Email: 256154 Autolearn: 0 AvgScore: 5.44 AvgScanTime: 1.46 sec Spam: 91098 Autolearn: 0 AvgScore: 14.15 AvgScanTime: 1.60 sec Ham: 165056 Autolearn: 0 AvgScore: 0.63 AvgScanTime: 1.38 sec Time Spent Running SA: 103.85 hours Time Spent Processing Spam: 40.38 hours Time Spent Processing Ham: 63.47 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85883 86.01 94.28 81.45 2 DKIM_SIGNED 80724 78.75 88.61 73.31 3 RELAYCOUNTRY_US 77312 80.64 84.87 78.30 4 XM_DK_Pass 76164 76.24 83.61 72.18 5 XM_B_Unicode 75691 73.18 83.09 67.71 6 DKIM_VALID 75415 75.54 82.78 71.53 7 DCC_CHECK 72263 58.67 79.32 47.26 8 XMListUnsubscribeExists 66713 58.53 73.23 50.42 9 XM_B_SpammyWords 63368 53.34 69.56 44.38 10 DKIM_VALID_AU 62182 63.51 68.26 60.89 11 LOC_TINY_FONT_1 47162 37.32 51.77 29.35 12 XM_B_Unicode3 46422 46.12 50.96 43.45 13 XM_DK_Undo_02 38504 18.33 42.27 5.12 14 RCVD_IN_MSPIKE_H2 37529 37.43 41.20 35.36 15 XM_B_SpammyWords2 35656 27.01 39.14 20.31 16 HTML_FONT_LOW_CONTRAST 35409 32.28 38.87 28.65 17 BAYES_99 32045 15.01 35.18 3.88 18 BAYES_50 31971 50.39 35.10 58.84 19 T_KAM_HTML_FONT_INVALID 28828 23.10 31.65 18.38 20 FVGT_m_MULTI_ODD 28382 26.45 31.16 23.85 21 TR_XM_DKIM_Undo 27395 12.10 30.07 2.17 22 TR_DCC_Bayes_99 25127 10.83 27.58 1.58 23 BAYES_999 24837 11.58 27.26 2.93 24 MIME_HTML_ONLY 24500 24.73 26.89 23.53 25 DKIM_VALID_EF 23933 27.78 26.27 28.61 26 XM_Multi_Part_URI 21097 18.28 23.16 15.59 27 XMSubLong 19302 21.77 21.19 22.10 28 DCC_CHECK_NEGATIVE 18361 41.13 20.16 52.70 29 TR_XM_DK_Unsub 17997 15.65 19.76 13.39 30 T_TM2_M_HEADER_IN_MSG 17276 21.86 18.96 23.46 31 TR_MAX_INTL_RELAY 15846 9.99 17.39 5.90 32 UNPARSEABLE_RELAY 15066 13.78 16.54 12.26 33 RELAYCOUNTRY_META 13674 7.97 15.01 4.09 34 TR_XM_SpammyWords2 12768 5.32 14.02 0.52 35 XM_B_Unsub 12540 12.51 13.77 11.81 36 TR_XM_BayesUnsub 12224 9.96 13.42 8.05 37 XM_B_SpammyWords3 11790 7.88 12.94 5.08 38 BOTNET 10310 4.95 11.32 1.43 39 BAYES_80 9196 5.88 10.09 3.55 40 BOTNET_IPINHOSTNAME 9077 5.78 9.96 3.48 41 TR_XM_SpammyRelay 8971 4.85 9.85 2.10 42 XM_Body_Dirty_Words 8864 5.01 9.73 2.40 43 TR_XM_UnparsRelay 8715 4.43 9.57 1.59 44 BAYES_60 8421 10.05 9.24 10.50 45 FSL_BULK_SIG 8307 9.29 9.12 9.38 46 LOTS_OF_MONEY 8099 6.39 8.89 5.00 47 RCVD_IN_BL_SPAMCOP_NET 7828 3.42 8.59 0.57 48 TR_XM_SpammyWords4 7262 5.09 7.97 3.50 49 XM_Evil_Numbers_Gen 