Email: 273603 Autolearn: 0 AvgScore: 5.10 AvgScanTime: 1.27 sec Spam: 101694 Autolearn: 0 AvgScore: 13.87 AvgScanTime: 1.33 sec Ham: 171909 Autolearn: 0 AvgScore: -0.08 AvgScanTime: 1.24 sec Time Spent Running SA: 96.68 hours Time Spent Processing Spam: 37.51 hours Time Spent Processing Ham: 59.17 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 97903 85.54 96.27 79.19 2 DKIM_SIGNED 88825 79.15 87.35 74.30 3 XM_DK_Pass 85385 77.35 83.96 73.44 4 RELAYCOUNTRY_US 85304 79.22 83.88 76.46 5 DKIM_VALID 84749 76.77 83.34 72.89 6 XM_B_Unicode 83857 74.13 82.46 69.20 7 DCC_CHECK 76853 57.50 75.57 46.82 8 XMListUnsubscribeExists 70074 58.91 68.91 52.99 9 XM_B_SpammyWords 69874 53.92 68.71 45.17 10 DKIM_VALID_AU 66860 63.12 65.75 61.56 11 XM_B_Unicode3 50417 46.13 49.58 44.10 12 LOC_TINY_FONT_1 46227 35.44 45.46 29.51 13 XM_DK_Undo_02 44118 20.18 43.38 6.46 14 RCVD_IN_MSPIKE_H2 40023 35.74 39.36 33.61 15 XM_B_SpammyWords2 38914 26.22 38.27 19.09 16 HTML_FONT_LOW_CONTRAST 38611 34.40 37.97 32.29 17 BAYES_99 37945 17.02 37.31 5.01 18 BAYES_50 36127 50.73 35.53 59.72 19 MIME_HTML_ONLY 33762 24.04 33.20 18.62 20 FVGT_m_MULTI_ODD 31449 26.56 30.93 23.97 21 TR_XM_DKIM_Undo 31359 13.26 30.84 2.87 22 BAYES_999 30793 13.71 30.28 3.91 23 T_KAM_HTML_FONT_INVALID 30627 22.97 30.12 18.74 24 DKIM_VALID_EF 26368 26.84 25.93 27.38 25 TR_DCC_Bayes_99 25457 10.61 25.03 2.08 26 DCC_CHECK_NEGATIVE 24419 42.33 24.01 53.17 27 XMSubLong 22989 21.86 22.61 21.42 28 XM_B_Unsub 22270 13.86 21.90 9.10 29 XM_Multi_Part_URI 21925 20.61 21.56 20.05 30 TR_XM_BayesUnsub 21756 12.59 21.39 7.37 31 TR_XM_DK_Unsub 18862 15.19 18.55 13.20 32 T_TM2_M_HEADER_IN_MSG 18658 20.51 18.35 21.79 33 RELAYCOUNTRY_META 18551 9.09 18.24 3.68 34 UNPARSEABLE_RELAY 16687 13.59 16.41 11.92 35 XM_B_SpammyWords3 15413 9.41 15.16 6.01 36 TR_MAX_INTL_RELAY 15373 9.74 15.12 6.57 37 TR_XM_SpammyRelay 13842 6.39 13.61 2.12 38 TR_XM_SpammyWords2 11714 4.75 11.52 0.75 39 BOTNET_IPINHOSTNAME 10790 6.10 10.61 3.43 40 RCVD_IN_BL_SPAMCOP_NET 10747 4.49 10.57 0.89 41 TooManyTo_001 10661 8.36 10.48 7.11 42 FSL_BULK_SIG 10117 9.52 9.95 9.26 43 LOTS_OF_MONEY 9865 6.65 9.70 4.84 44 TR_XM_UnparsRelay 9856 4.77 9.69 1.86 45 BAYES_80 9720 6.06 9.56 3.99 46 TR_XM_SPAMCOP 9525 3.77 9.37 0.45 47 TR_XM_SpammyWords4 9163 5.58 9.01 3.55 48 BAYES_60 9020 10.03 8.87 10.72 49 XMSubMetaSx_00 