Email: 277942 Autolearn: 0 AvgScore: 4.90 AvgScanTime: 1.36 sec Spam: 89953 Autolearn: 0 AvgScore: 13.69 AvgScanTime: 1.41 sec Ham: 187989 Autolearn: 0 AvgScore: 0.69 AvgScanTime: 1.34 sec Time Spent Running SA: 105.26 hours Time Spent Processing Spam: 35.23 hours Time Spent Processing Ham: 70.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85968 88.83 95.57 85.60 2 DKIM_SIGNED 80988 73.08 90.03 64.96 3 XM_B_Unicode 77085 74.96 85.69 69.82 4 XM_DK_Pass 75815 70.55 84.28 63.98 5 DKIM_VALID 75254 69.99 83.66 63.44 6 RELAYCOUNTRY_US 74361 82.36 82.67 82.22 7 DCC_CHECK 71627 54.55 79.63 42.55 8 XMListUnsubscribeExists 66309 55.11 73.72 46.21 9 XM_B_SpammyWords 63758 54.34 70.88 46.43 10 DKIM_VALID_AU 59451 57.95 66.09 54.05 11 XM_B_Unicode3 47118 49.26 52.38 47.76 12 LOC_TINY_FONT_1 44182 35.16 49.12 28.49 13 RCVD_IN_MSPIKE_H2 38264 35.59 42.54 32.26 14 XM_DK_Undo_02 36910 16.25 41.03 4.39 15 XM_B_SpammyWords2 36069 25.39 40.10 18.35 16 BAYES_50 35136 57.81 39.06 66.79 17 HTML_FONT_LOW_CONTRAST 32898 39.56 36.57 40.98 18 T_KAM_HTML_FONT_INVALID 29747 22.51 33.07 17.45 19 BAYES_99 28804 12.79 32.02 3.59 20 TR_XM_DKIM_Undo 28403 11.61 31.58 2.06 21 FVGT_m_MULTI_ODD 26499 28.08 29.46 27.43 22 DKIM_VALID_EF 24872 25.68 27.65 24.73 23 MIME_HTML_ONLY 24372 21.02 27.09 18.12 24 TR_DCC_Bayes_99 21886 8.98 24.33 1.64 25 BAYES_999 21808 9.80 24.24 2.89 26 XMSubLong 20746 21.50 23.06 20.75 27 TR_XM_DK_Unsub 19564 15.40 21.75 12.36 28 XM_Multi_Part_URI 18367 15.75 20.42 13.52 29 DCC_CHECK_NEGATIVE 17876 45.27 19.87 57.43 30 T_TM2_M_HEADER_IN_MSG 17739 27.90 19.72 31.82 31 RELAYCOUNTRY_META 14969 7.42 16.64 3.02 32 UNPARSEABLE_RELAY 14575 13.16 16.20 11.70 33 TR_MAX_INTL_RELAY 14287 8.61 15.88 5.12 34 XM_B_Unsub 13948 10.46 15.51 8.04 35 TR_XM_BayesUnsub 13565 9.24 15.08 6.45 36 XM_B_SpammyWords3 13219 8.31 14.70 5.25 37 TR_XM_SpammyWords2 11546 4.46 12.84 0.45 38 TR_XM_SpammyRelay 10808 4.94 12.02 1.55 39 BOTNET 10086 4.25 11.21 0.93 40 BAYES_80 8906 5.24 9.90 3.01 41 BAYES_60 8701 7.16 9.67 5.96 42 RCVD_IN_BL_SPAMCOP_NET 8572 3.40 9.53 0.46 43 BOTNET_IPINHOSTNAME 8122 4.89 9.03 2.92 44 FSL_BULK_SIG 7975 8.34 8.87 8.09 45 TR_XM_UnparsRelay 7945 3.80 8.83 1.39 46 LOTS_OF_MONEY 7761 6.03 8.63 4.78 47 RELAYCOUNTRY_CA 7422 3.38 8.25 1.05 48 TR_XM_SpammyWords4 6947 4.74 7.72 3.31 49 XM_Evil_Numbers_Gen 6913 12.48 7.69 14.78 