Email: 278174 Autolearn: 0 AvgScore: 4.56 AvgScanTime: 1.30 sec Spam: 100013 Autolearn: 0 AvgScore: 14.31 AvgScanTime: 1.52 sec Ham: 178161 Autolearn: 0 AvgScore: -0.92 AvgScanTime: 1.17 sec Time Spent Running SA: 100.34 hours Time Spent Processing Spam: 42.24 hours Time Spent Processing Ham: 58.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 96518 86.24 96.51 80.47 2 DKIM_SIGNED 93561 81.77 93.55 75.16 3 XM_B_Unicode 87349 75.84 87.34 69.38 4 XM_DK_Pass 85051 77.82 85.04 73.77 5 DKIM_VALID 83714 77.00 83.70 73.23 6 T_SCC_BODY_TEXT_LINE 81543 82.70 81.53 83.36 7 XMListUnsubscribeExists 77411 62.88 77.40 54.73 8 DCC_CHECK 74755 50.66 74.75 37.14 9 RELAYCOUNTRY_US 74673 76.92 74.66 78.18 10 XM_B_SpammyWords 73998 53.95 73.99 42.70 11 DKIM_VALID_AU 63057 63.05 63.05 63.05 12 XM_DK_Undo_02 49689 22.45 49.68 7.16 13 XM_B_Unicode3 49014 45.61 49.01 43.71 14 XM_B_SpammyWords2 42748 27.78 42.74 19.38 15 BAYES_99 40234 18.65 40.23 6.53 16 TR_XM_DKIM_Undo 39424 16.09 39.42 2.99 17 LOC_TINY_FONT_1 39311 32.56 39.31 28.77 18 HTML_FONT_LOW_CONTRAST 35127 33.38 35.12 32.40 19 BAYES_50 33490 48.17 33.49 56.42 20 FVGT_m_MULTI_ODD 31718 28.76 31.71 27.10 21 BAYES_999 31699 14.67 31.69 5.11 22 MIME_HTML_ONLY 30959 24.59 30.95 21.01 23 TR_DCC_Bayes_99 29912 12.09 29.91 2.08 24 DKIM_VALID_EF 29420 29.06 29.42 28.87 25 T_KAM_HTML_FONT_INVALID 28244 23.38 28.24 20.65 26 RCVD_IN_MSPIKE_H2 25590 26.24 25.59 26.61 27 DCC_CHECK_NEGATIVE 25245 49.32 25.24 62.84 28 RELAYCOUNTRY_META 23833 10.83 23.83 3.53 29 TR_XM_DK_Unsub 22714 18.22 22.71 15.69 30 T_TM2_M_HEADER_IN_MSG 21089 22.40 21.09 23.13 31 XMSubLong 19698 22.22 19.70 23.64 32 TR_XM_SpammyRelay 19603 8.45 19.60 2.19 33 XM_Multi_Part_URI 18097 16.94 18.09 16.29 34 TR_XM_SpammyWords2 17403 6.69 17.40 0.67 35 TR_MAX_INTL_RELAY 15673 11.33 15.67 8.90 36 RELAYCOUNTRY_CA 15528 6.52 15.53 1.46 37 RCVD_IN_BL_SPAMCOP_NET 15038 5.85 15.04 0.70 38 BOTNET 14015 5.96 14.01 1.45 39 XM_B_Unsub 13561 9.82 13.56 7.72 40 XM_B_SpammyWords3 13137 8.09 13.14 5.26 41 TR_XM_BayesUnsub 13038 8.81 13.04 6.44 42 UNPARSEABLE_RELAY 12735 11.46 12.73 10.74 43 BOTNET_IPINHOSTNAME 12056 7.99 12.05 5.71 44 TR_XM_SPAMCOP 11557 4.27 11.56 0.18 45 LOTS_OF_MONEY 11212 7.60 11.21 5.57 46 RCVD_IN_MSPIKE_H3 10740 7.80 10.74 6.15 47 RCVD_IN_MSPIKE_WL 10740 7.80 10.74 6.15 48 DKIM_INVALID 9847 4.77 9.85 1.93 49 