Email: 255388 Autolearn: 0 AvgScore: 5.39 AvgScanTime: 1.40 sec Spam: 89490 Autolearn: 0 AvgScore: 14.10 AvgScanTime: 1.56 sec Ham: 165898 Autolearn: 0 AvgScore: 0.70 AvgScanTime: 1.32 sec Time Spent Running SA: 99.42 hours Time Spent Processing Spam: 38.76 hours Time Spent Processing Ham: 60.66 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85286 87.27 95.30 82.94 2 DKIM_SIGNED 81599 82.77 91.18 78.24 3 XM_DK_Pass 78133 80.86 87.31 77.38 4 DKIM_VALID 77660 80.36 86.78 76.89 5 XM_B_Unicode 76338 77.45 85.30 73.21 6 RELAYCOUNTRY_US 71479 80.91 79.87 81.47 7 DCC_CHECK 68392 54.20 76.42 42.21 8 XMListUnsubscribeExists 63337 59.45 70.78 53.34 9 XM_B_SpammyWords 63127 55.21 70.54 46.94 10 DKIM_VALID_AU 62211 68.06 69.52 67.28 11 LOC_TINY_FONT_1 45759 41.82 51.13 36.80 12 XM_B_Unicode3 44877 47.63 50.15 46.27 13 XM_DK_Undo_02 42348 20.34 47.32 5.79 14 XM_B_SpammyWords2 35600 28.17 39.78 21.91 15 TR_XM_DKIM_Undo 31555 13.77 35.26 2.18 16 HTML_FONT_LOW_CONTRAST 31475 32.95 35.17 31.76 17 BAYES_99 31353 15.20 35.04 4.50 18 BAYES_50 31004 51.45 34.65 60.51 19 FVGT_m_MULTI_ODD 30461 28.99 34.04 26.26 20 DKIM_VALID_EF 28415 31.90 31.75 31.99 21 T_KAM_HTML_FONT_INVALID 27030 25.49 30.20 22.94 22 MIME_HTML_ONLY 24578 23.39 27.46 21.19 23 BAYES_999 23826 11.56 26.62 3.44 24 TR_XM_DK_Unsub 23060 19.39 25.77 15.95 25 TR_DCC_Bayes_99 22709 10.03 25.38 1.75 26 DCC_CHECK_NEGATIVE 20671 45.58 23.10 57.71 27 RCVD_IN_MSPIKE_H2 19742 16.90 22.06 14.12 28 XM_Multi_Part_URI 18646 17.58 20.84 15.83 29 XMSubLong 18391 22.74 20.55 23.92 30 RELAYCOUNTRY_META 17928 8.94 20.03 2.96 31 T_TM2_M_HEADER_IN_MSG 17324 21.06 19.36 21.98 32 XM_B_Unsub 16783 13.15 18.75 10.13 33 UNPARSEABLE_RELAY 16595 15.03 18.54 13.13 34 TR_XM_BayesUnsub 16159 11.49 18.06 7.95 35 TR_MAX_INTL_RELAY 15693 10.69 17.54 6.99 36 RCVD_IN_BL_SPAMCOP_NET 14276 6.04 15.95 0.69 37 TR_XM_SpammyRelay 13361 6.28 14.93 1.61 38 XM_B_SpammyWords3 12918 10.20 14.44 7.92 39 TR_XM_SpammyWords2 11871 5.01 13.27 0.55 40 BOTNET_IPINHOSTNAME 9682 6.52 10.82 4.21 41 BAYES_80 9554 6.48 10.68 4.22 42 RCVD_IN_MSPIKE_WL 9477 15.72 10.59 18.48 43 LOTS_OF_MONEY 9339 7.80 10.44 6.38 44 TR_XM_UnparsRelay 8458 4.44 9.45 1.74 45 TR_XM_SpammyWords4 8194 6.15 9.16 4.53 46 BOTNET 8073 3.90 9.02 1.14 47 BAYES_60 8038 8.17 8.98 7.73 48 FSL_BULK_SIG 7658 5.97 8.56 4.58 49 RELAYCOUNTRY_CA 7631 