Email: 301036 Autolearn: 0 AvgScore: 5.12 AvgScanTime: 1.12 sec Spam: 113958 Autolearn: 0 AvgScore: 14.04 AvgScanTime: 1.13 sec Ham: 187078 Autolearn: 0 AvgScore: -0.31 AvgScanTime: 1.10 sec Time Spent Running SA: 93.32 hours Time Spent Processing Spam: 35.92 hours Time Spent Processing Ham: 57.40 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 113789 99.76 99.85 99.71 2 HTML_MESSAGE 108463 88.18 95.18 83.92 3 DKIM_SIGNED 101866 81.86 89.39 77.27 4 XM_DK_Pass 98040 80.01 86.03 76.34 5 XM_B_Unicode 97356 77.98 85.43 73.43 6 DKIM_VALID 96865 79.27 85.00 75.78 7 RELAYCOUNTRY_US 86703 78.09 76.08 79.32 8 XMListUnsubscribeExists 86103 64.25 75.56 57.36 9 XM_B_SpammyWords 85810 57.84 75.30 47.20 10 DCC_CHECK 82836 53.01 72.69 41.02 11 DKIM_VALID_AU 74600 65.68 65.46 65.82 12 XM_DK_Undo_02 55213 22.29 48.45 6.35 13 XM_B_SpammyWords2 53185 31.25 46.67 21.86 14 XM_B_Unicode3 47787 44.57 41.93 46.18 15 BAYES_99 47225 19.73 41.44 6.51 16 TR_XM_DKIM_Undo 43399 16.28 38.08 2.99 17 LOC_TINY_FONT_1 42217 33.74 37.05 31.73 18 HTML_FONT_LOW_CONTRAST 40138 34.39 35.22 33.89 19 BAYES_999 37874 15.61 33.24 4.87 20 RCVD_IN_MSPIKE_H2 37785 32.14 33.16 31.53 21 FVGT_m_MULTI_ODD 36716 30.35 32.22 29.21 22 BAYES_50 36342 48.43 31.89 58.50 23 T_KAM_HTML_FONT_INVALID 34713 25.10 30.46 21.83 24 TR_DCC_Bayes_99 32931 12.35 28.90 2.26 25 DKIM_VALID_EF 31933 28.45 28.02 28.71 26 DCC_CHECK_NEGATIVE 31097 46.97 27.29 58.96 27 MIME_HTML_ONLY 30263 22.44 26.56 19.93 28 TR_XM_DK_Unsub 25466 18.34 22.35 15.90 29 T_TM2_M_HEADER_IN_MSG 25402 22.94 22.29 23.34 30 RELAYCOUNTRY_META 24895 10.69 21.85 3.90 31 XMSubLong 22364 22.69 19.62 24.56 32 TR_XM_SpammyWords2 21857 7.80 19.18 0.86 33 XM_Multi_Part_URI 20631 16.84 18.10 16.07 34 TR_XM_SpammyRelay 19354 7.94 16.98 2.43 35 TR_MAX_INTL_RELAY 17699 11.02 15.53 8.27 36 XM_B_SpammyWords3 17516 9.81 15.37 6.42 37 LOTS_OF_MONEY 16766 9.80 14.71 6.80 38 RCVD_IN_BL_SPAMCOP_NET 16119 5.82 14.14 0.75 39 XM_B_Unsub 15270 10.67 13.40 9.00 40 TR_XM_SpammyWords4 15263 8.26 13.39 5.13 41 TR_XM_BayesUnsub 14706 9.68 12.90 7.72 42 BOTNET_IPINHOSTNAME 14515 8.00 12.74 5.12 43 TR_XM_SPAMCOP 14507 5.13 12.73 0.51 44 RELAYCOUNTRY_CA 14358 5.81 12.60 1.68 45 UNPARSEABLE_RELAY 13076 11.78 11.47 11.97 46 XMBody_17 12487 4.92 10.96 1.24 47 BAYES_80 10810 6.63 9.49 4.89 48 RCVD_IN_MSPIKE_WL 10747 7.07 9.43 5.63 49 