Email: 302922 Autolearn: 0 AvgScore: 3.94 AvgScanTime: 1.32 sec Spam: 99329 Autolearn: 0 AvgScore: 13.43 AvgScanTime: 1.43 sec Ham: 203593 Autolearn: 0 AvgScore: -0.70 AvgScanTime: 1.27 sec Time Spent Running SA: 111.11 hours Time Spent Processing Spam: 39.35 hours Time Spent Processing Ham: 71.75 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91968 86.19 92.59 83.06 2 DKIM_SIGNED 91358 78.40 91.98 71.78 3 XM_DK_Pass 89055 77.01 89.66 70.83 4 DKIM_VALID 87986 76.36 88.58 70.40 5 XM_B_Unicode 83554 75.69 84.12 71.58 6 RELAYCOUNTRY_US 78874 76.03 79.41 74.38 7 T_SCC_BODY_TEXT_LINE 78250 81.90 78.78 83.42 8 XMListUnsubscribeExists 74044 58.21 74.54 50.25 9 XM_B_SpammyWords 70461 51.17 70.94 41.53 10 DCC_CHECK 68836 46.98 69.30 36.09 11 DKIM_VALID_AU 67715 62.99 68.17 60.46 12 XM_DK_Undo_02 47484 20.05 47.80 6.51 13 XM_B_Unicode3 44592 41.94 44.89 40.51 14 XM_B_SpammyWords2 41227 25.61 41.51 17.85 15 LOC_TINY_FONT_1 38953 30.55 39.22 26.33 16 BAYES_99 36830 15.75 37.08 5.34 17 HTML_FONT_LOW_CONTRAST 36705 34.56 36.95 33.39 18 TR_XM_DKIM_Undo 36357 13.80 36.60 2.67 19 BAYES_50 34866 50.94 35.10 58.66 20 FVGT_m_MULTI_ODD 31561 26.88 31.77 24.49 21 DCC_CHECK_NEGATIVE 30478 53.00 30.68 63.89 22 DKIM_VALID_EF 29981 28.25 30.18 27.31 23 MIME_HTML_ONLY 29687 23.62 29.89 20.56 24 BAYES_999 29174 12.47 29.37 4.23 25 RCVD_IN_MSPIKE_H2 27608 25.56 27.79 24.47 26 TR_DCC_Bayes_99 26117 9.80 26.29 1.75 27 T_KAM_HTML_FONT_INVALID 26047 20.91 26.22 18.32 28 TR_XM_DK_Unsub 22659 17.29 22.81 14.59 29 XMSubLong 20628 20.23 20.77 19.97 30 RELAYCOUNTRY_META 20430 9.20 20.57 3.65 31 T_TM2_M_HEADER_IN_MSG 19905 19.90 20.04 19.83 32 XM_Multi_Part_URI 19146 18.25 19.28 17.75 33 TR_XM_SpammyRelay 16282 6.67 16.39 1.93 34 TR_XM_SpammyWords2 15853 5.74 15.96 0.75 35 XM_B_SpammyWords3 14884 8.46 14.98 5.27 36 XM_B_Unsub 14715 10.41 14.81 8.27 37 UNPARSEABLE_RELAY 14513 12.21 14.61 11.04 38 TR_MAX_INTL_RELAY 14417 9.17 14.51 6.57 39 TR_XM_BayesUnsub 14200 9.19 14.30 6.70 40 RCVD_IN_BL_SPAMCOP_NET 13931 5.25 14.03 0.97 41 BOTNET_IPINHOSTNAME 12560 7.63 12.64 5.19 42 LOTS_OF_MONEY 11907 7.24 11.99 4.92 43 RELAYCOUNTRY_CA 11767 4.82 11.85 1.39 44 TR_XM_SPAMCOP 11597 4.12 11.68 0.43 45 XM_Body_Dirty_Words 10894 6.07 10.97 3.68 46 TR_XM_SpammyWords4 10716 5.75 10.79 3.29 47 XM_Evil_Numbers_Gen 8977 8.30 9.04 7.95 48 BAYES_80 8735 5.50 8.79 