Email: 271635 Autolearn: 0 AvgScore: 5.34 AvgScanTime: 1.34 sec Spam: 91524 Autolearn: 0 AvgScore: 13.87 AvgScanTime: 1.51 sec Ham: 180111 Autolearn: 0 AvgScore: 1.01 AvgScanTime: 1.26 sec Time Spent Running SA: 101.42 hours Time Spent Processing Spam: 38.28 hours Time Spent Processing Ham: 63.14 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86868 85.68 94.91 80.98 2 DKIM_SIGNED 83618 79.53 91.36 73.52 3 XM_DK_Pass 80100 77.64 87.52 72.62 4 DKIM_VALID 79708 77.24 87.09 72.23 5 XM_B_Unicode 78710 75.69 86.00 70.45 6 RELAYCOUNTRY_US 73395 78.22 80.19 77.22 7 DCC_CHECK 67501 53.90 73.75 43.82 8 XMListUnsubscribeExists 64918 57.96 70.93 51.37 9 XM_B_SpammyWords 63672 53.86 69.57 45.88 10 DKIM_VALID_AU 63310 64.77 69.17 62.54 11 XM_B_Unicode3 46780 47.33 51.11 45.41 12 LOC_TINY_FONT_1 46308 40.15 50.60 34.84 13 XM_DK_Undo_02 40681 19.20 44.45 6.37 14 XM_B_SpammyWords2 38796 28.57 42.39 21.55 15 HTML_FONT_LOW_CONTRAST 32376 32.41 35.37 30.90 16 BAYES_50 32170 50.92 35.15 58.93 17 BAYES_99 31575 14.93 34.50 4.99 18 FVGT_m_MULTI_ODD 30997 28.24 33.87 25.38 19 DKIM_VALID_EF 30501 30.22 33.33 28.64 20 TR_XM_DKIM_Undo 29390 12.62 32.11 2.71 21 T_KAM_HTML_FONT_INVALID 24779 23.35 27.07 21.45 22 MIME_HTML_ONLY 24460 22.23 26.73 19.95 23 BAYES_999 23990 11.45 26.21 3.94 24 TR_XM_DK_Unsub 23797 18.48 26.00 14.65 25 DCC_CHECK_NEGATIVE 23622 45.93 25.81 56.16 26 TR_DCC_Bayes_99 21436 9.31 23.42 2.14 27 XMSubLong 20619 22.19 22.53 22.02 28 XM_Multi_Part_URI 19843 17.52 21.68 15.41 29 RCVD_IN_MSPIKE_H2 18874 16.17 20.62 13.91 30 T_TM2_M_HEADER_IN_MSG 18332 20.51 20.03 20.76 31 RELAYCOUNTRY_META 17526 8.21 19.15 2.65 32 UNPARSEABLE_RELAY 16944 14.82 18.51 12.94 33 TR_MAX_INTL_RELAY 15950 10.37 17.43 6.78 34 XM_B_Unsub 15732 12.41 17.19 9.98 35 XM_B_SpammyWords3 15631 10.28 17.08 6.83 36 TR_XM_BayesUnsub 15291 10.97 16.71 8.06 37 RCVD_IN_BL_SPAMCOP_NET 13524 5.46 14.78 0.72 38 TR_XM_SpammyRelay 12752 5.57 13.93 1.32 39 LOTS_OF_MONEY 12009 8.43 13.12 6.04 40 TR_XM_SpammyWords4 10952 6.95 11.97 4.39 41 TR_XM_SpammyWords2 10511 4.37 11.48 0.76 42 TR_XM_UnparsRelay 9656 4.96 10.55 2.12 43 BAYES_80 9548 6.20 10.43 4.06 44 BOTNET_IPINHOSTNAME 9063 6.05 9.90 4.09 45 XM_Evil_Numbers_Gen 8737 10.00 9.55 10.23 46 RCVD_IN_MSPIKE_WL 8643 14.61 9.44 17.24 47 RELAYCOUNTRY_CA 8291 3.58 9.06 0.79 48 BAYES_60 8082 7.94 8.83 7.49 