Email: 384591 Autolearn: 0 AvgScore: 5.11 AvgScanTime: 1.39 sec Spam: 139607 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.43 sec Ham: 244984 Autolearn: 0 AvgScore: 0.01 AvgScanTime: 1.36 sec Time Spent Running SA: 148.27 hours Time Spent Processing Spam: 55.41 hours Time Spent Processing Ham: 92.86 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 139346 99.66 99.81 99.57 2 HTML_MESSAGE 134951 87.89 96.66 82.88 3 XM_B_Unicode 119414 77.08 85.54 72.25 4 DKIM_SIGNED 117039 79.03 83.83 76.30 5 XM_DK_Pass 111081 76.63 79.57 74.96 6 DKIM_VALID 109772 75.93 78.63 74.39 7 RELAYCOUNTRY_US 103169 76.91 73.90 78.63 8 DCC_CHECK 97635 49.34 69.94 37.61 9 XM_B_SpammyWords 95917 53.12 68.71 44.24 10 XMListUnsubscribeExists 94284 60.20 67.54 56.02 11 DKIM_VALID_AU 81507 61.13 58.38 62.69 12 XM_DK_Undo_02 61078 19.99 43.75 6.45 13 XM_B_Unicode3 60808 43.79 43.56 43.92 14 LOC_TINY_FONT_1 54200 32.89 38.82 29.52 15 XM_B_SpammyWords2 53147 26.55 38.07 19.99 16 BAYES_99 52548 17.32 37.64 5.75 17 BAYES_50 49224 49.88 35.26 58.21 18 HTML_FONT_LOW_CONTRAST 46462 32.33 33.28 31.78 19 TR_XM_DKIM_Undo 46236 13.62 33.12 2.50 20 RCVD_IN_MSPIKE_H2 43736 31.11 31.33 30.98 21 MIME_HTML_ONLY 43011 23.29 30.81 19.01 22 FVGT_m_MULTI_ODD 42059 28.18 30.13 27.08 23 DCC_CHECK_NEGATIVE 41956 50.64 30.05 62.37 24 BAYES_999 40230 13.27 28.82 4.40 25 DKIM_VALID_EF 38141 28.41 27.32 29.04 26 RELAYCOUNTRY_META 37099 12.60 26.57 4.64 27 TR_DCC_Bayes_99 35358 10.36 25.33 1.83 28 T_KAM_HTML_FONT_INVALID 35244 22.37 25.25 20.73 29 T_TM2_M_HEADER_IN_MSG 34543 24.07 24.74 23.69 30 XMSubLong 32143 22.24 23.02 21.79 31 TR_XM_DK_Unsub 28415 17.64 20.35 16.09 32 TR_MAX_INTL_RELAY 26371 12.19 18.89 8.37 33 XM_Multi_Part_URI 24105 16.18 17.27 15.57 34 TR_XM_SpammyRelay 23803 7.83 17.05 2.58 35 UNPARSEABLE_RELAY 21440 13.49 15.36 12.42 36 XM_B_Unsub 20699 10.26 14.83 7.65 37 TR_XM_SpammyWords2 20570 5.76 14.73 0.65 38 TR_XM_BayesUnsub 19865 9.33 14.23 6.53 39 RCVD_IN_BL_SPAMCOP_NET 19672 5.56 14.09 0.70 40 UNTRUSTED_Relay 18888 6.26 13.53 2.12 41 BOTNET_IPINHOSTNAME 17795 7.56 12.75 4.60 42 XM_B_SpammyWords3 16730 7.36 11.98 4.73 43 TR_XM_SPAMCOP 16219 4.51 11.62 0.46 44 LOTS_OF_MONEY 15271 7.17 10.94 5.02 45 FSL_BULK_SIG 14416 6.24 10.33 3.90 46 TR_XM_SpammyWords4 13644 5.90 9.77 3.69 47 RELAYCOUNTRY_CA 13486 4.60 9.66 1.71 48 BAYES_80 13162 6.76 9.43 5.24 