3.89 49 RCVD_IN_MSPIKE_H3 8723 6.46 8.78 5.33 50 RCVD_IN_MSPIKE_WL 8723 6.46 8.78 5.33 51 XM_UncommonTLD01 8718 5.84 8.78 4.41 52 BAYES_60 7853 9.26 7.91 9.92 53 TR_XM_UnparsRelay 7823 3.62 7.88 1.54 54 HTML_IMAGE_RATIO_02 7651 6.59 7.70 6.04 55 BOTNET 7543 3.20 7.59 1.06 56 XMNumbers 6753 4.40 6.80 3.23 57 XMBody_17 6612 2.64 6.66 0.69 58 UNTRUSTED_Relay 5868 3.03 5.91 1.62 59 XMSubMetaSx_00 5796 5.11 5.84 4.75 60 MPART_ALT_DIFF 5740 8.63 5.78 10.02 61 TooManyTo_001 5724 6.22 5.76 6.44 62 FSL_BULK_SIG 5663 4.87 5.70 4.46 63 LotsOfNums_01 5601 6.98 5.64 7.64 64 TR_XM_PHPDW 5500 2.05 5.54 0.35 65 TR_XM_PHPForged 5458 2.03 5.49 0.33 66 HTML_IMAGE_RATIO_04 5424 4.82 5.46 4.51 67 TR_XM_FormFill2 5399 2.01 5.44 0.34 68 XM_H_PHPOS 5376 1.99 5.41 0.32 69 SpammyFromTLD_01 5353 2.18 5.39 0.62 70 XMSexyCombo_05 5318 2.93 5.35 1.74 71 BAYES_95 5258 3.54 5.29 2.68 72 XM_H_Long_From01 5241 5.11 5.28 5.02 73 XM_SPF_SoftFail 5186 3.16 5.22 2.15 74 XM_H_GMP 4838 6.17 4.87 6.81 75 XM_B_Phish_Phrases 4709 3.44 4.74 2.80 76 MIME_HTML_MOSTLY 4532 6.99 4.56 8.18 77 T_XMDrugObfuBody_14 4260 2.62 4.29 1.81 78 T_FILL_THIS_FORM_SHORT 4217 1.83 4.25 0.65 79 TR_XM_PhishingBody 4169 2.44 4.20 1.59 80 XM_B_SpammyTLD 3996 3.01 4.02 2.52 81 TR_XM_SpammyWords5 3964 2.12 3.99 1.21 82 XM_URI_RBL 3775 1.37 3.80 0.19 83 TR_LOTS_OF_MONEY3 3702 1.41 3.73 0.28 84 XMStrtUSub 3510 5.19 3.53 6.00 85 MIME_HTML_ONLY_MULTI 3440 2.68 3.46 2.30 86 XM_OfRef6 3406 1.81 3.43 1.02 87 DKIM_INVALID 3372 2.04 3.39 1.39 88 T_XMDrugObfuBody_08 3318 1.95 3.34 1.27 89 HTML_IMAGE_RATIO_06 3301 2.53 3.32 2.14 90 RCVD_IN_VALIDITY_SAFE 3300 5.39 3.32 6.40 91 XM_B_Investor 3266 1.93 3.29 1.26 92 USER_IN_DEF_DKIM_WL 3259 11.36 3.28 15.31 93 XM_CamelCaseFrm001 3211 2.87 3.23 2.70 94 XM_UB50 3172 1.68 3.19 0.93 95 TR_XM_BayesRelay 3171 1.05 3.19 0.00 96 TM2_M_VERY_LONG_WORD 3158 1.95 3.18 1.36 97 SCC_BODY_URI_ONLY 3119 3.24 3.14 3.29 98 TM2_M_BODY_EMPTY 2920 1.13 2.94 0.24 99 XMEmptyBody_01 2885 1.00 2.90 0.07 100 TR_XM_FormFill 2833 0.94 2.85 0.01 101 RCVD_IN_VALIDITY_CERTIFIED 2719 4.52 2.74 5.40 102 TM2_M_URI_OPT_OUT 2641 2.28 2.66 2.10 103 HTML_IMAGE_RATIO_08 2585 1.78 2.60 1.37 104 XM_HighProb1 2522 0.84 2.54 0.01 105 XM_B_SpammyWords4 2480 1.22 2.50 0.59 106 FROM_EXCESS_BASE64 2468 2.39 2.48 2.34 107 SUBJ_ALL_CAPS 2454 1.39 2.47 0.86 108 BAYES_40 2390 4.05 2.41 4.85 