Email: 256198 Autolearn: 0 AvgScore: 4.57 AvgScanTime: 1.34 sec Spam: 81340 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.38 sec Ham: 174858 Autolearn: 0 AvgScore: 0.19 AvgScanTime: 1.32 sec Time Spent Running SA: 95.07 hours Time Spent Processing Spam: 31.10 hours Time Spent Processing Ham: 63.97 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 75655 85.60 93.01 82.15 2 DKIM_SIGNED 71163 75.97 87.49 70.61 3 XM_DK_Pass 67885 73.90 83.46 69.45 4 DKIM_VALID 67574 73.42 83.08 68.94 5 XM_B_Unicode 66975 73.36 82.34 69.18 6 RELAYCOUNTRY_US 63870 79.59 78.52 80.09 7 DCC_CHECK 63025 56.81 77.48 47.19 8 XMListUnsubscribeExists 56926 55.87 69.99 49.31 9 XM_B_SpammyWords 56828 54.73 69.86 47.69 10 DKIM_VALID_AU 55337 61.70 68.03 58.75 11 XM_B_Unicode3 40132 46.91 49.34 45.78 12 LOC_TINY_FONT_1 39128 36.93 48.10 31.73 13 XM_DK_Undo_02 33220 17.03 40.84 5.95 14 XM_B_SpammyWords2 32303 26.99 39.71 21.08 15 T_SCC_BODY_TEXT_LINE 32265 41.26 39.67 42.00 16 BAYES_50 30660 55.13 37.69 63.25 17 HTML_FONT_LOW_CONTRAST 29656 36.16 36.46 36.02 18 BAYES_99 28038 14.27 34.47 4.87 19 FVGT_m_MULTI_ODD 26208 28.55 32.22 26.84 20 TR_XM_DKIM_Undo 24714 11.86 30.38 3.25 21 MIME_HTML_ONLY 22728 22.50 27.94 19.98 22 DKIM_VALID_EF 22638 27.76 27.83 27.72 23 T_KAM_HTML_FONT_INVALID 22574 21.77 27.75 18.99 24 BAYES_999 20966 10.89 25.78 3.96 25 TR_DCC_Bayes_99 19915 9.30 24.48 2.24 26 DCC_CHECK_NEGATIVE 17860 42.99 21.96 52.78 27 TR_XM_DK_Unsub 17198 16.30 21.14 14.05 28 XMSubLong 17164 20.47 21.10 20.17 29 RELAYCOUNTRY_META 16167 10.08 19.88 5.53 30 T_TM2_M_HEADER_IN_MSG 16004 24.81 19.68 27.20 31 XM_Multi_Part_URI 15557 16.83 19.13 15.77 32 XM_B_Unsub 13857 11.59 17.04 9.06 33 TR_XM_BayesUnsub 13382 10.11 16.45 7.16 34 TR_MAX_INTL_RELAY 13196 9.40 16.22 6.23 35 UNPARSEABLE_RELAY 13103 13.84 16.11 12.78 36 TR_XM_SpammyRelay 11954 7.28 14.70 3.84 37 XM_B_SpammyWords3 11548 7.74 14.20 4.73 38 RCVD_IN_MSPIKE_H2 10519 12.28 12.93 11.98 39 TR_XM_SpammyWords2 10423 4.67 12.81 0.88 40 BOTNET_IPINHOSTNAME 9891 6.19 12.16 3.41 41 FSL_BULK_SIG 8686 10.39 10.68 10.26 42 LOTS_OF_MONEY 8643 6.92 10.63 5.19 43 BOTNET 7910 3.87 9.72 1.15 44 BAYES_80 7810 5.59 9.60 3.72 45 RELAYCOUNTRY_CA 7628 5.33 9.38 3.45 46 TR_XM_SpammyWords4 7528 5.62 9.25 3.94 47 TR_XM_UnparsRelay 7407 4.09 9.11 1.76 48 RCVD_IN_BL_SPAMCOP_NET 7280 3.29 8.95 0.65 49 