7143 8.82 7.84 9.37 50 LotsOfNums_01 7086 6.98 7.78 6.54 51 HTML_IMAGE_RATIO_02 6659 6.55 7.31 6.13 52 XM_H_Long_From01 6562 6.30 7.20 5.80 53 TR_XM_SPAMCOP 6555 2.80 7.20 0.38 54 RCVD_IN_VALIDITY_RPBL 6421 2.64 7.05 0.21 55 XM_UncommonTLD01 6256 6.01 6.87 5.53 56 UNTRUSTED_Relay 6180 3.68 6.78 1.96 57 XMSubMetaSx_00 5823 5.33 6.39 4.74 58 BAYES_95 5815 3.78 6.38 2.35 59 MPART_ALT_DIFF 5659 5.23 6.21 4.68 60 XM_H_GMP 5370 5.99 5.89 6.04 61 DKIM_INVALID 5309 3.22 5.83 1.78 62 XM_B_Phish_Phrases 5254 5.65 5.77 5.59 63 XMSexyCombo_05 4719 3.03 5.18 1.84 64 RELAYCOUNTRY_CA 4588 2.81 5.04 1.58 65 T_XMDrugObfuBody_14 4471 3.09 4.91 2.08 66 NO_DNS_FOR_FROM 4292 2.08 4.71 0.62 67 TR_XM_PhishingBody 4136 2.68 4.54 1.65 68 TR_XM_MaxWHORU 4119 1.92 4.52 0.48 69 XM_B_Investor 3929 2.36 4.31 1.28 70 XMStrtUSub 3891 5.76 4.27 6.58 71 HTML_IMAGE_RATIO_04 3798 3.79 4.17 3.58 72 XM_B_PhoneNumber 3728 6.60 4.09 7.98 73 BOTNET_NORDNS 3713 1.58 4.08 0.20 74 TooManyTo_001 3702 6.95 4.06 8.54 75 XM_CamelCaseFrm001 3502 2.81 3.84 2.24 76 MIME_HTML_MOSTLY 3405 2.81 3.74 2.30 77 HTML_IMAGE_RATIO_06 3301 3.83 3.62 3.94 78 TM2_M_VERY_LONG_WORD 3251 2.29 3.57 1.59 79 XM_SPF_SoftFail 3155 2.04 3.46 1.25 80 XM_B_SpammyTLD 3123 2.30 3.43 1.68 81 RCVD_IN_VALIDITY_SAFE 3097 4.94 3.40 5.79 82 MIME_HTML_ONLY_MULTI 2923 2.84 3.21 2.63 83 DKIM_ADSP_NXDOMAIN 2846 1.41 3.12 0.47 84 XM_UB50 2798 1.75 3.07 1.02 85 T_XMHurry_00 2746 1.53 3.01 0.71 86 XM_OfRef6 2634 1.66 2.89 0.97 87 HTML_IMAGE_RATIO_08 2580 2.06 2.83 1.63 88 TR_XM_SpammyWords5 2457 1.78 2.70 1.28 89 XM_URI_RBL 2443 1.34 2.68 0.60 90 T_XMDrugObfuBody_08 2434 1.72 2.67 1.20 91 RCVD_IN_VALIDITY_CERTIFIED 2425 3.60 2.66 4.12 92 XMNumbers 2425 3.61 2.66 4.13 93 RCVD_IN_MSPIKE_H3 2425 4.08 2.66 4.86 94 RCVD_IN_MSPIKE_WL 2425 4.08 2.66 4.86 95 RELAYCOUNTRY_AU 2378 1.31 2.61 0.59 96 USER_IN_DEF_DKIM_WL 2280 11.72 2.50 16.80 97 FROM_EXCESS_BASE64 2187 2.37 2.40 2.36 98 XM_B_SpammyWords4 2160 1.41 2.37 0.88 99 T_XMDrugObfuBody_00 2145 1.38 2.35 0.83 100 T_FILL_THIS_FORM_SHORT 2130 1.16 2.34 0.51 101 TM2_M_URI_OPT_OUT 2114 2.19 2.32 2.12 102 SpammyFromTLD_02 2071 0.99 2.27 0.28 103 SUSP_UTF8_WORD_SUBJ 2030 0.83 2.23 0.05 104 XM_B_COPY_HTML 1971 1.54 2.16 1.20 105 TR_XM_PHPForged 1959 0.89 2.15 0.20 106 TR_XM_PHPDW 1951 0.89 2.14 0.20 107 T_TooManySym_01 1949 5.79 2.14 7.80 108 