Email: 286903 Autolearn: 0 AvgScore: 4.16 AvgScanTime: 1.13 sec Spam: 100882 Autolearn: 0 AvgScore: 13.85 AvgScanTime: 1.22 sec Ham: 186021 Autolearn: 0 AvgScore: -1.10 AvgScanTime: 1.08 sec Time Spent Running SA: 89.96 hours Time Spent Processing Spam: 34.08 hours Time Spent Processing Ham: 55.88 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 95804 86.08 94.97 81.25 2 DKIM_SIGNED 92542 81.56 91.73 76.05 3 XM_DK_Pass 90251 80.07 89.46 74.98 4 DKIM_VALID 89140 79.35 88.36 74.46 5 XM_B_Unicode 86221 75.13 85.47 69.53 6 T_SCC_BODY_TEXT_LINE 81818 82.69 81.10 83.55 7 RELAYCOUNTRY_US 77441 78.56 76.76 79.53 8 DCC_CHECK 73739 49.36 73.09 36.49 9 XM_B_SpammyWords 73472 53.46 72.83 42.96 10 XMListUnsubscribeExists 73368 59.72 72.73 52.67 11 DKIM_VALID_AU 64805 63.64 64.24 63.32 12 XM_DK_Undo_02 52274 23.53 51.82 8.18 13 XM_B_Unicode3 45406 43.87 45.01 43.25 14 BAYES_99 42542 19.18 42.17 6.71 15 XM_B_SpammyWords2 42404 26.69 42.03 18.36 16 TR_XM_DKIM_Undo 40483 16.27 40.13 3.34 17 LOC_TINY_FONT_1 38925 31.23 38.58 27.24 18 HTML_FONT_LOW_CONTRAST 35297 33.13 34.99 32.13 19 MIME_HTML_ONLY 34655 25.57 34.35 20.81 20 BAYES_999 34141 15.32 33.84 5.27 21 DKIM_VALID_EF 33695 32.02 33.40 31.27 22 BAYES_50 32810 47.40 32.52 55.46 23 TR_DCC_Bayes_99 30328 12.30 30.06 2.67 24 FVGT_m_MULTI_ODD 30126 28.10 29.86 27.14 25 T_KAM_HTML_FONT_INVALID 28526 22.84 28.28 19.89 26 DCC_CHECK_NEGATIVE 27132 50.62 26.89 63.48 27 RCVD_IN_MSPIKE_H2 25264 24.50 25.04 24.20 28 TR_XM_DK_Unsub 24977 19.53 24.76 16.70 29 RELAYCOUNTRY_META 23506 10.55 23.30 3.64 30 T_TM2_M_HEADER_IN_MSG 22790 22.26 22.59 22.08 31 TR_XM_SpammyRelay 19863 8.37 19.69 2.24 32 XMSubLong 19821 20.56 19.65 21.06 33 XM_Multi_Part_URI 18653 16.24 18.49 15.02 34 TR_XM_SpammyWords2 17016 6.44 16.87 0.79 35 RCVD_IN_BL_SPAMCOP_NET 15801 6.19 15.66 1.05 36 RELAYCOUNTRY_CA 15583 6.35 15.45 1.42 37 XM_B_Unsub 14974 11.42 14.84 9.56 38 TR_XM_BayesUnsub 14524 9.88 14.40 7.44 39 UNPARSEABLE_RELAY 14458 12.20 14.33 11.04 40 LOTS_OF_MONEY 13482 8.35 13.36 5.63 41 TR_XM_SPAMCOP 13356 4.93 13.24 0.43 42 XM_B_SpammyWords3 13211 7.53 13.10 4.51 43 RCVD_IN_MSPIKE_H3 12804 8.72 12.69 6.57 44 RCVD_IN_MSPIKE_WL 12804 8.72 12.69 6.57 45 BOTNET_IPINHOSTNAME 12722 8.35 12.61 6.05 46 TR_XM_SpammyWords4 11708 6.47 11.61 3.69 47 XM_Body_Dirty_Words 10632 6.51 10.54 4.33 48 XMBody_17 9626 3.93 9.54 