3.59 8.53 0.93 50 TR_XM_SPAMCOP 7305 2.97 8.16 0.16 51 XM_B_Phish_Phrases 7072 5.92 7.90 4.86 52 XM_Evil_Numbers_Gen 7036 9.27 7.86 10.03 53 UNTRUSTED_Relay 6880 3.86 7.69 1.80 54 RCVD_IN_MSPIKE_BL 6770 3.03 7.57 0.58 55 TR_XM_MSPIKECOMBO 6758 3.02 7.55 0.58 56 HTML_IMAGE_RATIO_02 6551 6.22 7.32 5.63 57 BAYES_95 5801 4.07 6.48 2.78 58 XMSubMetaSx_00 5791 5.09 6.47 4.35 59 XM_Body_Dirty_Words 5661 4.10 6.33 2.90 60 TR_XM_SpammyWords3 5440 2.34 6.08 0.32 61 XM_H_GMP 5272 5.90 5.89 5.91 62 XMStrtUSub 5126 5.72 5.73 5.71 63 XM_UncommonTLD01 5124 5.29 5.73 5.05 64 MPART_ALT_DIFF 4658 5.62 5.21 5.84 65 RCVD_IN_MSPIKE_L3 4641 2.13 5.19 0.48 66 XM_H_Long_From01 4640 5.30 5.18 5.36 67 RCVD_IN_MSPIKE_H3 4194 6.83 4.69 7.99 68 T_XMDrugObfuBody_14 4147 2.74 4.63 1.72 69 LotsOfNums_01 4110 6.30 4.59 7.22 70 XM_B_SpammyTLD 4088 3.37 4.57 2.72 71 XM_B_Investor 4054 2.43 4.53 1.30 72 DKIM_INVALID 3939 2.41 4.40 1.34 73 TR_XM_NoHeaderRelay 3876 1.63 4.33 0.17 74 MIME_HTML_MOSTLY 3857 3.70 4.31 3.37 75 XM_OfRef6 3747 2.11 4.19 0.98 76 HTML_IMAGE_RATIO_04 3561 4.57 3.98 4.89 77 XM_B_PhoneNumber 3479 5.71 3.89 6.69 78 XM_CamelCaseFrm001 3410 2.69 3.81 2.08 79 TM2_M_VERY_LONG_WORD 3275 2.32 3.66 1.60 80 T_XMDrugObfuBody_08 3271 2.26 3.66 1.50 81 TR_XM_PhishingBody 3201 2.36 3.58 1.71 82 TooManyTo_001 3194 4.98 3.57 5.74 83 XMSexyCombo_05 3146 2.07 3.52 1.29 84 TR_XM_SpammyWords5 2890 2.00 3.23 1.33 85 HTML_IMAGE_RATIO_06 2846 3.02 3.18 2.93 86 XMBody_17 2824 1.48 3.16 0.58 87 XM_SPF_SoftFail 2808 1.77 3.14 1.03 88 XM_B_Unsub2 2762 1.93 3.09 1.31 89 RCVD_IN_MSPIKE_H5 2708 5.16 3.03 6.31 90 XM_URI_RBL 2614 1.33 2.92 0.47 91 RCVD_IN_MSPIKE_H4 2575 3.73 2.88 4.19 92 XMNumbers 2514 3.90 2.81 4.49 93 XM_B_SpammyWords4 2501 1.56 2.79 0.89 94 T_XMHurry_00 2428 1.41 2.71 0.70 95 XMDiploma_00 2364 1.88 2.64 1.47 96 RELAYCOUNTRY_AU 2343 1.19 2.62 0.41 97 MIME_QP_LONG_LINE 2333 3.09 2.61 3.34 98 MIME_HTML_ONLY_MULTI 2313 2.91 2.58 3.08 99 RCVD_IN_VALIDITY_RPBL 2295 0.93 2.56 0.04 100 T_FILL_THIS_FORM_SHORT 2258 1.35 2.52 0.71 101 T_TooManySym_01 2258 6.22 2.52 8.21 102 TR_XM_MSPIKECOMBO2 2240 0.89 2.50 0.02 103 USER_IN_DEF_DKIM_WL 2226 12.85 2.49 18.44 104 TR_XM_INV_DKIM 2199 0.87 2.46 0.01 105 HTML_IMAGE_RATIO_08 2192 2.58 2.45 2.65 106 TR_XM_INTL_Spamhaus 2171 0.91 2.43 0.10 107 RCVD_IN_VALIDITY_SAFE 2168 4.34 2.42 5.37 108 