Email: 272133 Autolearn: 0 AvgScore: 5.00 AvgScanTime: 1.29 sec Spam: 89684 Autolearn: 0 AvgScore: 14.26 AvgScanTime: 1.36 sec Ham: 182449 Autolearn: 0 AvgScore: 0.45 AvgScanTime: 1.25 sec Time Spent Running SA: 97.56 hours Time Spent Processing Spam: 34.00 hours Time Spent Processing Ham: 63.56 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 84875 88.85 94.64 86.00 2 DKIM_SIGNED 80296 76.62 89.53 70.27 3 XM_B_Unicode 75589 76.19 84.28 72.22 4 XM_DK_Pass 75555 74.21 84.25 69.27 5 DKIM_VALID 75115 73.70 83.76 68.75 6 RELAYCOUNTRY_US 72990 82.16 81.39 82.54 7 DCC_CHECK 70139 56.92 78.21 46.46 8 XM_B_SpammyWords 63095 54.39 70.35 46.54 9 XMListUnsubscribeExists 62737 56.97 69.95 50.59 10 DKIM_VALID_AU 61547 62.04 68.63 58.81 11 XM_B_Unicode3 47138 49.27 52.56 47.66 12 LOC_TINY_FONT_1 42782 37.33 47.70 32.23 13 XM_DK_Undo_02 38159 17.51 42.55 5.21 14 RCVD_IN_MSPIKE_H2 37952 37.25 42.32 34.76 15 XM_B_SpammyWords2 35931 25.86 40.06 18.87 16 HTML_FONT_LOW_CONTRAST 34535 38.91 38.51 39.11 17 BAYES_50 32154 54.41 35.85 63.54 18 BAYES_99 30602 14.18 34.12 4.38 19 FVGT_m_MULTI_ODD 28546 28.32 31.83 26.59 20 TR_XM_DKIM_Undo 28271 12.17 31.52 2.65 21 DKIM_VALID_EF 26318 27.32 29.35 26.32 22 MIME_HTML_ONLY 26161 22.25 29.17 18.85 23 T_KAM_HTML_FONT_INVALID 25181 22.33 28.08 19.50 24 BAYES_999 23967 11.17 26.72 3.52 25 TR_DCC_Bayes_99 22253 9.64 24.81 2.19 26 XM_Multi_Part_URI 19868 17.68 22.15 15.48 27 TR_XM_DK_Unsub 19371 16.34 21.60 13.76 28 DCC_CHECK_NEGATIVE 19162 42.92 21.37 53.52 29 UNPARSEABLE_RELAY 18908 16.13 21.08 13.69 30 XMSubLong 18457 20.27 20.58 20.12 31 RELAYCOUNTRY_META 17628 8.75 19.66 3.39 32 XM_B_Unsub 16643 11.95 18.56 8.70 33 T_TM2_M_HEADER_IN_MSG 16109 25.16 17.96 28.71 34 TR_XM_BayesUnsub 16001 10.25 17.84 6.51 35 TR_MAX_INTL_RELAY 14559 8.77 16.23 5.10 36 XM_B_SpammyWords3 14119 8.72 15.74 5.27 37 TR_XM_SpammyRelay 12787 6.05 14.26 2.02 38 TR_XM_SpammyWords2 11473 4.75 12.79 0.79 39 TR_XM_UnparsRelay 10932 5.16 12.19 1.70 40 BOTNET 10273 4.46 11.45 1.03 41 BOTNET_IPINHOSTNAME 10110 5.75 11.27 3.04 42 LOTS_OF_MONEY 9020 6.24 10.06 4.36 43 BAYES_80 8984 5.32 10.02 3.01 44 BAYES_60 8718 7.90 9.72 7.01 45 FSL_BULK_SIG 8697 9.09 9.70 8.80 46 RCVD_IN_BL_SPAMCOP_NET 8507 3.35 9.49 0.33 47 TR_XM_SpammyWords4 8126 5.05 9.06 3.07 48 XM_Body_Dirty_Words 7920 4.50 8.83 2.38 49 HTML_IMAGE_RATIO_02 