Email: 247626 Autolearn: 0 AvgScore: 4.96 AvgScanTime: 1.38 sec Spam: 87305 Autolearn: 0 AvgScore: 13.89 AvgScanTime: 1.43 sec Ham: 160321 Autolearn: 0 AvgScore: 0.10 AvgScanTime: 1.36 sec Time Spent Running SA: 95.22 hours Time Spent Processing Spam: 34.61 hours Time Spent Processing Ham: 60.62 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 83662 87.75 95.83 83.35 2 DKIM_SIGNED 78984 81.26 90.47 76.24 3 XM_DK_Pass 75264 78.93 86.21 74.96 4 RELAYCOUNTRY_US 74856 81.97 85.74 79.92 5 DKIM_VALID 74658 78.33 85.51 74.42 6 XM_B_Unicode 74055 76.63 84.82 72.17 7 DCC_CHECK 69696 60.60 79.83 50.12 8 XMListUnsubscribeExists 65704 62.02 75.26 54.82 9 XM_B_SpammyWords 62182 54.94 71.22 46.07 10 DKIM_VALID_AU 61293 65.86 70.21 63.50 11 LOC_TINY_FONT_1 46748 40.19 53.55 32.92 12 XM_B_Unicode3 46471 50.00 53.23 48.24 13 XM_DK_Undo_02 37300 18.36 42.72 5.09 14 RCVD_IN_MSPIKE_H2 36861 38.62 42.22 36.66 15 XM_B_SpammyWords2 36064 29.01 41.31 22.32 16 HTML_FONT_LOW_CONTRAST 35417 35.10 40.57 32.13 17 BAYES_99 31295 15.26 35.85 4.06 18 BAYES_50 30076 50.25 34.45 58.86 19 T_KAM_HTML_FONT_INVALID 27640 24.53 31.66 20.64 20 FVGT_m_MULTI_ODD 27609 27.41 31.62 25.11 21 TR_XM_DKIM_Undo 27147 12.36 31.09 2.16 22 TR_DCC_Bayes_99 24582 10.94 28.16 1.57 23 BAYES_999 24439 11.89 27.99 3.12 24 MIME_HTML_ONLY 23502 23.21 26.92 21.19 25 DKIM_VALID_EF 21756 27.43 24.92 28.79 26 XMSubLong 19755 23.97 22.63 24.70 27 XM_Multi_Part_URI 19184 17.35 21.97 14.83 28 DCC_CHECK_NEGATIVE 17153 39.20 19.65 49.84 29 TR_XM_DK_Unsub 15837 15.82 18.14 14.56 30 T_TM2_M_HEADER_IN_MSG 15803 20.94 18.10 22.48 31 TR_MAX_INTL_RELAY 14978 10.05 17.16 6.18 32 UNPARSEABLE_RELAY 14212 13.97 16.28 12.71 33 XM_B_Unsub 12879 10.80 14.75 8.65 34 RELAYCOUNTRY_META 12596 7.70 14.43 4.04 35 TR_XM_BayesUnsub 12536 9.49 14.36 6.84 36 XM_B_SpammyWords3 12351 8.78 14.15 5.86 37 TR_XM_SpammyWords2 11631 5.02 13.32 0.50 38 LOTS_OF_MONEY 9468 7.21 10.84 5.23 39 BAYES_80 9209 6.09 10.55 3.67 40 TR_XM_SpammyRelay 8768 5.07 10.04 2.37 41 XM_Body_Dirty_Words 8754 5.11 10.03 2.43 42 BOTNET_IPINHOSTNAME 8477 5.87 9.71 3.78 43 TR_XM_SpammyWords4 8282 5.75 9.49 3.72 44 BOTNET 8078 4.17 9.25 1.40 45 BAYES_60 8060 10.21 9.23 10.74 46 TR_XM_UnparsRelay 7868 4.29 9.01 1.72 47 RCVD_IN_BL_SPAMCOP_NET 7816 3.52 8.95 0.56 48 FSL_BULK_SIG 7100 8.93 8.13 9.36 49 HTML_IMAGE_RATIO_02 