49 BOTNET 12941 4.00 9.27 1.00 50 XM_B_SpammyTLD 12210 5.53 8.75 3.70 51 TR_XM_UnparsRelay 11922 4.47 8.54 2.14 52 RCVD_IN_MSPIKE_WL 11422 6.69 8.18 5.84 53 RCVD_IN_MSPIKE_H3 11422 6.69 8.18 5.84 54 BAYES_60 11215 10.20 8.03 11.44 55 XM_Evil_Numbers_Gen 10199 8.19 7.31 8.69 56 HTML_IMAGE_RATIO_02 9830 5.97 7.04 5.36 57 XMBody_17 9757 3.08 6.99 0.85 58 BAYES_95 9093 4.36 6.51 3.13 59 XM_UncommonTLD01 8949 4.98 6.41 4.16 60 XM_Body_Dirty_Words 8338 4.04 5.97 2.94 61 RELAYCOUNTRY_NL 8173 2.29 5.85 0.26 62 XM_UB50 8120 2.88 5.82 1.21 63 RELAYCOUNTRY_PK 7783 2.10 5.57 0.13 64 MPART_ALT_DIFF 7697 4.07 5.51 3.25 65 TooManyTo_001 7303 6.94 5.23 7.91 66 DKIM_INVALID 7267 3.10 5.21 1.91 67 XM_SPF_SoftFail 7231 3.76 5.18 2.95 68 HTML_IMAGE_RATIO_04 7109 4.42 5.09 4.04 69 XMSubMetaSx_00 6738 3.91 4.83 3.38 70 TR_XM_SpammyWords5 6675 2.69 4.78 1.49 71 LotsOfNums_01 6581 6.84 4.71 8.05 72 XM_H_GMP 6422 6.11 4.60 6.97 73 TM2_M_URI_OPT_OUT 6395 3.22 4.58 2.45 74 TR_MetaPhish_Combo_01 6162 1.94 4.41 0.54 75 XMStrtUSub 6026 5.21 4.32 5.72 76 XM_OfRef6 5966 2.18 4.27 0.98 77 T_FILL_THIS_FORM_SHORT 5435 1.86 3.89 0.70 78 SUBJ_ALL_CAPS 5390 2.28 3.86 1.38 79 HTML_IMAGE_RATIO_06 5319 3.30 3.81 3.01 80 XM_H_Long_From01 5266 4.52 3.77 4.95 81 XM_B_Phish_Phrases 5247 3.65 3.76 3.58 82 TR_XM_SpoofStaff 5239 1.45 3.75 0.14 83 XMSpoofStaff2 5190 1.42 3.72 0.12 84 XM_H_SpoofStaff4 5149 1.43 3.69 0.14 85 TR_XM_PSC1 5124 1.41 3.67 0.12 86 T_XMDrugObfuBody_14 5082 2.36 3.64 1.63 87 XMSexyCombo_05 5072 2.36 3.63 1.63 88 XM_B_SEO 5065 1.96 3.63 1.01 89 TR_XM_SpoofStaff2 5045 1.31 3.61 0.00 90 RCVD_IN_VALIDITY_SAFE 4903 6.02 3.51 7.45 91 RCVD_IN_VALIDITY_RPBL 4709 1.32 3.37 0.15 92 XM_UB99 4658 1.21 3.34 0.00 93 XMNumbers 4606 3.34 3.30 3.37 94 TR_XM_SEO4 4441 1.50 3.18 0.54 95 TR_XM_PhishingBody 4420 2.05 3.17 1.41 96 TR_XM_NoHeaderRelay 4239 1.18 3.04 0.13 97 TM2_M_VERY_LONG_WORD 4174 1.95 2.99 1.36 98 TR_XM_BayesRelay 4166 1.08 2.98 0.00 99 TR_LOTS_OF_MONEY3 4096 1.32 2.93 0.41 100 HTML_IMAGE_RATIO_08 4042 2.18 2.90 1.78 101 MIME_HTML_MOSTLY 4023 2.52 2.88 2.32 102 RCVD_IN_VALIDITY_CERTIFIED 3973 4.97 2.85 6.18 103 XM_B_Investor 3901 1.75 2.79 1.16 104 MIME_HTML_ONLY_MULTI 3783 2.13 2.71 1.79 105 FONT_INVIS_LONG_LINE 3749 1.00 2.69 0.04 106 MIME_QP_LONG_LINE 3732 3.81 2.67 4.46 107 SpammyFromTLD_02 3653 1.09 2.62 0.23 108 USER_IN_DEF_DKIM_WL 