49 XM_B_Phish_Phrases 7949 5.79 8.69 4.32 50 BOTNET 7378 3.48 8.06 1.16 51 TR_XM_MSPIKECOMBO 6526 2.84 7.13 0.66 52 RCVD_IN_MSPIKE_BL 6526 2.84 7.13 0.66 53 HTML_IMAGE_RATIO_02 6327 5.49 6.91 4.76 54 UNTRUSTED_Relay 6028 3.23 6.59 1.52 55 XM_UncommonTLD01 6011 5.26 6.57 4.60 56 FSL_BULK_SIG 5982 8.84 6.54 10.01 57 BAYES_95 5976 4.01 6.53 2.73 58 TR_XM_SPAMCOP 5870 2.29 6.41 0.19 59 XMSubMetaSx_00 5789 4.36 6.33 3.36 60 XM_Body_Dirty_Words 5654 3.80 6.18 2.59 61 MPART_ALT_DIFF 5362 5.68 5.86 5.59 62 LotsOfNums_01 5173 6.36 5.65 6.73 63 TR_XM_SpammyWords3 5006 2.05 5.47 0.32 64 XM_H_GMP 4684 5.53 5.12 5.74 65 RCVD_IN_MSPIKE_H3 4423 6.50 4.83 7.35 66 XMSexyCombo_05 4400 2.35 4.81 1.10 67 XM_H_Long_From01 4363 5.12 4.77 5.31 68 XM_B_Investor 4293 2.60 4.69 1.54 69 T_XMDrugObfuBody_14 4284 2.78 4.68 1.81 70 MIME_HTML_MOSTLY 4103 3.76 4.48 3.39 71 XM_B_SpammyTLD 3911 3.21 4.27 2.67 72 DKIM_INVALID 3910 2.29 4.27 1.29 73 RCVD_IN_MSPIKE_L3 3819 1.76 4.17 0.53 74 TR_XM_PhishingBody 3713 2.72 4.06 2.05 75 XM_URI_RBL 3641 1.73 3.98 0.59 76 XM_CamelCaseFrm001 3560 2.72 3.89 2.13 77 HTML_IMAGE_RATIO_04 3422 3.99 3.74 4.11 78 TooManyTo_001 3387 4.99 3.70 5.65 79 USER_IN_DEF_DKIM_WL 3370 12.74 3.68 17.34 80 XM_OfRef6 3354 1.77 3.66 0.81 81 XMStrtUSub 3284 5.22 3.59 6.04 82 XM_B_PhoneNumber 3281 5.22 3.58 6.05 83 RCVD_IN_VALIDITY_SAFE 3062 4.57 3.35 5.19 84 TM2_M_VERY_LONG_WORD 2989 2.05 3.27 1.44 85 XMBody_17 2970 1.39 3.25 0.45 86 TR_XM_SpammyWords5 2927 2.30 3.20 1.85 87 T_TooManySym_01 2860 5.84 3.12 7.22 88 T_XMDrugObfuBody_08 2756 1.83 3.01 1.23 89 TR_LOTS_OF_MONEY3 2746 1.32 3.00 0.46 90 XM_B_Unsub2 2704 1.91 2.95 1.38 91 XMNumbers 2665 4.06 2.91 4.64 92 HTML_IMAGE_RATIO_06 2645 3.35 2.89 3.58 93 XMDiploma_00 2619 2.02 2.86 1.59 94 RCVD_IN_VALIDITY_CERTIFIED 2600 3.68 2.84 4.11 95 MIME_HTML_ONLY_MULTI 2551 2.77 2.79 2.76 96 TR_XM_INTL_Spamhaus 2488 0.99 2.72 0.11 97 XM_SPF_SoftFail 2405 1.51 2.63 0.94 98 TR_XM_MSPIKECOMBO2 2378 0.89 2.60 0.02 99 TR_XM_NoHeaderRelay 2324 1.01 2.54 0.23 100 RCVD_IN_XBL 2296 0.86 2.51 0.02 101 XMStockSpam_06 2290 2.08 2.50 1.87 102 XM_UB50 2289 1.41 2.50 0.85 103 T_FILL_THIS_FORM_SHORT 2281 1.33 2.49 0.74 104 HTML_IMAGE_RATIO_08 2273 2.58 2.48 2.63 105 RELAYCOUNTRY_AU 2256 1.11 2.46 0.41 106 RCVD_IN_MSPIKE_H5 2243 4.75 2.45 5.93 107 RCVD_IN_MSPIKE_L4 2192 0.88 2.40 0.11 108 