109 RELAYCOUNTRY_AU 2350 1.14 2.37 0.54 110 XM_B_Unsub2 2244 1.52 2.26 1.16 111 FONT_INVIS_LONG_LINE 2233 0.80 2.25 0.09 112 TR_XM_NoHeaderRelay 2223 0.80 2.24 0.10 113 XMBrknScrpt_02 2061 1.06 2.07 0.56 114 T_TooManySym_01 2019 4.30 2.03 5.40 115 BOUNCE_MESSAGE 1993 4.42 2.01 5.60 116 ANY_BOUNCE_MESSAGE 1993 4.42 2.01 5.60 117 BAYES_20 1960 2.98 1.97 3.47 118 XMBdyGiftCard01 1911 1.21 1.92 0.87 119 XM_DIRTYINTL 1902 0.72 1.91 0.13 120 XMStockSpam_06 1818 1.06 1.83 0.69 121 HTML_TAG_BALANCE_BODY 1795 0.85 1.81 0.38 122 T_REMOTE_IMAGE 1718 2.94 1.73 3.52 123 KHOP_HELO_FCRDNS 1585 1.06 1.60 0.80 124 HK_RANDOM_REPLYTO 1566 0.59 1.58 0.11 125 XMDiploma_00 1540 1.25 1.55 1.11 126 MAILING_LIST_MULTI 1539 1.80 1.55 1.93 127 MIME_QP_LONG_LINE 1524 2.88 1.53 3.54 128 URI_HEX 1515 1.19 1.53 1.02 129 THIS_AD 1510 0.83 1.52 0.49 130 BOTNET_NORDNS 1509 0.51 1.52 0.02 131 T_XMDrugObfuBody_00 1502 0.94 1.51 0.66 132 SpammyFromTLD_02 1473 0.60 1.48 0.16 133 XMSubMetaI_00 1461 1.25 1.47 1.14 134 AC_BR_BONANZA 1459 0.63 1.47 0.22 135 T_XMDrugObfuBody_10 1441 0.51 1.45 0.05 136 XMPhish30 1414 1.03 1.42 0.83 137 XM_H_PHPMailer 1407 0.86 1.42 0.59 138 SHOPIFY_IMG_NOT_RCVD_SFY 1362 0.70 1.37 0.37 139 MPART_ALT_DIFF_COUNT 1308 0.93 1.32 0.75 140 RDNS_DYNAMIC 1299 0.67 1.31 0.36 141 TR_Mismatch_TLD_02 1247 0.47 1.26 0.09 142 T_XMHurry_00 1217 0.65 1.23 0.37 143 T_STY_INVIS_DIRECT 1201 0.62 1.21 0.34 144 XMLngstWrd_00 1197 0.73 1.21 0.49 145 TVD_RCVD_IP 1177 1.98 1.18 2.38 146 TR_XM_INV_DKIM 1163 0.44 1.17 0.09 147 HTTPS_HTTP_MISMATCH 1161 0.69 1.17 0.46 148 RCVD_IN_VALIDITY_RPBL 1156 0.42 1.16 0.06 149 XM_B_Phish66 1147 0.51 1.15 0.19 150 HTML_MIME_NO_HTML_TAG 1143 1.28 1.15 1.34 151 XM_B_COPY_HTML 1137 0.91 1.14 0.80 152 XM_SendGrid 1135 1.18 1.14 1.20 153 XM_DK_Undo_01 1108 1.47 1.12 1.65 154 URI_TRY_3LD 1106 0.86 1.11 0.74 155 URI_NOVOWEL 1091 1.15 1.10 1.17 156 TooManyTo_002 1083 1.46 1.09 1.65 157 TR_XM_Base64_M1 1070 1.03 1.08 1.01 158 XMEqualsVooDoo_00 1053 0.37 1.06 0.04 159 XM_UB99 1047 0.35 1.05 0.01 160 ALL_TRUSTED 1043 15.22 1.05 22.13 161 XMReplyNow 1037 0.45 1.04 0.16 162 TR_Caps_n_Bayes_99 1026 0.35 1.03 0.02 163 XMSexyCombo_01 1009 0.50 1.02 0.24 164 TooManyTo_003 1007 0.85 1.01 0.77 165 XM_H_PHPOS_M 1001 0.37 1.01 0.06 166 TM2_M_OBFU_COMMENT 1000 0.50 1.01 0.26 167 XMPhish14 999 0.52 1.01 0.29 168 DIET_1 999 0.51 