Email: 267409 Autolearn: 0 AvgScore: 4.97 AvgScanTime: 1.33 sec Spam: 93091 Autolearn: 0 AvgScore: 14.53 AvgScanTime: 1.40 sec Ham: 174318 Autolearn: 0 AvgScore: -0.14 AvgScanTime: 1.30 sec Time Spent Running SA: 99.14 hours Time Spent Processing Spam: 36.30 hours Time Spent Processing Ham: 62.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88929 87.71 95.53 83.54 2 DKIM_SIGNED 82342 79.91 88.45 75.35 3 XM_DK_Pass 79195 77.78 85.07 73.89 4 DKIM_VALID 77998 76.74 83.79 72.98 5 XM_B_Unicode 77556 75.34 83.31 71.09 6 RELAYCOUNTRY_US 76092 81.20 81.74 80.90 7 DCC_CHECK 72358 56.92 77.73 45.81 8 XM_B_SpammyWords 66448 54.98 71.38 46.22 9 XMListUnsubscribeExists 65837 58.04 70.72 51.27 10 DKIM_VALID_AU 61049 63.18 65.58 61.89 11 XM_B_Unicode3 45210 46.68 48.57 45.67 12 LOC_TINY_FONT_1 44617 37.61 47.93 32.11 13 XM_B_SpammyWords2 37985 28.63 40.80 22.12 14 RCVD_IN_MSPIKE_H2 37897 38.58 40.71 37.45 15 XM_DK_Undo_02 37729 17.46 40.53 5.15 16 BAYES_50 35606 53.39 38.25 61.47 17 HTML_FONT_LOW_CONTRAST 34277 32.83 36.82 30.70 18 FVGT_m_MULTI_ODD 30710 29.45 32.99 27.56 19 BAYES_99 30146 13.72 32.38 3.76 20 T_KAM_HTML_FONT_INVALID 29874 25.30 32.09 21.67 21 MIME_HTML_ONLY 27714 24.20 29.77 21.22 22 TR_XM_DKIM_Undo 26621 11.26 28.60 2.00 23 DKIM_VALID_EF 25822 28.14 27.74 28.36 24 BAYES_999 23443 10.66 25.18 2.90 25 TR_DCC_Bayes_99 22578 9.19 24.25 1.14 26 DCC_CHECK_NEGATIVE 19531 42.61 20.98 54.16 27 XMSubLong 19136 22.18 20.56 23.05 28 TR_XM_DK_Unsub 18950 15.86 20.36 13.45 29 XM_Multi_Part_URI 18744 16.95 20.14 15.24 30 T_TM2_M_HEADER_IN_MSG 18454 22.81 19.82 24.41 31 RELAYCOUNTRY_META 16577 8.57 17.81 3.64 32 UNPARSEABLE_RELAY 15963 14.19 17.15 12.61 33 XM_B_SpammyWords3 15055 9.37 16.17 5.74 34 XM_B_Unsub 15019 12.12 16.13 9.97 35 TR_MAX_INTL_RELAY 14626 9.39 15.71 6.01 36 TR_XM_BayesUnsub 14583 9.97 15.67 6.93 37 TR_XM_SpammyRelay 13537 6.39 14.54 2.03 38 TR_XM_SpammyWords2 11966 4.77 12.85 0.46 39 FSL_BULK_SIG 9277 9.97 9.97 9.97 40 BAYES_80 9076 5.76 9.75 3.63 41 RCVD_IN_BL_SPAMCOP_NET 8480 3.68 9.11 0.77 42 TR_XM_UnparsRelay 8439 4.23 9.07 1.64 43 BOTNET_IPINHOSTNAME 8397 5.47 9.02 3.57 44 LOTS_OF_MONEY 8316 6.64 8.93 5.42 45 BAYES_60 8220 7.50 8.83 6.79 46 XM_Evil_Numbers_Gen 7874 9.99 8.46 10.81 47 XM_UncommonTLD01 7755 6.25 8.33 5.13 48 TR_XM_SpammyWords4 7505 5.11 8.06 3.54 49 XM_Body_Dirty_Words 