7303 6.14 8.14 5.15 50 T_SCC_BODY_TEXT_LINE 7187 8.29 8.01 8.42 51 XM_Evil_Numbers_Gen 7076 11.94 7.89 13.93 52 UNTRUSTED_Relay 7030 3.72 7.84 1.70 53 RELAYCOUNTRY_CA 6469 3.24 7.21 1.29 54 XM_B_Phish_Phrases 6063 5.12 6.76 4.32 55 XM_UncommonTLD01 5909 5.33 6.59 4.71 56 MPART_ALT_DIFF 5775 5.03 6.44 4.34 57 TR_XM_SPAMCOP 5583 2.16 6.23 0.16 58 XMSubMetaSx_00 5520 4.26 6.15 3.33 59 BAYES_95 5261 3.33 5.87 2.09 60 DKIM_INVALID 5181 2.92 5.78 1.52 61 RCVD_IN_VALIDITY_RPBL 4706 1.80 5.25 0.11 62 LotsOfNums_01 4685 10.36 5.22 12.89 63 XM_H_GMP 4653 5.57 5.19 5.76 64 TR_XM_NoHeaderRelay 4594 1.85 5.12 0.24 65 XM_H_Long_From01 4490 4.97 5.01 4.95 66 TR_XM_PhishingBody 4351 2.77 4.85 1.74 67 XMSexyCombo_05 4305 2.34 4.80 1.13 68 TM2_M_VERY_LONG_WORD 4137 8.31 4.61 10.12 69 HTML_IMAGE_RATIO_04 4116 4.47 4.59 4.41 70 XMStrtUSub 4038 5.08 4.50 5.37 71 T_XMDrugObfuBody_14 3956 2.81 4.41 2.02 72 XM_B_Investor 3648 2.12 4.07 1.16 73 XM_B_PhoneNumber 3622 5.03 4.04 5.51 74 KHOP_HELO_FCRDNS 3609 5.33 4.02 5.98 75 XM_CamelCaseFrm001 3600 2.96 4.01 2.43 76 MIME_HTML_MOSTLY 3504 3.06 3.91 2.64 77 XMNumbers 3401 3.60 3.79 3.50 78 XM_B_SpammyTLD 3339 2.84 3.72 2.41 79 RCVD_IN_VALIDITY_SAFE 3237 5.27 3.61 6.09 80 TR_XM_SpammyWords5 3229 1.88 3.60 1.04 81 RELAYCOUNTRY_FR 3129 1.26 3.49 0.16 82 XM_OfRef6 3027 1.61 3.38 0.75 83 TooManyTo_001 2994 4.68 3.34 5.34 84 XM_UB50 2925 1.69 3.26 0.92 85 XM_SPF_SoftFail 2915 1.62 3.25 0.82 86 T_XMDrugObfuBody_08 2849 2.38 3.18 1.98 87 MIME_HTML_ONLY_MULTI 2814 2.70 3.14 2.49 88 HTML_IMAGE_RATIO_06 2794 2.96 3.12 2.88 89 HTML_IMAGE_RATIO_08 2702 2.54 3.01 2.31 90 XM_URI_RBL 2690 1.29 3.00 0.45 91 XM_B_SpammyWords4 2647 1.50 2.95 0.78 92 RCVD_IN_MSPIKE_WL 2526 3.80 2.82 4.28 93 RCVD_IN_MSPIKE_H3 2525 3.80 2.82 4.28 94 RELAYCOUNTRY_AU 2456 1.21 2.74 0.46 95 RCVD_IN_VALIDITY_CERTIFIED 2402 4.11 2.68 4.81 96 XM_H_DKIM_GOOG 2307 0.88 2.57 0.04 97 XMBody_17 2247 1.14 2.51 0.47 98 XMDiploma_00 2225 1.56 2.48 1.11 99 FROM_EXCESS_BASE64 2218 2.29 2.47 2.20 100 XM_B_Unsub2 2131 1.56 2.38 1.16 101 DIET_1 2098 1.11 2.34 0.50 102 T_XMHurry_00 2058 1.29 2.29 0.80 103 T_TooManySym_01 2058 5.26 2.29 6.72 104 XMBrknScrpt_02 2002 1.44 2.23 1.06 105 T_XMDrugObfuBody_00 1988 1.14 2.22 0.61 106 TM2_M_URI_OPT_OUT 1979 1.96 2.21 1.85 107 XM_DIRTYINTL 1956 0.79 2.18 0.11 108 MAILING_LIST_MULTI 1936 