0.89 49 BAYES_80 8915 6.12 8.84 4.65 50 HTML_IMAGE_RATIO_02 8407 6.77 8.33 5.92 51 TR_XM_UnparsRelay 8202 4.16 8.13 2.01 52 BOTNET 8109 3.59 8.04 1.17 53 XM_Evil_Numbers_Gen 8029 7.99 7.96 8.00 54 FSL_BULK_SIG 7714 5.44 7.65 4.24 55 BAYES_60 7685 9.71 7.62 10.84 56 XM_UncommonTLD01 6348 5.26 6.29 4.70 57 XMSubMetaSx_00 6319 5.29 6.26 4.76 58 LotsOfNums_01 6048 6.94 6.00 7.46 59 T_FILL_THIS_FORM_SHORT 6035 2.61 5.98 0.78 60 XMSexyCombo_05 5741 3.18 5.69 1.81 61 BAYES_95 5633 3.92 5.58 3.02 62 TR_XM_BayesRelay 5422 1.89 5.37 0.00 63 HTML_IMAGE_RATIO_04 5342 4.88 5.30 4.65 64 MPART_ALT_DIFF 5308 4.89 5.26 4.70 65 TooManyTo_001 5207 6.54 5.16 7.29 66 UNTRUSTED_Relay 5068 2.82 5.02 1.62 67 XM_H_GMP 5023 7.09 4.98 8.24 68 XM_OfRef6 4945 2.49 4.90 1.19 69 XM_H_Long_From01 4725 4.87 4.68 4.97 70 TR_XM_SpammyWords5 4621 2.52 4.58 1.40 71 XMStrtUSub 4461 5.29 4.42 5.77 72 HK_RANDOM_REPLYTO 4338 1.60 4.30 0.13 73 MIME_HTML_MOSTLY 4123 3.22 4.09 2.76 74 T_XMDrugObfuBody_14 4072 2.68 4.04 1.95 75 XM_B_Phish_Phrases 4027 3.20 3.99 2.78 76 RCVD_IN_VALIDITY_SAFE 3967 5.53 3.93 6.39 77 USER_IN_DEF_DKIM_WL 3826 11.92 3.79 16.32 78 HTML_IMAGE_RATIO_08 3823 2.57 3.79 1.90 79 TR_XM_FormFill 3783 1.33 3.75 0.01 80 TR_XM_PhishingBody 3584 2.27 3.55 1.57 81 HTML_IMAGE_RATIO_06 3581 2.80 3.55 2.39 82 XM_B_Investor 3508 2.07 3.48 1.31 83 MIME_HTML_ONLY_MULTI 3491 2.80 3.46 2.45 84 XM_SPF_SoftFail 3458 2.73 3.43 2.35 85 T_XMDrugObfuBody_08 3454 2.31 3.42 1.71 86 DKIM_INVALID 3402 2.21 3.37 1.58 87 FONT_INVIS_LONG_LINE 3351 1.21 3.32 0.06 88 RCVD_IN_VALIDITY_CERTIFIED 3231 4.62 3.20 5.39 89 XM_B_SpammyTLD 3190 2.89 3.16 2.74 90 SpammyFromTLD_01 3167 1.46 3.14 0.55 91 XM_CamelCaseFrm001 3125 2.67 3.10 2.44 92 XMNumbers 3090 3.16 3.06 3.21 93 XM_URI_RBL 3000 1.15 2.97 0.16 94 TM2_M_URI_OPT_OUT 2904 2.28 2.88 1.96 95 SUBJ_ALL_CAPS 2903 1.64 2.88 0.97 96 XMBdyGiftCard01 2757 1.56 2.73 0.92 97 TM2_M_VERY_LONG_WORD 2747 1.77 2.72 1.25 98 XM_B_SpammyWords4 2598 1.40 2.58 0.76 99 TR_XM_PHPForged 2494 1.08 2.47 0.33 100 TR_XM_PHPDW 2479 1.07 2.46 0.32 101 TR_XM_FormFill2 2432 1.06 2.41 0.33 102 TR_LOTS_OF_MONEY3 2430 1.03 2.41 0.28 103 XM_H_PHPOS 2409 1.04 2.39 0.31 104 FROM_EXCESS_BASE64 2350 2.92 2.33 3.23 105 RELAYCOUNTRY_AU 2341 1.11 2.32 0.45 106 XMDiploma_00 2332 1.75 2.31 1.44 107 XM_UB50 2297 1.35 2.28 0.85 108 XM_B_Unsub2 2260 1.68 2.24 