Email: 263968 Autolearn: 0 AvgScore: 2.51 AvgScanTime: 1.32 sec Spam: 90408 Autolearn: 0 AvgScore: 14.08 AvgScanTime: 1.46 sec Ham: 173560 Autolearn: 0 AvgScore: -3.52 AvgScanTime: 1.25 sec Time Spent Running SA: 96.80 hours Time Spent Processing Spam: 36.74 hours Time Spent Processing Ham: 60.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 84199 84.76 93.13 80.40 2 DKIM_SIGNED 80361 78.98 88.89 73.82 3 XM_DK_Pass 78953 77.79 87.33 72.82 4 DKIM_VALID 78321 77.27 86.63 72.40 5 XM_B_Unicode 76967 74.81 85.13 69.44 6 RELAYCOUNTRY_US 73500 80.14 81.30 79.54 7 DCC_CHECK 64158 49.39 70.96 38.14 8 XMListUnsubscribeExists 62804 58.07 69.47 52.14 9 XM_B_SpammyWords 62794 52.51 69.46 43.68 10 DKIM_VALID_AU 59913 62.48 66.27 60.50 11 RCVD_IN_MSPIKE_H2 48911 43.11 54.10 37.39 12 XM_DK_Undo_02 44433 21.95 49.15 7.78 13 XM_B_Unicode3 40583 44.11 44.89 43.71 14 TR_XM_DKIM_Undo 35953 17.23 39.77 5.48 15 BAYES_99 35658 18.06 39.44 6.92 16 LOC_TINY_FONT_1 34647 31.55 38.32 28.02 17 XM_B_SpammyWords2 34465 24.57 38.12 17.51 18 BAYES_50 32151 48.10 35.56 54.64 19 HTML_FONT_LOW_CONTRAST 31450 31.61 34.79 29.95 20 DKIM_VALID_EF 28814 30.24 31.87 29.39 21 BAYES_999 28716 14.63 31.76 5.70 22 MIME_HTML_ONLY 28347 24.78 31.35 21.36 23 FVGT_m_MULTI_ODD 27114 26.51 29.99 24.69 24 DCC_CHECK_NEGATIVE 26230 50.59 29.01 61.83 25 TR_DCC_Bayes_99 24508 11.37 27.11 3.18 26 T_KAM_HTML_FONT_INVALID 24448 21.12 27.04 18.03 27 XM_Body_Dirty_Words 20755 15.80 22.96 12.07 28 T_TM2_M_HEADER_IN_MSG 18629 22.09 20.61 22.86 29 RELAYCOUNTRY_META 17828 8.96 19.72 3.36 30 XMSubLong 17445 21.88 19.30 23.23 31 XM_Multi_Part_URI 16659 16.15 18.43 14.97 32 XM_B_Unsub 13749 11.38 15.21 9.39 33 TR_XM_BayesUnsub 13533 10.23 14.97 7.76 34 UNPARSEABLE_RELAY 13472 10.80 14.90 8.67 35 TR_XM_UnparsRelay 13204 9.75 14.60 7.22 36 TR_XM_SpammyWords2 11737 5.54 12.98 1.66 37 TR_XM_SpammyRelay 11646 5.48 12.88 1.62 38 BOTNET_IPINHOSTNAME 11602 8.85 12.83 6.78 39 RCVD_IN_BL_SPAMCOP_NET 11010 4.47 12.18 0.46 40 BOTNET 10451 4.92 11.56 1.46 41 RCVD_IN_MSPIKE_WL 10417 15.86 11.52 18.12 42 XMSexyCombo_05 9767 6.67 10.80 4.51 43 FSL_BULK_SIG 9625 6.19 10.65 3.88 44 XM_B_SpammyWords3 9334 6.61 10.32 4.67 45 LOTS_OF_MONEY 8713 7.46 9.64 6.32 46 HTML_IMAGE_RATIO_02 8230 8.72 9.10 8.52 47 RELAYCOUNTRY_CA 8184 3.97 9.05 1.33 48 BAYES_80 8009 6.32 8.86 5.00 49 TR_XM_SPAMCOP 7796 3.07 