1.01 0.26 169 TooManyTo_004 976 0.72 0.98 0.60 170 TR_XM_RelayPhish 962 0.37 0.97 0.07 171 HELO_DYNAMIC_SPLIT_IP 955 0.32 0.96 0.01 172 TooManyTo_005 951 0.66 0.96 0.52 173 URI_OPTOUT_3LD 945 0.36 0.95 0.08 174 TR_MetaPhish_Combo_01 920 0.89 0.93 0.87 175 PLING_QUERY 916 0.76 0.92 0.68 176 XM_H_Long_From02 910 1.04 0.92 1.10 177 RCVD_IN_PSBL 886 0.56 0.89 0.41 178 XM_ProductURIs 867 1.13 0.87 1.26 179 TR_Mismatch_TLD_01 858 0.45 0.86 0.24 180 RCVD_IN_IADB_LISTED 847 2.19 0.85 2.84 181 XM_B_REG_HTML 839 0.58 0.84 0.45 182 TR_Symld_Words 814 1.00 0.82 1.08 183 XM_UB999 803 0.27 0.81 0.01 184 RCVD_IN_RP_SAFE 785 1.07 0.79 1.20 185 DKIM_ADSP_CUSTOM_MED 782 0.79 0.79 0.79 186 HELO_NO_DOMAIN 767 0.51 0.77 0.38 187 HELO_NODOT 767 0.51 0.77 0.38 188 XM_H_Undi_Recip 766 0.34 0.77 0.13 189 TR_XM_InvalidRelay 766 0.27 0.77 0.02 190 RCVD_IN_IADB_SPF 749 1.96 0.75 2.55 191 SUBJ_DOLLARS 749 0.49 0.75 0.36 192 HTML_FONT_FACE_BAD 746 0.56 0.75 0.47 193 BAYES_05 742 2.09 0.75 2.74 194 FSL_HELO_NON_FQDN_1 729 0.24 0.73 0.00 195 XM_RXBody 723 0.50 0.73 0.39 196 XMEqualsVooDoo_01 718 0.24 0.72 0.00 197 RCVD_IN_IADB_DK 716 1.78 0.72 2.29 198 NML_ADSP_CUSTOM_MED 713 0.59 0.72 0.52 199 RCVD_IN_IADB_SENDERID 708 1.81 0.71 2.35 200 FORGED_RELAY_MUA_TO_MX 705 0.24 0.71 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 169841 81.90 78.78 83.42 2 HTML_MESSAGE 169112 86.19 92.59 83.06 3 RELAYCOUNTRY_US 151424 76.03 79.41 74.38 4 DKIM_SIGNED 146145 78.40 91.98 71.78 5 XM_B_Unicode 145729 75.69 84.12 71.58 6 XM_DK_Pass 144214 77.01 89.66 70.83 7 DKIM_VALID 143324 76.36 88.58 70.40 8 DCC_CHECK_NEGATIVE 130073 53.00 30.68 63.89 9 DKIM_VALID_AU 123100 62.99 68.17 60.46 10 BAYES_50 119431 50.94 35.10 58.66 11 XMListUnsubscribeExists 102300 58.21 74.54 50.25 12 XM_B_SpammyWords 84552 51.17 70.94 41.53 13 XM_B_Unicode3 82466 41.94 44.89 40.51 14 DCC_CHECK 73480 46.98 69.30 36.09 15 HTML_FONT_LOW_CONTRAST 67977 34.56 36.95 33.39 16 DKIM_VALID_EF 55597 28.25 30.18 27.31 17 LOC_TINY_FONT_1 53599 30.55 39.22 26.33 18 FVGT_m_MULTI_ODD 49854 26.88 31.77 24.49 19 RCVD_IN_MSPIKE_H2 49822 25.56 27.79 24.47 20 ALL_TRUSTED 45061 15.22 1.05 22.13 21 MIME_HTML_ONLY 41868 23.62 29.89 20.56 22 XMSubLong 40665 20.23 20.77 19.97 23 T_TM2_M_HEADER_IN_MSG 40371 19.90 20.04 19.83 24 T_KAM_HTML_FONT_INVALID 37308 20.91 26.22 18.32 25 XM_B_SpammyWords2 36351 