Email: 261261 Autolearn: 0 AvgScore: 5.47 AvgScanTime: 1.38 sec Spam: 88786 Autolearn: 0 AvgScore: 14.45 AvgScanTime: 1.47 sec Ham: 172475 Autolearn: 0 AvgScore: 0.84 AvgScanTime: 1.33 sec Time Spent Running SA: 99.91 hours Time Spent Processing Spam: 36.24 hours Time Spent Processing Ham: 63.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85039 88.28 95.78 84.42 2 DKIM_SIGNED 80499 78.20 90.67 71.79 3 XM_DK_Pass 74273 75.34 83.65 71.06 4 DKIM_VALID 73991 74.95 83.34 70.63 5 XM_B_Unicode 73283 75.39 82.54 71.70 6 RELAYCOUNTRY_US 71938 81.61 81.02 81.91 7 DCC_CHECK 68639 53.86 77.31 41.80 8 XM_B_SpammyWords 61808 55.32 69.61 47.97 9 XMListUnsubscribeExists 61004 56.09 68.71 49.60 10 DKIM_VALID_AU 58890 63.50 66.33 62.05 11 XM_B_Unicode3 46879 49.69 52.80 48.09 12 LOC_TINY_FONT_1 43873 39.45 49.41 34.32 13 XM_DK_Undo_02 38967 18.41 43.89 5.30 14 XM_B_SpammyWords2 35555 27.80 40.05 21.49 15 BAYES_50 32716 53.86 36.85 62.62 16 HTML_FONT_LOW_CONTRAST 32703 36.78 36.83 36.75 17 FVGT_m_MULTI_ODD 30869 28.83 34.77 25.77 18 BAYES_99 30046 14.30 33.84 4.24 19 TR_XM_DKIM_Undo 28455 12.16 32.05 1.93 20 DKIM_VALID_EF 27560 28.93 31.04 27.85 21 T_KAM_HTML_FONT_INVALID 24057 22.66 27.10 20.38 22 MIME_HTML_ONLY 22897 20.91 25.79 18.40 23 BAYES_999 22562 10.80 25.41 3.27 24 TR_DCC_Bayes_99 22088 9.70 24.88 1.89 25 TR_XM_DK_Unsub 21710 17.67 24.45 14.18 26 XM_Multi_Part_URI 20510 18.17 23.10 15.64 27 DCC_CHECK_NEGATIVE 19610 45.88 22.09 58.13 28 RCVD_IN_MSPIKE_H2 19590 16.71 22.06 13.95 29 XMSubLong 19026 21.46 21.43 21.48 30 XM_B_Unsub 18312 13.56 20.62 9.92 31 TR_XM_BayesUnsub 17632 12.06 19.86 8.05 32 RELAYCOUNTRY_META 16396 8.02 18.47 2.65 33 T_TM2_M_HEADER_IN_MSG 15678 23.49 17.66 26.49 34 UNPARSEABLE_RELAY 14843 13.92 16.72 12.48 35 TR_MAX_INTL_RELAY 14779 9.71 16.65 6.14 36 RCVD_IN_BL_SPAMCOP_NET 14441 5.96 16.26 0.66 37 TR_XM_SpammyRelay 12512 5.77 14.09 1.49 38 XM_B_SpammyWords3 12189 8.95 13.73 6.49 39 TR_XM_SpammyWords2 10710 4.45 12.06 0.54 40 BOTNET 10407 4.61 11.72 0.96 41 FSL_BULK_SIG 9735 6.66 10.96 4.45 42 RCVD_IN_MSPIKE_WL 9530 14.60 10.73 16.59 43 BOTNET_IPINHOSTNAME 9217 5.98 10.38 3.72 44 BAYES_80 8943 5.87 10.07 3.71 45 TR_XM_UnparsRelay 8299 4.17 9.35 1.51 46 MPART_ALT_DIFF 8299 7.11 9.35 5.97 47 BAYES_60 8086 7.78 9.11 7.10 48 TR_XM_MSPIKECOMBO 7974 3.39 8.98 0.52 49 RCVD_IN_MSPIKE_BL 7974 