FROM_EXCESS_BASE64 2159 2.02 2.36 1.85 109 RCVD_IN_SBL_CSS 2144 0.82 2.34 0.05 110 XM_B_URI_Unicode 2071 1.58 2.26 1.23 111 TR_XM_INV_DKIM 2071 0.77 2.26 0.02 112 KHOP_HELO_FCRDNS 2036 1.83 2.22 1.63 113 T_XMHurry_00 2024 1.31 2.21 0.86 114 MIME_QP_LONG_LINE 2020 3.10 2.21 3.55 115 RCVD_IN_MSPIKE_H4 1977 3.36 2.16 3.97 116 TM2_M_URI_OPT_OUT 1914 1.94 2.09 1.86 117 XMBdyGiftCard01 1901 1.11 2.08 0.62 118 XM_B_DNDMA 1846 0.98 2.02 0.45 119 RCVD_IN_VALIDITY_RPBL 1841 0.69 2.01 0.03 120 DIET_1 1831 1.07 2.00 0.60 121 URI_HEX 1805 1.42 1.97 1.13 122 XM_B_SpammyWords4 1802 1.48 1.97 1.23 123 SpammyFromTLD_02 1788 0.88 1.95 0.34 124 XMSubMetaI_00 1731 1.23 1.89 0.89 125 XM_HighProb1 1672 0.62 1.83 0.01 126 SpammyFromTLD_01 1670 0.82 1.82 0.31 127 XMBrknScrpt_02 1670 1.66 1.82 1.57 128 MultiRelay_CC 1640 0.65 1.79 0.07 129 XMPhish30 1617 1.08 1.77 0.73 130 XM_ProductURIs 1575 1.54 1.72 1.45 131 URI_NOVOWEL 1572 1.42 1.72 1.26 132 SUBJ_ALL_CAPS 1563 1.78 1.71 1.81 133 BAYES_40 1562 3.63 1.71 4.61 134 STY_INVIS_DIRECT 1543 0.97 1.69 0.60 135 T_XMDrugObfuBody_00 1509 1.04 1.65 0.73 136 TR_MetaPhish_Combo_01 1490 1.04 1.63 0.74 137 TR_XM_MaxSPIKE 1483 0.56 1.62 0.02 138 T_Symld_Words_02 1472 0.80 1.61 0.38 139 MAILING_LIST_MULTI 1466 2.10 1.60 2.35 140 T_REMOTE_IMAGE 1430 2.69 1.56 3.27 141 ALL_TRUSTED 1415 13.81 1.55 20.04 142 XMBody_78 1378 0.72 1.51 0.31 143 RCVD_IN_PBL 1377 0.89 1.50 0.58 144 BAYES_20 1343 5.43 1.47 7.44 145 RDNS_DYNAMIC 1329 0.63 1.45 0.22 146 LOW_PRICE 1327 1.20 1.45 1.07 147 RCVD_IN_PSBL 1323 1.00 1.45 0.77 148 URIBL_SBL 1312 0.49 1.43 0.01 149 URIBL_SBL_A 1312 0.49 1.43 0.01 150 SH_BODYURI_REVERSE_SBL 1311 0.49 1.43 0.01 151 THIS_AD 1308 0.76 1.43 0.42 152 BOTNET_NORDNS 1294 0.48 1.41 0.01 153 HTML_IMAGE_ONLY_20 1288 0.76 1.41 0.43 154 MPART_ALT_DIFF_COUNT 1287 0.81 1.41 0.51 155 SHOPIFY_IMG_NOT_RCVD_SFY 1263 0.69 1.38 0.33 156 HTML_FONT_TINY_NORDNS 1244 0.51 1.36 0.08 157 XM_UB99 1237 0.46 1.35 0.00 158 XM_H_Long_From02 1227 0.90 1.34 0.68 159 URI_TRY_3LD 1195 0.95 1.31 0.78 160 XM_DK_Undo_01 1159 1.47 1.27 1.57 161 TM2_M_OBFU_COMMENT 1152 0.56 1.26 0.20 162 XM_SendGrid 1143 1.20 1.25 1.18 163 TR_XM_PHPForged 1136 0.59 1.24 0.26 164 XM_B_COPY_HTML 1127 0.95 1.23 0.80 165 RELAYCOUNTRY_FR 1116 0.61 1.22 0.30 166 TR_XM_FormFill2 1112 0.58 1.21 0.26 167 TR_XM_PHPDW 1104 0.58 1.21 0.26 168 