1.37 109 AC_BR_BONANZA 2231 0.93 2.21 0.23 110 TR_XM_NoHeaderRelay 2160 0.82 2.14 0.10 111 T_REMOTE_IMAGE 2111 3.16 2.09 3.75 112 TR_Mismatch_TLD_02 2093 0.84 2.07 0.17 113 MIME_QP_LONG_LINE 2074 2.97 2.06 3.46 114 T_XMDrugObfuBody_10 2070 0.74 2.05 0.03 115 XM_HighProb1 2023 0.71 2.01 0.00 116 HTML_MIME_NO_HTML_TAG 1968 1.57 1.95 1.37 117 XM_DIRTYINTL 1868 0.76 1.85 0.17 118 T_XMHurry_00 1849 0.88 1.83 0.37 119 BOTNET_NORDNS 1846 0.65 1.83 0.01 120 XM_B_COPY_HTML 1806 1.21 1.79 0.89 121 T_TooManySym_01 1794 5.15 1.78 6.97 122 HTML_TAG_BALANCE_BODY 1763 1.06 1.75 0.68 123 XMReplyNow 1762 0.81 1.75 0.30 124 TR_Caps_n_Bayes_99 1703 0.61 1.69 0.03 125 XM_H_Undi_Recip 1691 0.69 1.68 0.15 126 XMStockSpam_06 1656 1.21 1.64 0.98 127 XM_DK_Undo_01 1641 1.75 1.63 1.81 128 XMSexyCombo_01 1479 0.72 1.47 0.31 129 XMPhish30 1448 0.94 1.44 0.66 130 MAILING_LIST_MULTI 1445 1.97 1.43 2.25 131 SpammyFromTLD_02 1432 0.65 1.42 0.24 132 XM_H_PHPMailer 1413 1.01 1.40 0.80 133 KHOP_HELO_FCRDNS 1394 0.82 1.38 0.51 134 URI_HEX 1390 1.10 1.38 0.95 135 TR_XM_Base64_M1 1375 1.18 1.36 1.08 136 URI_TRY_3LD 1350 1.13 1.34 1.01 137 TR_XM_INV_DKIM 1323 0.50 1.31 0.06 138 URIBL_DBL_SPAM 1322 0.47 1.31 0.01 139 BAYES_40 1313 3.42 1.30 4.57 140 TR_Symld_Words 1311 1.25 1.30 1.22 141 XM_SendGrid 1305 1.22 1.29 1.18 142 HTTPS_HTTP_MISMATCH 1292 0.84 1.28 0.60 143 TR_XM_Undi_Recip5 1278 0.45 1.27 0.01 144 TR_XM_Undi_Recip11 1262 0.46 1.25 0.02 145 FILL_THIS_FORM 1261 0.82 1.25 0.59 146 TR_XM_Undi_RecipCombo2 1244 0.43 1.23 0.00 147 ALL_TRUSTED 1225 11.50 1.21 17.08 148 MILLION_USD 1209 0.43 1.20 0.01 149 MPART_ALT_DIFF_COUNT 1208 1.02 1.20 0.92 150 URI_NOVOWEL 1207 1.29 1.20 1.35 151 RCVD_IN_PSBL 1184 0.73 1.17 0.49 152 RDNS_DYNAMIC 1180 0.66 1.17 0.39 153 FILL_THIS_FORM_LONG 1178 0.71 1.17 0.46 154 T_XMDrugObfuBody_00 1171 0.71 1.16 0.47 155 ANY_BOUNCE_MESSAGE 1162 4.07 1.15 5.65 156 BOUNCE_MESSAGE 1161 4.06 1.15 5.64 157 XM_B_REG_HTML 1157 0.68 1.15 0.43 158 UNDISC_MONEY 1156 0.41 1.15 0.02 159 SHOPIFY_IMG_NOT_RCVD_SFY 1112 0.58 1.10 0.30 160 MONEY_FORM 1093 0.39 1.08 0.01 161 HTML_IMAGE_ONLY_20 1091 0.66 1.08 0.43 162 SCC_BODY_URI_ONLY 1071 2.79 1.06 3.73 163 RCVD_IN_IADB_LISTED 1033 2.41 1.02 3.17 164 XMSubMetaI_00 1020 0.75 1.01 0.61 165 RCVD_IN_VALIDITY_RPBL 1010 0.38 1.00 0.04 166 DIET_1 1003 0.60 0.99 0.39 167 TR_XM_Undi_Recip9 999 0.35 