2.23 2.16 2.27 109 SUBJ_ALL_CAPS 1919 1.39 2.14 1.01 110 USER_IN_DEF_DKIM_WL 1915 12.03 2.14 16.90 111 XM_B_URI_Unicode 1900 1.50 2.12 1.20 112 HTML_FONT_TINY_NORDNS 1895 0.74 2.11 0.06 113 T_REMOTE_IMAGE 1778 2.52 1.98 2.79 114 T_FILL_THIS_FORM_SHORT 1761 0.97 1.96 0.48 115 BOTNET_NORDNS 1752 0.65 1.95 0.01 116 T_DATE_IN_FUTURE_Q_PLUS 1740 0.66 1.94 0.02 117 XM_H_Long_From02 1726 1.13 1.92 0.75 118 SHOPIFY_IMG_NOT_RCVD_SFY 1673 0.88 1.87 0.39 119 MIME_QP_LONG_LINE 1653 2.45 1.84 2.74 120 ALL_TRUSTED 1644 10.02 1.83 14.04 121 TR_XM_InvalidRelay 1599 0.59 1.78 0.01 122 SpammyFromTLD_01 1578 0.83 1.76 0.37 123 TR_LOTS_OF_MONEY3 1571 0.75 1.75 0.26 124 TR_XM_INV_DKIM 1569 0.73 1.75 0.23 125 RCVD_IN_PSBL 1546 0.85 1.72 0.43 126 THIS_AD 1516 0.88 1.69 0.48 127 HTML_MIME_NO_HTML_TAG 1502 1.67 1.67 1.67 128 TR_XM_PHPDW 1499 0.70 1.67 0.22 129 SpammyFromTLD_02 1481 0.66 1.65 0.17 130 DKIM_ADSP_CUSTOM_MED 1438 0.98 1.60 0.68 131 TR_XM_PHPForged 1436 0.67 1.60 0.21 132 MPART_ALT_DIFF_COUNT 1432 0.95 1.60 0.63 133 TR_XM_FormFill2 1429 0.67 1.59 0.22 134 XM_B_Phish66 1406 0.68 1.57 0.24 135 XM_H_PHPOS 1402 0.65 1.56 0.20 136 URI_HEX 1386 1.04 1.55 0.79 137 HTML_TAG_BALANCE_BODY 1379 1.04 1.54 0.79 138 XMStockSpam_06 1355 1.64 1.51 1.71 139 BAYES_40 1351 4.58 1.51 6.09 140 XM_B_COPY_HTML 1322 1.45 1.47 1.43 141 NML_ADSP_CUSTOM_MED 1317 0.77 1.47 0.43 142 XM_B_REG_HTML 1307 0.67 1.46 0.28 143 FORGED_GMAIL_RCVD 1276 0.74 1.42 0.41 144 XM_UB60 1236 0.50 1.38 0.06 145 RCVD_IN_PBL 1235 0.77 1.38 0.48 146 XM_DK_Undo_01 1165 1.44 1.30 1.51 147 XMPhish30 1152 0.86 1.28 0.65 148 URI_TRY_3LD 1113 0.73 1.24 0.48 149 TR_MetaPhish_Combo_01 1107 0.88 1.23 0.70 150 BAYES_20 1102 2.70 1.23 3.42 151 XM_HighProb1 1100 0.41 1.23 0.01 152 HDRS_MISSP 1097 0.41 1.22 0.01 153 DKIM_ADSP_NXDOMAIN 1090 0.73 1.22 0.49 154 XM_UB99 1073 0.40 1.20 0.00 155 HTML_IMAGE_ONLY_20 1066 0.69 1.19 0.44 156 RDNS_DYNAMIC 1030 0.54 1.15 0.24 157 XM_ShortIntro_01 1027 0.66 1.15 0.43 158 MultiRelay_CC 1023 0.44 1.14 0.10 159 URI_NOVOWEL 1008 1.42 1.12 1.57 160 SUBJ_DOLLARS 1008 0.69 1.12 0.48 161 ANY_BOUNCE_MESSAGE 994 9.21 1.11 13.19 162 BOUNCE_MESSAGE 993 9.20 1.11 13.18 163 TVD_RCVD_IP 993 1.08 1.11 1.06 164 XMBody_78 993 0.50 1.11 0.20 165 LongTLD 985 0.53 1.10 0.26 166 XM_UB80 983 0.37 1.10 0.01 167 TR_Mismatch_TLD_01 981 0.53 1.09 0.25 168 