Email: 287291 Autolearn: 0 AvgScore: 4.46 AvgScanTime: 1.15 sec Spam: 98776 Autolearn: 0 AvgScore: 14.61 AvgScanTime: 1.18 sec Ham: 188515 Autolearn: 0 AvgScore: -0.86 AvgScanTime: 1.14 sec Time Spent Running SA: 91.88 hours Time Spent Processing Spam: 32.40 hours Time Spent Processing Ham: 59.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 93680 86.20 94.84 81.67 2 DKIM_SIGNED 87027 79.23 88.11 74.58 3 XM_B_Unicode 84173 75.90 85.22 71.02 4 XM_DK_Pass 83679 77.38 84.72 73.53 5 DKIM_VALID 82639 76.69 83.66 73.03 6 T_SCC_BODY_TEXT_LINE 80189 82.64 81.18 83.40 7 DCC_CHECK 74619 51.58 75.54 39.03 8 RELAYCOUNTRY_US 73557 76.19 74.47 77.09 9 XM_B_SpammyWords 70432 54.19 71.30 45.22 10 XMListUnsubscribeExists 68476 59.06 69.32 53.68 11 DKIM_VALID_AU 60672 62.10 61.42 62.46 12 XM_DK_Undo_02 48778 21.62 49.38 7.07 13 XM_B_Unicode3 45118 46.65 45.68 47.15 14 BAYES_99 40650 17.95 41.15 5.79 15 XM_B_SpammyWords2 39166 28.28 39.65 22.32 16 TR_XM_DKIM_Undo 38131 15.13 38.60 2.84 17 LOC_TINY_FONT_1 36449 31.47 36.90 28.63 18 MIME_HTML_ONLY 35510 27.55 35.95 23.15 19 HTML_FONT_LOW_CONTRAST 33498 32.08 33.91 31.12 20 BAYES_999 32758 14.36 33.16 4.50 21 BAYES_50 32469 47.51 32.87 55.18 22 DKIM_VALID_EF 31255 29.82 31.64 28.86 23 TR_DCC_Bayes_99 30583 12.13 30.96 2.26 24 FVGT_m_MULTI_ODD 28359 27.54 28.71 26.92 25 RELAYCOUNTRY_META 26450 11.72 26.78 3.83 26 RCVD_IN_MSPIKE_H2 26111 24.68 26.43 23.77 27 T_KAM_HTML_FONT_INVALID 25101 21.81 25.41 19.93 28 DCC_CHECK_NEGATIVE 24138 48.39 24.44 60.94 29 TR_XM_DK_Unsub 23809 18.42 24.10 15.45 30 TR_XM_SpammyRelay 20751 8.47 21.01 1.90 31 T_TM2_M_HEADER_IN_MSG 19655 20.31 19.90 20.52 32 XMSubLong 19011 20.58 19.25 21.28 33 XM_Multi_Part_URI 17918 16.95 18.14 16.32 34 RCVD_IN_BL_SPAMCOP_NET 17719 6.71 17.94 0.82 35 XM_B_Unsub 15488 12.15 15.68 10.29 36 TR_XM_SpammyWords2 15278 5.66 15.47 0.53 37 TR_XM_SPAMCOP 15142 5.46 15.33 0.28 38 RELAYCOUNTRY_CA 15090 6.13 15.28 1.34 39 TR_XM_BayesUnsub 15086 11.15 15.27 9.00 40 XM_B_SpammyWords3 13222 7.81 13.39 4.88 41 UNPARSEABLE_RELAY 12989 11.28 13.15 10.30 42 BOTNET_IPINHOSTNAME 12747 8.36 12.90 5.98 43 RCVD_IN_MSPIKE_H3 12413 8.43 12.57 6.27 44 RCVD_IN_MSPIKE_WL 12413 8.43 12.57 6.27 45 FSL_BULK_SIG 12220 6.44 12.37 3.33 46 BOTNET 11494 4.82 11.64 1.25 47 XM_Body_Dirty_Words 10351 6.43 10.48 4.31 48 HTML_IMAGE_RATIO_02 9686 7.62 9.81 6.47 