7041 6.69 8.06 5.95 50 XM_Evil_Numbers_Gen 6953 10.33 7.96 11.63 51 TR_XM_SPAMCOP 6528 2.86 7.48 0.35 52 XM_B_Phish_Phrases 6248 5.53 7.16 4.64 53 LotsOfNums_01 6113 7.64 7.00 8.00 54 XMSubMetaSx_00 6049 5.73 6.93 5.07 55 XM_UncommonTLD01 5923 5.95 6.78 5.50 56 MPART_ALT_DIFF 5572 5.70 6.38 5.33 57 BAYES_95 5493 3.84 6.29 2.51 58 XM_H_GMP 5201 6.18 5.96 6.30 59 UNTRUSTED_Relay 4960 3.15 5.68 1.77 60 XMSexyCombo_05 4847 2.93 5.55 1.51 61 XM_H_Long_From01 4734 5.75 5.42 5.92 62 T_XMDrugObfuBody_14 4708 3.22 5.39 2.04 63 RELAYCOUNTRY_CA 4673 3.02 5.35 1.76 64 DKIM_INVALID 4326 2.92 4.96 1.82 65 RCVD_IN_VALIDITY_RPBL 4324 1.80 4.95 0.08 66 HTML_IMAGE_RATIO_04 4277 5.32 4.90 5.55 67 TR_XM_PhishingBody 3757 2.77 4.30 1.93 68 XM_B_Investor 3646 2.34 4.18 1.35 69 XM_OfRef6 3441 2.08 3.94 1.07 70 XM_B_SpammyTLD 3439 3.33 3.94 2.99 71 TooManyTo_001 3358 5.53 3.85 6.45 72 XM_B_PhoneNumber 3355 5.43 3.84 6.30 73 MIME_HTML_MOSTLY 3313 3.12 3.79 2.75 74 RCVD_IN_VALIDITY_SAFE 3311 5.66 3.79 6.68 75 TR_XM_SpammyWords5 3161 2.03 3.62 1.17 76 XM_CamelCaseFrm001 3129 3.30 3.58 3.14 77 DKIM_ADSP_NXDOMAIN 2958 1.52 3.39 0.50 78 MIME_HTML_ONLY_MULTI 2891 3.05 3.31 2.91 79 XMStrtUSub 2888 4.53 3.31 5.20 80 HTML_IMAGE_RATIO_06 2880 3.85 3.30 4.15 81 TM2_M_VERY_LONG_WORD 2849 3.36 3.26 3.42 82 RCVD_IN_VALIDITY_CERTIFIED 2644 4.25 3.03 4.92 83 HTML_IMAGE_RATIO_08 2626 2.26 3.01 1.86 84 XMBody_17 2621 1.46 3.00 0.62 85 T_XMDrugObfuBody_08 2591 1.92 2.97 1.35 86 T_XMHurry_00 2525 1.55 2.89 0.82 87 XMNumbers 2506 3.57 2.87 3.95 88 TM2_M_URI_OPT_OUT 2468 2.27 2.83 1.96 89 RELAYCOUNTRY_AU 2441 1.32 2.80 0.51 90 NO_DNS_FOR_FROM 2412 1.27 2.76 0.46 91 TR_XM_MaxWHORU 2402 1.21 2.75 0.36 92 XM_URI_RBL 2385 1.40 2.73 0.68 93 XM_SPF_SoftFail 2314 1.70 2.65 1.18 94 RCVD_IN_MSPIKE_WL 2303 3.98 2.64 4.71 95 RCVD_IN_MSPIKE_H3 2303 3.98 2.64 4.71 96 FROM_EXCESS_BASE64 2278 2.30 2.61 2.13 97 SUSP_UTF8_WORD_SUBJ 2244 0.99 2.57 0.12 98 XMDiploma_00 2188 1.69 2.51 1.24 99 USER_IN_DEF_DKIM_WL 2119 12.35 2.43 17.76 100 SpammyFromTLD_02 1964 0.91 2.25 0.18 101 XM_UB50 1956 1.43 2.24 0.99 102 T_TooManySym_01 1936 6.13 2.22 8.26 103 TR_XM_NoHeaderRelay 1841 0.88 2.11 0.20 104 SUBJ_ALL_CAPS 1833 1.32 2.10 0.89 105 XM_B_SpammyWords4 1833 1.47 2.10 1.12 106 MAILING_LIST_MULTI 1792 2.25 2.05 2.35 107 NORDNS_LOW_CONTRAST 1766 0.74 2.02 0.04 