Email: 264040 Autolearn: 0 AvgScore: 5.01 AvgScanTime: 1.30 sec Spam: 96514 Autolearn: 0 AvgScore: 13.92 AvgScanTime: 1.35 sec Ham: 167526 Autolearn: 0 AvgScore: -0.12 AvgScanTime: 1.28 sec Time Spent Running SA: 95.51 hours Time Spent Processing Spam: 36.06 hours Time Spent Processing Ham: 59.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 90252 87.47 93.51 83.99 2 DKIM_SIGNED 87114 82.48 90.26 78.00 3 XM_DK_Pass 82927 80.05 85.92 76.66 4 XM_B_Unicode 82554 76.44 85.54 71.20 5 DKIM_VALID 82334 79.47 85.31 76.11 6 RELAYCOUNTRY_US 81083 82.22 84.01 81.19 7 DCC_CHECK 76546 58.93 79.31 47.18 8 XMListUnsubscribeExists 68949 60.51 71.44 54.21 9 DKIM_VALID_AU 67213 66.22 69.64 64.26 10 XM_B_SpammyWords 65683 54.03 68.06 45.95 11 XM_B_Unicode3 48694 46.88 50.45 44.82 12 LOC_TINY_FONT_1 47927 39.13 49.66 33.06 13 XM_DK_Undo_02 40843 18.99 42.32 5.55 14 RCVD_IN_MSPIKE_H2 40784 40.21 42.26 39.03 15 XM_B_SpammyWords2 37139 27.02 38.48 20.42 16 HTML_FONT_LOW_CONTRAST 36361 32.96 37.67 30.25 17 BAYES_50 34327 52.55 35.57 62.34 18 T_KAM_HTML_FONT_INVALID 34182 26.80 35.42 21.84 19 BAYES_99 32974 15.16 34.16 4.21 20 TR_XM_DKIM_Undo 29342 12.50 30.40 2.18 21 FVGT_m_MULTI_ODD 28771 27.62 29.81 26.37 22 DKIM_VALID_EF 28614 29.90 29.65 30.04 23 MIME_HTML_ONLY 26545 24.53 27.50 22.82 24 TR_DCC_Bayes_99 25313 10.49 26.23 1.43 25 BAYES_999 25233 11.56 26.14 3.16 26 XM_Multi_Part_URI 22694 18.79 23.51 16.06 27 TR_XM_DK_Unsub 19620 16.89 20.33 14.91 28 XMSubLong 19493 21.77 20.20 22.68 29 DCC_CHECK_NEGATIVE 19475 40.87 20.18 52.78 30 T_TM2_M_HEADER_IN_MSG 17135 21.16 17.75 23.11 31 TR_MAX_INTL_RELAY 16683 10.42 17.29 6.46 32 XM_B_Unsub 16077 12.06 16.66 9.41 33 UNPARSEABLE_RELAY 15546 14.05 16.11 12.87 34 TR_XM_BayesUnsub 15471 10.55 16.03 7.39 35 RELAYCOUNTRY_META 14621 7.74 15.15 3.47 36 XM_B_SpammyWords3 14093 9.24 14.60 6.15 37 TR_XM_SpammyWords2 11879 4.81 12.31 0.48 38 LOTS_OF_MONEY 10957 7.62 11.35 5.47 39 TR_XM_SpammyRelay 10610 5.13 10.99 1.75 40 FSL_BULK_SIG 10212 9.98 10.58 9.63 41 BAYES_80 10051 6.30 10.41 3.94 42 BOTNET 9788 4.47 10.14 1.21 43 RCVD_IN_BL_SPAMCOP_NET 9207 4.02 9.54 0.83 44 TR_XM_SpammyWords4 8814 5.66 9.13 3.66 45 BAYES_60 8776 7.98 9.09 7.33 46 BOTNET_IPINHOSTNAME 8608 5.49 8.92 3.52 47 TR_XM_UnparsRelay 8460 4.38 8.77 1.85 48 XM_Body_Dirty_Words 7627 4.54 7.90 2.61 49 XM_Evil_Numbers_Gen 7316 