Email: 289350 Autolearn: 0 AvgScore: 3.80 AvgScanTime: 1.26 sec Spam: 100606 Autolearn: 0 AvgScore: 14.16 AvgScanTime: 1.41 sec Ham: 188744 Autolearn: 0 AvgScore: -1.73 AvgScanTime: 1.18 sec Time Spent Running SA: 101.58 hours Time Spent Processing Spam: 39.51 hours Time Spent Processing Ham: 62.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 93325 87.58 92.76 84.82 2 DKIM_SIGNED 89479 80.37 88.94 75.80 3 XM_DK_Pass 88215 79.00 87.68 74.37 4 DKIM_VALID 87721 78.50 87.19 73.87 5 RELAYCOUNTRY_US 82064 79.65 81.57 78.63 6 XM_B_Unicode 81904 74.24 81.41 70.42 7 DCC_CHECK 68545 46.40 68.13 34.81 8 DKIM_VALID_AU 67950 63.48 67.54 61.31 9 XMListUnsubscribeExists 67921 57.10 67.51 51.54 10 XM_B_SpammyWords 66746 51.80 66.34 44.05 11 XM_DK_Undo_02 48526 22.73 48.23 9.14 12 RCVD_IN_MSPIKE_H2 47461 41.21 47.18 38.03 13 XM_B_Unicode3 47371 44.00 47.09 42.35 14 BAYES_99 40548 19.31 40.30 8.12 15 HTML_FONT_LOW_CONTRAST 37025 31.69 36.80 28.97 16 XM_B_SpammyWords2 36743 25.02 36.52 18.89 17 TR_XM_DKIM_Undo 36492 16.29 36.27 5.64 18 LOC_TINY_FONT_1 36390 29.84 36.17 26.47 19 BAYES_50 36336 49.08 36.12 55.99 20 BAYES_999 33264 15.91 33.06 6.76 21 MIME_HTML_ONLY 32906 26.84 32.71 23.71 22 DKIM_VALID_EF 32612 30.36 32.42 29.26 23 DCC_CHECK_NEGATIVE 32035 53.57 31.84 65.14 24 FVGT_m_MULTI_ODD 31385 27.47 31.20 25.48 25 T_KAM_HTML_FONT_INVALID 27753 21.57 27.59 18.37 26 TR_DCC_Bayes_99 26528 10.84 26.37 2.57 27 XM_Body_Dirty_Words 23472 15.73 23.33 11.67 28 T_TM2_M_HEADER_IN_MSG 20293 22.74 20.17 24.11 29 RELAYCOUNTRY_META 19799 9.02 19.68 3.34 30 XMSubLong 19378 20.10 19.26 20.55 31 XM_Multi_Part_URI 18811 16.45 18.70 15.25 32 XM_B_Unsub 17714 12.44 17.61 9.68 33 TR_XM_BayesUnsub 17405 11.15 17.30 7.87 34 LOTS_OF_MONEY 15483 10.19 15.39 7.42 35 TR_XM_SpammyWords2 13975 5.67 13.89 1.28 36 RCVD_IN_MSPIKE_WL 13894 17.17 13.81 18.96 37 BOTNET_IPINHOSTNAME 13048 8.73 12.97 6.47 38 TR_XM_SpammyRelay 12889 5.54 12.81 1.67 39 UNPARSEABLE_RELAY 12113 10.03 12.04 8.96 40 XM_B_SpammyWords3 12055 7.37 11.98 4.91 41 TR_XM_UnparsRelay 11753 8.70 11.68 7.11 42 FSL_BULK_SIG 11457 6.75 11.39 4.29 43 TR_XM_SpammyWords4 11348 6.83 11.28 4.45 44 BOTNET 11305 4.90 11.24 1.53 45 XMSexyCombo_05 10306 5.67 10.24 3.23 46 RCVD_IN_BL_SPAMCOP_NET 9937 3.90 9.88 0.72 47 RELAYCOUNTRY_CA 9244 4.09 9.19 1.37 48 RCVD_IN_MSPIKE_H3 8692 10.66 8.64 11.73 49 XM_Evil_Numbers_Gen 