XMStockSpam_06 1941 1.85 2.13 1.70 109 TR_XM_FormFill2 1915 0.88 2.10 0.20 110 XM_DK_Undo_01 1911 1.62 2.10 1.36 111 XM_H_PHPOS 1883 0.85 2.07 0.18 112 DIET_1 1869 1.07 2.05 0.53 113 MAILING_LIST_MULTI 1840 2.34 2.02 2.52 114 TR_XM_NoHeaderRelay 1832 0.91 2.01 0.30 115 SUSP_UTF8_WORD_COMBO 1829 0.74 2.01 0.05 116 T_REMOTE_IMAGE 1801 2.78 1.98 3.22 117 XMDiploma_00 1730 1.34 1.90 1.03 118 SUBJ_ALL_CAPS 1676 1.20 1.84 0.85 119 XMBody_17 1644 0.95 1.80 0.48 120 XMPhish30 1624 1.10 1.78 0.72 121 MIME_QP_LONG_LINE 1598 2.64 1.75 3.13 122 TR_XM_INV_DKIM 1592 0.67 1.75 0.07 123 SpammyFromTLD_01 1532 1.08 1.68 0.74 124 XM_B_URI_Unicode 1517 1.53 1.67 1.45 125 XMBrknScrpt_02 1503 1.32 1.65 1.14 126 XMReplyNow 1497 0.74 1.64 0.24 127 HTML_MIME_NO_HTML_TAG 1437 1.86 1.58 2.02 128 XM_B_Unsub2 1405 1.25 1.54 1.09 129 MIME_CHARSET_FARAWAY 1400 0.86 1.54 0.49 130 XM_B_REG_HTML 1392 0.75 1.53 0.32 131 HOSTED_IMG_MULTI_PUB_01 1389 0.56 1.52 0.03 132 XM_UB99 1367 0.54 1.50 0.00 133 HTTPS_HTTP_MISMATCH 1364 1.10 1.50 0.88 134 TR_XM_InvalidRelay 1361 0.54 1.49 0.02 135 SHOPIFY_IMG_NOT_RCVD_SFY 1359 0.76 1.49 0.36 136 ALL_TRUSTED 1358 11.94 1.49 17.71 137 URI_HEX 1348 1.17 1.48 0.99 138 RCVD_IN_XBL 1347 0.53 1.48 0.01 139 T_STY_INVIS_DIRECT 1329 0.92 1.46 0.62 140 DKIM_ADSP_CUSTOM_MED 1328 1.10 1.46 0.91 141 URI_TRY_3LD 1249 0.84 1.37 0.55 142 TR_Mismatch_TLD_02 1206 0.51 1.32 0.06 143 THIS_AD 1204 0.83 1.32 0.55 144 LongTLD 1202 0.68 1.32 0.33 145 NML_ADSP_CUSTOM_MED 1160 0.83 1.27 0.59 146 TooManyTo_002 1111 3.24 1.22 4.35 147 HTML_TAG_BALANCE_BODY 1106 1.06 1.21 0.98 148 KHOP_HELO_FCRDNS 1098 1.08 1.21 1.01 149 BAYES_40 1093 3.25 1.20 4.38 150 XM_B_SEO 1088 0.63 1.19 0.31 151 TooManyTo_003 1055 1.11 1.16 1.09 152 XM_UB999 1049 0.41 1.15 0.00 153 TR_LOTS_OF_MONEY2 1048 0.52 1.15 0.17 154 T_MONEY_PERCENT 1048 0.52 1.15 0.17 155 TR_Mismatch_TLD_01 1044 0.58 1.15 0.27 156 TooManyTo_004 1024 0.95 1.12 0.85 157 XMPhish14 1016 0.65 1.12 0.40 158 TooManyTo_005 1002 0.86 1.10 0.72 159 TM2_M_OBFU_COMMENT 977 0.86 1.07 0.75 160 TR_XM_Base64_M1 974 1.04 1.07 1.02 161 FORGED_GMAIL_RCVD 959 0.71 1.05 0.52 162 RCVD_IN_PSBL 953 0.75 1.05 0.58 163 URI_NOVOWEL 953 1.23 1.05 1.33 164 XMBody_78 942 0.58 1.03 0.32 165 XM_SendGrid 941 1.18 1.03 1.26 166 XMBdyGiftCard01 931 0.98 1.02 0.95 167 RCVD_IN_PBL 917 0.80 1.01 0.69 168 XMSlimDrugH 911 