Email: 262278 Autolearn: 0 AvgScore: 5.01 AvgScanTime: 1.36 sec Spam: 94638 Autolearn: 0 AvgScore: 13.81 AvgScanTime: 1.47 sec Ham: 167640 Autolearn: 0 AvgScore: 0.05 AvgScanTime: 1.31 sec Time Spent Running SA: 99.40 hours Time Spent Processing Spam: 38.62 hours Time Spent Processing Ham: 60.78 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 90919 88.02 96.07 83.48 2 DKIM_SIGNED 86702 82.32 91.61 77.08 3 XM_DK_Pass 82124 79.74 86.78 75.77 4 RELAYCOUNTRY_US 82033 83.15 86.68 81.16 5 XM_B_Unicode 81686 76.09 86.31 70.31 6 DKIM_VALID 81610 79.23 86.23 75.27 7 DCC_CHECK 75333 58.81 79.60 47.07 8 XMListUnsubscribeExists 70800 61.74 74.81 54.36 9 XM_B_SpammyWords 68212 55.26 72.08 45.77 10 DKIM_VALID_AU 66424 66.11 70.19 63.81 11 LOC_TINY_FONT_1 50476 39.77 53.34 32.10 12 XM_B_Unicode3 50196 47.79 53.04 44.82 13 XM_DK_Undo_02 42283 19.59 44.68 5.43 14 RCVD_IN_MSPIKE_H2 40828 40.33 43.14 38.74 15 XM_B_SpammyWords2 39539 27.78 41.78 19.88 16 HTML_FONT_LOW_CONTRAST 37133 33.56 39.24 30.35 17 BAYES_50 34599 53.16 36.56 62.53 18 BAYES_99 34079 15.77 36.01 4.34 19 T_KAM_HTML_FONT_INVALID 34068 26.99 36.00 21.90 20 FVGT_m_MULTI_ODD 31191 29.21 32.96 27.09 21 TR_XM_DKIM_Undo 30934 13.06 32.69 1.98 22 BAYES_999 27106 12.56 28.64 3.48 23 TR_DCC_Bayes_99 26118 10.84 27.60 1.38 24 DKIM_VALID_EF 25845 28.70 27.31 29.49 25 MIME_HTML_ONLY 24361 22.84 25.74 21.20 26 XM_Multi_Part_URI 22542 18.23 23.82 15.08 27 XMSubLong 21401 23.04 22.61 23.28 28 TR_XM_DK_Unsub 19274 16.76 20.37 14.73 29 DCC_CHECK_NEGATIVE 18826 40.99 19.89 52.90 30 T_TM2_M_HEADER_IN_MSG 17843 22.39 18.85 24.38 31 UNPARSEABLE_RELAY 16125 13.90 17.04 12.14 32 XM_B_SpammyWords3 15542 9.76 16.42 6.00 33 XM_B_Unsub 15346 11.66 16.22 9.09 34 TR_XM_BayesUnsub 14899 9.98 15.74 6.72 35 TR_MAX_INTL_RELAY 14303 9.39 15.11 6.16 36 TR_XM_SpammyWords2 13352 5.36 14.11 0.43 37 RELAYCOUNTRY_META 12792 7.20 13.52 3.63 38 LOTS_OF_MONEY 10786 7.59 11.40 5.45 39 RCVD_IN_BL_SPAMCOP_NET 10773 4.52 11.38 0.64 40 TR_XM_SpammyRelay 9969 5.21 10.53 2.21 41 TR_XM_SpammyWords4 9844 6.16 10.40 3.76 42 XM_Body_Dirty_Words 9145 5.14 9.66 2.58 43 BAYES_80 8675 5.72 9.17 3.77 44 TR_XM_UnparsRelay 8498 4.26 8.98 1.59 45 BAYES_60 8059 7.56 8.52 7.02 46 TR_XM_SPAMCOP 8009 3.30 8.46 0.39 47 XM_Evil_Numbers_Gen 7987 9.28 8.44 9.75 48 BOTNET 7764 3.68 8.20 1.13 49 BOTNET_IPINHOSTNAME 