25.61 41.51 17.85 26 XM_Multi_Part_URI 36137 18.25 19.28 17.75 27 USER_IN_DEF_DKIM_WL 31162 11.36 3.28 15.31 28 TR_XM_DK_Unsub 29708 17.29 22.81 14.59 29 UNPARSEABLE_RELAY 22483 12.21 14.61 11.04 30 MPART_ALT_DIFF 20409 8.63 5.78 10.02 31 BAYES_60 20196 9.26 7.91 9.92 32 XM_DKIMWhitelistDomains 18784 6.22 0.05 9.23 33 BAYES_00 17211 5.91 0.69 8.45 34 XM_B_Unsub 16832 10.41 14.81 8.27 35 MIME_HTML_MOSTLY 16653 6.99 4.56 8.18 36 XM_Evil_Numbers_Gen 16177 8.30 9.04 7.95 37 LotsOfNums_01 15557 6.98 5.64 7.64 38 TR_XM_DK_Bayes 14560 4.99 0.57 7.15 39 TR_XM_DK_Bayes1 14471 4.96 0.56 7.11 40 XM_H_GMP 13860 6.17 4.87 6.81 41 TR_XM_BayesUnsub 13644 9.19 14.30 6.70 42 TR_MAX_INTL_RELAY 13371 9.17 14.51 6.57 43 XM_DK_Undo_02 13251 20.05 47.80 6.51 44 TR_XM_DK_Bayes2 13187 4.50 0.46 6.48 45 TooManyTo_001 13105 6.22 5.76 6.44 46 RCVD_IN_VALIDITY_SAFE 13036 5.39 3.32 6.40 47 HTML_IMAGE_RATIO_02 12301 6.59 7.70 6.04 48 XMStrtUSub 12222 5.19 3.53 6.00 49 BOUNCE_MESSAGE 11405 4.42 2.01 5.60 50 ANY_BOUNCE_MESSAGE 11405 4.42 2.01 5.60 51 T_TooManySym_01 11002 4.30 2.03 5.40 52 RCVD_IN_VALIDITY_CERTIFIED 10987 4.52 2.74 5.40 53 BAYES_99 10873 15.75 37.08 5.34 54 RCVD_IN_MSPIKE_WL 10845 6.46 8.78 5.33 55 RCVD_IN_MSPIKE_H3 10845 6.46 8.78 5.33 56 XM_B_SpammyWords3 10730 8.46 14.98 5.27 57 BOTNET_IPINHOSTNAME 10562 7.63 12.64 5.19 58 IN_ZIMBRA_NJ_WHITELIST 10445 3.47 0.05 5.13 59 XM_H_Long_From01 10227 5.11 5.28 5.02 60 LOTS_OF_MONEY 10024 7.24 11.99 4.92 61 BAYES_40 9874 4.05 2.41 4.85 62 XMSubMetaSx_00 9678 5.11 5.84 4.75 63 HTML_IMAGE_RATIO_04 9178 4.82 5.46 4.51 64 FSL_BULK_SIG 9082 4.87 5.70 4.46 65 XM_UncommonTLD01 8969 5.84 8.78 4.41 66 BAYES_999 8610 12.47 29.37 4.23 67 BAYES_80 7915 5.50 8.79 3.89 68 XM_Body_Dirty_Words 7487 6.07 10.97 3.68 69 RELAYCOUNTRY_META 7429 9.20 20.57 3.65 70 MIME_QP_LONG_LINE 7206 2.88 1.53 3.54 71 T_REMOTE_IMAGE 7174 2.94 1.73 3.52 72 BAYES_20 7061 2.98 1.97 3.47 73 INVALID_MSGID 6965 2.37 0.21 3.42 74 TR_XM_SpammyWords4 6699 5.75 10.79 3.29 75 SCC_BODY_URI_ONLY 6690 3.24 3.14 3.29 76 T_TooManySym_02 6669 2.39 0.56 3.28 77 T_HTML_ATTACH 6587 2.19 0.06 3.24 78 XMNumbers 6581 4.40 6.80 3.23 79 TO_MALFORMED 6236 2.07 0.04 3.06 80 RCVD_IN_IADB_LISTED 5779 2.19 0.85 2.84 81 XM_B_Phish_Phrases 5701 3.44 4.74 2.80 82 BAYES_05 5578 2.09 0.75 2.74 83 HTML_OBFUSCATE_20_30 5576 1.85 0.03 2.74 84 