0.82 1.00 0.72 169 RDNS_DYNAMIC 904 0.56 0.99 0.32 170 XMGenDplmaNmb 893 0.70 0.98 0.55 171 PDS_RDNS_DYNAMIC_FP 888 0.38 0.97 0.06 172 BAYES_20 887 2.36 0.97 3.12 173 FORGED_MUA_OUTLOOK 887 0.38 0.97 0.05 174 XM_ProductURIs 871 0.68 0.96 0.52 175 TR_MetaPhish_Combo_01 866 0.95 0.95 0.96 176 XM_H_Long_From02 864 1.06 0.95 1.13 177 DEAR_FRIEND 864 0.37 0.95 0.05 178 XM_UB60 857 0.40 0.94 0.10 179 TR_XM_FormFill 856 0.34 0.94 0.01 180 TR_XM_SEO4 840 0.44 0.92 0.17 181 XMSubMetaI_00 834 0.55 0.92 0.35 182 DATE_IN_PAST_12_24 833 0.44 0.91 0.18 183 FROM_SUSPICIOUS_NTLD 831 0.38 0.91 0.08 184 TVD_RCVD_IP 828 0.96 0.91 0.99 185 TR_LOTS_OF_MONEY3 828 0.52 0.91 0.31 186 XM_DIRTYINTL 825 0.42 0.91 0.15 187 FSL_NEW_HELO_USER 818 0.32 0.90 0.00 188 MPART_ALT_DIFF_COUNT 817 0.67 0.90 0.55 189 AXB_XMAILER_MIMEOLE_OL_024C2 803 0.31 0.88 0.00 190 XMHTML_After_End 797 0.50 0.87 0.30 191 TR_Symld_Words 796 1.21 0.87 1.40 192 XM_B_Phish66 776 0.46 0.85 0.24 193 XM_HighProb1 764 0.30 0.84 0.01 194 FROM_MISSP_REPLYTO 750 0.29 0.82 0.00 195 MISSING_HEADERS 750 0.50 0.82 0.32 196 RELAYCOUNTRY_FR 749 0.39 0.82 0.15 197 HELO_DYNAMIC_SPLIT_IP 742 0.29 0.81 0.01 198 TR_XM_DK_SendGrid 722 0.87 0.79 0.91 199 BAYES_00 717 7.72 0.79 11.55 200 XM_H_PHPMailer 705 0.71 0.77 0.67 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 134435 86.01 94.28 81.45 2 RELAYCOUNTRY_US 129242 80.64 84.87 78.30 3 DKIM_SIGNED 121009 78.75 88.61 73.31 4 XM_DK_Pass 119138 76.24 83.61 72.18 5 DKIM_VALID 118072 75.54 82.78 71.53 6 XM_B_Unicode 111760 73.18 83.09 67.71 7 DKIM_VALID_AU 100499 63.51 68.26 60.89 8 BAYES_50 97113 50.39 35.10 58.84 9 DCC_CHECK_NEGATIVE 86988 41.13 20.16 52.70 10 XMListUnsubscribeExists 83216 58.53 73.23 50.42 11 DCC_CHECK 78012 58.67 79.32 47.26 12 XM_B_SpammyWords 73252 53.34 69.56 44.38 13 XM_B_Unicode3 71720 46.12 50.96 43.45 14 RCVD_IN_MSPIKE_H2 58357 37.43 41.20 35.36 15 LOC_TINY_FONT_1 48443 37.32 51.77 29.35 16 HTML_FONT_LOW_CONTRAST 47290 32.28 38.87 28.65 17 DKIM_VALID_EF 47223 27.78 26.27 28.61 18 FVGT_m_MULTI_ODD 39372 26.45 31.16 23.85 19 MIME_HTML_ONLY 38835 24.73 26.89 23.53 20 T_TM2_M_HEADER_IN_MSG 38717 21.86 18.96 23.46 21 XMSubLong 36475 21.77 21.19 22.10 22 XM_B_SpammyWords2 33527 27.01 39.14 20.31 23 T_KAM_HTML_FONT_INVALID 30344 23.10 31.65 18.38 24 ALL_TRUSTED 29228 11.94 1.49 17.71 25 USER_IN_DEF_DKIM_WL 