3407 11.63 2.44 16.87 109 XM_CamelCaseFrm001 3400 2.59 2.44 2.68 110 TR_XM_FormFill 3391 0.90 2.43 0.03 111 XM_URI_RBL 3254 0.96 2.33 0.18 112 SpammyFromTLD_01 3137 1.17 2.25 0.56 113 T_REMOTE_IMAGE 3055 2.63 2.19 2.88 114 RELAYCOUNTRY_AU 2845 0.99 2.04 0.39 115 XMDiploma_00 2811 1.62 2.01 1.39 116 HOSTED_IMG_MULTI_PUB_01 2790 0.74 2.00 0.03 117 T_TooManySym_01 2781 4.94 1.99 6.62 118 DKIM_ADSP_NXDOMAIN 2754 1.15 1.97 0.68 119 T_XMHurry_00 2747 1.32 1.97 0.94 120 XMSubMetaI_00 2671 1.62 1.91 1.45 121 THIS_AD 2647 1.08 1.90 0.62 122 T_XMDrugObfuBody_08 2597 1.63 1.86 1.50 123 XM_B_Unsub2 2566 1.21 1.84 0.85 124 FROM_EXCESS_BASE64 2558 2.08 1.83 2.22 125 TR_XM_INV_DKIM 2544 0.71 1.82 0.07 126 XM_B_SpammyWords4 2454 1.06 1.76 0.65 127 RCVD_IN_PSBL 2417 0.83 1.73 0.31 128 TR_XM_PHPForged 2363 1.09 1.69 0.75 129 XMBrknScrpt_02 2335 1.10 1.67 0.77 130 TR_XM_PHPDW 2314 1.07 1.66 0.74 131 RELAYCOUNTRY_DE 2304 0.87 1.65 0.42 132 XM_UB95 2292 0.60 1.64 0.01 133 TR_Caps_n_Bayes_99 2266 0.61 1.62 0.04 134 FROM_SUSPICIOUS_NTLD 2260 0.61 1.62 0.03 135 ANY_BOUNCE_MESSAGE 2250 4.44 1.61 6.05 136 BOUNCE_MESSAGE 2247 4.44 1.61 6.05 137 TR_XM_FormFill2 2244 1.06 1.61 0.75 138 XM_H_PHPOS 2233 1.05 1.60 0.73 139 TR_Mismatch_TLD_02 2189 0.61 1.57 0.07 140 TR_XM_InvalidRelay 2171 0.58 1.56 0.03 141 XM_UB999 2147 0.56 1.54 0.00 142 FROM_SUSPICIOUS_NTLD_FP 2145 0.57 1.54 0.03 143 LongTLD 2119 0.67 1.52 0.18 144 ALL_TRUSTED 2111 11.46 1.51 17.12 145 HTML_MIME_NO_HTML_TAG 2057 1.38 1.47 1.33 146 AC_BR_BONANZA 2005 0.57 1.44 0.07 147 XM_DrugUnitList 1987 0.52 1.42 0.01 148 URI_TRY_3LD 1973 0.94 1.41 0.67 149 BAYES_40 1919 3.09 1.37 4.07 150 XM_HighProb1 1917 0.50 1.37 0.00 151 XM_DIRTYINTL 1898 0.58 1.36 0.14 152 XM_H_Long_From02 1875 1.08 1.34 0.93 153 DIET_1 1871 0.65 1.34 0.25 154 RELAYCOUNTRY_RU 1862 0.53 1.33 0.07 155 XM_UB80 1846 0.50 1.32 0.02 156 XM_B_COPY_HTML 1820 1.10 1.30 0.99 157 XMStockSpam_06 1778 1.37 1.27 1.42 158 XMPhish30 1772 0.79 1.27 0.51 159 KHOP_HELO_FCRDNS 1767 0.94 1.27 0.75 160 MAILING_LIST_MULTI 1734 2.12 1.24 2.62 161 BOTNET_NORDNS 1724 0.48 1.23 0.04 162 XMSexyCombo_01 1683 0.58 1.21 0.22 163 HK_RANDOM_REPLYTO 1665 0.49 1.19 0.08 164 PDS_OTHER_BAD_TLD 1657 0.51 1.19 0.12 165 XM_BadFromFormat 1633 0.50 1.17 0.12 166 XM_SendGrid 1633 1.37 1.17 1.49 167 HTML_TAG_BALANCE_BODY 1629 0.82 1.17 0.62 168 HTTPS_HTTP_MISMATCH 