Email: 310948 Autolearn: 0 AvgScore: 5.11 AvgScanTime: 1.36 sec Spam: 115720 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.38 sec Ham: 195228 Autolearn: 0 AvgScore: -0.21 AvgScanTime: 1.34 sec Time Spent Running SA: 117.28 hours Time Spent Processing Spam: 44.37 hours Time Spent Processing Ham: 72.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 111262 87.58 96.15 82.50 2 DKIM_SIGNED 105052 82.46 90.78 77.52 3 XM_B_Unicode 98735 76.96 85.32 72.01 4 RELAYCOUNTRY_US 98164 81.61 84.83 79.70 5 XM_DK_Pass 97583 79.44 84.33 76.54 6 DKIM_VALID 97237 78.99 84.03 76.01 7 DCC_CHECK 88946 59.05 76.86 48.49 8 XM_B_SpammyWords 85174 57.59 73.60 48.10 9 XMListUnsubscribeExists 83989 62.29 72.58 56.19 10 DKIM_VALID_AU 79528 66.91 68.72 65.84 11 XM_B_Unicode3 54475 47.48 47.07 47.72 12 LOC_TINY_FONT_1 52560 37.98 45.42 33.56 13 XM_DK_Undo_02 49976 19.36 43.19 5.23 14 HTML_FONT_LOW_CONTRAST 48315 36.82 41.75 33.90 15 RCVD_IN_MSPIKE_H2 46918 36.49 40.54 34.09 16 XM_B_SpammyWords2 45900 28.68 39.66 22.17 17 BAYES_99 43262 16.47 37.39 4.08 18 BAYES_50 42686 52.16 36.89 61.22 19 TR_XM_DKIM_Undo 37560 13.68 32.46 2.55 20 FVGT_m_MULTI_ODD 37017 28.99 31.99 27.21 21 BAYES_999 35494 13.36 30.67 3.11 22 MIME_HTML_ONLY 34782 23.98 30.06 20.37 23 T_KAM_HTML_FONT_INVALID 33165 23.47 28.66 20.40 24 TR_DCC_Bayes_99 32227 11.42 27.85 1.68 25 DKIM_VALID_EF 28565 26.46 24.68 27.51 26 DCC_CHECK_NEGATIVE 26341 40.80 22.76 51.49 27 XM_Multi_Part_URI 24387 20.40 21.07 20.00 28 XMSubLong 22358 20.81 19.32 21.68 29 T_TM2_M_HEADER_IN_MSG 21245 20.26 18.36 21.38 30 UNPARSEABLE_RELAY 20462 14.11 17.68 11.99 31 TR_XM_DK_Unsub 19755 14.93 17.07 13.66 32 XM_B_Unsub 19703 11.81 17.03 8.73 33 TR_XM_BayesUnsub 19166 10.63 16.56 7.11 34 RELAYCOUNTRY_META 18398 8.63 15.90 4.31 35 TR_MAX_INTL_RELAY 16801 9.74 14.52 6.90 36 XM_B_SpammyWords3 16106 9.50 13.92 6.88 37 TR_XM_SpammyWords2 15725 5.48 13.59 0.67 38 BOTNET_IPINHOSTNAME 15254 7.00 13.18 3.34 39 LOTS_OF_MONEY 13991 8.30 12.09 6.06 40 TR_XM_SpammyRelay 12735 5.48 11.01 2.21 41 TR_XM_SpammyWords4 12616 7.10 10.90 4.85 42 BOTNET 12248 4.62 10.58 1.09 43 TR_XM_UnparsRelay 11562 4.86 9.99 1.83 44 BAYES_80 10132 5.86 8.76 4.14 45 FSL_BULK_SIG 9368 7.60 8.10 7.30 46 BAYES_60 9270 9.49 8.01 10.36 47 XM_Body_Dirty_Words 9228 5.12 7.97 3.43 48 HTML_IMAGE_RATIO_02 9039 6.83 7.81 6.25 49 XM_Evil_Numbers_Gen 