HTTPS_HTTP_MISMATCH 967 0.59 1.08 0.36 169 RCVD_IN_XBL 963 0.37 1.07 0.02 170 HELO_DYNAMIC_SPLIT_IP 946 0.35 1.05 0.01 171 XMReplyNow 945 0.47 1.05 0.18 172 T_STY_INVIS_DIRECT 945 0.73 1.05 0.57 173 TR_Mismatch_TLD_02 943 0.38 1.05 0.06 174 HTML_FONT_FACE_BAD 924 0.60 1.03 0.39 175 XMGenDplmaNmb 924 0.66 1.03 0.48 176 PDS_RDNS_DYNAMIC_FP 920 0.37 1.03 0.04 177 DEAR_FRIEND 891 0.35 0.99 0.03 178 GOOG_STO_NOIMG_HTML 885 0.40 0.99 0.11 179 PLING_QUERY 875 0.68 0.98 0.54 180 TM2_M_OBFU_COMMENT 865 0.80 0.96 0.72 181 TR_XM_RelayPhish 863 0.35 0.96 0.05 182 TM2_M_A_HREF_HREF 841 0.42 0.94 0.17 183 XM_SendGrid 836 1.04 0.93 1.10 184 XM_OfRef7 833 0.44 0.93 0.20 185 MISSING_HEADERS 816 0.46 0.91 0.25 186 XMBdyGiftCard01 800 1.61 0.89 1.97 187 XMSlimDrugH 798 0.93 0.89 0.95 188 XMSubMetaI_00 790 0.68 0.88 0.59 189 XM_H_PHPMailer 779 0.80 0.87 0.77 190 XMSexyCombo_01 779 0.37 0.87 0.13 191 XM_ProductURIs 769 0.69 0.86 0.61 192 XM_RXBody 756 0.40 0.84 0.18 193 RCVD_IN_SBL_CSS 746 0.28 0.83 0.01 194 XMPhish08 743 0.37 0.83 0.14 195 XM_GoogleGroups 720 1.00 0.80 1.10 196 TR_Symld_Words 679 1.08 0.76 1.23 197 J_POPCORN_WO_D 678 0.43 0.76 0.27 198 T_TooManySym_02 668 3.06 0.74 4.20 199 FROM_MISSP_REPLYTO 651 0.24 0.73 0.00 200 BAYES_05 637 1.40 0.71 1.73 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156915 88.85 94.64 86.00 2 RELAYCOUNTRY_US 150594 82.16 81.39 82.54 3 XM_B_Unicode 131760 76.19 84.28 72.22 4 DKIM_SIGNED 128205 76.62 89.53 70.27 5 XM_DK_Pass 126387 74.21 84.25 69.27 6 DKIM_VALID 125440 73.70 83.76 68.75 7 BAYES_50 115927 54.41 35.85 63.54 8 DKIM_VALID_AU 107291 62.04 68.63 58.81 9 DCC_CHECK_NEGATIVE 97650 42.92 21.37 53.52 10 XMListUnsubscribeExists 92296 56.97 69.95 50.59 11 XM_B_Unicode3 86950 49.27 52.56 47.66 12 XM_B_SpammyWords 84911 54.39 70.35 46.54 13 DCC_CHECK 84763 56.92 78.21 46.46 14 HTML_FONT_LOW_CONTRAST 71349 38.91 38.51 39.11 15 RCVD_IN_MSPIKE_H2 63423 37.25 42.32 34.76 16 LOC_TINY_FONT_1 58803 37.33 47.70 32.23 17 T_TM2_M_HEADER_IN_MSG 52373 25.16 17.96 28.71 18 FVGT_m_MULTI_ODD 48521 28.32 31.83 26.59 19 DKIM_VALID_EF 48016 27.32 29.35 26.32 20 XMSubLong 36714 20.27 20.58 20.12 21 T_KAM_HTML_FONT_INVALID 35577 22.33 28.08 19.50 22 XM_B_SpammyWords2 34431 25.86 40.06 18.87 23 MIME_HTML_ONLY 34389 22.25 29.17 18.85 24 USER_IN_DEF_DKIM_WL 30835 12.03 2.14 16.90 25 XM_Multi_Part_URI 