27731 11.72 2.50 16.80 26 XM_Multi_Part_URI 25739 18.28 23.16 15.59 27 TR_XM_DK_Unsub 22093 15.65 19.76 13.39 28 UNPARSEABLE_RELAY 20237 13.78 16.54 12.26 29 XM_B_Unsub 19498 12.51 13.77 11.81 30 BAYES_00 19065 7.72 0.79 11.55 31 BAYES_60 17327 10.05 9.24 10.50 32 FSL_BULK_SIG 15490 9.29 9.12 9.38 33 XM_Evil_Numbers_Gen 15460 8.82 7.84 9.37 34 XM_DKIMWhitelistDomains 14504 5.68 0.05 8.79 35 TooManyTo_001 14100 6.95 4.06 8.54 36 TR_XM_BayesUnsub 13290 9.96 13.42 8.05 37 XM_B_PhoneNumber 13179 6.60 4.09 7.98 38 T_TooManySym_01 12874 5.79 2.14 7.80 39 TR_XM_DK_Bayes 11791 4.83 0.64 7.14 40 TR_XM_DK_Bayes1 11678 4.79 0.64 7.08 41 XMStrtUSub 10868 5.76 4.27 6.58 42 LotsOfNums_01 10794 6.98 7.78 6.54 43 TR_XM_DK_Bayes2 10239 4.20 0.56 6.20 44 HTML_IMAGE_RATIO_02 10114 6.55 7.31 6.13 45 XM_H_GMP 9969 5.99 5.89 6.04 46 TR_MAX_INTL_RELAY 9731 9.99 17.39 5.90 47 XM_H_Long_From01 9580 6.30 7.20 5.80 48 RCVD_IN_VALIDITY_SAFE 9555 4.94 3.40 5.79 49 XM_B_Phish_Phrases 9231 5.65 5.77 5.59 50 XM_UncommonTLD01 9127 6.01 6.87 5.53 51 IN_ZIMBRA_NJ_WHITELIST 9088 3.57 0.07 5.51 52 XM_DK_Undo_02 8446 18.33 42.27 5.12 53 XM_B_SpammyWords3 8392 7.88 12.94 5.08 54 ANY_BOUNCE_MESSAGE 8359 3.50 0.68 5.06 55 BOUNCE_MESSAGE 8359 3.50 0.68 5.06 56 LOTS_OF_MONEY 8258 6.39 8.89 5.00 57 RCVD_IN_MSPIKE_H3 8029 4.08 2.66 4.86 58 RCVD_IN_MSPIKE_WL 8029 4.08 2.66 4.86 59 XMSubMetaSx_00 7827 5.33 6.39 4.74 60 MPART_ALT_DIFF 7729 5.23 6.21 4.68 61 T_TooManySym_02 7713 3.18 0.48 4.67 62 BAYES_40 7233 3.25 1.20 4.38 63 TooManyTo_002 7178 3.24 1.22 4.35 64 XMNumbers 6814 3.61 2.66 4.13 65 RCVD_IN_VALIDITY_CERTIFIED 6794 3.60 2.66 4.12 66 RELAYCOUNTRY_META 6746 7.97 15.01 4.09 67 INVALID_MSGID 6695 2.73 0.32 4.06 68 HTML_IMAGE_RATIO_06 6500 3.83 3.62 3.94 69 BAYES_99 6404 15.01 35.18 3.88 70 TO_MALFORMED 6173 2.41 0.00 3.74 71 HTML_IMAGE_RATIO_04 5911 3.79 4.17 3.58 72 BAYES_80 5855 5.88 10.09 3.55 73 TR_XM_SpammyWords4 5769 5.09 7.97 3.50 74 BOTNET_IPINHOSTNAME 5739 5.78 9.96 3.48 75 T_REMOTE_IMAGE 5321 2.78 1.98 3.22 76 MIME_QP_LONG_LINE 5171 2.64 1.75 3.13 77 BAYES_20 5154 2.36 0.97 3.12 78 BAYES_999 4838 11.58 27.26 2.93 79 XM_B_FormFill 4537 1.78 0.03 2.75 80 MIME_HTML_ONLY_MULTI 4347 2.84 3.21 2.63 81 XM_PDF 4232 1.90 0.68 2.56 82 MAILING_LIST_MULTI 4162 2.34 2.02 2.52 83 XM_Body_Dirty_Words 3957 5.01 9.73 2.40 84 FROM_EXCESS_BASE64 