TR_XM_SpammyWords4 9692 5.99 9.69 3.92 50 XM_Body_Dirty_Words 9343 6.22 9.34 4.47 51 BAYES_80 9150 6.48 9.15 4.98 52 XM_Evil_Numbers_Gen 8316 8.43 8.31 8.49 53 BAYES_60 8137 10.02 8.14 11.07 54 XMBody_17 7864 3.26 7.86 0.68 55 TR_XM_UnparsRelay 7754 3.87 7.75 1.68 56 HTML_IMAGE_RATIO_02 7598 6.84 7.60 6.42 57 XMSubMetaSx_00 7473 5.76 7.47 4.80 58 FSL_BULK_SIG 6610 4.03 6.61 2.58 59 MPART_ALT_DIFF 6608 4.88 6.61 3.90 60 BOTNET_NORDNS 6564 2.53 6.56 0.27 61 TooManyTo_001 6279 6.39 6.28 6.45 62 UNTRUSTED_Relay 6184 3.25 6.18 1.61 63 XM_UncommonTLD01 6134 5.34 6.13 4.90 64 BAYES_95 6068 4.69 6.07 3.92 65 NO_DNS_FOR_FROM 6062 2.64 6.06 0.72 66 HTML_IMAGE_RATIO_04 5996 5.60 6.00 5.38 67 T_FILL_THIS_FORM_SHORT 5848 2.53 5.85 0.66 68 LotsOfNums_01 5822 6.78 5.82 7.32 69 XMSexyCombo_05 5820 3.71 5.82 2.53 70 TR_XM_MaxWHORU 5708 2.41 5.71 0.55 71 MIME_HTML_MOSTLY 5590 3.83 5.59 2.85 72 HTML_IMAGE_RATIO_08 5252 3.59 5.25 2.65 73 XM_H_GMP 5149 7.23 5.15 8.41 74 XMStrtUSub 4997 5.73 5.00 6.15 75 TR_XM_SpammyWords5 4855 2.49 4.85 1.17 76 XM_B_Phish_Phrases 4829 4.20 4.83 3.85 77 XM_H_Long_From01 4743 4.88 4.74 4.96 78 TR_XM_BayesRelay 4461 1.61 4.46 0.00 79 XM_OfRef6 4124 2.11 4.12 0.99 80 HK_RANDOM_REPLYTO 4112 1.57 4.11 0.14 81 T_XMDrugObfuBody_14 4104 2.78 4.10 2.04 82 HTML_IMAGE_RATIO_06 4080 3.27 4.08 2.81 83 FONT_INVIS_LONG_LINE 3989 1.49 3.99 0.09 84 RCVD_IN_VALIDITY_SAFE 3933 5.85 3.93 6.93 85 XM_B_Investor 3910 2.33 3.91 1.45 86 TR_XM_FormFill 3783 1.38 3.78 0.03 87 TR_XM_PhishingBody 3687 2.39 3.69 1.67 88 XM_SPF_SoftFail 3488 2.92 3.49 2.60 89 USER_IN_DEF_DKIM_WL 3452 12.14 3.45 17.02 90 NORDNS_LOW_CONTRAST 3329 1.32 3.33 0.19 91 XMNumbers 3328 3.17 3.33 3.08 92 RCVD_IN_VALIDITY_CERTIFIED 3322 5.00 3.32 5.95 93 SUBJ_ALL_CAPS 3262 1.87 3.26 1.09 94 TM2_M_URI_OPT_OUT 3248 2.51 3.25 2.10 95 XM_B_SpammyTLD 3139 2.99 3.14 2.91 96 MIME_HTML_ONLY_MULTI 3138 2.45 3.14 2.06 97 TM2_M_VERY_LONG_WORD 3103 1.97 3.10 1.33 98 XM_UB50 3049 1.63 3.05 0.83 99 XM_URI_RBL 2938 1.18 2.94 0.19 100 XM_CamelCaseFrm001 2923 2.47 2.92 2.21 101 TR_LOTS_OF_MONEY3 2914 1.41 2.91 0.57 102 XM_DIRTYINTL 2878 1.12 2.88 0.14 103 T_XMDrugObfuBody_08 2776 1.79 2.78 1.23 104 XMBrknScrpt_02 2680 1.34 2.68 0.59 105 SpammyFromTLD_01 2645 1.30 2.64 0.55 106 TR_XM_NoHeaderRelay 2551 0.98 2.55 0.09 107 T_TooManySym_01 2516 5.85 2.52 7.72 108 FROM_EXCESS_BASE64 