108 THIS_AD 1707 1.11 1.96 0.65 109 XMSubMetaI_00 1641 1.37 1.88 1.10 110 T_FILL_THIS_FORM_SHORT 1623 1.07 1.86 0.64 111 XMStockSpam_06 1619 1.80 1.85 1.77 112 T_REMOTE_IMAGE 1613 2.63 1.85 3.05 113 XMPhish30 1573 1.32 1.80 1.07 114 XM_B_URI_Unicode 1549 1.55 1.77 1.42 115 XMBody_78 1544 0.73 1.77 0.16 116 SHOPIFY_IMG_NOT_RCVD_SFY 1538 0.87 1.76 0.38 117 LongTLD 1532 0.78 1.75 0.25 118 XM_B_COPY_HTML 1516 1.56 1.74 1.47 119 MIME_QP_LONG_LINE 1515 2.61 1.74 3.09 120 STY_INVIS_DIRECT 1492 0.82 1.71 0.33 121 XM_B_Unsub2 1429 1.41 1.64 1.28 122 XM_ProductURIs 1395 0.89 1.60 0.50 123 XM_UB99 1350 0.55 1.55 0.00 124 XM_B_REG_HTML 1336 0.69 1.53 0.24 125 TR_XM_PHPForged 1334 0.64 1.53 0.15 126 TR_XM_PHPDW 1326 0.64 1.52 0.16 127 TR_XM_FormFill2 1304 0.63 1.49 0.16 128 SpammyFromTLD_01 1302 0.99 1.49 0.71 129 URI_HEX 1295 1.29 1.48 1.18 130 XMBdyGiftCard01 1289 1.35 1.48 1.27 131 RCVD_IN_PSBL 1274 0.90 1.46 0.60 132 DIET_1 1272 0.87 1.46 0.55 133 XM_H_PHPOS 1265 0.60 1.45 0.14 134 ALL_TRUSTED 1254 10.98 1.44 16.17 135 XMBrknScrpt_02 1248 1.41 1.43 1.40 136 T_XMDrugObfuBody_00 1207 0.74 1.38 0.39 137 HTML_TAG_BALANCE_BODY 1176 1.14 1.35 1.02 138 TR_XM_INV_DKIM 1166 0.60 1.34 0.20 139 HTTPS_HTTP_MISMATCH 1160 0.82 1.33 0.54 140 HTML_MIME_NO_HTML_TAG 1111 1.75 1.27 2.01 141 BOTNET_NORDNS 1107 0.45 1.27 0.01 142 XMGenDplmaNmb 1104 0.83 1.26 0.59 143 TR_LOTS_OF_MONEY3 1091 0.59 1.25 0.23 144 T_MONEY_PERCENT 1067 0.59 1.22 0.25 145 TR_LOTS_OF_MONEY2 1067 0.59 1.22 0.25 146 XMReplyNow 1052 0.55 1.20 0.20 147 XM_UB999 1047 0.43 1.20 0.00 148 XM_HighProb1 1042 0.43 1.19 0.01 149 XM_SendGrid 1028 1.18 1.18 1.18 150 KHOP_HELO_FCRDNS 1015 1.40 1.16 1.54 151 XM_OfRef7 1013 0.48 1.16 0.12 152 BAYES_40 993 3.63 1.14 4.99 153 XM_DK_Undo_01 979 1.26 1.12 1.33 154 TR_Mismatch_TLD_02 967 0.45 1.11 0.10 155 HTML_FONT_TINY_NORDNS 964 0.43 1.10 0.06 156 TR_Mismatch_TLD_01 935 0.55 1.07 0.26 157 XM_B_DNDMA 929 0.87 1.06 0.76 158 TR_XM_Base64_M1 926 0.87 1.06 0.77 159 RCVD_IN_PBL 926 0.76 1.06 0.59 160 RDNS_DYNAMIC 907 0.59 1.04 0.35 161 XM_B_SEO 889 0.53 1.02 0.26 162 PDS_RDNS_DYNAMIC_FP 889 0.40 1.02 0.07 163 XM_H_Long_From02 876 1.06 1.00 1.09 164 XMSexyCombo_01 861 0.44 0.99 0.15 165 XM_GoogleGroups 853 1.14 0.98 1.23 166 TR_XM_RelayPhish 837 0.36 0.96 0.04 167 TR_Caps_n_Bayes_99 832 0.36 0.95 0.03 168 TM2_M_OBFU_COMMENT 