8.62 0.17 50 RCVD_IN_MSPIKE_H3 7683 10.97 8.50 12.26 51 TR_XM_SpammyWords4 7445 5.63 8.23 4.27 52 XM_SendGrid 7212 6.54 7.98 5.78 53 UNTRUSTED_Relay 7126 3.60 7.88 1.37 54 XM_Evil_Numbers_Gen 7082 8.59 7.83 8.98 55 BAYES_60 6773 9.94 7.49 11.21 56 XM_H_Long_From01 6326 5.59 7.00 4.86 57 XM_UncommonTLD01 6115 5.51 6.76 4.85 58 XMSubMetaSx_00 5997 5.06 6.63 4.23 59 LotsOfNums_01 5381 7.42 5.95 8.19 60 MPART_ALT_DIFF 5283 5.73 5.84 5.67 61 XM_B_Phish_Phrases 5270 3.68 5.83 2.56 62 TR_XM_PhishingBody 5067 3.31 5.60 2.12 63 HTML_IMAGE_RATIO_04 4957 5.10 5.48 4.90 64 BAYES_95 4764 3.89 5.27 3.18 65 RCVD_IN_VALIDITY_SAFE 4676 6.66 5.17 7.44 66 TooManyTo_001 4649 6.06 5.14 6.54 67 TR_XM_DK_SendGrid 4535 4.16 5.02 3.71 68 RCVD_IN_MSPIKE_BL 4516 2.28 5.00 0.86 69 XMStrtUSub 4469 5.97 4.94 6.50 70 TR_XM_MSPIKECOMBO 4374 2.22 4.84 0.86 71 T_XMDrugObfuBody_14 4204 2.73 4.65 1.73 72 T_REMOTE_IMAGE 4174 3.74 4.62 3.28 73 XM_B_SpammyTLD 4088 2.89 4.52 2.04 74 XM_DIRTYINTL 3974 1.71 4.40 0.31 75 XM_SPF_SoftFail 3894 3.57 4.31 3.18 76 RCVD_IN_VALIDITY_CERTIFIED 3596 5.76 3.98 6.69 77 TR_XM_SpammyWords5 3594 2.41 3.98 1.59 78 XM_CamelCaseFrm001 3519 2.60 3.89 1.93 79 XM_OfRef6 3402 1.83 3.76 0.82 80 MIME_HTML_MOSTLY 3360 3.33 3.72 3.12 81 XMNumbers 3311 4.27 3.66 4.59 82 XM_UB50 3243 1.75 3.59 0.80 83 T_FILL_THIS_FORM_SHORT 3142 1.51 3.48 0.48 84 BOTNET_NORDNS 3083 1.18 3.41 0.01 85 XM_B_Investor 3032 2.06 3.35 1.39 86 XMDiploma_00 2975 1.81 3.29 1.04 87 T_TooManySym_01 2967 7.04 3.28 9.00 88 USER_IN_DEF_DKIM_WL 2926 12.62 3.24 17.51 89 T_XMDrugObfuBody_08 2845 1.73 3.15 1.00 90 HTML_IMAGE_RATIO_06 2807 3.75 3.10 4.09 91 RCVD_IN_VALIDITY_RPBL 2800 1.12 3.10 0.09 92 TR_XM_MSPIKECOMBO2 2725 1.10 3.01 0.10 93 MIME_HTML_ONLY_MULTI 2712 3.09 3.00 3.14 94 TM2_M_VERY_LONG_WORD 2677 1.83 2.96 1.23 95 HTML_IMAGE_RATIO_08 2647 2.59 2.93 2.41 96 XM_B_Phish66 2595 1.57 2.87 0.89 97 SpammyFromTLD_01 2536 1.21 2.81 0.38 98 RCVD_IN_MSPIKE_H4 2535 4.04 2.80 4.68 99 XMBody_17 2471 1.29 2.73 0.55 100 XMBrknScrpt_02 2401 1.18 2.66 0.42 101 TR_XM_SpammyWords3 2398 1.20 2.65 0.45 102 RCVD_IN_MSPIKE_L3 2295 1.18 2.54 0.47 103 TR_XM_PHPDW 2289 1.11 2.53 0.37 104 XM_DK_Undo_01 2262 1.64 2.50 1.19 105 TR_XM_PHPForged 2241 1.02 2.48 0.26 106 XMSexyCombo_01 2220 1.23 2.46 0.60 107 URI_NOVOWEL 2211 1.86 2.45 1.55 108 TR_XM_FormFill2 2210 1.01 2.44 0.26 109 XM_H_PHPOS 