8970 9.97 7.75 11.29 50 RCVD_IN_BL_SPAMCOP_NET 8476 3.22 7.32 0.79 51 XM_UncommonTLD01 7980 5.63 6.90 4.88 52 UNTRUSTED_Relay 7952 3.89 6.87 2.13 53 DKIM_INVALID 7815 3.47 6.75 1.52 54 XMSubMetaSx_00 7348 4.26 6.35 3.02 55 XMSexyCombo_05 7043 3.41 6.09 1.82 56 XM_B_Phish_Phrases 7040 6.30 6.08 6.42 57 TR_XM_SPAMCOP 6985 2.47 6.04 0.35 58 LotsOfNums_01 6895 6.76 5.96 7.24 59 RELAYCOUNTRY_CA 6737 3.17 5.82 1.59 60 MPART_ALT_DIFF 6686 5.12 5.78 4.74 61 XM_H_Long_From01 6591 5.40 5.70 5.23 62 TooManyTo_001 6309 5.31 5.45 5.23 63 XMBody_17 6284 2.51 5.43 0.78 64 BAYES_95 6135 3.70 5.30 2.76 65 XM_H_GMP 5718 5.36 4.94 5.61 66 HTML_IMAGE_RATIO_04 5565 5.27 4.81 5.54 67 XM_SPF_SoftFail 5467 2.68 4.72 1.47 68 XM_B_PhoneNumber 5430 5.59 4.69 6.12 69 XM_B_SEO 5135 2.43 4.44 1.24 70 XMStrtUSub 5117 5.40 4.42 5.97 71 T_XMDrugObfuBody_14 4907 2.53 4.24 1.51 72 RCVD_IN_VALIDITY_RPBL 4696 1.63 4.06 0.19 73 TR_LOTS_OF_MONEY3 4512 1.84 3.90 0.62 74 HTML_IMAGE_RATIO_06 4499 3.48 3.89 3.24 75 XM_B_Investor 4498 2.22 3.89 1.22 76 TR_XM_SEO4 4474 1.98 3.87 0.86 77 MIME_HTML_MOSTLY 4341 3.33 3.75 3.09 78 XMBrknScrpt_02 4194 2.39 3.62 1.66 79 TM2_M_VERY_LONG_WORD 4035 2.30 3.49 1.60 80 RCVD_IN_MSPIKE_WL 3963 4.48 3.42 5.11 81 RCVD_IN_MSPIKE_H3 3963 4.48 3.42 5.11 82 HTML_IMAGE_RATIO_08 3950 2.82 3.41 2.47 83 TR_XM_PhishingBody 3930 2.74 3.40 2.36 84 T_FILL_THIS_FORM_SHORT 3844 1.59 3.32 0.56 85 MIME_HTML_ONLY_MULTI 3765 2.73 3.25 2.43 86 XM_CamelCaseFrm001 3725 3.49 3.22 3.65 87 TR_XM_SpammyWords5 3697 2.57 3.19 2.19 88 XM_B_SpammyTLD 3626 5.07 3.13 6.22 89 RCVD_IN_VALIDITY_SAFE 3616 6.55 3.12 8.58 90 XM_UB50 3544 1.87 3.06 1.16 91 XM_OfRef6 3493 1.48 3.02 0.56 92 TM2_M_URI_OPT_OUT 3481 2.35 3.01 1.96 93 XMNumbers 3446 3.30 2.98 3.49 94 XM_URI_RBL 3313 1.40 2.86 0.53 95 TR_XM_NoHeaderRelay 3068 1.09 2.65 0.17 96 T_XMHurry_00 3050 1.36 2.64 0.61 97 T_XMDrugObfuBody_08 2993 1.84 2.59 1.39 98 XM_H_DKIM_GOOG 2918 0.96 2.52 0.03 99 RELAYCOUNTRY_AU 2871 1.30 2.48 0.60 100 XMDiploma_00 2860 1.94 2.47 1.63 101 XM_B_URI_Unicode 2767 1.94 2.39 1.68 102 TR_XM_INV_DKIM 2759 0.93 2.38 0.06 103 XM_BadFromFormat 2752 0.98 2.38 0.15 104 DIET_1 2695 1.09 2.33 0.36 105 SpammyFromTLD_01 2642 1.25 2.28 0.63 106 FROM_EXCESS_BASE64 2636 2.62 2.28 2.83 107 USER_IN_DEF_DKIM_WL 2557 13.85 2.21 20.74 108 TR_XM_PHPDW 2554 1.00 2.21 0.28 109 