3896 2.37 2.40 2.36 85 BAYES_95 3875 3.78 6.38 2.35 86 RCVD_IN_IADB_LISTED 3814 1.70 0.59 2.31 87 MIME_HTML_MOSTLY 3797 2.81 3.74 2.30 88 XM_CamelCaseFrm001 3693 2.81 3.84 2.24 89 TR_XM_DKIM_Undo 3589 12.10 30.07 2.17 90 TM2_M_URI_OPT_OUT 3506 2.19 2.32 2.12 91 TR_XM_SpammyRelay 3462 4.85 9.85 2.10 92 T_XMDrugObfuBody_14 3441 3.09 4.91 2.08 93 RCVD_IN_IADB_SPF 3391 1.51 0.53 2.05 94 HTML_MIME_NO_HTML_TAG 3326 1.86 1.58 2.02 95 T_TooManySym_03 3266 1.31 0.11 1.98 96 UNTRUSTED_Relay 3235 3.68 6.78 1.96 97 IN_HORDE_ADDRESS_BOOK 3229 1.30 0.10 1.96 98 RCVD_IN_IADB_SENDERID 3104 1.39 0.49 1.88 99 XMGappySubj_01 3060 1.28 0.24 1.85 100 XMSexyCombo_05 3038 3.03 5.18 1.84 101 BAYES_05 3026 1.37 0.52 1.83 102 RCVD_IN_IADB_DK 3025 1.36 0.49 1.83 103 URI_OPTOUT_3LD 2981 1.21 0.14 1.81 104 DKIM_INVALID 2937 3.22 5.83 1.78 105 XMStockSpam_06 2809 1.85 2.13 1.70 106 XM_B_SpammyTLD 2769 2.30 3.43 1.68 107 TR_XM_PhishingBody 2717 2.68 4.54 1.65 108 HTML_IMAGE_RATIO_08 2686 2.06 2.83 1.63 109 TR_XM_UnparsRelay 2628 4.43 9.57 1.59 110 TM2_M_VERY_LONG_WORD 2619 2.29 3.57 1.59 111 TVD_SPACE_RATIO 2609 1.07 0.14 1.58 112 TR_DCC_Bayes_99 2608 10.83 27.58 1.58 113 RELAYCOUNTRY_CA 2604 2.81 5.04 1.58 114 XMGappySubj_02 2572 1.04 0.10 1.56 115 RCVD_IN_IADB_VOUCHED 2509 1.08 0.28 1.52 116 XM_B_URI_Unicode 2395 1.53 1.67 1.45 117 BOTNET 2357 4.95 11.32 1.43 118 TR_Symld_Words 2310 1.21 0.87 1.40 119 XM_DK_Undo_01 2248 1.62 2.10 1.36 120 URI_NOVOWEL 2194 1.23 1.05 1.33 121 XM_B_Investor 2115 2.36 4.31 1.28 122 TR_XM_SpammyWords5 2110 1.78 2.70 1.28 123 XM_SendGrid 2085 1.18 1.03 1.26 124 XM_SPF_SoftFail 2067 2.04 3.46 1.25 125 XM_B_COPY_HTML 1980 1.54 2.16 1.20 126 T_XMDrugObfuBody_08 1976 1.72 2.67 1.20 127 XM_GoogleGroups 1967 1.02 0.70 1.19 128 XMBrknScrpt_02 1880 1.32 1.65 1.14 129 XM_H_Long_From02 1859 1.06 0.95 1.13 130 RCVD_IN_IADB_OPTIN 1828 0.78 0.18 1.11 131 XM_B_Unsub2 1806 1.25 1.54 1.09 132 TooManyTo_003 1796 1.11 1.16 1.09 133 XMDiploma_00 1695 1.34 1.90 1.03 134 TR_XM_Base64_M1 1680 1.04 1.07 1.02 135 XM_UB50 1678 1.75 3.07 1.02 136 KHOP_HELO_FCRDNS 1669 1.08 1.21 1.01 137 URI_HEX 1642 1.17 1.48 0.99 138 XMBody_95 1634 0.70 0.18 0.99 139 TVD_RCVD_IP 1630 0.96 0.91 0.99 140 HTML_TAG_BALANCE_BODY 1621 1.06 1.21 0.98 141 XM_OfRef6 1606 1.66 2.89 0.97 142 TR_MetaPhish_Combo_01 1580 0.95 0.95 0.96 143 