2199 0.99 2.43 0.24 110 HTML_TAG_BALANCE_BODY 2137 1.32 2.36 0.78 111 ALL_TRUSTED 2127 12.34 2.35 17.54 112 SUBJ_ALL_CAPS 2109 1.60 2.33 1.22 113 FROM_EXCESS_BASE64 2109 3.13 2.33 3.54 114 HK_RANDOM_REPLYTO 2066 0.85 2.29 0.10 115 DKIM_INVALID 2040 1.71 2.26 1.42 116 XM_B_SpammyWords4 1984 1.40 2.19 0.98 117 TM2_M_URI_OPT_OUT 1965 2.62 2.17 2.85 118 XM_H_Undi_Recip 1917 0.85 2.12 0.18 119 MIME_QP_LONG_LINE 1877 2.93 2.08 3.38 120 XM_B_Unsub2 1812 1.26 2.00 0.88 121 SpammyFromTLD_02 1805 0.84 2.00 0.24 122 XM_B_DynamicLink 1770 0.74 1.96 0.10 123 TR_XM_NoHeaderRelay 1762 0.74 1.95 0.11 124 RCVD_IN_PSBL 1757 0.83 1.94 0.25 125 XMStockSpam_06 1683 1.94 1.86 1.98 126 TR_XM_MaxSPIKE 1659 0.65 1.84 0.03 127 TR_XM_FormFill 1615 0.62 1.79 0.02 128 RCVD_IN_IADB_LISTED 1586 2.96 1.75 3.59 129 KHOP_HELO_FCRDNS 1583 2.40 1.75 2.73 130 XMBdyGiftCard01 1550 1.59 1.71 1.52 131 PDS_OTHER_BAD_TLD 1518 0.73 1.68 0.24 132 XMSubMetaI_00 1504 1.35 1.66 1.19 133 TR_XM_SB_Phish 1492 1.69 1.65 1.71 134 XM_UB99 1475 0.56 1.63 0.00 135 T_XMHurry_00 1424 0.97 1.58 0.65 136 RCVD_IN_MSPIKE_L5 1416 0.55 1.57 0.02 137 MPART_ALT_DIFF_COUNT 1412 1.10 1.56 0.85 138 MONEY_NOHTML 1396 0.56 1.54 0.04 139 HTML_IMAGE_ONLY_20 1382 1.06 1.53 0.81 140 XMSubPhish11 1367 1.64 1.51 1.70 141 TR_LOTS_OF_MONEY3 1361 0.63 1.51 0.18 142 URIBL_DBL_SPAM 1358 0.52 1.50 0.01 143 XM_B_Crypto 1358 0.59 1.50 0.12 144 XM_Body_Dirty_Words_01 1304 0.58 1.44 0.13 145 XM_B_COVIDMETA 1287 0.70 1.42 0.32 146 URI_HEX 1279 1.28 1.41 1.21 147 TR_Symld_Words 1266 1.37 1.40 1.36 148 BAYES_40 1263 3.07 1.40 3.94 149 XMGenDplmaNmb 1261 0.84 1.39 0.56 150 THIS_AD 1260 0.83 1.39 0.54 151 T_XMDrugObfuBody_00 1258 1.09 1.39 0.94 152 SHOPIFY_IMG_NOT_RCVD_SFY 1256 0.65 1.39 0.26 153 MAILING_LIST_MULTI 1244 1.92 1.38 2.20 154 HTML_MIME_NO_HTML_TAG 1224 1.22 1.35 1.16 155 RCVD_IN_IADB_SPF 1217 2.57 1.35 3.20 156 TR_XM_Undi_Recip5 1185 0.46 1.31 0.01 157 XMSubMetaSSx_00 1181 0.61 1.31 0.25 158 XM_H_PHPMailer 1174 0.90 1.30 0.69 159 HTML_SHORT_LINK_IMG_3 1168 0.46 1.29 0.03 160 XMReplyNow 1166 0.58 1.29 0.22 161 XM_UB999 1157 0.44 1.28 0.00 162 DKIM_ADSP_NXDOMAIN 1155 0.72 1.28 0.44 163 TR_XM_BayesRelay 1145 0.43 1.27 0.00 164 XMHTML_After_End 1143 0.78 1.26 0.52 165 HTTPS_HTTP_MISMATCH 1141 0.76 1.26 0.50 166 XMPhish30 1134 0.91 1.25 0.73 167 TR_XM_RelayPhish 1129 0.45 1.25 0.03 168 