49 LOTS_OF_MONEY 9677 6.56 9.80 4.87 50 BAYES_80 9300 7.76 9.42 6.89 51 XMSubMetaSx_00 8306 5.94 8.41 4.65 52 BAYES_60 7756 9.97 7.85 11.08 53 TR_XM_SpammyWords4 7551 4.81 7.64 3.33 54 TR_XM_UnparsRelay 7462 3.54 7.55 1.44 55 XM_Evil_Numbers_Gen 7369 8.32 7.46 8.77 56 XMSexyCombo_05 7226 4.03 7.32 2.31 57 UNTRUSTED_Relay 7022 3.74 7.11 1.98 58 XM_UncommonTLD01 6446 5.31 6.53 4.68 59 XMBody_17 6307 2.52 6.39 0.50 60 MPART_ALT_DIFF 6100 4.81 6.18 4.09 61 TooManyTo_001 5984 6.67 6.06 6.99 62 HTML_IMAGE_RATIO_04 5898 5.76 5.97 5.64 63 HK_RANDOM_REPLYTO 5656 2.05 5.73 0.12 64 BAYES_95 5627 3.94 5.70 3.01 65 XMStrtUSub 5461 6.06 5.53 6.34 66 T_FILL_THIS_FORM_SHORT 5459 2.21 5.53 0.48 67 TR_XM_BayesRelay 5421 1.89 5.49 0.00 68 LotsOfNums_01 5040 6.68 5.10 7.51 69 XM_H_GMP 4879 6.78 4.94 7.74 70 MIME_HTML_MOSTLY 4637 3.70 4.69 3.19 71 BOTNET_NORDNS 4512 1.58 4.57 0.01 72 DKIM_INVALID 4388 2.54 4.44 1.55 73 TR_XM_SpammyWords5 4278 2.47 4.33 1.50 74 XM_H_Long_From01 4275 4.56 4.33 4.68 75 RCVD_IN_VALIDITY_SAFE 4150 6.43 4.20 7.60 76 XMNumbers 4139 3.70 4.19 3.45 77 XM_UB50 4054 2.20 4.10 1.21 78 FONT_INVIS_LONG_LINE 4029 1.47 4.08 0.11 79 TR_XM_PhishingBody 3958 3.06 4.01 2.56 80 T_XMDrugObfuBody_14 3859 2.45 3.91 1.68 81 TR_XM_NoHeaderRelay 3684 1.35 3.73 0.11 82 XM_SPF_SoftFail 3653 2.66 3.70 2.12 83 HTML_IMAGE_RATIO_06 3545 3.28 3.59 3.12 84 HTML_IMAGE_RATIO_08 3515 2.43 3.56 1.85 85 XM_B_Phish_Phrases 3508 2.80 3.55 2.41 86 XM_OfRef6 3504 1.90 3.55 1.03 87 T_XMDrugObfuBody_08 3477 2.12 3.52 1.38 88 T_REMOTE_IMAGE 3445 3.09 3.49 2.88 89 TM2_M_URI_OPT_OUT 3443 4.43 3.49 4.92 90 RCVD_IN_VALIDITY_CERTIFIED 3424 5.65 3.47 6.79 91 TR_XM_FormFill 3411 1.19 3.45 0.01 92 MIME_HTML_ONLY_MULTI 3376 2.57 3.42 2.13 93 XM_B_Investor 3360 2.19 3.40 1.55 94 HTML_MIME_NO_HTML_TAG 3336 2.09 3.38 1.42 95 SpammyFromTLD_01 3297 1.47 3.34 0.49 96 XM_URI_RBL 3242 1.27 3.28 0.21 97 XM_CamelCaseFrm001 3230 2.67 3.27 2.35 98 TM2_M_VERY_LONG_WORD 3061 1.90 3.10 1.27 99 USER_IN_DEF_DKIM_WL 3028 12.49 3.07 17.43 100 XM_B_SpammyTLD 2900 2.71 2.94 2.59 101 XMSexyCombo_01 2760 1.12 2.79 0.24 102 RCVD_IN_PSBL 2700 1.18 2.73 0.37 103 AC_BR_BONANZA 2698 1.07 2.73 0.20 104 TR_Mismatch_TLD_02 2479 0.95 2.51 0.14 105 TR_XM_PHPDW 2456 0.98 2.49 0.20 106 TR_LOTS_OF_MONEY3 2456 1.05 2.49 0.30 107 TR_XM_PHPForged 2412 0.98 2.44 0.21 108 TR_XM_FormFill2 2355 