URI_NOVOWEL 2127 1.56 2.38 1.12 109 SUBJ_ALL_CAPS 2011 1.44 2.25 1.01 110 XMStockSpam_06 2001 1.99 2.24 1.86 111 XM_UB50 1998 1.45 2.23 1.03 112 DIET_1 1984 1.01 2.22 0.36 113 FROM_EXCESS_BASE64 1893 1.99 2.12 1.92 114 SpammyFromTLD_02 1809 0.89 2.02 0.28 115 RCVD_IN_SBL_CSS 1791 0.73 2.00 0.04 116 RCVD_IN_XBL 1788 0.71 2.00 0.01 117 KHOP_HELO_FCRDNS 1776 1.70 1.98 1.55 118 MAILING_LIST_MULTI 1748 1.98 1.95 1.99 119 XM_UB99 1744 0.68 1.95 0.00 120 TR_XM_MaxSPIKE 1734 0.69 1.94 0.02 121 XMPhish30 1726 1.20 1.93 0.81 122 XM_B_URI_Unicode 1661 1.55 1.86 1.38 123 TM2_M_URI_OPT_OUT 1619 2.03 1.81 2.14 124 SpammyFromTLD_01 1595 0.85 1.78 0.35 125 XMBrknScrpt_02 1586 1.43 1.77 1.25 126 STY_INVIS_DIRECT 1583 0.90 1.77 0.43 127 BAYES_40 1568 3.81 1.75 4.92 128 MultiRelay_CC 1555 0.67 1.74 0.10 129 RCVD_IN_PSBL 1544 0.63 1.73 0.04 130 HTML_FONT_TINY_NORDNS 1537 0.66 1.72 0.08 131 BOUNCE_MESSAGE 1429 3.96 1.60 5.24 132 ANY_BOUNCE_MESSAGE 1429 3.96 1.60 5.24 133 RDNS_DYNAMIC 1428 0.70 1.60 0.22 134 TVD_RCVD_IP 1412 1.57 1.58 1.56 135 MPART_ALT_DIFF_COUNT 1398 0.90 1.56 0.55 136 RCVD_IN_VALIDITY_CERTIFIED 1392 3.42 1.56 4.43 137 XM_H_Long_From02 1360 0.95 1.52 0.65 138 XMBdyGiftCard01 1355 1.35 1.51 1.26 139 DKIM_ADSP_NXDOMAIN 1301 0.79 1.45 0.43 140 RCVD_IN_MSPIKE_L4 1297 0.55 1.45 0.07 141 HTML_IMAGE_ONLY_20 1289 0.79 1.44 0.43 142 RCVD_IN_PBL 1280 0.85 1.43 0.54 143 T_REMOTE_IMAGE 1265 2.76 1.41 3.49 144 SHOPIFY_IMG_NOT_RCVD_SFY 1261 0.71 1.41 0.34 145 T_XMDrugObfuBody_00 1228 1.11 1.37 0.96 146 RELAYCOUNTRY_FR 1224 0.65 1.37 0.26 147 TR_XM_FormFill2 1197 0.66 1.34 0.29 148 TR_XM_PHPForged 1195 0.66 1.34 0.29 149 TR_XM_PHPDW 1191 0.66 1.33 0.30 150 XM_DK_Undo_01 1190 1.31 1.33 1.30 151 BOTNET_NORDNS 1178 0.47 1.32 0.01 152 URI_TRY_3LD 1161 0.85 1.30 0.61 153 XM_H_PHPOS 1155 0.63 1.29 0.27 154 TR_XM_GMP_BULK_SIG 1152 0.52 1.29 0.10 155 XMBody_78 1148 0.64 1.28 0.30 156 XM_B_COPY_HTML 1138 0.98 1.27 0.82 157 TR_LOTS_OF_MONEY3 1134 0.70 1.27 0.40 158 BAYES_20 1133 2.71 1.27 3.49 159 TR_MetaPhish_Combo_01 1111 0.98 1.24 0.84 160 XMGenDplmaNmb 1109 0.85 1.24 0.64 161 ALL_TRUSTED 1108 10.42 1.24 15.38 162 XM_UB60 1107 0.51 1.24 0.12 163 TR_Mismatch_TLD_02 1102 0.51 1.23 0.13 164 XMReplyNow 1098 0.57 1.23 0.22 165 TR_XM_InvalidRelay 1094 0.44 1.22 0.01 166 XM_UB80 1088 0.45 1.22 0.03 167 URI_HEX 1087 1.18 1.21 1.16 168 