0.99 0.00 168 TR_XM_InvalidRelay 992 0.36 0.98 0.02 169 TVD_RCVD_IP 991 2.09 0.98 2.68 170 TR_XM_Undi_RecipCombo3 986 0.34 0.98 0.00 171 URG_BIZ 986 0.36 0.98 0.03 172 XM_RXBody 982 0.51 0.97 0.26 173 XMBrknScrpt_02 982 0.60 0.97 0.40 174 XM_UB99 980 0.35 0.97 0.01 175 TR_XM_DK_SendGrid 967 0.90 0.96 0.86 176 RCVD_IN_IADB_SPF 939 2.19 0.93 2.87 177 TR_Mismatch_TLD_01 933 0.55 0.92 0.34 178 T_MONEY_PERCENT 925 0.47 0.92 0.22 179 TR_LOTS_OF_MONEY2 925 0.47 0.92 0.22 180 PDS_OTHER_BAD_TLD 920 0.40 0.91 0.12 181 BAYES_20 919 2.19 0.91 2.88 182 DEAR_BENEFICIARY 912 0.32 0.90 0.01 183 MONEY_ATM_CARD 910 0.32 0.90 0.00 184 XM_Combo_Sbj 896 0.45 0.89 0.21 185 RCVD_IN_IADB_DK 895 1.97 0.89 2.56 186 RCVD_IN_RP_SAFE 894 1.09 0.89 1.21 187 XM_H_PHPOS_M 885 0.35 0.88 0.06 188 RCVD_IN_IADB_SENDERID 883 2.01 0.88 2.63 189 TM2_M_OBFU_COMMENT 882 0.54 0.87 0.36 190 HOSTED_IMG_MULTI_PUB_01 880 0.32 0.87 0.02 191 TooManyTo_002 866 1.72 0.86 2.18 192 HELO_DYNAMIC_SPLIT_IP 852 0.30 0.84 0.01 193 AC_HTML_NONSENSE_TAGS 851 0.31 0.84 0.02 194 XMGenDplmaNmb 845 0.65 0.84 0.55 195 XMPhish14 836 0.51 0.83 0.33 196 XM_H_Long_From02 819 1.16 0.81 1.35 197 TR_XM_Undi_Recip4 807 0.28 0.80 0.00 198 TooManyTo_003 805 0.85 0.80 0.88 199 XM_ProductURIs 796 0.70 0.79 0.65 200 XMHTMLBadTable_001 785 0.44 0.78 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 155420 82.69 81.10 83.55 2 HTML_MESSAGE 151148 86.08 94.97 81.25 3 RELAYCOUNTRY_US 147946 78.56 76.76 79.53 4 DKIM_SIGNED 141462 81.56 91.73 76.05 5 XM_DK_Pass 139473 80.07 89.46 74.98 6 DKIM_VALID 138515 79.35 88.36 74.46 7 XM_B_Unicode 129340 75.13 85.47 69.53 8 DCC_CHECK_NEGATIVE 118091 50.62 26.89 63.48 9 DKIM_VALID_AU 117789 63.64 64.24 63.32 10 BAYES_50 103174 47.40 32.52 55.46 11 XMListUnsubscribeExists 97981 59.72 72.73 52.67 12 XM_B_Unicode3 80454 43.87 45.01 43.25 13 XM_B_SpammyWords 79915 53.46 72.83 42.96 14 DCC_CHECK 67873 49.36 73.09 36.49 15 HTML_FONT_LOW_CONTRAST 59762 33.13 34.99 32.13 16 DKIM_VALID_EF 58175 32.02 33.40 31.27 17 LOC_TINY_FONT_1 50676 31.23 38.58 27.24 18 FVGT_m_MULTI_ODD 50491 28.10 29.86 27.14 19 RCVD_IN_MSPIKE_H2 45021 24.50 25.04 24.20 20 T_TM2_M_HEADER_IN_MSG 41067 22.26 22.59 22.08 21 XMSubLong 39175 20.56 19.65 21.06 22 MIME_HTML_ONLY 38706 25.57 34.35 20.81 23 T_KAM_HTML_FONT_INVALID 36994 22.84 28.28 19.89 24 XM_B_SpammyWords2 34161 26.69 42.03 18.36 