Email: 276384 Autolearn: 0 AvgScore: 4.13 AvgScanTime: 1.19 sec Spam: 94089 Autolearn: 0 AvgScore: 13.23 AvgScanTime: 1.23 sec Ham: 182295 Autolearn: 0 AvgScore: -0.56 AvgScanTime: 1.17 sec Time Spent Running SA: 91.31 hours Time Spent Processing Spam: 32.19 hours Time Spent Processing Ham: 59.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 91012 89.10 96.73 85.16 2 DKIM_SIGNED 86217 84.33 91.63 80.56 3 XM_DK_Pass 82847 82.47 88.05 79.59 4 DKIM_VALID 82166 81.86 87.33 79.04 5 XM_B_Unicode 80800 77.67 85.88 73.43 6 RELAYCOUNTRY_US 79155 83.14 84.13 82.63 7 DCC_CHECK 70794 57.84 75.24 48.86 8 XM_B_SpammyWords 70234 56.56 74.65 47.23 9 XMListUnsubscribeExists 69905 63.55 74.30 58.00 10 DKIM_VALID_AU 69656 70.85 74.03 69.21 11 XM_B_Unicode3 42638 45.49 45.32 45.59 12 XM_DK_Undo_02 41937 19.35 44.57 6.33 13 XM_B_SpammyWords2 40922 29.74 43.49 22.64 14 LOC_TINY_FONT_1 40393 35.74 42.93 32.02 15 HTML_FONT_LOW_CONTRAST 38908 37.26 41.35 35.14 16 RCVD_IN_MSPIKE_H2 35882 34.48 38.14 32.59 17 BAYES_99 35469 16.00 37.70 4.80 18 FVGT_m_MULTI_ODD 34006 31.12 36.14 28.52 19 BAYES_50 32786 51.04 34.85 59.39 20 TR_XM_DKIM_Undo 31934 13.39 33.94 2.78 21 BAYES_999 28055 12.61 29.82 3.72 22 T_KAM_HTML_FONT_INVALID 27596 23.73 29.33 20.84 23 TR_DCC_Bayes_99 25635 10.82 27.25 2.35 24 DKIM_VALID_EF 24495 28.83 26.03 30.27 25 DCC_CHECK_NEGATIVE 23285 42.13 24.75 51.10 26 T_TM2_M_HEADER_IN_MSG 20769 21.55 22.07 21.28 27 MIME_HTML_ONLY 20030 21.92 21.29 22.24 28 XM_Multi_Part_URI 19346 18.01 20.56 16.69 29 TR_XM_DK_Unsub 17353 16.97 18.44 16.20 30 XMSubLong 16507 20.71 17.54 22.34 31 TR_XM_SpammyWords2 15369 6.17 16.33 0.93 32 RELAYCOUNTRY_META 14954 8.23 15.89 4.27 33 TR_MAX_INTL_RELAY 14817 10.60 15.75 7.94 34 LOTS_OF_MONEY 14725 9.23 15.65 5.91 35 XM_B_Unsub 14329 10.24 15.23 7.66 36 TR_XM_BayesUnsub 13834 9.30 14.70 6.51 37 XM_B_SpammyWords3 13569 8.70 14.42 5.74 38 TR_XM_SpammyWords4 13501 7.65 14.35 4.19 39 BOTNET_IPINHOSTNAME 13372 8.16 14.21 5.03 40 UNPARSEABLE_RELAY 12373 12.60 13.15 12.32 41 TR_XM_SpammyRelay 11171 5.67 11.87 2.48 42 BAYES_80 9187 6.48 9.76 4.79 43 BAYES_60 7986 10.59 8.49 11.67 44 BOTNET 7847 3.66 8.34 1.24 45 HTML_IMAGE_RATIO_02 7537 6.77 8.01 6.13 46 RCVD_IN_BL_SPAMCOP_NET 7324 3.19 7.78 0.81 47 XM_Evil_Numbers_Gen 7115 8.66 7.56 9.22 48 TR_XM_UnparsRelay 7107 3.65 7.55 1.64 49 XMBody_17 