7715 5.24 8.15 3.60 50 FSL_BULK_SIG 7594 8.77 8.02 9.18 51 HTML_IMAGE_RATIO_02 7022 6.11 7.42 5.38 52 LotsOfNums_01 6643 7.19 7.02 7.28 53 XM_B_Phish_Phrases 6498 5.54 6.87 4.80 54 MPART_ALT_DIFF 5795 5.44 6.12 5.05 55 RELAYCOUNTRY_CA 5717 3.19 6.04 1.58 56 XMSubMetaSx_00 5533 4.87 5.85 4.31 57 XM_UncommonTLD01 5469 5.51 5.78 5.36 58 BAYES_95 5329 3.56 5.63 2.39 59 DKIM_INVALID 5092 3.10 5.38 1.81 60 XM_H_GMP 4932 5.93 5.21 6.33 61 T_XMDrugObfuBody_14 4903 3.34 5.18 2.29 62 HTML_IMAGE_RATIO_04 4763 4.18 5.03 3.70 63 XM_H_Long_From01 4471 5.30 4.72 5.63 64 XMStrtUSub 4412 5.51 4.66 5.99 65 TR_XM_PhishingBody 4315 2.70 4.56 1.65 66 XM_B_Investor 4166 2.37 4.40 1.23 67 XM_B_SpammyTLD 4152 3.32 4.39 2.72 68 RCVD_IN_VALIDITY_RPBL 4127 1.66 4.36 0.13 69 UNTRUSTED_Relay 4092 2.55 4.32 1.54 70 XMSexyCombo_05 3970 2.59 4.19 1.69 71 MIME_HTML_MOSTLY 3740 3.13 3.95 2.67 72 XM_B_PhoneNumber 3563 5.62 3.76 6.67 73 XM_CamelCaseFrm001 3532 3.08 3.73 2.71 74 NO_DNS_FOR_FROM 3394 1.58 3.59 0.45 75 TR_XM_MaxWHORU 3378 1.53 3.57 0.38 76 RCVD_IN_VALIDITY_SAFE 3366 5.05 3.56 5.89 77 HTML_IMAGE_RATIO_06 3355 3.34 3.55 3.23 78 DKIM_ADSP_NXDOMAIN 3326 1.59 3.51 0.51 79 MIME_HTML_ONLY_MULTI 3288 3.15 3.47 2.97 80 TR_XM_SpammyWords5 3245 2.11 3.43 1.36 81 XMBody_17 3240 1.64 3.42 0.63 82 HTML_IMAGE_RATIO_08 2983 2.56 3.15 2.23 83 TM2_M_VERY_LONG_WORD 2972 1.98 3.14 1.33 84 RCVD_IN_MSPIKE_WL 2955 4.24 3.12 4.88 85 RCVD_IN_MSPIKE_H3 2955 4.24 3.12 4.88 86 XM_OfRef6 2865 1.75 3.03 1.03 87 T_XMHurry_00 2849 1.56 3.01 0.74 88 RCVD_IN_VALIDITY_CERTIFIED 2846 3.88 3.01 4.37 89 XM_B_SpammyWords4 2840 1.67 3.00 0.93 90 XM_B_Unsub2 2794 1.81 2.95 1.17 91 T_XMDrugObfuBody_08 2778 2.24 2.94 1.85 92 XMDiploma_00 2725 1.91 2.88 1.37 93 TooManyTo_001 2704 5.47 2.86 6.94 94 XMNoVowels 2690 2.41 2.84 2.16 95 XMNumbers 2614 3.40 2.76 3.76 96 USER_IN_DEF_DKIM_WL 2510 12.21 2.65 17.61 97 T_TooManySym_01 2419 5.88 2.56 7.75 98 RELAYCOUNTRY_AU 2354 1.20 2.49 0.48 99 NORDNS_LOW_CONTRAST 2344 0.90 2.48 0.01 100 TM2_M_URI_OPT_OUT 2212 1.91 2.34 1.68 101 DIET_1 2196 1.30 2.32 0.73 102 FROM_EXCESS_BASE64 2196 2.21 2.32 2.15 103 XM_SPF_SoftFail 2145 1.49 2.27 1.05 104 XM_URI_RBL 2026 1.07 2.14 0.46 105 XMBdyGiftCard01 2015 1.52 2.13 1.17 106 XM_UB50 2012 1.32 2.13 0.87 107 TR_XM_INV_DKIM 1959 0.89 2.07 0.22 108 PLING_QUERY 1950 1.12 2.06 