50 TR_XM_SPAMCOP 6744 2.56 7.50 0.19 51 HTML_IMAGE_RATIO_02 6306 5.45 7.01 4.71 52 LotsOfNums_01 5788 12.99 6.43 16.12 53 DKIM_INVALID 5734 3.09 6.37 1.52 54 XMSubMetaSx_00 5678 4.34 6.31 3.40 55 XM_UncommonTLD01 5522 5.18 6.14 4.72 56 XM_Body_Dirty_Words 5211 3.23 5.79 2.00 57 BAYES_95 5110 3.27 5.68 2.12 58 XM_B_Phish_Phrases 5083 4.49 5.65 3.93 59 MPART_ALT_DIFF 5052 4.59 5.62 4.09 60 UNTRUSTED_Relay 4969 2.90 5.52 1.65 61 T_XMDrugObfuBody_14 4827 3.28 5.37 2.28 62 XM_H_Long_From01 4530 4.85 5.04 4.76 63 XM_H_GMP 4360 5.37 4.85 5.62 64 XMStrtUSub 4300 4.81 4.78 4.82 65 RCVD_IN_VALIDITY_RPBL 4185 1.56 4.65 0.08 66 HTML_IMAGE_RATIO_06 3975 3.22 4.42 2.64 67 TR_XM_PhishingBody 3963 2.55 4.41 1.66 68 XM_CamelCaseFrm001 3787 3.10 4.21 2.57 69 XMSexyCombo_05 3726 2.28 4.14 1.39 70 HTML_IMAGE_RATIO_04 3555 3.99 3.95 4.01 71 TM2_M_VERY_LONG_WORD 3551 10.97 3.95 14.33 72 XM_B_PhoneNumber 3463 4.67 3.85 5.07 73 RCVD_IN_MSPIKE_WL 3203 3.63 3.56 3.66 74 RCVD_IN_MSPIKE_H3 3203 3.63 3.56 3.66 75 MIME_HTML_MOSTLY 3192 2.86 3.55 2.53 76 TooManyTo_001 3168 4.74 3.52 5.32 77 DIET_1 2916 1.46 3.24 0.60 78 XMDiploma_00 2913 1.88 3.24 1.23 79 T_XMHurry_00 2868 1.64 3.19 0.90 80 MIME_HTML_ONLY_MULTI 2825 2.67 3.14 2.44 81 TR_XM_SpammyWords5 2780 1.58 3.09 0.85 82 XM_B_SpammyTLD 2761 2.63 3.07 2.42 83 XM_B_Investor 2747 1.73 3.05 1.10 84 T_FILL_THIS_FORM_SHORT 2727 1.49 3.03 0.75 85 XM_OfRef6 2690 1.38 2.99 0.61 86 DKIM_ADSP_NXDOMAIN 2666 1.29 2.96 0.48 87 XM_UB50 2612 1.63 2.90 1.02 88 T_XMDrugObfuBody_08 2595 1.67 2.88 1.09 89 XMNumbers 2568 3.13 2.85 3.26 90 NO_DNS_FOR_FROM 2484 1.18 2.76 0.42 91 TR_XM_MaxWHORU 2478 1.11 2.75 0.32 92 XM_URI_RBL 2453 1.22 2.73 0.50 93 XMBody_17 2418 1.29 2.69 0.62 94 TM2_M_URI_OPT_OUT 2404 2.08 2.67 1.79 95 HTML_IMAGE_RATIO_08 2388 2.32 2.65 2.15 96 TR_XM_NoHeaderRelay 2331 0.92 2.59 0.12 97 RELAYCOUNTRY_AU 2257 1.04 2.51 0.34 98 T_TooManySym_01 2215 5.47 2.46 6.90 99 RCVD_IN_VALIDITY_SAFE 2170 4.47 2.41 5.45 100 FROM_EXCESS_BASE64 2113 2.15 2.35 2.06 101 XM_SPF_SoftFail 2107 1.26 2.34 0.74 102 USER_IN_DEF_DKIM_WL 2101 11.04 2.34 15.20 103 XM_B_SpammyWords4 2018 1.49 2.24 1.13 104 RCVD_IN_PSBL 1964 0.85 2.18 0.21 105 HTML_FONT_TINY_NORDNS 1922 0.71 2.14 0.03 106 XM_B_Unsub2 1873 1.41 2.08 1.09 107 KHOP_HELO_FCRDNS 1865 5.89 2.07 7.71 108 ALL_TRUSTED 1819 10.65 2.02 14.78 109 TR_XM_INV_DKIM 