RCVD_IN_MSPIKE_H3 10747 7.07 9.43 5.63 50 BAYES_60 9557 10.56 8.39 11.89 51 BOTNET 9536 3.86 8.37 1.11 52 XM_Body_Dirty_Words 7647 4.33 6.71 2.88 53 FSL_BULK_SIG 7499 4.39 6.58 3.05 54 TR_XM_UnparsRelay 7478 3.69 6.56 1.95 55 UNTRUSTED_Relay 7439 3.57 6.53 1.76 56 XMSubMetaSx_00 7255 5.58 6.37 5.11 57 HTML_IMAGE_RATIO_02 7165 6.53 6.29 6.68 58 MPART_ALT_DIFF 7127 4.73 6.25 3.81 59 TooManyTo_001 7061 6.03 6.20 5.93 60 XM_Evil_Numbers_Gen 7059 7.60 6.19 8.46 61 T_FILL_THIS_FORM_SHORT 6537 2.81 5.74 1.03 62 BAYES_95 6459 4.24 5.67 3.37 63 XM_UncommonTLD01 6204 5.07 5.44 4.85 64 LotsOfNums_01 6199 6.64 5.44 7.37 65 XM_H_GMP 6182 6.76 5.42 7.58 66 XM_OfRef6 6149 2.57 5.40 0.84 67 XM_SPF_SoftFail 5764 3.53 5.06 2.59 68 TR_LOTS_OF_MONEY3 5419 2.27 4.76 0.76 69 FONT_INVIS_LONG_LINE 5242 1.81 4.60 0.10 70 HTML_IMAGE_RATIO_04 5004 4.46 4.39 4.50 71 DKIM_INVALID 5001 2.59 4.39 1.49 72 XM_B_Investor 4981 2.48 4.37 1.33 73 HK_RANDOM_REPLYTO 4950 1.71 4.34 0.10 74 RCVD_IN_VALIDITY_RPBL 4896 1.75 4.30 0.20 75 XM_B_Phish_Phrases 4890 4.51 4.29 4.65 76 TR_XM_SpammyWords5 4789 2.50 4.20 1.46 77 MIME_HTML_MOSTLY 4760 3.30 4.18 2.77 78 HTML_IMAGE_RATIO_08 4718 3.35 4.14 2.86 79 XMSexyCombo_05 4684 3.12 4.11 2.51 80 HTML_IMAGE_RATIO_06 4287 3.34 3.76 3.09 81 XM_H_Long_From01 4249 4.92 3.73 5.64 82 TR_XM_PhishingBody 4229 2.49 3.71 1.74 83 RCVD_IN_VALIDITY_SAFE 4204 6.66 3.69 8.48 84 XMStrtUSub 4141 4.86 3.63 5.61 85 T_XMDrugObfuBody_14 4140 2.72 3.63 2.16 86 XM_B_SEO 4110 2.11 3.61 1.20 87 USER_IN_DEF_DKIM_WL 4067 13.42 3.57 19.42 88 ALL_TRUSTED 3919 11.82 3.44 16.92 89 TR_XM_FormFill 3809 1.57 3.34 0.49 90 SUBJ_ALL_CAPS 3746 1.82 3.29 0.92 91 TR_XM_SEO4 3737 1.67 3.28 0.69 92 XM_CamelCaseFrm001 3724 3.77 3.27 4.08 93 TR_XM_BayesRelay 3666 1.22 3.22 0.00 94 T_XMHurry_00 3515 1.54 3.08 0.60 95 XM_UB50 3462 1.76 3.04 0.97 96 T_XMDrugObfuBody_08 3410 1.95 2.99 1.31 97 TM2_M_VERY_LONG_WORD 3399 2.09 2.98 1.55 98 RCVD_IN_VALIDITY_CERTIFIED 3309 5.64 2.90 7.30 99 XMNumbers 3243 3.38 2.85 3.70 100 XMBrknScrpt_02 3240 1.76 2.84 1.10 101 MIME_HTML_ONLY_MULTI 3207 2.25 2.81 1.90 102 HOSTED_IMG_MULTI_PUB_01 3197 1.08 2.81 0.03 103 XM_B_SpammyTLD 3184 2.56 2.79 2.41 104 XM_URI_RBL 3112 1.16 2.73 0.20 105 TM2_M_URI_OPT_OUT 2974 2.13 2.61 1.84 106 T_TooManySym_01 2921 5.05 2.56 6.57 107 MIME_QP_LONG_LINE 2874 2.90 2.52 3.12 108 