XM_CamelCaseFrm001 5489 2.87 3.23 2.70 85 BAYES_95 5453 3.54 5.29 2.68 86 TR_XM_DKIM_Undo 5434 13.80 36.60 2.67 87 RCVD_IN_IADB_SPF 5201 1.96 0.75 2.55 88 XM_B_SpammyTLD 5122 3.01 4.02 2.52 89 TVD_RCVD_IP 4836 1.98 1.18 2.38 90 RCVD_IN_IADB_SENDERID 4784 1.81 0.71 2.35 91 FROM_EXCESS_BASE64 4765 2.39 2.48 2.34 92 XM_PDF 4708 1.66 0.34 2.31 93 MIME_HTML_ONLY_MULTI 4673 2.68 3.46 2.30 94 RCVD_IN_IADB_DK 4666 1.78 0.72 2.29 95 XM_SPF_SoftFail 4377 3.16 5.22 2.15 96 HTML_IMAGE_RATIO_06 4348 2.53 3.32 2.14 97 TM2_M_URI_OPT_OUT 4279 2.28 2.66 2.10 98 XMBSHREFv2 4200 1.51 0.39 2.06 99 MAILING_LIST_MULTI 3928 1.80 1.55 1.93 100 TR_XM_SpammyRelay 3925 6.67 16.39 1.93 101 T_XMDrugObfuBody_14 3681 2.62 4.29 1.81 102 TR_DCC_Bayes_99 3559 9.80 26.29 1.75 103 XMSexyCombo_05 3551 2.93 5.35 1.74 104 RCVD_IN_IADB_VOUCHED 3390 1.24 0.37 1.67 105 XM_DK_Undo_01 3356 1.47 1.12 1.65 106 TooManyTo_002 3353 1.46 1.09 1.65 107 IN_HORDE_ADDRESS_BOOK 3336 1.12 0.05 1.64 108 UNTRUSTED_Relay 3307 3.03 5.91 1.62 109 TR_XM_PhishingBody 3231 2.44 4.20 1.59 110 TVD_SPACE_RATIO 3191 1.08 0.10 1.57 111 TR_XM_UnparsRelay 3141 3.62 7.88 1.54 112 XMGappySubj_01 2839 1.08 0.42 1.39 113 RELAYCOUNTRY_CA 2836 4.82 11.85 1.39 114 DKIM_INVALID 2821 2.04 3.39 1.39 115 HTML_IMAGE_RATIO_08 2798 1.78 2.60 1.37 116 TM2_M_VERY_LONG_WORD 2760 1.95 3.18 1.36 117 HTML_MIME_NO_HTML_TAG 2738 1.28 1.15 1.34 118 XMBody_95 2670 0.93 0.15 1.31 119 T_XMDrugObfuBody_08 2594 1.95 3.34 1.27 120 XM_B_Investor 2573 1.93 3.29 1.26 121 XM_ProductURIs 2570 1.13 0.87 1.26 122 TR_XM_SpammyWords5 2460 2.12 3.99 1.21 123 RCVD_IN_RP_SAFE 2449 1.07 0.79 1.20 124 XM_SendGrid 2433 1.18 1.14 1.20 125 XMGappySubj_02 2406 0.89 0.29 1.18 126 URI_NOVOWEL 2382 1.15 1.10 1.17 127 XM_B_Unsub2 2357 1.52 2.26 1.16 128 MSGID_NOFQDN1 2334 0.78 0.02 1.15 129 XMSubMetaI_00 2330 1.25 1.47 1.14 130 RCVD_IN_IADB_OPTIN 2270 0.83 0.25 1.11 131 XMDiploma_00 2261 1.25 1.55 1.11 132 XM_H_Long_From02 2246 1.04 0.92 1.10 133 T_TooManySym_03 2227 0.83 0.29 1.09 134 TR_Symld_Words 2208 1.00 0.82 1.08 135 BOTNET 2163 3.20 7.59 1.06 136 XM_GoogleGroups 2157 0.88 0.50 1.06 137 RCVD_IN_RP_CERTIFIED 2133 0.89 0.58 1.05 138 XM_OfRef6 2077 1.81 3.43 1.02 139 URI_HEX 2075 1.19 1.53 1.02 140 TR_XM_Base64_M1 2053 1.03 1.08 1.01 141 RCVD_IN_BL_SPAMCOP_NET 1979 5.25 14.03 0.97 142 XM_UB50 1902 1.68 3.19 0.93 143 USER_IN_WHITELIST 