XM_H_Long_From02 1123 1.28 1.24 1.30 169 URI_TRY_3LD 1119 0.81 1.24 0.59 170 RELAYCOUNTRY_AU 1116 0.56 1.23 0.20 171 TR_XM_Undi_Recip11 1106 0.44 1.22 0.03 172 DIET_1 1102 0.67 1.22 0.39 173 RCVD_IN_IADB_VOUCHED 1086 1.95 1.20 2.34 174 RCVD_IN_IADB_DK 1084 2.24 1.20 2.78 175 RCVD_IN_IADB_SENDERID 1066 2.30 1.18 2.89 176 UNDISC_MONEY 1065 0.41 1.18 0.01 177 XMSubNoVowel 1048 1.11 1.16 1.08 178 NO_DNS_FOR_FROM 1045 0.66 1.16 0.40 179 TR_XM_MaxWHORU 1039 0.61 1.15 0.33 180 XM_URI_RBL 1031 0.46 1.14 0.11 181 RCVD_IN_RP_SAFE 1023 1.30 1.13 1.39 182 TR_XM_Undi_Recip2 1008 0.41 1.11 0.04 183 RELAYCOUNTRY_RU 1002 0.39 1.11 0.02 184 XMHTMLBadTable_001 1001 0.92 1.11 0.82 185 TR_MetaPhish_Combo_01 1000 0.96 1.11 0.88 186 XMSexyCombo_04 974 0.52 1.08 0.24 187 TR_XM_Base64_M1 973 1.35 1.08 1.50 188 TR_XM_Undi_RecipCombo2 959 0.36 1.06 0.00 189 BAYES_20 935 2.33 1.03 3.01 190 TR_Mismatch_TLD_01 933 0.52 1.03 0.25 191 PLING_QUERY 900 0.63 1.00 0.44 192 URIBL_BLACK 887 0.35 0.98 0.03 193 MIME_BASE64_TEXT 885 0.42 0.98 0.13 194 HTML_FONT_TINY_NORDNS 878 0.39 0.97 0.09 195 TR_Sbj_FN_Bdy 866 0.41 0.96 0.12 196 XMClaimOffer 854 0.38 0.94 0.09 197 TR_XM_Crypto2 835 0.32 0.92 0.00 198 XM_B_COPY_HTML 834 1.02 0.92 1.07 199 XMSlimDrugH 823 0.74 0.91 0.65 200 XM_Combo_Sbj 818 0.39 0.90 0.13 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 139547 84.76 93.13 80.40 2 RELAYCOUNTRY_US 138056 80.14 81.30 79.54 3 DKIM_SIGNED 128125 78.98 88.89 73.82 4 XM_DK_Pass 126378 77.79 87.33 72.82 5 DKIM_VALID 125655 77.27 86.63 72.40 6 XM_B_Unicode 120518 74.81 85.13 69.44 7 DCC_CHECK_NEGATIVE 107316 50.59 29.01 61.83 8 DKIM_VALID_AU 105008 62.48 66.27 60.50 9 BAYES_50 94825 48.10 35.56 54.64 10 XMListUnsubscribeExists 90493 58.07 69.47 52.14 11 XM_B_Unicode3 75857 44.11 44.89 43.71 12 XM_B_SpammyWords 75807 52.51 69.46 43.68 13 DCC_CHECK 66204 49.39 70.96 38.14 14 RCVD_IN_MSPIKE_H2 64894 43.11 54.10 37.39 15 HTML_FONT_LOW_CONTRAST 51982 31.61 34.79 29.95 16 DKIM_VALID_EF 51009 30.24 31.87 29.39 17 LOC_TINY_FONT_1 48638 31.55 38.32 28.02 18 FVGT_m_MULTI_ODD 42853 26.51 29.99 24.69 19 XMSubLong 40318 21.88 19.30 23.23 20 T_TM2_M_HEADER_IN_MSG 39678 22.09 20.61 22.86 21 MIME_HTML_ONLY 37074 24.78 31.35 21.36 22 RCVD_IN_MSPIKE_WL 31451 15.86 11.52 18.12 23 T_KAM_HTML_FONT_INVALID 31294 21.12 27.04 18.03 24 ALL_TRUSTED 30450 12.34 2.35 17.54 25 XM_B_SpammyWords2 