6881 3.10 7.31 0.93 50 FSL_BULK_SIG 6851 7.70 7.28 7.91 51 XM_Body_Dirty_Words 6749 5.46 7.17 4.57 52 LotsOfNums_01 6257 6.92 6.65 7.06 53 UNTRUSTED_Relay 6254 3.35 6.65 1.65 54 XMSubMetaSx_00 5913 4.97 6.28 4.30 55 MPART_ALT_DIFF 5841 5.02 6.21 4.41 56 TR_XM_SPAMCOP 5754 2.39 6.12 0.46 57 TR_LOTS_OF_MONEY3 5724 2.67 6.08 0.91 58 XM_UncommonTLD01 5596 5.14 5.95 4.72 59 RELAYCOUNTRY_CA 5430 3.25 5.77 1.95 60 MIME_HTML_MOSTLY 5213 3.82 5.54 2.93 61 TooManyTo_001 5172 5.63 5.50 5.69 62 BAYES_95 5169 3.95 5.49 3.15 63 T_XMDrugObfuBody_14 4933 3.08 5.24 1.96 64 XM_H_GMP 4642 6.72 4.93 7.64 65 XMStrtUSub 4484 6.40 4.77 7.25 66 HTML_IMAGE_RATIO_08 4474 3.29 4.76 2.53 67 TR_XM_SpammyWords5 4425 2.38 4.70 1.19 68 XM_B_SEO 4289 2.33 4.56 1.18 69 XM_SPF_SoftFail 4054 3.22 4.31 2.66 70 DKIM_INVALID 4051 2.47 4.31 1.52 71 HTML_IMAGE_RATIO_04 3934 4.13 4.18 4.11 72 XM_B_Phish_Phrases 3916 3.16 4.16 2.65 73 TR_XM_SEO4 3887 1.88 4.13 0.71 74 XMSexyCombo_05 3806 3.70 4.05 3.53 75 TR_XM_PhishingBody 3737 3.10 3.97 2.65 76 XM_B_Investor 3703 2.34 3.94 1.52 77 XM_H_Long_From01 3654 5.15 3.88 5.80 78 XM_OfRef6 3606 1.83 3.83 0.80 79 RCVD_IN_VALIDITY_SAFE 3538 7.48 3.76 9.40 80 HTML_IMAGE_RATIO_06 3373 3.00 3.58 2.69 81 SUBJ_ALL_CAPS 3350 1.86 3.56 0.98 82 T_XMDrugObfuBody_08 3327 2.01 3.54 1.22 83 XM_B_PhoneNumber 3323 5.67 3.53 6.78 84 XM_CamelCaseFrm001 3319 2.95 3.53 2.65 85 TM2_M_VERY_LONG_WORD 3276 2.28 3.48 1.66 86 USER_IN_DEF_DKIM_WL 3223 14.53 3.43 20.26 87 XM_UB50 3215 1.75 3.42 0.88 88 XMNumbers 3007 3.15 3.20 3.13 89 TR_XM_NoHeaderRelay 2848 1.11 3.03 0.12 90 XM_URI_RBL 2799 1.12 2.97 0.16 91 RCVD_IN_VALIDITY_CERTIFIED 2742 6.43 2.91 8.24 92 XM_B_SpammyTLD 2651 2.76 2.82 2.74 93 XMDiploma_00 2606 1.90 2.77 1.45 94 TM2_M_URI_OPT_OUT 2599 2.34 2.76 2.12 95 MIME_HTML_ONLY_MULTI 2589 2.48 2.75 2.34 96 RELAYCOUNTRY_AU 2490 1.21 2.65 0.47 97 T_XMHurry_00 2337 1.38 2.48 0.80 98 XM_B_SpammyWords4 2260 1.37 2.40 0.83 99 T_TooManySym_01 2217 5.23 2.36 6.71 100 XMBrknScrpt_02 2081 1.73 2.21 1.48 101 TR_XM_PHPForged 2079 0.87 2.21 0.18 102 TR_XM_PHPDW 2019 0.85 2.15 0.18 103 RCVD_IN_VALIDITY_RPBL 2018 0.77 2.14 0.07 104 URI_TRY_3LD 2013 1.44 2.14 1.08 105 TR_XM_FormFill2 2001 0.85 2.13 0.19 106 XM_H_PHPOS 1983 0.83 2.11 0.17 107 AC_BR_BONANZA 1979 0.82 2.10 0.16 108 SpammyFromTLD_01 1944 1.01 2.07 0.46 109 XMReplyNow 