TR_XM_PHPForged 2540 1.00 2.19 0.29 110 RCVD_IN_VALIDITY_CERTIFIED 2510 5.28 2.17 7.13 111 TR_XM_FormFill2 2480 0.97 2.14 0.28 112 XM_B_Unsub2 2474 1.56 2.14 1.21 113 XM_B_SpammyWords4 2470 1.34 2.13 0.88 114 XM_H_PHPOS 2460 0.96 2.13 0.27 115 LONGLN_LOW_CONTRAST 2438 1.11 2.11 0.51 116 XM_B_REG_HTML 2377 0.93 2.05 0.27 117 T_TooManySym_01 2332 4.85 2.02 6.54 118 KHOP_HELO_FCRDNS 2305 1.41 1.99 1.06 119 MIME_QP_LONG_LINE 2227 2.65 1.92 3.08 120 SUBJ_ALL_CAPS 2204 1.62 1.90 1.45 121 T_REMOTE_IMAGE 2140 2.55 1.85 2.96 122 HTML_MIME_NO_HTML_TAG 2078 1.58 1.80 1.46 123 XM_DK_Undo_01 2066 1.68 1.79 1.61 124 TR_XM_FormFill 2045 0.67 1.77 0.02 125 MAILING_LIST_MULTI 2010 2.15 1.74 2.39 126 XMStockSpam_06 2001 2.07 1.73 2.28 127 SHOPIFY_IMG_NOT_RCVD_SFY 1973 0.85 1.70 0.34 128 HOSTED_IMG_MULTI_PUB_01 1924 0.68 1.66 0.10 129 THIS_AD 1831 0.92 1.58 0.52 130 BOTNET_NORDNS 1802 0.58 1.56 0.01 131 BAYES_40 1796 3.27 1.55 4.29 132 XM_UB99 1712 0.55 1.48 0.00 133 XMSubMetaI_00 1709 0.99 1.48 0.70 134 SpammyFromTLD_02 1708 0.67 1.48 0.20 135 URI_TRY_3LD 1630 1.17 1.41 1.03 136 T_STY_INVIS_DIRECT 1627 0.78 1.41 0.41 137 XMHTMLBadTable_001 1601 0.69 1.38 0.27 138 RCVD_IN_PSBL 1553 0.59 1.34 0.14 139 XMBdyGiftCard01 1542 1.51 1.33 1.62 140 XM_B_COPY_HTML 1514 1.23 1.31 1.19 141 XMPhish30 1511 1.31 1.31 1.31 142 XMSexyCombo_01 1508 0.61 1.30 0.20 143 RELAYCOUNTRY_FR 1458 0.64 1.26 0.27 144 T_XMDrugObfuBody_00 1451 0.92 1.25 0.71 145 URI_NOVOWEL 1445 3.30 1.25 4.51 146 URI_HEX 1433 1.05 1.24 0.94 147 TR_LOTS_OF_MONEY2 1420 0.56 1.23 0.16 148 T_MONEY_PERCENT 1420 0.56 1.23 0.16 149 ALL_TRUSTED 1413 10.67 1.22 16.26 150 HTML_TAG_BALANCE_BODY 1390 1.02 1.20 0.91 151 AC_BR_BONANZA 1388 0.52 1.20 0.12 152 TR_XM_InvalidRelay 1385 0.47 1.20 0.03 153 XMGenDplmaNmb 1329 0.76 1.15 0.53 154 XM_H_PHPMailer 1316 0.84 1.14 0.66 155 RDNS_DYNAMIC 1314 0.62 1.14 0.31 156 TooManyTo_002 1299 1.20 1.12 1.25 157 PDS_RDNS_DYNAMIC_FP 1283 0.44 1.11 0.04 158 XM_UB999 1268 0.41 1.10 0.00 159 XM_HighProb1 1244 0.40 1.08 0.00 160 MIME_CHARSET_FARAWAY 1243 0.68 1.07 0.44 161 DKIM_ADSP_CUSTOM_MED 1178 0.83 1.02 0.71 162 XM_H_Long_From02 1155 0.89 1.00 0.83 163 TVD_RCVD_IP 1152 0.86 1.00 0.77 164 XMSubMetaSSx_00 1144 0.46 0.99 0.14 165 BOUNCE_MESSAGE 1134 3.10 0.98 4.36 166 ANY_BOUNCE_MESSAGE 1134 3.10 0.98 4.36 167 LongTLD 1128 0.46 0.97 0.16 168 XM_SendGrid 1093 