30399 24.57 38.12 17.51 26 USER_IN_DEF_DKIM_WL 30388 12.62 3.24 17.51 27 XM_Multi_Part_URI 25975 16.15 18.43 14.97 28 XM_DKIMWhitelistDomains 22470 8.56 0.15 12.95 29 RCVD_IN_MSPIKE_H3 21273 10.97 8.50 12.26 30 XM_Body_Dirty_Words 20949 15.80 22.96 12.07 31 BAYES_60 19458 9.94 7.49 11.21 32 BAYES_00 17319 6.72 0.46 9.98 33 XM_B_Unsub 16303 11.38 15.21 9.39 34 T_TooManySym_01 15617 7.04 3.28 9.00 35 XM_Evil_Numbers_Gen 15593 8.59 7.83 8.98 36 UNPARSEABLE_RELAY 15039 10.80 14.90 8.67 37 HTML_IMAGE_RATIO_02 14783 8.72 9.10 8.52 38 LotsOfNums_01 14207 7.42 5.95 8.19 39 XM_DK_Undo_02 13501 21.95 49.15 7.78 40 TR_XM_BayesUnsub 13463 10.23 14.97 7.76 41 RCVD_IN_VALIDITY_SAFE 12910 6.66 5.17 7.44 42 TR_XM_UnparsRelay 12523 9.75 14.60 7.22 43 BAYES_99 12013 18.06 39.44 6.92 44 BOTNET_IPINHOSTNAME 11770 8.85 12.83 6.78 45 RCVD_IN_VALIDITY_CERTIFIED 11611 5.76 3.98 6.69 46 TooManyTo_001 11349 6.06 5.14 6.54 47 XMStrtUSub 11281 5.97 4.94 6.50 48 LOTS_OF_MONEY 10977 7.46 9.64 6.32 49 TR_XM_DK_Bayes 10190 3.99 0.39 5.87 50 TR_XM_DK_Bayes1 10085 3.95 0.38 5.81 51 IN_ZIMBRA_NJ_WHITELIST 10055 3.84 0.10 5.79 52 XM_SendGrid 10039 6.54 7.98 5.78 53 BAYES_999 9892 14.63 31.76 5.70 54 MPART_ALT_DIFF 9833 5.73 5.84 5.67 55 TR_XM_DKIM_Undo 9517 17.23 39.77 5.48 56 T_TooManySym_02 9492 3.83 0.69 5.47 57 TR_XM_DK_Bayes2 9209 3.58 0.28 5.31 58 TVD_RCVD_IP 8884 3.49 0.36 5.12 59 BAYES_80 8681 6.32 8.86 5.00 60 HTML_IMAGE_RATIO_04 8507 5.10 5.48 4.90 61 XM_H_Long_From01 8434 5.59 7.00 4.86 62 XM_UncommonTLD01 8418 5.51 6.76 4.85 63 RCVD_IN_MSPIKE_H4 8119 4.04 2.80 4.68 64 XM_B_SpammyWords3 8113 6.61 10.32 4.67 65 XMNumbers 7968 4.27 3.66 4.59 66 XMSexyCombo_05 7836 6.67 10.80 4.51 67 TR_XM_SpammyWords4 7407 5.63 8.23 4.27 68 XMSubMetaSx_00 7349 5.06 6.63 4.23 69 INVALID_MSGID 7108 2.79 0.29 4.10 70 HTML_IMAGE_RATIO_06 7102 3.75 3.10 4.09 71 BAYES_40 6844 3.07 1.40 3.94 72 FSL_BULK_SIG 6726 6.19 10.65 3.88 73 TR_XM_DK_SendGrid 6439 4.16 5.02 3.71 74 XM_H_Trusted_IP 6293 2.38 0.00 3.63 75 RCVD_IN_IADB_LISTED 6237 2.96 1.75 3.59 76 FROM_EXCESS_BASE64 6147 3.13 2.33 3.54 77 TO_MALFORMED 5974 2.27 0.01 3.44 78 MIME_QP_LONG_LINE 5867 2.93 2.08 3.38 79 RELAYCOUNTRY_META 5829 8.96 19.72 3.36 80 T_REMOTE_IMAGE 5701 3.74 4.62 3.28 81 RCVD_IN_IADB_SPF 5562 2.57 1.35 3.20 82 XM_SPF_SoftFail 5523 3.57 4.31 3.18 83 TR_DCC_Bayes_99 5515 11.37 27.11 3.18 84 