Email: 247714 Autolearn: 0 AvgScore: 5.35 AvgScanTime: 1.37 sec Spam: 85275 Autolearn: 0 AvgScore: 14.07 AvgScanTime: 1.46 sec Ham: 162439 Autolearn: 0 AvgScore: 0.77 AvgScanTime: 1.33 sec Time Spent Running SA: 94.37 hours Time Spent Processing Spam: 34.53 hours Time Spent Processing Ham: 59.84 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 84779 99.57 99.42 99.65 2 HTML_MESSAGE 81192 87.06 95.21 82.78 3 DKIM_SIGNED 77593 81.98 90.99 77.25 4 XM_DK_Pass 74197 80.09 87.01 76.46 5 DKIM_VALID 73776 79.66 86.52 76.07 6 XM_B_Unicode 72848 76.45 85.43 71.74 7 RELAYCOUNTRY_US 69117 81.30 81.05 81.43 8 DCC_CHECK 67288 60.73 78.91 51.18 9 XMListUnsubscribeExists 59917 59.21 70.26 53.41 10 DKIM_VALID_AU 57890 66.29 67.89 65.46 11 XM_B_SpammyWords 57100 53.78 66.96 46.87 12 XM_B_Unicode3 42190 45.83 49.48 43.91 13 LOC_TINY_FONT_1 40823 38.91 47.87 34.21 14 XM_DK_Undo_02 39391 20.23 46.19 6.60 15 XM_B_SpammyWords2 31658 27.01 37.12 21.70 16 HTML_FONT_LOW_CONTRAST 31057 33.19 36.42 31.50 17 BAYES_99 30965 16.15 36.31 5.57 18 BAYES_50 29870 51.92 35.03 60.79 19 FVGT_m_MULTI_ODD 28585 29.87 33.52 27.95 20 DKIM_VALID_EF 28302 32.41 33.19 32.00 21 TR_XM_DKIM_Undo 27496 13.18 32.24 3.18 22 MIME_HTML_ONLY 24894 24.07 29.19 21.38 23 T_KAM_HTML_FONT_INVALID 24503 24.26 28.73 21.91 24 BAYES_999 24061 12.62 28.22 4.43 25 TR_DCC_Bayes_99 22719 10.82 26.64 2.52 26 TR_XM_DK_Unsub 21839 19.82 25.61 16.78 27 XMSubLong 18754 23.20 21.99 23.84 28 RCVD_IN_MSPIKE_H2 17886 17.35 20.97 15.45 29 XM_Multi_Part_URI 17783 18.11 20.85 16.67 30 DCC_CHECK_NEGATIVE 17589 39.09 20.63 48.79 31 T_TM2_M_HEADER_IN_MSG 17401 22.62 20.41 23.79 32 XM_B_Unsub 16053 13.14 18.82 10.15 33 RELAYCOUNTRY_META 15835 8.28 18.57 2.88 34 TR_XM_BayesUnsub 15463 11.48 18.13 7.99 35 UNPARSEABLE_RELAY 15416 15.41 18.08 14.00 36 TR_MAX_INTL_RELAY 13835 10.06 16.22 6.82 37 TR_XM_SpammyRelay 12219 6.05 14.33 1.71 38 RCVD_IN_BL_SPAMCOP_NET 12040 5.19 14.12 0.50 39 XM_B_SpammyWords3 11149 8.94 13.07 6.77 40 TR_XM_SpammyWords2 10795 4.84 12.66 0.73 41 LOTS_OF_MONEY 10290 8.41 12.07 6.49 42 BOTNET_IPINHOSTNAME 10231 6.70 12.00 3.92 43 FSL_BULK_SIG 9083 11.81 10.65 12.41 44 TR_XM_UnparsRelay 9040 5.25 10.60 2.44 45 TR_XM_SpammyWords4 9014 6.66 10.57 4.61 46 BAYES_80 8412 6.04 9.86 4.03 47 BOTNET 8008 3.97 9.39 1.12 48 RELAYCOUNTRY_CA 7482 3.70 8.77 1.03 49 RCVD_IN_MSPIKE_WL 