8700 6.48 8.56 5.25 50 RELAYCOUNTRY_CA 8612 4.29 8.47 1.81 51 BOTNET 8582 3.86 8.44 1.16 52 XM_Body_Dirty_Words 8378 6.17 8.24 4.95 53 XMSexyCombo_05 8139 4.23 8.00 2.00 54 XM_Evil_Numbers_Gen 7975 9.32 7.84 10.20 55 HTML_IMAGE_RATIO_02 7902 6.62 7.77 5.94 56 MPART_ALT_DIFF 7313 5.27 7.19 4.14 57 XM_B_PhoneNumber 7275 5.88 7.15 5.13 58 XM_B_Phish_Phrases 6669 5.89 6.56 5.49 59 LotsOfNums_01 6570 7.94 6.46 8.81 60 UNTRUSTED_Relay 6017 3.23 5.92 1.64 61 XM_UncommonTLD01 5956 5.33 5.86 5.01 62 T_XMDrugObfuBody_14 5592 2.90 5.50 1.36 63 XM_H_GMP 5415 5.20 5.32 5.12 64 TooManyTo_002 5376 2.56 5.29 0.94 65 BAYES_95 5261 3.54 5.17 2.58 66 XM_H_Long_From01 4852 4.61 4.77 4.52 67 TR_XM_FormFill 4511 1.68 4.44 0.04 68 RCVD_IN_MSPIKE_H3 4500 4.73 4.43 4.91 69 RCVD_IN_MSPIKE_WL 4500 4.73 4.43 4.91 70 HTML_IMAGE_RATIO_04 4408 5.17 4.33 5.67 71 XM_B_SpammyTLD 4343 5.69 4.27 6.53 72 MIME_HTML_ONLY_MULTI 4230 2.96 4.16 2.26 73 TR_XM_PhishingBody 4201 2.47 4.13 1.49 74 XM_SPF_SoftFail 4127 2.41 4.06 1.43 75 DKIM_INVALID 4076 2.38 4.01 1.41 76 XM_B_FormFill 4072 1.59 4.00 0.17 77 TR_XM_NoHeaderRelay 4064 1.60 4.00 0.19 78 XM_Appointment_Request 4051 1.51 3.98 0.04 79 XMStrtUSub 4035 4.78 3.97 5.26 80 XM_B_SEO 4032 2.06 3.96 0.94 81 RCVD_IN_VALIDITY_RPBL 3965 1.50 3.90 0.08 82 XMBody_17 3701 1.72 3.64 0.58 83 XM_CamelCaseFrm001 3688 3.06 3.63 2.73 84 USER_IN_DEF_DKIM_WL 3661 13.74 3.60 19.74 85 TM2_M_VERY_LONG_WORD 3645 2.16 3.58 1.32 86 XM_B_Investor 3599 2.19 3.54 1.39 87 TR_XM_SEO4 3577 1.62 3.52 0.49 88 HTML_IMAGE_RATIO_06 3404 2.93 3.35 2.69 89 MIME_HTML_MOSTLY 3395 2.69 3.34 2.30 90 TR_XM_SpammyWords5 3296 1.92 3.24 1.14 91 XM_UB50 3181 1.66 3.13 0.79 92 FROM_EXCESS_BASE64 2930 2.74 2.88 2.65 93 XM_OfRef6 2851 1.41 2.80 0.59 94 XM_B_SpammyWords4 2769 1.65 2.72 1.01 95 HTML_IMAGE_RATIO_08 2700 1.96 2.66 1.55 96 RCVD_IN_VALIDITY_SAFE 2618 5.96 2.57 7.96 97 XMNumbers 2592 2.85 2.55 3.02 98 MIME_QP_LONG_LINE 2532 4.42 2.49 5.56 99 XM_URI_RBL 2455 1.31 2.41 0.65 100 SpammyFromTLD_01 2409 1.27 2.37 0.62 101 XMDiploma_00 2332 1.35 2.29 0.79 102 TM2_M_URI_OPT_OUT 2328 3.38 2.29 4.02 103 RELAYCOUNTRY_AU 2239 1.02 2.20 0.31 104 T_XMDrugObfuBody_08 2210 1.49 2.17 1.09 105 RCVD_IN_VALIDITY_CERTIFIED 2197 4.72 2.16 6.24 106 T_XMHurry_00 2194 1.15 2.16 0.55 107 KHOP_HELO_FCRDNS 2107 1.54 2.07 1.23 108 DKIM_ADSP_NXDOMAIN 