Email: 535796 Autolearn: 0 AvgScore: 5.45 AvgScanTime: 1.99 sec Spam: 207277 Autolearn: 0 AvgScore: 13.05 AvgScanTime: 2.13 sec Ham: 328519 Autolearn: 0 AvgScore: 0.66 AvgScanTime: 1.91 sec Time Spent Running SA: 296.90 hours Time Spent Processing Spam: 122.69 hours Time Spent Processing Ham: 174.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 202745 91.57 97.81 87.63 2 DKIM_SIGNED 195835 87.42 94.48 82.97 3 XM_DK_Pass 190608 85.84 91.96 81.98 4 DKIM_VALID 188729 85.24 91.05 81.58 5 XM_B_Unicode 187423 82.72 90.42 77.85 6 RELAYCOUNTRY_US 182515 85.04 88.05 83.13 7 DCC_CHECK 168317 64.27 81.20 53.58 8 XMListUnsubscribeExists 164197 70.56 79.22 65.10 9 DKIM_VALID_AU 149924 68.98 72.33 66.87 10 XM_B_SpammyWords 149106 57.98 71.94 49.17 11 LOC_TINY_FONT_1 110997 42.78 53.55 35.98 12 XM_B_Unicode3 107515 52.04 51.87 52.15 13 HTML_FONT_LOW_CONTRAST 100478 40.61 48.48 35.65 14 XM_DK_Undo_02 96073 22.47 46.35 7.40 15 RCVD_IN_MSPIKE_H2 91792 38.85 44.28 35.43 16 XM_B_SpammyWords2 82933 29.44 40.01 22.77 17 BAYES_50 81391 52.03 39.27 60.09 18 FVGT_m_MULTI_ODD 78373 33.32 37.81 30.49 19 BAYES_99 68981 16.39 33.28 5.73 20 TR_XM_DKIM_Undo 67181 14.70 32.41 3.52 21 T_KAM_HTML_FONT_INVALID 60429 26.47 29.15 24.77 22 DKIM_VALID_EF 56471 27.15 27.24 27.09 23 TR_DCC_Bayes_99 54672 12.09 26.38 3.08 24 BAYES_999 54503 12.89 26.29 4.43 25 MIME_HTML_ONLY 52592 21.95 25.37 19.79 26 XM_Multi_Part_URI 52058 21.88 25.12 19.84 27 UNPARSEABLE_RELAY 49755 18.30 24.00 14.70 28 TR_XM_DK_Unsub 43798 17.86 21.13 15.80 29 DCC_CHECK_NEGATIVE 38335 35.61 18.49 46.40 30 XMSubLong 36704 18.45 17.71 18.92 31 T_TM2_M_HEADER_IN_MSG 36010 18.99 17.37 20.01 32 TR_MAX_INTL_RELAY 31964 10.82 15.42 7.92 33 XM_B_SpammyWords3 30728 9.66 14.82 6.40 34 XM_B_Unsub 29632 11.08 14.30 9.05 35 TR_XM_BayesUnsub 28992 10.22 13.99 7.84 36 TR_XM_UnparsRelay 27599 6.79 13.32 2.67 37 TR_XM_SpammyWords2 26814 5.85 12.94 1.38 38 RELAYCOUNTRY_META 25216 7.52 12.17 4.60 39 BOTNET_IPINHOSTNAME 25060 6.84 12.09 3.53 40 RCVD_IN_BL_SPAMCOP_NET 24507 5.16 11.82 0.95 41 XM_Evil_Numbers_Gen 24148 11.71 11.65 11.74 42 LOTS_OF_MONEY 20874 6.94 10.07 4.96 43 TR_XM_SPAMCOP 20871 4.22 10.07 0.53 44 BAYES_80 20024 6.66 9.66 4.77 45 TR_XM_SpammyWords4 19203 5.71 9.26 3.47 46 HTML_IMAGE_RATIO_02 19156 8.86 9.24 8.62 47 BAYES_60 18530 10.52 8.94 11.52 48 TR_XM_SpammyRelay 18376 5.06 8.87 