XM_B_SpammyWords4 2608 1.41 2.29 0.87 109 RELAYCOUNTRY_AU 2527 1.10 2.22 0.42 110 TR_XM_PHPForged 2450 0.98 2.15 0.26 111 TR_XM_PHPDW 2434 0.96 2.14 0.25 112 SpammyFromTLD_01 2401 1.17 2.11 0.60 113 TR_XM_NoHeaderRelay 2387 0.86 2.09 0.11 114 TR_XM_FormFill2 2376 0.94 2.08 0.25 115 XM_H_PHPOS 2344 0.92 2.06 0.23 116 TR_XM_INV_DKIM 2340 0.82 2.05 0.07 117 XM_B_Unsub2 2337 1.61 2.05 1.34 118 URI_TRY_3LD 2329 1.42 2.04 1.04 119 DKIM_ADSP_NXDOMAIN 2290 1.04 2.01 0.45 120 XMDiploma_00 2287 1.67 2.01 1.46 121 ANY_BOUNCE_MESSAGE 2249 2.75 1.97 3.23 122 BOUNCE_MESSAGE 2248 2.75 1.97 3.23 123 T_REMOTE_IMAGE 2162 2.50 1.90 2.87 124 HTTPS_HTTP_MISMATCH 2154 1.05 1.89 0.53 125 URIBL_DBL_SPAM 2044 0.69 1.79 0.02 126 TR_XM_InvalidRelay 1958 0.67 1.72 0.03 127 DKIM_ADSP_CUSTOM_MED 1956 1.16 1.72 0.81 128 XMStockSpam_06 1919 1.67 1.68 1.65 129 XMReplyNow 1893 0.82 1.66 0.31 130 NML_ADSP_CUSTOM_MED 1879 0.94 1.65 0.51 131 XM_DIRTYINTL 1872 0.70 1.64 0.12 132 AC_BR_BONANZA 1850 0.70 1.62 0.14 133 XMSexyCombo_01 1835 0.81 1.61 0.32 134 SpammyFromTLD_02 1822 0.73 1.60 0.20 135 TR_Mismatch_TLD_02 1810 0.63 1.59 0.05 136 XM_HighProb1 1787 0.60 1.57 0.00 137 HTML_TAG_BALANCE_BODY 1640 1.00 1.44 0.74 138 TR_Caps_n_Bayes_99 1633 0.58 1.43 0.05 139 FROM_EXCESS_BASE64 1628 2.08 1.43 2.48 140 KHOP_HELO_FCRDNS 1610 0.98 1.41 0.72 141 TR_Symld_Words 1609 1.30 1.41 1.24 142 MY_SERVERS_FOUND 1591 1.71 1.40 1.91 143 FORGED_GMAIL_RCVD 1590 0.84 1.40 0.50 144 BAYES_40 1510 2.80 1.33 3.70 145 BOTNET_NORDNS 1501 0.50 1.32 0.01 146 TR_Mismatch_TLD_01 1467 0.65 1.29 0.26 147 XM_SendGrid 1445 1.26 1.27 1.26 148 XM_UB60 1442 0.52 1.27 0.07 149 PLING_QUERY 1358 0.91 1.19 0.74 150 XMPhish30 1332 0.83 1.17 0.63 151 AC_HTML_NONSENSE_TAGS 1323 0.46 1.16 0.03 152 TooManyTo_002 1304 1.40 1.14 1.56 153 THIS_AD 1296 0.82 1.14 0.63 154 RDNS_DYNAMIC 1275 0.64 1.12 0.34 155 MAILING_LIST_MULTI 1270 1.81 1.11 2.24 156 T_STY_INVIS_DIRECT 1259 0.73 1.10 0.50 157 XM_B_Phish66 1229 0.56 1.08 0.24 158 TooManyTo_003 1227 1.00 1.08 0.95 159 XM_H_PHPMailer 1206 0.89 1.06 0.79 160 TooManyTo_004 1173 0.86 1.03 0.76 161 XMClaimOffer 1154 0.60 1.01 0.35 162 TooManyTo_005 1147 0.78 1.01 0.64 163 MPART_ALT_DIFF_COUNT 1142 0.96 1.00 0.94 164 XM_H_Long_From02 1140 1.11 1.00 1.17 165 HTML_MIME_NO_HTML_TAG 1131 1.24 0.99 1.40 166 TVD_RCVD_IP 1124 1.79 0.99 2.28 167 XMBdyGiftCard01 