2067 1.02 2.03 0.41 109 T_FILL_THIS_FORM_SHORT 2030 0.98 2.00 0.38 110 XM_B_Unsub2 1981 1.32 1.95 0.95 111 XM_B_URI_Unicode 1979 1.46 1.95 1.17 112 SH_BODYURI_REVERSE_CSS 1962 0.74 1.93 0.04 113 URIBL_CSS_A 1960 0.75 1.93 0.05 114 URIBL_CSS 1960 0.75 1.93 0.05 115 HOSTED_IMG_MULTI_PUB_01 1911 0.73 1.88 0.05 116 BOUNCE_MESSAGE 1870 3.32 1.84 4.20 117 ANY_BOUNCE_MESSAGE 1870 3.32 1.84 4.20 118 T_TooManySym_01 1849 4.73 1.82 6.45 119 SUBJ_ALL_CAPS 1846 1.12 1.82 0.71 120 XMBrknScrpt_02 1776 1.23 1.75 0.93 121 XMBdyGiftCard01 1738 1.79 1.71 1.83 122 MAILING_LIST_MULTI 1735 1.80 1.71 1.86 123 XM_ProductURIs 1733 1.11 1.70 0.76 124 DIET_1 1711 0.83 1.68 0.32 125 XMStockSpam_06 1677 1.55 1.65 1.50 126 HK_RANDOM_REPLYTO 1668 0.79 1.64 0.28 127 THIS_AD 1647 0.88 1.62 0.45 128 T_STY_INVIS_DIRECT 1636 0.85 1.61 0.41 129 XMHTMLBadTable_001 1539 0.74 1.51 0.29 130 TR_XM_PHPForged 1478 0.62 1.45 0.13 131 TR_XM_PHPDW 1469 0.62 1.44 0.13 132 SUSP_UTF8_WORD_SUBJ 1468 0.55 1.44 0.03 133 BOTNET_NORDNS 1454 0.54 1.43 0.01 134 TR_XM_FormFill2 1452 0.62 1.43 0.14 135 FILL_THIS_FORM 1449 0.64 1.42 0.18 136 XMPhish30 1435 0.86 1.41 0.53 137 XM_H_PHPOS 1429 0.60 1.41 0.12 138 RELAYCOUNTRY_CN 1425 0.54 1.40 0.03 139 TR_LOTS_OF_MONEY3 1410 0.69 1.39 0.28 140 TR_XM_Base64_M1 1408 1.05 1.38 0.85 141 FILL_THIS_FORM_LONG 1393 0.53 1.37 0.03 142 XM_B_REG_HTML 1382 0.67 1.36 0.27 143 XM_DK_Undo_01 1372 1.28 1.35 1.24 144 XMBounce_01 1327 0.49 1.30 0.01 145 XMBody_78 1315 0.59 1.29 0.17 146 ALL_TRUSTED 1296 12.91 1.27 19.79 147 TooManyTo_003 1280 0.91 1.26 0.70 148 TR_Mismatch_TLD_01 1266 0.62 1.24 0.25 149 SHOPIFY_IMG_NOT_RCVD_SFY 1265 0.64 1.24 0.29 150 RELAYCOUNTRY_FR 1251 0.59 1.23 0.22 151 BAYES_40 1249 3.62 1.23 5.03 152 TooManyTo_004 1245 0.78 1.22 0.52 153 HTTPS_HTTP_MISMATCH 1243 0.68 1.22 0.36 154 SpammyFromTLD_02 1240 0.60 1.22 0.23 155 TooManyTo_005 1228 0.73 1.21 0.45 156 T_XMDrugObfuBody_00 1220 0.70 1.20 0.40 157 HTML_TAG_BALANCE_BODY 1203 1.03 1.18 0.94 158 URI_HEX 1202 1.17 1.18 1.17 159 MPART_ALT_DIFF_COUNT 1126 0.61 1.11 0.31 160 XM_B_COPY_HTML 1125 0.98 1.11 0.90 161 XM_H_Long_From02 1112 1.11 1.09 1.13 162 XM_SendGrid 1104 1.17 1.09 1.21 163 TM2_M_OBFU_COMMENT 1079 0.86 1.06 0.73 164 XMSubMetaI_00 1058 0.80 1.04 0.65 165 HTML_MIME_NO_HTML_TAG 1057 1.06 1.04 1.07 166 TR_XM_Base64_L1 1033 0.46 1.02 0.13 167 