7374 14.34 8.65 17.32 50 BAYES_60 7200 7.86 8.44 7.56 51 XM_Evil_Numbers_Gen 7190 9.71 8.43 10.38 52 XM_B_Phish_Phrases 6351 5.86 7.45 5.03 53 HTML_IMAGE_RATIO_02 6350 6.49 7.45 5.99 54 XM_Body_Dirty_Words 6130 4.77 7.19 3.51 55 XMSubMetaSx_00 6084 4.73 7.13 3.47 56 XM_UncommonTLD01 5692 5.58 6.67 5.00 57 XM_H_GMP 5182 6.47 6.08 6.68 58 TR_XM_SPAMCOP 5177 2.15 6.07 0.09 59 BAYES_95 5126 3.90 6.01 2.79 60 UNTRUSTED_Relay 5115 3.05 6.00 1.50 61 XM_H_Long_From01 4806 5.84 5.64 5.95 62 MPART_ALT_DIFF 4660 4.97 5.46 4.71 63 RCVD_IN_MSPIKE_BL 4580 2.55 5.37 1.07 64 TR_XM_MSPIKECOMBO 4580 2.55 5.37 1.07 65 LotsOfNums_01 4413 6.74 5.18 7.56 66 XMSexyCombo_05 4194 2.78 4.92 1.65 67 XM_OfRef6 4154 2.38 4.87 1.07 68 HTML_IMAGE_RATIO_04 3888 4.28 4.56 4.13 69 DKIM_INVALID 3817 2.32 4.48 1.19 70 XM_B_Investor 3793 2.44 4.45 1.39 71 TR_XM_PhishingBody 3713 2.79 4.35 1.96 72 XMStrtUSub 3623 5.26 4.25 5.79 73 XM_CamelCaseFrm001 3620 2.83 4.25 2.09 74 RCVD_IN_MSPIKE_H3 3577 6.30 4.19 7.40 75 T_XMDrugObfuBody_14 3383 2.82 3.97 2.22 76 TR_XM_SpammyWords3 3376 1.61 3.96 0.38 77 XM_B_SpammyTLD 3356 3.05 3.94 2.58 78 TooManyTo_001 3273 5.31 3.84 6.09 79 XM_B_PhoneNumber 3222 5.73 3.78 6.76 80 RCVD_IN_VALIDITY_RPBL 3191 1.33 3.74 0.07 81 TM2_M_VERY_LONG_WORD 3157 2.60 3.70 2.02 82 TR_XM_NoHeaderRelay 3062 1.33 3.59 0.14 83 XM_URI_RBL 2932 1.48 3.44 0.45 84 MIME_HTML_MOSTLY 2830 2.62 3.32 2.25 85 RCVD_IN_MSPIKE_L3 2802 1.58 3.29 0.69 86 T_FILL_THIS_FORM_SHORT 2776 1.55 3.26 0.66 87 XMBody_17 2737 1.51 3.21 0.62 88 XMNumbers 2714 4.27 3.18 4.84 89 XM_B_Unsub2 2678 1.95 3.14 1.32 90 MIME_HTML_ONLY_MULTI 2646 2.90 3.10 2.80 91 RCVD_IN_VALIDITY_SAFE 2566 4.89 3.01 5.87 92 HTML_IMAGE_RATIO_06 2520 3.36 2.96 3.57 93 TR_XM_SpammyWords5 2490 1.86 2.92 1.31 94 SpammyFromTLD_02 2466 1.20 2.89 0.31 95 T_TooManySym_01 2460 6.27 2.88 8.05 96 USER_IN_DEF_DKIM_WL 2383 13.33 2.79 18.86 97 XM_SPF_SoftFail 2365 1.80 2.77 1.30 98 XM_UB50 2340 1.44 2.74 0.76 99 XMDiploma_00 2294 1.75 2.69 1.25 100 T_XMDrugObfuBody_08 2290 1.81 2.69 1.34 101 RCVD_IN_MSPIKE_H4 2262 3.58 2.65 4.07 102 RELAYCOUNTRY_AU 2216 1.15 2.60 0.39 103 XM_B_URI_Unicode 2126 1.86 2.49 1.53 104 HTML_IMAGE_RATIO_08 2125 2.28 2.49 2.17 105 MPART_ALT_DIFF_COUNT 2109 1.16 2.47 0.47 106 FROM_EXCESS_BASE64 2058 2.07 2.41 1.89 107 XM_SendGrid 2054 3.35 2.41 3.84 108 XMBrknScrpt_02 