XMBdyGiftCard01 1569 0.98 1.02 0.95 144 DKIM_ADSP_CUSTOM_MED 1502 1.10 1.46 0.91 145 TR_XM_DK_SendGrid 1497 0.87 0.79 0.91 146 XM_B_SpammyWords4 1451 1.41 2.37 0.88 147 HTTPS_HTTP_MISMATCH 1446 1.10 1.50 0.88 148 TooManyTo_004 1400 0.95 1.12 0.85 149 SUBJ_ALL_CAPS 1400 1.20 1.84 0.85 150 T_XMDrugObfuBody_00 1378 1.38 2.35 0.83 151 T_TVD_MIME_NO_HEADERS 1340 0.56 0.11 0.81 152 FILL_THIS_FORM 1306 0.60 0.26 0.79 153 TM2_M_OBFU_COMMENT 1231 0.86 1.07 0.75 154 SpammyFromTLD_01 1226 1.08 1.68 0.74 155 MSGID_FROM_MTA_HEADER 1218 0.54 0.18 0.74 156 TooManyTo_005 1189 0.86 1.10 0.72 157 XMPhish30 1187 1.10 1.78 0.72 158 XMSlimDrugH 1182 0.82 1.00 0.72 159 T_XMHurry_00 1174 1.53 3.01 0.71 160 RCVD_IN_PBL 1143 0.80 1.01 0.69 161 XM_H_PHPMailer 1113 0.71 0.77 0.67 162 NO_DNS_FOR_FROM 1031 2.08 4.71 0.62 163 T_STY_INVIS_DIRECT 1027 0.92 1.46 0.62 164 XM_URI_RBL 998 1.34 2.68 0.60 165 FILL_THIS_FORM_LONG 981 0.45 0.18 0.59 166 XMBSHREFv2 980 0.48 0.27 0.59 167 RELAYCOUNTRY_AU 977 1.31 2.61 0.59 168 NML_ADSP_CUSTOM_MED 966 0.83 1.27 0.59 169 T_TooManySym_04 964 0.39 0.03 0.58 170 RCVD_IN_PSBL 963 0.75 1.05 0.58 171 RCVD_IN_BL_SPAMCOP_NET 939 3.42 8.59 0.57 172 XMLngstWrd_00 936 0.49 0.34 0.57 173 THIS_AD 912 0.83 1.32 0.55 174 MPART_ALT_DIFF_COUNT 910 0.67 0.90 0.55 175 XMNoVowels 907 0.53 0.49 0.55 176 URI_TRY_3LD 903 0.84 1.37 0.55 177 XMGenDplmaNmb 900 0.70 0.98 0.55 178 DIET_1 871 1.07 2.05 0.53 179 XM_ProductURIs 860 0.68 0.96 0.52 180 TR_XM_SpammyWords2 853 5.32 14.02 0.52 181 FORGED_GMAIL_RCVD 851 0.71 1.05 0.52 182 T_FILL_THIS_FORM_SHORT 841 1.16 2.34 0.51 183 XM_B_DNDMA 813 0.56 0.69 0.49 184 MIME_CHARSET_FARAWAY 805 0.86 1.54 0.49 185 TR_XM_MaxWHORU 798 1.92 4.52 0.48 186 XMBody_17 787 0.95 1.80 0.48 187 XM_S_SubURI 772 0.33 0.08 0.47 188 DKIM_ADSP_NXDOMAIN 769 1.41 3.12 0.47 189 XMCapTrack 750 0.44 0.43 0.45 190 HTML_FONT_FACE_BAD 727 0.54 0.73 0.44 191 XM_ShortIntro_01 684 0.49 0.62 0.41 192 HTML_IMAGE_ONLY_20 669 0.47 0.58 0.41 193 XMPhish14 657 0.65 1.12 0.40 194 PLING_QUERY 651 0.47 0.60 0.39 195 HTML_TAG_BALANCE_CENTER 646 0.31 0.16 0.39 196 TR_XM_SPAMCOP 626 2.80 7.20 0.38 197 HTML_EXTRA_CLOSE 622 0.25 0.02 0.38 198 XMSolicitRefs_0 611 0.38 0.40 0.37 199 RELAYCOUNTRY_DE 610 0.43 0.55 0.37 200 TO_NO_BRKTS_HTML_ONLY 593 0.33 0.26 0.36 ----------------------------------------------------------------------