2449 2.52 2.45 2.56 109 XM_B_SpammyWords4 2356 1.48 2.36 0.99 110 TR_XM_INV_DKIM 2339 0.89 2.34 0.08 111 XMDiploma_00 2276 1.65 2.28 1.30 112 RELAYCOUNTRY_AU 2230 1.07 2.23 0.42 113 T_XMHurry_00 2165 1.14 2.16 0.57 114 DIET_1 2063 0.99 2.06 0.38 115 HTML_TAG_BALANCE_BODY 2045 1.06 2.04 0.51 116 XM_HighProb1 2045 0.74 2.04 0.01 117 URI_NOVOWEL 2014 1.55 2.01 1.28 118 AC_BR_BONANZA 1731 0.69 1.73 0.11 119 MIME_QP_LONG_LINE 1688 2.56 1.69 3.06 120 XM_B_Unsub2 1661 1.21 1.66 0.96 121 URI_HEX 1649 1.16 1.65 0.88 122 TR_XM_PHPForged 1638 0.74 1.64 0.24 123 XMBdyGiftCard01 1624 1.62 1.62 1.62 124 HTML_TEXT_INVISIBLE_STYLE 1608 0.76 1.61 0.29 125 TR_Mismatch_TLD_02 1606 0.63 1.61 0.08 126 XMPhish30 1598 0.96 1.60 0.60 127 TR_Caps_n_Bayes_99 1569 0.58 1.57 0.02 128 T_REMOTE_IMAGE 1532 2.38 1.53 2.85 129 XMStockSpam_06 1522 1.56 1.52 1.58 130 XMReplyNow 1517 0.68 1.52 0.21 131 TR_XM_PHPDW 1506 0.69 1.51 0.24 132 THIS_AD 1493 0.84 1.49 0.47 133 HTTPS_HTTP_MISMATCH 1477 0.94 1.48 0.64 134 ALL_TRUSTED 1464 12.35 1.46 18.46 135 TR_XM_FormFill2 1453 0.68 1.45 0.24 136 MAILING_LIST_MULTI 1446 2.03 1.45 2.36 137 XM_H_PHPOS 1442 0.66 1.44 0.22 138 XMSlimDrugH 1441 0.70 1.44 0.29 139 HTML_MIME_NO_HTML_TAG 1389 1.31 1.39 1.27 140 XM_B_COPY_HTML 1362 1.29 1.36 1.25 141 SpammyFromTLD_02 1359 0.64 1.36 0.24 142 XM_H_Undi_Recip 1325 0.55 1.32 0.11 143 XM_SendGrid 1314 1.37 1.31 1.41 144 XMSexyCombo_01 1269 0.55 1.27 0.15 145 URI_TRY_3LD 1267 1.09 1.27 1.00 146 BAYES_40 1217 3.04 1.22 4.06 147 TR_XM_Undi_Recip19 1207 0.48 1.21 0.07 148 TR_MetaPhish_Combo_01 1204 0.91 1.20 0.74 149 TR_XM_InvalidRelay 1190 0.44 1.19 0.01 150 XMSubMetaSSx_00 1165 0.58 1.16 0.26 151 XMSubMetaI_00 1160 1.11 1.16 1.09 152 AC_HTML_NONSENSE_TAGS 1151 0.43 1.15 0.02 153 LongTLD 1106 0.49 1.11 0.15 154 DKIM_ADSP_CUSTOM_MED 1082 1.11 1.08 1.12 155 KHOP_HELO_FCRDNS 1079 0.79 1.08 0.62 156 TR_XM_Undi_RecipCombo2 1074 0.39 1.07 0.00 157 MPART_ALT_DIFF_COUNT 1070 1.05 1.07 1.03 158 HOSTED_IMG_MULTI_PUB_01 1030 0.39 1.03 0.03 159 XM_DK_Undo_01 1028 1.40 1.03 1.60 160 SHOPIFY_IMG_NOT_RCVD_SFY 1022 0.63 1.02 0.40 161 FORGED_RELAY_MUA_TO_MX 1003 0.38 1.00 0.02 162 RCVD_IN_PSBL 1003 0.84 1.00 0.74 163 PLING_QUERY 999 0.68 1.00 0.51 164 RELAYCOUNTRY_IN 993 0.38 0.99 0.03 165 XM_H_Long_From02 986 1.07 0.99 1.12 166 TR_XM_Undi_Recip11 969 0.36 0.97 0.01 167 NML_ADSP_CUSTOM_MED 