1122 1.30 0.98 1.48 168 T_XMDrugObfuBody_00 1105 1.27 0.97 1.46 169 URI_HEX 1091 1.23 0.96 1.40 170 XMNoVowels 1087 0.70 0.95 0.55 171 XM_DK_Undo_01 1082 1.34 0.95 1.59 172 XMSexyCombo_04 1067 0.49 0.94 0.22 173 T_TooManySym_02 1063 2.66 0.93 3.71 174 XM_OfRef7 1048 0.44 0.92 0.14 175 TR_XM_DK_SendGrid 1045 0.91 0.92 0.90 176 MIME_CHARSET_FARAWAY 1035 0.58 0.91 0.38 177 XMSubMetaI_00 1031 0.78 0.90 0.71 178 T_MONEY_PERCENT 1031 0.57 0.90 0.36 179 TR_LOTS_OF_MONEY2 1031 0.57 0.90 0.36 180 HTML_FONT_FACE_BAD 1026 0.66 0.90 0.51 181 BAYES_20 1021 1.97 0.90 2.62 182 XMBounce_01 1011 0.34 0.89 0.01 183 XM_UB99 1010 0.34 0.89 0.00 184 DIET_1 1008 0.70 0.88 0.59 185 T_XMDrugObfuBody_10 1000 0.34 0.88 0.02 186 XM_B_COPY_HTML 986 1.12 0.87 1.27 187 XM_UB80 979 0.34 0.86 0.02 188 RCVD_IN_PSBL 969 0.76 0.85 0.71 189 URG_BIZ 968 0.35 0.85 0.05 190 XMHTML_After_End 934 0.44 0.82 0.21 191 XMPhish14 934 0.62 0.82 0.50 192 TR_Sbj_FN_Bdy 931 0.39 0.82 0.13 193 PDS_OTHER_BAD_TLD 918 0.38 0.81 0.13 194 HELO_DYNAMIC_SPLIT_IP 917 0.31 0.80 0.01 195 LongTLD 908 0.47 0.80 0.27 196 RELAYCOUNTRY_CN 902 0.36 0.79 0.09 197 LOADSA_MONEY_COMBO 889 0.32 0.78 0.04 198 XMHTMLBadTable_001 882 0.50 0.77 0.33 199 XMSlimDrugH 874 0.44 0.77 0.25 200 SHOPIFY_IMG_NOT_RCVD_SFY 863 0.66 0.76 0.61 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 186531 99.76 99.85 99.71 2 HTML_MESSAGE 156987 88.18 95.18 83.92 3 RELAYCOUNTRY_US 148381 78.09 76.08 79.32 4 DKIM_SIGNED 144557 81.86 89.39 77.27 5 XM_DK_Pass 142816 80.01 86.03 76.34 6 DKIM_VALID 141764 79.27 85.00 75.78 7 XM_B_Unicode 137380 77.98 85.43 73.43 8 DKIM_VALID_AU 123134 65.68 65.46 65.82 9 DCC_CHECK_NEGATIVE 110299 46.97 27.29 58.96 10 BAYES_50 109439 48.43 31.89 58.50 11 XMListUnsubscribeExists 107310 64.25 75.56 57.36 12 XM_B_SpammyWords 88309 57.84 75.30 47.20 13 XM_B_Unicode3 86391 44.57 41.93 46.18 14 DCC_CHECK 76734 53.01 72.69 41.02 15 HTML_FONT_LOW_CONTRAST 63401 34.39 35.22 33.89 16 LOC_TINY_FONT_1 59352 33.74 37.05 31.73 17 RCVD_IN_MSPIKE_H2 58981 32.14 33.16 31.53 18 FVGT_m_MULTI_ODD 54640 30.35 32.22 29.21 19 DKIM_VALID_EF 53715 28.45 28.02 28.71 20 XMSubLong 45942 22.69 19.62 24.56 21 T_TM2_M_HEADER_IN_MSG 43668 22.94 22.29 23.34 22 XM_B_SpammyWords2 40902 31.25 46.67 21.86 23 T_KAM_HTML_FONT_INVALID 40844 25.10 30.46 21.83 24 MIME_HTML_ONLY 37283 22.44 26.56 19.93 25 