28244 17.68 22.15 15.48 26 ALL_TRUSTED 25612 10.02 1.83 14.04 27 XM_Evil_Numbers_Gen 25420 11.94 7.89 13.93 28 TR_XM_DK_Unsub 25105 16.34 21.60 13.76 29 UNPARSEABLE_RELAY 24981 16.13 21.08 13.69 30 ANY_BOUNCE_MESSAGE 24057 9.21 1.11 13.19 31 BOUNCE_MESSAGE 24049 9.20 1.11 13.18 32 LotsOfNums_01 23512 10.36 5.22 12.89 33 HTML_IMAGE_ONLY_32 18725 6.92 0.12 10.26 34 TM2_M_VERY_LONG_WORD 18466 8.31 4.61 10.12 35 MAY_BE_FORGED 16055 5.94 0.13 8.80 36 FSL_BULK_SIG 16052 9.09 9.70 8.80 37 BAYES_00 15935 6.05 0.58 8.73 38 XM_B_Unsub 15872 11.95 18.56 8.70 39 XM_DKIMWhitelistDomains 15486 5.71 0.05 8.49 40 T_SCC_BODY_TEXT_LINE 15368 8.29 8.01 8.42 41 BAYES_60 12787 7.90 9.72 7.01 42 TR_XM_DK_Bayes 12669 4.81 0.45 6.94 43 TR_XM_DK_Bayes1 12563 4.76 0.45 6.89 44 T_TooManySym_01 12256 5.26 2.29 6.72 45 TR_XM_BayesUnsub 11882 10.25 17.84 6.51 46 RCVD_IN_VALIDITY_SAFE 11118 5.27 3.61 6.09 47 BAYES_40 11106 4.58 1.51 6.09 48 TR_XM_DK_Bayes2 11073 4.20 0.39 6.07 49 KHOP_HELO_FCRDNS 10908 5.33 4.02 5.98 50 XM_H_GMP 10512 5.57 5.19 5.76 51 XM_B_PhoneNumber 10060 5.03 4.04 5.51 52 XMStrtUSub 9791 5.08 4.50 5.37 53 TooManyTo_001 9735 4.68 3.34 5.34 54 XM_B_SpammyWords3 9614 8.72 15.74 5.27 55 XM_DK_Undo_02 9505 17.51 42.55 5.21 56 HTML_IMAGE_RATIO_02 9396 6.14 8.14 5.15 57 TR_MAX_INTL_RELAY 9309 8.77 16.23 5.10 58 XM_H_Long_From01 9035 4.97 5.01 4.95 59 RCVD_IN_VALIDITY_CERTIFIED 8771 4.11 2.68 4.81 60 IN_ZIMBRA_NJ_WHITELIST 8637 3.24 0.19 4.73 61 XM_UncommonTLD01 8602 5.33 6.59 4.71 62 HTML_IMAGE_RATIO_04 8054 4.47 4.59 4.41 63 BAYES_99 7983 14.18 34.12 4.38 64 LOTS_OF_MONEY 7959 6.24 10.06 4.36 65 MPART_ALT_DIFF 7916 5.03 6.44 4.34 66 XM_B_Phish_Phrases 7880 5.12 6.76 4.32 67 RCVD_IN_MSPIKE_WL 7814 3.80 2.82 4.28 68 RCVD_IN_MSPIKE_H3 7812 3.80 2.82 4.28 69 T_TooManySym_02 7659 3.06 0.74 4.20 70 MIME_CHARSET_FARAWAY 7488 2.96 0.63 4.10 71 CHARSET_FARAWAY_HEADER 7184 2.76 0.36 3.94 72 INVALID_MSGID 6566 2.50 0.27 3.60 73 BAYES_999 6426 11.17 26.72 3.52 74 XMNumbers 6386 3.60 3.79 3.50 75 TO_MALFORMED 6268 2.33 0.08 3.44 76 BAYES_20 6245 2.70 1.23 3.42 77 RELAYCOUNTRY_META 6189 8.75 19.66 3.39 78 XMSubMetaSx_00 6072 4.26 6.15 3.33 79 TR_XM_SpammyWords4 5608 5.05 9.06 3.07 80 BOTNET_IPINHOSTNAME 5550 5.75 11.27 3.04 81 BAYES_80 5491 5.32 10.02 3.01 82 HTML_IMAGE_RATIO_06 5258 2.96 3.12 2.88 83 T_REMOTE_IMAGE 5087 2.52 