RELAYCOUNTRY_ID 1077 0.42 1.20 0.00 169 XM_UB999 1075 0.42 1.20 0.00 170 XM_B_DNDMA 1061 0.64 1.19 0.35 171 HELO_DYNAMIC_SPLIT_IP 1052 0.42 1.18 0.00 172 XM_B_SEO 1051 0.52 1.17 0.16 173 THIS_AD 1050 0.82 1.17 0.63 174 XMBounce_01 1042 0.42 1.16 0.02 175 HTML_MIME_NO_HTML_TAG 1005 1.60 1.12 1.86 176 XM_HighProb1 988 0.39 1.10 0.00 177 TM2_M_OBFU_COMMENT 976 0.60 1.09 0.33 178 XM_SendGrid 957 1.40 1.07 1.59 179 DKIM_ADSP_CUSTOM_MED 948 0.87 1.06 0.76 180 TR_Mismatch_TLD_01 943 0.68 1.05 0.48 181 XM_OfRef7 909 0.51 1.02 0.23 182 HTML_TAG_BALANCE_BODY 898 0.74 1.00 0.60 183 XM_ProductURIs 877 0.74 0.98 0.61 184 TR_XM_RelayPhish 862 0.39 0.96 0.08 185 NML_ADSP_CUSTOM_MED 857 0.64 0.96 0.48 186 TR_XM_SEO4 848 0.39 0.95 0.09 187 XM_B_DynamicLink 832 0.34 0.93 0.02 188 XMGetyour 830 0.33 0.93 0.01 189 XMSubMetaI_00 828 0.61 0.93 0.44 190 RELAYCOUNTRY_DE 822 0.53 0.92 0.32 191 RCVD_IN_MSPIKE_L5 820 0.34 0.92 0.03 192 RCVD_IN_IADB_LISTED 820 1.66 0.92 2.06 193 PLING_QUERY 815 0.64 0.91 0.49 194 XM_UB95 783 0.32 0.87 0.01 195 XM_DIRTYINTL 763 0.34 0.85 0.06 196 XM_B_Phish66 759 0.50 0.85 0.31 197 TR_XM_DK_SendGrid 758 1.11 0.85 1.26 198 FORGED_GMAIL_RCVD 744 0.58 0.83 0.44 199 XM_H_PHPMailer 742 1.02 0.83 1.12 200 TR_XM_Base64_M1 741 0.71 0.83 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137594 87.27 95.30 82.94 2 RELAYCOUNTRY_US 135153 80.91 79.87 81.47 3 DKIM_SIGNED 129791 82.77 91.18 78.24 4 XM_DK_Pass 128379 80.86 87.31 77.38 5 DKIM_VALID 127566 80.36 86.78 76.89 6 XM_B_Unicode 121462 77.45 85.30 73.21 7 DKIM_VALID_AU 111611 68.06 69.52 67.28 8 BAYES_50 100392 51.45 34.65 60.51 9 DCC_CHECK_NEGATIVE 95744 45.58 23.10 57.71 10 XMListUnsubscribeExists 88494 59.45 70.78 53.34 11 XM_B_SpammyWords 77868 55.21 70.54 46.94 12 XM_B_Unicode3 76760 47.63 50.15 46.27 13 DCC_CHECK 70031 54.20 76.42 42.21 14 LOC_TINY_FONT_1 61053 41.82 51.13 36.80 15 DKIM_VALID_EF 53066 31.90 31.75 31.99 16 HTML_FONT_LOW_CONTRAST 52681 32.95 35.17 31.76 17 FVGT_m_MULTI_ODD 43570 28.99 34.04 26.26 18 XMSubLong 39688 22.74 20.55 23.92 19 T_KAM_HTML_FONT_INVALID 38057 25.49 30.20 22.94 20 T_TM2_M_HEADER_IN_MSG 36471 21.06 19.36 21.98 21 XM_B_SpammyWords2 36347 28.17 39.78 21.91 22 MIME_HTML_ONLY 35160 23.39 27.46 21.19 23 RCVD_IN_MSPIKE_WL 30665 15.72 10.59 18.48 24 USER_IN_DEF_DKIM_WL 30591 12.85 2.49 18.44 25 TR_XM_DK_Unsub 26456 19.39 