2006 1.74 2.35 1.42 109 RCVD_IN_VALIDITY_CERTIFIED 2005 3.93 2.35 4.76 110 TR_LOTS_OF_MONEY3 1973 1.38 2.31 0.89 111 MIME_QP_LONG_LINE 1912 2.98 2.24 3.37 112 MAILING_LIST_MULTI 1893 2.16 2.22 2.13 113 TR_XM_INV_DKIM 1822 0.80 2.14 0.09 114 SCC_BODY_URI_ONLY 1648 2.68 1.93 3.08 115 XMStockSpam_06 1647 2.00 1.93 2.03 116 TR_XM_MSPIKECOMBO2 1640 0.68 1.92 0.03 117 TM2_M_URI_OPT_OUT 1634 1.83 1.92 1.78 118 T_XMHurry_00 1627 1.20 1.91 0.83 119 XM_ProductURIs 1606 1.04 1.88 0.59 120 ALL_TRUSTED 1578 10.92 1.85 15.68 121 XM_B_SpammyWords4 1537 1.37 1.80 1.14 122 RCVD_IN_MSPIKE_H5 1535 4.46 1.80 5.85 123 SpammyFromTLD_01 1525 0.85 1.79 0.36 124 XMPhish30 1468 1.09 1.72 0.76 125 RCVD_IN_PSBL 1466 0.98 1.72 0.60 126 SUBJ_ALL_CAPS 1454 1.12 1.71 0.81 127 RCVD_IN_MSPIKE_L4 1425 0.82 1.67 0.38 128 HK_RANDOM_REPLYTO 1395 0.69 1.64 0.19 129 XM_B_COPY_HTML 1395 1.13 1.64 0.87 130 URI_TRY_3LD 1393 1.06 1.63 0.76 131 BAYES_40 1369 3.90 1.61 5.10 132 URI_NOVOWEL 1366 1.48 1.60 1.42 133 DIET_1 1352 0.80 1.59 0.39 134 XMBdyGiftCard01 1348 1.06 1.58 0.79 135 TR_XM_PHPForged 1338 0.80 1.57 0.39 136 BOTNET_NORDNS 1333 0.55 1.56 0.02 137 TVD_RCVD_IP 1333 1.58 1.56 1.59 138 RCVD_IN_XBL 1327 0.54 1.56 0.01 139 XMSubMetaI_00 1324 1.14 1.55 0.93 140 DKIM_ADSP_NXDOMAIN 1321 0.81 1.55 0.42 141 RDNS_DYNAMIC 1321 0.71 1.55 0.27 142 KHOP_HELO_FCRDNS 1319 1.53 1.55 1.51 143 TR_XM_FormFill2 1312 0.78 1.54 0.39 144 XM_HighProb1 1311 0.53 1.54 0.01 145 PDS_RDNS_DYNAMIC_FP 1298 0.55 1.52 0.03 146 TR_XM_PHPDW 1294 0.77 1.52 0.38 147 LongTLD 1278 0.66 1.50 0.22 148 XM_H_PHPOS 1276 0.76 1.50 0.37 149 THIS_AD 1255 0.90 1.47 0.60 150 DKIM_ADSP_CUSTOM_MED 1255 0.95 1.47 0.68 151 HTML_IMAGE_ONLY_20 1247 0.68 1.46 0.27 152 RCVD_IN_SBL_CSS 1201 0.51 1.41 0.04 153 TR_XM_MaxSPIKE 1199 0.50 1.41 0.02 154 T_REMOTE_IMAGE 1179 2.61 1.38 3.26 155 XM_H_Long_From02 1170 0.88 1.37 0.63 156 T_STY_INVIS_DIRECT 1165 0.94 1.37 0.72 157 TR_XM_DK_SendGrid 1144 2.20 1.34 2.65 158 TR_XM_FormFill 1113 0.46 1.31 0.01 159 XM_GoogleGroups 1102 1.22 1.29 1.18 160 TM2_M_OBFU_COMMENT 1098 0.61 1.29 0.25 161 XM_DK_Undo_01 1097 1.62 1.29 1.80 162 HTML_MIME_NO_HTML_TAG 1091 1.69 1.28 1.90 163 XMSubMetaSxObfu_03 1084 0.74 1.27 0.46 164 XM_B_DNDMA 1080 0.64 1.27 0.32 165 T_XMDrugObfuBody_00 1078 0.98 1.26 0.83 166 TM2_M_A_HREF_HREF 1069 0.56 1.25 0.20 167 HTML_TAG_BALANCE_BODY 