BAYES_95 5511 3.89 5.27 3.18 85 MIME_HTML_ONLY_MULTI 5444 3.09 3.00 3.14 86 MIME_HTML_MOSTLY 5419 3.33 3.72 3.12 87 BAYES_20 5225 2.33 1.03 3.01 88 RCVD_IN_IADB_SENDERID 5015 2.30 1.18 2.89 89 TM2_M_URI_OPT_OUT 4953 2.62 2.17 2.85 90 RCVD_IN_IADB_DK 4824 2.24 1.20 2.78 91 KHOP_HELO_FCRDNS 4741 2.40 1.75 2.73 92 BOUNCE_MESSAGE 4522 1.91 0.58 2.61 93 ANY_BOUNCE_MESSAGE 4522 1.91 0.58 2.61 94 XM_B_Phish_Phrases 4445 3.68 5.83 2.56 95 HTML_IMAGE_RATIO_08 4182 2.59 2.93 2.41 96 RCVD_IN_IADB_VOUCHED 4064 1.95 1.20 2.34 97 XMBSHREFv2 3933 1.55 0.19 2.27 98 XM_shorewaves_Whitelist 3867 1.46 0.00 2.23 99 MAILING_LIST_MULTI 3826 1.92 1.38 2.20 100 BAYES_05 3680 1.56 0.49 2.12 101 TR_XM_PhishingBody 3679 3.31 5.60 2.12 102 IN_HORDE_ADDRESS_BOOK 3657 1.42 0.10 2.11 103 XM_B_SpammyTLD 3548 2.89 4.52 2.04 104 XM_PDF 3526 1.49 0.45 2.03 105 XMStockSpam_06 3441 1.94 1.86 1.98 106 XM_CamelCaseFrm001 3342 2.60 3.89 1.93 107 TVD_SPACE_RATIO 3100 1.21 0.10 1.79 108 T_XMDrugObfuBody_14 3011 2.73 4.65 1.73 109 TR_XM_SB_Phish 2975 1.69 1.65 1.71 110 XMSubPhish11 2959 1.64 1.51 1.70 111 XMGappySubj_01 2937 1.19 0.22 1.69 112 TR_XM_SpammyWords2 2883 5.54 12.98 1.66 113 RCVD_IN_IADB_OPTIN 2840 1.32 0.72 1.64 114 TR_XM_SpammyRelay 2813 5.48 12.88 1.62 115 TR_XM_SpammyWords5 2768 2.41 3.98 1.59 116 URI_NOVOWEL 2694 1.86 2.45 1.55 117 HTML_FONT_FACE_BAD 2670 1.18 0.48 1.54 118 XMBdyGiftCard01 2634 1.59 1.71 1.52 119 TR_XM_Base64_M1 2603 1.35 1.08 1.50 120 BOTNET 2533 4.92 11.56 1.46 121 DKIM_INVALID 2470 1.71 2.26 1.42 122 RCVD_IN_RP_SAFE 2409 1.30 1.13 1.39 123 XM_B_Investor 2406 2.06 3.35 1.39 124 MSGID_NOFQDN1 2382 0.92 0.05 1.37 125 UNTRUSTED_Relay 2372 3.60 7.88 1.37 126 TR_Symld_Words 2355 1.37 1.40 1.36 127 RELAYCOUNTRY_CA 2301 3.97 9.05 1.33 128 XM_GoogleGroups 2279 1.09 0.67 1.31 129 XM_H_Long_From02 2256 1.28 1.24 1.30 130 RCVD_IN_RP_CERTIFIED 2207 1.13 0.86 1.27 131 TM2_M_VERY_LONG_WORD 2141 1.83 2.96 1.23 132 T_TooManySym_03 2138 0.90 0.27 1.23 133 SUBJ_ALL_CAPS 2125 1.60 2.33 1.22 134 TooManyTo_002 2112 1.06 0.77 1.22 135 URI_HEX 2103 1.28 1.41 1.21 136 XM_DK_Undo_01 2073 1.64 2.50 1.19 137 RCVD_IN_MSPIKE_H5 2059 0.86 0.22 1.19 138 XMSubMetaI_00 2058 1.35 1.66 1.19 139 XM_RXBody 2043 0.88 0.30 1.18 140 HTML_MIME_NO_HTML_TAG 2006 1.22 1.35 1.16 141 XMSubNoVowel 1879 1.11 1.16 1.08 142 XM_B_COPY_HTML 1859 1.02 0.92 1.07 143 XMDiploma_00 