9.11 7.58 9.99 50 HTML_IMAGE_RATIO_02 7102 6.20 7.36 5.53 51 XM_H_GMP 6855 6.79 7.10 6.61 52 RELAYCOUNTRY_CA 6769 3.54 7.01 1.55 53 BAYES_95 6330 3.99 6.56 2.52 54 TR_XM_SPAMCOP 6245 2.66 6.47 0.46 55 XM_B_Phish_Phrases 6152 5.19 6.37 4.51 56 UNTRUSTED_Relay 5981 3.18 6.20 1.44 57 XM_UncommonTLD01 5979 5.63 6.19 5.30 58 LotsOfNums_01 5945 6.86 6.16 7.26 59 XMSubMetaSx_00 5718 4.97 5.92 4.42 60 MPART_ALT_DIFF 5395 5.26 5.59 5.07 61 HTML_IMAGE_RATIO_04 5095 4.36 5.28 3.83 62 XM_H_Long_From01 5018 5.49 5.20 5.66 63 DKIM_INVALID 4780 3.01 4.95 1.89 64 TooManyTo_001 4391 5.65 4.55 6.29 65 TR_XM_PhishingBody 4326 2.75 4.48 1.75 66 XMSexyCombo_05 4317 2.68 4.47 1.65 67 XMStrtUSub 4316 5.18 4.47 5.59 68 T_XMDrugObfuBody_14 4269 3.09 4.42 2.32 69 RCVD_IN_VALIDITY_RPBL 4140 1.59 4.29 0.03 70 MIME_HTML_MOSTLY 3857 3.32 4.00 2.93 71 HTML_IMAGE_RATIO_06 3835 3.60 3.97 3.38 72 DKIM_ADSP_NXDOMAIN 3805 1.76 3.94 0.50 73 XM_B_PhoneNumber 3469 5.62 3.59 6.79 74 XM_UB50 3425 1.79 3.55 0.78 75 RCVD_IN_MSPIKE_H3 3347 4.46 3.47 5.04 76 RCVD_IN_MSPIKE_WL 3347 4.46 3.47 5.04 77 MIME_QP_LONG_LINE 3273 3.39 3.39 3.40 78 XM_B_Investor 3272 2.23 3.39 1.56 79 MIME_HTML_ONLY_MULTI 3160 3.16 3.27 3.09 80 XM_OfRef6 3121 1.71 3.23 0.83 81 XM_CamelCaseFrm001 3062 2.73 3.17 2.47 82 TM2_M_VERY_LONG_WORD 2950 1.92 3.06 1.27 83 XM_B_SpammyTLD 2942 2.87 3.05 2.77 84 XM_H_Undi_Recip 2811 1.17 2.91 0.17 85 T_FILL_THIS_FORM_SHORT 2799 1.46 2.90 0.62 86 T_XMHurry_00 2693 1.47 2.79 0.70 87 HTML_IMAGE_RATIO_08 2677 2.50 2.77 2.34 88 T_XMDrugObfuBody_08 2656 1.88 2.75 1.38 89 DIET_1 2655 1.46 2.75 0.72 90 RCVD_IN_VALIDITY_SAFE 2647 4.58 2.74 5.63 91 XM_SPF_SoftFail 2528 1.57 2.62 0.96 92 BOTNET_NORDNS 2524 0.96 2.62 0.01 93 TR_XM_Undi_Recip19 2520 1.04 2.61 0.13 94 UNDISC_MONEY 2420 0.94 2.51 0.04 95 TR_XM_SpammyWords5 2370 1.67 2.46 1.21 96 XMNumbers 2339 3.29 2.42 3.79 97 TR_XM_Undi_Recip2 2336 0.91 2.42 0.04 98 RELAYCOUNTRY_AU 2318 1.10 2.40 0.35 99 XM_URI_RBL 2308 1.26 2.39 0.60 100 RCVD_IN_VALIDITY_CERTIFIED 2212 3.65 2.29 4.43 101 ANY_BOUNCE_MESSAGE 2198 3.62 2.28 4.39 102 BOUNCE_MESSAGE 2198 3.62 2.28 4.39 103 USER_IN_DEF_DKIM_WL 2151 11.92 2.23 17.51 104 XM_B_Unsub2 2127 1.60 2.20 1.26 105 XMDiploma_00 2121 1.69 2.20 1.40 106 XM_B_URI_Unicode 2118 1.82 2.19 1.61 107 NO_DNS_FOR_FROM 2079 1.07 2.15 0.45 108 SpammyFromTLD_02 2073 0.94 2.15 