2.67 49 LotsOfNums_01 15955 9.30 7.70 10.31 50 FSL_BULK_SIG 15279 6.48 7.37 5.91 51 BOTNET 15240 3.54 7.35 1.13 52 HTML_IMAGE_RATIO_04 13194 6.65 6.37 6.83 53 TR_XM_SpammyWords5 13011 4.38 6.28 3.18 54 XM_Body_Dirty_Words 12792 3.78 6.17 2.26 55 XM_H_Long_From01 12526 5.79 6.04 5.64 56 MPART_ALT_DIFF 12215 4.89 5.89 4.25 57 UNTRUSTED_Relay 12165 3.76 5.87 2.43 58 XM_B_PhoneNumber 11579 6.56 5.59 7.17 59 BAYES_95 11164 4.02 5.39 3.15 60 XM_UncommonTLD01 11006 4.15 5.31 3.42 61 SUBJ_ALL_CAPS 10975 4.37 5.29 3.79 62 XM_B_SEO 10022 2.76 4.84 1.45 63 XMSubMetaSx_00 9884 3.69 4.77 3.01 64 USER_IN_DEF_DKIM_WL 9747 13.40 4.70 18.89 65 XM_SPF_SoftFail 9729 2.76 4.69 1.54 66 RCVD_IN_VALIDITY_SAFE 9546 6.61 4.61 7.88 67 TR_XM_SEO4 8750 2.28 4.22 1.06 68 XM_B_SpammyTLD 8703 3.96 4.20 3.81 69 HTML_IMAGE_RATIO_06 8485 3.56 4.09 3.22 70 TooManyTo_001 8294 4.68 4.00 5.11 71 XM_CamelCaseFrm001 8201 2.93 3.96 2.28 72 XM_B_Phish_Phrases 8123 4.80 3.92 5.35 73 XMSubMetaI_00 7809 2.69 3.77 2.00 74 XMNumbers 7750 2.93 3.74 2.43 75 T_XMDrugObfuBody_14 7673 2.47 3.70 1.69 76 XMSexyCombo_05 7648 2.11 3.69 1.11 77 XM_H_GMP 7570 3.67 3.65 3.68 78 XMBody_17 7414 1.81 3.58 0.70 79 TM2_M_VERY_LONG_WORD 7407 2.52 3.57 1.85 80 RCVD_IN_VALIDITY_CERTIFIED 7404 5.22 3.57 6.26 81 XM_B_SpammyWords4 7363 2.08 3.55 1.15 82 MIME_HTML_MOSTLY 7242 3.08 3.49 2.82 83 MIME_HTML_ONLY_MULTI 7120 2.70 3.44 2.23 84 DKIM_INVALID 7106 2.18 3.43 1.39 85 RELAYCOUNTRY_CA 7038 2.07 3.40 1.24 86 TR_XM_PhishingBody 7029 2.41 3.39 1.79 87 HTML_IMAGE_RATIO_08 6981 2.61 3.37 2.13 88 TM2_M_URI_OPT_OUT 6978 2.65 3.37 2.19 89 XM_B_Investor 6770 1.85 3.27 0.96 90 XMStrtUSub 6629 4.07 3.20 4.62 91 XMBrknScrpt_02 6573 2.21 3.17 1.60 92 MIME_QP_LONG_LINE 6414 4.39 3.09 5.20 93 XM_UB50 6265 2.06 3.02 1.46 94 FROM_EXCESS_BASE64 6210 2.82 3.00 2.71 95 XM_URI_RBL 6106 1.50 2.95 0.58 96 RCVD_IN_MSPIKE_H3 6080 4.35 2.93 5.24 97 RCVD_IN_MSPIKE_WL 6080 4.35 2.93 5.24 98 XM_B_URI_Unicode 6059 2.18 2.92 1.70 99 RELAYCOUNTRY_AU 5782 1.68 2.79 0.99 100 T_XMHurry_00 5777 1.90 2.79 1.34 101 XMStockSpam_06 5325 2.20 2.57 1.98 102 TR_LOTS_OF_MONEY3 4791 1.11 2.31 0.34 103 T_TooManySym_01 4784 3.76 2.31 4.68 104 SHOPIFY_IMG_NOT_RCVD_SFY 4571 1.35 2.21 0.81 105 THIS_AD 4462 1.49 2.15 1.08 106 T_XMDrugObfuBody_08 4176 1.78 2.01 1.63 107 XM_OfRef6 4166 1.16 2.01 0.63 108 XMBdyGiftCard01 3804 1.52 