XM_Body_Dirty_Words 7027 4.41 8.64 2.44 50 BAYES_60 6891 7.13 8.47 6.50 51 RCVD_IN_MSPIKE_WL 6547 10.46 8.05 11.58 52 HTML_IMAGE_RATIO_02 6151 6.03 7.56 5.32 53 XMSubMetaSx_00 6111 4.81 7.51 3.56 54 XM_B_Phish_Phrases 6043 5.64 7.43 4.80 55 XM_Evil_Numbers_Gen 5757 10.94 7.08 12.73 56 LotsOfNums_01 5729 10.35 7.04 11.89 57 UNTRUSTED_Relay 5575 3.32 6.85 1.67 58 MPART_ALT_DIFF 5331 5.09 6.55 4.40 59 XM_UncommonTLD01 4968 5.25 6.11 4.86 60 RCVD_IN_MSPIKE_BL 4898 2.33 6.02 0.61 61 TR_XM_MSPIKECOMBO 4894 2.33 6.02 0.61 62 BAYES_95 4818 3.59 5.92 2.50 63 TR_XM_PhishingBody 4616 2.96 5.67 1.70 64 XM_H_GMP 4455 6.23 5.48 6.59 65 RCVD_IN_MSPIKE_H3 4246 5.24 5.22 5.24 66 XM_H_Long_From01 4245 5.25 5.22 5.27 67 T_FILL_THIS_FORM_SHORT 4070 2.06 5.00 0.69 68 HTML_IMAGE_RATIO_04 3951 4.49 4.86 4.32 69 XM_B_Investor 3937 2.40 4.84 1.26 70 MIME_HTML_MOSTLY 3916 3.30 4.81 2.60 71 T_XMDrugObfuBody_14 3887 3.11 4.78 2.33 72 XMStrtUSub 3761 5.17 4.62 5.42 73 XM_B_SpammyTLD 3641 3.36 4.48 2.84 74 XMSexyCombo_05 3638 2.24 4.47 1.20 75 TooManyTo_001 3627 5.21 4.46 5.57 76 DKIM_INVALID 3589 2.55 4.41 1.68 77 XM_OfRef6 3498 1.98 4.30 0.89 78 XM_CamelCaseFrm001 3480 2.75 4.28 2.04 79 XM_B_PhoneNumber 3292 5.10 4.05 5.60 80 TR_XM_SpammyWords3 3248 1.46 3.99 0.28 81 ALL_TRUSTED 2929 10.98 3.60 14.42 82 XMNumbers 2911 4.01 3.58 4.21 83 TR_XM_NoHeaderRelay 2844 1.25 3.50 0.20 84 RCVD_IN_VALIDITY_RPBL 2777 1.18 3.41 0.13 85 TR_XM_SpammyWords5 2646 2.03 3.25 1.46 86 RCVD_IN_VALIDITY_SAFE 2642 5.27 3.25 6.22 87 XM_UB50 2608 1.64 3.21 0.91 88 TM2_M_VERY_LONG_WORD 2526 5.43 3.11 6.51 89 MIME_HTML_ONLY_MULTI 2488 2.69 3.06 2.52 90 RCVD_IN_MSPIKE_L3 2479 1.30 3.05 0.49 91 XMBody_17 2421 1.26 2.98 0.47 92 ANY_BOUNCE_MESSAGE 2354 9.17 2.89 12.08 93 BOUNCE_MESSAGE 2350 9.16 2.89 12.08 94 XMPhish30 2338 1.36 2.87 0.66 95 T_XMDrugObfuBody_08 2325 1.63 2.86 1.05 96 XM_SPF_SoftFail 2190 1.91 2.69 1.55 97 XMDiploma_00 2184 1.64 2.69 1.15 98 T_XMHurry_00 2094 1.30 2.57 0.71 99 USER_IN_DEF_DKIM_WL 2032 12.67 2.50 17.40 100 MIME_QP_LONG_LINE 2032 2.67 2.50 2.74 101 DIET_1 2026 1.15 2.49 0.53 102 XM_URI_RBL 2005 1.09 2.46 0.45 103 TR_XM_SPAMCOP 1992 0.88 2.45 0.15 104 RCVD_IN_VALIDITY_CERTIFIED 1981 4.07 2.44 4.83 105 RELAYCOUNTRY_AU 1973 1.09 2.43 0.47 106 XM_B_Unsub2 1949 1.61 2.40 1.24 107 FROM_EXCESS_BASE64 1884 2.41 2.32 2.45 108 T_TooManySym_01 