1068 0.89 1.25 0.71 168 XM_DIRTYINTL 1063 0.48 1.25 0.07 169 RCVD_IN_PBL 975 0.85 1.14 0.69 170 XM_B_Phish66 960 0.58 1.13 0.29 171 HELO_DYNAMIC_SPLIT_IP 960 0.39 1.13 0.00 172 BAYES_20 957 2.47 1.12 3.17 173 MultiRelay_CC 954 0.44 1.12 0.08 174 PLING_QUERY 953 0.66 1.12 0.42 175 XM_UB99 950 0.38 1.11 0.00 176 XM_B_REG_HTML 926 0.52 1.09 0.22 177 XMSlimDrugH 909 0.69 1.07 0.49 178 FROM_SUSPICIOUS_NTLD 896 0.41 1.05 0.07 179 SHOPIFY_IMG_NOT_RCVD_SFY 895 0.51 1.05 0.22 180 ANY_BOUNCE_MESSAGE 894 3.77 1.05 5.20 181 BOUNCE_MESSAGE 894 3.77 1.05 5.20 182 XMReplyNow 888 0.47 1.04 0.17 183 TR_XM_Base64_M1 882 1.02 1.03 1.02 184 XMSexyCombo_01 867 0.43 1.02 0.13 185 TR_Mismatch_TLD_02 866 0.39 1.02 0.07 186 XMGenDplmaNmb 865 0.65 1.01 0.46 187 XMHTMLBadTable_001 855 0.56 1.00 0.33 188 TR_Mismatch_TLD_01 807 0.59 0.95 0.41 189 RELAYCOUNTRY_FR 806 0.45 0.95 0.19 190 XM_B_SEO 801 0.48 0.94 0.24 191 XM_UCStrings02 786 0.43 0.92 0.17 192 TR_XM_InvalidRelay 784 0.32 0.92 0.01 193 XMBody_78 777 0.48 0.91 0.26 194 J_POPCORN_WO_D 776 0.40 0.91 0.14 195 T_MONEY_PERCENT 765 0.43 0.90 0.19 196 TR_LOTS_OF_MONEY2 765 0.43 0.90 0.19 197 HTML_FONT_TINY_NORDNS 750 0.34 0.88 0.05 198 TR_XM_Base64_L1 747 0.34 0.88 0.06 199 TR_XM_RelayPhish 742 0.34 0.87 0.06 200 XM_UB60 737 0.33 0.86 0.05 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 161873 99.57 99.42 99.65 2 HTML_MESSAGE 134474 87.06 95.21 82.78 3 RELAYCOUNTRY_US 132266 81.30 81.05 81.43 4 DKIM_SIGNED 125486 81.98 90.99 77.25 5 XM_DK_Pass 124206 80.09 87.01 76.46 6 DKIM_VALID 123561 79.66 86.52 76.07 7 XM_B_Unicode 116526 76.45 85.43 71.74 8 DKIM_VALID_AU 106328 66.29 67.89 65.46 9 BAYES_50 98752 51.92 35.03 60.79 10 XMListUnsubscribeExists 86762 59.21 70.26 53.41 11 DCC_CHECK 83143 60.73 78.91 51.18 12 DCC_CHECK_NEGATIVE 79253 39.09 20.63 48.79 13 XM_B_SpammyWords 76131 53.78 66.96 46.87 14 XM_B_Unicode3 71330 45.83 49.48 43.91 15 LOC_TINY_FONT_1 55567 38.91 47.87 34.21 16 DKIM_VALID_EF 51982 32.41 33.19 32.00 17 HTML_FONT_LOW_CONTRAST 51164 33.19 36.42 31.50 18 FVGT_m_MULTI_ODD 45396 29.87 33.52 27.95 19 XMSubLong 38722 23.20 21.99 23.84 20 T_TM2_M_HEADER_IN_MSG 38640 22.62 20.41 23.79 21 T_KAM_HTML_FONT_INVALID 35583 24.26 28.73 21.91 22 XM_B_SpammyWords2 35250 27.01 37.12 21.70 23 MIME_HTML_ONLY 34731 24.07 29.19 21.38 24 USER_IN_DEF_DKIM_WL 30639 13.33 2.79 18.86 