1905 0.93 2.02 0.36 110 XM_B_Unsub2 1877 1.40 1.99 1.09 111 HTML_TAG_BALANCE_BODY 1829 1.13 1.94 0.71 112 XM_HighProb1 1828 0.66 1.94 0.00 113 ALL_TRUSTED 1765 9.49 1.88 13.42 114 URIBL_DBL_SPAM 1731 0.63 1.84 0.01 115 HTML_MIME_NO_HTML_TAG 1704 1.56 1.81 1.43 116 RCVD_IN_MSPIKE_WL 1703 4.72 1.81 6.23 117 RCVD_IN_MSPIKE_H3 1703 4.72 1.81 6.23 118 T_FILL_THIS_FORM_SHORT 1678 1.03 1.78 0.65 119 BAYES_40 1532 3.16 1.63 3.96 120 T_XMDrugObfuBody_00 1526 0.91 1.62 0.54 121 T_STY_INVIS_DIRECT 1502 0.92 1.60 0.58 122 FROM_EXCESS_BASE64 1483 2.09 1.58 2.35 123 T_REMOTE_IMAGE 1474 3.32 1.57 4.22 124 MIME_QP_LONG_LINE 1460 2.70 1.55 3.29 125 XMStockSpam_06 1418 1.63 1.51 1.69 126 MAILING_LIST_MULTI 1413 1.99 1.50 2.24 127 TR_Mismatch_TLD_02 1392 0.54 1.48 0.05 128 TR_XM_INV_DKIM 1391 0.56 1.48 0.09 129 SpammyFromTLD_02 1367 0.59 1.45 0.15 130 DIET_1 1360 0.70 1.45 0.32 131 KHOP_HELO_FCRDNS 1338 0.97 1.42 0.74 132 XMPhish30 1292 1.27 1.37 1.22 133 MPART_ALT_DIFF_COUNT 1291 1.17 1.37 1.06 134 THIS_AD 1278 0.74 1.36 0.43 135 URI_HEX 1275 1.01 1.36 0.83 136 TR_Caps_n_Bayes_99 1261 0.47 1.34 0.02 137 BOTNET_NORDNS 1240 0.45 1.32 0.01 138 TooManyTo_002 1217 1.45 1.29 1.54 139 XMSexyCombo_01 1214 0.63 1.29 0.29 140 HTTPS_HTTP_MISMATCH 1205 0.78 1.28 0.52 141 PLING_QUERY 1197 1.06 1.27 0.95 142 XM_DK_Undo_01 1187 1.45 1.26 1.55 143 URI_NOVOWEL 1171 1.03 1.24 0.92 144 TooManyTo_003 1160 1.02 1.23 0.92 145 XM_B_COPY_HTML 1153 1.04 1.23 0.94 146 RDNS_DYNAMIC 1150 0.62 1.22 0.32 147 TVD_RCVD_IP 1148 1.95 1.22 2.33 148 TooManyTo_004 1132 0.88 1.20 0.72 149 XM_SendGrid 1110 1.39 1.18 1.49 150 TooManyTo_005 1108 0.80 1.18 0.61 151 XMBdyGiftCard01 1089 1.30 1.16 1.37 152 RELAYCOUNTRY_IN 1068 0.41 1.14 0.03 153 TR_MetaPhish_Combo_01 1056 0.88 1.12 0.76 154 XMSlimDrugH 1047 0.59 1.11 0.32 155 ANY_BOUNCE_MESSAGE 1046 2.80 1.11 3.67 156 XM_DIRTYINTL 1042 0.46 1.11 0.13 157 BOUNCE_MESSAGE 1042 2.80 1.11 3.67 158 XMGenDplmaNmb 1032 0.87 1.10 0.76 159 HTML_OBFUSCATE_05_10 1007 0.45 1.07 0.14 160 TR_XM_InvalidRelay 1004 0.38 1.07 0.02 161 BAYES_20 991 2.22 1.05 2.82 162 TR_XM_FormFill 986 0.36 1.05 0.01 163 XM_B_Phish66 981 0.59 1.04 0.36 164 TR_Symld_Words 980 1.21 1.04 1.29 165 XM_H_PHPMailer 964 0.74 1.02 0.60 166 HELO_DYNAMIC_SPLIT_IP 942 0.35 1.00 0.01 167 DKIM_ADSP_NXDOMAIN 936 0.71 0.99 0.56 168 HTML_FONT_FACE_BAD 931 