1.84 1.32 109 MPART_ALT_DIFF_COUNT 3664 1.03 1.77 0.56 110 SpammyFromTLD_02 3650 0.80 1.76 0.20 111 XM_ProductURIs 3603 1.25 1.74 0.94 112 T_XMDrugObfuBody_00 3572 1.35 1.72 1.12 113 MAILING_LIST_MULTI 3383 2.29 1.63 2.71 114 XM_SendGrid 3334 1.55 1.61 1.51 115 URI_HEX 3298 1.25 1.59 1.04 116 RCVD_IN_VALIDITY_RPBL 3250 0.69 1.57 0.14 117 XM_B_Unsub2 3243 1.22 1.56 0.99 118 XM_B_REG_HTML 3211 0.80 1.55 0.33 119 XM_DK_Undo_01 3167 1.33 1.53 1.20 120 SpammyFromTLD_01 3068 0.88 1.48 0.50 121 XM_B_COPY_HTML 2978 1.04 1.44 0.79 122 TR_XM_Base64_M1 2883 1.00 1.39 0.76 123 TR_XM_NoHeaderRelay 2881 0.64 1.39 0.17 124 RCVD_IN_IADB_LISTED 2780 3.40 1.34 4.70 125 XMDiploma_00 2761 1.13 1.33 1.01 126 BAYES_40 2761 2.97 1.33 4.00 127 T_REMOTE_IMAGE 2649 2.03 1.28 2.50 128 TM2_M_OBFU_COMMENT 2600 0.66 1.25 0.28 129 XMPhish30 2542 0.86 1.23 0.63 130 TR_LOTS_OF_MONEY2 2522 0.65 1.22 0.30 131 T_MONEY_PERCENT 2522 0.65 1.22 0.30 132 XM_B_DNDMA 2521 1.05 1.22 0.94 133 TR_Caps_n_Bayes_99 2474 0.51 1.19 0.08 134 RCVD_IN_IADB_SPF 2395 3.02 1.16 4.19 135 LongTLD 2375 0.57 1.15 0.21 136 XMSubMetaSxObfu_03 2371 0.71 1.14 0.44 137 XMClaimOffer 2336 0.74 1.13 0.50 138 DIET_1 2321 0.70 1.12 0.43 139 T_FILL_THIS_FORM_SHORT 2307 0.76 1.11 0.54 140 RCVD_IN_IADB_DK 2302 2.67 1.11 3.66 141 RDNS_DYNAMIC 2282 0.61 1.10 0.30 142 RCVD_IN_IADB_SENDERID 2280 2.75 1.10 3.79 143 PLING_QUERY 2267 0.76 1.09 0.54 144 PDS_RDNS_DYNAMIC_FP 2260 0.51 1.09 0.14 145 XM_H_Long_From02 2256 1.07 1.09 1.05 146 XM_HighProb1 2217 0.42 1.07 0.01 147 HTML_TAG_BALANCE_BODY 2105 0.73 1.02 0.55 148 TR_XM_INV_DKIM 2073 0.43 1.00 0.07 149 URI_TRY_3LD 2050 0.82 0.99 0.71 150 URI_NOVOWEL 2047 2.13 0.99 2.86 151 HTML_MIME_NO_HTML_TAG 2033 1.14 0.98 1.24 152 TR_XM_DK_SendGrid 1994 1.00 0.96 1.03 153 TVD_RCVD_IP 1979 0.62 0.95 0.41 154 TR_XM_PHPForged 1971 0.48 0.95 0.18 155 TR_XM_Base64_L1 1964 0.52 0.95 0.25 156 TR_XM_PHPDW 1945 0.47 0.94 0.17 157 LOW_PRICE 1943 0.72 0.94 0.59 158 XMSolicitRefs_0 1914 0.69 0.92 0.54 159 TR_XM_FormFill2 1905 0.46 0.92 0.18 160 HELO_DYNAMIC_SPLIT_IP 1887 0.36 0.91 0.01 161 XM_H_PHPOS 1882 0.45 0.91 0.16 162 XMReplyNow 1867 0.45 0.90 0.17 163 TR_XM_InvalidRelay 1846 0.37 0.89 0.04 164 XM_UB99 1833 0.35 0.88 0.01 165 DKIM_ADSP_CUSTOM_MED 1778 0.87 0.86 0.88 166 KHOP_HELO_FCRDNS 1778 0.76 0.86 0.70 167 TR_Symld_Words 1776 1.72 0.86 2.27 168 XM_B_Phish66 