962 0.84 0.96 0.77 168 TR_Mismatch_TLD_01 957 1.34 0.96 1.56 169 XM_B_Phish66 951 0.47 0.95 0.20 170 XM_UB99 933 0.34 0.93 0.00 171 XMHTML_After_End 927 0.55 0.93 0.34 172 XM_UB60 915 0.36 0.91 0.05 173 ANY_BOUNCE_MESSAGE 911 3.90 0.91 5.59 174 BOUNCE_MESSAGE 911 3.90 0.91 5.59 175 HELO_DYNAMIC_SPLIT_IP 904 0.33 0.90 0.01 176 RDNS_DYNAMIC 900 0.58 0.90 0.41 177 TR_Symld_Words 892 1.05 0.89 1.14 178 TR_Sbj_FN_Bdy 891 0.40 0.89 0.12 179 T_XMDrugObfuBody_00 886 0.53 0.89 0.33 180 TR_XM_Undi_Recip5 882 0.32 0.88 0.00 181 TR_XM_DK_SendGrid 877 1.01 0.88 1.09 182 TR_XM_Undi_Recip2 859 0.31 0.86 0.01 183 TR_XM_Base64_L1 855 0.42 0.85 0.18 184 TVD_RCVD_IP 842 2.02 0.84 2.68 185 TM2_M_OBFU_COMMENT 836 0.46 0.84 0.25 186 TR_XM_Undi_RecipCombo3 835 0.30 0.83 0.00 187 FORGED_GMAIL_RCVD 835 0.71 0.83 0.64 188 TR_XM_Base64_M1 833 1.02 0.83 1.13 189 T_STY_INVIS_DIRECT 828 0.46 0.83 0.25 190 T_XMDrugObfuBody_10 821 0.31 0.82 0.02 191 RCVD_IN_IADB_LISTED 817 1.92 0.82 2.54 192 FILL_THIS_FORM 814 0.62 0.81 0.51 193 XMClaimOffer 810 0.56 0.81 0.42 194 BAYES_20 804 2.18 0.80 2.96 195 HTML_FONT_FACE_BAD 802 0.56 0.80 0.42 196 UNDISC_MONEY 787 0.28 0.79 0.00 197 XMHTMLBadTable_001 784 0.44 0.78 0.25 198 XMGenDplmaNmb 780 0.65 0.78 0.58 199 XM_ProductURIs 770 0.71 0.77 0.68 200 TooManyTo_002 766 1.25 0.77 1.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 148519 82.70 81.53 83.36 2 HTML_MESSAGE 143370 86.24 96.51 80.47 3 RELAYCOUNTRY_US 139293 76.92 74.66 78.18 4 DKIM_SIGNED 133898 81.77 93.55 75.16 5 XM_DK_Pass 131434 77.82 85.04 73.77 6 DKIM_VALID 130467 77.00 83.70 73.23 7 XM_B_Unicode 123608 75.84 87.34 69.38 8 DKIM_VALID_AU 112333 63.05 63.05 63.05 9 DCC_CHECK_NEGATIVE 111956 49.32 25.24 62.84 10 BAYES_50 100511 48.17 33.49 56.42 11 XMListUnsubscribeExists 97514 62.88 77.40 54.73 12 XM_B_Unicode3 77872 45.61 49.01 43.71 13 XM_B_SpammyWords 76072 53.95 73.99 42.70 14 DCC_CHECK 66162 50.66 74.75 37.14 15 HTML_FONT_LOW_CONTRAST 57722 33.38 35.12 32.40 16 DKIM_VALID_EF 51427 29.06 29.42 28.87 17 LOC_TINY_FONT_1 51261 32.56 39.31 28.77 18 FVGT_m_MULTI_ODD 48285 28.76 31.71 27.10 19 RCVD_IN_MSPIKE_H2 47403 26.24 25.59 26.61 20 XMSubLong 42111 22.22 19.70 23.64 21 T_TM2_M_HEADER_IN_MSG 41212 22.40 21.09 23.13 22 MIME_HTML_ONLY 37432 24.59 30.95 21.01 23 T_KAM_HTML_FONT_INVALID 36793 23.38 28.24 20.65 24 XM_B_SpammyWords2 