7273 4.39 7.81 2.56 50 RELAYCOUNTRY_CA 7123 3.71 7.65 1.60 51 XM_B_Phish_Phrases 7008 6.26 7.53 5.58 52 TR_XM_SPAMCOP 6888 2.93 7.40 0.54 53 BOTNET 6811 3.48 7.32 1.43 54 LotsOfNums_01 6609 7.77 7.10 8.12 55 HTML_IMAGE_RATIO_02 6417 5.71 6.89 5.07 56 UNTRUSTED_Relay 6236 3.31 6.70 1.50 57 XMSubMetaSx_00 6192 4.75 6.65 3.73 58 XM_H_GMP 5651 6.02 6.07 6.00 59 BAYES_95 5294 3.53 5.69 2.38 60 MPART_ALT_DIFF 5276 5.06 5.67 4.74 61 XM_SPF_SoftFail 4962 2.67 5.33 1.26 62 XM_H_Long_From01 4880 5.21 5.24 5.19 63 T_XMDrugObfuBody_14 4646 2.97 4.99 1.89 64 XM_OfRef6 4619 2.54 4.96 1.25 65 DKIM_INVALID 4344 3.17 4.67 2.37 66 SpammyFromTLD_02 4212 1.67 4.52 0.15 67 HTML_IMAGE_RATIO_08 4148 2.81 4.46 1.93 68 XMStrtUSub 4057 5.52 4.36 6.14 69 XMSexyCombo_05 4036 2.44 4.34 1.42 70 HTML_IMAGE_RATIO_04 3923 4.80 4.21 5.12 71 XM_B_PhoneNumber 3878 5.61 4.17 6.37 72 KHOP_HELO_FCRDNS 3821 2.99 4.10 2.39 73 TR_XM_PhishingBody 3810 2.61 4.09 1.82 74 TM2_M_VERY_LONG_WORD 3790 3.62 4.07 3.38 75 RCVD_IN_VALIDITY_RPBL 3479 1.41 3.74 0.16 76 T_REMOTE_IMAGE 3433 3.79 3.69 3.84 77 XM_CamelCaseFrm001 3376 3.02 3.63 2.69 78 XM_B_SpammyTLD 3355 3.07 3.60 2.78 79 MIME_HTML_MOSTLY 3341 2.74 3.59 2.28 80 RCVD_IN_PSBL 3340 1.75 3.59 0.77 81 RCVD_IN_MSPIKE_H3 3334 4.75 3.58 5.37 82 RCVD_IN_MSPIKE_WL 3334 4.75 3.58 5.37 83 TR_XM_SpammyWords5 3159 1.92 3.39 1.13 84 HTML_IMAGE_RATIO_06 3052 3.59 3.28 3.75 85 XM_B_Investor 2966 1.89 3.19 1.19 86 TR_XM_InvalidRelay 2838 1.07 3.05 0.02 87 TooManyTo_001 2802 5.32 3.01 6.55 88 MIME_HTML_ONLY_MULTI 2771 2.89 2.98 2.84 89 XMBody_17 2731 1.35 2.93 0.50 90 XMNumbers 2691 3.46 2.89 3.77 91 XM_UB50 2683 1.52 2.88 0.79 92 XM_URI_RBL 2598 1.27 2.79 0.46 93 RCVD_IN_VALIDITY_SAFE 2541 4.95 2.73 6.14 94 T_FILL_THIS_FORM_SHORT 2517 1.55 2.70 0.94 95 XM_B_Unsub2 2461 1.74 2.64 1.25 96 XMNoVowels 2450 2.13 2.63 1.87 97 TM2_M_URI_OPT_OUT 2446 2.50 2.63 2.43 98 DIET_1 2401 1.57 2.58 1.03 99 USER_IN_DEF_DKIM_WL 2346 11.71 2.52 16.62 100 RELAYCOUNTRY_NZ 2324 0.87 2.50 0.01 101 T_XMHurry_00 2308 1.26 2.48 0.61 102 RELAYCOUNTRY_AU 2230 1.13 2.40 0.45 103 DKIM_ADSP_NXDOMAIN 2225 1.15 2.39 0.49 104 XM_B_SpammyWords4 2211 1.38 2.38 0.84 105 T_XMDrugObfuBody_08 2161 1.75 2.32 1.45 106 NO_DNS_FOR_FROM 2127 1.12 2.28 0.50 107 XMDiploma_00 2123 1.67 2.28 1.34 108 TR_XM_MaxWHORU 2114 1.07 2.27 0.42 109 RCVD_IN_VALIDITY_CERTIFIED 