0.95 2.38 0.20 109 XM_H_PHPOS 2344 0.94 2.37 0.18 110 FROM_EXCESS_BASE64 2321 2.87 2.35 3.14 111 XMDiploma_00 2286 1.80 2.31 1.53 112 XM_DIRTYINTL 2239 0.85 2.27 0.11 113 SUBJ_ALL_CAPS 2231 1.28 2.26 0.77 114 XMStockSpam_06 2211 1.84 2.24 1.63 115 XMBdyGiftCard01 2162 1.66 2.19 1.39 116 T_XMHurry_00 2148 1.14 2.17 0.60 117 HTML_TAG_BALANCE_BODY 2142 1.02 2.17 0.42 118 HTML_IMAGE_ONLY_20 2134 1.01 2.16 0.41 119 FROM_MISSP_REPLYTO 2102 0.73 2.13 0.00 120 T_TooManySym_01 2094 4.95 2.12 6.43 121 MIME_QP_LONG_LINE 2072 2.98 2.10 3.44 122 XM_H_Undi_Recip 2036 0.81 2.06 0.15 123 RELAYCOUNTRY_AU 1982 0.97 2.01 0.43 124 XMSexyCombo_04 1927 0.70 1.95 0.05 125 XM_HighProb1 1875 0.66 1.90 0.01 126 TR_XM_INV_DKIM 1869 0.70 1.89 0.07 127 XMLongAddy 1862 0.70 1.89 0.08 128 URI_HEX 1841 1.23 1.86 0.89 129 XM_BadFromFormat 1794 0.68 1.82 0.08 130 RCVD_IN_VALIDITY_RPBL 1765 0.64 1.79 0.03 131 XM_B_SpammyWords4 1756 1.21 1.78 0.91 132 BODY_ENHANCEMENT 1741 0.77 1.76 0.24 133 T_XMDrugObfuBody_10 1716 0.62 1.74 0.04 134 RELAYCOUNTRY_RO 1693 0.60 1.71 0.01 135 XM_B_Unsub2 1660 1.25 1.68 1.02 136 XM_H_Long_From03 1642 0.60 1.66 0.05 137 XMPhish30 1613 1.59 1.63 1.56 138 KHOP_HELO_FCRDNS 1612 0.90 1.63 0.52 139 HDRS_MISSP 1597 0.56 1.62 0.01 140 XM_B_DynamicLink 1590 0.63 1.61 0.12 141 BODY_ENHANCEMENT2 1585 0.56 1.60 0.01 142 HTML_SHORT_LINK_IMG_3 1575 0.57 1.59 0.03 143 DIET_1 1570 0.71 1.59 0.25 144 URI_TRY_3LD 1504 1.16 1.52 0.97 145 DKIM_ADSP_NXDOMAIN 1472 0.77 1.49 0.40 146 XMReplyNow 1437 0.64 1.45 0.22 147 MAILING_LIST_MULTI 1436 2.18 1.45 2.56 148 XM_SendGrid 1411 1.35 1.43 1.31 149 XM_H_Long_From02 1379 1.21 1.40 1.12 150 SpammyFromTLD_02 1350 0.58 1.37 0.17 151 HOSTED_IMG_DIRECT_MX 1292 0.45 1.31 0.00 152 LOADSA_MONEY_COMBO 1290 0.47 1.31 0.02 153 XM_H_PHPMailer 1282 0.91 1.30 0.70 154 XM_RXBody 1269 0.75 1.28 0.48 155 TR_XM_Undi_RecipCombo2 1264 0.44 1.28 0.00 156 TR_XM_Undi_Recip5 1262 0.45 1.28 0.01 157 TR_XM_InvalidRelay 1257 0.45 1.27 0.02 158 HTML_FONT_SIZE_LARGE 1228 0.45 1.24 0.04 159 XFER_LOTSA_MONEY 1196 0.42 1.21 0.00 160 TR_XM_Undi_Recip2 1169 0.42 1.18 0.02 161 XMSubMetaSxObfu_03 1163 0.67 1.18 0.41 162 URG_BIZ 1157 0.41 1.17 0.01 163 BAYES_40 1146 3.09 1.16 4.11 164 XM_DK_Undo_01 1140 1.50 1.15 1.69 165 THIS_AD 1118 0.51 1.13 0.19 166 TooManyTo_002 1116 1.56 1.13 1.79 167 RELAYCOUNTRY_GB 1115 0.58 1.13 0.29 