34536 27.78 42.74 19.38 25 ALL_TRUSTED 32885 12.35 1.46 18.46 26 USER_IN_DEF_DKIM_WL 30317 12.14 3.45 17.02 27 XM_Multi_Part_URI 29018 16.94 18.09 16.29 28 TR_XM_DK_Unsub 27959 18.22 22.71 15.69 29 XM_DKIMWhitelistDomains 21835 7.86 0.02 12.26 30 BAYES_60 19727 10.02 8.14 11.07 31 UNPARSEABLE_RELAY 19130 11.46 12.73 10.74 32 TR_MAX_INTL_RELAY 15851 11.33 15.67 8.90 33 XM_Evil_Numbers_Gen 15125 8.43 8.31 8.49 34 XM_H_GMP 14975 7.23 5.15 8.41 35 T_TooManySym_01 13760 5.85 2.52 7.72 36 XM_B_Unsub 13748 9.82 13.56 7.72 37 LotsOfNums_01 13040 6.78 5.82 7.32 38 XM_DK_Undo_02 12758 22.45 49.68 7.16 39 BAYES_00 12523 4.68 0.51 7.03 40 RCVD_IN_VALIDITY_SAFE 12346 5.85 3.93 6.93 41 BAYES_99 11635 18.65 40.23 6.53 42 TooManyTo_001 11486 6.39 6.28 6.45 43 TR_XM_BayesUnsub 11480 8.81 13.04 6.44 44 HTML_IMAGE_RATIO_02 11439 6.84 7.60 6.42 45 RCVD_IN_MSPIKE_WL 10955 7.80 10.74 6.15 46 RCVD_IN_MSPIKE_H3 10955 7.80 10.74 6.15 47 XMStrtUSub 10954 5.73 5.00 6.15 48 RCVD_IN_VALIDITY_CERTIFIED 10598 5.00 3.32 5.95 49 BOTNET_IPINHOSTNAME 10171 7.99 12.05 5.71 50 TR_XM_DK_Bayes 10139 3.73 0.25 5.69 51 TR_XM_DK_Bayes1 10060 3.68 0.18 5.65 52 BOUNCE_MESSAGE 9951 3.90 0.91 5.59 53 ANY_BOUNCE_MESSAGE 9951 3.90 0.91 5.59 54 LOTS_OF_MONEY 9926 7.60 11.21 5.57 55 HTML_IMAGE_RATIO_04 9585 5.60 6.00 5.38 56 XM_B_SpammyWords3 9370 8.09 13.14 5.26 57 BAYES_999 9109 14.67 31.69 5.11 58 IN_ZIMBRA_NJ_WHITELIST 9073 3.31 0.13 5.09 59 BAYES_80 8875 6.48 9.15 4.98 60 XM_H_Long_From01 8834 4.88 4.74 4.96 61 TR_XM_DK_Bayes2 8773 3.19 0.09 4.92 62 XM_UncommonTLD01 8726 5.34 6.13 4.90 63 XMSubMetaSx_00 8552 5.76 7.47 4.80 64 XM_Body_Dirty_Words 7965 6.22 9.34 4.47 65 BAYES_40 7231 3.04 1.22 4.06 66 T_TooManySym_02 7011 2.79 0.74 3.94 67 TR_XM_SpammyWords4 6977 5.99 9.69 3.92 68 BAYES_95 6976 4.69 6.07 3.92 69 MPART_ALT_DIFF 6956 4.88 6.61 3.90 70 XM_B_Phish_Phrases 6863 4.20 4.83 3.85 71 INVALID_MSGID 6836 2.54 0.24 3.84 72 SCC_BODY_URI_ONLY 6522 2.60 0.70 3.66 73 RELAYCOUNTRY_META 6295 10.83 23.83 3.53 74 TO_MALFORMED 6288 2.26 0.00 3.53 75 XMNumbers 5491 3.17 3.33 3.08 76 MIME_QP_LONG_LINE 5446 2.56 1.69 3.06 77 BAYES_05 5415 2.09 0.41 3.04 78 TR_XM_DKIM_Undo 5327 16.09 39.42 2.99 79 BAYES_20 5267 2.18 0.80 2.96 80 XM_B_SpammyTLD 5187 2.99 3.14 2.91 81 T_REMOTE_IMAGE 5083 2.38 1.53 2.85 82 MIME_HTML_MOSTLY 5072 3.83 5.59 2.85 83 HTML_IMAGE_RATIO_06 5009 