2055 3.56 2.21 4.28 110 HOSTED_IMG_MULTI_PUB_01 2032 0.80 2.18 0.06 111 FROM_EXCESS_BASE64 2014 2.22 2.16 2.25 112 HTML_IMAGE_ONLY_20 1953 1.12 2.10 0.60 113 XM_B_URI_Unicode 1882 1.78 2.02 1.66 114 SUBJ_ALL_CAPS 1811 1.37 1.95 1.06 115 TR_XM_NoHeaderRelay 1803 0.79 1.94 0.17 116 MAILING_LIST_MULTI 1790 2.10 1.92 2.20 117 LongTLD 1719 0.84 1.85 0.30 118 T_TooManySym_01 1714 5.57 1.84 7.56 119 T_XMDrugObfuBody_00 1670 0.92 1.79 0.45 120 XMStockSpam_06 1592 1.64 1.71 1.60 121 TO_NO_BRKTS_FROM_MSSP 1591 0.60 1.71 0.01 122 FROM_MISSP_REPLYTO 1565 0.59 1.68 0.00 123 FROM_MISSP_EH_MATCH 1553 0.58 1.67 0.00 124 XM_BadFromFormat 1552 0.66 1.67 0.13 125 HK_RANDOM_REPLYTO 1528 0.65 1.64 0.12 126 HTML_IMAGE_ONLY_16 1519 0.76 1.63 0.30 127 XMPhish30 1503 1.10 1.61 0.83 128 XMBrknScrpt_02 1492 1.29 1.60 1.12 129 SpammyFromTLD_01 1452 1.00 1.56 0.71 130 XM_ProductURIs 1432 1.04 1.54 0.77 131 NORDNS_LOW_CONTRAST 1425 0.56 1.53 0.04 132 XM_DK_Undo_01 1399 1.52 1.50 1.53 133 MPART_ALT_DIFF_COUNT 1359 0.97 1.46 0.71 134 ALL_TRUSTED 1354 10.68 1.45 15.61 135 HTML_TAG_BALANCE_BODY 1334 0.93 1.43 0.66 136 MIME_QP_LONG_LINE 1315 2.62 1.41 3.27 137 TR_XM_INV_DKIM 1307 0.62 1.40 0.20 138 HTML_MIME_NO_HTML_TAG 1302 1.77 1.40 1.97 139 XM_B_COPY_HTML 1296 1.64 1.39 1.78 140 BAYES_40 1282 4.14 1.38 5.61 141 XM_SendGrid 1282 1.24 1.38 1.17 142 TM2_M_OBFU_COMMENT 1266 0.85 1.36 0.58 143 T_STY_INVIS_DIRECT 1236 0.75 1.33 0.44 144 MIME_CHARSET_FARAWAY 1235 1.23 1.33 1.17 145 XMBdyGiftCard01 1233 0.99 1.32 0.80 146 SHOPIFY_IMG_NOT_RCVD_SFY 1204 0.68 1.29 0.35 147 RCVD_IN_PBL 1201 0.82 1.29 0.56 148 RCVD_IN_ZEN_LASTEXTERNAL 1189 0.44 1.28 0.00 149 SHORTCIRCUIT 1189 0.44 1.28 0.00 150 XMReplyNow 1160 0.61 1.25 0.27 151 DKIM_ADSP_CUSTOM_MED 1141 0.89 1.23 0.71 152 XM_H_Long_From02 1137 1.13 1.22 1.08 153 XM_HighProb1 1128 0.43 1.21 0.01 154 XM_OfRef7 1102 0.59 1.18 0.28 155 XM_B_REG_HTML 1089 0.66 1.17 0.39 156 TR_XM_PHPForged 1067 0.63 1.15 0.35 157 XM_RXBody 1066 0.65 1.15 0.39 158 XMMoneyMeta_00 1052 0.57 1.13 0.27 159 XM_UB60 1052 0.43 1.13 0.06 160 TR_XM_PHPDW 1046 0.63 1.12 0.36 161 TR_XM_FormFill2 1032 0.62 1.11 0.35 162 XM_B_DNDMA 1019 0.83 1.09 0.68 163 XM_B_SEO 1011 0.58 1.09 0.31 164 ANY_BOUNCE_MESSAGE 1008 4.37 1.08 6.12 165 BOUNCE_MESSAGE 1005 4.36 1.08 6.11 166 XM_H_PHPOS 1002 0.59 1.08 0.34 167 NML_ADSP_CUSTOM_MED 