25.77 15.95 26 XM_Multi_Part_URI 26261 17.58 20.84 15.83 27 ALL_TRUSTED 25511 10.42 1.24 15.38 28 RCVD_IN_MSPIKE_H2 23420 16.90 22.06 14.12 29 UNPARSEABLE_RELAY 21781 15.03 18.54 13.13 30 XM_B_Unsub 16813 13.15 18.75 10.13 31 XM_Evil_Numbers_Gen 16642 9.27 7.86 10.03 32 BAYES_00 16050 6.38 0.27 9.67 33 XM_DKIMWhitelistDomains 14556 5.72 0.07 8.77 34 T_TooManySym_01 13624 6.22 2.52 8.21 35 TR_XM_DK_Bayes 13410 5.32 0.20 8.08 36 TR_XM_DK_Bayes1 13334 5.29 0.19 8.04 37 RCVD_IN_MSPIKE_H3 13256 6.83 4.69 7.99 38 TR_XM_BayesUnsub 13188 11.49 18.06 7.95 39 XM_B_SpammyWords3 13142 10.20 14.44 7.92 40 BAYES_60 12824 8.17 8.98 7.73 41 LotsOfNums_01 11982 6.30 4.59 7.22 42 TR_XM_DK_Bayes2 11900 4.71 0.15 7.17 43 TR_MAX_INTL_RELAY 11603 10.69 17.54 6.99 44 XM_B_PhoneNumber 11102 5.71 3.89 6.69 45 LOTS_OF_MONEY 10577 7.80 10.44 6.38 46 RCVD_IN_MSPIKE_H5 10462 5.16 3.03 6.31 47 XM_H_GMP 9802 5.90 5.89 5.91 48 MPART_ALT_DIFF 9686 5.62 5.21 5.84 49 XM_DK_Undo_02 9605 20.34 47.32 5.79 50 TooManyTo_001 9516 4.98 3.57 5.74 51 XMStrtUSub 9470 5.72 5.73 5.71 52 HTML_IMAGE_RATIO_02 9335 6.22 7.32 5.63 53 RCVD_IN_VALIDITY_SAFE 8915 4.34 2.42 5.37 54 XM_H_Long_From01 8898 5.30 5.18 5.36 55 BOUNCE_MESSAGE 8686 3.96 1.60 5.24 56 ANY_BOUNCE_MESSAGE 8686 3.96 1.60 5.24 57 XM_UncommonTLD01 8377 5.29 5.73 5.05 58 BAYES_40 8159 3.81 1.75 4.92 59 HTML_IMAGE_RATIO_04 8110 4.57 3.98 4.89 60 XM_B_Phish_Phrases 8059 5.92 7.90 4.86 61 FSL_BULK_SIG 7601 5.97 8.56 4.58 62 TR_XM_SpammyWords4 7512 6.15 9.16 4.53 63 BAYES_99 7462 15.20 35.04 4.50 64 XMNumbers 7454 3.90 2.81 4.49 65 T_TooManySym_02 7454 3.14 0.63 4.49 66 RCVD_IN_VALIDITY_CERTIFIED 7343 3.42 1.56 4.43 67 XMSubMetaSx_00 7214 5.09 6.47 4.35 68 BAYES_80 6996 6.48 10.68 4.22 69 BOTNET_IPINHOSTNAME 6981 6.52 10.82 4.21 70 RCVD_IN_MSPIKE_H4 6947 3.73 2.88 4.19 71 INVALID_MSGID 6637 2.73 0.39 4.00 72 TO_MALFORMED 6443 2.53 0.02 3.88 73 MSGID_NOFQDN1 5887 2.31 0.02 3.55 74 BAYES_20 5791 2.71 1.27 3.49 75 T_REMOTE_IMAGE 5782 2.76 1.41 3.49 76 BAYES_999 5704 11.56 26.62 3.44 77 MIME_HTML_MOSTLY 5586 3.70 4.31 3.37 78 MIME_QP_LONG_LINE 5547 3.09 2.61 3.34 79 MIME_HTML_ONLY_MULTI 5109 2.91 2.58 3.08 80 RELAYCOUNTRY_META 4907 8.94 20.03 2.96 81 HTML_IMAGE_RATIO_06 4862 3.02 3.18 2.93 82 XM_Body_Dirty_Words 4819 4.10 6.33 2.90 83 BAYES_95 4606 4.07 6.48 2.78 84 XM_B_SpammyTLD 4506 3.37 4.57 