Email: 250993 Autolearn: 0 AvgScore: 5.03 AvgScanTime: 1.32 sec Spam: 92206 Autolearn: 0 AvgScore: 13.51 AvgScanTime: 1.37 sec Ham: 158787 Autolearn: 0 AvgScore: 0.11 AvgScanTime: 1.29 sec Time Spent Running SA: 91.98 hours Time Spent Processing Spam: 35.06 hours Time Spent Processing Ham: 56.91 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88589 87.52 96.08 82.55 2 DKIM_SIGNED 82591 81.78 89.57 77.26 3 XM_DK_Pass 79664 79.98 86.40 76.25 4 DKIM_VALID 78723 79.18 85.38 75.58 5 RELAYCOUNTRY_US 78131 81.55 84.74 79.70 6 XM_B_Unicode 76907 75.77 83.41 71.33 7 DCC_CHECK 72882 60.82 79.04 50.23 8 XMListUnsubscribeExists 69704 61.52 75.60 53.34 9 XM_B_SpammyWords 65777 56.16 71.34 47.34 10 DKIM_VALID_AU 64437 66.98 69.88 65.30 11 LOC_TINY_FONT_1 50467 40.23 54.73 31.81 12 XM_B_Unicode3 47734 48.90 51.77 47.23 13 XM_DK_Undo_02 39702 19.25 43.06 5.42 14 XM_B_SpammyWords2 38069 28.95 41.29 21.78 15 HTML_FONT_LOW_CONTRAST 37600 34.97 40.78 31.60 16 RCVD_IN_MSPIKE_H2 35829 36.86 38.86 35.71 17 BAYES_50 35432 52.16 38.43 60.13 18 BAYES_99 30242 14.42 32.80 3.75 19 FVGT_m_MULTI_ODD 30223 28.64 32.78 26.24 20 T_KAM_HTML_FONT_INVALID 28846 23.71 31.28 19.32 21 TR_XM_DKIM_Undo 27706 12.54 30.05 2.37 22 XM_Multi_Part_URI 24111 19.52 26.15 15.66 23 BAYES_999 23705 11.28 25.71 2.91 24 DKIM_VALID_EF 23268 27.10 25.23 28.19 25 TR_DCC_Bayes_99 23007 10.05 24.95 1.40 26 MIME_HTML_ONLY 22927 23.03 24.86 21.96 27 XMSubLong 21416 25.67 23.23 27.08 28 DCC_CHECK_NEGATIVE 18951 39.02 20.55 49.74 29 TR_XM_DK_Unsub 17086 14.98 18.53 12.92 30 T_TM2_M_HEADER_IN_MSG 16897 20.45 18.33 21.69 31 UNPARSEABLE_RELAY 15102 13.40 16.38 11.67 32 XM_B_SpammyWords3 14170 9.35 15.37 5.85 33 TR_MAX_INTL_RELAY 14011 9.39 15.20 6.02 34 RELAYCOUNTRY_META 13994 8.15 15.18 4.08 35 XM_B_Unsub 12692 10.89 13.76 9.22 36 TR_XM_BayesUnsub 12223 9.34 13.26 7.06 37 TR_XM_SpammyWords2 12099 5.11 13.12 0.45 38 RCVD_IN_BL_SPAMCOP_NET 11451 5.30 12.42 1.16 39 XM_Body_Dirty_Words 11067 6.85 12.00 3.86 40 TR_XM_SpammyRelay 10243 5.32 11.11 1.96 41 TR_XM_SPAMCOP 9930 4.45 10.77 0.78 42 BOTNET_IPINHOSTNAME 8919 5.88 9.67 3.68 43 BAYES_60 8797 10.19 9.54 10.57 44 BAYES_80 8704 5.75 9.44 3.60 45 LOTS_OF_MONEY 7758 6.68 8.41 5.67 46 TR_XM_UnparsRelay 7751 4.04 8.41 1.50 47 HTML_IMAGE_RATIO_02 6983 6.79 7.57 6.33 48 BOTNET 6974 3.67 7.56 1.41 49 