8227 8.69 8.18 8.96 50 BAYES_80 7891 5.78 7.84 4.68 51 UNTRUSTED_Relay 7640 3.44 7.59 1.23 52 HTML_IMAGE_RATIO_02 7316 6.93 7.27 6.75 53 XM_SendGrid 7230 6.28 7.19 5.79 54 XM_UncommonTLD01 7054 5.32 7.01 4.41 55 BAYES_60 6953 9.43 6.91 10.78 56 XM_H_Long_From01 6630 7.47 6.59 7.94 57 TR_XM_PhishingBody 6538 4.03 6.50 2.71 58 MPART_ALT_DIFF 6525 5.92 6.49 5.61 59 XMSubMetaSx_00 6259 4.65 6.22 3.81 60 LotsOfNums_01 5820 7.44 5.78 8.32 61 TR_XM_SPAMCOP 5806 2.29 5.77 0.44 62 TM2_M_VERY_LONG_WORD 5159 3.21 5.13 2.19 63 BAYES_95 5032 3.71 5.00 3.02 64 T_XMDrugObfuBody_14 4974 2.89 4.94 1.80 65 XM_SPF_SoftFail 4947 3.03 4.92 2.02 66 HTML_IMAGE_RATIO_04 4934 4.79 4.90 4.74 67 MIME_HTML_ONLY_MULTI 4880 4.14 4.85 3.77 68 RCVD_IN_VALIDITY_SAFE 4835 5.70 4.81 6.18 69 XMStrtUSub 4820 6.20 4.79 6.95 70 TR_XM_DK_SendGrid 4668 4.20 4.64 3.97 71 XM_B_Phish_Phrases 4645 3.69 4.62 3.19 72 TooManyTo_001 4448 5.48 4.42 6.04 73 T_XMDrugObfuBody_08 4372 2.32 4.35 1.24 74 RCVD_IN_MSPIKE_BL 4161 1.93 4.14 0.75 75 XMBody_17 4149 1.83 4.12 0.60 76 XM_B_Investor 4067 2.24 4.04 1.28 77 XM_B_SpammyTLD 4045 3.29 4.02 2.91 78 TR_XM_MSPIKECOMBO 4026 1.88 4.00 0.75 79 HTML_MIME_NO_HTML_TAG 3713 2.96 3.69 2.57 80 XM_B_Phish66 3685 2.21 3.66 1.43 81 RCVD_IN_VALIDITY_CERTIFIED 3555 4.63 3.53 5.21 82 HTML_IMAGE_RATIO_06 3465 3.12 3.44 2.95 83 XMDiploma_00 3417 1.95 3.40 1.17 84 XM_OfRef6 3400 1.74 3.38 0.87 85 HTML_IMAGE_RATIO_08 3359 2.49 3.34 2.04 86 T_FILL_THIS_FORM_SHORT 3328 1.55 3.31 0.61 87 XM_DIRTYINTL 3309 1.35 3.29 0.32 88 MIME_HTML_MOSTLY 3242 3.02 3.22 2.91 89 XM_UB50 3186 1.59 3.17 0.76 90 RCVD_IN_VALIDITY_RPBL 3160 1.12 3.14 0.04 91 XM_CamelCaseFrm001 3130 2.54 3.11 2.24 92 SpammyFromTLD_02 3066 1.40 3.05 0.53 93 FROM_EXCESS_BASE64 3061 3.14 3.04 3.20 94 TR_XM_SpammyWords5 2955 2.00 2.94 1.50 95 T_TooManySym_01 2818 6.24 2.80 8.07 96 T_REMOTE_IMAGE 2764 3.87 2.75 4.47 97 XM_GoogleGroups 2759 2.22 2.74 1.93 98 XMLngstWrd_00 2753 1.94 2.74 1.52 99 XM_B_Unsub2 2743 1.60 2.73 1.00 100 USER_IN_DEF_DKIM_WL 2719 12.77 2.70 18.14 101 XMLngstWrd_01 2713 1.88 2.70 1.44 102 RCVD_IN_MSPIKE_H4 2680 4.42 2.66 5.36 103 BOTNET_NORDNS 2648 0.93 2.63 0.02 104 XMLngstWrd_02 2638 1.77 2.62 1.31 105 XMNumbers 2586 3.69 2.57 4.28 106 TM2_M_URI_OPT_OUT 2556 2.95 2.54 3.16 107 RCVD_IN_MSPIKE_H5 2522 2.09 2.51 1.87 108 TR_XM_NoHeaderRelay 2502 0.94 2.49 0.11 109 XMLngstWrd_03 