3.27 4.08 2.81 84 TVD_RCVD_IP 4768 2.02 0.84 2.68 85 HTML_IMAGE_RATIO_08 4728 3.59 5.25 2.65 86 XM_SPF_SoftFail 4625 2.92 3.49 2.60 87 FSL_BULK_SIG 4600 4.03 6.61 2.58 88 FROM_EXCESS_BASE64 4561 2.52 2.45 2.56 89 RCVD_IN_IADB_LISTED 4533 1.92 0.82 2.54 90 XMSexyCombo_05 4503 3.71 5.82 2.53 91 MAILING_LIST_MULTI 4196 2.03 1.45 2.36 92 RCVD_IN_IADB_SPF 4071 1.72 0.72 2.29 93 XMBSHREFv2 4030 1.54 0.24 2.26 94 XM_CamelCaseFrm001 3935 2.47 2.92 2.21 95 TR_XM_SpammyRelay 3894 8.45 19.60 2.19 96 TM2_M_URI_OPT_OUT 3742 2.51 3.25 2.10 97 TR_DCC_Bayes_99 3708 12.09 29.91 2.08 98 RCVD_IN_IADB_SENDERID 3691 1.56 0.66 2.07 99 MIME_HTML_ONLY_MULTI 3676 2.45 3.14 2.06 100 T_XMDrugObfuBody_14 3641 2.78 4.10 2.04 101 RCVD_IN_IADB_DK 3588 1.53 0.68 2.01 102 DKIM_INVALID 3431 4.77 9.85 1.93 103 XMGappySubj_01 3423 1.31 0.21 1.92 104 XM_PDF 3201 1.23 0.23 1.80 105 TVD_SPACE_RATIO 3166 1.17 0.09 1.78 106 XMGappySubj_02 3121 1.16 0.10 1.75 107 IN_HORDE_ADDRESS_BOOK 3111 1.16 0.11 1.75 108 TR_XM_UnparsRelay 2999 3.87 7.75 1.68 109 TR_XM_PhishingBody 2969 2.39 3.69 1.67 110 XMBdyGiftCard01 2886 1.62 1.62 1.62 111 UNTRUSTED_Relay 2860 3.25 6.18 1.61 112 RCVD_IN_IADB_VOUCHED 2855 1.17 0.39 1.60 113 XM_DK_Undo_01 2855 1.40 1.03 1.60 114 XMStockSpam_06 2814 1.56 1.52 1.58 115 XMBody_95 2800 1.04 0.10 1.57 116 TR_Mismatch_TLD_01 2773 1.34 0.96 1.56 117 TooManyTo_002 2724 1.25 0.77 1.53 118 RCVD_IN_RP_SAFE 2614 1.21 0.76 1.47 119 RELAYCOUNTRY_CA 2604 6.52 15.53 1.46 120 XM_B_Investor 2583 2.33 3.91 1.45 121 BOTNET 2576 5.96 14.01 1.45 122 XM_SendGrid 2509 1.37 1.31 1.41 123 TM2_M_VERY_LONG_WORD 2370 1.97 3.10 1.33 124 XM_GoogleGroups 2340 1.02 0.50 1.31 125 MSGID_NOFQDN1 2325 0.85 0.04 1.30 126 XMDiploma_00 2308 1.65 2.28 1.30 127 URI_NOVOWEL 2287 1.55 2.01 1.28 128 T_TooManySym_03 2282 0.92 0.28 1.28 129 RCVD_IN_RP_CERTIFIED 2258 1.05 0.65 1.27 130 HTML_MIME_NO_HTML_TAG 2257 1.31 1.39 1.27 131 XM_B_COPY_HTML 2222 1.29 1.36 1.25 132 T_XMDrugObfuBody_08 2195 1.79 2.78 1.23 133 TR_XM_SpammyWords5 2084 2.49 4.85 1.17 134 TR_Symld_Words 2032 1.05 0.89 1.14 135 TR_XM_Base64_M1 2014 1.02 0.83 1.13 136 DKIM_ADSP_CUSTOM_MED 2001 1.11 1.08 1.12 137 XM_H_Long_From02 1997 1.07 0.99 1.12 138 RCVD_IN_IADB_OPTIN 1993 0.82 0.28 1.12 139 TR_XM_DK_SendGrid 1944 1.01 0.88 1.09 140 SUBJ_ALL_CAPS 1943 1.87 3.26 1.09 141 XM_RXBody 1941 0.95 0.70 1.09 142 