1813 1.81 3.29 1.04 144 T_XMDrugObfuBody_08 1731 1.73 3.15 1.00 145 XM_B_SpammyWords4 1704 1.40 2.19 0.98 146 T_XMDrugObfuBody_00 1624 1.09 1.39 0.94 147 TooManyTo_003 1576 0.84 0.72 0.91 148 XMBody_95 1557 0.61 0.07 0.90 149 XM_B_Phish66 1544 1.57 2.87 0.89 150 TR_MetaPhish_Combo_01 1528 0.96 1.11 0.88 151 XM_B_Unsub2 1527 1.26 2.00 0.88 152 DKIM_ADSP_CUSTOM_MED 1495 0.82 0.74 0.86 153 RCVD_IN_MSPIKE_BL 1494 2.28 5.00 0.86 154 TR_XM_MSPIKECOMBO 1493 2.22 4.84 0.86 155 MPART_ALT_DIFF_COUNT 1480 1.10 1.56 0.85 156 XMHTMLBadTable_001 1426 0.92 1.11 0.82 157 XM_OfRef6 1426 1.83 3.76 0.82 158 HTML_IMAGE_ONLY_20 1413 1.06 1.53 0.81 159 XM_UB50 1383 1.75 3.59 0.80 160 HTML_TAG_BALANCE_BODY 1357 1.32 2.36 0.78 161 XMPhish30 1272 0.91 1.25 0.73 162 XMSubMetaSxObfu_02 1261 0.65 0.49 0.73 163 TooManyTo_004 1212 0.69 0.67 0.70 164 XM_H_PHPMailer 1195 0.90 1.30 0.69 165 RDNS_DYNAMIC 1181 0.70 0.75 0.68 166 XMLngstWrd_00 1148 0.74 0.88 0.66 167 XMSlimDrugH 1136 0.74 0.91 0.65 168 T_XMHurry_00 1130 0.97 1.58 0.65 169 XM_S_SubURI 1055 0.41 0.02 0.61 170 TooManyTo_005 1054 0.62 0.65 0.61 171 USER_IN_WELCOMELIST 1042 0.39 0.00 0.60 172 USER_IN_WHITELIST 1042 0.39 0.00 0.60 173 XMSexyCombo_01 1039 1.23 2.46 0.60 174 URI_TRY_3LD 1032 0.81 1.24 0.59 175 DATE_IN_PAST_03_06 1030 0.58 0.54 0.59 176 XM_ProductURIs 1023 0.65 0.76 0.59 177 XMLngstWrd_01 1013 0.66 0.80 0.58 178 T_TooManySym_04 988 0.44 0.19 0.57 179 XMGenDplmaNmb 967 0.84 1.39 0.56 180 XMBody_17 947 1.29 2.73 0.55 181 THIS_AD 942 0.83 1.39 0.54 182 XMHTML_After_End 905 0.78 1.26 0.52 183 XM_B_REG_HTML 894 0.59 0.73 0.52 184 NML_ADSP_CUSTOM_MED 875 0.54 0.62 0.50 185 HTTPS_HTTP_MISMATCH 868 0.76 1.26 0.50 186 FORGED_GMAIL_RCVD 854 0.52 0.58 0.49 187 T_FILL_THIS_FORM_SHORT 841 1.51 3.48 0.48 188 XMLngstWrd_02 836 0.57 0.73 0.48 189 RCVD_IN_MSPIKE_L3 812 1.18 2.54 0.47 190 XMSubMetaSxObfu_03 806 0.47 0.48 0.46 191 RCVD_IN_BL_SPAMCOP_NET 797 4.47 12.18 0.46 192 TR_XM_SpammyWords3 778 1.20 2.65 0.45 193 PLING_QUERY 765 0.63 1.00 0.44 194 DKIM_ADSP_NXDOMAIN 755 0.72 1.28 0.44 195 TR_LOTS_OF_MONEY2 748 0.52 0.69 0.43 196 T_MONEY_PERCENT 748 0.52 0.69 0.43 197 CTE_8BIT_MISMATCH 735 0.29 0.03 0.42 198 XM_ShortIntro_01 723 0.43 0.47 0.42 199 DEAR_SOMETHING 723 0.35 0.23 0.42 200 XMBrknScrpt_02 722 1.18 2.66 0.42 ----------------------------------------------------------------------