1864 6.18 2.29 7.99 109 RCVD_IN_MSPIKE_H5 1823 4.11 2.24 4.98 110 RCVD_IN_MSPIKE_L5 1808 0.79 2.22 0.12 111 TM2_M_URI_OPT_OUT 1792 2.01 2.20 1.92 112 HTML_IMAGE_RATIO_06 1791 2.37 2.20 2.45 113 TR_LOTS_OF_MONEY3 1774 0.88 2.18 0.28 114 XM_B_URI_Unicode 1764 1.51 2.17 1.20 115 DKIM_ADSP_NXDOMAIN 1692 0.98 2.08 0.46 116 HTML_IMAGE_RATIO_08 1682 2.17 2.07 2.22 117 XM_B_SpammyWords4 1679 1.11 2.06 0.66 118 SpammyFromTLD_02 1666 0.80 2.05 0.22 119 TR_XM_INV_DKIM 1615 0.77 1.99 0.21 120 HTML_TAG_BALANCE_BODY 1581 1.13 1.94 0.75 121 SpammyFromTLD_01 1572 0.91 1.93 0.43 122 MAILING_LIST_MULTI 1507 2.14 1.85 2.27 123 XMStockSpam_06 1504 1.71 1.85 1.64 124 XMBrknScrpt_02 1499 1.41 1.84 1.21 125 XM_ProductURIs 1468 1.07 1.80 0.73 126 KHOP_HELO_FCRDNS 1364 3.57 1.68 4.46 127 RCVD_IN_PSBL 1348 0.82 1.66 0.43 128 SUBJ_ALL_CAPS 1326 1.22 1.63 1.03 129 XM_B_COPY_HTML 1321 1.31 1.62 1.16 130 SHOPIFY_IMG_NOT_RCVD_SFY 1271 0.80 1.56 0.44 131 BOTNET_NORDNS 1242 0.49 1.53 0.01 132 XM_B_REG_HTML 1219 0.67 1.50 0.28 133 BAYES_40 1172 4.51 1.44 5.94 134 XM_DK_Undo_01 1167 1.63 1.43 1.71 135 XM_DIRTYINTL 1162 0.50 1.43 0.07 136 XMSlimDrugH 1161 0.97 1.43 0.75 137 RDNS_DYNAMIC 1158 0.68 1.42 0.34 138 PLING_QUERY 1145 0.90 1.41 0.67 139 T_MONEY_PERCENT 1138 0.54 1.40 0.14 140 TR_LOTS_OF_MONEY2 1138 0.54 1.40 0.14 141 URI_HEX 1127 1.02 1.39 0.85 142 TR_XM_PHPForged 1124 0.60 1.38 0.23 143 TR_XM_FormFill2 1105 0.59 1.36 0.23 144 HTML_MIME_NO_HTML_TAG 1099 1.57 1.35 1.67 145 TR_XM_PHPDW 1096 0.59 1.35 0.24 146 XMBody_78 1093 0.65 1.34 0.33 147 XM_UB99 1091 0.43 1.34 0.01 148 TVD_RCVD_IP 1072 1.20 1.32 1.14 149 XM_H_PHPOS 1069 0.56 1.31 0.21 150 XMBounce_01 1045 0.42 1.28 0.01 151 RCVD_IN_XBL 1041 0.42 1.28 0.01 152 XM_B_Phish66 1033 0.62 1.27 0.32 153 RELAYCOUNTRY_TH 1033 0.41 1.27 0.00 154 TM2_M_BODY_EMPTY 1016 0.54 1.25 0.20 155 T_STY_INVIS_DIRECT 1007 0.87 1.24 0.69 156 RCVD_IN_PBL 1002 0.81 1.23 0.61 157 XMEmptyBody_01 988 0.43 1.21 0.07 158 TR_Mismatch_TLD_02 978 0.43 1.20 0.08 159 URI_NOVOWEL 969 1.43 1.19 1.55 160 THIS_AD 948 0.60 1.17 0.34 161 HTTPS_HTTP_MISMATCH 939 0.66 1.15 0.42 162 HELO_DYNAMIC_SPLIT_IP 910 0.37 1.12 0.02 163 SHORT_URI 907 0.65 1.12 0.44 164 T_REMOTE_IMAGE 907 2.37 1.12 2.96 165 XM_H_Long_From02 906 0.81 1.11 0.67 166 MPART_ALT_DIFF_COUNT 898 0.81 1.10 0.68 167 HTML_IMAGE_ONLY_20 892 0.57 1.10 0.33 168 