USER_IN_DEF_DKIM_WL 36335 13.42 3.57 19.42 26 ALL_TRUSTED 31659 11.82 3.44 16.92 27 XM_Multi_Part_URI 30064 16.84 18.10 16.07 28 TR_XM_DK_Unsub 29751 18.34 22.35 15.90 29 UNPARSEABLE_RELAY 22396 11.78 11.47 11.97 30 BAYES_60 22242 10.56 8.39 11.89 31 XM_DKIMWhitelistDomains 20073 6.67 0.01 10.73 32 XM_B_Unsub 16836 10.67 13.40 9.00 33 RCVD_IN_VALIDITY_SAFE 15855 6.66 3.69 8.48 34 XM_Evil_Numbers_Gen 15828 7.60 6.19 8.46 35 TR_MAX_INTL_RELAY 15466 11.02 15.53 8.27 36 TR_XM_BayesUnsub 14439 9.68 12.90 7.72 37 XM_H_GMP 14174 6.76 5.42 7.58 38 LotsOfNums_01 13793 6.64 5.44 7.37 39 RCVD_IN_VALIDITY_CERTIFIED 13659 5.64 2.90 7.30 40 BAYES_00 13297 4.58 0.44 7.11 41 LOTS_OF_MONEY 12722 9.80 14.71 6.80 42 HTML_IMAGE_RATIO_02 12502 6.53 6.29 6.68 43 T_TooManySym_01 12286 5.05 2.56 6.57 44 BAYES_99 12175 19.73 41.44 6.51 45 XM_B_SpammyWords3 12005 9.81 15.37 6.42 46 XM_DK_Undo_02 11887 22.29 48.45 6.35 47 TR_XM_DK_Bayes 11226 3.86 0.33 6.00 48 TR_XM_DK_Bayes1 11132 3.81 0.31 5.95 49 TooManyTo_001 11101 6.03 6.20 5.93 50 XM_H_Long_From01 10550 4.92 3.73 5.64 51 RCVD_IN_MSPIKE_WL 10525 7.07 9.43 5.63 52 RCVD_IN_MSPIKE_H3 10525 7.07 9.43 5.63 53 XMStrtUSub 10486 4.86 3.63 5.61 54 TR_XM_DK_Bayes2 10020 3.43 0.26 5.36 55 IN_ZIMBRA_NJ_WHITELIST 9856 3.30 0.06 5.27 56 TR_XM_SpammyWords4 9600 8.26 13.39 5.13 57 BOTNET_IPINHOSTNAME 9570 8.00 12.74 5.12 58 XMSubMetaSx_00 9551 5.58 6.37 5.11 59 BAYES_80 9153 6.63 9.49 4.89 60 BAYES_999 9112 15.61 33.24 4.87 61 XM_UncommonTLD01 9066 5.07 5.44 4.85 62 XM_B_Phish_Phrases 8701 4.51 4.29 4.65 63 HTML_IMAGE_RATIO_04 8421 4.46 4.39 4.50 64 XM_CamelCaseFrm001 7640 3.77 3.27 4.08 65 RELAYCOUNTRY_META 7288 10.69 21.85 3.90 66 MPART_ALT_DIFF 7120 4.73 6.25 3.81 67 T_TooManySym_02 6945 2.66 0.93 3.71 68 BAYES_40 6928 2.80 1.33 3.70 69 XMNumbers 6919 3.38 2.85 3.70 70 INVALID_MSGID 6776 2.34 0.23 3.62 71 TO_MALFORMED 6705 2.23 0.02 3.58 72 BAYES_95 6309 4.24 5.67 3.37 73 ANY_BOUNCE_MESSAGE 6042 2.75 1.97 3.23 74 BOUNCE_MESSAGE 6041 2.75 1.97 3.23 75 MIME_QP_LONG_LINE 5842 2.90 2.52 3.12 76 HTML_IMAGE_RATIO_06 5781 3.34 3.76 3.09 77 FSL_BULK_SIG 5710 4.39 6.58 3.05 78 TR_XM_DKIM_Undo 5596 16.28 38.08 2.99 79 XM_Body_Dirty_Words 5393 4.33 6.71 2.88 80 T_REMOTE_IMAGE 5366 2.50 1.90 2.87 81 HTML_IMAGE_RATIO_08 5354 3.35 4.14 2.86 82 SCC_BODY_URI_ONLY 5340 2.05 0.72 2.85 83 MIME_HTML_MOSTLY 5180 