0.25 109 XMBody_17 2068 1.26 2.14 0.75 110 TR_XM_MaxWHORU 2055 0.99 2.13 0.34 111 TR_XM_Undi_RecipCombo2 2000 0.76 2.07 0.00 112 FROM_EXCESS_BASE64 1971 2.36 2.04 2.54 113 XMNoVowels 1959 1.91 2.03 1.84 114 TM2_M_URI_OPT_OUT 1952 1.94 2.02 1.90 115 TR_XM_NoHeaderRelay 1936 0.83 2.01 0.15 116 XM_B_SpammyWords4 1911 1.49 1.98 1.21 117 MAILING_LIST_MULTI 1877 2.26 1.94 2.44 118 TR_XM_INV_DKIM 1837 0.84 1.90 0.23 119 T_TooManySym_01 1790 5.69 1.85 7.91 120 TR_LOTS_OF_MONEY3 1741 0.95 1.80 0.46 121 XM_B_COPY_HTML 1706 1.24 1.77 0.94 122 XMBounce_01 1663 0.64 1.72 0.01 123 SpammyFromTLD_01 1656 1.07 1.72 0.70 124 T_XMDrugObfuBody_00 1633 1.04 1.69 0.66 125 LongTLD 1627 0.78 1.69 0.26 126 DEAR_SOMETHING 1616 0.64 1.67 0.05 127 XMPhish30 1522 1.06 1.58 0.77 128 NORDNS_LOW_CONTRAST 1508 0.58 1.56 0.02 129 XM_DK_Undo_01 1489 1.40 1.54 1.31 130 BAYES_40 1457 3.73 1.51 5.01 131 HK_SCAM 1450 0.55 1.50 0.01 132 XMBrknScrpt_02 1447 1.46 1.50 1.44 133 TR_XM_Undi_Recip5 1442 0.55 1.49 0.00 134 XMStockSpam_06 1420 1.60 1.47 1.68 135 XMBdyGiftCard01 1373 1.06 1.42 0.86 136 XM_B_Phish66 1358 0.74 1.41 0.35 137 HTML_TAG_BALANCE_BODY 1319 0.99 1.37 0.78 138 URI_HEX 1316 1.22 1.36 1.14 139 TM2_M_OBFU_COMMENT 1312 0.80 1.36 0.48 140 T_REMOTE_IMAGE 1311 2.82 1.36 3.67 141 TR_Symld_Words 1310 1.38 1.36 1.39 142 SHOPIFY_IMG_NOT_RCVD_SFY 1293 0.74 1.34 0.39 143 HK_RANDOM_REPLYTO 1291 0.63 1.34 0.23 144 FILL_THIS_FORM 1290 0.70 1.34 0.33 145 MPART_ALT_DIFF_COUNT 1275 0.91 1.32 0.67 146 RCVD_IN_PBL 1256 0.93 1.30 0.71 147 TR_Mismatch_TLD_02 1232 0.50 1.28 0.06 148 RCVD_IN_PSBL 1224 0.82 1.27 0.56 149 SUBJ_ALL_CAPS 1210 1.25 1.25 1.24 150 MONEY_FORM 1191 0.45 1.23 0.00 151 KHOP_HELO_FCRDNS 1186 1.26 1.23 1.27 152 ALL_TRUSTED 1167 10.31 1.21 15.55 153 TR_XM_PHPForged 1167 0.55 1.21 0.17 154 MultiRelay_CC 1158 0.52 1.20 0.12 155 MONEY_FRAUD_8 1149 0.44 1.19 0.00 156 TR_XM_PHPDW 1147 0.55 1.19 0.18 157 TR_XM_FormFill2 1140 0.54 1.18 0.17 158 HTML_FONT_TINY_NORDNS 1135 0.45 1.18 0.04 159 FILL_THIS_FORM_LONG 1126 0.54 1.17 0.18 160 TR_XM_Undi_RecipCombo3 1124 0.43 1.16 0.00 161 XM_H_PHPOS 1124 0.53 1.16 0.16 162 XM_SendGrid 1119 1.10 1.16 1.06 163 XM_H_Long_From02 1094 1.05 1.13 1.00 164 FONT_INVIS_LONG_LINE 1092 0.51 1.13 0.15 165 XM_B_REG_HTML 1083 0.64 1.12 0.36 166 XMSubMetaI_00 1077 0.80 1.12 0.61 167 ADVANCE_FEE_5_NEW_FRM_MNY 1045 0.40 