1804 0.77 2.01 0.18 110 XMBdyGiftCard01 1793 2.06 1.99 2.09 111 SpammyFromTLD_01 1784 1.06 1.98 0.61 112 SpammyFromTLD_02 1776 0.72 1.97 0.12 113 RCVD_IN_VALIDITY_CERTIFIED 1762 3.60 1.96 4.38 114 ANY_BOUNCE_MESSAGE 1753 12.47 1.95 17.51 115 BOUNCE_MESSAGE 1753 12.47 1.95 17.51 116 XM_B_URI_Unicode 1686 1.48 1.87 1.29 117 TR_MetaPhish_Combo_01 1674 1.02 1.86 0.62 118 XMBody_78 1673 0.80 1.86 0.29 119 MAILING_LIST_MULTI 1669 1.97 1.86 2.03 120 T_XMDrugObfuBody_00 1652 0.90 1.84 0.45 121 SUBJ_ALL_CAPS 1576 1.15 1.75 0.86 122 XMStockSpam_06 1545 1.56 1.72 1.48 123 SHOPIFY_IMG_NOT_RCVD_SFY 1525 0.78 1.70 0.34 124 XMSlimDrugH 1492 0.95 1.66 0.62 125 TR_XM_PHPDW 1466 0.70 1.63 0.25 126 XM_B_COPY_HTML 1436 1.25 1.60 1.09 127 TR_XM_PHPForged 1404 0.68 1.56 0.26 128 TR_XM_FormFill2 1396 0.67 1.55 0.25 129 XM_H_PHPOS 1379 0.66 1.53 0.24 130 XM_B_REG_HTML 1361 0.63 1.51 0.21 131 XMPhish30 1352 1.04 1.50 0.82 132 MIME_CHARSET_FARAWAY 1346 4.77 1.50 6.34 133 NORDNS_LOW_CONTRAST 1320 0.49 1.47 0.02 134 MIME_QP_LONG_LINE 1319 2.33 1.47 2.75 135 XMBrknScrpt_02 1294 1.14 1.44 1.00 136 XMGenDplmaNmb 1262 0.77 1.40 0.46 137 HTML_MIME_NO_HTML_TAG 1261 1.60 1.40 1.69 138 LongTLD 1231 0.60 1.37 0.23 139 FONT_INVIS_LONG_LINE 1229 0.56 1.37 0.17 140 THIS_AD 1214 0.68 1.35 0.37 141 MPART_ALT_DIFF_COUNT 1211 0.80 1.35 0.54 142 XMClaimOffer 1207 0.70 1.34 0.39 143 HTML_TAG_BALANCE_BODY 1150 1.13 1.28 1.06 144 BOTNET_NORDNS 1127 0.41 1.25 0.01 145 XMSubMetaI_00 1121 0.69 1.25 0.42 146 T_REMOTE_IMAGE 1108 2.11 1.23 2.54 147 MAY_BE_FORGED 1091 9.23 1.21 13.06 148 CHARSET_FARAWAY_HEADER 1089 4.56 1.21 6.17 149 TR_LOTS_OF_MONEY3 1086 0.71 1.21 0.47 150 RCVD_IN_PBL 1076 0.73 1.20 0.51 151 TR_Mismatch_TLD_02 1072 0.42 1.19 0.05 152 BAYES_40 1063 4.18 1.18 5.62 153 MultiRelay_CC 1051 0.43 1.17 0.08 154 T_STY_INVIS_DIRECT 1048 0.73 1.17 0.52 155 XM_B_Phish66 1032 0.58 1.15 0.31 156 HOSTED_IMG_MULTI_PUB_01 999 0.38 1.11 0.03 157 XM_SendGrid 992 1.09 1.10 1.08 158 URI_HEX 990 1.05 1.10 1.03 159 TR_XM_Base64_M1 955 0.80 1.06 0.68 160 XMReplyNow 953 0.48 1.06 0.21 161 URI_TRY_3LD 947 0.76 1.05 0.62 162 HTTPS_HTTP_MISMATCH 943 0.58 1.05 0.35 163 XMSlimDrugs 940 0.36 1.04 0.03 164 XM_HighProb1 938 0.35 1.04 0.02 165 XMEqualsVooDoo_00 937 0.36 1.04 0.04 166 TM2_M_A_HREF_HREF 924 0.56 1.03 0.34 167 BAYES_20 901 2.57 1.00 3.33 168 XM_DK_Undo_01 896 1.24 