LongTLD 1033 0.49 1.02 0.18 168 XM_B_Phish66 1029 0.53 1.01 0.24 169 XM_HighProb1 1023 0.38 1.01 0.01 170 TR_Symld_Words 1020 1.60 1.00 1.96 171 XMReplyNow 1015 0.48 1.00 0.17 172 TR_XM_INV_DKIM 1004 0.41 0.99 0.07 173 BAYES_20 991 2.05 0.97 2.69 174 XM_DIRTYINTL 988 0.39 0.97 0.05 175 TR_MetaPhish_Combo_01 979 0.95 0.96 0.95 176 RCVD_IN_PBL 976 0.67 0.96 0.50 177 XMPhish14 973 0.63 0.96 0.44 178 TR_XM_InvalidRelay 965 0.37 0.95 0.02 179 URI_NOVOWEL 955 3.60 0.94 5.18 180 RCVD_IN_XBL 952 0.35 0.94 0.01 181 LONGLN_LOW_CONTRAST 947 0.60 0.93 0.41 182 PLING_QUERY 938 0.88 0.92 0.85 183 TR_XM_BayesRelay 911 0.34 0.90 0.00 184 RCVD_IN_PSBL 894 0.42 0.88 0.15 185 XM_UB99 883 0.33 0.87 0.01 186 HTML_IMAGE_ONLY_20 799 0.54 0.79 0.40 187 TR_XM_Base64_C 798 0.32 0.78 0.04 188 TR_XM_DK_SendGrid 795 0.81 0.78 0.83 189 T_REMOTE_IMAGE 793 2.18 0.78 3.01 190 XM_UB60 776 0.32 0.76 0.06 191 URI_TRY_3LD 776 0.64 0.76 0.56 192 XMHTML_After_End 775 0.39 0.76 0.18 193 XM_H_PHPMailer 765 0.62 0.75 0.55 194 RCVD_IN_IADB_LISTED 755 2.29 0.74 3.20 195 RDNS_DYNAMIC 746 0.50 0.73 0.36 196 XM_OfRef7 745 0.32 0.73 0.07 197 PDS_RDNS_DYNAMIC_FP 729 0.30 0.72 0.06 198 DKIM_ADSP_CUSTOM_MED 724 0.77 0.71 0.81 199 RELAYCOUNTRY_RU 721 0.28 0.71 0.02 200 XMSubMetaSxObfu_02 698 0.47 0.69 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136142 85.54 96.27 79.19 2 RELAYCOUNTRY_US 131440 79.22 83.88 76.46 3 DKIM_SIGNED 127732 79.15 87.35 74.30 4 XM_DK_Pass 126255 77.35 83.96 73.44 5 DKIM_VALID 125309 76.77 83.34 72.89 6 XM_B_Unicode 118962 74.13 82.46 69.20 7 DKIM_VALID_AU 105832 63.12 65.75 61.56 8 BAYES_50 102664 50.73 35.53 59.72 9 DCC_CHECK_NEGATIVE 91397 42.33 24.01 53.17 10 XMListUnsubscribeExists 91102 58.91 68.91 52.99 11 DCC_CHECK 80482 57.50 75.57 46.82 12 XM_B_SpammyWords 77659 53.92 68.71 45.17 13 XM_B_Unicode3 75807 46.13 49.58 44.10 14 RCVD_IN_MSPIKE_H2 57774 35.74 39.36 33.61 15 HTML_FONT_LOW_CONTRAST 55515 34.40 37.97 32.29 16 LOC_TINY_FONT_1 50725 35.44 45.46 29.51 17 DKIM_VALID_EF 47073 26.84 25.93 27.38 18 FVGT_m_MULTI_ODD 41210 26.56 30.93 23.97 19 T_TM2_M_HEADER_IN_MSG 37459 20.51 18.35 21.79 20 XMSubLong 36826 21.86 22.61 21.42 21 XM_Multi_Part_URI 34461 20.61 21.56 20.05 22 ALL_TRUSTED 34026 12.91 1.27 19.79 23 USER_IN_DEF_DKIM_WL 33936 13.74 3.60 19.74 24 XM_B_SpammyWords2 32814 26.22 38.27 19.09 25 T_KAM_HTML_FONT_INVALID 