958 0.67 1.03 0.49 168 XMGenDplmaNmb 958 0.77 1.03 0.64 169 URI_NOVOWEL 952 1.19 1.02 1.28 170 FONT_INVIS_LONG_LINE 934 0.41 1.00 0.09 171 XM_UB80 931 0.36 1.00 0.01 172 TR_XM_DK_SendGrid 930 0.88 1.00 0.81 173 URI_HEX 930 1.08 1.00 1.13 174 XMClaimOffer 926 0.57 0.99 0.34 175 BOTNET_NORDNS 919 0.36 0.99 0.02 176 BAYES_00 898 7.20 0.96 10.53 177 TR_LOTS_OF_MONEY3 885 0.49 0.95 0.24 178 BAYES_20 877 2.74 0.94 3.70 179 TR_Mismatch_TLD_02 874 0.37 0.94 0.06 180 J_POPCORN_WO_D 867 0.46 0.93 0.21 181 XM_B_Phish66 865 0.51 0.93 0.29 182 XMSexyCombo_01 859 0.46 0.92 0.22 183 FORGED_GMAIL_RCVD 851 0.60 0.91 0.43 184 MultiRelay_CC 850 0.39 0.91 0.10 185 XM_UB99 834 0.32 0.90 0.01 186 HTML_FONT_FACE_BAD 824 0.62 0.89 0.47 187 XMPhish14 821 0.57 0.88 0.40 188 URI_TRY_3LD 817 0.66 0.88 0.55 189 TR_Mismatch_TLD_01 813 0.46 0.87 0.24 190 TR_XM_Base64_M1 813 0.83 0.87 0.81 191 TR_XM_RelayPhish 812 0.35 0.87 0.07 192 TR_XM_SEO4 803 0.39 0.86 0.14 193 RCVD_IN_XBL 798 0.30 0.86 0.01 194 HK_RANDOM_FROM 794 0.40 0.85 0.15 195 TR_XM_DK_Bayes 791 5.47 0.85 7.94 196 FROM_SUSPICIOUS_NTLD 786 0.32 0.84 0.04 197 XMBody_78 777 0.39 0.83 0.15 198 HK_RANDOM_ENVFROM 758 0.37 0.81 0.14 199 TR_XM_DK_Bayes1 756 5.38 0.81 7.81 200 TR_XM_FormFill 752 0.29 0.81 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145617 87.71 95.53 83.54 2 RELAYCOUNTRY_US 141031 81.20 81.74 80.90 3 DKIM_SIGNED 131344 79.91 88.45 75.35 4 XM_DK_Pass 128797 77.78 85.07 73.89 5 DKIM_VALID 127213 76.74 83.79 72.98 6 XM_B_Unicode 123917 75.34 83.31 71.09 7 DKIM_VALID_AU 107887 63.18 65.58 61.89 8 BAYES_50 107160 53.39 38.25 61.47 9 DCC_CHECK_NEGATIVE 94418 42.61 20.98 54.16 10 XMListUnsubscribeExists 89378 58.04 70.72 51.27 11 XM_B_SpammyWords 80576 54.98 71.38 46.22 12 DCC_CHECK 79859 56.92 77.73 45.81 13 XM_B_Unicode3 79608 46.68 48.57 45.67 14 RCVD_IN_MSPIKE_H2 65282 38.58 40.71 37.45 15 LOC_TINY_FONT_1 55966 37.61 47.93 32.11 16 HTML_FONT_LOW_CONTRAST 53520 32.83 36.82 30.70 17 DKIM_VALID_EF 49433 28.14 27.74 28.36 18 FVGT_m_MULTI_ODD 48038 29.45 32.99 27.56 19 T_TM2_M_HEADER_IN_MSG 42553 22.81 19.82 24.41 20 XMSubLong 40186 22.18 20.56 23.05 21 XM_B_SpammyWords2 38563 28.63 40.80 22.12 22 T_KAM_HTML_FONT_INVALID 37771 25.30 32.09 21.67 23 MIME_HTML_ONLY 36986 24.20 29.77 21.22 24 USER_IN_DEF_DKIM_WL 28975 11.71 2.52 16.62 25 ALL_TRUSTED 27205 10.68 