1.08 0.00 168 RELAYCOUNTRY_RU 1025 0.40 1.06 0.02 169 XMSlimDrugH 1018 0.74 1.05 0.56 170 XMReplyNow 1016 0.58 1.05 0.31 171 LOTTO_DEPT 1009 0.38 1.05 0.00 172 UNCLAIMED_MONEY 1002 0.38 1.04 0.00 173 TR_XM_FormFill 994 0.38 1.03 0.01 174 URI_TRY_3LD 994 0.77 1.03 0.63 175 XM_B_DNDMA 992 0.75 1.03 0.60 176 TR_XM_Undi_RecipCombo4 987 0.37 1.02 0.00 177 XMSubMetaSxObfu_03 982 0.66 1.02 0.46 178 TR_XM_Undi_Recip9 980 0.37 1.02 0.00 179 BAYES_20 976 2.46 1.01 3.30 180 J_POPCORN_WO_D 962 0.55 1.00 0.29 181 XM_HighProb1 961 0.37 1.00 0.02 182 TR_XM_Undi_Recip12 959 0.36 0.99 0.00 183 T_STY_INVIS_DIRECT 937 0.74 0.97 0.61 184 RCVD_IN_XBL 924 0.37 0.96 0.03 185 URI_NOVOWEL 923 1.30 0.96 1.50 186 HTML_MIME_NO_HTML_TAG 909 1.54 0.94 1.89 187 HDRS_MISSP 908 0.35 0.94 0.01 188 SUSP_UTF8_WORD_SUBJ 893 0.36 0.93 0.04 189 XMGenDplmaNmb 883 0.69 0.91 0.56 190 XM_ProductURIs 850 0.68 0.88 0.57 191 TR_Mismatch_TLD_01 845 0.47 0.88 0.24 192 TR_XM_RelayPhish 841 0.38 0.87 0.10 193 XM_DIRTYINTL 841 0.37 0.87 0.09 194 FROM_SUSPICIOUS_NTLD 823 0.34 0.85 0.04 195 XMPhish14 791 0.53 0.82 0.37 196 RDNS_DYNAMIC 789 0.45 0.82 0.24 197 MIME_CHARSET_FARAWAY 780 0.56 0.81 0.41 198 XMBody_78 779 0.46 0.81 0.25 199 HOSTED_IMG_MULTI_PUB_01 775 0.31 0.80 0.03 200 DKIM_ADSP_CUSTOM_MED 772 0.79 0.80 0.78 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140701 87.47 93.51 83.99 2 RELAYCOUNTRY_US 136007 82.22 84.01 81.19 3 DKIM_SIGNED 130671 82.48 90.26 78.00 4 XM_DK_Pass 128428 80.05 85.92 76.66 5 DKIM_VALID 127506 79.47 85.31 76.11 6 XM_B_Unicode 119284 76.44 85.54 71.20 7 DKIM_VALID_AU 107644 66.22 69.64 64.26 8 BAYES_50 104431 52.55 35.57 62.34 9 XMListUnsubscribeExists 90821 60.51 71.44 54.21 10 DCC_CHECK_NEGATIVE 88427 40.87 20.18 52.78 11 DCC_CHECK 79046 58.93 79.31 47.18 12 XM_B_SpammyWords 76984 54.03 68.06 45.95 13 XM_B_Unicode3 75081 46.88 50.45 44.82 14 RCVD_IN_MSPIKE_H2 65378 40.21 42.26 39.03 15 LOC_TINY_FONT_1 55385 39.13 49.66 33.06 16 HTML_FONT_LOW_CONTRAST 50672 32.96 37.67 30.25 17 DKIM_VALID_EF 50329 29.90 29.65 30.04 18 FVGT_m_MULTI_ODD 44169 27.62 29.81 26.37 19 T_TM2_M_HEADER_IN_MSG 38723 21.16 17.75 23.11 20 MIME_HTML_ONLY 38228 24.53 27.50 22.82 21 XMSubLong 37989 21.77 20.20 22.68 22 T_KAM_HTML_FONT_INVALID 36586 26.80 35.42 21.84 23 XM_B_SpammyWords2 34213 27.02 38.48 20.42 24 USER_IN_DEF_DKIM_WL 29330 11.92 