1755 0.48 0.85 0.25 169 RELAYCOUNTRY_FR 1731 0.45 0.84 0.21 170 BAYES_20 1722 1.87 0.83 2.52 171 TM2_M_A_HREF_HREF 1700 0.41 0.82 0.16 172 XMHTMLBadTable_001 1686 0.49 0.81 0.29 173 RCVD_IN_PSBL 1650 0.34 0.80 0.06 174 TR_XM_Spammywords 1568 0.51 0.76 0.35 175 XM_S_SpammyWords 1568 0.51 0.76 0.35 176 XM_H_Undi_Recip 1550 0.34 0.75 0.08 177 T_STY_INVIS_DIRECT 1541 0.44 0.74 0.25 178 NML_ADSP_CUSTOM_MED 1496 0.63 0.72 0.58 179 XMSlimDrugH 1476 0.42 0.71 0.24 180 XM_RXBody 1474 0.84 0.71 0.91 181 MONEY_BACK 1464 0.39 0.71 0.19 182 AC_BR_BONANZA 1461 0.32 0.70 0.08 183 XMPhish14 1436 0.63 0.69 0.59 184 TR_Mismatch_TLD_02 1435 0.30 0.69 0.05 185 ALL_TRUSTED 1433 7.88 0.69 12.41 186 TR_XM_Undi_Recip19 1405 0.30 0.68 0.05 187 MIME_CHARSET_FARAWAY 1367 0.44 0.66 0.31 188 BOTNET_NORDNS 1340 0.25 0.65 0.01 189 URIBL_BLACK 1326 0.29 0.64 0.07 190 XMGenDplmaNmb 1323 0.54 0.64 0.48 191 RCVD_IN_IADB_VOUCHED 1322 2.11 0.64 3.05 192 RELAYCOUNTRY_GB 1317 0.53 0.64 0.46 193 XM_UB999 1310 0.25 0.63 0.01 194 TR_Caps_n_Bayes_80 1304 0.35 0.63 0.18 195 HTML_FONT_FACE_BAD 1288 0.46 0.62 0.36 196 XM_DIRTYINTL 1278 0.28 0.62 0.07 197 TR_MetaPhish_Combo_01 1270 0.60 0.61 0.60 198 TR_Mismatch_TLD_01 1269 0.36 0.61 0.20 199 XM_UB80 1251 0.25 0.60 0.02 200 XM_UB60 1250 0.29 0.60 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 287887 91.57 97.81 87.63 2 RELAYCOUNTRY_US 273110 85.04 88.05 83.13 3 DKIM_SIGNED 272577 87.42 94.48 82.97 4 XM_DK_Pass 269310 85.84 91.96 81.98 5 DKIM_VALID 267999 85.24 91.05 81.58 6 XM_B_Unicode 255766 82.72 90.42 77.85 7 DKIM_VALID_AU 219686 68.98 72.33 66.87 8 XMListUnsubscribeExists 213863 70.56 79.22 65.10 9 BAYES_50 197393 52.03 39.27 60.09 10 DCC_CHECK 176015 64.27 81.20 53.58 11 XM_B_Unicode3 171336 52.04 51.87 52.15 12 XM_B_SpammyWords 161528 57.98 71.94 49.17 13 DCC_CHECK_NEGATIVE 152441 35.61 18.49 46.40 14 LOC_TINY_FONT_1 118216 42.78 53.55 35.98 15 HTML_FONT_LOW_CONTRAST 117106 40.61 48.48 35.65 16 RCVD_IN_MSPIKE_H2 116391 38.85 44.28 35.43 17 FVGT_m_MULTI_ODD 100175 33.32 37.81 30.49 18 DKIM_VALID_EF 88985 27.15 27.24 27.09 19 T_KAM_HTML_FONT_INVALID 81384 26.47 29.15 24.77 20 XM_B_SpammyWords2 74790 29.44 40.01 22.77 21 T_TM2_M_HEADER_IN_MSG 65751 18.99 17.37 20.01 22 XM_Multi_Part_URI 65180 21.88 25.12 19.84 23 MIME_HTML_ONLY 65028 21.95 25.37 19.79 24 XMSubLong 62155 18.45 17.71 18.92 25 