1.11 0.94 1.21 169 HELO_DYNAMIC_SPLIT_IP 1066 0.35 0.92 0.01 170 RCVD_IN_IADB_LISTED 1066 1.79 0.92 2.31 171 XMSlimDrugH 1066 0.59 0.92 0.39 172 XMSubMetaSxObfu_02 1027 0.45 0.89 0.19 173 URI_TRUNCATED 1026 0.35 0.89 0.04 174 NML_ADSP_CUSTOM_MED 1009 0.62 0.87 0.47 175 XM_ProductURIs 1008 0.64 0.87 0.51 176 BAYES_20 1002 2.09 0.87 2.82 177 XM_UB60 990 0.40 0.86 0.12 178 XMReplyNow 987 0.47 0.85 0.24 179 RCVD_IN_XBL 977 0.33 0.84 0.02 180 TM2_M_OBFU_COMMENT 969 0.79 0.84 0.77 181 FORGED_GMAIL_RCVD 957 0.57 0.83 0.42 182 XM_UB80 947 0.34 0.82 0.05 183 RCVD_IN_IADB_SPF 935 1.60 0.81 2.07 184 EXCUSE_4 927 0.30 0.80 0.01 185 RELAYCOUNTRY_DE 926 0.61 0.80 0.50 186 RCVD_IN_PBL 924 0.66 0.80 0.58 187 TR_Caps_n_Bayes_99 914 0.32 0.79 0.04 188 SH_BODYURI_REVERSE_SBL 898 0.29 0.78 0.00 189 URIBL_SBL_A 896 0.29 0.77 0.00 190 URIBL_SBL 896 0.29 0.77 0.00 191 XM_B_Phish66 893 0.43 0.77 0.23 192 XMHTML_After_End 887 0.48 0.77 0.31 193 RCVD_IN_IADB_DK 886 1.44 0.77 1.85 194 SUBJ_DOLLARS 881 0.60 0.76 0.50 195 TR_Mismatch_TLD_02 880 0.32 0.76 0.06 196 TR_Mismatch_TLD_01 874 0.43 0.76 0.23 197 RCVD_IN_IADB_SENDERID 872 1.47 0.75 1.89 198 AC_HTML_NONSENSE_TAGS 853 0.32 0.74 0.07 199 MPART_ALT_DIFF_COUNT 845 0.57 0.73 0.48 200 HTML_IMAGE_ONLY_20 837 0.59 0.72 0.52 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161058 87.58 96.15 82.50 2 RELAYCOUNTRY_US 155603 81.61 84.83 79.70 3 DKIM_SIGNED 151349 82.46 90.78 77.52 4 XM_DK_Pass 149435 79.44 84.33 76.54 5 DKIM_VALID 148385 78.99 84.03 76.01 6 XM_B_Unicode 140581 76.96 85.32 72.01 7 DKIM_VALID_AU 128532 66.91 68.72 65.84 8 BAYES_50 119512 52.16 36.89 61.22 9 XMListUnsubscribeExists 109691 62.29 72.58 56.19 10 DCC_CHECK_NEGATIVE 100526 40.80 22.76 51.49 11 DCC_CHECK 94662 59.05 76.86 48.49 12 XM_B_SpammyWords 93899 57.59 73.60 48.10 13 XM_B_Unicode3 93157 47.48 47.07 47.72 14 RCVD_IN_MSPIKE_H2 66558 36.49 40.54 34.09 15 HTML_FONT_LOW_CONTRAST 66174 36.82 41.75 33.90 16 LOC_TINY_FONT_1 65526 37.98 45.42 33.56 17 DKIM_VALID_EF 53716 26.46 24.68 27.51 18 FVGT_m_MULTI_ODD 53122 28.99 31.99 27.21 19 XM_B_SpammyWords2 43286 28.68 39.66 22.17 20 XMSubLong 42335 20.81 19.32 21.68 21 T_TM2_M_HEADER_IN_MSG 41746 20.26 18.36 21.38 22 USER_IN_DEF_DKIM_WL 40496 13.85 2.21 20.74 23 T_KAM_HTML_FONT_INVALID 39819 23.47 28.66 20.40 24 MIME_HTML_ONLY 39773 23.98 30.06 20.37 25 XM_Multi_Part_URI 