32216 22.97 30.12 18.74 26 MIME_HTML_ONLY 32005 24.04 33.20 18.62 27 TR_XM_DK_Unsub 22693 15.19 18.55 13.20 28 UNPARSEABLE_RELAY 20494 13.59 16.41 11.92 29 BAYES_60 18429 10.03 8.87 10.72 30 XM_Evil_Numbers_Gen 17535 9.32 7.84 10.20 31 FSL_BULK_SIG 15922 9.52 9.95 9.26 32 XM_B_Unsub 15651 13.86 21.90 9.10 33 LotsOfNums_01 15145 7.94 6.46 8.81 34 BAYES_00 14892 5.61 0.46 8.66 35 XM_DKIMWhitelistDomains 14828 5.51 0.24 8.63 36 RCVD_IN_VALIDITY_SAFE 13682 5.96 2.57 7.96 37 TR_XM_DK_Bayes 13118 4.95 0.41 7.63 38 TR_XM_DK_Bayes1 13032 4.91 0.41 7.58 39 TR_XM_BayesUnsub 12677 12.59 21.39 7.37 40 TooManyTo_001 12216 8.36 10.48 7.11 41 TR_XM_DK_Bayes2 11649 4.37 0.30 6.78 42 TR_MAX_INTL_RELAY 11286 9.74 15.12 6.57 43 XM_B_SpammyTLD 11220 5.69 4.27 6.53 44 XM_DK_Undo_02 11101 20.18 43.38 6.46 45 T_TooManySym_01 11095 4.73 1.82 6.45 46 RCVD_IN_VALIDITY_CERTIFIED 10727 4.72 2.16 6.24 47 XM_B_SpammyWords3 10325 9.41 15.16 6.01 48 HTML_IMAGE_RATIO_02 10213 6.62 7.77 5.94 49 HTML_IMAGE_RATIO_04 9749 5.17 4.33 5.67 50 MIME_QP_LONG_LINE 9560 4.42 2.49 5.56 51 XM_B_Phish_Phrases 9443 5.89 6.56 5.49 52 XMStrtUSub 9040 4.78 3.97 5.26 53 XMSubMetaSx_00 9026 6.48 8.56 5.25 54 IN_ZIMBRA_NJ_WHITELIST 8916 3.30 0.10 5.19 55 URI_NOVOWEL 8898 3.60 0.94 5.18 56 XM_B_PhoneNumber 8813 5.88 7.15 5.13 57 XM_H_GMP 8801 5.20 5.32 5.12 58 BAYES_40 8642 3.62 1.23 5.03 59 XM_UncommonTLD01 8619 5.33 5.86 5.01 60 BAYES_99 8613 17.02 37.31 5.01 61 XM_Body_Dirty_Words 8511 6.17 8.24 4.95 62 RCVD_IN_MSPIKE_H3 8437 4.73 4.43 4.91 63 RCVD_IN_MSPIKE_WL 8437 4.73 4.43 4.91 64 LOTS_OF_MONEY 8323 6.65 9.70 4.84 65 XM_H_Long_From01 7766 4.61 4.77 4.52 66 ANY_BOUNCE_MESSAGE 7225 3.32 1.84 4.20 67 BOUNCE_MESSAGE 7224 3.32 1.84 4.20 68 MPART_ALT_DIFF 7112 5.27 7.19 4.14 69 TM2_M_URI_OPT_OUT 6918 3.38 2.29 4.02 70 BAYES_80 6854 6.06 9.56 3.99 71 BAYES_999 6715 13.71 30.28 3.91 72 INVALID_MSGID 6608 2.49 0.19 3.84 73 T_TooManySym_02 6470 2.54 0.48 3.76 74 RELAYCOUNTRY_META 6319 9.09 18.24 3.68 75 TO_MALFORMED 6255 2.29 0.00 3.64 76 TR_XM_SpammyWords4 6097 5.58 9.01 3.55 77 BOTNET_IPINHOSTNAME 5904 6.10 10.61 3.43 78 RCVD_IN_IADB_LISTED 5501 2.29 0.74 3.20 79 XMNumbers 5198 2.85 2.55 3.02 80 T_REMOTE_IMAGE 5180 2.18 0.78 3.01 81 TR_XM_DKIM_Undo 4928 13.26 30.84 2.87 82 RCVD_IN_IADB_SPF 4887 2.02 0.62 2.84 83 XM_CamelCaseFrm001 4685 3.06 