2.72 85 HTML_IMAGE_RATIO_08 4390 2.58 2.45 2.65 86 XM_PDF 4256 1.80 0.38 2.57 87 TR_XM_DKIM_Undo 3619 13.77 35.26 2.18 88 BAYES_05 3618 1.58 0.47 2.18 89 TM2_M_URI_OPT_OUT 3554 2.03 1.81 2.14 90 T_TVD_MIME_NO_HEADERS 3537 1.40 0.05 2.13 91 XM_CamelCaseFrm001 3458 2.69 3.81 2.08 92 RCVD_IN_IADB_LISTED 3420 1.66 0.92 2.06 93 MAILING_LIST_MULTI 3303 1.98 1.95 1.99 94 FROM_EXCESS_BASE64 3188 1.99 2.12 1.92 95 RCVD_IN_IADB_SPF 3155 1.51 0.78 1.90 96 XMStockSpam_06 3092 1.99 2.24 1.86 97 T_TooManySym_03 3080 1.28 0.21 1.86 98 HTML_MIME_NO_HTML_TAG 3078 1.60 1.12 1.86 99 UNTRUSTED_Relay 2988 3.86 7.69 1.80 100 TR_DCC_Bayes_99 2908 10.03 25.38 1.75 101 RCVD_IN_IADB_SENDERID 2905 1.39 0.72 1.75 102 TooManyTo_002 2893 1.32 0.52 1.74 103 TR_XM_UnparsRelay 2891 4.44 9.45 1.74 104 RCVD_IN_IADB_DK 2858 1.37 0.72 1.72 105 T_XMDrugObfuBody_14 2852 2.74 4.63 1.72 106 TR_XM_PhishingBody 2832 2.36 3.58 1.71 107 TR_XM_SpammyRelay 2678 6.28 14.93 1.61 108 IN_HORDE_ADDRESS_BOOK 2673 1.08 0.11 1.61 109 TM2_M_VERY_LONG_WORD 2654 2.32 3.66 1.60 110 XM_SendGrid 2631 1.40 1.07 1.59 111 TVD_RCVD_IP 2587 1.57 1.58 1.56 112 KHOP_HELO_FCRDNS 2568 1.70 1.98 1.55 113 T_XMDrugObfuBody_08 2494 2.26 3.66 1.50 114 TVD_SPACE_RATIO 2447 1.08 0.34 1.48 115 XMDiploma_00 2443 1.88 2.64 1.47 116 XM_B_URI_Unicode 2288 1.55 1.86 1.38 117 DKIM_INVALID 2225 2.41 4.40 1.34 118 TR_XM_SpammyWords5 2208 2.00 3.23 1.33 119 TR_Symld_Words 2198 1.10 0.67 1.32 120 XM_B_Unsub2 2171 1.93 3.09 1.31 121 XM_B_Investor 2160 2.43 4.53 1.30 122 XM_DK_Undo_01 2156 1.31 1.33 1.30 123 XMSexyCombo_05 2142 2.07 3.52 1.29 124 XMGappySubj_01 2094 0.87 0.16 1.26 125 XMBdyGiftCard01 2089 1.35 1.51 1.26 126 TR_XM_DK_SendGrid 2087 1.11 0.85 1.26 127 XMBrknScrpt_02 2073 1.43 1.77 1.25 128 RCVD_IN_IADB_VOUCHED 2056 0.98 0.51 1.24 129 URI_HEX 1921 1.18 1.21 1.16 130 BOTNET 1896 3.90 9.02 1.14 131 XMBSHREFv2 1877 0.91 0.51 1.13 132 URI_NOVOWEL 1859 1.56 2.38 1.12 133 XM_H_PHPMailer 1851 1.02 0.83 1.12 134 XM_GoogleGroups 1772 0.93 0.66 1.07 135 XM_UB50 1712 1.45 2.23 1.03 136 XM_SPF_SoftFail 1704 1.77 3.14 1.03 137 XMGappySubj_02 1694 0.68 0.04 1.02 138 SUBJ_ALL_CAPS 1676 1.44 2.25 1.01 139 XM_OfRef6 1630 2.11 4.19 0.98 140 T_XMDrugObfuBody_00 1595 1.11 1.37 0.96 141 TooManyTo_003 1591 0.78 0.45 0.96 142 RELAYCOUNTRY_CA 1550 3.59 8.53 0.93 143 RCVD_IN_IADB_OPTIN 1540 0.72 0.34 