2459 1.59 2.44 1.13 110 XMLngstWrd_04 2424 1.52 2.41 1.05 111 XM_H_Undi_Recip 2390 0.90 2.38 0.11 112 KHOP_HELO_FCRDNS 2362 1.46 2.35 0.99 113 HTML_TITLE_SUBJ_DIFF 2353 1.32 2.34 0.78 114 XMSexyCombo_01 2353 1.28 2.34 0.72 115 RCVD_IN_MSPIKE_L3 2322 1.21 2.31 0.62 116 UPPERCASE_75_100 2302 1.30 2.29 0.78 117 MIME_QP_LONG_LINE 2299 3.47 2.29 4.10 118 TR_Sbj_FN_Bdy 2278 0.86 2.26 0.10 119 XM_B_SpammyWords4 2254 1.18 2.24 0.61 120 XM_UB99 2172 0.75 2.16 0.00 121 SpammyFromTLD_01 2116 0.97 2.10 0.37 122 TR_XM_Undi_Recip5 2093 0.73 2.08 0.01 123 TR_Symld_Words 2033 2.14 2.02 2.21 124 TR_XM_MSPIKECOMBO2 2029 0.90 2.02 0.31 125 HTML_TAG_BALANCE_BODY 2015 1.35 2.00 1.01 126 XMBrknScrpt_02 2015 1.02 2.00 0.50 127 TR_XM_SpammyWords3 1981 0.87 1.97 0.28 128 FONT_INVIS_LONG_LINE 1975 0.74 1.96 0.08 129 URI_NOVOWEL 1941 2.12 1.93 2.22 130 RCVD_IN_PSBL 1932 1.44 1.92 1.19 131 XM_UB999 1912 0.66 1.90 0.00 132 SUBJ_ALL_CAPS 1879 1.32 1.87 1.03 133 HK_RANDOM_REPLYTO 1856 0.70 1.84 0.09 134 XMBdyGiftCard01 1855 1.44 1.84 1.23 135 T_XMHurry_00 1837 1.06 1.83 0.66 136 TR_XM_FormFill 1825 0.64 1.81 0.02 137 UNDISC_MONEY 1819 0.63 1.81 0.00 138 TR_XM_Undi_RecipCombo2 1799 0.62 1.79 0.00 139 TR_XM_Undi_Recip2 1782 0.63 1.77 0.02 140 XM_DK_Undo_01 1773 1.61 1.76 1.52 141 DKIM_INVALID 1758 1.86 1.75 1.92 142 TR_XM_PHPDW 1756 0.77 1.75 0.25 143 T_XMDrugObfuBody_00 1743 1.19 1.73 0.89 144 MONEY_NOHTML 1742 0.64 1.73 0.06 145 TR_XM_MaxSPIKE 1730 0.77 1.72 0.26 146 RCVD_IN_IADB_LISTED 1706 3.13 1.70 3.90 147 MPART_ALT_DIFF_COUNT 1704 1.12 1.69 0.81 148 TM2_M_A_HREF_HREF 1671 1.22 1.66 0.98 149 TR_XM_PHPForged 1644 0.70 1.63 0.21 150 TR_XM_FormFill2 1629 0.70 1.62 0.20 151 XM_H_PHPOS 1625 0.69 1.62 0.19 152 DKIM_ADSP_CUSTOM_MED 1614 1.08 1.60 0.80 153 XMReplyNow 1610 0.72 1.60 0.25 154 PDS_OTHER_BAD_TLD 1584 0.65 1.57 0.15 155 XMStockSpam_06 1559 1.02 1.55 0.73 156 TR_LOTS_OF_MONEY3 1526 0.65 1.52 0.19 157 URI_HEX 1517 1.28 1.51 1.16 158 ALL_TRUSTED 1507 12.55 1.50 18.44 159 RCVD_IN_MSPIKE_L5 1498 0.54 1.49 0.03 160 MAILING_LIST_MULTI 1491 1.87 1.48 2.07 161 NML_ADSP_CUSTOM_MED 1478 0.78 1.47 0.42 162 FORGED_GMAIL_RCVD 1471 0.84 1.46 0.50 163 RCVD_IN_IADB_SPF 1463 2.79 1.45 3.50 164 DIET_1 1432 0.69 1.42 0.29 165 ANY_BOUNCE_MESSAGE 1419 1.48 1.41 1.51 166 BOUNCE_MESSAGE 1419 1.48 1.41 1.51 167 XMHTML_After_End 1417 0.88 1.41 0.60 168 BAYES_40 1382 3.02 1.37 