SUBJ_DOLLARS 1103 0.71 1.21 0.46 169 HTML_TAG_BALANCE_BODY 1100 0.85 1.20 0.67 170 TVD_RCVD_IP 1094 1.44 1.20 1.57 171 TR_Mismatch_TLD_02 1094 0.45 1.20 0.06 172 XM_H_PHPOS 1091 0.57 1.19 0.25 173 XMClaimOffer 1074 0.44 1.17 0.06 174 XM_B_REG_HTML 1020 0.62 1.11 0.38 175 TR_XM_Base64_M1 1019 0.92 1.11 0.83 176 HELO_DYNAMIC_SPLIT_IP 996 0.37 1.09 0.01 177 XM_UB60 982 0.41 1.07 0.07 178 DKIM_ADSP_NXDOMAIN 971 0.63 1.06 0.41 179 XMGenDplmaNmb 965 0.82 1.05 0.69 180 XMReplyNow 963 0.48 1.05 0.20 181 XMSexyCombo_01 950 0.47 1.04 0.19 182 XM_B_Phish66 926 0.56 1.01 0.33 183 TR_XM_RelayPhish 925 0.39 1.01 0.07 184 HTML_MIME_NO_HTML_TAG 901 2.16 0.98 2.76 185 RCVD_IN_IADB_LISTED 870 1.71 0.95 2.10 186 NO_DNS_FOR_FROM 865 0.56 0.95 0.36 187 TR_XM_InvalidRelay 860 0.32 0.94 0.01 188 TR_XM_MaxWHORU 849 0.51 0.93 0.30 189 TR_XM_DK_SendGrid 843 0.89 0.92 0.87 190 XM_UB80 843 0.32 0.92 0.01 191 TR_XM_Base64_L1 835 0.38 0.91 0.10 192 HTML_FONT_FACE_BAD 823 0.61 0.90 0.46 193 J_POPCORN_WO_D 820 0.36 0.90 0.08 194 XM_UB999 794 0.29 0.87 0.00 195 XMSolicitRefs_0 790 0.77 0.86 0.72 196 TR_XM_FormFill 785 0.29 0.86 0.01 197 TR_XM_GMP_BULK_SIG 784 0.34 0.86 0.08 198 XM_B_SEO 776 0.39 0.85 0.15 199 XM_DIRTYINTL 772 0.31 0.84 0.04 200 TR_Mismatch_TLD_01 754 0.50 0.82 0.34 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 145857 85.68 94.91 80.98 2 RELAYCOUNTRY_US 139085 78.22 80.19 77.22 3 DKIM_SIGNED 132416 79.53 91.36 73.52 4 XM_DK_Pass 130789 77.64 87.52 72.62 5 DKIM_VALID 130099 77.24 87.09 72.23 6 XM_B_Unicode 126881 75.69 86.00 70.45 7 DKIM_VALID_AU 112633 64.77 69.17 62.54 8 BAYES_50 106146 50.92 35.15 58.93 9 DCC_CHECK_NEGATIVE 101148 45.93 25.81 56.16 10 XMListUnsubscribeExists 92517 57.96 70.93 51.37 11 XM_B_SpammyWords 82638 53.86 69.57 45.88 12 XM_B_Unicode3 81787 47.33 51.11 45.41 13 DCC_CHECK 78918 53.90 73.75 43.82 14 LOC_TINY_FONT_1 62754 40.15 50.60 34.84 15 HTML_FONT_LOW_CONTRAST 55659 32.41 35.37 30.90 16 DKIM_VALID_EF 51586 30.22 33.33 28.64 17 FVGT_m_MULTI_ODD 45720 28.24 33.87 25.38 18 XMSubLong 39667 22.19 22.53 22.02 19 XM_B_SpammyWords2 38808 28.57 42.39 21.55 20 T_KAM_HTML_FONT_INVALID 38639 23.35 27.07 21.45 21 T_TM2_M_HEADER_IN_MSG 37391 20.51 20.03 20.76 22 ALL_TRUSTED 36089 13.81 1.55 20.04 23 MIME_HTML_ONLY 35930 22.23 26.73 19.95 24 USER_IN_DEF_DKIM_WL 31227 12.74 3.68 17.34 25 RCVD_IN_MSPIKE_WL 