TR_MetaPhish_Combo_01 890 0.91 1.09 0.82 169 LONG_JUNK_URI 887 0.81 1.09 0.68 170 T_XMDrugObfuBody_00 886 0.79 1.09 0.65 171 XPRIO 858 0.34 1.05 0.00 172 RCVD_IN_SBL_CSS 838 0.34 1.03 0.02 173 XMReplyNow 835 0.47 1.03 0.22 174 MultiRelay_CC 833 0.39 1.02 0.10 175 URI_TRY_3LD 825 0.62 1.01 0.44 176 DKIM_ADSP_CUSTOM_MED 818 0.91 1.01 0.87 177 BAYES_20 811 2.67 1.00 3.45 178 HTML_TAG_BALANCE_CENTER 798 0.57 0.98 0.37 179 XMSubMetaI_00 794 0.80 0.98 0.71 180 XM_OfRef7 780 0.46 0.96 0.23 181 TR_XM_Base64_M1 778 0.81 0.96 0.75 182 XM_B_COVIDMETA 774 0.36 0.95 0.08 183 TR_Mismatch_TLD_01 770 0.49 0.95 0.28 184 XM_HighProb1 767 0.31 0.94 0.01 185 XMSexyCombo_01 765 0.42 0.94 0.18 186 XMGenDplmaNmb 762 0.62 0.94 0.48 187 TR_XM_Base64_L1 747 0.42 0.92 0.19 188 XM_SendGrid 734 1.05 0.90 1.12 189 NML_ADSP_CUSTOM_MED 732 0.66 0.90 0.55 190 XM_Nigeria_01 714 0.30 0.88 0.03 191 LongTLD 702 0.42 0.86 0.21 192 XM_RXBody 702 0.42 0.86 0.22 193 TR_XM_InvalidRelay 693 0.28 0.85 0.01 194 HTML_FONT_FACE_BAD 684 0.59 0.84 0.47 195 FORGED_GMAIL_RCVD 681 0.65 0.84 0.57 196 XM_GoogleGroups 673 1.09 0.83 1.21 197 PDS_RDNS_DYNAMIC_FP 664 0.31 0.82 0.07 198 XM_UB60 657 0.34 0.81 0.12 199 TR_XM_FormFill 655 0.26 0.81 0.01 200 XM_UB999 654 0.26 0.80 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143651 85.60 93.01 82.15 2 RELAYCOUNTRY_US 140038 79.59 78.52 80.09 3 DKIM_SIGNED 123473 75.97 87.49 70.61 4 XM_DK_Pass 121436 73.90 83.46 69.45 5 XM_B_Unicode 120964 73.36 82.34 69.18 6 DKIM_VALID 120539 73.42 83.08 68.94 7 BAYES_50 110590 55.13 37.69 63.25 8 DKIM_VALID_AU 102737 61.70 68.03 58.75 9 DCC_CHECK_NEGATIVE 92287 42.99 21.96 52.78 10 XMListUnsubscribeExists 86218 55.87 69.99 49.31 11 XM_B_SpammyWords 83391 54.73 69.86 47.69 12 DCC_CHECK 82520 56.81 77.48 47.19 13 XM_B_Unicode3 80048 46.91 49.34 45.78 14 T_SCC_BODY_TEXT_LINE 73440 41.26 39.67 42.00 15 HTML_FONT_LOW_CONTRAST 62989 36.16 36.46 36.02 16 LOC_TINY_FONT_1 55489 36.93 48.10 31.73 17 DKIM_VALID_EF 48471 27.76 27.83 27.72 18 T_TM2_M_HEADER_IN_MSG 47564 24.81 19.68 27.20 19 FVGT_m_MULTI_ODD 46932 28.55 32.22 26.84 20 XM_B_SpammyWords2 36852 26.99 39.71 21.08 21 XMSubLong 35271 20.47 21.10 20.17 22 MIME_HTML_ONLY 34929 22.50 27.94 19.98 23 T_KAM_HTML_FONT_INVALID 33204 21.77 27.75 18.99 24 USER_IN_DEF_DKIM_WL 30424 12.67 2.50 17.40 25 XM_Multi_Part_URI 27569 16.83 19.13 