3.89 169 TR_XM_Undi_Recip6 1368 0.47 1.36 0.00 170 RCVD_IN_IADB_DK 1355 2.49 1.35 3.09 171 RCVD_IN_IADB_SENDERID 1353 2.53 1.34 3.17 172 PLING_QUERY 1332 0.78 1.32 0.49 173 TR_XM_SB_Phish 1296 1.71 1.29 1.93 174 XMSubPhish11 1274 1.69 1.27 1.92 175 TR_XM_Base64_M1 1255 1.11 1.25 1.03 176 ADVANCE_FEE_2_NEW_MONEY 1220 0.43 1.21 0.02 177 URI_TRY_3LD 1209 0.79 1.20 0.57 178 XM_URI_RBL 1193 0.48 1.19 0.10 179 XM_H_Long_From02 1189 1.11 1.18 1.08 180 FROM_SUSPICIOUS_NTLD 1173 0.43 1.17 0.03 181 XMClaimOffer 1173 0.50 1.17 0.14 182 TR_XM_Undi_RecipCombo3 1169 0.40 1.16 0.00 183 T_Symld_Words_02 1165 0.77 1.16 0.56 184 TR_Mismatch_TLD_02 1161 0.44 1.15 0.07 185 TR_MetaPhish_Combo_01 1155 0.97 1.15 0.87 186 RELAYCOUNTRY_AU 1147 0.52 1.14 0.19 187 XMPhish11 1141 0.44 1.13 0.07 188 MONEY_FRAUD_3 1140 0.39 1.13 0.00 189 URIBL_BLACK 1139 0.41 1.13 0.03 190 XMPhish30 1125 0.82 1.12 0.66 191 HTTPS_HTTP_MISMATCH 1118 0.76 1.11 0.57 192 SUBJ_DOLLARS 1113 0.75 1.11 0.56 193 TR_XM_Undi_Recip7 1106 0.38 1.10 0.00 194 URIBL_DBL_SPAM 1101 0.39 1.09 0.02 195 TR_XM_BayesRelay 1082 0.38 1.08 0.00 196 XMSubMetaI_00 1080 0.69 1.07 0.48 197 XM_Body_Dirty_Words_01 1073 0.45 1.07 0.12 198 MISSING_HEADERS 1065 0.51 1.06 0.22 199 XMHTMLBadTable_001 1053 0.74 1.05 0.58 200 BAYES_20 1053 2.12 1.05 2.70 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 160089 87.58 92.76 84.82 2 RELAYCOUNTRY_US 148401 79.65 81.57 78.63 3 DKIM_SIGNED 143062 80.37 88.94 75.80 4 XM_DK_Pass 140375 79.00 87.68 74.37 5 DKIM_VALID 139429 78.50 87.19 73.87 6 XM_B_Unicode 132913 74.24 81.41 70.42 7 DCC_CHECK_NEGATIVE 122956 53.57 31.84 65.14 8 DKIM_VALID_AU 115716 63.48 67.54 61.31 9 BAYES_50 105670 49.08 36.12 55.99 10 XMListUnsubscribeExists 97287 57.10 67.51 51.54 11 XM_B_SpammyWords 83150 51.80 66.34 44.05 12 XM_B_Unicode3 79930 44.00 47.09 42.35 13 RCVD_IN_MSPIKE_H2 71781 41.21 47.18 38.03 14 DCC_CHECK 65706 46.40 68.13 34.81 15 DKIM_VALID_EF 55230 30.36 32.42 29.26 16 HTML_FONT_LOW_CONTRAST 54675 31.69 36.80 28.97 17 LOC_TINY_FONT_1 49957 29.84 36.17 26.47 18 FVGT_m_MULTI_ODD 48101 27.47 31.20 25.48 19 T_TM2_M_HEADER_IN_MSG 45506 22.74 20.17 24.11 20 MIME_HTML_ONLY 44750 26.84 32.71 23.71 21 XMSubLong 38782 20.10 19.26 20.55 22 RCVD_IN_MSPIKE_WL 35793 17.17 13.81 18.96 23 XM_B_SpammyWords2 35654 25.02 36.52 18.89 24 ALL_TRUSTED 34811 12.55 1.50 18.44 25 T_KAM_HTML_FONT_INVALID 