3.63 2.73 84 HTML_IMAGE_RATIO_06 4625 2.93 3.35 2.69 85 BAYES_20 4623 2.05 0.97 2.69 86 FROM_EXCESS_BASE64 4558 2.74 2.88 2.65 87 BAYES_95 4428 3.54 5.17 2.58 88 RCVD_IN_IADB_SENDERID 4396 1.83 0.59 2.56 89 RCVD_IN_IADB_DK 4305 1.80 0.60 2.50 90 MIME_HTML_MOSTLY 3958 2.69 3.34 2.30 91 MIME_HTML_ONLY_MULTI 3882 2.96 4.16 2.26 92 TR_XM_SpammyRelay 3644 6.39 13.61 2.12 93 RCVD_IN_IADB_VOUCHED 3596 1.43 0.31 2.09 94 TR_DCC_Bayes_99 3570 10.61 25.03 2.08 95 XMSexyCombo_05 3443 4.23 8.00 2.00 96 XM_TLDProd2 3366 1.33 0.26 1.96 97 TR_Symld_Words 3361 1.60 1.00 1.96 98 MAILING_LIST_MULTI 3197 1.80 1.71 1.86 99 XMGappySubj_01 3190 1.26 0.26 1.86 100 TR_XM_UnparsRelay 3190 4.77 9.69 1.86 101 XMBdyGiftCard01 3152 1.79 1.71 1.83 102 RELAYCOUNTRY_CA 3115 4.29 8.47 1.81 103 TVD_SPACE_RATIO 3102 1.19 0.14 1.80 104 XM_PDF 2934 1.16 0.23 1.71 105 IN_HORDE_ADDRESS_BOOK 2875 1.12 0.18 1.67 106 UNTRUSTED_Relay 2815 3.23 5.92 1.64 107 BAYES_05 2748 1.19 0.51 1.60 108 XMGappySubj_02 2696 1.00 0.04 1.57 109 HTML_IMAGE_RATIO_08 2663 1.96 2.66 1.55 110 RCVD_IN_IADB_OPTIN 2586 1.00 0.14 1.50 111 XMStockSpam_06 2572 1.55 1.65 1.50 112 TR_XM_PhishingBody 2554 2.47 4.13 1.49 113 XM_SPF_SoftFail 2456 2.41 4.06 1.43 114 DKIM_INVALID 2423 2.38 4.01 1.41 115 XM_B_Investor 2387 2.19 3.54 1.39 116 T_XMDrugObfuBody_14 2345 2.90 5.50 1.36 117 T_TooManySym_03 2297 0.88 0.11 1.34 118 TM2_M_VERY_LONG_WORD 2267 2.16 3.58 1.32 119 XM_DK_Undo_01 2135 1.28 1.35 1.24 120 KHOP_HELO_FCRDNS 2106 1.54 2.07 1.23 121 XMBody_95 2105 0.83 0.16 1.22 122 XM_SendGrid 2088 1.17 1.09 1.21 123 URI_HEX 2008 1.17 1.18 1.17 124 XM_B_URI_Unicode 2003 1.46 1.95 1.17 125 BOTNET 1991 3.86 8.44 1.16 126 TR_XM_SpammyWords5 1965 1.92 3.24 1.14 127 XM_H_Long_From02 1934 1.11 1.09 1.13 128 T_TVD_MIME_NO_HEADERS 1916 0.72 0.05 1.11 129 T_XMDrugObfuBody_08 1875 1.49 2.17 1.09 130 HTML_MIME_NO_HTML_TAG 1843 1.06 1.04 1.07 131 XM_B_SpammyWords4 1732 1.65 2.72 1.01 132 XMSexyCombo_01 1724 0.86 0.62 1.00 133 XM_B_Unsub2 1639 1.32 1.95 0.95 134 XM_GoogleGroups 1633 0.80 0.55 0.95 135 TR_MetaPhish_Combo_01 1629 0.95 0.96 0.95 136 TVD_RCVD_IP 1628 0.83 0.64 0.95 137 HTML_TAG_BALANCE_BODY 1621 1.03 1.18 0.94 138 TooManyTo_002 1621 2.56 5.29 0.94 139 XMSexyCombo_04 1617 0.68 0.25 0.94 140 XM_B_SEO 1611 2.06 3.96 0.94 141 XMBrknScrpt_02 1591 1.23 1.75 0.93 142 XM_B_COPY_HTML 1549 