3.40 8.98 0.52 50 LOTS_OF_MONEY 7928 6.80 8.93 5.70 51 TR_XM_SpammyWords4 7164 5.55 8.07 4.25 52 UNTRUSTED_Relay 6670 3.67 7.51 1.69 53 TR_XM_SPAMCOP 6558 2.63 7.39 0.18 54 RELAYCOUNTRY_CA 6509 3.01 7.33 0.78 55 DKIM_INVALID 6508 3.25 7.33 1.16 56 TR_XM_SpammyWords3 6451 2.63 7.27 0.24 57 XM_Evil_Numbers_Gen 6449 11.50 7.26 13.67 58 XMSubMetaSx_00 5938 5.30 6.69 4.59 59 RCVD_IN_MSPIKE_L3 5689 2.43 6.41 0.38 60 HTML_IMAGE_RATIO_02 5549 5.72 6.25 5.45 61 XM_B_Phish_Phrases 5534 5.54 6.23 5.19 62 BAYES_95 5524 3.72 6.22 2.42 63 XM_H_GMP 5481 6.31 6.17 6.38 64 XMStrtUSub 5123 5.70 5.77 5.67 65 LotsOfNums_01 4848 6.11 5.46 6.44 66 DKIM_ADSP_NXDOMAIN 4640 2.06 5.23 0.43 67 XM_UncommonTLD01 4577 4.94 5.16 4.83 68 TR_XM_PhishingBody 4545 2.73 5.12 1.51 69 XM_Body_Dirty_Words 4483 3.58 5.05 2.83 70 T_XMDrugObfuBody_14 4290 2.66 4.83 1.55 71 XM_H_Long_From01 4210 5.00 4.74 5.14 72 TooManyTo_001 4105 4.90 4.62 5.05 73 TM2_M_VERY_LONG_WORD 4085 6.66 4.60 7.72 74 MIME_HTML_MOSTLY 3957 4.26 4.46 4.16 75 XM_B_Investor 3956 2.43 4.46 1.38 76 MIME_QP_LONG_LINE 3953 3.32 4.45 2.74 77 TR_XM_NoHeaderRelay 3931 1.59 4.43 0.13 78 RCVD_IN_MSPIKE_H3 3913 6.35 4.41 7.35 79 XM_B_SpammyTLD 3861 3.32 4.35 2.79 80 HTML_IMAGE_RATIO_04 3801 4.36 4.28 4.40 81 RCVD_IN_VALIDITY_RPBL 3596 1.43 4.05 0.09 82 TR_XM_SpammyWords5 3338 1.95 3.76 1.03 83 XM_B_PhoneNumber 3321 5.63 3.74 6.60 84 XMNumbers 3158 3.91 3.56 4.09 85 T_XMDrugObfuBody_08 3153 2.21 3.55 1.52 86 XM_OfRef6 3081 1.58 3.47 0.60 87 XM_H_DKIM_GOOG 3064 1.18 3.45 0.01 88 XMSexyCombo_05 2980 1.81 3.36 1.02 89 T_FILL_THIS_FORM_SHORT 2898 1.62 3.26 0.77 90 XM_CamelCaseFrm001 2895 2.32 3.26 1.83 91 RCVD_IN_MSPIKE_H5 2888 4.73 3.25 5.48 92 RCVD_IN_MSPIKE_H4 2729 3.52 3.07 3.75 93 XMPhish30 2722 1.42 3.07 0.58 94 HTML_IMAGE_RATIO_06 2699 3.46 3.04 3.68 95 TR_XM_MSPIKECOMBO2 2580 1.00 2.91 0.02 96 XMBody_17 2580 1.30 2.91 0.47 97 XM_URI_RBL 2536 1.33 2.86 0.54 98 T_XMHurry_00 2507 1.37 2.82 0.62 99 ANY_BOUNCE_MESSAGE 2422 9.08 2.73 12.35 100 BOUNCE_MESSAGE 2420 9.08 2.73 12.35 101 RELAYCOUNTRY_AU 2323 1.12 2.62 0.36 102 DIET_1 2270 1.31 2.56 0.67 103 SUBJ_ALL_CAPS 2240 1.31 2.52 0.69 104 TR_XM_INV_DKIM 2231 0.87 2.51 0.02 105 MIME_HTML_ONLY_MULTI 2223 2.52 2.50 2.54 106 USER_IN_DEF_DKIM_WL 2173 12.93 2.45 18.32 107 XMDiploma_00 2162 1.85 2.44 1.55 108 XM_B_Unsub2 2129 1.63 2.40 1.24 109 