XMSubMetaI_00 1940 1.11 1.16 1.09 143 MPART_ALT_DIFF_COUNT 1837 1.05 1.07 1.03 144 URI_TRY_3LD 1776 1.09 1.27 1.00 145 XM_B_SpammyWords4 1772 1.48 2.36 0.99 146 XM_OfRef6 1757 2.11 4.12 0.99 147 USER_IN_WELCOMELIST 1734 0.62 0.00 0.97 148 USER_IN_WHITELIST 1734 0.62 0.00 0.97 149 XM_B_Unsub2 1709 1.21 1.66 0.96 150 URI_HEX 1573 1.16 1.65 0.88 151 TooManyTo_003 1525 0.80 0.71 0.86 152 XMSubNoVowel 1486 0.70 0.45 0.83 153 XM_UB50 1483 1.63 3.05 0.83 154 XM_H_PHPMailer 1417 0.77 0.73 0.80 155 XMSubMetaSxObfu_02 1416 0.75 0.67 0.79 156 NML_ADSP_CUSTOM_MED 1376 0.84 0.96 0.77 157 XM_H_Trusted_IP 1332 0.48 0.00 0.75 158 RCVD_IN_PSBL 1327 0.84 1.00 0.74 159 TR_MetaPhish_Combo_01 1319 0.91 1.20 0.74 160 NO_DNS_FOR_FROM 1289 2.64 6.06 0.72 161 RCVD_IN_BL_SPAMCOP_NET 1249 5.85 15.04 0.70 162 TooManyTo_004 1212 0.68 0.68 0.68 163 XMBody_17 1207 3.26 7.86 0.68 164 XM_ProductURIs 1203 0.71 0.77 0.68 165 TR_XM_SpammyWords2 1199 6.69 17.40 0.67 166 T_FILL_THIS_FORM_SHORT 1182 2.53 5.85 0.66 167 HTTPS_HTTP_MISMATCH 1138 0.94 1.48 0.64 168 FORGED_GMAIL_RCVD 1135 0.71 0.83 0.64 169 KHOP_HELO_FCRDNS 1109 0.79 1.08 0.62 170 XMPhish30 1071 0.96 1.60 0.60 171 XMBrknScrpt_02 1045 1.34 2.68 0.59 172 TooManyTo_005 1041 0.61 0.66 0.58 173 XMGenDplmaNmb 1025 0.65 0.78 0.58 174 T_XMHurry_00 1020 1.14 2.16 0.57 175 TR_LOTS_OF_MONEY3 1017 1.41 2.91 0.57 176 TR_LOTS_OF_MONEY2 983 0.60 0.68 0.55 177 T_MONEY_PERCENT 983 0.60 0.68 0.55 178 TR_XM_MaxWHORU 983 2.41 5.71 0.55 179 SpammyFromTLD_01 971 1.30 2.64 0.55 180 XMLngstWrd_00 962 0.57 0.62 0.54 181 FILL_THIS_FORM 907 0.62 0.81 0.51 182 HTML_TAG_BALANCE_BODY 905 1.06 2.04 0.51 183 PLING_QUERY 902 0.68 1.00 0.51 184 T_TooManySym_04 896 0.37 0.14 0.50 185 XMNoVowels 861 0.56 0.69 0.48 186 THIS_AD 838 0.84 1.49 0.47 187 XM_ShortIntro_01 815 0.47 0.48 0.46 188 XM_B_REG_HTML 804 0.56 0.76 0.45 189 XM_S_SubURI 782 0.31 0.07 0.44 190 XM_Lotto 767 0.42 0.40 0.43 191 RELAYCOUNTRY_AU 757 1.07 2.23 0.42 192 XMPhish14 749 0.46 0.53 0.42 193 XM_B_FormFill 748 0.29 0.05 0.42 194 HTML_FONT_FACE_BAD 747 0.56 0.80 0.42 195 DKIM_ADSP_NXDOMAIN 747 0.38 0.30 0.42 196 HELO_NODOT 745 0.31 0.10 0.42 197 HELO_NO_DOMAIN 745 0.30 0.10 0.42 198 XMClaimOffer 744 0.56 0.81 0.42 199 CTE_8BIT_MISMATCH 727 0.26 0.01 0.41 200 RDNS_DYNAMIC 726 0.58 0.90 0.41 ----------------------------------------------------------------------