34672 21.57 27.59 18.37 26 USER_IN_DEF_DKIM_WL 34243 12.77 2.70 18.14 27 XM_Multi_Part_URI 28784 16.45 18.70 15.25 28 XM_DKIMWhitelistDomains 23259 8.10 0.18 12.32 29 RCVD_IN_MSPIKE_H3 22148 10.66 8.64 11.73 30 XM_Body_Dirty_Words 22035 15.73 23.33 11.67 31 BAYES_60 20341 9.43 6.91 10.78 32 XM_B_Unsub 18275 12.44 17.61 9.68 33 XM_DK_Undo_02 17256 22.73 48.23 9.14 34 BAYES_00 17136 6.20 0.79 9.08 35 UNPARSEABLE_RELAY 16920 10.03 12.04 8.96 36 XM_Evil_Numbers_Gen 16909 8.69 8.18 8.96 37 LotsOfNums_01 15696 7.44 5.78 8.32 38 BAYES_99 15319 19.31 40.30 8.12 39 T_TooManySym_01 15224 6.24 2.80 8.07 40 XM_H_Long_From01 14987 7.47 6.59 7.94 41 TR_XM_BayesUnsub 14859 11.15 17.30 7.87 42 LOTS_OF_MONEY 14007 10.19 15.39 7.42 43 TR_XM_UnparsRelay 13411 8.70 11.68 7.11 44 XMStrtUSub 13124 6.20 4.79 6.95 45 BAYES_999 12768 15.91 33.06 6.76 46 HTML_IMAGE_RATIO_02 12739 6.93 7.27 6.75 47 TR_XM_DK_Bayes 12524 4.56 0.66 6.64 48 TR_XM_DK_Bayes1 12441 4.53 0.66 6.59 49 BOTNET_IPINHOSTNAME 12208 8.73 12.97 6.47 50 RCVD_IN_VALIDITY_SAFE 11670 5.70 4.81 6.18 51 TooManyTo_001 11405 5.48 4.42 6.04 52 TR_XM_DK_Bayes2 11250 4.07 0.51 5.96 53 IN_ZIMBRA_NJ_WHITELIST 11211 3.90 0.08 5.94 54 XM_SendGrid 10937 6.28 7.19 5.79 55 TR_XM_DKIM_Undo 10649 16.29 36.27 5.64 56 MPART_ALT_DIFF 10592 5.92 6.49 5.61 57 RCVD_IN_MSPIKE_H4 10109 4.42 2.66 5.36 58 RCVD_IN_VALIDITY_CERTIFIED 9833 4.63 3.53 5.21 59 XM_B_SpammyWords3 9259 7.37 11.98 4.91 60 HTML_IMAGE_RATIO_04 8939 4.79 4.90 4.74 61 BAYES_80 8830 5.78 7.84 4.68 62 T_TooManySym_02 8567 3.31 0.99 4.54 63 T_REMOTE_IMAGE 8444 3.87 2.75 4.47 64 TR_XM_SpammyWords4 8408 6.83 11.28 4.45 65 XM_UncommonTLD01 8332 5.32 7.01 4.41 66 FSL_BULK_SIG 8088 6.75 11.39 4.29 67 XMNumbers 8080 3.69 2.57 4.28 68 MIME_QP_LONG_LINE 7738 3.47 2.29 4.10 69 TR_XM_DK_SendGrid 7493 4.20 4.64 3.97 70 RCVD_IN_IADB_LISTED 7356 3.13 1.70 3.90 71 BAYES_40 7349 3.02 1.37 3.89 72 XMSubMetaSx_00 7187 4.65 6.22 3.81 73 MIME_HTML_ONLY_MULTI 7111 4.14 4.85 3.77 74 RCVD_IN_IADB_SPF 6610 2.79 1.45 3.50 75 INVALID_MSGID 6499 2.31 0.18 3.44 76 RELAYCOUNTRY_META 6306 9.02 19.68 3.34 77 XMSexyCombo_05 6092 5.67 10.24 3.23 78 TVD_RCVD_IP 6087 2.22 0.32 3.23 79 TO_MALFORMED 6059 2.14 0.14 3.21 80 FROM_EXCESS_BASE64 6034 3.14 3.04 3.20 81 XM_B_Phish_Phrases 6030 3.69 4.62 3.19 82 RCVD_IN_IADB_SENDERID 5979 2.53 1.34 3.17 83 TM2_M_URI_OPT_OUT 5966 2.95 2.54 3.16 