0.58 109 XM_B_URI_Unicode 1925 1.80 2.03 1.67 110 T_XMDrugObfuBody_00 1914 1.01 2.02 0.44 111 TR_XM_NoHeaderRelay 1884 0.85 1.99 0.20 112 MAILING_LIST_MULTI 1883 2.19 1.99 2.30 113 SpammyFromTLD_02 1848 0.86 1.95 0.25 114 SpammyFromTLD_01 1809 1.11 1.91 0.66 115 XMStockSpam_06 1761 1.78 1.86 1.74 116 MPART_ALT_DIFF_COUNT 1740 1.01 1.84 0.55 117 XMPhish30 1711 1.18 1.81 0.82 118 T_FILL_THIS_FORM_SHORT 1686 1.01 1.78 0.58 119 XM_B_COPY_HTML 1684 1.22 1.78 0.90 120 XMBrknScrpt_02 1653 1.29 1.75 1.03 121 SUBJ_ALL_CAPS 1599 1.36 1.69 1.17 122 SHOPIFY_IMG_NOT_RCVD_SFY 1451 0.78 1.53 0.35 123 TR_XM_PHPDW 1438 0.69 1.52 0.23 124 TR_LOTS_OF_MONEY3 1437 0.76 1.52 0.34 125 TR_XM_PHPForged 1417 0.68 1.50 0.22 126 TR_XM_FormFill2 1401 0.67 1.48 0.22 127 XMSubMetaI_00 1375 1.11 1.45 0.91 128 BAYES_40 1373 3.67 1.45 4.93 129 XM_H_PHPOS 1372 0.65 1.45 0.20 130 LongTLD 1330 0.74 1.41 0.36 131 MIME_QP_LONG_LINE 1320 2.65 1.39 3.36 132 T_STY_INVIS_DIRECT 1293 0.84 1.37 0.54 133 T_REMOTE_IMAGE 1283 2.76 1.36 3.56 134 XM_B_DNDMA 1236 0.92 1.31 0.70 135 XM_H_Long_From02 1176 1.07 1.24 0.98 136 ALL_TRUSTED 1171 10.25 1.24 15.33 137 TM2_M_OBFU_COMMENT 1170 0.72 1.24 0.44 138 TR_Symld_Words 1165 1.33 1.23 1.39 139 URI_HEX 1153 1.08 1.22 1.01 140 KHOP_HELO_FCRDNS 1147 1.22 1.21 1.22 141 THIS_AD 1129 0.88 1.19 0.70 142 XM_B_Phish66 1086 0.57 1.15 0.24 143 XM_DK_Undo_01 1071 1.69 1.13 2.00 144 XM_SendGrid 1061 1.14 1.12 1.16 145 HTML_TAG_BALANCE_BODY 1057 1.11 1.12 1.10 146 URI_TRY_3LD 1031 0.72 1.09 0.51 147 RCVD_IN_PBL 1023 0.81 1.08 0.66 148 URI_NOVOWEL 1014 1.38 1.07 1.56 149 HTML_MIME_NO_HTML_TAG 1009 1.38 1.07 1.56 150 BAYES_20 1006 2.56 1.06 3.41 151 XMReplyNow 998 0.58 1.05 0.31 152 BOTNET_NORDNS 986 0.38 1.04 0.01 153 TR_LOTS_OF_MONEY2 982 0.46 1.04 0.13 154 T_MONEY_PERCENT 982 0.46 1.04 0.13 155 XMSlimDrugH 962 0.60 1.02 0.37 156 TR_MetaPhish_Combo_01 941 0.93 0.99 0.89 157 HTML_FONT_TINY_NORDNS 941 0.39 0.99 0.04 158 SUSP_UTF8_WORD_SUBJ 919 0.37 0.97 0.02 159 TR_Mismatch_TLD_02 917 0.40 0.97 0.08 160 HTTPS_HTTP_MISMATCH 916 0.64 0.97 0.46 161 FROM_SUSPICIOUS_NTLD 905 0.38 0.96 0.05 162 HOSTED_IMG_MULTI_PUB_01 894 0.35 0.94 0.01 163 XMGenDplmaNmb 879 0.68 0.93 0.54 164 XM_HighProb1 865 0.34 0.91 0.02 165 J_POPCORN_WO_D 839 0.49 0.89 0.27 166 XM_UB99 824 0.32 0.87 0.01 167 XM_DIRTYINTL 815 0.36 0.86 0.08 168 