15.77 26 ALL_TRUSTED 25214 10.98 3.60 14.42 27 TR_XM_DK_Unsub 24560 16.30 21.14 14.05 28 UNPARSEABLE_RELAY 22346 13.84 16.11 12.78 29 XM_Evil_Numbers_Gen 22263 10.94 7.08 12.73 30 ANY_BOUNCE_MESSAGE 21128 9.17 2.89 12.08 31 BOUNCE_MESSAGE 21126 9.16 2.89 12.08 32 RCVD_IN_MSPIKE_H2 20945 12.28 12.93 11.98 33 LotsOfNums_01 20783 10.35 7.04 11.89 34 RCVD_IN_MSPIKE_WL 20251 10.46 8.05 11.58 35 FSL_BULK_SIG 17943 10.39 10.68 10.26 36 XM_DKIMWhitelistDomains 16165 6.32 0.02 9.24 37 XM_B_Unsub 15834 11.59 17.04 9.06 38 BAYES_00 14010 5.57 0.33 8.01 39 T_TooManySym_01 13979 6.18 2.29 7.99 40 TR_XM_BayesUnsub 12527 10.11 16.45 7.16 41 HTML_IMAGE_ONLY_32 12243 4.83 0.15 7.00 42 XM_H_GMP 11518 6.23 5.48 6.59 43 TM2_M_VERY_LONG_WORD 11377 5.43 3.11 6.51 44 BAYES_60 11367 7.13 8.47 6.50 45 TR_MAX_INTL_RELAY 10886 9.40 16.22 6.23 46 TR_XM_DK_Bayes 10881 4.32 0.23 6.22 47 RCVD_IN_VALIDITY_SAFE 10871 5.27 3.25 6.22 48 TR_XM_DK_Bayes1 10756 4.27 0.22 6.15 49 XM_DK_Undo_02 10409 17.03 40.84 5.95 50 BAYES_40 10393 4.51 1.44 5.94 51 XM_B_PhoneNumber 9785 5.10 4.05 5.60 52 TooManyTo_001 9732 5.21 4.46 5.57 53 RELAYCOUNTRY_META 9664 10.08 19.88 5.53 54 XMStrtUSub 9485 5.17 4.62 5.42 55 HTML_IMAGE_RATIO_02 9307 6.03 7.56 5.32 56 TR_XM_DK_Bayes2 9306 3.69 0.19 5.32 57 IN_ZIMBRA_NJ_WHITELIST 9259 3.64 0.09 5.30 58 XM_H_Long_From01 9213 5.25 5.22 5.27 59 RCVD_IN_MSPIKE_H3 9168 5.24 5.22 5.24 60 LOTS_OF_MONEY 9076 6.92 10.63 5.19 61 RCVD_IN_MSPIKE_H5 8708 4.11 2.24 4.98 62 BAYES_99 8521 14.27 34.47 4.87 63 XM_UncommonTLD01 8494 5.25 6.11 4.86 64 RCVD_IN_VALIDITY_CERTIFIED 8448 4.07 2.44 4.83 65 XM_B_Phish_Phrases 8395 5.64 7.43 4.80 66 XM_B_SpammyWords3 8277 7.74 14.20 4.73 67 KHOP_HELO_FCRDNS 7794 3.57 1.68 4.46 68 T_TooManySym_02 7721 3.20 0.59 4.42 69 MPART_ALT_DIFF 7698 5.09 6.55 4.40 70 HTML_IMAGE_RATIO_04 7558 4.49 4.86 4.32 71 XMNumbers 7363 4.01 3.58 4.21 72 BAYES_999 6930 10.89 25.78 3.96 73 TR_XM_SpammyWords4 6882 5.62 9.25 3.94 74 TR_XM_SpammyRelay 6710 7.28 14.70 3.84 75 INVALID_MSGID 6642 2.76 0.52 3.80 76 BAYES_80 6505 5.59 9.60 3.72 77 TO_MALFORMED 6257 2.46 0.04 3.58 78 XMSubMetaSx_00 6223 4.81 7.51 3.56 79 MAY_BE_FORGED 6044 2.36 0.00 3.46 80 BAYES_20 6032 2.67 1.00 3.45 81 RELAYCOUNTRY_CA 6025 5.33 9.38 3.45 82 BOTNET_IPINHOSTNAME 5955 6.19 12.16 3.41 83 TR_XM_DKIM_Undo 5680 11.86 30.38 3.25 84 T_REMOTE_IMAGE 5172 