3.30 4.18 2.77 84 BAYES_20 4895 1.97 0.90 2.62 85 XM_SPF_SoftFail 4854 3.53 5.06 2.59 86 XMSexyCombo_05 4699 3.12 4.11 2.51 87 FROM_EXCESS_BASE64 4643 2.08 1.43 2.48 88 TR_XM_SpammyRelay 4549 7.94 16.98 2.43 89 XM_B_SpammyTLD 4508 2.56 2.79 2.41 90 TVD_RCVD_IP 4265 1.79 0.99 2.28 91 TR_DCC_Bayes_99 4237 12.35 28.90 2.26 92 MAILING_LIST_MULTI 4190 1.81 1.11 2.24 93 XM_PDF 4039 1.43 0.23 2.16 94 T_XMDrugObfuBody_14 4036 2.72 3.63 2.16 95 RCVD_IN_IADB_LISTED 3904 1.53 0.61 2.09 96 TR_XM_UnparsRelay 3645 3.69 6.56 1.95 97 MY_SERVERS_FOUND 3569 1.71 1.40 1.91 98 MIME_HTML_ONLY_MULTI 3562 2.25 2.81 1.90 99 RCVD_IN_IADB_SPF 3459 1.36 0.56 1.85 100 TM2_M_URI_OPT_OUT 3433 2.13 2.61 1.84 101 XMBSHREFv2 3398 1.20 0.20 1.82 102 UNTRUSTED_Relay 3301 3.57 6.53 1.76 103 TR_XM_PhishingBody 3257 2.49 3.71 1.74 104 RCVD_IN_IADB_SENDERID 3143 1.24 0.52 1.68 105 RELAYCOUNTRY_CA 3137 5.81 12.60 1.68 106 TVD_SPACE_RATIO 3116 1.07 0.08 1.67 107 XMStockSpam_06 3095 1.67 1.68 1.65 108 RCVD_IN_IADB_DK 3092 1.23 0.54 1.65 109 IN_HORDE_ADDRESS_BOOK 3027 1.02 0.04 1.62 110 XM_DK_Undo_01 2966 1.34 0.95 1.59 111 TooManyTo_002 2919 1.40 1.14 1.56 112 TM2_M_VERY_LONG_WORD 2906 2.09 2.98 1.55 113 XMGappySubj_01 2838 1.00 0.16 1.52 114 DKIM_INVALID 2793 2.59 4.39 1.49 115 XMBdyGiftCard01 2778 1.30 0.98 1.48 116 XMDiploma_00 2740 1.67 2.01 1.46 117 T_XMDrugObfuBody_00 2730 1.27 0.97 1.46 118 TR_XM_SpammyWords5 2729 2.50 4.20 1.46 119 BAYES_05 2640 1.05 0.47 1.41 120 HTML_MIME_NO_HTML_TAG 2614 1.24 0.99 1.40 121 URI_HEX 2610 1.23 0.96 1.40 122 XM_ProductURIs 2585 1.09 0.61 1.38 123 RCVD_IN_IADB_VOUCHED 2583 0.97 0.28 1.38 124 XM_B_Unsub2 2507 1.61 2.05 1.34 125 XM_B_Investor 2479 2.48 4.37 1.33 126 T_XMDrugObfuBody_08 2447 1.95 2.99 1.31 127 T_TooManySym_03 2423 0.92 0.29 1.30 128 XMGappySubj_02 2398 0.81 0.03 1.28 129 XM_B_COPY_HTML 2382 1.12 0.87 1.27 130 XM_SendGrid 2361 1.26 1.27 1.26 131 XMBody_17 2315 4.92 10.96 1.24 132 TR_Symld_Words 2312 1.30 1.41 1.24 133 XM_GoogleGroups 2253 0.94 0.50 1.20 134 XM_B_SEO 2246 2.11 3.61 1.20 135 XM_H_Long_From02 2191 1.11 1.00 1.17 136 XMSubMetaSxObfu_03 2119 0.93 0.60 1.13 137 BOTNET 2077 3.86 8.37 1.11 138 XMBrknScrpt_02 2066 1.76 2.84 1.10 139 URI_NOVOWEL 1956 0.94 0.75 1.05 140 URI_TRY_3LD 1946 1.42 2.04 1.04 141 T_FILL_THIS_FORM_SHORT 1925 2.81 5.74 1.03 142 XM_RXBody 1912 0.88 0.66 1.02 143 