0.93 144 XM_B_SpammyWords4 1477 1.56 2.79 0.89 145 TR_MetaPhish_Combo_01 1399 0.98 1.24 0.84 146 XM_B_COPY_HTML 1363 0.98 1.27 0.82 147 XMBody_95 1357 0.58 0.15 0.82 148 XMPhish30 1338 1.20 1.93 0.81 149 TooManyTo_004 1289 0.65 0.41 0.78 150 DKIM_ADSP_CUSTOM_MED 1262 0.87 1.06 0.76 151 TR_XM_GMP_MSPIKE_UNDO2 1256 0.55 0.16 0.76 152 T_FILL_THIS_FORM_SHORT 1182 1.35 2.52 0.71 153 T_XMHurry_00 1169 1.41 2.71 0.70 154 RCVD_IN_BL_SPAMCOP_NET 1145 6.04 15.95 0.69 155 XMBody_106 1123 0.45 0.04 0.68 156 TooManyTo_005 1107 0.57 0.38 0.67 157 XM_H_Long_From02 1077 0.95 1.52 0.65 158 TR_XM_Base64_M1 1074 0.71 0.83 0.65 159 XMGenDplmaNmb 1062 0.85 1.24 0.64 160 HTML_FONT_FACE_BAD 1061 0.65 0.68 0.64 161 THIS_AD 1040 0.82 1.17 0.63 162 XMLngstWrd_00 1037 0.50 0.26 0.63 163 LOW_PRICE 1021 0.62 0.63 0.62 164 XM_ProductURIs 1020 0.74 0.98 0.61 165 URI_TRY_3LD 1013 0.85 1.30 0.61 166 HTML_TEXT_INVISIBLE_STYLE 1010 0.60 0.58 0.61 167 TM2_M_A_HREF_HREF 996 0.67 0.79 0.60 168 HTML_TAG_BALANCE_BODY 989 0.74 1.00 0.60 169 XMBody_17 968 1.48 3.16 0.58 170 RCVD_IN_MSPIKE_BL 962 3.03 7.57 0.58 171 TR_XM_MSPIKECOMBO 960 3.02 7.55 0.58 172 TR_XM_SpammyWords2 917 5.01 13.27 0.55 173 MPART_ALT_DIFF_COUNT 908 0.90 1.56 0.55 174 XM_B_FormFill 907 0.36 0.02 0.55 175 RCVD_IN_PBL 902 0.85 1.43 0.54 176 XMLngstWrd_01 888 0.43 0.22 0.54 177 XMSlimDrugH 874 0.60 0.74 0.53 178 T_TooManySym_04 863 0.35 0.02 0.52 179 XMHTML_After_End 820 0.49 0.49 0.49 180 PLING_QUERY 808 0.64 0.91 0.49 181 XMNoVowels 806 0.49 0.50 0.49 182 RCVD_IN_MSPIKE_L3 800 2.13 5.19 0.48 183 TR_Mismatch_TLD_01 799 0.68 1.05 0.48 184 NML_ADSP_CUSTOM_MED 789 0.64 0.96 0.48 185 XM_URI_RBL 773 1.33 2.92 0.47 186 FILL_THIS_FORM 768 0.51 0.58 0.46 187 XM_S_SubURI 764 0.31 0.03 0.46 188 FORGED_GMAIL_RCVD 730 0.58 0.83 0.44 189 XMSubMetaI_00 729 0.61 0.93 0.44 190 HTML_IMAGE_ONLY_20 719 0.79 1.44 0.43 191 DKIM_ADSP_NXDOMAIN 718 0.79 1.45 0.43 192 STY_INVIS_DIRECT 709 0.90 1.77 0.43 193 XM_ShortIntro_01 707 0.45 0.49 0.43 194 MSGID_FROM_MTA_HEADER 704 0.39 0.33 0.42 195 XMSubMetaSxObfu_03 702 0.47 0.57 0.42 196 XMSubMetaSxObfu_02 690 0.38 0.32 0.42 197 RELAYCOUNTRY_AU 688 1.19 2.62 0.41 198 HTTPS_HTTP_MISMATCH 674 0.53 0.76 0.41 199 TR_LOTS_OF_MONEY3 663 0.70 1.27 0.40 200 T_Symld_Words_02 658 0.42 0.45 0.40 ----------------------------------------------------------------------