168 ALL_TRUSTED 1098 13.00 1.11 19.23 169 T_XMDrugObfuBody_00 1098 0.64 1.11 0.40 170 UNDISC_MONEY 1098 0.39 1.11 0.01 171 XMPhish14 1082 0.61 1.10 0.36 172 TooManyTo_003 1076 0.99 1.09 0.93 173 SHOPIFY_IMG_NOT_RCVD_SFY 1074 0.57 1.09 0.30 174 ADVANCE_FEE_5_NEW_MONEY 1067 0.37 1.08 0.00 175 XMLngstWrd_00 1062 0.74 1.08 0.56 176 TooManyTo_004 1054 0.87 1.07 0.77 177 RCVD_IN_RP_SAFE 1048 1.29 1.06 1.42 178 BOUNCE_MESSAGE 1042 4.10 1.05 5.69 179 ANY_BOUNCE_MESSAGE 1042 4.10 1.05 5.69 180 TR_Mismatch_TLD_01 1038 0.58 1.05 0.34 181 TR_XM_Undi_Recip6 1036 0.36 1.05 0.00 182 HTTPS_HTTP_MISMATCH 1032 0.64 1.04 0.43 183 MONEY_FRAUD_8 1026 0.36 1.04 0.00 184 TooManyTo_005 1013 0.79 1.03 0.66 185 TR_XM_Base64_L1 1009 0.50 1.02 0.23 186 URIBL_DBL_SPAM 989 0.35 1.00 0.01 187 RELAYCOUNTRY_FR 966 0.50 0.98 0.25 188 SCC_BODY_URI_ONLY 965 2.79 0.98 3.74 189 XM_UB99 961 0.34 0.97 0.00 190 RELAYCOUNTRY_CN 960 0.38 0.97 0.07 191 TR_XM_Undi_Recip4 948 0.33 0.96 0.00 192 TR_XM_Base64_M1 944 0.87 0.96 0.82 193 BAYES_20 942 2.21 0.95 2.87 194 TR_Caps_n_Bayes_99 931 0.33 0.94 0.01 195 HK_SCAM 926 0.33 0.94 0.00 196 RDNS_DYNAMIC 925 0.59 0.94 0.41 197 TR_XM_Undi_RecipCombo3 923 0.32 0.93 0.00 198 RCVD_IN_RP_CERTIFIED 898 1.14 0.91 1.27 199 XM_B_COPY_HTML 894 0.82 0.91 0.77 200 XMClaimOffer 884 0.41 0.89 0.16 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 157230 82.64 81.18 83.40 2 HTML_MESSAGE 153968 86.20 94.84 81.67 3 RELAYCOUNTRY_US 145321 76.19 74.47 77.09 4 DKIM_SIGNED 140599 79.23 88.11 74.58 5 XM_DK_Pass 138621 77.38 84.72 73.53 6 DKIM_VALID 137678 76.69 83.66 73.03 7 XM_B_Unicode 133891 75.90 85.22 71.02 8 DKIM_VALID_AU 117741 62.10 61.42 62.46 9 DCC_CHECK_NEGATIVE 114888 48.39 24.44 60.94 10 BAYES_50 104016 47.51 32.87 55.18 11 XMListUnsubscribeExists 101202 59.06 69.32 53.68 12 XM_B_Unicode3 88890 46.65 45.68 47.15 13 XM_B_SpammyWords 85242 54.19 71.30 45.22 14 DCC_CHECK 73575 51.58 75.54 39.03 15 HTML_FONT_LOW_CONTRAST 58663 32.08 33.91 31.12 16 DKIM_VALID_EF 54401 29.82 31.64 28.86 17 LOC_TINY_FONT_1 53974 31.47 36.90 28.63 18 FVGT_m_MULTI_ODD 50748 27.54 28.71 26.92 19 RCVD_IN_MSPIKE_H2 44804 24.68 26.43 23.77 20 MIME_HTML_ONLY 43639 27.55 35.95 23.15 21 XM_B_SpammyWords2 42075 28.28 39.65 22.32 22 XMSubLong 40115 20.58 19.25 21.28 23 T_TM2_M_HEADER_IN_MSG 38692 20.31 19.90 20.52 24 T_KAM_HTML_FONT_INVALID 37566 21.81 