0.66 0.99 0.49 169 AC_HTML_NONSENSE_TAGS 929 0.35 0.99 0.02 170 TR_XM_DK_SendGrid 884 1.08 0.94 1.15 171 XM_UB99 877 0.32 0.93 0.00 172 DKIM_ADSP_CUSTOM_MED 859 0.83 0.91 0.79 173 LongTLD 858 0.48 0.91 0.26 174 XMPhish14 831 0.77 0.88 0.71 175 XM_H_Long_From02 827 0.95 0.88 0.98 176 XM_UB60 815 0.33 0.87 0.05 177 RCVD_IN_PSBL 814 0.80 0.87 0.77 178 XMHTMLBadTable_001 802 0.48 0.85 0.29 179 TR_Mismatch_TLD_01 800 0.42 0.85 0.19 180 SHOPIFY_IMG_NOT_RCVD_SFY 753 0.69 0.80 0.64 181 NML_ADSP_CUSTOM_MED 749 0.59 0.80 0.48 182 TM2_M_OBFU_COMMENT 735 0.49 0.78 0.34 183 XM_UB80 713 0.27 0.76 0.02 184 XMSubMetaSxObfu_03 708 0.50 0.75 0.38 185 TR_LOTS_OF_MONEY2 701 0.43 0.75 0.26 186 T_MONEY_PERCENT 701 0.43 0.75 0.26 187 XMClaimOffer 680 0.49 0.72 0.36 188 XMSubMetaI_00 674 0.64 0.72 0.61 189 HTML_TAG_BALANCE_HEAD 663 0.31 0.70 0.11 190 FORGED_GMAIL_RCVD 660 0.54 0.70 0.46 191 MISSING_HEADERS 650 0.39 0.69 0.24 192 FROM_MISSP_EH_MATCH 649 0.23 0.69 0.00 193 XMPhish08 647 0.44 0.69 0.31 194 FROM_MISSP_REPLYTO 622 0.23 0.66 0.00 195 XMFrmHeader_28 621 0.22 0.66 0.00 196 XM_RXBody 614 1.15 0.65 1.40 197 XMGppyBdWords 613 0.28 0.65 0.09 198 XM_UB999 606 0.22 0.64 0.00 199 HOSTED_IMG_MULTI_PUB_01 606 0.24 0.64 0.03 200 TR_XM_RelayPhish 596 0.25 0.63 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 155244 89.10 96.73 85.16 2 RELAYCOUNTRY_US 150635 83.14 84.13 82.63 3 DKIM_SIGNED 146849 84.33 91.63 80.56 4 XM_DK_Pass 145082 82.47 88.05 79.59 5 DKIM_VALID 144078 81.86 87.33 79.04 6 XM_B_Unicode 133859 77.67 85.88 73.43 7 DKIM_VALID_AU 126160 70.85 74.03 69.21 8 BAYES_50 108267 51.04 34.85 59.39 9 XMListUnsubscribeExists 105731 63.55 74.30 58.00 10 DCC_CHECK_NEGATIVE 93151 42.13 24.75 51.10 11 DCC_CHECK 89064 57.84 75.24 48.86 12 XM_B_SpammyWords 86090 56.56 74.65 47.23 13 XM_B_Unicode3 83101 45.49 45.32 45.59 14 HTML_FONT_LOW_CONTRAST 64060 37.26 41.35 35.14 15 RCVD_IN_MSPIKE_H2 59405 34.48 38.14 32.59 16 LOC_TINY_FONT_1 58378 35.74 42.93 32.02 17 DKIM_VALID_EF 55173 28.83 26.03 30.27 18 FVGT_m_MULTI_ODD 51993 31.12 36.14 28.52 19 XM_B_SpammyWords2 41263 29.74 43.49 22.64 20 XMSubLong 40727 20.71 17.54 22.34 21 MIME_HTML_ONLY 40549 21.92 21.29 22.24 22 T_TM2_M_HEADER_IN_MSG 38801 21.55 22.07 21.28 23 T_KAM_HTML_FONT_INVALID 37996 23.73 29.33 20.84 24 USER_IN_DEF_DKIM_WL 36936 14.53 3.43 20.26 25 XM_Multi_Part_URI 