1.00 1.36 169 HTML_FONT_FACE_BAD 875 0.59 0.97 0.41 170 XM_B_DNDMA 866 0.86 0.96 0.81 171 XM_DIRTYINTL 865 0.35 0.96 0.05 172 TM2_M_OBFU_COMMENT 855 0.78 0.95 0.69 173 RDNS_DYNAMIC 853 0.46 0.95 0.22 174 RELAYCOUNTRY_FR 834 0.42 0.93 0.17 175 TR_Mismatch_TLD_01 833 0.41 0.93 0.16 176 SUSP_UTF8_WORD_SUBJ 823 0.31 0.91 0.01 177 XM_UB99 819 0.30 0.91 0.00 178 PDS_RDNS_DYNAMIC_FP 809 0.31 0.90 0.03 179 TVD_RCVD_IP 804 0.88 0.89 0.87 180 TR_XM_FormFill 799 0.29 0.89 0.01 181 XM_H_Long_From02 796 0.69 0.88 0.59 182 XM_H_PHPMailer 760 0.90 0.84 0.93 183 TR_XM_InvalidRelay 740 0.27 0.82 0.01 184 DKIM_ADSP_CUSTOM_MED 731 0.74 0.81 0.70 185 XMEqualsVooDoo_01 719 0.26 0.80 0.00 186 XMEqualsVooDoo_02 717 0.26 0.80 0.00 187 XMEqualsVooDoo_03 715 0.26 0.79 0.00 188 XM_RXBody 713 0.44 0.79 0.27 189 XMWghtMeta_00 711 0.26 0.79 0.01 190 XMHTML_After_End 710 0.47 0.79 0.31 191 AC_HTML_NONSENSE_TAGS 699 0.32 0.78 0.10 192 URI_NOVOWEL 696 1.32 0.77 1.59 193 TR_XM_DK_SendGrid 686 0.79 0.76 0.81 194 HELO_DYNAMIC_SPLIT_IP 676 0.25 0.75 0.01 195 TR_Symld_Words 673 1.01 0.75 1.13 196 RCVD_IN_XBL 673 0.25 0.75 0.01 197 XM_UB60 669 0.26 0.74 0.03 198 XM_B_SEO 656 0.36 0.73 0.18 199 XM_ProductURIs 646 0.63 0.72 0.59 200 J_POPCORN_WO_D 635 0.36 0.71 0.20 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160925 88.83 95.57 85.60 2 RELAYCOUNTRY_US 154557 82.36 82.67 82.22 3 XM_B_Unicode 131258 74.96 85.69 69.82 4 BAYES_50 125550 57.81 39.06 66.79 5 DKIM_SIGNED 122122 73.08 90.03 64.96 6 XM_DK_Pass 120269 70.55 84.28 63.98 7 DKIM_VALID 119269 69.99 83.66 63.44 8 DCC_CHECK_NEGATIVE 107962 45.27 19.87 57.43 9 DKIM_VALID_AU 101613 57.95 66.09 54.05 10 XM_B_Unicode3 89788 49.26 52.38 47.76 11 XM_B_SpammyWords 87275 54.34 70.88 46.43 12 XMListUnsubscribeExists 86867 55.11 73.72 46.21 13 DCC_CHECK 79981 54.55 79.63 42.55 14 HTML_FONT_LOW_CONTRAST 77047 39.56 36.57 40.98 15 RCVD_IN_MSPIKE_H2 60647 35.59 42.54 32.26 16 T_TM2_M_HEADER_IN_MSG 59818 27.90 19.72 31.82 17 LOC_TINY_FONT_1 53552 35.16 49.12 28.49 18 FVGT_m_MULTI_ODD 51558 28.08 29.46 27.43 19 DKIM_VALID_EF 46497 25.68 27.65 24.73 20 XMSubLong 39008 21.50 23.06 20.75 21 XM_B_SpammyWords2 34489 25.39 40.10 18.35 22 MIME_HTML_ONLY 34060 21.02 27.09 18.12 23 ANY_BOUNCE_MESSAGE 32915 12.47 1.95 17.51 24 BOUNCE_MESSAGE 32915 12.47 1.95 17.51 25 T_KAM_HTML_FONT_INVALID 32806 22.51 33.07 