25 ALL_TRUSTED 31768 11.50 1.21 17.08 26 TR_XM_DK_Unsub 31059 19.53 24.76 16.70 27 USER_IN_DEF_DKIM_WL 30367 11.92 3.79 16.32 28 XM_Multi_Part_URI 27946 16.24 18.49 15.02 29 UNPARSEABLE_RELAY 20546 12.20 14.33 11.04 30 XM_DKIMWhitelistDomains 20333 7.10 0.04 10.93 31 BAYES_60 20172 9.71 7.62 10.84 32 XM_B_Unsub 17789 11.42 14.84 9.56 33 BAYES_00 16520 5.95 0.56 8.88 34 XM_H_GMP 15321 7.09 4.98 8.24 35 XM_DK_Undo_02 15222 23.53 51.82 8.18 36 XM_Evil_Numbers_Gen 14883 7.99 7.96 8.00 37 TR_XM_DK_Bayes 13942 5.00 0.40 7.49 38 LotsOfNums_01 13871 6.94 6.00 7.46 39 TR_XM_DK_Bayes1 13847 4.97 0.40 7.44 40 TR_XM_BayesUnsub 13835 9.88 14.40 7.44 41 TooManyTo_001 13558 6.54 5.16 7.29 42 T_TooManySym_01 12971 5.15 1.78 6.97 43 BAYES_99 12491 19.18 42.17 6.71 44 RCVD_IN_MSPIKE_WL 12223 8.72 12.69 6.57 45 RCVD_IN_MSPIKE_H3 12223 8.72 12.69 6.57 46 TR_XM_DK_Bayes2 12213 4.35 0.27 6.57 47 RCVD_IN_VALIDITY_SAFE 11890 5.53 3.93 6.39 48 BOTNET_IPINHOSTNAME 11247 8.35 12.61 6.05 49 HTML_IMAGE_RATIO_02 11020 6.77 8.33 5.92 50 XMStrtUSub 10728 5.29 4.42 5.77 51 IN_ZIMBRA_NJ_WHITELIST 10683 3.74 0.06 5.74 52 ANY_BOUNCE_MESSAGE 10501 4.07 1.15 5.65 53 BOUNCE_MESSAGE 10500 4.06 1.15 5.64 54 LOTS_OF_MONEY 10477 8.35 13.36 5.63 55 RCVD_IN_VALIDITY_CERTIFIED 10018 4.62 3.20 5.39 56 BAYES_999 9801 15.32 33.84 5.27 57 XM_H_Long_From01 9236 4.87 4.68 4.97 58 XMSubMetaSx_00 8847 5.29 6.26 4.76 59 XM_UncommonTLD01 8741 5.26 6.29 4.70 60 MPART_ALT_DIFF 8734 4.89 5.26 4.70 61 HTML_IMAGE_RATIO_04 8645 4.88 5.30 4.65 62 BAYES_80 8644 6.12 8.84 4.65 63 BAYES_40 8502 3.42 1.30 4.57 64 XM_B_SpammyWords3 8389 7.53 13.10 4.51 65 XM_Body_Dirty_Words 8054 6.51 10.54 4.33 66 FSL_BULK_SIG 7884 5.44 7.65 4.24 67 INVALID_MSGID 7228 2.58 0.17 3.89 68 T_REMOTE_IMAGE 6967 3.16 2.09 3.75 69 T_TooManySym_02 6953 2.62 0.55 3.74 70 SCC_BODY_URI_ONLY 6935 2.79 1.06 3.73 71 TR_XM_SpammyWords4 6859 6.47 11.61 3.69 72 RELAYCOUNTRY_META 6775 10.55 23.30 3.64 73 MIME_QP_LONG_LINE 6439 2.97 2.06 3.46 74 TO_MALFORMED 6414 2.24 0.00 3.45 75 TR_XM_DKIM_Undo 6210 16.27 40.13 3.34 76 FROM_EXCESS_BASE64 6014 2.92 2.33 3.23 77 XMNumbers 5971 3.16 3.06 3.21 78 RCVD_IN_IADB_LISTED 5894 2.41 1.02 3.17 79 BAYES_95 5627 3.92 5.58 3.02 80 BAYES_05 5528 2.10 0.49 2.97 81 BAYES_20 5360 2.19 0.91 2.88 82 RCVD_IN_IADB_SPF 5332 2.19 0.93 2.87 83 XM_B_Phish_Phrases 5164 3.20 3.99 2.78 