30418 18.01 20.56 16.69 26 TR_XM_DK_Unsub 29536 16.97 18.44 16.20 27 ALL_TRUSTED 24465 9.49 1.88 13.42 28 UNPARSEABLE_RELAY 22462 12.60 13.15 12.32 29 BAYES_60 21278 10.59 8.49 11.67 30 XM_DKIMWhitelistDomains 20080 7.29 0.06 11.02 31 RCVD_IN_VALIDITY_SAFE 17132 7.48 3.76 9.40 32 XM_Evil_Numbers_Gen 16815 8.66 7.56 9.22 33 RCVD_IN_VALIDITY_CERTIFIED 15017 6.43 2.91 8.24 34 TR_MAX_INTL_RELAY 14481 10.60 15.75 7.94 35 FSL_BULK_SIG 14423 7.70 7.28 7.91 36 BAYES_00 14219 5.29 0.43 7.80 37 XM_B_Unsub 13965 10.24 15.23 7.66 38 XM_H_GMP 13936 6.72 4.93 7.64 39 XMStrtUSub 13216 6.40 4.77 7.25 40 LotsOfNums_01 12867 6.92 6.65 7.06 41 XM_B_PhoneNumber 12360 5.67 3.53 6.78 42 T_TooManySym_01 12228 5.23 2.36 6.71 43 TR_XM_DK_Bayes 12109 4.49 0.32 6.64 44 TR_XM_DK_Bayes1 12015 4.45 0.29 6.59 45 TR_XM_BayesUnsub 11875 9.30 14.70 6.51 46 XM_DK_Undo_02 11536 19.35 44.57 6.33 47 RCVD_IN_MSPIKE_WL 11354 4.72 1.81 6.23 48 RCVD_IN_MSPIKE_H3 11354 4.72 1.81 6.23 49 HTML_IMAGE_RATIO_02 11182 6.77 8.01 6.13 50 TR_XM_DK_Bayes2 10835 3.99 0.20 5.94 51 LOTS_OF_MONEY 10782 9.23 15.65 5.91 52 XM_H_Long_From01 10573 5.15 3.88 5.80 53 XM_B_SpammyWords3 10465 8.70 14.42 5.74 54 TooManyTo_001 10381 5.63 5.50 5.69 55 IN_ZIMBRA_NJ_WHITELIST 10008 3.64 0.06 5.49 56 BOTNET_IPINHOSTNAME 9173 8.16 14.21 5.03 57 BAYES_99 8744 16.00 37.70 4.80 58 BAYES_80 8734 6.48 9.76 4.79 59 XM_UncommonTLD01 8605 5.14 5.95 4.72 60 XM_Body_Dirty_Words 8330 5.46 7.17 4.57 61 MPART_ALT_DIFF 8045 5.02 6.21 4.41 62 XMSubMetaSx_00 7837 4.97 6.28 4.30 63 RELAYCOUNTRY_META 7785 8.23 15.89 4.27 64 T_REMOTE_IMAGE 7699 3.32 1.57 4.22 65 TR_XM_SpammyWords4 7641 7.65 14.35 4.19 66 HTML_IMAGE_RATIO_04 7484 4.13 4.18 4.11 67 BAYES_40 7213 3.16 1.63 3.96 68 T_TooManySym_02 7080 2.74 0.53 3.88 69 INVALID_MSGID 6846 2.52 0.14 3.76 70 BAYES_999 6786 12.61 29.82 3.72 71 ANY_BOUNCE_MESSAGE 6690 2.80 1.11 3.67 72 BOUNCE_MESSAGE 6689 2.80 1.11 3.67 73 XMSexyCombo_05 6432 3.70 4.05 3.53 74 TO_MALFORMED 6416 2.33 0.01 3.52 75 MIME_QP_LONG_LINE 6004 2.70 1.55 3.29 76 BAYES_95 5747 3.95 5.49 3.15 77 XMNumbers 5710 3.15 3.20 3.13 78 MIME_HTML_MOSTLY 5350 3.82 5.54 2.93 79 BAYES_20 5140 2.22 1.05 2.82 80 TR_XM_DKIM_Undo 5073 13.39 33.94 2.78 81 XM_B_SpammyTLD 4989 2.76 2.82 2.74 82 HTML_IMAGE_RATIO_06 4907 3.00 3.58 2.69 83 XM_SPF_SoftFail 4846 3.22 4.31 2.66 84 TR_XM_PhishingBody 