2.23 17.51 25 XM_Multi_Part_URI 26910 18.79 23.51 16.06 26 ALL_TRUSTED 26050 10.31 1.21 15.55 27 TR_XM_DK_Unsub 24980 16.89 20.33 14.91 28 UNPARSEABLE_RELAY 21556 14.05 16.11 12.87 29 XM_Evil_Numbers_Gen 16744 9.11 7.58 9.99 30 FSL_BULK_SIG 16139 9.98 10.58 9.63 31 XM_DKIMWhitelistDomains 16121 6.31 0.56 9.62 32 BAYES_00 16011 6.31 0.67 9.56 33 XM_B_Unsub 15765 12.06 16.66 9.41 34 T_TooManySym_01 13246 5.69 1.85 7.91 35 TR_XM_DK_Bayes 12454 4.93 0.57 7.43 36 TR_XM_BayesUnsub 12381 10.55 16.03 7.39 37 TR_XM_DK_Bayes1 12372 4.89 0.57 7.39 38 BAYES_60 12287 7.98 9.09 7.33 39 LotsOfNums_01 12163 6.86 6.16 7.26 40 XM_B_PhoneNumber 11373 5.62 3.59 6.79 41 XM_H_GMP 11070 6.79 7.10 6.61 42 TR_MAX_INTL_RELAY 10821 10.42 17.29 6.46 43 TR_XM_DK_Bayes2 10787 4.21 0.33 6.44 44 TooManyTo_001 10539 5.65 4.55 6.29 45 XM_B_SpammyWords3 10303 9.24 14.60 6.15 46 XM_H_Long_From01 9481 5.49 5.20 5.66 47 RCVD_IN_VALIDITY_SAFE 9438 4.58 2.74 5.63 48 XMStrtUSub 9366 5.18 4.47 5.59 49 XM_DK_Undo_02 9304 18.99 42.32 5.55 50 HTML_IMAGE_RATIO_02 9270 6.20 7.36 5.53 51 IN_ZIMBRA_NJ_WHITELIST 9251 3.54 0.11 5.52 52 LOTS_OF_MONEY 9164 7.62 11.35 5.47 53 XM_UncommonTLD01 8874 5.63 6.19 5.30 54 MPART_ALT_DIFF 8497 5.26 5.59 5.07 55 RCVD_IN_MSPIKE_WL 8440 4.46 3.47 5.04 56 RCVD_IN_MSPIKE_H3 8439 4.46 3.47 5.04 57 BAYES_40 8390 3.73 1.51 5.01 58 T_TooManySym_02 7973 3.25 0.64 4.76 59 XM_B_Phish_Phrases 7558 5.19 6.37 4.51 60 RCVD_IN_VALIDITY_CERTIFIED 7427 3.65 2.29 4.43 61 XMSubMetaSx_00 7399 4.97 5.92 4.42 62 ANY_BOUNCE_MESSAGE 7362 3.62 2.28 4.39 63 BOUNCE_MESSAGE 7362 3.62 2.28 4.39 64 INVALID_MSGID 7100 2.77 0.21 4.24 65 BAYES_99 7046 15.16 34.16 4.21 66 BAYES_80 6595 6.30 10.41 3.94 67 HTML_IMAGE_RATIO_04 6412 4.36 5.28 3.83 68 XMNumbers 6343 3.29 2.42 3.79 69 TO_MALFORMED 6249 2.38 0.03 3.73 70 T_REMOTE_IMAGE 6146 2.82 1.36 3.67 71 TR_XM_SpammyWords4 6127 5.66 9.13 3.66 72 BOTNET_IPINHOSTNAME 5898 5.49 8.92 3.52 73 RELAYCOUNTRY_META 5813 7.74 15.15 3.47 74 MIME_QP_LONG_LINE 5688 3.39 3.39 3.40 75 HTML_IMAGE_RATIO_06 5670 3.60 3.97 3.38 76 BAYES_20 5523 2.46 1.01 3.30 77 BAYES_999 5295 11.56 26.14 3.16 78 MIME_HTML_ONLY_MULTI 5177 3.16 3.27 3.09 79 MIME_HTML_MOSTLY 4914 3.32 4.00 2.93 80 XM_B_SpammyTLD 4643 2.87 3.05 2.77 81 XM_PDF 4555 1.87 0.39 2.72 82 RCVD_IN_IADB_LISTED 4405 1.90 0.62 2.63 83 XM_Body_Dirty_Words 4368 4.54 7.90 2.61 