TR_Mismatch_TLD_01 811 0.55 0.86 0.37 169 TR_XM_DK_SendGrid 804 0.87 0.85 0.88 170 MIME_CHARSET_FARAWAY 795 0.58 0.84 0.44 171 XM_B_SEO 795 0.44 0.84 0.22 172 XM_B_REG_HTML 794 0.44 0.84 0.21 173 FONT_INVIS_LONG_LINE 786 0.37 0.83 0.11 174 DKIM_ADSP_CUSTOM_MED 786 0.83 0.83 0.84 175 RCVD_IN_PSBL 779 0.72 0.82 0.66 176 HTML_FONT_FACE_BAD 773 0.55 0.82 0.40 177 XMPhish08 770 0.46 0.81 0.25 178 XM_ProductURIs 764 0.80 0.81 0.79 179 TR_XM_Base64_M1 759 0.67 0.80 0.59 180 TR_XM_SEO4 741 0.32 0.78 0.06 181 MultiRelay_CC 740 0.34 0.78 0.10 182 XMSexyCombo_01 737 0.40 0.78 0.18 183 RCVD_IN_XBL 729 0.29 0.77 0.02 184 XMSolicitRefs_0 724 0.43 0.77 0.24 185 XM_H_PHPMailer 718 0.69 0.76 0.66 186 DEAR_FRIEND 690 0.31 0.73 0.08 187 NML_ADSP_CUSTOM_MED 680 0.60 0.72 0.53 188 TR_XM_FormFill 680 0.27 0.72 0.01 189 LOW_PRICE 671 1.05 0.71 1.24 190 XM_RXBody 670 1.31 0.71 1.65 191 TR_XM_RelayPhish 657 0.29 0.69 0.07 192 XMPhish14 656 0.43 0.69 0.28 193 RELAYCOUNTRY_FR 650 0.35 0.69 0.16 194 HTML_IMAGE_ONLY_20 629 0.51 0.66 0.42 195 TM2_M_A_HREF_HREF 626 0.34 0.66 0.16 196 AC_HTML_NONSENSE_TAGS 625 0.33 0.66 0.14 197 BAYES_05 617 1.38 0.65 1.79 198 T_Symld_Words_02 613 0.42 0.65 0.30 199 XM_GoogleGroups 613 0.98 0.65 1.16 200 XMBody_78 611 0.35 0.65 0.19 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139940 88.02 96.07 83.48 2 RELAYCOUNTRY_US 136052 83.15 86.68 81.16 3 DKIM_SIGNED 129218 82.32 91.61 77.08 4 XM_DK_Pass 127023 79.74 86.78 75.77 5 DKIM_VALID 126186 79.23 86.23 75.27 6 XM_B_Unicode 117874 76.09 86.31 70.31 7 DKIM_VALID_AU 106978 66.11 70.19 63.81 8 BAYES_50 104830 53.16 36.56 62.53 9 XMListUnsubscribeExists 91127 61.74 74.81 54.36 10 DCC_CHECK_NEGATIVE 88685 40.99 19.89 52.90 11 DCC_CHECK 78908 58.81 79.60 47.07 12 XM_B_SpammyWords 76735 55.26 72.08 45.77 13 XM_B_Unicode3 75142 47.79 53.04 44.82 14 RCVD_IN_MSPIKE_H2 64944 40.33 43.14 38.74 15 LOC_TINY_FONT_1 53820 39.77 53.34 32.10 16 HTML_FONT_LOW_CONTRAST 50877 33.56 39.24 30.35 17 DKIM_VALID_EF 49433 28.70 27.31 29.49 18 FVGT_m_MULTI_ODD 45413 29.21 32.96 27.09 19 T_TM2_M_HEADER_IN_MSG 40877 22.39 18.85 24.38 20 XMSubLong 39020 23.04 22.61 23.28 21 T_KAM_HTML_FONT_INVALID 36712 26.99 36.00 21.90 22 MIME_HTML_ONLY 35533 22.84 25.74 21.20 23 XM_B_SpammyWords2 33320 27.78 41.78 19.88 24 USER_IN_DEF_DKIM_WL 29526 12.21 2.65 17.61 25 ALL_TRUSTED 