooManyTo_005 1343 0.75 0.64 0.80 155 HTML_TAG_BALANCE_BODY 1328 0.93 1.16 0.80 156 XMNoVowels 1328 0.69 0.51 0.80 157 DKIM_ADSP_CUSTOM_MED 1316 0.82 0.86 0.79 158 XM_B_SpammyWords4 1290 1.47 2.69 0.77 159 T_XMHurry_00 1274 1.48 2.76 0.76 160 PLING_QUERY 1224 0.84 1.03 0.73 161 SpammyFromTLD_01 1224 0.99 1.45 0.73 162 MPART_ALT_DIFF_COUNT 1173 0.84 1.09 0.70 163 TR_MetaPhish_Combo_01 1167 0.79 0.95 0.70 164 TM2_M_OBFU_COMMENT 1142 0.94 1.40 0.68 165 XMBSHREFv2 1140 0.51 0.21 0.68 166 XM_B_DNDMA 1131 1.05 1.70 0.68 167 USER_IN_WHITELIST 1119 0.43 0.00 0.67 168 USER_IN_WELCOMELIST 1119 0.43 0.00 0.67 169 XM_ProductURIs 1070 1.15 2.06 0.64 170 URI_TRY_3LD 1048 0.77 1.01 0.63 171 RCVD_IN_PBL 1046 0.83 1.18 0.63 172 XMGenDplmaNmb 1042 0.72 0.89 0.62 173 TR_XM_SPAMCOP 1007 3.69 9.14 0.60 174 XMBody_17 981 1.66 3.56 0.59 175 T_FILL_THIS_FORM_SHORT 953 1.16 2.19 0.57 176 T_TooManySym_04 901 0.36 0.03 0.54 177 T_XMDrugObfuBody_00 881 0.81 1.32 0.53 178 XMLngstWrd_00 874 0.44 0.29 0.52 179 RCVD_IN_PSBL 872 0.90 1.58 0.52 180 FORGED_GMAIL_RCVD 870 0.57 0.65 0.52 181 HTML_FONT_FACE_BAD 869 0.57 0.66 0.52 182 XMCapTrack 867 0.43 0.27 0.52 183 XM_B_FormFill 856 0.33 0.01 0.51 184 HTTPS_HTTP_MISMATCH 847 0.86 1.48 0.51 185 DKIM_ADSP_NXDOMAIN 842 1.27 2.63 0.50 186 HTML_IMAGE_ONLY_20 841 0.52 0.54 0.50 187 XMClaimOffer 811 0.77 1.28 0.49 188 NML_ADSP_CUSTOM_MED 803 0.56 0.71 0.48 189 XM_URI_RBL 794 1.28 2.71 0.48 190 XMGppyBdWords 782 0.44 0.39 0.47 191 XM_S_SubURI 766 0.31 0.05 0.46 192 NO_DNS_FOR_FROM 749 1.18 2.47 0.45 193 BASE64_LENGTH_79_INF 746 0.32 0.10 0.45 194 XMSlimDrugH 696 0.46 0.54 0.42 195 XMPhish14 690 0.65 1.07 0.41 196 XMLngstWrd_01 677 0.35 0.25 0.41 197 XMSubNoVowel 664 0.39 0.36 0.40 198 MIME_CHARSET_FARAWAY 658 0.60 0.96 0.39 199 MSGID_FROM_MTA_HEADER 657 0.26 0.04 0.39 200 XM_ShortIntro_01 648 0.42 0.47 0.39 ----------------------------------------------------------------------