84 MIME_HTML_MOSTLY 5125 3.22 4.09 2.76 85 XM_B_SpammyTLD 5104 2.89 3.16 2.74 86 TVD_RCVD_IP 4992 2.09 0.98 2.68 87 TR_DCC_Bayes_99 4964 12.30 30.06 2.67 88 RCVD_IN_IADB_SENDERID 4897 2.01 0.88 2.63 89 RCVD_IN_IADB_DK 4768 1.97 0.89 2.56 90 XM_PDF 4632 1.68 0.19 2.49 91 MIME_HTML_ONLY_MULTI 4549 2.80 3.46 2.45 92 XM_CamelCaseFrm001 4542 2.67 3.10 2.44 93 HTML_IMAGE_RATIO_06 4445 2.80 3.55 2.39 94 XM_SPF_SoftFail 4380 2.73 3.43 2.35 95 XMBSHREFv2 4203 1.57 0.29 2.26 96 MAILING_LIST_MULTI 4194 1.97 1.43 2.25 97 TR_XM_SpammyRelay 4160 8.37 19.69 2.24 98 TooManyTo_002 4064 1.72 0.86 2.18 99 TR_XM_UnparsRelay 3743 4.16 8.13 2.01 100 RCVD_IN_IADB_VOUCHED 3726 1.44 0.40 2.00 101 TM2_M_URI_OPT_OUT 3642 2.28 2.88 1.96 102 T_XMDrugObfuBody_14 3622 2.68 4.04 1.95 103 TVD_SPACE_RATIO 3577 1.28 0.10 1.92 104 HTML_IMAGE_RATIO_08 3540 2.57 3.79 1.90 105 IN_HORDE_ADDRESS_BOOK 3506 1.24 0.06 1.88 106 XMSexyCombo_05 3374 3.18 5.69 1.81 107 XM_DK_Undo_01 3366 1.75 1.63 1.81 108 XMGappySubj_01 3208 1.17 0.16 1.72 109 T_XMDrugObfuBody_08 3184 2.31 3.42 1.71 110 XMBody_95 3139 1.15 0.15 1.69 111 UNTRUSTED_Relay 3014 2.82 5.02 1.62 112 DKIM_INVALID 2947 2.21 3.37 1.58 113 TR_XM_PhishingBody 2925 2.27 3.55 1.57 114 XMGappySubj_02 2792 0.99 0.06 1.50 115 XMDiploma_00 2680 1.75 2.31 1.44 116 RELAYCOUNTRY_CA 2637 6.35 15.45 1.42 117 TR_XM_SpammyWords5 2606 2.52 4.58 1.40 118 XM_B_Unsub2 2550 1.68 2.24 1.37 119 HTML_MIME_NO_HTML_TAG 2544 1.57 1.95 1.37 120 RCVD_IN_IADB_OPTIN 2513 0.98 0.30 1.35 121 XM_H_Long_From02 2508 1.16 0.81 1.35 122 URI_NOVOWEL 2502 1.29 1.20 1.35 123 XM_B_Investor 2433 2.07 3.48 1.31 124 MSGID_NOFQDN1 2396 0.84 0.02 1.29 125 TM2_M_VERY_LONG_WORD 2332 1.77 2.72 1.25 126 XM_GoogleGroups 2289 0.94 0.39 1.23 127 TR_Symld_Words 2272 1.25 1.30 1.22 128 RCVD_IN_RP_SAFE 2245 1.09 0.89 1.21 129 T_TooManySym_03 2235 0.86 0.23 1.20 130 XM_OfRef6 2213 2.49 4.90 1.19 131 XM_SendGrid 2199 1.22 1.29 1.18 132 BOTNET 2184 3.59 8.04 1.17 133 USER_IN_WELCOMELIST 2092 0.73 0.00 1.12 134 USER_IN_WHITELIST 2092 0.73 0.00 1.12 135 TR_XM_Base64_M1 2002 1.18 1.36 1.08 136 RCVD_IN_BL_SPAMCOP_NET 1960 6.19 15.66 1.05 137 RCVD_IN_RP_CERTIFIED 1932 0.93 0.73 1.04 138 XM_B_FormFill 1932 0.69 0.04 1.04 139 URI_TRY_3LD 1882 1.13 1.34 1.01 140 XMStockSpam_06 1822 1.21 1.64 0.98 141 SUBJ_ALL_CAPS 1798 1.64 2.88 0.97 142 URI_HEX 1771 1.10 1.38 0.95 