2.37 1.12 2.96 85 XM_B_SpammyTLD 4971 3.36 4.48 2.84 86 MIME_QP_LONG_LINE 4799 2.67 2.50 2.74 87 MIME_HTML_MOSTLY 4551 3.30 4.81 2.60 88 MIME_HTML_ONLY_MULTI 4404 2.69 3.06 2.52 89 BAYES_95 4378 3.59 5.92 2.50 90 FROM_EXCESS_BASE64 4283 2.41 2.32 2.45 91 HTML_IMAGE_RATIO_06 4280 2.37 2.20 2.45 92 XM_Body_Dirty_Words 4274 4.41 8.64 2.44 93 T_TVD_MIME_NO_HEADERS 4244 1.66 0.02 2.43 94 MIME_CHARSET_FARAWAY 4092 1.76 0.50 2.34 95 T_XMDrugObfuBody_14 4081 3.11 4.78 2.33 96 MAILING_LIST_MULTI 3971 2.14 1.85 2.27 97 TR_DCC_Bayes_99 3920 9.30 24.48 2.24 98 HTML_IMAGE_RATIO_08 3890 2.17 2.07 2.22 99 CHARSET_FARAWAY_HEADER 3747 1.53 0.22 2.14 100 XM_PDF 3677 1.62 0.57 2.10 101 RCVD_IN_IADB_LISTED 3660 1.63 0.62 2.09 102 XM_CamelCaseFrm001 3561 2.75 4.28 2.04 103 TM2_M_URI_OPT_OUT 3351 2.01 2.20 1.92 104 T_TooManySym_03 3232 1.31 0.16 1.85 105 RCVD_IN_IADB_SPF 3232 1.44 0.57 1.85 106 TooManyTo_002 3220 1.42 0.52 1.84 107 TR_XM_UnparsRelay 3075 4.09 9.11 1.76 108 BAYES_05 3061 1.36 0.53 1.75 109 XM_DK_Undo_01 2998 1.63 1.43 1.71 110 TR_XM_PhishingBody 2974 2.96 5.67 1.70 111 DKIM_INVALID 2934 2.55 4.41 1.68 112 RCVD_IN_IADB_SENDERID 2927 1.31 0.54 1.67 113 HTML_MIME_NO_HTML_TAG 2924 1.57 1.35 1.67 114 UNTRUSTED_Relay 2922 3.32 6.85 1.67 115 XMStockSpam_06 2876 1.71 1.85 1.64 116 IN_HORDE_ADDRESS_BOOK 2831 1.14 0.09 1.62 117 RCVD_IN_IADB_DK 2828 1.28 0.55 1.62 118 XM_SPF_SoftFail 2712 1.91 2.69 1.55 119 URI_NOVOWEL 2703 1.43 1.19 1.55 120 TVD_SPACE_RATIO 2683 1.11 0.20 1.53 121 XMGappySubj_01 2668 1.14 0.30 1.53 122 TR_XM_SpammyWords5 2549 2.03 3.25 1.46 123 RCVD_IN_IADB_VOUCHED 2493 1.04 0.22 1.43 124 RCVD_IN_MSPIKE_H4 2375 1.11 0.59 1.36 125 XMGappySubj_02 2281 0.91 0.05 1.30 126 XM_B_Investor 2207 2.40 4.84 1.26 127 XM_B_Unsub2 2164 1.61 2.40 1.24 128 XMBdyGiftCard01 2131 1.09 0.80 1.22 129 XM_GoogleGroups 2124 1.09 0.83 1.21 130 XMBrknScrpt_02 2117 1.41 1.84 1.21 131 XM_B_URI_Unicode 2104 1.51 2.17 1.20 132 XMSexyCombo_05 2093 2.24 4.47 1.20 133 TR_Symld_Words 2073 1.04 0.74 1.19 134 XM_B_COPY_HTML 2029 1.31 1.62 1.16 135 BOTNET 2012 3.87 9.72 1.15 136 XMDiploma_00 2011 1.64 2.69 1.15 137 TVD_RCVD_IP 1995 1.20 1.32 1.14 138 XM_SendGrid 1952 1.05 0.90 1.12 139 RCVD_IN_IADB_OPTIN 1900 0.79 0.15 1.09 140 T_XMDrugObfuBody_08 1844 1.63 2.86 1.05 141 SUBJ_ALL_CAPS 1798 1.22 1.63 1.03 142 TooManyTo_003 1631 0.79 0.47 