TR_XM_SpammyWords4 6947 5.46 7.53 4.25 50 XM_Evil_Numbers_Gen 6927 10.09 7.51 11.59 51 LotsOfNums_01 6887 7.42 7.47 7.39 52 XM_UncommonTLD01 6746 6.08 7.32 5.36 53 UNTRUSTED_Relay 5945 3.45 6.45 1.71 54 XM_B_Phish_Phrases 5846 5.31 6.34 4.71 55 FSL_BULK_SIG 5643 8.65 6.12 10.12 56 XMSubMetaSx_00 5545 5.48 6.01 5.17 57 MPART_ALT_DIFF 5453 4.99 5.91 4.45 58 XM_H_GMP 5327 6.02 5.78 6.16 59 RCVD_IN_VALIDITY_RPBL 5026 2.06 5.45 0.10 60 BAYES_95 4993 3.52 5.42 2.42 61 RELAYCOUNTRY_CA 4959 3.09 5.38 1.77 62 XM_H_Long_From01 4926 5.56 5.34 5.69 63 T_XMDrugObfuBody_14 4743 3.03 5.14 1.80 64 XM_B_SpammyTLD 4246 3.11 4.60 2.25 65 XM_B_Investor 4241 2.54 4.60 1.34 66 HTML_IMAGE_RATIO_06 4238 4.33 4.60 4.17 67 XMSexyCombo_05 4231 3.30 4.59 2.55 68 XMStrtUSub 4186 5.59 4.54 6.20 69 TR_XM_PhishingBody 4165 3.17 4.52 2.39 70 T_XMHurry_00 4036 2.02 4.38 0.65 71 XM_CamelCaseFrm001 3913 3.33 4.24 2.80 72 DKIM_INVALID 3868 2.60 4.19 1.68 73 TooManyTo_001 3797 5.46 4.12 6.24 74 SUSP_UTF8_WORD_SUBJ 3783 1.53 4.10 0.03 75 XM_B_PhoneNumber 3655 5.14 3.96 5.83 76 HTML_IMAGE_RATIO_08 3562 2.83 3.86 2.23 77 SUSP_UTF8_WORD_COMBO 3380 1.38 3.67 0.05 78 MIME_HTML_MOSTLY 3367 3.00 3.65 2.62 79 XM_UB50 3181 1.80 3.45 0.84 80 XMStockSpam_06 3139 2.98 3.40 2.73 81 HTML_IMAGE_RATIO_04 3121 4.42 3.38 5.02 82 RCVD_IN_VALIDITY_SAFE 3038 5.83 3.29 7.30 83 TM2_M_VERY_LONG_WORD 3001 2.50 3.25 2.07 84 MIME_HTML_ONLY_MULTI 2988 2.81 3.24 2.55 85 T_XMDrugObfuBody_00 2923 1.66 3.17 0.78 86 XM_OfRef6 2825 1.66 3.06 0.85 87 XMNumbers 2617 3.37 2.84 3.67 88 RELAYCOUNTRY_AU 2582 1.40 2.80 0.59 89 RCVD_IN_MSPIKE_WL 2581 4.41 2.80 5.34 90 RCVD_IN_MSPIKE_H3 2581 4.41 2.80 5.34 91 T_REMOTE_IMAGE 2570 3.44 2.79 3.83 92 RCVD_IN_VALIDITY_CERTIFIED 2492 4.45 2.70 5.46 93 TR_XM_SpammyWords5 2439 1.77 2.65 1.26 94 XM_SPF_SoftFail 2347 1.74 2.55 1.27 95 XMBody_17 2307 1.21 2.50 0.46 96 XMBody_78 2214 1.02 2.40 0.21 97 T_XMDrugObfuBody_08 2204 1.90 2.39 1.62 98 XMDiploma_00 2171 1.55 2.35 1.08 99 FROM_EXCESS_BASE64 2135 2.25 2.32 2.21 100 USER_IN_DEF_DKIM_WL 2126 13.18 2.31 19.49 101 XM_URI_RBL 2056 1.19 2.23 0.59 102 XM_B_COPY_HTML 1988 1.79 2.16 1.58 103 NO_DNS_FOR_FROM 1982 1.10 2.15 0.50 104 TR_XM_MaxWHORU 1973 1.04 2.14 0.40 105 DKIM_ADSP_NXDOMAIN 1969 1.09 2.14 0.49 106 T_TooManySym_01 1959 5.93 2.12 8.14 107 TM2_M_URI_OPT_OUT 1925 2.13 2.09 2.15 