143 MPART_ALT_DIFF_COUNT 1716 1.02 1.20 0.92 144 XMBdyGiftCard01 1708 1.56 2.73 0.92 145 SUBJ_DOLLARS 1707 0.83 0.67 0.92 146 XMBody_17 1656 3.93 9.54 0.89 147 XM_B_COPY_HTML 1653 1.21 1.79 0.89 148 TooManyTo_003 1644 0.85 0.80 0.88 149 TR_XM_DK_SendGrid 1602 0.90 0.96 0.86 150 XM_UB50 1572 1.35 2.28 0.85 151 DKIM_ADSP_CUSTOM_MED 1491 0.78 0.73 0.80 152 XM_H_PHPMailer 1488 1.01 1.40 0.80 153 TR_XM_SpammyWords2 1466 6.44 16.87 0.79 154 T_FILL_THIS_FORM_SHORT 1459 2.61 5.98 0.78 155 XM_B_SpammyWords4 1422 1.40 2.58 0.76 156 TooManyTo_004 1302 0.72 0.77 0.70 157 XMSubMetaSxObfu_02 1292 0.62 0.47 0.69 158 HTML_TAG_BALANCE_BODY 1268 1.06 1.75 0.68 159 XMPhish30 1237 0.94 1.44 0.66 160 XM_ProductURIs 1215 0.70 0.79 0.65 161 TR_MetaPhish_Combo_01 1212 0.69 0.77 0.65 162 XMLngstWrd_00 1165 0.64 0.68 0.63 163 XMNoVowels 1157 0.57 0.47 0.62 164 TooManyTo_005 1152 0.66 0.74 0.62 165 XMSubMetaI_00 1129 0.75 1.01 0.61 166 HTTPS_HTTP_MISMATCH 1115 0.84 1.28 0.60 167 FILL_THIS_FORM 1094 0.82 1.25 0.59 168 XM_H_Trusted_IP 1090 0.38 0.00 0.59 169 XMSubNoVowel 1084 0.48 0.29 0.58 170 SpammyFromTLD_01 1028 1.46 3.14 0.55 171 XMGenDplmaNmb 1023 0.65 0.84 0.55 172 PLING_QUERY 1013 0.60 0.70 0.54 173 NML_ADSP_CUSTOM_MED 964 0.57 0.67 0.52 174 KHOP_HELO_FCRDNS 947 0.82 1.38 0.51 175 HTML_FONT_FACE_BAD 938 0.54 0.62 0.50 176 HELO_NODOT 926 0.59 0.77 0.50 177 HELO_NO_DOMAIN 925 0.59 0.77 0.50 178 RCVD_IN_PSBL 912 0.73 1.17 0.49 179 T_XMDrugObfuBody_00 872 0.71 1.16 0.47 180 FORGED_GMAIL_RCVD 855 0.53 0.66 0.46 181 FILL_THIS_FORM_LONG 851 0.71 1.17 0.46 182 T_TooManySym_04 848 0.35 0.16 0.46 183 RELAYCOUNTRY_AU 839 1.11 2.32 0.45 184 XM_B_DNDMA 823 0.47 0.51 0.44 185 HTML_IMAGE_ONLY_20 797 0.66 1.08 0.43 186 TR_XM_SPAMCOP 795 4.93 13.24 0.43 187 XM_B_REG_HTML 794 0.68 1.15 0.43 188 XM_ShortIntro_01 791 0.45 0.49 0.43 189 XMHTML_After_End 787 0.53 0.71 0.42 190 T_OBFU_PDF_ATTACH 778 0.29 0.04 0.42 191 XM_S_SubURI 771 0.29 0.05 0.41 192 XMBrknScrpt_02 753 0.60 0.97 0.40 193 CTE_8BIT_MISMATCH 737 0.28 0.05 0.40 194 RDNS_DYNAMIC 724 0.66 1.17 0.39 195 DKIM_ADSP_NXDOMAIN 722 0.45 0.56 0.39 196 DIET_1 721 0.60 0.99 0.39 197 DATE_IN_PAST_06_12 720 0.32 0.21 0.39 198 LOW_PRICE 718 0.37 0.34 0.39 199 XMCapTrack 708 0.35 0.29 0.38 200 RCVD_IN_IADB_OPTIN_GT50 694 0.27 0.09 0.37 ----------------------------------------------------------------------