39044 20.40 21.07 20.00 26 ALL_TRUSTED 31752 10.67 1.22 16.26 27 TR_XM_DK_Unsub 26670 14.93 17.07 13.66 28 UNPARSEABLE_RELAY 23410 14.11 17.68 11.99 29 XM_Evil_Numbers_Gen 22046 9.97 7.75 11.29 30 BAYES_60 20228 9.49 8.01 10.36 31 XM_DKIMWhitelistDomains 19702 6.35 0.03 10.09 32 XM_B_Unsub 17034 11.81 17.03 8.73 33 BAYES_00 16845 5.55 0.36 8.63 34 RCVD_IN_VALIDITY_SAFE 16752 6.55 3.12 8.58 35 TR_XM_DK_Bayes 14894 4.90 0.30 7.63 36 TR_XM_DK_Bayes1 14792 4.87 0.30 7.58 37 FSL_BULK_SIG 14261 7.60 8.10 7.30 38 LotsOfNums_01 14131 6.76 5.96 7.24 39 RCVD_IN_VALIDITY_CERTIFIED 13919 5.28 2.17 7.13 40 TR_XM_BayesUnsub 13885 10.63 16.56 7.11 41 TR_MAX_INTL_RELAY 13475 9.74 14.52 6.90 42 XM_B_SpammyWords3 13423 9.50 13.92 6.88 43 TR_XM_DK_Bayes2 13240 4.32 0.17 6.78 44 T_TooManySym_01 12759 4.85 2.02 6.54 45 XM_B_Phish_Phrases 12538 6.30 6.08 6.42 46 HTML_IMAGE_RATIO_02 12211 6.83 7.81 6.25 47 XM_B_SpammyTLD 12151 5.07 3.13 6.22 48 XM_B_PhoneNumber 11951 5.59 4.69 6.12 49 LOTS_OF_MONEY 11823 8.30 12.09 6.06 50 XMStrtUSub 11659 5.40 4.42 5.97 51 XM_H_GMP 10954 5.36 4.94 5.61 52 HTML_IMAGE_RATIO_04 10812 5.27 4.81 5.54 53 IN_ZIMBRA_NJ_WHITELIST 10324 3.41 0.24 5.29 54 XM_DK_Undo_02 10214 19.36 43.19 5.23 55 XM_H_Long_From01 10204 5.40 5.70 5.23 56 TooManyTo_001 10201 5.31 5.45 5.23 57 RCVD_IN_MSPIKE_H3 9972 4.48 3.42 5.11 58 RCVD_IN_MSPIKE_WL 9972 4.48 3.42 5.11 59 XM_UncommonTLD01 9535 5.63 6.90 4.88 60 TR_XM_SpammyWords4 9467 7.10 10.90 4.85 61 MPART_ALT_DIFF 9250 5.12 5.78 4.74 62 URI_NOVOWEL 8805 3.30 1.25 4.51 63 ANY_BOUNCE_MESSAGE 8503 3.10 0.98 4.36 64 BOUNCE_MESSAGE 8503 3.10 0.98 4.36 65 RELAYCOUNTRY_META 8422 8.63 15.90 4.31 66 BAYES_40 8374 3.27 1.55 4.29 67 BAYES_80 8087 5.86 8.76 4.14 68 BAYES_99 7966 16.47 37.39 4.08 69 T_TooManySym_02 7433 2.58 0.51 3.81 70 XM_CamelCaseFrm001 7131 3.49 3.22 3.65 71 INVALID_MSGID 6817 2.28 0.25 3.49 72 XMNumbers 6805 3.30 2.98 3.49 73 XM_Body_Dirty_Words 6697 5.12 7.97 3.43 74 BOTNET_IPINHOSTNAME 6520 7.00 13.18 3.34 75 HTML_IMAGE_RATIO_06 6329 3.48 3.89 3.24 76 TO_MALFORMED 6203 2.00 0.01 3.18 77 BAYES_999 6062 13.36 30.67 3.11 78 MIME_HTML_MOSTLY 6024 3.33 3.75 3.09 79 MIME_QP_LONG_LINE 6010 2.65 1.92 3.08 80 XMSubMetaSx_00 5891 4.26 6.35 3.02 81 T_REMOTE_IMAGE 5774 2.55 1.85 2.96 82 FROM_EXCESS_BASE64 5520 2.62 2.28 2.83 83 BAYES_20 5503 2.09 0.87 2.82 84 BAYES_95 