108 XM_B_URI_Unicode 1840 1.97 2.00 1.95 109 SpammyFromTLD_02 1739 0.81 1.89 0.19 110 XMBrknScrpt_02 1704 1.38 1.85 1.11 111 TR_XM_PHPDW 1662 0.80 1.80 0.22 112 TR_XM_NoHeaderRelay 1651 0.80 1.79 0.22 113 TR_XM_PHPForged 1636 0.78 1.77 0.21 114 XM_DK_Undo_01 1629 1.81 1.77 1.83 115 TR_XM_FormFill2 1607 0.78 1.74 0.22 116 XM_B_SpammyWords4 1582 1.27 1.72 1.00 117 XM_H_PHPOS 1579 0.76 1.71 0.20 118 SpammyFromTLD_01 1556 0.86 1.69 0.38 119 MAILING_LIST_MULTI 1552 2.39 1.68 2.80 120 SUBJ_ALL_CAPS 1534 1.10 1.66 0.78 121 SHOPIFY_IMG_NOT_RCVD_SFY 1528 0.79 1.66 0.29 122 URI_TRUNCATED 1474 0.62 1.60 0.04 123 XM_B_Unsub2 1460 1.46 1.58 1.38 124 ALL_TRUSTED 1451 10.95 1.57 16.39 125 RELAYCOUNTRY_UA 1442 0.58 1.56 0.00 126 XMSubGiftCard1 1424 0.58 1.54 0.02 127 TR_XM_INV_DKIM 1412 0.63 1.53 0.11 128 URI_HEX 1410 1.22 1.53 1.05 129 XMPhish30 1369 1.16 1.48 0.97 130 MIME_QP_LONG_LINE 1362 2.63 1.48 3.29 131 BAYES_40 1334 3.31 1.45 4.40 132 T_STY_INVIS_DIRECT 1324 0.71 1.44 0.29 133 XMReplyNow 1319 0.69 1.43 0.26 134 XM_ProductURIs 1282 0.88 1.39 0.58 135 T_FILL_THIS_FORM_SHORT 1252 1.08 1.36 0.92 136 THIS_AD 1217 0.79 1.32 0.48 137 XMSubMetaI_00 1210 1.02 1.31 0.85 138 XM_B_REG_HTML 1207 0.64 1.31 0.25 139 DIET_1 1183 0.79 1.28 0.51 140 HTML_TAG_BALANCE_BODY 1166 1.04 1.26 0.91 141 XMBdyGiftCard01 1136 1.35 1.23 1.42 142 URI_TRY_3LD 1126 0.89 1.22 0.69 143 AC_BR_BONANZA 1111 0.56 1.20 0.19 144 LongTLD 1103 0.61 1.20 0.26 145 KHOP_HELO_FCRDNS 1093 1.07 1.19 1.00 146 BAYES_20 1091 2.46 1.18 3.19 147 RDNS_DYNAMIC 1086 0.68 1.18 0.40 148 PDS_RDNS_DYNAMIC_FP 1074 0.49 1.16 0.10 149 XMClaimOffer 1063 0.71 1.15 0.45 150 HTTPS_HTTP_MISMATCH 1054 1.06 1.14 1.01 151 TVD_RCVD_IP 1046 1.02 1.13 0.95 152 HTML_MIME_NO_HTML_TAG 1028 1.67 1.11 1.99 153 XMPhish14 997 0.70 1.08 0.48 154 XM_UB60 968 0.42 1.05 0.05 155 XM_B_Phish66 950 0.65 1.03 0.43 156 XM_H_Long_From02 925 1.05 1.00 1.07 157 MPART_ALT_DIFF_COUNT 923 0.68 1.00 0.49 158 HELO_DYNAMIC_SPLIT_IP 921 0.37 1.00 0.01 159 XMSexyCombo_01 912 0.56 0.99 0.31 160 TooManyTo_002 902 1.64 0.98 2.02 161 XM_SendGrid 855 1.12 0.93 1.23 162 XM_DIRTYINTL 847 0.39 0.92 0.08 163 TooManyTo_003 843 1.04 0.91 1.11 164 TM2_M_OBFU_COMMENT 842 0.76 0.91 0.66 165 ANY_BOUNCE_MESSAGE 840 2.85 0.91 3.97 166 BOUNCE_MESSAGE 826 2.84 0.90 3.97 167 XMSlimDrugH 825 0.77 0.89 0.69 168 