31051 14.61 9.44 17.24 26 XM_Multi_Part_URI 27750 17.52 21.68 15.41 27 TR_XM_DK_Unsub 26393 18.48 26.00 14.65 28 RCVD_IN_MSPIKE_H2 25056 16.17 20.62 13.91 29 UNPARSEABLE_RELAY 23315 14.82 18.51 12.94 30 XM_Evil_Numbers_Gen 18421 10.00 9.55 10.23 31 ANY_BOUNCE_MESSAGE 18110 6.87 0.61 10.05 32 BOUNCE_MESSAGE 18107 6.87 0.61 10.05 33 FSL_BULK_SIG 18036 8.84 6.54 10.01 34 XM_B_Unsub 17982 12.41 17.19 9.98 35 XM_DKIMWhitelistDomains 15429 5.71 0.09 8.57 36 BAYES_00 14696 5.52 0.33 8.16 37 TR_XM_BayesUnsub 14514 10.97 16.71 8.06 38 BAYES_60 13498 7.94 8.83 7.49 39 BAYES_20 13409 5.43 1.47 7.44 40 RCVD_IN_MSPIKE_H3 13233 6.50 4.83 7.35 41 T_TooManySym_01 13004 5.84 3.12 7.22 42 TR_XM_DK_Bayes 12298 4.61 0.24 6.83 43 XM_B_SpammyWords3 12295 10.28 17.08 6.83 44 TR_XM_DK_Bayes1 12234 4.58 0.23 6.79 45 TR_MAX_INTL_RELAY 12219 10.37 17.43 6.78 46 LotsOfNums_01 12116 6.36 5.65 6.73 47 XM_DK_Undo_02 11465 19.20 44.45 6.37 48 XM_B_PhoneNumber 10898 5.22 3.58 6.05 49 XMStrtUSub 10887 5.22 3.59 6.04 50 LOTS_OF_MONEY 10884 8.43 13.12 6.04 51 RCVD_IN_MSPIKE_H5 10673 4.75 2.45 5.93 52 TR_XM_DK_Bayes2 10524 3.91 0.11 5.84 53 XM_H_GMP 10338 5.53 5.12 5.74 54 TooManyTo_001 10177 4.99 3.70 5.65 55 MPART_ALT_DIFF 10071 5.68 5.86 5.59 56 XM_H_Long_From01 9558 5.12 4.77 5.31 57 RCVD_IN_VALIDITY_SAFE 9351 4.57 3.35 5.19 58 BAYES_99 8980 14.93 34.50 4.99 59 HTML_IMAGE_RATIO_02 8577 5.49 6.91 4.76 60 XMNumbers 8359 4.06 2.91 4.64 61 BAYES_40 8298 3.63 1.71 4.61 62 XM_UncommonTLD01 8289 5.26 6.57 4.60 63 TR_XM_SpammyWords4 7915 6.95 11.97 4.39 64 XM_B_Phish_Phrases 7781 5.79 8.69 4.32 65 T_TooManySym_02 7664 2.94 0.36 4.26 66 HTML_IMAGE_RATIO_04 7408 3.99 3.74 4.11 67 RCVD_IN_VALIDITY_CERTIFIED 7401 3.68 2.84 4.11 68 BOTNET_IPINHOSTNAME 7372 6.05 9.90 4.09 69 BAYES_80 7306 6.20 10.43 4.06 70 RCVD_IN_MSPIKE_H4 7145 3.36 2.16 3.97 71 BAYES_999 7099 11.45 26.21 3.94 72 INVALID_MSGID 7030 2.70 0.33 3.90 73 HTML_IMAGE_RATIO_06 6450 3.35 2.89 3.58 74 MIME_QP_LONG_LINE 6394 3.10 2.21 3.55 75 TO_MALFORMED 6336 2.34 0.03 3.52 76 MIME_HTML_MOSTLY 6104 3.76 4.48 3.39 77 XMSubMetaSx_00 6049 4.36 6.33 3.36 78 MSGID_NOFQDN1 5910 2.18 0.02 3.28 79 T_REMOTE_IMAGE 5881 2.69 1.56 3.27 80 HTML_MIME_NO_HTML_TAG 4976 2.16 0.98 2.76 81 MIME_HTML_ONLY_MULTI 4972 2.77 2.79 2.76 82 BAYES_95 4912 4.01 6.53 2.73 83 TR_XM_DKIM_Undo 4886 12.62 32.11 2.71 84 