25 RCVD_IN_MSPIKE_WL 28142 14.34 8.65 17.32 26 TR_XM_DK_Unsub 27258 19.82 25.61 16.78 27 XM_Multi_Part_URI 27075 18.11 20.85 16.67 28 ALL_TRUSTED 25478 10.92 1.85 15.68 29 RCVD_IN_MSPIKE_H2 25101 17.35 20.97 15.45 30 UNPARSEABLE_RELAY 22747 15.41 18.08 14.00 31 FSL_BULK_SIG 20165 11.81 10.65 12.41 32 XM_Evil_Numbers_Gen 16865 9.71 8.43 10.38 33 XM_B_Unsub 16486 13.14 18.82 10.15 34 XM_DKIMWhitelistDomains 15080 6.10 0.02 9.28 35 BAYES_00 14913 6.19 0.50 9.18 36 T_TooManySym_01 13072 6.27 2.88 8.05 37 TR_XM_BayesUnsub 12972 11.48 18.13 7.99 38 BAYES_60 12277 7.86 8.44 7.56 39 LotsOfNums_01 12275 6.74 5.18 7.56 40 RCVD_IN_MSPIKE_H3 12023 6.30 4.19 7.40 41 TR_XM_DK_Bayes 11432 4.75 0.40 7.04 42 TR_XM_DK_Bayes1 11353 4.72 0.40 6.99 43 TR_MAX_INTL_RELAY 11086 10.06 16.22 6.82 44 XM_B_SpammyWords3 10993 8.94 13.07 6.77 45 XM_B_PhoneNumber 10973 5.73 3.78 6.76 46 XM_H_GMP 10857 6.47 6.08 6.68 47 XM_DK_Undo_02 10720 20.23 46.19 6.60 48 LOTS_OF_MONEY 10537 8.41 12.07 6.49 49 TooManyTo_001 9890 5.31 3.84 6.09 50 TR_XM_DK_Bayes2 9807 4.07 0.33 6.04 51 HTML_IMAGE_RATIO_02 9730 6.49 7.45 5.99 52 XM_H_Long_From01 9660 5.84 5.64 5.95 53 RCVD_IN_VALIDITY_SAFE 9542 4.89 3.01 5.87 54 RCVD_IN_MSPIKE_H5 9508 4.46 1.80 5.85 55 XMStrtUSub 9404 5.26 4.25 5.79 56 BAYES_99 9052 16.15 36.31 5.57 57 ANY_BOUNCE_MESSAGE 8443 3.77 1.05 5.20 58 BOUNCE_MESSAGE 8442 3.77 1.05 5.20 59 BAYES_40 8292 3.90 1.61 5.10 60 XM_B_Phish_Phrases 8170 5.86 7.45 5.03 61 XM_UncommonTLD01 8120 5.58 6.67 5.00 62 T_TooManySym_02 7891 3.45 0.77 4.86 63 XMNumbers 7858 4.27 3.18 4.84 64 RCVD_IN_VALIDITY_CERTIFIED 7740 3.93 2.35 4.76 65 MPART_ALT_DIFF 7653 4.97 5.46 4.71 66 TR_XM_SpammyWords4 7488 6.66 10.57 4.61 67 BAYES_999 7202 12.62 28.22 4.43 68 HTML_IMAGE_RATIO_04 6709 4.28 4.56 4.13 69 INVALID_MSGID 6650 2.83 0.44 4.09 70 RCVD_IN_MSPIKE_H4 6611 3.58 2.65 4.07 71 BAYES_80 6545 6.04 9.86 4.03 72 BOTNET_IPINHOSTNAME 6366 6.70 12.00 3.92 73 TO_MALFORMED 6365 2.61 0.12 3.92 74 XM_SendGrid 6235 3.35 2.41 3.84 75 HTML_IMAGE_RATIO_06 5798 3.36 2.96 3.57 76 XM_Body_Dirty_Words 5698 4.77 7.19 3.51 77 XMSubMetaSx_00 5632 4.73 7.13 3.47 78 MIME_QP_LONG_LINE 5469 2.98 2.24 3.37 79 T_REMOTE_IMAGE 5293 2.61 1.38 3.26 80 TR_XM_DKIM_Undo 5161 13.18 32.24 3.18 81 BAYES_20 5150 2.47 1.12 3.17 82 SCC_BODY_URI_ONLY 4999 2.68 1.93 3.08 83 RELAYCOUNTRY_META 4672 8.28 18.57 