832 0.72 0.95 0.59 169 TVD_RCVD_IP 830 1.01 0.95 1.04 170 MIME_CHARSET_FARAWAY 824 1.05 0.94 1.11 171 XMSubMetaSxObfu_03 817 0.54 0.94 0.32 172 TR_XM_DK_SendGrid 814 0.90 0.93 0.88 173 HTML_FONT_FACE_BAD 813 0.66 0.93 0.51 174 HELO_DYNAMIC_SPLIT_IP 805 0.33 0.92 0.01 175 TooManyTo_002 787 1.73 0.90 2.18 176 DKIM_ADSP_CUSTOM_MED 786 0.82 0.90 0.78 177 XMClaimOffer 770 0.68 0.88 0.57 178 BAYES_20 762 2.60 0.87 3.54 179 URI_TRY_3LD 760 0.73 0.87 0.65 180 XMPhish14 758 0.54 0.87 0.37 181 TR_MetaPhish_Combo_01 756 0.73 0.87 0.66 182 MPART_ALT_DIFF_COUNT 755 0.60 0.86 0.46 183 TR_XM_SEO4 749 0.37 0.86 0.11 184 RCVD_IN_XBL 747 0.32 0.86 0.02 185 TooManyTo_003 744 1.05 0.85 1.15 186 RELAYCOUNTRY_FR 734 0.41 0.84 0.17 187 XM_B_Phish66 728 0.43 0.83 0.21 188 TooManyTo_004 723 0.84 0.83 0.84 189 TooManyTo_005 701 0.75 0.80 0.73 190 ANY_BOUNCE_MESSAGE 687 3.58 0.79 5.10 191 BOUNCE_MESSAGE 687 3.58 0.79 5.10 192 TR_XM_FormFill 686 0.29 0.79 0.02 193 TM2_M_A_HREF_HREF 671 0.41 0.77 0.22 194 TR_Symld_Words 670 1.07 0.77 1.24 195 XM_Body_Dirty_Words_01 664 0.31 0.76 0.06 196 URI_NOVOWEL 663 1.28 0.76 1.56 197 XMSubMetaSSx_00 638 0.57 0.73 0.49 198 PLING_QUERY 636 0.50 0.73 0.38 199 HOSTED_IMG_MULTI_PUB_01 630 0.26 0.72 0.01 200 XM_DIRTYINTL 625 0.30 0.72 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133629 87.75 95.83 83.35 2 RELAYCOUNTRY_US 128129 81.97 85.74 79.92 3 DKIM_SIGNED 122229 81.26 90.47 76.24 4 XM_DK_Pass 120182 78.93 86.21 74.96 5 DKIM_VALID 119318 78.33 85.51 74.42 6 XM_B_Unicode 115710 76.63 84.82 72.17 7 DKIM_VALID_AU 101802 65.86 70.21 63.50 8 BAYES_50 94360 50.25 34.45 58.86 9 XMListUnsubscribeExists 87885 62.02 75.26 54.82 10 DCC_CHECK 80355 60.60 79.83 50.12 11 DCC_CHECK_NEGATIVE 79907 39.20 19.65 49.84 12 XM_B_Unicode3 77337 50.00 53.23 48.24 13 XM_B_SpammyWords 73866 54.94 71.22 46.07 14 RCVD_IN_MSPIKE_H2 58774 38.62 42.22 36.66 15 LOC_TINY_FONT_1 52783 40.19 53.55 32.92 16 HTML_FONT_LOW_CONTRAST 51509 35.10 40.57 32.13 17 DKIM_VALID_EF 46159 27.43 24.92 28.79 18 FVGT_m_MULTI_ODD 40260 27.41 31.62 25.11 19 XMSubLong 39595 23.97 22.63 24.70 20 T_TM2_M_HEADER_IN_MSG 36046 20.94 18.10 22.48 21 XM_B_SpammyWords2 35778 29.01 41.31 22.32 22 MIME_HTML_ONLY 33972 23.21 26.92 21.19 23 T_KAM_HTML_FONT_INVALID 33097 24.53 31.66 20.64 24 USER_IN_DEF_DKIM_WL 28472 12.35 2.43 17.76 25 ALL_TRUSTED 