25704 10.25 1.24 15.33 26 XM_Multi_Part_URI 25277 18.23 23.82 15.08 27 TR_XM_DK_Unsub 24689 16.76 20.37 14.73 28 UNPARSEABLE_RELAY 20344 13.90 17.04 12.14 29 BAYES_00 16464 6.44 0.45 9.82 30 XM_Evil_Numbers_Gen 16345 9.28 8.44 9.75 31 FSL_BULK_SIG 15396 8.77 8.02 9.18 32 XM_B_Unsub 15241 11.66 16.22 9.09 33 XM_DKIMWhitelistDomains 14863 5.70 0.10 8.87 34 T_TooManySym_01 13000 5.88 2.56 7.75 35 LotsOfNums_01 12205 7.19 7.02 7.28 36 TR_XM_DK_Bayes 12008 4.70 0.35 7.16 37 TR_XM_DK_Bayes1 11910 4.67 0.35 7.10 38 BAYES_60 11773 7.56 8.52 7.02 39 TooManyTo_001 11635 5.47 2.86 6.94 40 TR_XM_BayesUnsub 11268 9.98 15.74 6.72 41 XM_B_PhoneNumber 11187 5.62 3.76 6.67 42 XM_H_GMP 10612 5.93 5.21 6.33 43 TR_XM_DK_Bayes2 10519 4.09 0.23 6.27 44 TR_MAX_INTL_RELAY 10320 9.39 15.11 6.16 45 XM_B_SpammyWords3 10054 9.76 16.42 6.00 46 XMStrtUSub 10044 5.51 4.66 5.99 47 RCVD_IN_VALIDITY_SAFE 9878 5.05 3.56 5.89 48 IN_ZIMBRA_NJ_WHITELIST 9801 3.76 0.06 5.85 49 XM_H_Long_From01 9432 5.30 4.72 5.63 50 LOTS_OF_MONEY 9131 7.59 11.40 5.45 51 XM_DK_Undo_02 9101 19.59 44.68 5.43 52 HTML_IMAGE_RATIO_02 9013 6.11 7.42 5.38 53 XM_UncommonTLD01 8980 5.51 5.78 5.36 54 MPART_ALT_DIFF 8463 5.44 6.12 5.05 55 BAYES_40 8258 3.67 1.45 4.93 56 RCVD_IN_MSPIKE_WL 8174 4.24 3.12 4.88 57 RCVD_IN_MSPIKE_H3 8173 4.24 3.12 4.88 58 XM_B_Phish_Phrases 8041 5.54 6.87 4.80 59 T_TooManySym_02 7484 3.07 0.60 4.46 60 RCVD_IN_VALIDITY_CERTIFIED 7327 3.88 3.01 4.37 61 BAYES_99 7274 15.77 36.01 4.34 62 ANY_BOUNCE_MESSAGE 7250 2.97 0.57 4.32 63 BOUNCE_MESSAGE 7244 2.96 0.56 4.32 64 XMSubMetaSx_00 7232 4.87 5.85 4.31 65 INVALID_MSGID 7084 2.77 0.20 4.23 66 BAYES_80 6318 5.72 9.17 3.77 67 XMNumbers 6309 3.40 2.76 3.76 68 TR_XM_SpammyWords4 6300 6.16 10.40 3.76 69 TO_MALFORMED 6286 2.43 0.09 3.75 70 HTML_IMAGE_RATIO_04 6196 4.18 5.03 3.70 71 RELAYCOUNTRY_META 6087 7.20 13.52 3.63 72 BOTNET_IPINHOSTNAME 6037 5.24 8.15 3.60 73 T_REMOTE_IMAGE 5966 2.76 1.36 3.56 74 BAYES_999 5840 12.56 28.64 3.48 75 BAYES_20 5713 2.56 1.06 3.41 76 MIME_QP_LONG_LINE 5640 2.65 1.39 3.36 77 HTML_IMAGE_RATIO_06 5410 3.34 3.55 3.23 78 MIME_HTML_ONLY_MULTI 4983 3.15 3.47 2.97 79 TooManyTo_002 4608 1.92 0.45 2.75 80 XM_B_SpammyTLD 4555 3.32 4.39 2.72 81 XM_CamelCaseFrm001 4542 3.08 3.73 2.71 82 MIME_HTML_MOSTLY 4479 3.13 3.95 2.67 83 RCVD_IN_IADB_LISTED 4340 1.83 0.49 2.59 84 