84 RCVD_IN_IADB_DK 5836 2.49 1.35 3.09 85 MSGID_NOFQDN1 5727 1.99 0.02 3.03 86 BAYES_95 5708 3.71 5.00 3.02 87 HTML_IMAGE_RATIO_06 5576 3.12 3.44 2.95 88 XM_B_SpammyTLD 5488 3.29 4.02 2.91 89 MIME_HTML_MOSTLY 5484 3.02 3.22 2.91 90 TR_XM_PhishingBody 5113 4.03 6.50 2.71 91 BAYES_20 5087 2.12 1.05 2.70 92 XM_PDF 4918 1.84 0.39 2.61 93 HTML_MIME_NO_HTML_TAG 4849 2.96 3.69 2.57 94 TR_DCC_Bayes_99 4847 10.84 26.37 2.57 95 RCVD_IN_IADB_VOUCHED 4707 1.94 0.90 2.49 96 XM_CamelCaseFrm001 4220 2.54 3.11 2.24 97 URI_NOVOWEL 4196 2.12 1.93 2.22 98 TR_Symld_Words 4165 2.14 2.02 2.21 99 TM2_M_VERY_LONG_WORD 4134 3.21 5.13 2.19 100 XM_H_Trusted_IP 4101 1.42 0.00 2.17 101 IN_HORDE_ADDRESS_BOOK 4094 1.46 0.12 2.17 102 XMBSHREFv2 4052 1.52 0.34 2.15 103 MAILING_LIST_MULTI 3911 1.87 1.48 2.07 104 HTML_IMAGE_RATIO_08 3853 2.49 3.34 2.04 105 XM_SPF_SoftFail 3820 3.03 4.92 2.02 106 XMGappySubj_01 3706 1.34 0.16 1.96 107 XM_GoogleGroups 3652 2.22 2.74 1.93 108 TR_XM_SB_Phish 3646 1.71 1.29 1.93 109 DKIM_INVALID 3633 1.86 1.75 1.92 110 XMSubPhish11 3629 1.69 1.27 1.92 111 RCVD_IN_MSPIKE_H5 3536 2.09 2.51 1.87 112 T_XMDrugObfuBody_14 3389 2.89 4.94 1.80 113 BAYES_05 3304 1.35 0.61 1.75 114 XMBody_95 3183 1.14 0.10 1.69 115 TR_XM_SpammyRelay 3145 5.54 12.81 1.67 116 RCVD_IN_IADB_OPTIN 3008 1.22 0.53 1.59 117 XM_D_tchamptons_WL 2965 1.07 0.12 1.57 118 BOTNET 2886 4.90 11.24 1.53 119 XM_DK_Undo_01 2875 1.61 1.76 1.52 120 XMLngstWrd_00 2864 1.94 2.74 1.52 121 ANY_BOUNCE_MESSAGE 2859 1.48 1.41 1.51 122 BOUNCE_MESSAGE 2857 1.48 1.41 1.51 123 TR_XM_SpammyWords5 2827 2.00 2.94 1.50 124 XMLngstWrd_01 2717 1.88 2.70 1.44 125 XM_B_Phish66 2699 2.21 3.66 1.43 126 RELAYCOUNTRY_CA 2585 4.09 9.19 1.37 127 XMLngstWrd_02 2471 1.77 2.62 1.31 128 XM_B_Investor 2421 2.24 4.04 1.28 129 TR_XM_SpammyWords2 2420 5.67 13.89 1.28 130 T_XMDrugObfuBody_08 2333 2.32 4.35 1.24 131 XMBdyGiftCard01 2326 1.44 1.84 1.23 132 UNTRUSTED_Relay 2314 3.44 7.59 1.23 133 RCVD_IN_RP_SAFE 2268 1.14 1.01 1.20 134 TVD_SPACE_RATIO 2267 0.80 0.05 1.20 135 RCVD_IN_PSBL 2241 1.44 1.92 1.19 136 XMDiploma_00 2211 1.95 3.40 1.17 137 URI_HEX 2195 1.28 1.51 1.16 138 TooManyTo_002 2178 0.91 0.45 1.15 139 XMLngstWrd_03 2132 1.59 2.44 1.13 140 XM_H_Long_From02 2029 1.11 1.18 1.08 141 XMLngstWrd_04 1987 1.52 2.41 1.05 142 BASE64_LENGTH_79_INF 1980 0.75 0.20 1.05 143 SUBJ_ALL_CAPS 1953 1.32 1.87 1.03 144 