XM_B_SpammyWords4 2122 1.29 2.39 0.73 110 HTML_IMAGE_RATIO_08 2092 2.47 2.36 2.53 111 XM_UB50 2064 1.44 2.32 0.98 112 MAILING_LIST_MULTI 2041 2.38 2.30 2.42 113 TR_XM_MaxSPIKE 1989 0.77 2.24 0.02 114 TR_XM_INTL_Spamhaus 1912 0.81 2.15 0.12 115 XM_SPF_SoftFail 1906 1.70 2.15 1.48 116 THIS_AD 1894 0.93 2.13 0.31 117 XM_UB99 1892 0.72 2.13 0.00 118 RCVD_IN_VALIDITY_SAFE 1892 4.80 2.13 6.18 119 FROM_EXCESS_BASE64 1792 1.90 2.02 1.83 120 KHOP_HELO_FCRDNS 1744 3.99 1.96 5.03 121 XM_B_URI_Unicode 1735 1.72 1.95 1.59 122 XM_H_Long_From02 1664 1.06 1.87 0.65 123 RCVD_IN_XBL 1622 0.63 1.83 0.01 124 XMStockSpam_06 1612 2.14 1.82 2.31 125 T_TooManySym_01 1608 5.50 1.81 7.39 126 URI_NOVOWEL 1599 1.40 1.80 1.19 127 XMBrknScrpt_02 1576 1.32 1.78 1.08 128 HTML_IMAGE_ONLY_20 1555 0.90 1.75 0.47 129 RCVD_IN_PSBL 1528 0.61 1.72 0.04 130 XM_B_Phish66 1522 0.78 1.71 0.30 131 HTML_FONT_TINY_NORDNS 1512 0.60 1.70 0.04 132 RCVD_IN_MSPIKE_L4 1499 0.65 1.69 0.12 133 RCVD_IN_SBL_CSS 1495 0.58 1.68 0.01 134 BOTNET_NORDNS 1467 0.57 1.65 0.01 135 MPART_ALT_DIFF_COUNT 1453 0.96 1.64 0.61 136 T_XMDrugObfuBody_00 1452 1.13 1.64 0.87 137 SpammyFromTLD_02 1446 0.70 1.63 0.22 138 RELAYCOUNTRY_FR 1403 0.72 1.58 0.27 139 BAYES_40 1385 4.58 1.56 6.13 140 TM2_M_URI_OPT_OUT 1378 1.73 1.55 1.83 141 TR_LOTS_OF_MONEY3 1365 0.72 1.54 0.30 142 STY_INVIS_DIRECT 1343 0.76 1.51 0.37 143 RELAYCOUNTRY_ID 1339 0.51 1.51 0.00 144 SpammyFromTLD_01 1337 0.75 1.51 0.36 145 RDNS_DYNAMIC 1337 0.67 1.51 0.24 146 XMBounce_01 1336 0.52 1.50 0.02 147 XMSlimDrugH 1326 0.97 1.49 0.71 148 XMSexyCombo_01 1294 0.60 1.46 0.16 149 TVD_RCVD_IP 1289 1.56 1.45 1.62 150 RCVD_IN_VALIDITY_CERTIFIED 1271 3.91 1.43 5.19 151 XMSubMetaI_00 1266 0.87 1.43 0.58 152 XM_GoogleGroups 1263 1.25 1.42 1.17 153 SHOPIFY_IMG_NOT_RCVD_SFY 1260 0.70 1.42 0.33 154 RCVD_IN_PBL 1219 0.83 1.37 0.55 155 XMBdyGiftCard01 1209 1.22 1.36 1.15 156 URI_TRY_3LD 1200 0.77 1.35 0.46 157 XMGetyour 1192 0.51 1.34 0.08 158 XM_B_COPY_HTML 1172 1.33 1.32 1.34 159 MultiRelay_CC 1170 0.49 1.32 0.07 160 HELO_DYNAMIC_SPLIT_IP 1098 0.43 1.24 0.02 161 T_REMOTE_IMAGE 1085 2.37 1.22 2.96 162 XM_UB999 1082 0.41 1.22 0.00 163 XMBody_78 1074 0.58 1.21 0.25 164 ALL_TRUSTED 1037 10.45 1.17 15.23 165 URI_HEX 1026 1.06 1.16 1.01 166 XM_B_SEO 1001 0.50 1.13 0.17 167 IMPOTENCE 999 0.38 1.13 0.00 168 XM_B_REG_HTML 998 0.55 1.12 