BOTNET_NORDNS 806 0.32 0.87 0.01 169 TooManyTo_004 802 0.88 0.87 0.88 170 XMGenDplmaNmb 801 0.65 0.87 0.53 171 XM_UB99 783 0.31 0.85 0.00 172 XM_HighProb1 768 0.31 0.83 0.01 173 TooManyTo_005 767 0.78 0.83 0.76 174 TR_XM_Base64_M1 761 1.04 0.83 1.17 175 XM_H_PHPMailer 760 0.77 0.82 0.74 176 TR_Mismatch_TLD_01 757 0.51 0.82 0.33 177 DKIM_ADSP_CUSTOM_MED 756 1.08 0.82 1.23 178 HOSTED_IMG_MULTI_PUB_01 752 0.32 0.82 0.03 179 TR_Symld_Words 741 0.95 0.80 1.03 180 AC_HTML_NONSENSE_TAGS 740 0.34 0.80 0.07 181 MIME_CHARSET_FARAWAY 738 0.58 0.80 0.45 182 TR_XM_InvalidRelay 726 0.30 0.79 0.02 183 XM_H_Undi_Recip 721 0.38 0.78 0.14 184 TR_MetaPhish_Combo_01 718 0.65 0.78 0.57 185 TR_LOTS_OF_MONEY3 710 0.41 0.77 0.20 186 XMPhish08 703 0.55 0.76 0.43 187 URIBL_BLACK 703 0.31 0.76 0.04 188 T_MONEY_PERCENT 693 0.36 0.75 0.13 189 TR_LOTS_OF_MONEY2 693 0.36 0.75 0.13 190 URI_NOVOWEL 680 0.91 0.74 1.00 191 RCVD_IN_PSBL 673 0.41 0.73 0.22 192 TR_XM_RelayPhish 665 0.30 0.72 0.05 193 TM2_M_A_HREF_HREF 662 0.36 0.72 0.16 194 HTML_FONT_FACE_BAD 656 0.56 0.71 0.47 195 BAYES_00 649 6.71 0.70 10.19 196 RELAYCOUNTRY_FR 648 0.38 0.70 0.19 197 RCVD_IN_XBL 647 0.27 0.70 0.02 198 XM_H_TOP 636 0.26 0.69 0.01 199 RCVD_IN_PBL 632 0.66 0.69 0.64 200 NML_ADSP_CUSTOM_MED 632 0.84 0.69 0.93 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 131082 87.52 96.08 82.55 2 RELAYCOUNTRY_US 126553 81.55 84.74 79.70 3 DKIM_SIGNED 122674 81.78 89.57 77.26 4 XM_DK_Pass 121082 79.98 86.40 76.25 5 DKIM_VALID 120013 79.18 85.38 75.58 6 XM_B_Unicode 113268 75.77 83.41 71.33 7 DKIM_VALID_AU 103688 66.98 69.88 65.30 8 BAYES_50 95476 52.16 38.43 60.13 9 XMListUnsubscribeExists 84703 61.52 75.60 53.34 10 DCC_CHECK 79766 60.82 79.04 50.23 11 DCC_CHECK_NEGATIVE 78974 39.02 20.55 49.74 12 XM_B_SpammyWords 75175 56.16 71.34 47.34 13 XM_B_Unicode3 74990 48.90 51.77 47.23 14 RCVD_IN_MSPIKE_H2 56699 36.86 38.86 35.71 15 LOC_TINY_FONT_1 50503 40.23 54.73 31.81 16 HTML_FONT_LOW_CONTRAST 50170 34.97 40.78 31.60 17 DKIM_VALID_EF 44763 27.10 25.23 28.19 18 XMSubLong 43005 25.67 23.23 27.08 19 FVGT_m_MULTI_ODD 41668 28.64 32.78 26.24 20 MIME_HTML_ONLY 34869 23.03 24.86 21.96 21 XM_B_SpammyWords2 34582 28.95 41.29 21.78 22 T_TM2_M_HEADER_IN_MSG 34434 20.45 18.33 21.69 23 USER_IN_DEF_DKIM_WL 30945 13.18 2.31 19.49 24 T_KAM_HTML_FONT_INVALID 30676 23.71 31.28 