USER_IN_DEF_DKIM_WL 62055 13.40 4.70 18.89 26 TR_XM_DK_Unsub 51910 17.86 21.13 15.80 27 UNPARSEABLE_RELAY 48308 18.30 24.00 14.70 28 ALL_TRUSTED 40784 7.88 0.69 12.41 29 XM_Evil_Numbers_Gen 38584 11.71 11.65 11.74 30 BAYES_60 37855 10.52 8.94 11.52 31 LotsOfNums_01 33863 9.30 7.70 10.31 32 XM_DKIMWhitelistDomains 32182 6.08 0.19 9.80 33 XM_B_Unsub 29725 11.08 14.30 9.05 34 HTML_IMAGE_RATIO_02 28326 8.86 9.24 8.62 35 TR_MAX_INTL_RELAY 26032 10.82 15.42 7.92 36 RCVD_IN_VALIDITY_SAFE 25873 6.61 4.61 7.88 37 TR_XM_BayesUnsub 25747 10.22 13.99 7.84 38 XM_DK_Undo_02 24310 22.47 46.35 7.40 39 XM_B_PhoneNumber 23550 6.56 5.59 7.17 40 HTML_IMAGE_RATIO_04 22427 6.65 6.37 6.83 41 BAYES_00 21882 4.30 0.56 6.66 42 XM_B_SpammyWords3 21014 9.66 14.82 6.40 43 RCVD_IN_VALIDITY_CERTIFIED 20578 5.22 3.57 6.26 44 FSL_BULK_SIG 19426 6.48 7.37 5.91 45 BAYES_99 18830 16.39 33.28 5.73 46 TR_XM_DK_Bayes 18728 3.69 0.51 5.70 47 TR_XM_DK_Bayes1 18569 3.66 0.51 5.65 48 XM_H_Long_From01 18519 5.79 6.04 5.64 49 IN_ZIMBRA_NJ_WHITELIST 17611 3.31 0.07 5.36 50 XM_B_Phish_Phrases 17586 4.80 3.92 5.35 51 RCVD_IN_MSPIKE_H3 17228 4.35 2.93 5.24 52 RCVD_IN_MSPIKE_WL 17228 4.35 2.93 5.24 53 MIME_QP_LONG_LINE 17093 4.39 3.09 5.20 54 TooManyTo_001 16772 4.68 4.00 5.11 55 LOTS_OF_MONEY 16298 6.94 10.07 4.96 56 TR_XM_DK_Bayes2 16203 3.18 0.41 4.93 57 BAYES_80 15674 6.66 9.66 4.77 58 RCVD_IN_IADB_LISTED 15439 3.40 1.34 4.70 59 T_TooManySym_01 15362 3.76 2.31 4.68 60 XMStrtUSub 15164 4.07 3.20 4.62 61 RELAYCOUNTRY_META 15102 7.52 12.17 4.60 62 BAYES_999 14560 12.89 26.29 4.43 63 MPART_ALT_DIFF 13964 4.89 5.89 4.25 64 RCVD_IN_IADB_SPF 13775 3.02 1.16 4.19 65 BAYES_40 13153 2.97 1.33 4.00 66 XM_B_SpammyTLD 12512 3.96 4.20 3.81 67 SUBJ_ALL_CAPS 12466 4.37 5.29 3.79 68 RCVD_IN_IADB_SENDERID 12446 2.75 1.10 3.79 69 XM_H_GMP 12102 3.67 3.65 3.68 70 RCVD_IN_IADB_DK 12019 2.67 1.11 3.66 71 BOTNET_IPINHOSTNAME 11584 6.84 12.09 3.53 72 TR_XM_DKIM_Undo 11576 14.70 32.41 3.52 73 TR_XM_SpammyWords4 11409 5.71 9.26 3.47 74 XM_UncommonTLD01 11229 4.15 5.31 3.42 75 HTML_IMAGE_RATIO_06 10565 3.56 4.09 3.22 76 TR_XM_SpammyWords5 10463 4.38 6.28 3.18 77 BAYES_95 10354 4.02 5.39 3.15 78 TR_DCC_Bayes_99 10103 12.09 26.38 3.08 79 RCVD_IN_IADB_VOUCHED 10009 2.11 0.64 3.05 80 XMSubMetaSx_00 9881 3.69 4.77 3.01 81 ANY_BOUNCE_MESSAGE 9851 1.96 0.32 3.00 82 BOUNCE_MESSAGE 9851 1.96 0.32 3.00 