RCVD_IN_IADB_OPTIN 1868 0.69 0.18 1.00 144 TR_XM_Base64_M1 1842 0.83 0.59 0.98 145 XM_UB50 1822 1.76 3.04 0.97 146 TooManyTo_003 1774 1.00 1.08 0.95 147 MPART_ALT_DIFF_COUNT 1757 0.96 1.00 0.94 148 SUBJ_ALL_CAPS 1726 1.82 3.29 0.92 149 TR_XM_DK_SendGrid 1692 0.91 0.92 0.90 150 XM_B_SpammyWords4 1622 1.41 2.29 0.87 151 TR_XM_SpammyWords2 1617 7.80 19.18 0.86 152 XM_OfRef6 1577 2.57 5.40 0.84 153 DKIM_ADSP_CUSTOM_MED 1522 1.16 1.72 0.81 154 XM_H_PHPMailer 1477 0.89 1.06 0.79 155 USER_IN_WHITELIST 1451 0.48 0.00 0.78 156 USER_IN_WELCOMELIST 1451 0.48 0.00 0.78 157 TooManyTo_004 1429 0.86 1.03 0.76 158 TR_LOTS_OF_MONEY3 1420 2.27 4.76 0.76 159 RCVD_IN_BL_SPAMCOP_NET 1404 5.82 14.14 0.75 160 HTML_TAG_BALANCE_BODY 1379 1.00 1.44 0.74 161 PLING_QUERY 1379 0.91 1.19 0.74 162 KHOP_HELO_FCRDNS 1338 0.98 1.41 0.72 163 XMBody_95 1334 0.47 0.07 0.71 164 RCVD_IN_PSBL 1332 0.76 0.85 0.71 165 XMSubMetaI_00 1321 0.78 0.90 0.71 166 TR_XM_SEO4 1288 1.67 3.28 0.69 167 TR_MetaPhish_Combo_01 1208 0.67 0.70 0.65 168 TooManyTo_005 1205 0.78 1.01 0.64 169 THIS_AD 1181 0.82 1.14 0.63 170 XMPhish30 1177 0.83 1.17 0.63 171 XMSolicitRefs_0 1177 0.54 0.39 0.63 172 XMSubMetaSxObfu_02 1138 0.46 0.22 0.61 173 SHOPIFY_IMG_NOT_RCVD_SFY 1132 0.66 0.76 0.61 174 SpammyFromTLD_01 1125 1.17 2.11 0.60 175 T_XMHurry_00 1117 1.54 3.08 0.60 176 DIET_1 1103 0.70 0.88 0.59 177 XMGenDplmaNmb 1082 0.59 0.62 0.58 178 XMLngstWrd_00 1058 0.56 0.55 0.57 179 XM_B_DNDMA 1045 0.62 0.72 0.56 180 XMNoVowels 1027 0.70 0.95 0.55 181 AD_PREFS 1001 0.35 0.03 0.54 182 HTTPS_HTTP_MISMATCH 995 1.05 1.89 0.53 183 HTML_FONT_FACE_BAD 963 0.66 0.90 0.51 184 T_TooManySym_04 962 0.39 0.19 0.51 185 XM_B_REG_HTML 958 0.47 0.39 0.51 186 TR_XM_SPAMCOP 947 5.13 12.73 0.51 187 NML_ADSP_CUSTOM_MED 947 0.94 1.65 0.51 188 FORGED_GMAIL_RCVD 932 0.84 1.40 0.50 189 T_STY_INVIS_DIRECT 932 0.73 1.10 0.50 190 XMPhish14 927 0.62 0.82 0.50 191 TR_XM_FormFill 912 1.57 3.34 0.49 192 HELO_NO_DOMAIN 857 0.51 0.58 0.46 193 HELO_NODOT 857 0.51 0.58 0.46 194 XM_B_FormFill 857 0.32 0.10 0.46 195 DKIM_ADSP_NXDOMAIN 843 1.04 2.01 0.45 196 RELAYCOUNTRY_AU 794 1.10 2.22 0.42 197 XM_S_SubURI 766 0.27 0.04 0.41 198 TM2_M_OBFU_COMMENT 740 0.51 0.69 0.40 199 CTE_8BIT_MISMATCH 723 0.25 0.03 0.39 200 MIME_CHARSET_FARAWAY 712 0.58 0.91 0.38 ----------------------------------------------------------------------