1.98 2.79 84 MIME_QP_LONG_LINE 5003 2.45 1.84 2.74 85 TR_XM_DKIM_Undo 4840 12.17 31.52 2.65 86 MIME_HTML_MOSTLY 4813 3.06 3.91 2.64 87 MIME_HTML_ONLY_MULTI 4535 2.70 3.14 2.49 88 XM_CamelCaseFrm001 4442 2.96 4.01 2.43 89 XM_B_SpammyTLD 4389 2.84 3.72 2.41 90 XM_Body_Dirty_Words 4335 4.50 8.83 2.38 91 HTML_IMAGE_RATIO_08 4223 2.54 3.01 2.31 92 MAILING_LIST_MULTI 4140 2.23 2.16 2.27 93 FROM_EXCESS_BASE64 4005 2.29 2.47 2.20 94 TR_DCC_Bayes_99 3988 9.64 24.81 2.19 95 BAYES_95 3811 3.33 5.87 2.09 96 RCVD_IN_IADB_LISTED 3802 1.58 0.56 2.08 97 T_XMDrugObfuBody_14 3693 2.81 4.41 2.02 98 TooManyTo_002 3680 1.52 0.52 2.02 99 TR_XM_SpammyRelay 3680 6.05 14.26 2.02 100 T_XMDrugObfuBody_08 3620 2.38 3.18 1.98 101 XMBdyGiftCard01 3594 1.61 0.89 1.97 102 T_TVD_MIME_NO_HEADERS 3497 1.30 0.04 1.92 103 RCVD_IN_IADB_SPF 3437 1.43 0.52 1.88 104 XM_PDF 3401 1.39 0.43 1.86 105 TM2_M_URI_OPT_OUT 3367 1.96 2.21 1.85 106 T_TooManySym_03 3366 1.29 0.16 1.84 107 TR_XM_PhishingBody 3176 2.77 4.85 1.74 108 BAYES_05 3160 1.40 0.71 1.73 109 RCVD_IN_IADB_SENDERID 3133 1.32 0.51 1.72 110 XMStockSpam_06 3116 1.64 1.51 1.71 111 UNTRUSTED_Relay 3103 3.72 7.84 1.70 112 TR_XM_UnparsRelay 3097 5.16 12.19 1.70 113 RCVD_IN_IADB_DK 3096 1.31 0.51 1.70 114 HTML_MIME_NO_HTML_TAG 3041 1.67 1.67 1.67 115 URI_NOVOWEL 2864 1.42 1.12 1.57 116 DKIM_INVALID 2765 2.92 5.78 1.52 117 XM_DK_Undo_01 2762 1.44 1.30 1.51 118 IN_HORDE_ADDRESS_BOOK 2735 1.05 0.13 1.50 119 XM_B_COPY_HTML 2617 1.45 1.47 1.43 120 TVD_SPACE_RATIO 2536 0.99 0.17 1.39 121 RCVD_IN_IADB_VOUCHED 2397 0.94 0.19 1.31 122 RELAYCOUNTRY_CA 2345 3.24 7.21 1.29 123 XMGappySubj_01 2269 0.99 0.46 1.24 124 TR_Symld_Words 2247 1.08 0.76 1.23 125 XM_B_URI_Unicode 2194 1.50 2.12 1.20 126 XM_B_Investor 2116 2.12 4.07 1.16 127 XM_B_Unsub2 2114 1.56 2.38 1.16 128 XMSexyCombo_05 2061 2.34 4.80 1.13 129 XMDiploma_00 2027 1.56 2.48 1.11 130 XM_GoogleGroups 2014 1.00 0.80 1.10 131 XM_SendGrid 2004 1.04 0.93 1.10 132 TVD_RCVD_IP 1937 1.08 1.11 1.06 133 XMBrknScrpt_02 1927 1.44 2.23 1.06 134 TR_XM_SpammyWords5 1890 1.88 3.60 1.04 135 BOTNET 1872 4.46 11.45 1.03 136 XMGappySubj_02 1863 0.70 0.05 1.02 137 SUBJ_ALL_CAPS 1851 1.39 2.14 1.01 138 TooManyTo_003 1826 0.83 0.48 1.00 139 RCVD_IN_IADB_OPTIN 1775 0.69 0.11 0.97 140 XMSlimDrugH 1729 0.93 0.89 0.95 141 XMLngstWrd_00 1679 0.74 0.39 0.92 142 XM_UB50 