2.88 84 MIME_HTML_ONLY_MULTI 4546 2.90 3.10 2.80 85 BAYES_95 4538 3.90 6.01 2.79 86 TR_XM_DK_SendGrid 4309 2.20 1.34 2.65 87 XM_PDF 4292 1.93 0.58 2.64 88 XM_B_SpammyTLD 4189 3.05 3.94 2.58 89 TR_DCC_Bayes_99 4092 10.82 26.64 2.52 90 TR_XM_UnparsRelay 3957 5.25 10.60 2.44 91 RCVD_IN_IADB_LISTED 3778 1.76 0.69 2.33 92 MIME_HTML_MOSTLY 3651 2.62 3.32 2.25 93 T_XMDrugObfuBody_14 3608 2.82 3.97 2.22 94 HTML_IMAGE_RATIO_08 3522 2.28 2.49 2.17 95 MAILING_LIST_MULTI 3459 2.16 2.22 2.13 96 RCVD_IN_IADB_SPF 3403 1.58 0.60 2.09 97 XM_CamelCaseFrm001 3388 2.83 4.25 2.09 98 TooManyTo_002 3316 1.58 0.70 2.04 99 XMStockSpam_06 3301 2.00 1.93 2.03 100 TM2_M_VERY_LONG_WORD 3282 2.60 3.70 2.02 101 TR_XM_PhishingBody 3190 2.79 4.35 1.96 102 RCVD_IN_IADB_SENDERID 3143 1.46 0.56 1.93 103 HTML_MIME_NO_HTML_TAG 3086 1.69 1.28 1.90 104 FROM_EXCESS_BASE64 3068 2.07 2.41 1.89 105 RCVD_IN_IADB_DK 3067 1.43 0.55 1.89 106 T_TooManySym_03 2935 1.33 0.43 1.81 107 XM_DK_Undo_01 2927 1.62 1.29 1.80 108 IN_HORDE_ADDRESS_BOOK 2925 1.21 0.09 1.80 109 BAYES_05 2917 1.40 0.65 1.80 110 TM2_M_URI_OPT_OUT 2889 1.83 1.92 1.78 111 TR_XM_SpammyRelay 2778 6.05 14.33 1.71 112 XMSexyCombo_05 2685 2.78 4.92 1.65 113 TVD_RCVD_IP 2587 1.58 1.56 1.59 114 TVD_SPACE_RATIO 2565 1.09 0.16 1.58 115 XMGappySubj_01 2541 1.09 0.19 1.56 116 XM_B_URI_Unicode 2480 1.86 2.49 1.53 117 KHOP_HELO_FCRDNS 2459 1.53 1.55 1.51 118 UNTRUSTED_Relay 2429 3.05 6.00 1.50 119 RCVD_IN_IADB_VOUCHED 2370 1.10 0.40 1.46 120 XMBrknScrpt_02 2311 1.74 2.35 1.42 121 URI_NOVOWEL 2310 1.48 1.60 1.42 122 T_TVD_MIME_NO_HEADERS 2258 0.92 0.03 1.39 123 XM_B_Investor 2252 2.44 4.45 1.39 124 T_XMDrugObfuBody_08 2183 1.81 2.69 1.34 125 XM_B_Unsub2 2141 1.95 3.14 1.32 126 TR_XM_SpammyWords5 2129 1.86 2.92 1.31 127 XM_SPF_SoftFail 2105 1.80 2.77 1.30 128 TR_Symld_Words 2058 1.00 0.49 1.27 129 XMDiploma_00 2034 1.75 2.69 1.25 130 DKIM_INVALID 1925 2.32 4.48 1.19 131 XM_GoogleGroups 1920 1.22 1.29 1.18 132 XMGappySubj_02 1878 0.79 0.11 1.16 133 XM_B_SpammyWords4 1855 1.37 1.80 1.14 134 BOTNET 1817 3.97 9.39 1.12 135 URI_HEX 1774 1.01 0.85 1.09 136 RCVD_IN_IADB_OPTIN 1740 0.80 0.30 1.07 137 RCVD_IN_MSPIKE_BL 1733 2.55 5.37 1.07 138 TR_XM_MSPIKECOMBO 1733 2.55 5.37 1.07 139 XM_OfRef6 1730 2.38 4.87 1.07 140 RELAYCOUNTRY_CA 1679 3.70 8.77 1.03 141 LOW_PRICE 1676 0.82 0.41 1.03 142 XM_H_PHPMailer 