0.98 1.11 0.90 143 RCVD_IN_BL_SPAMCOP_NET 1538 4.49 10.57 0.89 144 XM_B_DNDMA 1514 0.79 0.64 0.88 145 HTML_EXTRA_CLOSE 1510 0.61 0.14 0.88 146 PLING_QUERY 1460 0.88 0.92 0.85 147 TR_XM_Base64_M1 1458 1.05 1.38 0.85 148 TR_XM_DK_SendGrid 1432 0.81 0.78 0.83 149 DKIM_ADSP_CUSTOM_MED 1387 0.77 0.71 0.81 150 XMDiploma_00 1362 1.35 2.29 0.79 151 XM_UB50 1359 1.66 3.13 0.79 152 XM_ProductURIs 1308 1.11 1.70 0.76 153 HTML_TEXT_INVISIBLE_STYLE 1308 0.55 0.20 0.76 154 TR_XM_SpammyWords2 1292 4.75 11.52 0.75 155 TM2_M_OBFU_COMMENT 1262 0.86 1.06 0.73 156 XMSubMetaSxObfu_03 1233 0.70 0.68 0.72 157 SUBJ_ALL_CAPS 1218 1.12 1.82 0.71 158 HTML_TAG_BALANCE_CENTER 1217 0.49 0.12 0.71 159 TooManyTo_003 1206 0.91 1.26 0.70 160 AD_PREFS 1183 0.45 0.05 0.69 161 USER_IN_WELCOMELIST 1169 0.43 0.00 0.68 162 USER_IN_WHITELIST 1169 0.43 0.00 0.68 163 XMSubMetaI_00 1126 0.80 1.04 0.65 164 XM_URI_RBL 1120 1.31 2.41 0.65 165 SpammyFromTLD_01 1066 1.27 2.37 0.62 166 XMBSHREFv2 1019 0.48 0.30 0.59 167 XM_OfRef6 1010 1.41 2.80 0.59 168 XMBody_17 1001 1.72 3.64 0.58 169 URI_TRY_3LD 967 0.64 0.76 0.56 170 NML_ADSP_CUSTOM_MED 965 0.58 0.61 0.56 171 T_XMHurry_00 953 1.15 2.16 0.55 172 XM_H_PHPMailer 941 0.62 0.75 0.55 173 XM_Ancestry_Forge 927 0.34 0.01 0.54 174 XMPhish30 909 0.86 1.41 0.53 175 FORGED_GMAIL_RCVD 904 0.54 0.55 0.53 176 TooManyTo_004 898 0.78 1.22 0.52 177 T_TooManySym_04 873 0.33 0.04 0.51 178 RCVD_IN_PBL 859 0.67 0.96 0.50 179 TR_XM_SEO4 843 1.62 3.52 0.49 180 XM_RXBody 824 0.43 0.35 0.48 181 XMNoVowels 799 0.41 0.30 0.46 182 MIME_CHARSET_FARAWAY 796 0.55 0.69 0.46 183 TooManyTo_005 780 0.73 1.21 0.45 184 TR_XM_SPAMCOP 779 3.77 9.37 0.45 185 THIS_AD 771 0.88 1.62 0.45 186 XMPhish14 764 0.63 0.96 0.44 187 XM_S_SubURI 764 0.30 0.04 0.44 188 HTML_FONT_FACE_BAD 752 0.51 0.62 0.44 189 XMClaimOffer 724 0.51 0.67 0.42 190 XMSubGiftCard1 714 0.28 0.05 0.42 191 XMLngstWrd_00 714 0.45 0.50 0.42 192 NO_DNS_FOR_FROM 713 0.51 0.68 0.41 193 DKIM_ADSP_NXDOMAIN 712 1.02 2.03 0.41 194 LONGLN_LOW_CONTRAST 706 0.60 0.93 0.41 195 T_STY_INVIS_DIRECT 697 0.85 1.61 0.41 196 XMWrdNumbWrd 692 0.27 0.04 0.40 197 T_XMDrugObfuBody_00 690 0.70 1.20 0.40 198 HTML_IMAGE_ONLY_20 687 0.54 0.79 0.40 199 SUBJ_DOLLARS 677 0.43 0.48 0.39 200 T_FILL_THIS_FORM_SHORT 645 0.98 2.00 0.38 ----------------------------------------------------------------------