83 URI_NOVOWEL 9385 2.13 0.99 2.86 84 MIME_HTML_MOSTLY 9279 3.08 3.49 2.82 85 FROM_EXCESS_BASE64 8911 2.82 3.00 2.71 86 MAILING_LIST_MULTI 8905 2.29 1.63 2.71 87 TR_XM_UnparsRelay 8775 6.79 13.32 2.67 88 TR_XM_SpammyRelay 8760 5.06 8.87 2.67 89 T_TooManySym_02 8302 1.76 0.55 2.53 90 BAYES_20 8280 1.87 0.83 2.52 91 T_REMOTE_IMAGE 8202 2.03 1.28 2.50 92 XMNumbers 7975 2.93 3.74 2.43 93 UNTRUSTED_Relay 7971 3.76 5.87 2.43 94 XM_CamelCaseFrm001 7501 2.93 3.96 2.28 95 TR_Symld_Words 7453 1.72 0.86 2.27 96 XM_Body_Dirty_Words 7439 3.78 6.17 2.26 97 MIME_HTML_ONLY_MULTI 7334 2.70 3.44 2.23 98 RCVD_IN_IADB_OPTIN 7246 1.50 0.38 2.21 99 TM2_M_URI_OPT_OUT 7201 2.65 3.37 2.19 100 HTML_IMAGE_RATIO_08 7004 2.61 3.37 2.13 101 INVALID_MSGID 6615 1.26 0.07 2.01 102 XMSubMetaI_00 6586 2.69 3.77 2.00 103 XMStockSpam_06 6489 2.20 2.57 1.98 104 XM_PDF 6406 1.28 0.22 1.95 105 TO_MALFORMED 6219 1.17 0.01 1.89 106 TM2_M_VERY_LONG_WORD 6091 2.52 3.57 1.85 107 XMBody_95 5922 1.20 0.24 1.80 108 TR_XM_PhishingBody 5866 2.41 3.39 1.79 109 XM_B_URI_Unicode 5596 2.18 2.92 1.70 110 T_XMDrugObfuBody_14 5544 2.47 3.70 1.69 111 T_XMDrugObfuBody_08 5347 1.78 2.01 1.63 112 XMBrknScrpt_02 5269 2.21 3.17 1.60 113 BAYES_05 5078 1.12 0.45 1.55 114 XM_SPF_SoftFail 5050 2.76 4.69 1.54 115 XM_SendGrid 4957 1.55 1.61 1.51 116 XM_UB50 4780 2.06 3.02 1.46 117 XM_B_SEO 4762 2.76 4.84 1.45 118 IN_HORDE_ADDRESS_BOOK 4612 0.89 0.07 1.40 119 DKIM_INVALID 4578 2.18 3.43 1.39 120 TR_XM_SpammyWords2 4523 5.85 12.94 1.38 121 T_XMHurry_00 4392 1.90 2.79 1.34 122 XMBdyGiftCard01 4343 1.52 1.84 1.32 123 TooManyTo_002 4245 1.01 0.57 1.29 124 RELAYCOUNTRY_CA 4071 2.07 3.40 1.24 125 HTML_MIME_NO_HTML_TAG 4058 1.14 0.98 1.24 126 XM_DK_Undo_01 3948 1.33 1.53 1.20 127 XM_B_SpammyWords4 3772 2.08 3.55 1.15 128 BOTNET 3706 3.54 7.35 1.13 129 T_XMDrugObfuBody_00 3679 1.35 1.72 1.12 130 XMSexyCombo_05 3633 2.11 3.69 1.11 131 THIS_AD 3542 1.49 2.15 1.08 132 TR_XM_SEO4 3467 2.28 4.22 1.06 133 XM_H_Long_From02 3465 1.07 1.09 1.05 134 XM_GoogleGroups 3437 0.82 0.46 1.05 135 URI_HEX 3410 1.25 1.59 1.04 136 TR_XM_DK_SendGrid 3390 1.00 0.96 1.03 137 TVD_SPACE_RATIO 3379 0.66 0.06 1.03 138 XMDiploma_00 3309 1.13 1.33 1.01 139 XM_B_Unsub2 3268 1.22 1.56 0.99 140 RELAYCOUNTRY_AU 3245 1.68 2.79 0.99 141 XM_B_Investor 3143 1.85 3.27 0.96 142 RCVD_IN_BL_SPAMCOP_NET 3133 5.16 11.82 0.95 143 