0.25 169 XM_HighProb1 993 0.38 1.12 0.00 170 FVGT_m_MULTI_ODD_EMAIL 976 0.40 1.10 0.05 171 XMGenDplmaNmb 972 0.83 1.09 0.70 172 XM_UB80 946 0.38 1.07 0.02 173 HTML_IMAGE_ONLY_32 945 0.70 1.06 0.51 174 XM_OfRef7 944 0.44 1.06 0.13 175 TR_XM_PHPForged 931 0.54 1.05 0.28 176 XMReplyNow 915 0.47 1.03 0.18 177 BAYES_20 909 2.76 1.02 3.66 178 TR_XM_FormFill2 907 0.53 1.02 0.28 179 HTML_TAG_BALANCE_BODY 906 0.97 1.02 0.94 180 TR_Mismatch_TLD_01 903 0.67 1.02 0.49 181 XM_SendGrid 899 1.08 1.01 1.11 182 TR_XM_PHPDW 895 0.52 1.01 0.27 183 XM_UB60 891 0.40 1.00 0.08 184 TR_XM_GMP_BULK_SIG 886 0.40 1.00 0.09 185 XM_B_DynamicLink 883 0.36 0.99 0.03 186 MIME_CHARSET_FARAWAY 882 2.09 0.99 2.65 187 XM_H_PHPOS 879 0.51 0.99 0.26 188 RCVD_IN_IADB_LISTED 875 1.44 0.99 1.67 189 FROM_DOMAIN_NOVOWEL 851 0.33 0.96 0.01 190 HTML_FONT_SIZE_LARGE 847 0.38 0.95 0.08 191 TR_XM_SEO4 834 0.38 0.94 0.09 192 XMCapTrack 833 0.56 0.94 0.36 193 XM_ProductURIs 809 0.74 0.91 0.65 194 CHARSET_FARAWAY_HEADER 797 1.96 0.90 2.51 195 TR_XM_FormFill 797 0.31 0.90 0.01 196 XM_B_DNDMA 796 0.61 0.90 0.46 197 TR_Caps_n_Bayes_99 791 0.32 0.89 0.02 198 RCVD_IN_MSPIKE_L5 786 0.31 0.89 0.02 199 FUZZY_UNSUBSCRIBE 785 0.50 0.88 0.31 200 XM_DK_Undo_01 775 1.18 0.87 1.33 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145596 88.28 95.78 84.42 2 RELAYCOUNTRY_US 141266 81.61 81.02 81.91 3 DKIM_SIGNED 123813 78.20 90.67 71.79 4 XM_B_Unicode 123673 75.39 82.54 71.70 5 XM_DK_Pass 122562 75.34 83.65 71.06 6 DKIM_VALID 121818 74.95 83.34 70.63 7 BAYES_50 108006 53.86 36.85 62.62 8 DKIM_VALID_AU 107021 63.50 66.33 62.05 9 DCC_CHECK_NEGATIVE 100265 45.88 22.09 58.13 10 XMListUnsubscribeExists 85547 56.09 68.71 49.60 11 XM_B_Unicode3 82946 49.69 52.80 48.09 12 XM_B_SpammyWords 82729 55.32 69.61 47.97 13 DCC_CHECK 72088 53.86 77.31 41.80 14 HTML_FONT_LOW_CONTRAST 63380 36.78 36.83 36.75 15 LOC_TINY_FONT_1 59196 39.45 49.41 34.32 16 DKIM_VALID_EF 48035 28.93 31.04 27.85 17 T_TM2_M_HEADER_IN_MSG 45682 23.49 17.66 26.49 18 FVGT_m_MULTI_ODD 44445 28.83 34.77 25.77 19 XM_B_SpammyWords2 37067 27.80 40.05 21.49 20 XMSubLong 37048 21.46 21.43 21.48 21 T_KAM_HTML_FONT_INVALID 35152 22.66 27.10 20.38 22 MIME_HTML_ONLY 31731 20.91 25.79 18.40 23 USER_IN_DEF_DKIM_WL 31596 12.93 2.45 18.32 24 RCVD_IN_MSPIKE_WL 28616 14.60 10.73 16.59 25 XM_Multi_Part_URI 26972 18.17 23.10 15.64 