4838 3.10 3.97 2.65 85 XM_CamelCaseFrm001 4825 2.95 3.53 2.65 86 XM_B_Phish_Phrases 4825 3.16 4.16 2.65 87 HTML_IMAGE_RATIO_08 4610 3.29 4.76 2.53 88 TR_XM_SpammyRelay 4512 5.67 11.87 2.48 89 FROM_EXCESS_BASE64 4282 2.09 1.58 2.35 90 TR_DCC_Bayes_99 4278 10.82 27.25 2.35 91 MIME_HTML_ONLY_MULTI 4263 2.48 2.75 2.34 92 TVD_RCVD_IP 4241 1.95 1.22 2.33 93 MAILING_LIST_MULTI 4078 1.99 1.50 2.24 94 XM_PDF 3957 1.56 0.38 2.17 95 RCVD_IN_IADB_LISTED 3897 1.62 0.63 2.14 96 TM2_M_URI_OPT_OUT 3857 2.34 2.76 2.12 97 XMBSHREFv2 3632 1.40 0.25 1.99 98 T_XMDrugObfuBody_14 3566 3.08 5.24 1.96 99 RELAYCOUNTRY_CA 3556 3.25 5.77 1.95 100 RCVD_IN_IADB_SPF 3518 1.46 0.54 1.93 101 IN_HORDE_ADDRESS_BOOK 3346 1.23 0.05 1.84 102 TVD_SPACE_RATIO 3311 1.24 0.12 1.82 103 RCVD_IN_IADB_SENDERID 3244 1.34 0.50 1.78 104 RCVD_IN_IADB_DK 3125 1.30 0.51 1.71 105 XMStockSpam_06 3080 1.63 1.51 1.69 106 TM2_M_VERY_LONG_WORD 3025 2.28 3.48 1.66 107 UNTRUSTED_Relay 3003 3.35 6.65 1.65 108 TR_XM_UnparsRelay 2991 3.65 7.55 1.64 109 XMGappySubj_01 2981 1.19 0.34 1.64 110 BAYES_05 2953 1.27 0.60 1.62 111 XM_DK_Undo_01 2824 1.45 1.26 1.55 112 TooManyTo_002 2804 1.45 1.29 1.54 113 DKIM_INVALID 2771 2.47 4.31 1.52 114 XM_B_Investor 2765 2.34 3.94 1.52 115 XM_SendGrid 2719 1.39 1.18 1.49 116 XMBrknScrpt_02 2700 1.73 2.21 1.48 117 RCVD_IN_IADB_VOUCHED 2681 1.10 0.39 1.47 118 XMDiploma_00 2640 1.90 2.77 1.45 119 XMGappySubj_02 2623 0.96 0.02 1.44 120 HTML_MIME_NO_HTML_TAG 2601 1.56 1.81 1.43 121 XM_RXBody 2554 1.15 0.65 1.40 122 T_TooManySym_03 2550 0.98 0.17 1.40 123 XMBdyGiftCard01 2501 1.30 1.16 1.37 124 TR_Symld_Words 2355 1.21 1.04 1.29 125 BOTNET 2265 3.66 8.34 1.24 126 T_XMDrugObfuBody_08 2228 2.01 3.54 1.22 127 XMPhish30 2224 1.27 1.37 1.22 128 TR_XM_SpammyWords5 2162 2.38 4.70 1.19 129 XM_B_SEO 2155 2.33 4.56 1.18 130 XM_GoogleGroups 2128 0.98 0.63 1.17 131 TR_XM_DK_SendGrid 2091 1.08 0.94 1.15 132 RCVD_IN_IADB_OPTIN 1989 0.81 0.25 1.09 133 XM_B_Unsub2 1984 1.40 1.99 1.09 134 URI_TRY_3LD 1961 1.44 2.14 1.08 135 MPART_ALT_DIFF_COUNT 1933 1.17 1.37 1.06 136 XMBody_95 1900 0.74 0.16 1.04 137 XM_H_Long_From02 1793 0.95 0.88 0.98 138 SUBJ_ALL_CAPS 1790 1.86 3.56 0.98 139 USER_IN_WHITELIST 1770 0.64 0.00 0.97 140 USER_IN_WELCOMELIST 1770 0.64 0.00 0.97 141 PLING_QUERY 1724 1.06 1.27 0.95 142 XM_B_COPY_HTML 1720 1.04 1.23 0.94 143 