1592 0.82 1.14 0.64 169 XM_UB60 1571 0.51 1.13 0.15 170 URI_HEX 1561 1.06 1.12 1.02 171 T_STY_INVIS_DIRECT 1555 0.58 1.11 0.28 172 RELAYCOUNTRY_CN 1525 0.47 1.09 0.12 173 XM_DK_Undo_01 1509 1.32 1.08 1.46 174 MPART_ALT_DIFF_COUNT 1485 0.92 1.06 0.84 175 XMReplyNow 1427 0.50 1.02 0.20 176 XMClaimOffer 1393 0.74 1.00 0.59 177 SHOPIFY_IMG_NOT_RCVD_SFY 1388 0.85 0.99 0.76 178 XMBdyGiftCard01 1351 1.09 0.97 1.16 179 XM_H_Undi_Recip 1265 0.46 0.91 0.20 180 TR_Symld_Words 1251 1.23 0.90 1.42 181 BAYES_20 1227 2.11 0.88 2.82 182 T_MONEY_PERCENT 1223 0.51 0.88 0.30 183 TR_LOTS_OF_MONEY2 1223 0.51 0.88 0.30 184 TooManyTo_002 1216 1.85 0.87 2.42 185 XMHTMLBadTable_001 1213 0.51 0.87 0.31 186 DKIM_ADSP_CUSTOM_MED 1207 1.08 0.86 1.21 187 XM_H_PHPMailer 1199 0.78 0.86 0.74 188 T_XMDrugObfuBody_00 1192 0.72 0.85 0.65 189 TO_IN_SUBJ 1189 0.38 0.85 0.11 190 RDNS_DYNAMIC 1188 0.49 0.85 0.28 191 URIBL_DBL_SPAM 1180 0.32 0.85 0.01 192 URI_TRUNCATED 1160 0.38 0.83 0.13 193 PLING_QUERY 1156 0.56 0.83 0.41 194 TM2_M_OBFU_COMMENT 1133 0.56 0.81 0.41 195 XM_OfRef7 1126 0.39 0.81 0.15 196 XM_ProductURIs 1113 0.69 0.80 0.63 197 XMHTML_After_End 1095 0.59 0.78 0.47 198 TooManyTo_003 1093 1.03 0.78 1.16 199 TR_XM_Undi_Recip19 1075 0.33 0.77 0.08 200 TR_XM_Base64_M1 1067 0.86 0.76 0.91 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 243923 99.66 99.81 99.57 2 HTML_MESSAGE 203048 87.89 96.66 82.88 3 RELAYCOUNTRY_US 192634 76.91 73.90 78.63 4 DKIM_SIGNED 186919 79.03 83.83 76.30 5 XM_DK_Pass 183647 76.63 79.57 74.96 6 DKIM_VALID 182251 75.93 78.63 74.39 7 XM_B_Unicode 177011 77.08 85.54 72.25 8 DKIM_VALID_AU 153579 61.13 58.38 62.69 9 DCC_CHECK_NEGATIVE 152799 50.64 30.05 62.37 10 BAYES_50 142605 49.88 35.26 58.21 11 XMListUnsubscribeExists 137236 60.20 67.54 56.02 12 XM_B_SpammyWords 108369 53.12 68.71 44.24 13 XM_B_Unicode3 107603 43.79 43.56 43.92 14 DCC_CHECK 92138 49.34 69.94 37.61 15 HTML_FONT_LOW_CONTRAST 77858 32.33 33.28 31.78 16 RCVD_IN_MSPIKE_H2 75897 31.11 31.33 30.98 17 LOC_TINY_FONT_1 72310 32.89 38.82 29.52 18 DKIM_VALID_EF 71137 28.41 27.32 29.04 19 FVGT_m_MULTI_ODD 66335 28.18 30.13 27.08 20 T_TM2_M_HEADER_IN_MSG 58043 24.07 24.74 23.69 21 XMSubLong 53389 22.24 23.02 21.79 22 T_KAM_HTML_FONT_INVALID 50778 22.37 25.25 20.73 23 XM_B_SpammyWords2 48972 26.55 38.07 19.99 24 MIME_HTML_ONLY 46563 23.29 30.81 19.01 25 ALL_TRUSTED 