26 ALL_TRUSTED 26263 10.45 1.17 15.23 27 TR_XM_DK_Unsub 24463 17.67 24.45 14.18 28 RCVD_IN_MSPIKE_H2 24059 16.71 22.06 13.95 29 XM_Evil_Numbers_Gen 23585 11.50 7.26 13.67 30 UNPARSEABLE_RELAY 21527 13.92 16.72 12.48 31 ANY_BOUNCE_MESSAGE 21297 9.08 2.73 12.35 32 BOUNCE_MESSAGE 21294 9.08 2.73 12.35 33 XM_B_Unsub 17107 13.56 20.62 9.92 34 BAYES_00 14226 5.57 0.37 8.25 35 TR_XM_BayesUnsub 13887 12.06 19.86 8.05 36 XM_DKIMWhitelistDomains 13794 5.31 0.08 8.00 37 TM2_M_VERY_LONG_WORD 13320 6.66 4.60 7.72 38 T_TooManySym_01 12751 5.50 1.81 7.39 39 RCVD_IN_MSPIKE_H3 12683 6.35 4.41 7.35 40 BAYES_60 12248 7.78 9.11 7.10 41 TR_XM_DK_Bayes 11493 4.50 0.28 6.66 42 TR_XM_DK_Bayes1 11413 4.46 0.28 6.62 43 XM_B_PhoneNumber 11391 5.63 3.74 6.60 44 XM_B_SpammyWords3 11186 8.95 13.73 6.49 45 LotsOfNums_01 11111 6.11 5.46 6.44 46 XM_H_GMP 11010 6.31 6.17 6.38 47 RCVD_IN_VALIDITY_SAFE 10654 4.80 2.13 6.18 48 TR_MAX_INTL_RELAY 10584 9.71 16.65 6.14 49 BAYES_40 10573 4.58 1.56 6.13 50 MPART_ALT_DIFF 10289 7.11 9.35 5.97 51 TR_XM_DK_Bayes2 10079 3.93 0.22 5.84 52 LOTS_OF_MONEY 9838 6.80 8.93 5.70 53 XMStrtUSub 9777 5.70 5.77 5.67 54 RCVD_IN_MSPIKE_H5 9459 4.73 3.25 5.48 55 HTML_IMAGE_RATIO_02 9393 5.72 6.25 5.45 56 XM_DK_Undo_02 9140 18.41 43.89 5.30 57 XM_B_Phish_Phrases 8951 5.54 6.23 5.19 58 RCVD_IN_VALIDITY_CERTIFIED 8946 3.91 1.43 5.19 59 XM_H_Long_From01 8860 5.00 4.74 5.14 60 TooManyTo_001 8706 4.90 4.62 5.05 61 KHOP_HELO_FCRDNS 8678 3.99 1.96 5.03 62 XM_UncommonTLD01 8324 4.94 5.16 4.83 63 XMSubMetaSx_00 7912 5.30 6.69 4.59 64 FSL_BULK_SIG 7678 6.66 10.96 4.45 65 HTML_IMAGE_RATIO_04 7588 4.36 4.28 4.40 66 T_TooManySym_02 7490 3.05 0.53 4.34 67 TR_XM_SpammyWords4 7332 5.55 8.07 4.25 68 BAYES_99 7308 14.30 33.84 4.24 69 MIME_HTML_MOSTLY 7170 4.26 4.46 4.16 70 XMNumbers 7061 3.91 3.56 4.09 71 INVALID_MSGID 6542 2.70 0.56 3.79 72 RCVD_IN_MSPIKE_H4 6474 3.52 3.07 3.75 73 TO_MALFORMED 6424 2.49 0.09 3.72 74 BOTNET_IPINHOSTNAME 6410 5.98 10.38 3.72 75 BAYES_80 6401 5.87 10.07 3.71 76 HTML_IMAGE_RATIO_06 6353 3.46 3.04 3.68 77 BAYES_20 6311 2.76 1.02 3.66 78 MSGID_NOFQDN1 5874 2.32 0.21 3.41 79 BAYES_999 5644 10.80 25.41 3.27 80 T_REMOTE_IMAGE 5111 2.37 1.22 2.96 81 XM_Body_Dirty_Words 4883 3.58 5.05 2.83 82 T_TVD_MIME_NO_HEADERS 4826 1.87 0.06 2.80 83 XM_B_SpammyTLD 4815 3.32 4.35 2.79 84 MIME_QP_LONG_LINE 4721 3.32 4.45 