19.32 25 ALL_TRUSTED 26028 10.95 1.57 16.39 26 XM_Multi_Part_URI 24873 19.52 26.15 15.66 27 TR_XM_DK_Unsub 20521 14.98 18.53 12.92 28 UNPARSEABLE_RELAY 18533 13.40 16.38 11.67 29 XM_Evil_Numbers_Gen 18408 10.09 7.51 11.59 30 BAYES_60 16779 10.19 9.54 10.57 31 XM_DKIMWhitelistDomains 16534 6.65 0.16 10.41 32 BAYES_00 16188 6.71 0.70 10.19 33 FSL_BULK_SIG 16072 8.65 6.12 10.12 34 XM_B_Unsub 14647 10.89 13.76 9.22 35 TR_XM_DK_Bayes 13295 5.51 0.59 8.37 36 TR_XM_DK_Bayes1 13208 5.48 0.58 8.32 37 T_TooManySym_01 12924 5.93 2.12 8.14 38 TR_XM_DK_Bayes2 11832 4.89 0.47 7.45 39 LotsOfNums_01 11737 7.42 7.47 7.39 40 RCVD_IN_VALIDITY_SAFE 11591 5.83 3.29 7.30 41 TR_XM_BayesUnsub 11214 9.34 13.26 7.06 42 HTML_IMAGE_RATIO_02 10054 6.79 7.57 6.33 43 TooManyTo_001 9901 5.46 4.12 6.24 44 XMStrtUSub 9839 5.59 4.54 6.20 45 XM_H_GMP 9778 6.02 5.78 6.16 46 TR_MAX_INTL_RELAY 9555 9.39 15.20 6.02 47 XM_B_SpammyWords3 9296 9.35 15.37 5.85 48 XM_B_PhoneNumber 9257 5.14 3.96 5.83 49 IN_ZIMBRA_NJ_WHITELIST 9046 3.62 0.05 5.70 50 XM_H_Long_From01 9034 5.56 5.34 5.69 51 LOTS_OF_MONEY 9011 6.68 8.41 5.67 52 RCVD_IN_VALIDITY_CERTIFIED 8668 4.45 2.70 5.46 53 XM_DK_Undo_02 8602 19.25 43.06 5.42 54 XM_UncommonTLD01 8512 6.08 7.32 5.36 55 RCVD_IN_MSPIKE_H3 8486 4.41 2.80 5.34 56 RCVD_IN_MSPIKE_WL 8486 4.41 2.80 5.34 57 XMSubMetaSx_00 8205 5.48 6.01 5.17 58 HTML_IMAGE_RATIO_04 7970 4.42 3.38 5.02 59 T_TooManySym_02 7631 3.22 0.49 4.81 60 XM_B_Phish_Phrases 7481 5.31 6.34 4.71 61 MPART_ALT_DIFF 7069 4.99 5.91 4.45 62 BAYES_40 6984 3.31 1.45 4.40 63 TR_XM_SpammyWords4 6751 5.46 7.53 4.25 64 INVALID_MSGID 6634 2.76 0.31 4.18 65 HTML_IMAGE_RATIO_06 6623 4.33 4.60 4.17 66 RELAYCOUNTRY_META 6472 8.15 15.18 4.08 67 BOUNCE_MESSAGE 6304 2.84 0.90 3.97 68 ANY_BOUNCE_MESSAGE 6304 2.85 0.91 3.97 69 TO_MALFORMED 6276 2.60 0.28 3.95 70 XM_Body_Dirty_Words 6130 6.85 12.00 3.86 71 T_REMOTE_IMAGE 6076 3.44 2.79 3.83 72 BAYES_99 5961 14.42 32.80 3.75 73 BOTNET_IPINHOSTNAME 5837 5.88 9.67 3.68 74 XMNumbers 5830 3.37 2.84 3.67 75 BAYES_80 5719 5.75 9.44 3.60 76 MIME_QP_LONG_LINE 5232 2.63 1.48 3.29 77 BAYES_20 5072 2.46 1.18 3.19 78 BAYES_999 4619 11.28 25.71 2.91 79 XM_CamelCaseFrm001 4446 3.33 4.24 2.80 80 MAILING_LIST_MULTI 4442 2.39 1.68 2.80 81 XMStockSpam_06 4334 2.98 3.40 2.73 82 MIME_HTML_MOSTLY 4160 3.00 3.65 2.62 83 MIME_HTML_ONLY_MULTI 