XMBody_17 1699 3.10 7.31 0.93 144 TR_XM_SpammyWords2 1687 6.17 16.33 0.93 145 URI_NOVOWEL 1679 1.03 1.24 0.92 146 TooManyTo_003 1672 1.02 1.23 0.92 147 TR_LOTS_OF_MONEY3 1667 2.67 6.08 0.91 148 XM_UB50 1613 1.75 3.42 0.88 149 XM_B_SpammyWords4 1520 1.37 2.40 0.83 150 URI_HEX 1520 1.01 1.36 0.83 151 TR_XM_Base64_M1 1498 0.74 0.59 0.82 152 RCVD_IN_BL_SPAMCOP_NET 1485 3.19 7.78 0.81 153 T_XMHurry_00 1465 1.38 2.48 0.80 154 XM_OfRef6 1463 1.83 3.83 0.80 155 DKIM_ADSP_CUSTOM_MED 1439 0.83 0.91 0.79 156 RCVD_IN_PSBL 1395 0.80 0.87 0.77 157 XMGenDplmaNmb 1382 0.87 1.10 0.76 158 TR_MetaPhish_Combo_01 1378 0.88 1.12 0.76 159 KHOP_HELO_FCRDNS 1344 0.97 1.42 0.74 160 TooManyTo_004 1304 0.88 1.20 0.72 161 XMPhish14 1302 0.77 0.88 0.71 162 TR_XM_SEO4 1297 1.88 4.13 0.71 163 HTML_TAG_BALANCE_BODY 1293 1.13 1.94 0.71 164 T_FILL_THIS_FORM_SHORT 1181 1.03 1.78 0.65 165 XM_B_DNDMA 1169 0.62 0.58 0.64 166 XMSubMetaSxObfu_02 1166 0.51 0.26 0.64 167 SHOPIFY_IMG_NOT_RCVD_SFY 1159 0.69 0.80 0.64 168 TooManyTo_005 1108 0.80 1.18 0.61 169 XMSubMetaI_00 1105 0.64 0.72 0.61 170 XM_H_PHPMailer 1093 0.74 1.02 0.60 171 XM_B_REG_HTML 1091 0.55 0.46 0.60 172 T_STY_INVIS_DIRECT 1052 0.92 1.60 0.58 173 T_TooManySym_04 1039 0.39 0.04 0.57 174 DKIM_ADSP_NXDOMAIN 1016 0.71 0.99 0.56 175 T_XMDrugObfuBody_00 982 0.91 1.62 0.54 176 HTTPS_HTTP_MISMATCH 948 0.78 1.28 0.52 177 XMNoVowels 940 0.52 0.52 0.52 178 SUBJ_DOLLARS 940 0.52 0.52 0.52 179 XM_ProductURIs 919 0.54 0.60 0.50 180 HELO_NODOT 902 0.45 0.37 0.49 181 HELO_NO_DOMAIN 902 0.45 0.37 0.49 182 XMLngstWrd_00 895 0.45 0.36 0.49 183 HTML_FONT_FACE_BAD 895 0.66 0.99 0.49 184 NML_ADSP_CUSTOM_MED 883 0.59 0.80 0.48 185 RELAYCOUNTRY_AU 860 1.21 2.65 0.47 186 TR_XM_SPAMCOP 844 2.39 6.12 0.46 187 SpammyFromTLD_01 840 1.01 2.07 0.46 188 FORGED_GMAIL_RCVD 838 0.54 0.70 0.46 189 XM_S_SubURI 812 0.31 0.04 0.45 190 NO_DNS_FOR_FROM 794 0.43 0.42 0.44 191 THIS_AD 779 0.74 1.36 0.43 192 XMSolicitRefs_0 773 0.38 0.28 0.42 193 T_TVD_MIME_NO_HEADERS 763 0.30 0.07 0.42 194 CTE_8BIT_MISMATCH 736 0.27 0.01 0.40 195 XMLngstWrd_01 729 0.36 0.29 0.40 196 LOW_PRICE 718 0.39 0.38 0.39 197 XM_B_FormFill 709 0.30 0.14 0.39 198 T_Symld_Words_02 709 0.47 0.62 0.39 199 XMSubMetaSxObfu_03 685 0.50 0.75 0.38 200 RELAYCOUNTRY_DE 671 0.43 0.55 0.37 ----------------------------------------------------------------------