2.74 85 MIME_CHARSET_FARAWAY 4568 2.09 0.99 2.65 86 RELAYCOUNTRY_META 4567 8.02 18.47 2.65 87 MIME_HTML_ONLY_MULTI 4373 2.52 2.50 2.54 88 HTML_IMAGE_RATIO_08 4355 2.47 2.36 2.53 89 CHARSET_FARAWAY_HEADER 4324 1.96 0.90 2.51 90 BAYES_95 4182 3.72 6.22 2.42 91 MAILING_LIST_MULTI 4182 2.38 2.30 2.42 92 XMStockSpam_06 3983 2.14 1.82 2.31 93 XM_PDF 3390 1.42 0.35 1.97 94 TR_XM_DKIM_Undo 3321 12.16 32.05 1.93 95 IN_HORDE_ADDRESS_BOOK 3262 1.28 0.09 1.89 96 TR_DCC_Bayes_99 3258 9.70 24.88 1.89 97 BAYES_05 3220 1.37 0.42 1.87 98 T_TooManySym_03 3202 1.27 0.13 1.86 99 FROM_EXCESS_BASE64 3159 1.90 2.02 1.83 100 XM_CamelCaseFrm001 3157 2.32 3.26 1.83 101 TM2_M_URI_OPT_OUT 3150 1.73 1.55 1.83 102 HTML_MIME_NO_HTML_TAG 3062 1.45 0.83 1.78 103 UNTRUSTED_Relay 2918 3.67 7.51 1.69 104 RCVD_IN_IADB_LISTED 2884 1.44 0.99 1.67 105 TVD_RCVD_IP 2796 1.56 1.45 1.62 106 XM_B_URI_Unicode 2750 1.72 1.95 1.59 107 TR_Symld_Words 2697 1.28 0.74 1.56 108 T_XMDrugObfuBody_14 2672 2.66 4.83 1.55 109 XMDiploma_00 2669 1.85 2.44 1.55 110 RCVD_IN_IADB_SPF 2644 1.30 0.84 1.53 111 T_XMDrugObfuBody_08 2624 2.21 3.55 1.52 112 TR_XM_UnparsRelay 2604 4.17 9.35 1.51 113 TooManyTo_002 2599 1.13 0.41 1.51 114 TR_XM_PhishingBody 2599 2.73 5.12 1.51 115 TR_XM_SpammyRelay 2574 5.77 14.09 1.49 116 LOW_PRICE 2562 1.10 0.35 1.49 117 XM_SPF_SoftFail 2547 1.70 2.15 1.48 118 TVD_SPACE_RATIO 2440 1.07 0.40 1.41 119 RCVD_IN_IADB_SENDERID 2440 1.20 0.77 1.41 120 RCVD_IN_IADB_DK 2419 1.19 0.78 1.40 121 XM_B_Investor 2387 2.43 4.46 1.38 122 XM_B_COPY_HTML 2312 1.33 1.32 1.34 123 XM_DK_Undo_01 2296 1.18 0.87 1.33 124 XMSubMetaSxObfu_03 2292 1.11 0.70 1.33 125 XM_B_Unsub2 2136 1.63 2.40 1.24 126 URI_NOVOWEL 2055 1.40 1.80 1.19 127 XM_GoogleGroups 2012 1.25 1.42 1.17 128 DKIM_INVALID 1995 3.25 7.33 1.16 129 XMBdyGiftCard01 1979 1.22 1.36 1.15 130 XMBSHREFv2 1959 0.85 0.28 1.14 131 XMGappySubj_01 1924 0.80 0.17 1.12 132 XM_SendGrid 1913 1.08 1.01 1.11 133 XMBrknScrpt_02 1865 1.32 1.78 1.08 134 XM_H_PHPMailer 1853 0.86 0.46 1.07 135 RCVD_IN_IADB_VOUCHED 1783 0.86 0.53 1.03 136 TR_XM_SpammyWords5 1769 1.95 3.76 1.03 137 XMSexyCombo_05 1756 1.81 3.36 1.02 138 URI_HEX 1735 1.06 1.16 1.01 139 XM_UB50 1688 1.44 2.32 0.98 140 BOTNET 1649 4.61 11.72 0.96 141 HTML_TAG_BALANCE_BODY 1617 0.97 1.02 0.94 142 XMGappySubj_02 1558 0.61 0.05 0.90 143 T_XMDrugObfuBody_00 1493 1.13 