4053 2.81 3.24 2.55 84 XMSexyCombo_05 4047 3.30 4.59 2.55 85 BAYES_95 3835 3.52 5.42 2.42 86 TR_XM_PhishingBody 3789 3.17 4.52 2.39 87 TR_XM_DKIM_Undo 3761 12.54 30.05 2.37 88 XM_PDF 3688 1.71 0.65 2.32 89 RCVD_IN_IADB_LISTED 3653 1.70 0.67 2.30 90 XM_B_SpammyTLD 3572 3.11 4.60 2.25 91 HTML_IMAGE_RATIO_08 3535 2.83 3.86 2.23 92 FROM_EXCESS_BASE64 3504 2.25 2.32 2.21 93 TM2_M_URI_OPT_OUT 3415 2.13 2.09 2.15 94 RCVD_IN_IADB_SPF 3315 1.53 0.56 2.09 95 TM2_M_VERY_LONG_WORD 3286 2.50 3.25 2.07 96 TooManyTo_002 3203 1.64 0.98 2.02 97 TVD_SPACE_RATIO 3178 1.32 0.15 2.00 98 HTML_MIME_NO_HTML_TAG 3161 1.67 1.11 1.99 99 TR_XM_SpammyRelay 3114 5.32 11.11 1.96 100 XM_B_URI_Unicode 3102 1.97 2.00 1.95 101 IN_HORDE_ADDRESS_BOOK 3027 1.24 0.08 1.91 102 RCVD_IN_IADB_SENDERID 3007 1.39 0.51 1.89 103 RCVD_IN_IADB_DK 2945 1.36 0.50 1.85 104 XM_DK_Undo_01 2902 1.81 1.77 1.83 105 T_XMDrugObfuBody_14 2854 3.03 5.14 1.80 106 RELAYCOUNTRY_CA 2805 3.09 5.38 1.77 107 BAYES_05 2771 1.34 0.65 1.75 108 UNTRUSTED_Relay 2720 3.45 6.45 1.71 109 XMGappySubj_01 2699 1.14 0.17 1.70 110 DKIM_INVALID 2661 2.60 4.19 1.68 111 T_TooManySym_03 2645 1.09 0.10 1.67 112 T_XMDrugObfuBody_08 2572 1.90 2.39 1.62 113 XM_B_COPY_HTML 2511 1.79 2.16 1.58 114 TR_XM_UnparsRelay 2387 4.04 8.41 1.50 115 RCVD_IN_IADB_VOUCHED 2321 1.07 0.40 1.46 116 XMBdyGiftCard01 2261 1.35 1.23 1.42 117 BOTNET 2243 3.67 7.56 1.41 118 TR_DCC_Bayes_99 2218 10.05 24.95 1.40 119 XM_B_Unsub2 2192 1.46 1.58 1.38 120 XMGappySubj_02 2133 0.86 0.02 1.34 121 XM_B_Investor 2127 2.54 4.60 1.34 122 XM_GoogleGroups 2016 1.05 0.67 1.27 123 XM_SPF_SoftFail 2011 1.74 2.55 1.27 124 TR_XM_SpammyWords5 1994 1.77 2.65 1.26 125 DKIM_ADSP_CUSTOM_MED 1960 1.08 0.82 1.23 126 XM_SendGrid 1950 1.12 0.93 1.23 127 TR_XM_Base64_M1 1859 1.04 0.83 1.17 128 RCVD_IN_BL_SPAMCOP_NET 1845 5.30 12.42 1.16 129 XMBrknScrpt_02 1758 1.38 1.85 1.11 130 TooManyTo_003 1758 1.04 0.91 1.11 131 RCVD_IN_IADB_OPTIN 1717 0.77 0.23 1.08 132 XMDiploma_00 1709 1.55 2.35 1.08 133 XMNoVowels 1705 0.83 0.40 1.07 134 XM_H_Long_From02 1704 1.05 1.00 1.07 135 URI_HEX 1662 1.22 1.53 1.05 136 TR_Symld_Words 1638 0.95 0.80 1.03 137 HTTPS_HTTP_MISMATCH 1607 1.06 1.14 1.01 138 XM_B_SpammyWords4 1595 1.27 1.72 1.00 139 URI_NOVOWEL 1595 0.91 0.74 1.00 140 KHOP_HELO_FCRDNS 1583 1.07 1.19 1.00 141 XMPhish30 1542 1.16 1.48 