25.41 19.93 25 ALL_TRUSTED 36244 13.00 1.11 19.23 26 USER_IN_DEF_DKIM_WL 32854 12.49 3.07 17.43 27 XM_Multi_Part_URI 30773 16.95 18.14 16.32 28 TR_XM_DK_Unsub 29123 18.42 24.10 15.45 29 XM_DKIMWhitelistDomains 21230 7.39 0.01 11.26 30 BAYES_60 20891 9.97 7.85 11.08 31 UNPARSEABLE_RELAY 19424 11.28 13.15 10.30 32 XM_B_Unsub 19407 12.15 15.68 10.29 33 TR_XM_BayesUnsub 16958 11.15 15.27 9.00 34 XM_Evil_Numbers_Gen 16540 8.32 7.46 8.77 35 BAYES_00 15256 5.45 0.42 8.09 36 XM_H_GMP 14591 6.78 4.94 7.74 37 RCVD_IN_VALIDITY_SAFE 14327 6.43 4.20 7.60 38 LotsOfNums_01 14158 6.68 5.10 7.51 39 XM_DK_Undo_02 13332 21.62 49.38 7.07 40 TooManyTo_001 13178 6.67 6.06 6.99 41 BAYES_80 12993 7.76 9.42 6.89 42 RCVD_IN_VALIDITY_CERTIFIED 12799 5.65 3.47 6.79 43 TR_XM_DK_Bayes 12470 4.46 0.35 6.61 44 TR_XM_DK_Bayes1 12374 4.43 0.35 6.56 45 HTML_IMAGE_RATIO_02 12192 7.62 9.81 6.47 46 T_TooManySym_01 12119 4.95 2.12 6.43 47 XMStrtUSub 11960 6.06 5.53 6.34 48 RCVD_IN_MSPIKE_WL 11813 8.43 12.57 6.27 49 RCVD_IN_MSPIKE_H3 11813 8.43 12.57 6.27 50 BOTNET_IPINHOSTNAME 11266 8.36 12.90 5.98 51 BAYES_99 10917 17.95 41.15 5.79 52 TR_XM_DK_Bayes2 10839 3.88 0.30 5.75 53 ANY_BOUNCE_MESSAGE 10724 4.10 1.05 5.69 54 BOUNCE_MESSAGE 10724 4.10 1.05 5.69 55 HTML_IMAGE_RATIO_04 10637 5.76 5.97 5.64 56 IN_ZIMBRA_NJ_WHITELIST 9847 3.45 0.07 5.22 57 TM2_M_URI_OPT_OUT 9282 4.43 3.49 4.92 58 XM_B_SpammyWords3 9206 7.81 13.39 4.88 59 LOTS_OF_MONEY 9176 6.56 9.80 4.87 60 XM_H_Long_From01 8824 4.56 4.33 4.68 61 XM_UncommonTLD01 8819 5.31 6.53 4.68 62 XMSubMetaSx_00 8760 5.94 8.41 4.65 63 BAYES_999 8489 14.36 33.16 4.50 64 XM_Body_Dirty_Words 8124 6.43 10.48 4.31 65 BAYES_40 7740 3.09 1.16 4.11 66 MPART_ALT_DIFF 7705 4.81 6.18 4.09 67 RELAYCOUNTRY_META 7215 11.72 26.78 3.83 68 T_TooManySym_02 7199 2.73 0.66 3.82 69 SCC_BODY_URI_ONLY 7057 2.79 0.98 3.74 70 INVALID_MSGID 6977 2.50 0.21 3.70 71 XMNumbers 6495 3.70 4.19 3.45 72 MIME_QP_LONG_LINE 6480 2.98 2.10 3.44 73 TO_MALFORMED 6429 2.24 0.00 3.41 74 TR_XM_SpammyWords4 6280 4.81 7.64 3.33 75 FSL_BULK_SIG 6275 6.44 12.37 3.33 76 MIME_HTML_MOSTLY 6006 3.70 4.69 3.19 77 FROM_EXCESS_BASE64 5919 2.87 2.35 3.14 78 HTML_IMAGE_RATIO_06 5873 3.28 3.59 3.12 79 BAYES_95 5683 3.94 5.70 3.01 80 BAYES_05 5612 2.12 0.48 2.98 81 T_REMOTE_IMAGE 5424 3.09 3.49 2.88 82 BAYES_20 5406 2.21 0.95 2.87 83 MIME_HEADER_CTYPE_ONLY 5403 