1.64 0.87 144 TR_XM_DK_SendGrid 1484 0.82 0.74 0.86 145 TooManyTo_003 1455 0.67 0.33 0.84 146 TR_XM_GMP_MSPIKE_UNDO2 1384 0.61 0.22 0.80 147 RELAYCOUNTRY_CA 1350 3.01 7.33 0.78 148 DKIM_ADSP_CUSTOM_MED 1344 0.77 0.76 0.78 149 T_FILL_THIS_FORM_SHORT 1324 1.62 3.26 0.77 150 RCVD_IN_IADB_OPTIN 1308 0.63 0.38 0.76 151 MSGID_FROM_MTA_HEADER 1272 0.61 0.35 0.74 152 XM_B_SpammyWords4 1256 1.29 2.39 0.73 153 XMSlimDrugH 1217 0.97 1.49 0.71 154 XMGenDplmaNmb 1200 0.83 1.09 0.70 155 SUBJ_ALL_CAPS 1184 1.31 2.52 0.69 156 DIET_1 1162 1.31 2.56 0.67 157 TooManyTo_004 1151 0.54 0.31 0.67 158 RCVD_IN_BL_SPAMCOP_NET 1133 5.96 16.26 0.66 159 XM_ProductURIs 1118 0.74 0.91 0.65 160 XM_H_Long_From02 1115 1.06 1.87 0.65 161 XMSolicitRefs_0 1092 0.59 0.51 0.63 162 T_XMHurry_00 1066 1.37 2.82 0.62 163 MPART_ALT_DIFF_COUNT 1055 0.96 1.64 0.61 164 XM_OfRef6 1038 1.58 3.47 0.60 165 HTML_FONT_FACE_BAD 1031 0.62 0.67 0.60 166 XMLngstWrd_00 1005 0.49 0.32 0.58 167 TooManyTo_005 999 0.48 0.28 0.58 168 XMSubMetaI_00 999 0.87 1.43 0.58 169 TR_MetaPhish_Combo_01 993 0.49 0.31 0.58 170 XMPhish30 992 1.42 3.07 0.58 171 TR_XM_Base64_M1 983 0.62 0.71 0.57 172 RCVD_IN_PBL 951 0.83 1.37 0.55 173 XM_URI_RBL 938 1.33 2.86 0.54 174 T_TooManySym_04 938 0.37 0.03 0.54 175 TM2_M_OBFU_COMMENT 935 0.63 0.81 0.54 176 TR_XM_SpammyWords2 926 4.45 12.06 0.54 177 PLING_QUERY 915 0.62 0.79 0.53 178 RCVD_IN_MSPIKE_BL 899 3.40 8.98 0.52 179 TR_XM_MSPIKECOMBO 895 3.39 8.98 0.52 180 FORGED_GMAIL_RCVD 895 0.54 0.58 0.52 181 HTML_IMAGE_ONLY_32 882 0.70 1.06 0.51 182 HTML_TEXT_INVISIBLE_STYLE 875 0.44 0.31 0.51 183 XMBody_95 874 0.37 0.12 0.51 184 LONGLN_LOW_CONTRAST 857 0.46 0.39 0.50 185 XMLngstWrd_01 854 0.42 0.29 0.50 186 TR_Mismatch_TLD_01 850 0.67 1.02 0.49 187 XMNoVowels 817 0.56 0.72 0.47 188 XMBody_17 807 1.30 2.91 0.47 189 HTML_IMAGE_ONLY_20 806 0.90 1.75 0.47 190 NML_ADSP_CUSTOM_MED 804 0.52 0.63 0.47 191 URI_TRY_3LD 799 0.77 1.35 0.46 192 HTML_TAG_BALANCE_CENTER 797 0.45 0.41 0.46 193 XM_B_DNDMA 796 0.61 0.90 0.46 194 XM_S_SubURI 774 0.32 0.06 0.45 195 HTML_EXTRA_CLOSE 768 0.31 0.06 0.45 196 XMSubMetaSxObfu_02 747 0.40 0.34 0.43 197 DKIM_ADSP_NXDOMAIN 744 2.06 5.23 0.43 198 TO_IN_SUBJ 736 0.31 0.09 0.43 199 URI_OPTOUT_3LD 728 0.33 0.14 0.42 200 XMHTML_After_End 691 0.44 0.53 0.40 ----------------------------------------------------------------------