TR_XM_Base64_M1 1945 1.11 1.25 1.03 145 HTML_FONT_FACE_BAD 1925 0.93 0.76 1.02 146 RCVD_IN_RP_CERTIFIED 1917 0.91 0.72 1.02 147 HTML_TAG_BALANCE_BODY 1901 1.35 2.00 1.01 148 XM_B_Unsub2 1890 1.60 2.73 1.00 149 KHOP_HELO_FCRDNS 1872 1.46 2.35 0.99 150 TM2_M_A_HREF_HREF 1849 1.22 1.66 0.98 151 T_TooManySym_03 1839 0.80 0.46 0.97 152 T_XMDrugObfuBody_00 1686 1.19 1.73 0.89 153 XM_OfRef6 1648 1.74 3.38 0.87 154 TR_MetaPhish_Combo_01 1644 0.97 1.15 0.87 155 XM_B_COPY_HTML 1636 0.83 0.75 0.87 156 TooManyTo_003 1549 0.67 0.39 0.82 157 MPART_ALT_DIFF_COUNT 1535 1.12 1.69 0.81 158 DKIM_ADSP_CUSTOM_MED 1519 1.08 1.60 0.80 159 HTML_TITLE_SUBJ_DIFF 1472 1.32 2.34 0.78 160 UPPERCASE_75_100 1464 1.30 2.29 0.78 161 TR_XM_INV_DKIM 1453 0.67 0.49 0.77 162 XM_UB50 1429 1.59 3.17 0.76 163 RCVD_IN_MSPIKE_BL 1417 1.93 4.14 0.75 164 TR_XM_MSPIKECOMBO 1411 1.88 4.00 0.75 165 USER_IN_WELCOMELIST 1398 0.48 0.00 0.74 166 USER_IN_WHITELIST 1398 0.48 0.00 0.74 167 XMStockSpam_06 1386 1.02 1.55 0.73 168 XMSexyCombo_01 1361 1.28 2.34 0.72 169 RCVD_IN_BL_SPAMCOP_NET 1359 3.90 9.88 0.72 170 XMSubMetaSxObfu_02 1343 0.59 0.37 0.71 171 XM_S_SpammyWords 1330 0.70 0.70 0.70 172 TR_XM_Spammywords 1330 0.70 0.70 0.70 173 T_XMHurry_00 1241 1.06 1.83 0.66 174 XMPhish30 1237 0.82 1.12 0.66 175 XM_ProductURIs 1200 0.69 0.79 0.64 176 RCVD_IN_MSPIKE_L3 1174 1.21 2.31 0.62 177 XM_B_SpammyWords4 1152 1.18 2.24 0.61 178 T_FILL_THIS_FORM_SHORT 1143 1.55 3.31 0.61 179 XMBody_17 1140 1.83 4.12 0.60 180 XMHTML_After_End 1137 0.88 1.41 0.60 181 TooManyTo_004 1130 0.49 0.29 0.60 182 XMHTMLBadTable_001 1098 0.74 1.05 0.58 183 URI_TRY_3LD 1083 0.79 1.20 0.57 184 HTTPS_HTTP_MISMATCH 1078 0.76 1.11 0.57 185 SUBJ_DOLLARS 1056 0.75 1.11 0.56 186 T_Symld_Words_02 1052 0.77 1.16 0.56 187 HTML_IMAGE_ONLY_20 1047 0.50 0.41 0.55 188 RDNS_DYNAMIC 1046 0.58 0.63 0.55 189 XM_S_SubURI 1045 0.36 0.01 0.55 190 XMSubNoVowel 1033 0.62 0.76 0.55 191 T_OBFU_PDF_ATTACH 1014 0.38 0.08 0.54 192 XM_H_PHPMailer 1012 0.68 0.94 0.54 193 SpammyFromTLD_02 995 1.40 3.05 0.53 194 XMGenDplmaNmb 990 0.64 0.87 0.52 195 XM_B_REG_HTML 973 0.62 0.82 0.52 196 TooManyTo_005 971 0.43 0.26 0.51 197 XMSubMetaSxObfu_03 971 0.60 0.77 0.51 198 FORGED_GMAIL_RCVD 946 0.84 1.46 0.50 199 XM_shorewaves_Whitelist 944 0.33 0.00 0.50 200 XMBrknScrpt_02 940 1.02 2.00 0.50 ----------------------------------------------------------------------