1.45 15.61 26 XM_Multi_Part_URI 26572 16.95 20.14 15.24 27 TR_XM_DK_Unsub 23448 15.86 20.36 13.45 28 UNPARSEABLE_RELAY 21985 14.19 17.15 12.61 29 XM_Evil_Numbers_Gen 18839 9.99 8.46 10.81 30 BAYES_00 18349 7.20 0.96 10.53 31 XM_B_Unsub 17380 12.12 16.13 9.97 32 FSL_BULK_SIG 17373 9.97 9.97 9.97 33 XM_DKIMWhitelistDomains 15777 5.96 0.16 9.05 34 LotsOfNums_01 14160 7.77 7.10 8.12 35 TR_XM_DK_Bayes 13836 5.47 0.85 7.94 36 TR_XM_DK_Bayes1 13619 5.38 0.81 7.81 37 T_TooManySym_01 13176 5.57 1.84 7.56 38 TR_XM_BayesUnsub 12078 9.97 15.67 6.93 39 TR_XM_DK_Bayes2 11894 4.67 0.62 6.82 40 BAYES_60 11831 7.50 8.83 6.79 41 TooManyTo_001 11418 5.32 3.01 6.55 42 XM_B_PhoneNumber 11111 5.61 4.17 6.37 43 XMStrtUSub 10698 5.52 4.36 6.14 44 RCVD_IN_VALIDITY_SAFE 10695 4.95 2.73 6.14 45 ANY_BOUNCE_MESSAGE 10674 4.37 1.08 6.12 46 BOUNCE_MESSAGE 10651 4.36 1.08 6.11 47 TR_MAX_INTL_RELAY 10477 9.39 15.71 6.01 48 XM_H_GMP 10456 6.02 6.07 6.00 49 XM_B_SpammyWords3 10009 9.37 16.17 5.74 50 BAYES_40 9787 4.14 1.38 5.61 51 XM_B_Phish_Phrases 9730 6.26 7.53 5.58 52 IN_ZIMBRA_NJ_WHITELIST 9519 3.60 0.12 5.46 53 LOTS_OF_MONEY 9453 6.64 8.93 5.42 54 RCVD_IN_MSPIKE_WL 9363 4.75 3.58 5.37 55 RCVD_IN_MSPIKE_H3 9363 4.75 3.58 5.37 56 XM_H_Long_From01 9042 5.21 5.24 5.19 57 XM_DK_Undo_02 8971 17.46 40.53 5.15 58 XM_UncommonTLD01 8947 6.25 8.33 5.13 59 HTML_IMAGE_RATIO_04 8919 4.80 4.21 5.12 60 HTML_IMAGE_RATIO_02 8842 5.71 6.89 5.07 61 MPART_ALT_DIFF 8262 5.06 5.67 4.74 62 T_TooManySym_02 7575 2.97 0.39 4.35 63 RCVD_IN_VALIDITY_CERTIFIED 7461 3.56 2.21 4.28 64 INVALID_MSGID 6992 2.74 0.36 4.01 65 T_REMOTE_IMAGE 6701 3.79 3.69 3.84 66 XMNumbers 6574 3.46 2.89 3.77 67 BAYES_99 6552 13.72 32.38 3.76 68 HTML_IMAGE_RATIO_06 6538 3.59 3.28 3.75 69 XMSubMetaSx_00 6506 4.75 6.65 3.73 70 BAYES_20 6455 2.74 0.94 3.70 71 RELAYCOUNTRY_META 6350 8.57 17.81 3.64 72 BAYES_80 6323 5.76 9.75 3.63 73 BOTNET_IPINHOSTNAME 6229 5.47 9.02 3.57 74 TO_MALFORMED 6205 2.33 0.02 3.56 75 TR_XM_SpammyWords4 6168 5.11 8.06 3.54 76 TM2_M_VERY_LONG_WORD 5895 3.62 4.07 3.38 77 MIME_QP_LONG_LINE 5695 2.62 1.41 3.27 78 XM_PDF 5115 2.02 0.32 2.93 79 BAYES_999 5052 10.66 25.18 2.90 80 MIME_HTML_ONLY_MULTI 4959 2.89 2.98 2.84 81 XM_B_SpammyTLD 4854 3.07 3.60 2.78 82 XM_CamelCaseFrm001 4693 3.02 3.63 2.69 83 XM_Body_Dirty_Words 4460 4.39 7.81 2.56 84 RCVD_IN_IADB_LISTED 