25929 10.98 1.44 16.17 26 XM_Multi_Part_URI 23773 17.35 21.97 14.83 27 TR_XM_DK_Unsub 23342 15.82 18.14 14.56 28 UNPARSEABLE_RELAY 20379 13.97 16.28 12.71 29 XM_Evil_Numbers_Gen 18639 10.33 7.96 11.63 30 BAYES_60 17212 10.21 9.23 10.74 31 BAYES_00 15472 6.42 0.50 9.65 32 FSL_BULK_SIG 15003 8.93 8.13 9.36 33 XM_DKIMWhitelistDomains 14752 6.01 0.16 9.20 34 XM_B_Unsub 13863 10.80 14.75 8.65 35 T_TooManySym_01 13241 6.13 2.22 8.26 36 LotsOfNums_01 12818 7.64 7.00 8.00 37 TR_XM_DK_Bayes 11709 4.86 0.38 7.30 38 TR_XM_DK_Bayes1 11627 4.83 0.38 7.25 39 TR_XM_BayesUnsub 10971 9.49 14.36 6.84 40 RCVD_IN_VALIDITY_SAFE 10712 5.66 3.79 6.68 41 TooManyTo_001 10347 5.53 3.85 6.45 42 TR_XM_DK_Bayes2 10265 4.23 0.24 6.40 43 XM_B_PhoneNumber 10102 5.43 3.84 6.30 44 XM_H_GMP 10093 6.18 5.96 6.30 45 TR_MAX_INTL_RELAY 9904 10.05 17.16 6.18 46 HTML_IMAGE_RATIO_02 9535 6.69 8.06 5.95 47 XM_H_Long_From01 9499 5.75 5.42 5.92 48 XM_B_SpammyWords3 9391 8.78 14.15 5.86 49 HTML_IMAGE_RATIO_04 8890 5.32 4.90 5.55 50 IN_ZIMBRA_NJ_WHITELIST 8820 3.58 0.06 5.50 51 XM_UncommonTLD01 8816 5.95 6.78 5.50 52 MPART_ALT_DIFF 8549 5.70 6.38 5.33 53 LOTS_OF_MONEY 8385 7.21 10.84 5.23 54 XMStrtUSub 8336 4.53 3.31 5.20 55 BOUNCE_MESSAGE 8183 3.58 0.79 5.10 56 ANY_BOUNCE_MESSAGE 8183 3.58 0.79 5.10 57 XM_DK_Undo_02 8154 18.36 42.72 5.09 58 XMSubMetaSx_00 8135 5.73 6.93 5.07 59 BAYES_40 7994 3.63 1.14 4.99 60 RCVD_IN_VALIDITY_CERTIFIED 7891 4.25 3.03 4.92 61 T_TooManySym_02 7891 3.36 0.48 4.92 62 RCVD_IN_MSPIKE_H3 7548 3.98 2.64 4.71 63 RCVD_IN_MSPIKE_WL 7548 3.98 2.64 4.71 64 XM_B_Phish_Phrases 7441 5.53 7.16 4.64 65 INVALID_MSGID 6748 2.84 0.32 4.21 66 HTML_IMAGE_RATIO_06 6654 3.85 3.30 4.15 67 BAYES_99 6504 15.26 35.85 4.06 68 RELAYCOUNTRY_META 6470 7.70 14.43 4.04 69 XMNumbers 6328 3.57 2.87 3.95 70 TO_MALFORMED 6197 2.50 0.01 3.87 71 BOTNET_IPINHOSTNAME 6061 5.87 9.71 3.78 72 TR_XM_SpammyWords4 5957 5.75 9.49 3.72 73 BAYES_80 5881 6.09 10.55 3.67 74 BAYES_20 5674 2.60 0.87 3.54 75 TM2_M_VERY_LONG_WORD 5475 3.36 3.26 3.42 76 XM_CamelCaseFrm001 5035 3.30 3.58 3.14 77 BAYES_999 4995 11.89 27.99 3.12 78 MIME_QP_LONG_LINE 4957 2.61 1.74 3.09 79 T_REMOTE_IMAGE 4892 2.63 1.85 3.05 80 XM_B_SpammyTLD 4800 3.33 3.94 2.99 81 MIME_HTML_ONLY_MULTI 4673 3.05 3.31 2.91 82 MIME_HTML_MOSTLY 4416 3.12 3.79 2.75 83 BAYES_95 4021 3.84 6.29 2.51 84 