1676 1.69 3.26 0.92 143 TR_XM_Base64_M1 1627 0.81 0.65 0.89 144 XM_SPF_SoftFail 1501 1.62 3.25 0.82 145 TR_XM_DK_SendGrid 1487 0.75 0.62 0.82 146 T_XMHurry_00 1464 1.29 2.29 0.80 147 HTML_TAG_BALANCE_BODY 1449 1.04 1.54 0.79 148 TR_XM_SpammyWords2 1440 4.75 12.79 0.79 149 URI_HEX 1438 1.04 1.55 0.79 150 XM_B_SpammyWords4 1428 1.50 2.95 0.78 151 XM_H_PHPMailer 1407 0.80 0.87 0.77 152 HELO_MISC_IP 1364 0.52 0.05 0.75 153 XM_OfRef6 1363 1.61 3.38 0.75 154 XM_H_Long_From02 1361 1.13 1.92 0.75 155 XMBSHREFv2 1353 0.65 0.48 0.74 156 TM2_M_OBFU_COMMENT 1306 0.80 0.96 0.72 157 MSGID_FROM_MTA_HEADER 1306 0.53 0.15 0.72 158 TooManyTo_004 1297 0.62 0.45 0.71 159 TR_MetaPhish_Combo_01 1281 0.88 1.23 0.70 160 XM_B_DNDMA 1277 0.70 0.70 0.70 161 DKIM_ADSP_CUSTOM_MED 1235 0.98 1.60 0.68 162 XM_B_FormFill 1224 0.46 0.02 0.67 163 XMBody_95 1202 0.51 0.21 0.66 164 XMPhish30 1186 0.86 1.28 0.65 165 XMPhish14 1179 0.62 0.57 0.65 166 MPART_ALT_DIFF_COUNT 1150 0.95 1.60 0.63 167 TooManyTo_005 1136 0.56 0.43 0.62 168 XM_ProductURIs 1116 0.69 0.86 0.61 169 T_XMDrugObfuBody_00 1113 1.14 2.22 0.61 170 USER_IN_WHITELIST 1110 0.41 0.00 0.61 171 USER_IN_WELCOMELIST 1110 0.41 0.00 0.61 172 XMSubMetaI_00 1074 0.68 0.88 0.59 173 T_TooManySym_04 1062 0.39 0.01 0.58 174 T_STY_INVIS_DIRECT 1048 0.73 1.05 0.57 175 PLING_QUERY 978 0.68 0.98 0.54 176 TR_XM_SpoofStaff 948 0.41 0.20 0.52 177 XM_H_SpoofStaff4 942 0.37 0.07 0.52 178 DIET_1 919 1.11 2.34 0.50 179 LOW_PRICE 915 0.43 0.30 0.50 180 DKIM_ADSP_NXDOMAIN 903 0.73 1.22 0.49 181 SUBJ_DOLLARS 880 0.69 1.12 0.48 182 THIS_AD 877 0.88 1.69 0.48 183 RCVD_IN_PBL 874 0.77 1.38 0.48 184 XMGenDplmaNmb 872 0.66 1.03 0.48 185 T_FILL_THIS_FORM_SHORT 872 0.97 1.96 0.48 186 URI_TRY_3LD 872 0.73 1.24 0.48 187 XMNoVowels 870 0.46 0.42 0.48 188 XM_Ancestry_Forge 859 0.32 0.01 0.47 189 XMBody_17 859 1.14 2.51 0.47 190 RELAYCOUNTRY_AU 838 1.21 2.74 0.46 191 HTML_EXTRA_CLOSE 828 0.32 0.05 0.45 192 XM_URI_RBL 816 1.29 3.00 0.45 193 NO_DNS_FOR_FROM 810 0.48 0.57 0.44 194 HTML_IMAGE_ONLY_20 808 0.69 1.19 0.44 195 HTML_TAG_BALANCE_CENTER 805 0.43 0.42 0.44 196 XM_S_SubURI 780 0.30 0.05 0.43 197 AD_PREFS 780 0.34 0.17 0.43 198 RCVD_IN_PSBL 779 0.85 1.72 0.43 199 XM_ShortIntro_01 779 0.66 1.15 0.43 200 NML_ADSP_CUSTOM_MED 777 0.77 1.47 0.43 ----------------------------------------------------------------------