1.91 0.08 2.87 84 TR_XM_DKIM_Undo 5350 15.13 38.60 2.84 85 RCVD_IN_IADB_LISTED 4963 1.99 0.75 2.63 86 XM_B_SpammyTLD 4890 2.71 2.94 2.59 87 MAILING_LIST_MULTI 4822 2.18 1.45 2.56 88 TR_XM_PhishingBody 4821 3.06 4.01 2.56 89 TVD_RCVD_IP 4676 1.93 0.87 2.48 90 XM_B_Phish_Phrases 4537 2.80 3.55 2.41 91 RCVD_IN_IADB_SPF 4533 1.81 0.67 2.40 92 XM_CamelCaseFrm001 4438 2.67 3.27 2.35 93 XMSexyCombo_05 4357 4.03 7.32 2.31 94 XM_PDF 4308 1.58 0.23 2.29 95 TR_DCC_Bayes_99 4255 12.13 30.96 2.26 96 RCVD_IN_IADB_SENDERID 4206 1.68 0.63 2.23 97 RCVD_IN_IADB_DK 4119 1.66 0.64 2.18 98 MIME_HTML_ONLY_MULTI 4021 2.57 3.42 2.13 99 XM_SPF_SoftFail 3990 2.66 3.70 2.12 100 XMBSHREFv2 3894 1.44 0.24 2.07 101 UNTRUSTED_Relay 3733 3.74 7.11 1.98 102 TR_XM_SpammyRelay 3588 8.47 21.01 1.90 103 HTML_IMAGE_RATIO_08 3479 2.43 3.56 1.85 104 TVD_SPACE_RATIO 3396 1.21 0.09 1.80 105 TooManyTo_002 3379 1.56 1.13 1.79 106 IN_HORDE_ADDRESS_BOOK 3295 1.21 0.17 1.75 107 XM_DK_Undo_01 3180 1.50 1.15 1.69 108 T_XMDrugObfuBody_14 3176 2.45 3.91 1.68 109 XMStockSpam_06 3082 1.84 2.24 1.63 110 XMGappySubj_01 3047 1.11 0.14 1.62 111 XMPhish30 2943 1.59 1.63 1.56 112 XMBody_95 2925 1.07 0.15 1.55 113 XM_B_Investor 2922 2.19 3.40 1.55 114 DKIM_INVALID 2921 2.54 4.44 1.55 115 RCVD_IN_IADB_VOUCHED 2894 1.11 0.30 1.54 116 XMDiploma_00 2875 1.80 2.31 1.53 117 TR_XM_SpammyWords5 2819 2.47 4.33 1.50 118 TR_XM_UnparsRelay 2707 3.54 7.55 1.44 119 XMGappySubj_02 2684 0.95 0.05 1.42 120 HTML_MIME_NO_HTML_TAG 2674 2.09 3.38 1.42 121 RCVD_IN_RP_SAFE 2671 1.29 1.06 1.42 122 XMBdyGiftCard01 2617 1.66 2.19 1.39 123 T_XMDrugObfuBody_08 2603 2.12 3.52 1.38 124 RELAYCOUNTRY_CA 2535 6.13 15.28 1.34 125 XM_SendGrid 2469 1.35 1.43 1.31 126 T_TooManySym_03 2444 0.93 0.22 1.30 127 XM_GoogleGroups 2422 0.98 0.39 1.28 128 TM2_M_VERY_LONG_WORD 2396 1.90 3.10 1.27 129 RCVD_IN_RP_CERTIFIED 2391 1.14 0.91 1.27 130 MSGID_NOFQDN1 2364 0.83 0.03 1.25 131 BOTNET 2358 4.82 11.64 1.25 132 XM_UB50 2277 2.20 4.10 1.21 133 XM_H_Long_From02 2107 1.21 1.40 1.12 134 URI_NOVOWEL 2089 0.96 0.67 1.11 135 RCVD_IN_IADB_OPTIN 1997 0.77 0.22 1.06 136 USER_IN_WELCOMELIST 1983 0.69 0.00 1.05 137 USER_IN_WHITELIST 1983 0.69 0.00 1.05 138 XM_OfRef6 1951 1.90 3.55 1.03 139 TR_Symld_Words 1949 0.89 0.62 1.03 140 XM_B_Unsub2 1932 1.25 1.68 1.02 141 URI_TRY_3LD 1824 1.16 1.52 0.97 142 TR_XM_DK_SendGrid 1797 0.93 