5384 3.70 5.30 2.76 85 TR_XM_DKIM_Undo 4979 13.68 32.46 2.55 86 HTML_IMAGE_RATIO_08 4830 2.82 3.41 2.47 87 MIME_HTML_ONLY_MULTI 4737 2.73 3.25 2.43 88 MAILING_LIST_MULTI 4661 2.15 1.74 2.39 89 TR_XM_PhishingBody 4603 2.74 3.40 2.36 90 RCVD_IN_IADB_LISTED 4503 1.79 0.92 2.31 91 XMStockSpam_06 4444 2.07 1.73 2.28 92 TR_XM_SpammyRelay 4318 5.48 11.01 2.21 93 TR_XM_SpammyWords5 4285 2.57 3.19 2.19 94 UNTRUSTED_Relay 4156 3.89 6.87 2.13 95 RCVD_IN_IADB_SPF 4039 1.60 0.81 2.07 96 TM2_M_URI_OPT_OUT 3827 2.35 3.01 1.96 97 XM_PDF 3702 1.27 0.22 1.90 98 RCVD_IN_IADB_SENDERID 3696 1.47 0.75 1.89 99 RCVD_IN_IADB_DK 3605 1.44 0.77 1.85 100 XM_TLDProd2 3597 1.26 0.28 1.84 101 TR_XM_UnparsRelay 3565 4.86 9.99 1.83 102 XMSexyCombo_05 3545 3.41 6.09 1.82 103 BAYES_05 3327 1.26 0.52 1.70 104 TR_DCC_Bayes_99 3287 11.42 27.85 1.68 105 XM_B_URI_Unicode 3272 1.94 2.39 1.68 106 XMBrknScrpt_02 3241 2.39 3.62 1.66 107 XMGappySubj_01 3219 1.12 0.24 1.65 108 TVD_SPACE_RATIO 3215 1.06 0.08 1.65 109 XMDiploma_00 3182 1.94 2.47 1.63 110 XMBdyGiftCard01 3164 1.51 1.33 1.62 111 XM_DK_Undo_01 3151 1.68 1.79 1.61 112 IN_HORDE_ADDRESS_BOOK 3128 1.08 0.19 1.60 113 TM2_M_VERY_LONG_WORD 3128 2.30 3.49 1.60 114 RELAYCOUNTRY_CA 3113 3.17 5.82 1.59 115 DKIM_INVALID 2964 3.47 6.75 1.52 116 T_XMDrugObfuBody_14 2951 2.53 4.24 1.51 117 XM_SPF_SoftFail 2870 2.68 4.72 1.47 118 HTML_MIME_NO_HTML_TAG 2841 1.58 1.80 1.46 119 SUBJ_ALL_CAPS 2833 1.62 1.90 1.45 120 RCVD_IN_IADB_VOUCHED 2819 1.08 0.46 1.44 121 T_TooManySym_03 2760 0.98 0.26 1.41 122 XMGappySubj_02 2760 0.96 0.19 1.41 123 T_XMDrugObfuBody_08 2723 1.84 2.59 1.39 124 XMPhish30 2551 1.31 1.31 1.31 125 TooManyTo_002 2436 1.20 1.12 1.25 126 XM_B_SEO 2423 2.43 4.44 1.24 127 XM_B_Investor 2391 2.22 3.89 1.22 128 XM_B_Unsub2 2365 1.56 2.14 1.21 129 XM_SendGrid 2362 1.11 0.94 1.21 130 XM_GoogleGroups 2358 0.97 0.58 1.21 131 XM_B_COPY_HTML 2315 1.23 1.31 1.19 132 XM_UB50 2266 1.87 3.06 1.16 133 TR_Symld_Words 2188 0.95 0.65 1.12 134 XMBody_95 2147 0.78 0.25 1.10 135 BOTNET 2125 4.62 10.58 1.09 136 KHOP_HELO_FCRDNS 2072 1.41 1.99 1.06 137 XM_B_DNDMA 2029 0.90 0.66 1.04 138 URI_TRY_3LD 2004 1.17 1.41 1.03 139 RCVD_IN_IADB_OPTIN 1983 0.75 0.29 1.02 140 URI_HEX 1829 1.05 1.24 0.94 141 HTML_TAG_BALANCE_BODY 1770 1.02 1.20 0.91 142 TooManyTo_003 1730 0.82 0.71 0.89 143 XM_B_SpammyWords4 1709 1.34 2.13 0.88 144 