1884 0.62 0.00 0.93 144 USER_IN_WELCOMELIST 1884 0.62 0.00 0.93 145 TR_MetaPhish_Combo_01 1769 0.89 0.93 0.87 146 XMBdyGiftCard01 1763 1.21 1.92 0.87 147 SUBJ_ALL_CAPS 1756 1.39 2.47 0.86 148 TR_XM_DK_SendGrid 1733 0.79 0.67 0.85 149 XMPhish30 1694 1.03 1.42 0.83 150 XM_B_COPY_HTML 1625 0.91 1.14 0.80 151 KHOP_HELO_FCRDNS 1623 1.06 1.60 0.80 152 DKIM_ADSP_CUSTOM_MED 1618 0.79 0.79 0.79 153 TooManyTo_003 1574 0.85 1.01 0.77 154 TR_XM_SpammyWords2 1534 5.74 15.96 0.75 155 MPART_ALT_DIFF_COUNT 1518 0.93 1.32 0.75 156 URI_TRY_3LD 1511 0.86 1.11 0.74 157 XMStockSpam_06 1402 1.06 1.83 0.69 158 XMBody_17 1398 2.64 6.66 0.69 159 PLING_QUERY 1381 0.76 0.92 0.68 160 T_XMDrugObfuBody_00 1341 0.94 1.51 0.66 161 T_FILL_THIS_FORM_SHORT 1321 1.83 4.25 0.65 162 XMSubMetaSxObfu_02 1304 0.59 0.49 0.64 163 XMClaimOffer 1298 0.64 0.64 0.64 164 SpammyFromTLD_01 1257 2.18 5.39 0.62 165 TooManyTo_004 1212 0.72 0.98 0.60 166 XM_H_PHPMailer 1211 0.86 1.42 0.59 167 XM_B_SpammyWords4 1204 1.22 2.50 0.59 168 XM_H_Trusted_IP 1191 0.39 0.00 0.58 169 XM_Walgreens_Forge 1184 0.41 0.05 0.58 170 XMNoVowels 1170 0.48 0.29 0.57 171 XMGenDplmaNmb 1163 0.59 0.64 0.57 172 XMBrknScrpt_02 1137 1.06 2.07 0.56 173 RELAYCOUNTRY_AU 1098 1.14 2.37 0.54 174 XM_B_FormFill 1075 0.38 0.08 0.53 175 FILL_THIS_FORM 1072 0.49 0.42 0.53 176 NML_ADSP_CUSTOM_MED 1065 0.59 0.72 0.52 177 FORGED_GMAIL_RCVD 1064 0.58 0.71 0.52 178 TooManyTo_005 1053 0.66 0.96 0.52 179 XMHTML_After_End 1040 0.53 0.56 0.51 180 XMLngstWrd_00 1004 0.73 1.21 0.49 181 THIS_AD 1003 0.83 1.52 0.49 182 XMSubNoVowel 996 0.48 0.45 0.49 183 FONT_INVIS_POSTEXTRAS 975 0.33 0.03 0.48 184 HTML_FONT_FACE_BAD 962 0.56 0.75 0.47 185 HTTPS_HTTP_MISMATCH 942 0.69 1.17 0.46 186 XMOemUri 936 0.42 0.32 0.46 187 TRACKER_ID 934 0.40 0.27 0.46 188 XM_B_REG_HTML 920 0.58 0.84 0.45 189 XMSubMetaSxObfu_03 912 0.42 0.37 0.45 190 T_OBFU_PDF_ATTACH 879 0.31 0.07 0.43 191 FILL_THIS_FORM_LONG 871 0.40 0.35 0.43 192 TR_XM_SPAMCOP 869 4.12 11.68 0.43 193 XM_B_DNDMA 837 0.45 0.53 0.41 194 RCVD_IN_PSBL 825 0.56 0.89 0.41 195 T_TooManySym_04 818 0.33 0.17 0.40 196 XM_RXBody 801 0.50 0.73 0.39 197 T_MONEY_PERCENT 796 0.49 0.68 0.39 198 TR_LOTS_OF_MONEY2 796 0.49 0.68 0.39 199 XM_S_SubURI 786 0.28 0.07 0.39 200 HTML_TAG_BALANCE_BODY 777 0.85 1.81 0.38 ----------------------------------------------------------------------