17.45 26 LotsOfNums_01 30312 12.99 6.43 16.12 27 USER_IN_DEF_DKIM_WL 28575 11.04 2.34 15.20 28 ALL_TRUSTED 27791 10.65 2.02 14.78 29 XM_Evil_Numbers_Gen 27777 12.48 7.69 14.78 30 HTML_IMAGE_ONLY_32 27278 9.85 0.12 14.51 31 TM2_M_VERY_LONG_WORD 26934 10.97 3.95 14.33 32 XM_Multi_Part_URI 25413 15.75 20.42 13.52 33 MAY_BE_FORGED 24560 9.23 1.21 13.06 34 TR_XM_DK_Unsub 23243 15.40 21.75 12.36 35 UNPARSEABLE_RELAY 21991 13.16 16.20 11.70 36 FSL_BULK_SIG 15216 8.34 8.87 8.09 37 XM_B_Unsub 15118 10.46 15.51 8.04 38 BAYES_00 14829 5.51 0.53 7.89 39 XM_DKIMWhitelistDomains 14657 5.29 0.04 7.80 40 KHOP_HELO_FCRDNS 14496 5.89 2.07 7.71 41 T_TooManySym_01 12977 5.47 2.46 6.90 42 TR_XM_BayesUnsub 12117 9.24 15.08 6.45 43 MIME_CHARSET_FARAWAY 11918 4.77 1.50 6.34 44 TR_XM_DK_Bayes 11750 4.38 0.46 6.25 45 TR_XM_DK_Bayes1 11645 4.34 0.45 6.19 46 CHARSET_FARAWAY_HEADER 11592 4.56 1.21 6.17 47 BAYES_60 11209 7.16 9.67 5.96 48 XM_H_GMP 10572 5.37 4.85 5.62 49 BAYES_40 10567 4.18 1.18 5.62 50 TR_XM_DK_Bayes2 10427 3.86 0.34 5.55 51 RCVD_IN_VALIDITY_SAFE 10247 4.47 2.41 5.45 52 TooManyTo_001 9996 4.74 3.52 5.32 53 XM_B_SpammyWords3 9872 8.31 14.70 5.25 54 TR_MAX_INTL_RELAY 9634 8.61 15.88 5.12 55 XM_B_PhoneNumber 9526 4.67 3.85 5.07 56 XMStrtUSub 9064 4.81 4.78 4.82 57 LOTS_OF_MONEY 8992 6.03 8.63 4.78 58 XM_H_Long_From01 8942 4.85 5.04 4.76 59 XM_UncommonTLD01 8875 5.18 6.14 4.72 60 HTML_IMAGE_RATIO_02 8847 5.45 7.01 4.71 61 IN_ZIMBRA_NJ_WHITELIST 8639 3.13 0.06 4.60 62 XM_DK_Undo_02 8250 16.25 41.03 4.39 63 RCVD_IN_VALIDITY_CERTIFIED 8239 3.60 1.96 4.38 64 T_TooManySym_02 7872 3.00 0.51 4.19 65 MPART_ALT_DIFF 7698 4.59 5.62 4.09 66 HTML_IMAGE_RATIO_04 7544 3.99 3.95 4.01 67 XM_B_Phish_Phrases 7388 4.49 5.65 3.93 68 RCVD_IN_MSPIKE_WL 6885 3.63 3.56 3.66 69 RCVD_IN_MSPIKE_H3 6885 3.63 3.56 3.66 70 BAYES_99 6752 12.79 32.02 3.59 71 INVALID_MSGID 6541 2.55 0.62 3.48 72 XMSubMetaSx_00 6389 4.34 6.31 3.40 73 TO_MALFORMED 6261 2.27 0.05 3.33 74 BAYES_20 6254 2.57 1.00 3.33 75 TR_XM_SpammyWords4 6214 4.74 7.72 3.31 76 XMNumbers 6123 3.13 2.85 3.26 77 RELAYCOUNTRY_META 5668 7.42 16.64 3.02 78 BAYES_80 5650 5.24 9.90 3.01 79 BOTNET_IPINHOSTNAME 5481 4.89 9.03 2.92 80 BAYES_999 5428 9.80 24.24 2.89 81 MIME_QP_LONG_LINE 5170 2.33 1.47 2.75 82 HTML_IMAGE_RATIO_06 4971 3.22 4.42 2.64 83 XM_CamelCaseFrm001 4840 3.10 4.21 2.57 84 T_REMOTE_IMAGE 