4422 1.85 0.58 2.54 85 TooManyTo_002 4383 1.82 0.52 2.51 86 TM2_M_URI_OPT_OUT 4243 2.50 2.63 2.43 87 KHOP_HELO_FCRDNS 4173 2.99 4.10 2.39 88 BAYES_95 4148 3.53 5.69 2.38 89 DKIM_INVALID 4131 3.17 4.67 2.37 90 MIME_HTML_MOSTLY 3980 2.74 3.59 2.28 91 RCVD_IN_IADB_SPF 3922 1.64 0.51 2.25 92 FROM_EXCESS_BASE64 3914 2.22 2.16 2.25 93 MAILING_LIST_MULTI 3833 2.10 1.92 2.20 94 BAYES_05 3710 1.57 0.54 2.13 95 RCVD_IN_IADB_SENDERID 3542 1.49 0.47 2.03 96 TR_XM_SpammyRelay 3538 6.39 14.54 2.03 97 TR_XM_DKIM_Undo 3486 11.26 28.60 2.00 98 HTML_MIME_NO_HTML_TAG 3433 1.77 1.40 1.97 99 HTML_IMAGE_RATIO_08 3363 2.81 4.46 1.93 100 T_XMDrugObfuBody_14 3300 2.97 4.99 1.89 101 XMNoVowels 3254 2.13 2.63 1.87 102 RCVD_IN_IADB_VOUCHED 3194 1.31 0.32 1.83 103 T_TooManySym_03 3171 1.22 0.11 1.82 104 TR_XM_PhishingBody 3168 2.61 4.09 1.82 105 RCVD_IN_IADB_DK 3156 1.34 0.47 1.81 106 XM_B_COPY_HTML 3095 1.64 1.39 1.78 107 IN_HORDE_ADDRESS_BOOK 3093 1.19 0.11 1.77 108 MAY_BE_FORGED 2976 1.28 0.49 1.71 109 XM_B_URI_Unicode 2891 1.78 2.02 1.66 110 XMGappySubj_01 2867 1.10 0.09 1.64 111 TR_XM_UnparsRelay 2863 4.23 9.07 1.64 112 XMStockSpam_06 2792 1.64 1.71 1.60 113 RELAYCOUNTRY_CA 2789 3.71 7.65 1.60 114 TVD_SPACE_RATIO 2775 1.12 0.24 1.59 115 XM_DK_Undo_01 2675 1.52 1.50 1.53 116 UNTRUSTED_Relay 2620 3.31 6.70 1.50 117 T_XMDrugObfuBody_08 2519 1.75 2.32 1.45 118 BOTNET 2499 3.48 7.32 1.43 119 XMSexyCombo_05 2483 2.44 4.34 1.42 120 TR_Symld_Words 2453 1.15 0.68 1.41 121 XMGappySubj_02 2440 0.93 0.04 1.40 122 RCVD_IN_IADB_OPTIN 2351 0.95 0.21 1.35 123 XMDiploma_00 2333 1.67 2.28 1.34 124 T_TVD_MIME_NO_HEADERS 2333 0.88 0.02 1.34 125 URI_NOVOWEL 2232 1.19 1.02 1.28 126 XM_SPF_SoftFail 2191 2.67 5.33 1.26 127 XM_B_Unsub2 2186 1.74 2.64 1.25 128 XM_OfRef6 2180 2.54 4.96 1.25 129 XM_B_Investor 2081 1.89 3.19 1.19 130 MIME_CHARSET_FARAWAY 2043 1.23 1.33 1.17 131 XM_SendGrid 2038 1.24 1.38 1.17 132 TR_DCC_Bayes_99 1992 9.19 24.25 1.14 133 XM_GoogleGroups 1991 1.00 0.72 1.14 134 TVD_RCVD_IP 1968 0.99 0.74 1.13 135 TR_XM_SpammyWords5 1966 1.92 3.39 1.13 136 URI_HEX 1963 1.08 1.00 1.13 137 XMBrknScrpt_02 1948 1.29 1.60 1.12 138 XM_H_Long_From02 1874 1.13 1.22 1.08 139 TooManyTo_003 1862 0.86 0.46 1.07 140 SUBJ_ALL_CAPS 1847 1.37 1.95 1.06 141 HTML_EXTRA_CLOSE 1839 0.71 0.07 1.05 142 DIET_1 1791 1.57 2.58 1.03 143 XMBody_95 1733 0.70 0.16 