XM_B_SpammyTLD 4801 3.21 4.27 2.67 85 RELAYCOUNTRY_META 4773 8.21 19.15 2.65 86 HTML_IMAGE_RATIO_08 4732 2.58 2.48 2.63 87 XM_Body_Dirty_Words 4656 3.80 6.18 2.59 88 T_TVD_MIME_NO_HEADERS 4485 1.76 0.33 2.49 89 MAILING_LIST_MULTI 4237 2.10 1.60 2.35 90 XM_PDF 4225 1.69 0.40 2.35 91 TR_DCC_Bayes_99 3849 9.31 23.42 2.14 92 XM_CamelCaseFrm001 3832 2.72 3.89 2.13 93 TR_XM_UnparsRelay 3823 4.96 10.55 2.12 94 RCVD_IN_IADB_LISTED 3778 1.71 0.95 2.10 95 TR_XM_PhishingBody 3684 2.72 4.06 2.05 96 RCVD_IN_IADB_SPF 3454 1.55 0.82 1.92 97 XMStockSpam_06 3363 2.08 2.50 1.87 98 TM2_M_URI_OPT_OUT 3359 1.94 2.09 1.86 99 TR_XM_SpammyWords5 3327 2.30 3.20 1.85 100 FROM_EXCESS_BASE64 3327 2.02 2.36 1.85 101 T_XMDrugObfuBody_14 3268 2.78 4.68 1.81 102 SUBJ_ALL_CAPS 3263 1.78 1.71 1.81 103 RCVD_IN_IADB_SENDERID 3216 1.43 0.74 1.79 104 T_TooManySym_03 3167 1.20 0.10 1.76 105 RCVD_IN_IADB_DK 3143 1.41 0.76 1.75 106 KHOP_HELO_FCRDNS 2942 1.83 2.22 1.63 107 BAYES_05 2865 1.26 0.62 1.59 108 XMDiploma_00 2857 2.02 2.86 1.59 109 XM_DK_Undo_01 2830 1.47 1.27 1.57 110 XMBrknScrpt_02 2828 1.66 1.82 1.57 111 TVD_RCVD_IP 2823 1.44 1.20 1.57 112 XM_B_Investor 2775 2.60 4.69 1.54 113 UNTRUSTED_Relay 2744 3.23 6.59 1.52 114 IN_HORDE_ADDRESS_BOOK 2719 1.03 0.08 1.51 115 TooManyTo_002 2718 1.18 0.54 1.51 116 XM_ProductURIs 2610 1.54 1.72 1.45 117 TM2_M_VERY_LONG_WORD 2588 2.05 3.27 1.44 118 XM_B_Unsub2 2488 1.91 2.95 1.38 119 XMGappySubj_01 2450 0.95 0.13 1.36 120 TVD_SPACE_RATIO 2430 0.92 0.08 1.35 121 XMBody_95 2400 0.92 0.10 1.33 122 TR_XM_SpammyRelay 2379 5.57 13.93 1.32 123 DKIM_INVALID 2317 2.29 4.27 1.29 124 URI_NOVOWEL 2274 1.42 1.72 1.26 125 RCVD_IN_IADB_VOUCHED 2264 1.00 0.51 1.26 126 XM_B_URI_Unicode 2218 1.58 2.26 1.23 127 XM_B_SpammyWords4 2217 1.48 1.97 1.23 128 T_XMDrugObfuBody_08 2217 1.83 3.01 1.23 129 XM_SendGrid 2130 1.20 1.25 1.18 130 TR_Symld_Words 2127 1.01 0.68 1.18 131 XMBSHREFv2 2114 0.89 0.34 1.17 132 TO_NO_BRKTS_HTML_ONLY 2108 0.83 0.15 1.17 133 BOTNET 2081 3.48 8.06 1.16 134 URI_HEX 2043 1.42 1.97 1.13 135 XMSexyCombo_05 1987 2.35 4.81 1.10 136 LOW_PRICE 1926 1.20 1.45 1.07 137 XM_GoogleGroups 1917 0.92 0.63 1.06 138 XMGappySubj_02 1792 0.67 0.03 0.99 139 RCVD_IN_IADB_OPTIN 1706 0.75 0.35 0.95 140 HTML_EXTRA_CLOSE 1699 0.63 0.03 0.94 141 XM_SPF_SoftFail 1690 1.51 2.63 0.94 142 TooManyTo_003 1648 0.77 0.49 0.91 