0.93 143 XM_H_PHPMailer 1629 0.87 0.75 0.93 144 XM_UB50 1596 1.64 3.21 0.91 145 XM_OfRef6 1563 1.98 4.30 0.89 146 TR_XM_SpammyWords2 1536 4.67 12.81 0.88 147 DKIM_ADSP_CUSTOM_MED 1514 0.91 1.01 0.87 148 URI_HEX 1489 1.02 1.39 0.85 149 TR_MetaPhish_Combo_01 1433 0.91 1.09 0.82 150 XMBody_95 1405 0.59 0.13 0.80 151 TR_XM_DK_SendGrid 1370 0.72 0.57 0.78 152 XMBSHREFv2 1348 0.64 0.37 0.77 153 TooManyTo_004 1321 0.66 0.44 0.76 154 XMSlimDrugH 1315 0.97 1.43 0.75 155 HTML_TAG_BALANCE_BODY 1314 1.13 1.94 0.75 156 TM2_M_OBFU_COMMENT 1312 0.72 0.66 0.75 157 TR_XM_Base64_M1 1303 0.81 0.96 0.75 158 XM_ProductURIs 1278 1.07 1.80 0.73 159 T_XMHurry_00 1249 1.30 2.57 0.71 160 MSGID_FROM_MTA_HEADER 1248 0.55 0.20 0.71 161 XMSubMetaI_00 1244 0.80 0.98 0.71 162 T_STY_INVIS_DIRECT 1211 0.87 1.24 0.69 163 T_FILL_THIS_FORM_SHORT 1206 2.06 5.00 0.69 164 LOW_PRICE 1193 0.53 0.22 0.68 165 LONG_JUNK_URI 1188 0.81 1.09 0.68 166 MPART_ALT_DIFF_COUNT 1186 0.81 1.10 0.68 167 PLING_QUERY 1170 0.90 1.41 0.67 168 XM_H_Long_From02 1163 0.81 1.11 0.67 169 XM_B_SpammyWords4 1159 1.11 2.06 0.66 170 XMPhish30 1151 1.36 2.87 0.66 171 TooManyTo_005 1147 0.58 0.41 0.66 172 RCVD_IN_BL_SPAMCOP_NET 1140 3.29 8.95 0.65 173 T_XMDrugObfuBody_00 1129 0.79 1.09 0.65 174 XM_B_FormFill 1093 0.44 0.03 0.63 175 SHORT_URI_2 1080 0.44 0.07 0.62 176 USER_IN_WELCOMELIST 1072 0.42 0.00 0.61 177 USER_IN_WHITELIST 1072 0.42 0.00 0.61 178 RCVD_IN_PBL 1066 0.81 1.23 0.61 179 TR_XM_MSPIKECOMBO 1063 2.33 6.02 0.61 180 RCVD_IN_MSPIKE_BL 1063 2.33 6.02 0.61 181 SUBJ_DOLLARS 1016 0.63 0.73 0.58 182 T_TooManySym_04 1000 0.40 0.03 0.57 183 FORGED_GMAIL_RCVD 997 0.65 0.84 0.57 184 XM_B_DNDMA 967 0.62 0.77 0.55 185 HELO_MISC_IP 965 0.39 0.04 0.55 186 NML_ADSP_CUSTOM_MED 962 0.66 0.90 0.55 187 XMLngstWrd_00 931 0.44 0.24 0.53 188 DIET_1 925 1.15 2.49 0.53 189 LONG_JUNK_URI2 923 0.43 0.22 0.53 190 XMNoVowels 897 0.50 0.47 0.51 191 RCVD_IN_MSPIKE_L3 856 1.30 3.05 0.49 192 XMHTML_After_End 848 0.53 0.63 0.48 193 XMSubMetaSxObfu_03 840 0.49 0.50 0.48 194 XMGenDplmaNmb 833 0.62 0.94 0.48 195 HTML_FONT_FACE_BAD 820 0.59 0.84 0.47 196 XMBody_17 818 1.26 2.98 0.47 197 RELAYCOUNTRY_AU 818 1.09 2.43 0.47 198 DKIM_ADSP_NXDOMAIN 806 0.98 2.08 0.46 199 XM_URI_RBL 794 1.09 2.46 0.45 200 XMLngstWrd_01 790 0.37 0.19 0.45 ----------------------------------------------------------------------