XM_Body_Dirty_Words 4324 5.14 9.66 2.58 85 XM_PDF 4244 1.74 0.33 2.53 86 BAYES_95 4000 3.56 5.63 2.39 87 MAILING_LIST_MULTI 3861 2.19 1.99 2.30 88 RCVD_IN_IADB_SPF 3850 1.63 0.44 2.30 89 T_XMDrugObfuBody_14 3846 3.34 5.18 2.29 90 HTML_IMAGE_RATIO_08 3744 2.56 3.15 2.23 91 TR_XM_SpammyRelay 3699 5.21 10.53 2.21 92 XMNoVowels 3619 2.41 2.84 2.16 93 FROM_EXCESS_BASE64 3607 2.21 2.32 2.15 94 RCVD_IN_IADB_SENDERID 3456 1.47 0.43 2.06 95 RCVD_IN_IADB_DK 3402 1.46 0.44 2.03 96 XMGappySubj_01 3387 1.40 0.30 2.02 97 XM_DK_Undo_01 3356 1.69 1.13 2.00 98 TR_XM_DKIM_Undo 3321 13.06 32.69 1.98 99 T_TooManySym_03 3208 1.28 0.17 1.91 100 T_XMDrugObfuBody_08 3097 2.24 2.94 1.85 101 RCVD_IN_IADB_VOUCHED 3079 1.25 0.21 1.84 102 DKIM_INVALID 3032 3.10 5.38 1.81 103 XMGappySubj_02 3020 1.17 0.06 1.80 104 BAYES_05 3008 1.38 0.65 1.79 105 XMStockSpam_06 2912 1.78 1.86 1.74 106 IN_HORDE_ADDRESS_BOOK 2842 1.12 0.09 1.70 107 XMSexyCombo_05 2827 2.59 4.19 1.69 108 TM2_M_URI_OPT_OUT 2810 1.91 2.34 1.68 109 XM_B_URI_Unicode 2797 1.80 2.03 1.67 110 TR_XM_PhishingBody 2767 2.70 4.56 1.65 111 XM_RXBody 2764 1.31 0.71 1.65 112 TR_XM_UnparsRelay 2669 4.26 8.98 1.59 113 RELAYCOUNTRY_CA 2646 3.19 6.04 1.58 114 TVD_SPACE_RATIO 2624 1.04 0.12 1.57 115 HTML_MIME_NO_HTML_TAG 2619 1.38 1.07 1.56 116 URI_NOVOWEL 2608 1.38 1.07 1.56 117 UNTRUSTED_Relay 2589 2.55 4.32 1.54 118 TR_Symld_Words 2325 1.33 1.23 1.39 119 TR_DCC_Bayes_99 2320 10.84 27.60 1.38 120 XMDiploma_00 2290 1.91 2.88 1.37 121 TR_XM_SpammyWords5 2276 2.11 3.43 1.36 122 TM2_M_VERY_LONG_WORD 2229 1.98 3.14 1.33 123 RCVD_IN_IADB_OPTIN 2228 0.89 0.13 1.33 124 T_TVD_MIME_NO_HEADERS 2167 0.85 0.05 1.29 125 TooManyTo_003 2134 0.96 0.40 1.27 126 LOW_PRICE 2082 1.05 0.71 1.24 127 XM_B_Investor 2059 2.37 4.40 1.23 128 KHOP_HELO_FCRDNS 2047 1.22 1.21 1.22 129 XMBdyGiftCard01 1969 1.52 2.13 1.17 130 XM_B_Unsub2 1964 1.81 2.95 1.17 131 SUBJ_ALL_CAPS 1962 1.36 1.69 1.17 132 XM_GoogleGroups 1951 0.98 0.65 1.16 133 XM_SendGrid 1938 1.14 1.12 1.16 134 BOTNET 1897 3.68 8.20 1.13 135 HTML_TAG_BALANCE_BODY 1852 1.11 1.12 1.10 136 XM_B_FormFill 1761 0.68 0.01 1.05 137 XM_SPF_SoftFail 1761 1.49 2.27 1.05 138 TVD_RCVD_IP 1739 0.87 0.57 1.04 139 HTML_EXTRA_CLOSE 1731 0.71 0.15 1.03 140 XMBrknScrpt_02 1727 1.29 1.75 1.03 141 XM_OfRef6 1719 1.75 3.03 1.03 142 URI_HEX 1690 1.08 1.22 1.01 143 