XM_Body_Dirty_Words 3891 5.11 10.03 2.43 85 XM_PDF 3889 1.67 0.29 2.43 86 TR_XM_SpammyRelay 3798 5.07 10.04 2.37 87 MAILING_LIST_MULTI 3769 2.25 2.05 2.35 88 RCVD_IN_IADB_LISTED 3608 1.69 0.65 2.25 89 TooManyTo_002 3491 1.73 0.90 2.18 90 TR_XM_DKIM_Undo 3458 12.36 31.09 2.16 91 T_TooManySym_03 3449 1.44 0.12 2.15 92 FROM_EXCESS_BASE64 3407 2.30 2.61 2.13 93 T_XMDrugObfuBody_14 3266 3.22 5.39 2.04 94 HTML_MIME_NO_HTML_TAG 3220 1.75 1.27 2.01 95 BAYES_05 3193 1.51 0.62 1.99 96 RCVD_IN_IADB_SPF 3177 1.49 0.58 1.98 97 TM2_M_URI_OPT_OUT 3141 2.27 2.83 1.96 98 TR_XM_PhishingBody 3102 2.77 4.30 1.93 99 HTML_IMAGE_RATIO_08 2978 2.26 3.01 1.86 100 DKIM_INVALID 2911 2.92 4.96 1.82 101 IN_HORDE_ADDRESS_BOOK 2904 1.22 0.13 1.81 102 RCVD_IN_IADB_SENDERID 2891 1.36 0.55 1.80 103 XMStockSpam_06 2841 1.80 1.85 1.77 104 UNTRUSTED_Relay 2836 3.15 5.68 1.77 105 RCVD_IN_IADB_DK 2835 1.34 0.55 1.77 106 RELAYCOUNTRY_CA 2814 3.02 5.35 1.76 107 TR_XM_UnparsRelay 2764 4.29 9.01 1.72 108 XMGappySubj_01 2731 1.14 0.10 1.70 109 TVD_SPACE_RATIO 2568 1.08 0.12 1.60 110 TR_DCC_Bayes_99 2520 10.94 28.16 1.57 111 URI_NOVOWEL 2507 1.28 0.76 1.56 112 KHOP_HELO_FCRDNS 2462 1.40 1.16 1.54 113 XMSexyCombo_05 2420 2.93 5.55 1.51 114 RCVD_IN_IADB_VOUCHED 2412 1.09 0.34 1.50 115 XMGappySubj_02 2379 0.98 0.05 1.48 116 XM_B_COPY_HTML 2354 1.56 1.74 1.47 117 XM_B_URI_Unicode 2278 1.55 1.77 1.42 118 XMBrknScrpt_02 2251 1.41 1.43 1.40 119 BOTNET 2248 4.17 9.25 1.40 120 T_XMDrugObfuBody_08 2164 1.92 2.97 1.35 121 XM_B_Investor 2160 2.34 4.18 1.35 122 XM_DK_Undo_01 2135 1.26 1.12 1.33 123 XM_B_Unsub2 2060 1.41 1.64 1.28 124 XMBdyGiftCard01 2042 1.35 1.48 1.27 125 XMDiploma_00 1988 1.69 2.51 1.24 126 TR_Symld_Words 1980 1.07 0.77 1.24 127 XM_GoogleGroups 1966 1.14 0.98 1.23 128 XM_SendGrid 1895 1.18 1.18 1.18 129 URI_HEX 1891 1.29 1.48 1.18 130 XM_SPF_SoftFail 1891 1.70 2.65 1.18 131 TR_XM_SpammyWords5 1877 2.03 3.62 1.17 132 TooManyTo_003 1846 1.05 0.85 1.15 133 XM_B_SpammyWords4 1801 1.47 2.10 1.12 134 MIME_CHARSET_FARAWAY 1785 1.05 0.94 1.11 135 XMSubMetaI_00 1763 1.37 1.88 1.10 136 XM_H_Long_From02 1743 1.06 1.00 1.09 137 RCVD_IN_IADB_OPTIN 1732 0.77 0.21 1.08 138 XM_OfRef6 1715 2.08 3.94 1.07 139 XMPhish30 1708 1.32 1.80 1.07 140 TVD_RCVD_IP 1664 1.01 0.95 1.04 141 HTML_TAG_BALANCE_BODY 1642 1.14 1.35 1.02 142 XM_UB50 1583 1.43 2.24 0.99 