4766 2.11 1.23 2.54 85 MIME_HTML_MOSTLY 4747 2.86 3.55 2.53 86 MIME_HTML_ONLY_MULTI 4594 2.67 3.14 2.44 87 XM_B_SpammyTLD 4550 2.63 3.07 2.42 88 T_XMDrugObfuBody_14 4283 3.28 5.37 2.28 89 HTML_IMAGE_RATIO_08 4050 2.32 2.65 2.15 90 BAYES_95 3980 3.27 5.68 2.12 91 T_TVD_MIME_NO_HEADERS 3944 1.44 0.06 2.10 92 XMBdyGiftCard01 3932 2.06 1.99 2.09 93 FROM_EXCESS_BASE64 3871 2.15 2.35 2.06 94 TR_XM_DKIM_Undo 3870 11.61 31.58 2.06 95 MAILING_LIST_MULTI 3816 1.97 1.86 2.03 96 XM_Body_Dirty_Words 3762 3.23 5.79 2.00 97 RCVD_IN_IADB_LISTED 3602 1.45 0.48 1.92 98 TooManyTo_002 3410 1.38 0.49 1.81 99 T_TooManySym_03 3373 1.26 0.16 1.79 100 TM2_M_URI_OPT_OUT 3364 2.08 2.67 1.79 101 XM_PDF 3322 1.40 0.64 1.77 102 RCVD_IN_IADB_SPF 3247 1.31 0.44 1.73 103 BAYES_05 3193 1.30 0.47 1.70 104 HTML_MIME_NO_HTML_TAG 3177 1.60 1.40 1.69 105 TR_XM_PhishingBody 3126 2.55 4.41 1.66 106 UNTRUSTED_Relay 3099 2.90 5.52 1.65 107 TR_DCC_Bayes_99 3079 8.98 24.33 1.64 108 XMGappySubj_01 3012 1.11 0.10 1.60 109 URI_NOVOWEL 2983 1.32 0.77 1.59 110 RCVD_IN_IADB_SENDERID 2962 1.20 0.42 1.58 111 RCVD_IN_IADB_DK 2925 1.19 0.43 1.56 112 TR_XM_SpammyRelay 2923 4.94 12.02 1.55 113 IN_HORDE_ADDRESS_BOOK 2921 1.08 0.10 1.55 114 DKIM_INVALID 2853 3.09 6.37 1.52 115 XMStockSpam_06 2779 1.56 1.72 1.48 116 XMGappySubj_02 2718 0.98 0.02 1.45 117 TVD_SPACE_RATIO 2683 1.02 0.18 1.43 118 TR_XM_UnparsRelay 2618 3.80 8.83 1.39 119 XMSexyCombo_05 2613 2.28 4.14 1.39 120 XM_DK_Undo_01 2562 1.24 1.00 1.36 121 XM_B_URI_Unicode 2419 1.48 1.87 1.29 122 XMDiploma_00 2310 1.88 3.24 1.23 123 RCVD_IN_IADB_VOUCHED 2179 0.85 0.20 1.16 124 TR_Symld_Words 2129 1.01 0.75 1.13 125 XM_B_SpammyWords4 2125 1.49 2.24 1.13 126 XM_B_Investor 2073 1.73 3.05 1.10 127 XM_B_Unsub2 2058 1.41 2.08 1.09 128 T_XMDrugObfuBody_08 2048 1.67 2.88 1.09 129 XM_B_COPY_HTML 2048 1.25 1.60 1.09 130 XM_GoogleGroups 2036 0.95 0.68 1.08 131 XM_SendGrid 2031 1.09 1.10 1.08 132 HTML_TAG_BALANCE_BODY 1998 1.13 1.28 1.06 133 RELAYCOUNTRY_CA 1980 3.38 8.25 1.05 134 URI_HEX 1937 1.05 1.10 1.03 135 XM_UB50 1910 1.63 2.90 1.02 136 TooManyTo_003 1877 0.81 0.43 1.00 137 XMBrknScrpt_02 1875 1.14 1.44 1.00 138 XM_H_PHPMailer 1753 0.90 0.84 0.93 139 DATE_IN_PAST_06_12 1739 0.65 0.08 0.93 140 BOTNET 1739 4.25 11.21 0.93 141 T_XMHurry_00 1697 1.64 3.19 0.90 142 TVD_RCVD_IP 1640 0.88 0.89 0.87 143 SUBJ_ALL_CAPS 1614 