XM_H_Long_From02 1640 1.07 1.24 0.98 144 TooManyTo_004 1579 0.74 0.38 0.94 145 XM_B_SpammyWords4 1551 1.67 3.00 0.93 146 XMSubMetaI_00 1527 1.11 1.45 0.91 147 XM_B_COPY_HTML 1516 1.22 1.78 0.90 148 TR_MetaPhish_Combo_01 1487 0.93 0.99 0.89 149 XMBody_95 1484 0.63 0.17 0.89 150 TR_XM_DK_SendGrid 1468 0.87 0.85 0.88 151 XM_UB50 1453 1.32 2.13 0.87 152 DKIM_ADSP_CUSTOM_MED 1403 0.83 0.83 0.84 153 XMPhish30 1376 1.18 1.81 0.82 154 TooManyTo_005 1358 0.65 0.37 0.81 155 XM_ProductURIs 1330 0.80 0.81 0.79 156 HELO_MISC_IP 1262 0.51 0.08 0.75 157 T_XMHurry_00 1241 1.56 3.01 0.74 158 DIET_1 1224 1.30 2.32 0.73 159 XMBSHREFv2 1194 0.58 0.35 0.71 160 XM_B_DNDMA 1173 0.92 1.31 0.70 161 THIS_AD 1170 0.88 1.19 0.70 162 USER_IN_WELCOMELIST 1145 0.44 0.00 0.68 163 USER_IN_WHITELIST 1145 0.44 0.00 0.68 164 RCVD_IN_PBL 1114 0.81 1.08 0.66 165 RCVD_IN_PSBL 1112 0.72 0.82 0.66 166 SpammyFromTLD_01 1111 1.11 1.91 0.66 167 XM_H_PHPMailer 1102 0.69 0.76 0.66 168 RCVD_IN_BL_SPAMCOP_NET 1074 4.52 11.38 0.64 169 XMBody_17 1063 1.64 3.42 0.63 170 XMLngstWrd_00 1051 0.51 0.31 0.63 171 TR_XM_Base64_M1 988 0.67 0.80 0.59 172 PLING_QUERY 979 1.12 2.06 0.58 173 T_FILL_THIS_FORM_SHORT 972 1.01 1.78 0.58 174 MPART_ALT_DIFF_COUNT 915 1.01 1.84 0.55 175 T_TooManySym_04 912 0.36 0.04 0.54 176 XMSubMetaSxObfu_03 912 0.48 0.37 0.54 177 XMGenDplmaNmb 906 0.68 0.93 0.54 178 T_STY_INVIS_DIRECT 905 0.84 1.37 0.54 179 NML_ADSP_CUSTOM_MED 886 0.60 0.72 0.53 180 FORGED_GMAIL_RCVD 886 0.56 0.61 0.53 181 XMLngstWrd_01 885 0.43 0.25 0.53 182 URI_TRY_3LD 850 0.72 1.09 0.51 183 DKIM_ADSP_NXDOMAIN 849 1.59 3.51 0.51 184 FILL_THIS_FORM 839 0.38 0.17 0.50 185 XM_ShortIntro_01 829 0.48 0.45 0.49 186 RELAYCOUNTRY_AU 797 1.20 2.49 0.48 187 XM_URI_RBL 775 1.07 2.14 0.46 188 HTTPS_HTTP_MISMATCH 772 0.64 0.97 0.46 189 XMCapTrack 769 0.38 0.24 0.46 190 XM_S_SubURI 767 0.31 0.06 0.46 191 NO_DNS_FOR_FROM 759 1.58 3.59 0.45 192 XMLngstWrd_02 753 0.36 0.21 0.45 193 BASE64_LENGTH_79_INF 746 0.32 0.10 0.45 194 MIME_CHARSET_FARAWAY 734 0.58 0.84 0.44 195 TM2_M_OBFU_COMMENT 731 0.72 1.24 0.44 196 T_XMDrugObfuBody_00 730 1.01 2.02 0.44 197 TR_XM_SpammyWords2 714 5.36 14.11 0.43 198 HTML_IMAGE_ONLY_20 703 0.51 0.66 0.42 199 HTML_FONT_FACE_BAD 672 0.55 0.82 0.40 200 SUBJ_DOLLARS 665 0.44 0.53 0.40 ----------------------------------------------------------------------