143 XMBody_95 1459 0.63 0.10 0.91 144 SUBJ_ALL_CAPS 1432 1.32 2.10 0.89 145 TR_XM_DK_SendGrid 1417 0.90 0.93 0.88 146 TooManyTo_004 1354 0.84 0.83 0.84 147 XMNoVowels 1333 0.72 0.51 0.83 148 T_XMHurry_00 1310 1.55 2.89 0.82 149 XMLngstWrd_00 1296 0.62 0.27 0.81 150 DKIM_ADSP_CUSTOM_MED 1243 0.82 0.90 0.78 151 TR_XM_Base64_M1 1238 0.87 1.06 0.77 152 XM_B_DNDMA 1224 0.87 1.06 0.76 153 XM_H_PHPMailer 1199 0.73 0.68 0.75 154 USER_IN_WHITELIST 1170 0.47 0.00 0.73 155 USER_IN_WELCOMELIST 1170 0.47 0.00 0.73 156 TooManyTo_005 1164 0.75 0.80 0.73 157 XMBSHREFv2 1161 0.54 0.20 0.72 158 SpammyFromTLD_01 1140 0.99 1.49 0.71 159 XM_URI_RBL 1086 1.40 2.73 0.68 160 MSGID_FROM_MTA_HEADER 1080 0.47 0.10 0.67 161 XMSlimDrugH 1055 0.66 0.66 0.66 162 TR_MetaPhish_Combo_01 1051 0.73 0.87 0.66 163 URI_TRY_3LD 1049 0.73 0.87 0.65 164 CHARSET_FARAWAY_HEADER 1044 0.44 0.04 0.65 165 THIS_AD 1035 1.11 1.96 0.65 166 T_FILL_THIS_FORM_SHORT 1024 1.07 1.86 0.64 167 XMBody_17 1002 1.46 3.00 0.62 168 T_TooManySym_04 961 0.40 0.03 0.60 169 RCVD_IN_PSBL 954 0.90 1.46 0.60 170 XMGenDplmaNmb 953 0.83 1.26 0.59 171 RCVD_IN_PBL 949 0.76 1.06 0.59 172 TM2_M_OBFU_COMMENT 940 0.72 0.95 0.59 173 SUBJ_DOLLARS 933 0.62 0.69 0.58 174 XMClaimOffer 907 0.68 0.88 0.57 175 RCVD_IN_BL_SPAMCOP_NET 904 3.52 8.95 0.56 176 DIET_1 882 0.87 1.46 0.55 177 HTTPS_HTTP_MISMATCH 873 0.82 1.33 0.54 178 HTML_IMAGE_ONLY_20 866 0.48 0.37 0.54 179 XMGppyBdWords 850 0.50 0.44 0.53 180 XM_B_FormFill 845 0.34 0.01 0.53 181 RELAYCOUNTRY_AU 822 1.32 2.80 0.51 182 HTML_FONT_FACE_BAD 815 0.66 0.93 0.51 183 DKIM_ADSP_NXDOMAIN 808 1.52 3.39 0.50 184 XM_ProductURIs 806 0.89 1.60 0.50 185 TR_XM_SpammyWords2 797 5.02 13.32 0.50 186 NML_ADSP_CUSTOM_MED 796 0.57 0.71 0.50 187 FORGED_GMAIL_RCVD 796 0.54 0.62 0.50 188 XMSubMetaSSx_00 782 0.57 0.73 0.49 189 AD_PREFS 782 0.37 0.16 0.49 190 XM_S_SubURI 767 0.33 0.07 0.48 191 MPART_ALT_DIFF_COUNT 733 0.60 0.86 0.46 192 NO_DNS_FOR_FROM 732 1.27 2.76 0.46 193 ONE_TIME 711 0.31 0.07 0.44 194 XMCapTrack 709 0.41 0.35 0.44 195 XMEqualsVooDoo_00 708 0.34 0.14 0.44 196 T_Symld_Words_02 675 0.49 0.62 0.42 197 HTML_EXTRA_CLOSE 663 0.32 0.14 0.41 198 HTML_TAG_BALANCE_CENTER 647 0.37 0.30 0.40 199 RELAYCOUNTRY_GB 635 0.41 0.43 0.40 200 XMSolicitRefs_0 624 0.44 0.52 0.39 ----------------------------------------------------------------------