0.97 142 XMLngstWrd_00 1531 0.75 0.38 0.96 143 TVD_RCVD_IP 1505 1.02 1.13 0.95 144 NML_ADSP_CUSTOM_MED 1484 0.84 0.69 0.93 145 T_FILL_THIS_FORM_SHORT 1456 1.08 1.36 0.92 146 HTML_TAG_BALANCE_BODY 1443 1.04 1.26 0.91 147 TR_XM_DK_SendGrid 1436 0.82 0.68 0.90 148 XM_B_SEO 1401 0.80 0.65 0.88 149 T_TVD_MIME_NO_HEADERS 1396 0.58 0.06 0.88 150 TooManyTo_004 1395 0.88 0.87 0.88 151 FORGED_GMAIL_RCVD 1382 0.77 0.61 0.87 152 XM_OfRef6 1344 1.66 3.06 0.85 153 XMSubMetaI_00 1343 1.02 1.31 0.85 154 XM_UB50 1340 1.80 3.45 0.84 155 XMBody_95 1278 0.55 0.11 0.80 156 TR_XM_SPAMCOP 1245 4.45 10.77 0.78 157 SUBJ_ALL_CAPS 1235 1.10 1.66 0.78 158 T_XMDrugObfuBody_00 1231 1.66 3.17 0.78 159 TooManyTo_005 1201 0.78 0.83 0.76 160 XM_H_PHPMailer 1169 0.77 0.82 0.74 161 TR_XM_SEO4 1130 0.66 0.58 0.71 162 T_TooManySym_04 1105 0.45 0.02 0.70 163 URI_TRY_3LD 1101 0.89 1.22 0.69 164 XM_B_DNDMA 1098 0.63 0.52 0.69 165 XMSlimDrugH 1096 0.77 0.89 0.69 166 MSGID_FROM_MTA_HEADER 1092 0.48 0.12 0.69 167 TM2_M_OBFU_COMMENT 1055 0.76 0.91 0.66 168 T_XMHurry_00 1038 2.02 4.38 0.65 169 RCVD_IN_PBL 1014 0.66 0.69 0.64 170 XMBSHREFv2 958 0.55 0.47 0.60 171 XM_URI_RBL 931 1.19 2.23 0.59 172 XMMoneyMeta_00 931 0.50 0.35 0.59 173 RELAYCOUNTRY_AU 930 1.40 2.80 0.59 174 XM_ProductURIs 922 0.88 1.39 0.58 175 AD_PREFS 917 0.39 0.06 0.58 176 TR_MetaPhish_Combo_01 905 0.65 0.78 0.57 177 XMLngstWrd_01 904 0.46 0.28 0.57 178 SUBJ_YOUR_FAMILY 902 0.49 0.36 0.57 179 XMSubMetaSxObfu_02 879 0.49 0.39 0.55 180 XMGenDplmaNmb 834 0.65 0.87 0.53 181 DIET_1 807 0.79 1.28 0.51 182 XMCapTrack 789 0.55 0.63 0.50 183 NO_DNS_FOR_FROM 787 1.10 2.15 0.50 184 MPART_ALT_DIFF_COUNT 779 0.68 1.00 0.49 185 DKIM_ADSP_NXDOMAIN 777 1.09 2.14 0.49 186 XMPhish14 769 0.70 1.08 0.48 187 THIS_AD 767 0.79 1.32 0.48 188 XM_S_SubURI 765 0.32 0.05 0.48 189 HTML_FONT_FACE_BAD 747 0.56 0.71 0.47 190 XMBody_17 731 1.21 2.50 0.46 191 XMClaimOffer 718 0.71 1.15 0.45 192 TR_XM_SpammyWords2 716 5.11 13.12 0.45 193 MIME_CHARSET_FARAWAY 712 0.58 0.80 0.45 194 XM_B_FormFill 707 0.29 0.01 0.45 195 XMLngstWrd_02 692 0.36 0.24 0.44 196 XMPhish08 686 0.55 0.76 0.43 197 XM_B_Phish66 679 0.65 1.03 0.43 198 TR_XM_MaxWHORU 639 1.04 2.14 0.40 199 RDNS_DYNAMIC 630 0.68 1.18 0.40 200 HTML_EXTRA_CLOSE 628 0.27 0.05 0.40 ----------------------------------------------------------------------