41952 11.46 1.51 17.12 26 USER_IN_DEF_DKIM_WL 41338 11.63 2.44 16.87 27 TR_XM_DK_Unsub 39423 17.64 20.35 16.09 28 XM_Multi_Part_URI 38135 16.18 17.27 15.57 29 UNPARSEABLE_RELAY 30438 13.49 15.36 12.42 30 BAYES_60 28016 10.20 8.03 11.44 31 XM_DKIMWhitelistDomains 22314 5.82 0.05 9.11 32 XM_Evil_Numbers_Gen 21289 8.19 7.31 8.69 33 TR_MAX_INTL_RELAY 20499 12.19 18.89 8.37 34 LotsOfNums_01 19709 6.84 4.71 8.05 35 TooManyTo_001 19372 6.94 5.23 7.91 36 XM_B_Unsub 18746 10.26 14.83 7.65 37 RCVD_IN_VALIDITY_SAFE 18244 6.02 3.51 7.45 38 BAYES_00 17104 4.62 0.48 6.98 39 XM_H_GMP 17081 6.11 4.60 6.97 40 T_TooManySym_01 16216 4.94 1.99 6.62 41 TR_XM_BayesUnsub 15999 9.33 14.23 6.53 42 XM_DK_Undo_02 15811 19.99 43.75 6.45 43 RCVD_IN_VALIDITY_CERTIFIED 15140 4.97 2.85 6.18 44 ANY_BOUNCE_MESSAGE 14830 4.44 1.61 6.05 45 BOUNCE_MESSAGE 14829 4.44 1.61 6.05 46 RCVD_IN_MSPIKE_H3 14305 6.69 8.18 5.84 47 RCVD_IN_MSPIKE_WL 14305 6.69 8.18 5.84 48 BAYES_99 14075 17.32 37.64 5.75 49 XMStrtUSub 14019 5.21 4.32 5.72 50 TR_XM_DK_Bayes 13692 3.71 0.41 5.59 51 TR_XM_DK_Bayes1 13590 3.68 0.40 5.55 52 HTML_IMAGE_RATIO_02 13133 5.97 7.04 5.36 53 BAYES_80 12835 6.76 9.43 5.24 54 IN_ZIMBRA_NJ_WHITELIST 12626 3.31 0.06 5.15 55 LOTS_OF_MONEY 12290 7.17 10.94 5.02 56 XM_H_Long_From01 12128 4.52 3.77 4.95 57 TR_XM_DK_Bayes2 11985 3.24 0.34 4.89 58 XM_B_SpammyWords3 11592 7.36 11.98 4.73 59 RELAYCOUNTRY_META 11365 12.60 26.57 4.64 60 BOTNET_IPINHOSTNAME 11274 7.56 12.75 4.60 61 MIME_QP_LONG_LINE 10920 3.81 2.67 4.46 62 BAYES_999 10790 13.27 28.82 4.40 63 XM_UncommonTLD01 10203 4.98 6.41 4.16 64 BAYES_40 9977 3.09 1.37 4.07 65 HTML_IMAGE_RATIO_04 9898 4.42 5.09 4.04 66 FSL_BULK_SIG 9566 6.24 10.33 3.90 67 XM_B_SpammyTLD 9061 5.53 8.75 3.70 68 TR_XM_SpammyWords4 9042 5.90 9.77 3.69 69 SCC_BODY_URI_ONLY 8849 2.55 0.68 3.61 70 XM_B_Phish_Phrases 8774 3.65 3.76 3.58 71 XMSubMetaSx_00 8290 3.91 4.83 3.38 72 XMNumbers 8256 3.34 3.30 3.37 73 MPART_ALT_DIFF 7974 4.07 5.51 3.25 74 T_TooManySym_02 7704 2.22 0.59 3.14 75 RCVD_IN_IADB_LISTED 7698 2.26 0.71 3.14 76 BAYES_95 7660 4.36 6.51 3.13 77 HTML_IMAGE_RATIO_06 7382 3.30 3.81 3.01 78 XM_SPF_SoftFail 7234 3.76 5.18 2.95 79 XM_Body_Dirty_Words 7197 4.04 5.97 2.94 80 T_REMOTE_IMAGE 7048 2.63 2.19 2.88 81 TO_MALFORMED 6940 1.82 0.04 2.83 82 BAYES_20 6901 2.11 0.88 2.82 83 RCVD_IN_IADB_SPF 6878 2.02 0.64 2.81 84 