XM_B_DNDMA 3096 1.05 1.22 0.94 144 XM_ProductURIs 3090 1.25 1.74 0.94 145 XM_RXBody 3004 0.84 0.71 0.91 146 XMGappySubj_01 2959 0.63 0.20 0.90 147 T_TooManySym_03 2959 0.58 0.08 0.90 148 DKIM_ADSP_CUSTOM_MED 2891 0.87 0.86 0.88 149 XM_TLDProd2 2793 0.61 0.24 0.85 150 SHOPIFY_IMG_NOT_RCVD_SFY 2668 1.35 2.21 0.81 151 XMOemUri 2623 0.60 0.29 0.80 152 XM_B_COPY_HTML 2591 1.04 1.44 0.79 153 TR_XM_Base64_M1 2490 1.00 1.39 0.76 154 TooManyTo_003 2472 0.62 0.42 0.75 155 XMGappySubj_02 2423 0.49 0.10 0.74 156 URI_TRY_3LD 2317 0.82 0.99 0.71 157 KHOP_HELO_FCRDNS 2300 0.76 0.86 0.70 158 XMBody_17 2289 1.81 3.58 0.70 159 FORGED_GMAIL_RCVD 2235 0.62 0.51 0.68 160 T_OBFU_PDF_ATTACH 2083 0.42 0.08 0.63 161 XMPhish30 2078 0.86 1.23 0.63 162 XM_OfRef6 2064 1.16 2.01 0.63 163 TR_MetaPhish_Combo_01 1970 0.60 0.61 0.60 164 LOW_PRICE 1938 0.72 0.94 0.59 165 XMPhish14 1924 0.63 0.69 0.59 166 XM_URI_RBL 1917 1.50 2.95 0.58 167 NML_ADSP_CUSTOM_MED 1900 0.63 0.72 0.58 168 MPART_ALT_DIFF_COUNT 1836 1.03 1.77 0.56 169 XMSubNoVowel 1833 0.42 0.19 0.56 170 TooManyTo_004 1829 0.50 0.40 0.56 171 HTML_TAG_BALANCE_BODY 1809 0.73 1.02 0.55 172 T_FILL_THIS_FORM_SHORT 1788 0.76 1.11 0.54 173 PLING_QUERY 1784 0.76 1.09 0.54 174 RELAYCOUNTRY_AT 1783 0.51 0.45 0.54 175 URI_TRUNCATED 1776 0.41 0.20 0.54 176 XMSolicitRefs_0 1767 0.69 0.92 0.54 177 TR_XM_SPAMCOP 1730 4.22 10.07 0.53 178 SpammyFromTLD_01 1635 0.88 1.48 0.50 179 XMClaimOffer 1632 0.74 1.13 0.50 180 XMGenDplmaNmb 1570 0.54 0.64 0.48 181 RELAYCOUNTRY_DE 1558 0.47 0.46 0.47 182 TooManyTo_005 1525 0.43 0.37 0.46 183 USER_IN_WELCOMELIST 1522 0.28 0.00 0.46 184 USER_IN_WHITELIST 1522 0.28 0.00 0.46 185 RELAYCOUNTRY_GB 1498 0.53 0.64 0.46 186 HTTPS_HTTP_MISMATCH 1493 0.51 0.59 0.45 187 SUBJ_DOLLARS 1465 0.50 0.58 0.45 188 XM_H_PHPMailer 1462 0.45 0.47 0.45 189 XMNoVowels 1445 0.42 0.38 0.44 190 XMSubMetaSxObfu_03 1442 0.71 1.14 0.44 191 DIET_1 1427 0.70 1.12 0.43 192 XM_Sams_Club_Forge 1384 0.28 0.05 0.42 193 TVD_RCVD_IP 1357 0.62 0.95 0.41 194 T_TVD_MIME_NO_HEADERS 1304 0.25 0.03 0.40 195 XMLngstWrd_00 1299 0.33 0.22 0.40 196 RCVD_IN_IADB_OPTIN_GT50 1290 0.26 0.06 0.39 197 HTML_FONT_FACE_BAD 1184 0.46 0.62 0.36 198 HTML_IMAGE_ONLY_20 1173 0.31 0.23 0.36 199 T_TooManySym_04 1161 0.22 0.01 0.35 200 XM_S_SpammyWords 1148 0.51 0.76 0.35 ----------------------------------------------------------------------