TR_XM_SEO4 1678 1.98 3.87 0.86 145 T_TVD_MIME_NO_HEADERS 1640 0.54 0.03 0.84 146 XM_H_Long_From02 1621 0.89 1.00 0.83 147 TR_XM_DK_SendGrid 1556 0.77 0.71 0.80 148 RCVD_IN_BL_SPAMCOP_NET 1550 3.22 7.32 0.79 149 XMBody_17 1528 2.51 5.43 0.78 150 TR_XM_Base64_M1 1513 0.74 0.69 0.77 151 TVD_RCVD_IP 1507 0.86 1.00 0.77 152 TM2_M_OBFU_COMMENT 1498 0.79 0.84 0.77 153 T_XMDrugObfuBody_00 1395 0.92 1.25 0.71 154 DKIM_ADSP_CUSTOM_MED 1394 0.83 1.02 0.71 155 XMSubMetaI_00 1360 0.99 1.48 0.70 156 USER_IN_WELCOMELIST 1360 0.44 0.00 0.70 157 USER_IN_WHITELIST 1360 0.44 0.00 0.70 158 TooManyTo_004 1350 0.69 0.68 0.69 159 PLING_QUERY 1323 0.63 0.55 0.68 160 HTTPS_HTTP_MISMATCH 1323 0.64 0.58 0.68 161 HTML_TAG_BALANCE_HEAD 1321 0.56 0.35 0.68 162 TR_XM_SpammyWords2 1303 5.48 13.59 0.67 163 XM_H_PHPMailer 1284 0.84 1.14 0.66 164 TR_MetaPhish_Combo_01 1267 0.63 0.60 0.65 165 XMLngstWrd_00 1251 0.50 0.27 0.64 166 SpammyFromTLD_01 1234 1.25 2.28 0.63 167 TR_LOTS_OF_MONEY3 1220 1.84 3.90 0.62 168 T_XMHurry_00 1189 1.36 2.64 0.61 169 HTML_FONT_FACE_BAD 1182 0.62 0.64 0.61 170 RELAYCOUNTRY_AU 1180 1.30 2.48 0.60 171 TooManyTo_005 1169 0.62 0.66 0.60 172 XMClaimOffer 1163 0.57 0.52 0.60 173 RCVD_IN_PBL 1125 0.66 0.80 0.58 174 T_FILL_THIS_FORM_SHORT 1100 1.59 3.32 0.56 175 XM_OfRef6 1098 1.48 3.02 0.56 176 T_TooManySym_04 1045 0.36 0.05 0.54 177 XMGenDplmaNmb 1039 0.76 1.15 0.53 178 XM_URI_RBL 1035 1.40 2.86 0.53 179 AD_PREFS 1025 0.35 0.05 0.53 180 THIS_AD 1022 0.92 1.58 0.52 181 HTML_IMAGE_ONLY_20 1013 0.59 0.72 0.52 182 XMNoVowels 1005 0.42 0.27 0.51 183 LONGLN_LOW_CONTRAST 998 1.11 2.11 0.51 184 XM_ProductURIs 986 0.64 0.87 0.51 185 RELAYCOUNTRY_DE 984 0.61 0.80 0.50 186 SUBJ_DOLLARS 971 0.60 0.76 0.50 187 HTML_TEXT_INVISIBLE_STYLE 965 0.38 0.19 0.49 188 XMOemUri 955 0.42 0.31 0.49 189 MSGID_FROM_MTA_HEADER 937 0.33 0.08 0.48 190 MPART_ALT_DIFF_COUNT 929 0.57 0.73 0.48 191 HTML_TAG_BALANCE_CENTER 918 0.44 0.40 0.47 192 NML_ADSP_CUSTOM_MED 911 0.62 0.87 0.47 193 XMGppyBdWords 900 0.47 0.49 0.46 194 XMBSHREFv2 900 0.45 0.43 0.46 195 DKIM_ADSP_NXDOMAIN 874 0.52 0.65 0.45 196 XMSubNoVowel 868 0.50 0.59 0.44 197 MIME_CHARSET_FARAWAY 859 0.68 1.07 0.44 198 NO_DNS_FOR_FROM 828 0.49 0.60 0.42 199 XMPhish14 822 0.48 0.59 0.42 200 FORGED_GMAIL_RCVD 817 0.57 0.83 0.42 ----------------------------------------------------------------------