INVALID_MSGID 6565 1.74 0.10 2.68 85 XM_CamelCaseFrm001 6560 2.59 2.44 2.68 86 MAILING_LIST_MULTI 6416 2.12 1.24 2.62 87 TR_XM_SpammyRelay 6326 7.83 17.05 2.58 88 RCVD_IN_IADB_SENDERID 6244 1.84 0.61 2.55 89 TR_XM_DKIM_Undo 6136 13.62 33.12 2.50 90 RCVD_IN_IADB_DK 6064 1.80 0.61 2.48 91 TM2_M_URI_OPT_OUT 6007 3.22 4.58 2.45 92 TooManyTo_002 5918 1.85 0.87 2.42 93 BAYES_05 5809 1.65 0.39 2.37 94 XM_PDF 5808 1.66 0.41 2.37 95 MIME_HTML_MOSTLY 5684 2.52 2.88 2.32 96 FROM_EXCESS_BASE64 5447 2.08 1.83 2.22 97 TR_XM_UnparsRelay 5252 4.47 8.54 2.14 98 UNTRUSTED_Relay 5187 6.26 13.53 2.12 99 RCVD_IN_IADB_VOUCHED 5031 1.42 0.31 2.05 100 TVD_RCVD_IP 4710 1.50 0.76 1.92 101 DKIM_INVALID 4668 3.10 5.21 1.91 102 TR_DCC_Bayes_99 4478 10.36 25.33 1.83 103 MIME_HTML_ONLY_MULTI 4396 2.13 2.71 1.79 104 HTML_IMAGE_RATIO_08 4360 2.18 2.90 1.78 105 RELAYCOUNTRY_CA 4196 4.60 9.66 1.71 106 T_XMDrugObfuBody_14 3991 2.36 3.64 1.63 107 XMSexyCombo_05 3989 2.36 3.63 1.63 108 XMBSHREFv2 3913 1.10 0.23 1.60 109 IN_HORDE_ADDRESS_BOOK 3873 1.02 0.05 1.58 110 RCVD_IN_IADB_OPTIN 3733 1.05 0.23 1.52 111 T_XMDrugObfuBody_08 3670 1.63 1.86 1.50 112 TR_XM_SpammyWords5 3662 2.69 4.78 1.49 113 XM_SendGrid 3641 1.37 1.17 1.49 114 TVD_SPACE_RATIO 3617 0.97 0.07 1.48 115 XM_DK_Undo_01 3579 1.32 1.08 1.46 116 XMSubMetaI_00 3542 1.62 1.91 1.45 117 XMStockSpam_06 3479 1.37 1.27 1.42 118 TR_Symld_Words 3469 1.23 0.90 1.42 119 TR_XM_PhishingBody 3451 2.05 3.17 1.41 120 XMDiploma_00 3409 1.62 2.01 1.39 121 SUBJ_ALL_CAPS 3389 2.28 3.86 1.38 122 TM2_M_VERY_LONG_WORD 3327 1.95 2.99 1.36 123 HTML_MIME_NO_HTML_TAG 3255 1.38 1.47 1.33 124 XM_GoogleGroups 3170 1.05 0.62 1.29 125 DKIM_ADSP_CUSTOM_MED 2958 1.08 0.86 1.21 126 XM_UB50 2956 2.88 5.82 1.21 127 XMGappySubj_01 2914 0.80 0.12 1.19 128 URI_NOVOWEL 2873 1.00 0.70 1.17 129 TooManyTo_003 2854 1.03 0.78 1.16 130 XMBdyGiftCard01 2831 1.09 0.97 1.16 131 XM_B_Investor 2830 1.75 2.79 1.16 132 T_TooManySym_03 2732 0.79 0.23 1.12 133 URI_HEX 2509 1.06 1.12 1.02 134 XM_B_SEO 2483 1.96 3.63 1.01 135 BOTNET 2461 4.00 9.27 1.00 136 XM_RXBody 2443 0.76 0.34 1.00 137 XM_B_COPY_HTML 2420 1.10 1.30 0.99 138 XM_B_FormFill 2416 0.65 0.06 0.99 139 XM_OfRef6 2412 2.18 4.27 0.98 140 T_XMHurry_00 2312 1.32 1.97 0.94 141 TooManyTo_004 2299 0.87 0.75 0.94 142 XM_H_Long_From02 2290 1.08 1.34 0.93 143 TR_XM_DK_SendGrid 2278 0.86 0.73 0.93 