84 FROM_EXCESS_BASE64 4253 2.36 2.04 2.54 85 BAYES_95 4215 3.99 6.56 2.52 86 XM_CamelCaseFrm001 4140 2.73 3.17 2.47 87 MAILING_LIST_MULTI 4081 2.26 1.94 2.44 88 HTML_IMAGE_RATIO_08 3928 2.50 2.77 2.34 89 RCVD_IN_IADB_SPF 3888 1.68 0.58 2.32 90 T_XMDrugObfuBody_14 3883 3.09 4.42 2.32 91 TooManyTo_002 3766 1.62 0.53 2.25 92 TR_XM_DKIM_Undo 3659 12.50 30.40 2.18 93 RCVD_IN_IADB_SENDERID 3494 1.53 0.57 2.09 94 RCVD_IN_IADB_DK 3434 1.51 0.57 2.05 95 T_TooManySym_03 3263 1.28 0.12 1.95 96 TM2_M_URI_OPT_OUT 3179 1.94 2.02 1.90 97 HTML_MIME_NO_HTML_TAG 3169 1.54 0.94 1.89 98 DKIM_INVALID 3165 3.01 4.95 1.89 99 IN_HORDE_ADDRESS_BOOK 3122 1.22 0.11 1.86 100 TR_XM_UnparsRelay 3092 4.38 8.77 1.85 101 XMNoVowels 3086 1.91 2.03 1.84 102 BAYES_05 3025 1.33 0.51 1.81 103 TR_XM_PhishingBody 2927 2.75 4.48 1.75 104 TR_XM_SpammyRelay 2926 5.13 10.99 1.75 105 RCVD_IN_IADB_VOUCHED 2922 1.20 0.27 1.74 106 XMStockSpam_06 2816 1.60 1.47 1.68 107 XMSexyCombo_05 2756 2.68 4.47 1.65 108 XM_B_URI_Unicode 2693 1.82 2.19 1.61 109 TVD_SPACE_RATIO 2647 1.11 0.29 1.58 110 XM_B_Investor 2619 2.23 3.39 1.56 111 RELAYCOUNTRY_CA 2591 3.54 7.01 1.55 112 URI_NOVOWEL 2513 1.30 0.96 1.50 113 T_TVD_MIME_NO_HEADERS 2500 0.95 0.02 1.49 114 UNTRUSTED_Relay 2419 3.18 6.20 1.44 115 XMBrknScrpt_02 2419 1.46 1.50 1.44 116 TR_DCC_Bayes_99 2391 10.49 26.23 1.43 117 XMDiploma_00 2350 1.69 2.20 1.40 118 TR_Symld_Words 2330 1.38 1.36 1.39 119 T_XMDrugObfuBody_08 2319 1.88 2.75 1.38 120 XM_DK_Undo_01 2195 1.40 1.54 1.31 121 KHOP_HELO_FCRDNS 2135 1.26 1.23 1.27 122 TM2_M_VERY_LONG_WORD 2121 1.92 3.06 1.27 123 XM_B_Unsub2 2110 1.60 2.20 1.26 124 SUBJ_ALL_CAPS 2079 1.25 1.25 1.24 125 TooManyTo_003 2072 0.96 0.48 1.24 126 HTML_EXTRA_CLOSE 2056 0.80 0.06 1.23 127 RCVD_IN_IADB_OPTIN 2055 0.85 0.20 1.23 128 XM_B_SpammyWords4 2034 1.49 1.98 1.21 129 TR_XM_SpammyWords5 2028 1.67 2.46 1.21 130 XMGappySubj_01 2024 0.80 0.09 1.21 131 BOTNET 2020 4.47 10.14 1.21 132 URI_HEX 1905 1.22 1.36 1.14 133 XM_GoogleGroups 1803 0.94 0.71 1.08 134 XM_SendGrid 1782 1.10 1.16 1.06 135 TVD_RCVD_IP 1738 0.92 0.72 1.04 136 XMLngstWrd_00 1695 0.75 0.29 1.01 137 XM_H_Long_From02 1677 1.05 1.13 1.00 138 XM_SPF_SoftFail 1615 1.57 2.62 0.96 139 XM_B_COPY_HTML 1571 1.24 1.77 0.94 140 XM_H_PHPMailer 1551 0.84 0.68 0.93 141 TooManyTo_004 1511 0.74 0.45 0.90 142 TR_XM_Base64_M1 1507 0.82 0.68 