0.99 144 XM_B_FormFill 1706 0.64 0.01 0.98 145 T_FILL_THIS_FORM_SHORT 1634 1.55 2.70 0.94 146 XM_H_PHPMailer 1500 0.79 0.66 0.86 147 XM_B_SpammyWords4 1469 1.38 2.38 0.84 148 XMPhish30 1443 1.10 1.61 0.83 149 TR_XM_DK_SendGrid 1413 0.88 1.00 0.81 150 TR_XM_Base64_M1 1410 0.83 0.87 0.81 151 XMBdyGiftCard01 1403 0.99 1.32 0.80 152 TooManyTo_004 1399 0.68 0.44 0.80 153 XM_UB50 1377 1.52 2.88 0.79 154 XMSubMetaI_00 1374 0.78 0.78 0.79 155 RCVD_IN_PSBL 1350 1.75 3.59 0.77 156 RCVD_IN_BL_SPAMCOP_NET 1348 3.68 9.11 0.77 157 XM_ProductURIs 1346 1.04 1.54 0.77 158 HELO_MISC_IP 1307 0.53 0.11 0.75 159 CHARSET_FARAWAY_HEADER 1276 0.67 0.55 0.73 160 DKIM_ADSP_CUSTOM_MED 1245 0.89 1.23 0.71 161 TooManyTo_005 1239 0.61 0.42 0.71 162 MPART_ALT_DIFF_COUNT 1229 0.97 1.46 0.71 163 SpammyFromTLD_01 1229 1.00 1.56 0.71 164 USER_IN_WHITELIST 1202 0.45 0.00 0.69 165 USER_IN_WELCOMELIST 1202 0.45 0.00 0.69 166 XM_B_DNDMA 1188 0.83 1.09 0.68 167 HTML_TAG_BALANCE_BODY 1144 0.93 1.43 0.66 168 XMGenDplmaNmb 1108 0.77 1.03 0.64 169 XMBSHREFv2 1087 0.50 0.27 0.62 170 T_XMHurry_00 1070 1.26 2.48 0.61 171 TR_MetaPhish_Combo_01 1065 0.67 0.79 0.61 172 XMSubNoVowel 1057 0.57 0.51 0.61 173 HTML_IMAGE_ONLY_20 1048 1.12 2.10 0.60 174 TM2_M_OBFU_COMMENT 1005 0.85 1.36 0.58 175 RCVD_IN_PBL 981 0.82 1.29 0.56 176 XMLngstWrd_00 960 0.58 0.63 0.55 177 URI_TRY_3LD 954 0.66 0.88 0.55 178 TR_XM_SPAMCOP 939 2.93 7.40 0.54 179 T_OBFU_PDF_ATTACH 914 0.36 0.06 0.52 180 T_TooManySym_04 895 0.34 0.02 0.51 181 HTTPS_HTTP_MISMATCH 893 0.50 0.48 0.51 182 NO_DNS_FOR_FROM 871 1.12 2.28 0.50 183 XMBody_17 869 1.35 2.93 0.50 184 DKIM_ADSP_NXDOMAIN 849 1.15 2.39 0.49 185 NML_ADSP_CUSTOM_MED 846 0.67 1.03 0.49 186 T_Symld_Words_02 827 0.56 0.72 0.47 187 HTML_FONT_FACE_BAD 823 0.62 0.89 0.47 188 XM_S_SubURI 818 0.32 0.05 0.47 189 BASE64_LENGTH_79_INF 802 0.37 0.20 0.46 190 XM_URI_RBL 797 1.27 2.79 0.46 191 TR_XM_SpammyWords2 796 4.77 12.85 0.46 192 RELAYCOUNTRY_AU 791 1.13 2.40 0.45 193 T_XMDrugObfuBody_00 789 0.92 1.79 0.45 194 FILL_THIS_FORM 773 0.38 0.27 0.44 195 T_STY_INVIS_DIRECT 767 0.75 1.33 0.44 196 FORGED_GMAIL_RCVD 757 0.60 0.91 0.43 197 XMCapTrack 748 0.41 0.39 0.43 198 TR_XM_MaxWHORU 739 1.07 2.27 0.42 199 XM_ShortIntro_01 733 0.46 0.53 0.42 200 XMLngstWrd_01 701 0.33 0.19 0.40 ----------------------------------------------------------------------