0.88 0.95 143 TooManyTo_003 1761 0.99 1.09 0.93 144 XM_B_SpammyWords4 1712 1.21 1.78 0.91 145 MPART_ALT_DIFF_COUNT 1698 0.87 0.82 0.90 146 URI_HEX 1682 1.23 1.86 0.89 147 RCVD_IN_BL_SPAMCOP_NET 1548 6.71 17.94 0.82 148 TR_XM_Base64_M1 1542 0.87 0.96 0.82 149 DKIM_ADSP_CUSTOM_MED 1456 0.74 0.67 0.77 150 XM_B_COPY_HTML 1449 0.82 0.91 0.77 151 TooManyTo_004 1446 0.87 1.07 0.77 152 SUBJ_ALL_CAPS 1443 1.28 2.26 0.77 153 XM_H_Trusted_IP 1360 0.47 0.00 0.72 154 XM_H_PHPMailer 1319 0.91 1.30 0.70 155 TR_MetaPhish_Combo_01 1300 0.69 0.70 0.69 156 XM_ProductURIs 1258 0.66 0.66 0.67 157 TooManyTo_005 1253 0.79 1.03 0.66 158 XMSubNoVowel 1206 0.55 0.39 0.64 159 XMSubMetaSxObfu_02 1195 0.60 0.52 0.63 160 XMNoVowels 1160 0.55 0.41 0.62 161 T_XMHurry_00 1129 1.14 2.17 0.60 162 XM_B_FormFill 1080 0.38 0.03 0.57 163 FILL_THIS_FORM 1055 0.54 0.51 0.56 164 XMLngstWrd_00 1052 0.74 1.08 0.56 165 TR_XM_SpammyWords2 992 5.66 15.47 0.53 166 KHOP_HELO_FCRDNS 987 0.90 1.63 0.52 167 XMHTML_After_End 962 0.53 0.56 0.51 168 XMGenDplmaNmb 952 0.60 0.77 0.50 169 XMBody_17 944 2.52 6.39 0.50 170 SpammyFromTLD_01 931 1.47 3.34 0.49 171 T_TooManySym_04 930 0.38 0.15 0.49 172 T_FILL_THIS_FORM_SHORT 899 2.21 5.53 0.48 173 XM_RXBody 898 0.75 1.28 0.48 174 NML_ADSP_CUSTOM_MED 888 0.52 0.60 0.47 175 LOW_PRICE 886 0.45 0.42 0.47 176 FILL_THIS_FORM_LONG 882 0.45 0.42 0.47 177 XMSubMetaI_00 875 0.48 0.52 0.46 178 XM_B_REG_HTML 871 0.55 0.73 0.46 179 TRACKER_ID 866 0.38 0.24 0.46 180 XM_ShortIntro_01 840 0.51 0.65 0.45 181 FORGED_GMAIL_RCVD 832 0.49 0.59 0.44 182 HELO_NO_DOMAIN 827 0.52 0.69 0.44 183 HELO_NODOT 827 0.52 0.69 0.44 184 HTTPS_HTTP_MISMATCH 813 0.64 1.04 0.43 185 RELAYCOUNTRY_AU 812 0.97 2.01 0.43 186 DATE_IN_PAST_06_12 802 0.34 0.16 0.43 187 XMBody_78 801 0.49 0.61 0.42 188 HTML_TAG_BALANCE_BODY 798 1.02 2.17 0.42 189 XMSubMetaSxObfu_03 776 0.67 1.18 0.41 190 HTML_IMAGE_ONLY_20 775 1.01 2.16 0.41 191 RDNS_DYNAMIC 771 0.59 0.94 0.41 192 XM_S_SubURI 764 0.28 0.04 0.41 193 T_XMDrugObfuBody_00 754 0.64 1.11 0.40 194 DKIM_ADSP_NXDOMAIN 754 0.77 1.49 0.40 195 PLING_QUERY 747 0.53 0.79 0.40 196 CTE_8BIT_MISMATCH 722 0.26 0.01 0.38 197 HTML_FONT_FACE_BAD 714 0.43 0.53 0.38 198 RCVD_IN_PSBL 702 1.18 2.73 0.37 199 NO_DNS_FOR_FROM 687 0.46 0.64 0.36 200 XMCapTrack 686 0.33 0.26 0.36 ----------------------------------------------------------------------