0.90 143 XMBdyGiftCard01 1437 1.06 1.42 0.86 144 XMGappySubj_02 1424 0.55 0.03 0.85 145 RCVD_IN_BL_SPAMCOP_NET 1396 4.02 9.54 0.83 146 XM_OfRef6 1390 1.71 3.23 0.83 147 XMBody_95 1374 0.56 0.11 0.82 148 TooManyTo_005 1335 0.66 0.42 0.80 149 HELO_MISC_IP 1312 0.52 0.07 0.78 150 XM_UB50 1311 1.79 3.55 0.78 151 HTML_TAG_BALANCE_BODY 1307 0.99 1.37 0.78 152 DKIM_ADSP_CUSTOM_MED 1306 0.79 0.80 0.78 153 XMPhish30 1282 1.06 1.58 0.77 154 XMBody_17 1251 1.26 2.14 0.75 155 LOW_PRICE 1249 0.73 0.71 0.75 156 USER_IN_WELCOMELIST 1226 0.46 0.00 0.73 157 USER_IN_WHITELIST 1226 0.46 0.00 0.73 158 TR_XM_DK_SendGrid 1213 0.74 0.78 0.72 159 DIET_1 1201 1.46 2.75 0.72 160 RCVD_IN_PBL 1194 0.93 1.30 0.71 161 XMBSHREFv2 1182 0.56 0.30 0.71 162 T_XMHurry_00 1179 1.47 2.79 0.70 163 SpammyFromTLD_01 1177 1.07 1.72 0.70 164 TR_MetaPhish_Combo_01 1169 0.68 0.65 0.70 165 MPART_ALT_DIFF_COUNT 1128 0.91 1.32 0.67 166 T_XMDrugObfuBody_00 1101 1.04 1.69 0.66 167 URI_TRY_3LD 1048 0.77 1.03 0.63 168 T_FILL_THIS_FORM_SHORT 1047 1.46 2.90 0.62 169 T_STY_INVIS_DIRECT 1027 0.74 0.97 0.61 170 XMSubMetaI_00 1024 0.80 1.12 0.61 171 XM_B_FormFill 1013 0.39 0.02 0.60 172 XM_URI_RBL 1012 1.26 2.39 0.60 173 XM_B_DNDMA 1000 0.75 1.03 0.60 174 XM_ProductURIs 950 0.68 0.88 0.57 175 T_TooManySym_04 946 0.36 0.01 0.56 176 XMSlimDrugH 942 0.74 1.05 0.56 177 XMGenDplmaNmb 940 0.69 0.91 0.56 178 RCVD_IN_PSBL 937 0.82 1.27 0.56 179 XMSolicitRefs_0 896 0.53 0.52 0.53 180 SUBJ_DOLLARS 891 0.55 0.57 0.53 181 XM_ShortIntro_01 874 0.52 0.51 0.52 182 HTTPS_HTTP_MISMATCH 861 0.60 0.75 0.51 183 DKIM_ADSP_NXDOMAIN 846 1.76 3.94 0.50 184 PLING_QUERY 832 0.54 0.63 0.50 185 NML_ADSP_CUSTOM_MED 828 0.56 0.67 0.49 186 TR_XM_SpammyWords2 812 4.81 12.31 0.48 187 TM2_M_OBFU_COMMENT 797 0.80 1.36 0.48 188 XM_S_SubURI 785 0.32 0.06 0.47 189 T_OBFU_PDF_ATTACH 780 0.31 0.05 0.47 190 XMSubMetaSx_01 777 0.35 0.17 0.46 191 TR_XM_SPAMCOP 774 2.66 6.47 0.46 192 TR_LOTS_OF_MONEY3 772 0.95 1.80 0.46 193 XMSubMetaSxObfu_03 769 0.66 1.02 0.46 194 XMCapTrack 756 0.39 0.29 0.45 195 NO_DNS_FOR_FROM 750 1.07 2.15 0.45 196 HTML_FONT_FACE_BAD 740 0.57 0.79 0.44 197 BASE64_LENGTH_79_INF 731 0.32 0.12 0.44 198 FORGED_GMAIL_RCVD 724 0.48 0.57 0.43 199 MSGID_FROM_MTA_HEADER 719 0.30 0.07 0.43 200 XM_RXBody 713 0.48 0.59 0.43 ----------------------------------------------------------------------