1.15 1.75 0.86 144 TR_XM_SpammyWords5 1606 1.58 3.09 0.85 145 RCVD_IN_IADB_OPTIN 1597 0.62 0.14 0.85 146 T_MANY_PILL_PRICE 1563 0.56 0.00 0.83 147 XMPhish30 1548 1.04 1.50 0.82 148 XM_B_DNDMA 1526 0.86 0.96 0.81 149 TR_XM_DK_SendGrid 1523 0.79 0.76 0.81 150 T_FILL_THIS_FORM_SHORT 1411 1.49 3.03 0.75 151 XM_SPF_SoftFail 1390 1.26 2.34 0.74 152 TooManyTo_004 1344 0.61 0.39 0.71 153 DKIM_ADSP_CUSTOM_MED 1320 0.74 0.81 0.70 154 TM2_M_OBFU_COMMENT 1303 0.78 0.95 0.69 155 XM_S_SpammyWords 1276 0.60 0.43 0.68 156 TR_XM_Spammywords 1276 0.60 0.43 0.68 157 TR_XM_Base64_M1 1275 0.80 1.06 0.68 158 HELO_MISC_IP 1269 0.48 0.08 0.68 159 DATE_IN_PAST_12_24 1259 0.50 0.13 0.67 160 TooManyTo_005 1174 0.54 0.37 0.62 161 URI_TRY_3LD 1174 0.76 1.05 0.62 162 XMBody_17 1167 1.29 2.69 0.62 163 XMSlimDrugH 1162 0.95 1.66 0.62 164 TR_MetaPhish_Combo_01 1158 1.02 1.86 0.62 165 XMLngstWrd_00 1156 0.61 0.59 0.61 166 SpammyFromTLD_01 1156 1.06 1.98 0.61 167 XM_OfRef6 1148 1.38 2.99 0.61 168 DIET_1 1129 1.46 3.24 0.60 169 XMBSHREFv2 1124 0.50 0.30 0.60 170 XM_ProductURIs 1115 0.63 0.72 0.59 171 XM_H_Long_From02 1108 0.69 0.88 0.59 172 USER_IN_WHITELIST 1082 0.39 0.00 0.58 173 USER_IN_WELCOMELIST 1082 0.39 0.00 0.58 174 DATE_IN_PAST_03_06 1069 0.49 0.33 0.57 175 T_TooManySym_04 1042 0.39 0.03 0.55 176 XMBody_95 1011 0.41 0.13 0.54 177 MPART_ALT_DIFF_COUNT 1009 0.80 1.35 0.54 178 MSGID_FROM_MTA_HEADER 1000 0.40 0.14 0.53 179 T_STY_INVIS_DIRECT 972 0.73 1.17 0.52 180 LOW_PRICE 959 0.44 0.29 0.51 181 XMNoVowels 957 0.56 0.65 0.51 182 RCVD_IN_PBL 951 0.73 1.20 0.51 183 XM_URI_RBL 941 1.22 2.73 0.50 184 NML_ADSP_CUSTOM_MED 928 0.55 0.67 0.49 185 DKIM_ADSP_NXDOMAIN 910 1.29 2.96 0.48 186 XM_B_FormFill 908 0.33 0.01 0.48 187 TR_LOTS_OF_MONEY3 889 0.71 1.21 0.47 188 RCVD_IN_BL_SPAMCOP_NET 873 3.40 9.53 0.46 189 XMGenDplmaNmb 872 0.77 1.40 0.46 190 XMLngstWrd_01 869 0.40 0.27 0.46 191 TR_XM_SpammyWords2 844 4.46 12.84 0.45 192 HTML_TAG_BALANCE_CENTER 839 0.42 0.35 0.45 193 FORGED_GMAIL_RCVD 837 0.49 0.57 0.45 194 T_XMDrugObfuBody_00 837 0.90 1.84 0.45 195 PLING_QUERY 823 0.52 0.70 0.44 196 HTML_IMAGE_ONLY_20 805 0.50 0.66 0.43 197 XMSubMetaI_00 794 0.69 1.25 0.42 198 NO_DNS_FOR_FROM 786 1.18 2.76 0.42 199 XM_S_SubURI 778 0.29 0.05 0.41 200 HTML_FONT_FACE_BAD 775 0.59 0.97 0.41 ----------------------------------------------------------------------