143 XMSubMetaI_00 1603 1.23 1.89 0.89 144 TR_XM_DK_SendGrid 1564 0.89 0.92 0.87 145 T_XMHurry_00 1544 1.31 2.21 0.86 146 XM_UB50 1539 1.41 2.50 0.85 147 TR_XM_Base64_M1 1493 0.92 1.11 0.83 148 XM_H_PHPMailer 1479 0.72 0.52 0.82 149 XM_OfRef6 1455 1.77 3.66 0.81 150 XM_B_COPY_HTML 1448 0.95 1.23 0.80 151 RELAYCOUNTRY_CA 1423 3.58 9.06 0.79 152 URI_TRY_3LD 1398 0.95 1.31 0.78 153 TR_XM_GMP_MSPIKE_UNDO2 1386 0.57 0.18 0.77 154 RCVD_IN_PSBL 1385 1.00 1.45 0.77 155 TR_XM_SpammyWords2 1371 4.37 11.48 0.76 156 T_FILL_THIS_FORM_SHORT 1339 1.33 2.49 0.74 157 TR_MetaPhish_Combo_01 1332 1.04 1.63 0.74 158 XMPhish30 1316 1.08 1.77 0.73 159 T_XMDrugObfuBody_00 1308 1.04 1.65 0.73 160 RCVD_IN_BL_SPAMCOP_NET 1302 5.46 14.78 0.72 161 XMSolicitRefs_0 1295 0.77 0.86 0.72 162 XMGenDplmaNmb 1250 0.82 1.05 0.69 163 XM_H_Long_From02 1229 0.90 1.34 0.68 164 HTML_TAG_BALANCE_BODY 1202 0.85 1.20 0.67 165 RCVD_IN_MSPIKE_BL 1191 2.84 7.13 0.66 166 TR_XM_MSPIKECOMBO 1189 2.84 7.13 0.66 167 DKIM_ADSP_CUSTOM_MED 1165 0.68 0.75 0.65 168 SHORT_URI_3 1146 0.50 0.23 0.64 169 XMPhish14 1123 0.67 0.77 0.62 170 XMBdyGiftCard01 1118 1.11 2.08 0.62 171 TooManyTo_004 1113 0.53 0.37 0.62 172 STY_INVIS_DIRECT 1088 0.97 1.69 0.60 173 DIET_1 1078 1.07 2.00 0.60 174 XM_URI_RBL 1068 1.73 3.98 0.59 175 XMNoVowels 1041 0.58 0.58 0.58 176 RCVD_IN_PBL 1041 0.89 1.50 0.58 177 RCVD_IN_MSPIKE_L3 963 1.76 4.17 0.53 178 TooManyTo_005 961 0.47 0.35 0.53 179 XMSlimDrugH 955 0.62 0.80 0.53 180 MPART_ALT_DIFF_COUNT 921 0.81 1.41 0.51 181 XMLngstWrd_00 892 0.42 0.29 0.50 182 XMHTML_After_End 881 0.48 0.45 0.49 183 XMSubMetaSxObfu_03 880 0.54 0.65 0.49 184 T_TooManySym_04 872 0.33 0.02 0.48 185 SUBJ_DOLLARS 832 0.71 1.21 0.46 186 HTML_FONT_FACE_BAD 830 0.61 0.90 0.46 187 TR_LOTS_OF_MONEY3 827 1.32 3.00 0.46 188 XMBody_17 810 1.39 3.25 0.45 189 XM_B_DNDMA 805 0.98 2.02 0.45 190 XM_S_SubURI 789 0.30 0.04 0.44 191 FORGED_GMAIL_RCVD 788 0.49 0.60 0.44 192 HTML_IMAGE_ONLY_20 783 0.76 1.41 0.43 193 XMSubMetaSxObfu_02 779 0.52 0.69 0.43 194 XMSubGiftCard1 767 0.34 0.16 0.43 195 XMLngstWrd_01 761 0.34 0.19 0.42 196 THIS_AD 757 0.76 1.43 0.42 197 RELAYCOUNTRY_AU 747 1.11 2.46 0.41 198 XMPhish08 741 0.40 0.38 0.41 199 MSGID_FROM_MTA_HEADER 740 0.34 0.19 0.41 200 DKIM_ADSP_NXDOMAIN 738 0.63 1.06 0.41 ----------------------------------------------------------------------