144 TR_XM_Base64_M1 2238 0.86 0.76 0.91 145 XMGappySubj_02 2185 0.58 0.04 0.89 146 XM_B_DNDMA 2152 0.79 0.64 0.88 147 NML_ADSP_CUSTOM_MED 2093 0.81 0.74 0.85 148 XMBody_17 2091 3.08 6.99 0.85 149 XM_B_Unsub2 2084 1.21 1.84 0.85 150 XMBody_95 2075 0.58 0.12 0.85 151 MPART_ALT_DIFF_COUNT 2066 0.92 1.06 0.84 152 FORGED_GMAIL_RCVD 2013 0.78 0.69 0.82 153 TooManyTo_005 1963 0.77 0.72 0.80 154 XMBrknScrpt_02 1888 1.10 1.67 0.77 155 SHOPIFY_IMG_NOT_RCVD_SFY 1864 0.85 0.99 0.76 156 TR_XM_PHPForged 1845 1.09 1.69 0.75 157 TR_XM_FormFill2 1843 1.06 1.61 0.75 158 KHOP_HELO_FCRDNS 1841 0.94 1.27 0.75 159 XM_H_PHPMailer 1810 0.78 0.86 0.74 160 TR_XM_PHPDW 1804 1.07 1.66 0.74 161 XM_H_PHPOS 1790 1.05 1.60 0.73 162 RCVD_IN_BL_SPAMCOP_NET 1722 5.56 14.09 0.70 163 FILL_THIS_FORM 1720 0.57 0.35 0.70 164 T_FILL_THIS_FORM_SHORT 1707 1.86 3.89 0.70 165 DKIM_ADSP_NXDOMAIN 1655 1.15 1.97 0.68 166 URI_TRY_3LD 1642 0.94 1.41 0.67 167 XM_B_SpammyWords4 1604 1.06 1.76 0.65 168 TR_XM_SpammyWords2 1595 5.76 14.73 0.65 169 T_XMDrugObfuBody_00 1591 0.72 0.85 0.65 170 XMSubMetaSxObfu_02 1559 0.47 0.17 0.64 171 HTTPS_HTTP_MISMATCH 1558 0.82 1.14 0.64 172 USER_IN_WHITELIST 1545 0.40 0.00 0.63 173 USER_IN_WELCOMELIST 1545 0.40 0.00 0.63 174 XMLngstWrd_00 1541 0.58 0.50 0.63 175 XM_ProductURIs 1540 0.69 0.80 0.63 176 HTML_TAG_BALANCE_BODY 1528 0.82 1.17 0.62 177 THIS_AD 1518 1.08 1.90 0.62 178 XM_Body_Dirty_Words_01 1489 0.49 0.27 0.61 179 NO_DNS_FOR_FROM 1462 0.60 0.62 0.60 180 XMClaimOffer 1443 0.74 1.00 0.59 181 SpammyFromTLD_01 1366 1.17 2.25 0.56 182 XMNoVowels 1322 0.58 0.65 0.54 183 TR_XM_SEO4 1322 1.50 3.18 0.54 184 TR_MetaPhish_Combo_01 1316 1.94 4.41 0.54 185 XMGenDplmaNmb 1293 0.56 0.63 0.53 186 HELO_NODOT 1291 0.44 0.30 0.53 187 HELO_NO_DOMAIN 1291 0.44 0.30 0.53 188 HTML_FONT_FACE_BAD 1263 0.60 0.74 0.52 189 XMPhish30 1257 0.79 1.27 0.51 190 T_OBFU_PDF_ATTACH 1228 0.37 0.13 0.50 191 TR_XM_MaxWHORU 1220 0.53 0.60 0.50 192 FILL_THIS_FORM_LONG 1217 0.41 0.25 0.50 193 HTML_IMAGE_ONLY_32 1206 0.38 0.19 0.49 194 XMHTML_After_End 1157 0.59 0.78 0.47 195 TR_XM_SPAMCOP 1126 4.51 11.62 0.46 196 XMCapTrack 1094 0.38 0.28 0.45 197 XM_ShortIntro_01 1041 0.47 0.54 0.42 198 T_TooManySym_04 1027 0.31 0.12 0.42 199 RELAYCOUNTRY_DE 1023 0.87 1.65 0.42 200 PLING_QUERY 1008 0.56 0.83 0.41 ----------------------------------------------------------------------