1658 0.95 0.80 1.02 143 HTML_EXTRA_CLOSE 1649 0.68 0.03 1.02 144 TR_XM_Base64_M1 1649 1.02 1.03 1.02 145 XMBSHREFv2 1594 0.74 0.29 0.98 146 XMLngstWrd_00 1513 0.87 0.75 0.93 147 XMSubMetaI_00 1503 1.14 1.55 0.93 148 XM_B_FormFill 1447 0.60 0.04 0.89 149 TR_LOTS_OF_MONEY3 1441 1.38 2.31 0.89 150 XM_B_COPY_HTML 1412 1.13 1.64 0.87 151 TooManyTo_003 1391 0.78 0.63 0.86 152 XMLngstWrd_01 1365 0.78 0.66 0.84 153 T_XMHurry_00 1354 1.20 1.91 0.83 154 T_XMDrugObfuBody_00 1347 0.98 1.26 0.83 155 TR_MetaPhish_Combo_01 1324 0.80 0.78 0.82 156 SUBJ_ALL_CAPS 1319 1.12 1.71 0.81 157 XMBdyGiftCard01 1280 1.06 1.58 0.79 158 XM_UB50 1239 1.44 2.74 0.76 159 URI_TRY_3LD 1234 1.06 1.63 0.76 160 XMPhish30 1228 1.09 1.72 0.76 161 HTML_IMAGE_ONLY_32 1218 0.52 0.08 0.75 162 TR_XM_SpammyWords2 1191 4.84 12.66 0.73 163 T_STY_INVIS_DIRECT 1173 0.94 1.37 0.72 164 HTML_TAG_BALANCE_BODY 1148 0.89 1.25 0.71 165 XMLngstWrd_02 1125 0.66 0.61 0.69 166 RCVD_IN_PBL 1121 0.85 1.14 0.69 167 XMNoVowels 1118 0.74 0.83 0.69 168 RCVD_IN_MSPIKE_L3 1114 1.58 3.29 0.69 169 DKIM_ADSP_CUSTOM_MED 1104 0.95 1.47 0.68 170 T_FILL_THIS_FORM_SHORT 1075 1.55 3.26 0.66 171 TooManyTo_004 1070 0.64 0.60 0.66 172 XM_H_Long_From02 1021 0.88 1.37 0.63 173 XMBody_17 1000 1.51 3.21 0.62 174 THIS_AD 977 0.90 1.47 0.60 175 XMPhish14 975 0.68 0.82 0.60 176 RCVD_IN_PSBL 973 0.98 1.72 0.60 177 XM_ProductURIs 964 1.04 1.88 0.59 178 TooManyTo_005 919 0.56 0.56 0.57 179 TRACKER_ID 919 0.41 0.10 0.57 180 MAY_BE_FORGED 915 0.37 0.01 0.56 181 XMLngstWrd_03 878 0.55 0.55 0.54 182 HTML_FONT_FACE_BAD 825 0.54 0.61 0.51 183 RCVD_IN_BL_SPAMCOP_NET 808 5.19 14.12 0.50 184 XM_ShortIntro_01 805 0.44 0.32 0.50 185 XMSlimDrugH 789 0.69 1.07 0.49 186 T_TooManySym_04 788 0.39 0.21 0.49 187 FROM_GOV_DKIM_AU 786 0.34 0.08 0.48 188 XM_S_SubURI 764 0.33 0.07 0.47 189 MPART_ALT_DIFF_COUNT 763 1.16 2.47 0.47 190 XMGenDplmaNmb 750 0.65 1.01 0.46 191 XMSubMetaSxObfu_03 748 0.74 1.27 0.46 192 XMHTML_After_End 740 0.47 0.49 0.46 193 XM_URI_RBL 734 1.48 3.44 0.45 194 XMBody_95 731 0.33 0.11 0.45 195 XMCapTrack 724 0.56 0.78 0.45 196 MSGID_FROM_MTA_HEADER 719 0.36 0.19 0.44 197 XMLngstWrd_04 704 0.46 0.50 0.43 198 FORGED_GMAIL_RCVD 702 0.54 0.74 0.43 199 T_Symld_Words_02 693 0.51 0.67 0.43 200 DKIM_ADSP_NXDOMAIN 681 0.81 1.55 0.42 ----------------------------------------------------------------------