Email: 271118 Autolearn: 0 AvgScore: 5.00 AvgScanTime: 1.33 sec Spam: 83800 Autolearn: 0 AvgScore: 13.78 AvgScanTime: 1.47 sec Ham: 187318 Autolearn: 0 AvgScore: 1.07 AvgScanTime: 1.26 sec Time Spent Running SA: 99.79 hours Time Spent Processing Spam: 34.21 hours Time Spent Processing Ham: 65.58 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 78965 88.64 94.23 86.13 2 DKIM_SIGNED 76637 75.83 91.45 68.84 3 XM_DK_Pass 73716 74.24 87.97 68.09 4 DKIM_VALID 73397 73.82 87.59 67.67 5 XM_B_Unicode 71527 76.38 85.35 72.37 6 RELAYCOUNTRY_US 66735 82.67 79.64 84.03 7 DCC_CHECK 61790 48.67 73.74 37.45 8 XMListUnsubscribeExists 60403 55.93 72.08 48.70 9 XM_B_SpammyWords 59246 55.25 70.70 48.34 10 DKIM_VALID_AU 58494 62.38 69.80 59.06 11 XM_B_Unicode3 43111 49.53 51.45 48.67 12 LOC_TINY_FONT_1 42502 37.85 50.72 32.09 13 XM_DK_Undo_02 36691 17.52 43.78 5.78 14 XM_B_SpammyWords2 32679 26.62 39.00 21.08 15 BAYES_50 29913 54.60 35.70 63.05 16 HTML_FONT_LOW_CONTRAST 28981 39.50 34.58 41.70 17 FVGT_m_MULTI_ODD 28455 27.69 33.96 24.88 18 BAYES_99 28118 13.56 33.55 4.62 19 DKIM_VALID_EF 27706 28.84 33.06 26.95 20 TR_XM_DKIM_Undo 27504 11.85 32.82 2.46 21 MIME_HTML_ONLY 23607 21.24 28.17 18.14 22 T_KAM_HTML_FONT_INVALID 23591 21.84 28.15 19.01 23 DCC_CHECK_NEGATIVE 21595 51.17 25.77 62.53 24 TR_XM_DK_Unsub 21587 17.21 25.76 13.39 25 BAYES_999 20940 10.21 24.99 3.59 26 TR_DCC_Bayes_99 19646 8.67 23.44 2.06 27 XM_Multi_Part_URI 17831 16.96 21.28 15.03 28 RCVD_IN_MSPIKE_H2 17277 15.60 20.62 13.35 29 T_TM2_M_HEADER_IN_MSG 17203 27.63 20.53 30.81 30 XMSubLong 16763 21.03 20.00 21.49 31 RELAYCOUNTRY_META 16430 7.74 19.61 2.43 32 TR_MAX_INTL_RELAY 15351 9.81 18.32 6.00 33 UNPARSEABLE_RELAY 15129 14.20 18.05 12.48 34 XM_B_Unsub 13463 10.61 16.07 8.17 35 XM_B_SpammyWords3 13161 9.00 15.71 6.00 36 TR_XM_BayesUnsub 13013 9.23 15.53 6.42 37 TR_XM_SpammyRelay 11775 5.18 14.05 1.21 38 RCVD_IN_BL_SPAMCOP_NET 10844 4.41 12.94 0.59 39 LOTS_OF_MONEY 10007 7.84 11.94 6.00 40 BAYES_80 9247 5.95 11.03 3.67 41 TR_XM_SpammyWords4 9153 6.54 10.92 4.58 42 TR_XM_UnparsRelay 9078 4.70 10.83 1.95 43 TR_XM_SpammyWords2 8723 3.75 10.41 0.77 44 BOTNET_IPINHOSTNAME 8650 5.69 10.32 3.62 45 RCVD_IN_MSPIKE_WL 7850 13.47 9.37 15.31 46 BAYES_60 7839 7.76 9.35 7.04 47 RELAYCOUNTRY_CA 7543 3.27 9.00 0.71 48 XM_Evil_Numbers_Gen 7478 13.15 8.92 15.04 49 BOTNET 6802 3.26 8.12 1.09 50 RCVD_IN_MSPIKE_BL 6286 2.70 7.50 0.55 51 TR_XM_MSPIKECOMBO 6286 2.70 7.50 0.55 52 XM_B_Phish_Phrases 6253 5.79 7.46 5.04 53 XM_Body_Dirty_Words 6135 3.65 7.32 2.01 54 UNTRUSTED_Relay 5907 3.17 7.05 1.44 55 XM_UncommonTLD01 5830 5.25 6.96 4.49 56 HTML_IMAGE_RATIO_02 5673 5.02 6.77 4.24 57 BAYES_95 5555 3.66 6.63 2.33 58 FSL_BULK_SIG 5279 4.83 6.30 4.17 59 MPART_ALT_DIFF 5220 5.71 6.23 5.47 60 TR_XM_PhishingBody 4984 3.31 5.95 2.13 61 TR_XM_SpammyWords3 4859 1.99 5.80 0.29 62 TR_XM_SPAMCOP 4581 1.75 5.47 0.08 63 XM_H_GMP 4552 5.74 5.43 5.88 64 XM_B_Investor 4510 2.60 5.38 1.36 65 XMSubMetaSx_00 4492 3.88 5.36 3.22 66 LotsOfNums_01 4474 8.61 5.34 10.07 67 XM_H_Long_From01 4472 4.63 5.34 4.31 68 RCVD_IN_MSPIKE_L3 4390 1.97 5.24 0.50 69 XMSexyCombo_05 4202 2.36 5.01 1.17 70 MIME_HTML_MOSTLY 4031 3.99 4.81 3.63 71 HTML_IMAGE_RATIO_04 3998 4.34 4.77 4.15 72 T_XMDrugObfuBody_14 3891 2.62 4.64 1.71 73 XMStrtUSub 3771 5.64 4.50 6.15 74 XM_OfRef6 3691 1.88 4.40 0.75 75 RCVD_IN_MSPIKE_H3 3691 5.90 4.40 6.57 76 XM_URI_RBL 3642 1.58 4.35 0.34 77 USER_IN_DEF_DKIM_WL 3546 13.34 4.23 17.41 78 XM_B_PhoneNumber 3529 5.43 4.21 5.98 79 DKIM_INVALID 3240 2.01 3.87 1.18 80 TR_XM_SpammyWords5 3159 2.17 3.77 1.45 81 XM_B_SpammyTLD 3127 2.76 3.73 2.33 82 TM2_M_VERY_LONG_WORD 3079 9.80 3.67 12.55 83 XMNumbers 3029 4.09 3.61 4.30 84 RCVD_IN_VALIDITY_SAFE 2942 5.00 3.51 5.67 85 XM_CamelCaseFrm001 2932 2.52 3.50 2.08 86 TooManyTo_001 2799 4.66 3.34 5.25 87 T_FILL_THIS_FORM_SHORT 2729 1.38 3.26 0.54 88 TR_XM_INTL_Spamhaus 2654 1.05 3.17 0.10 89 T_XMDrugObfuBody_08 2549 1.84 3.04 1.30 90 TR_XM_NoHeaderRelay 2471 1.00 2.95 0.12 91 RCVD_IN_MSPIKE_H5 2455 4.37 2.93 5.02 92 XMDiploma_00 2438 1.90 2.91 1.45 93 RCVD_IN_VALIDITY_CERTIFIED 2417 4.17 2.88 4.75 94 RCVD_IN_XBL 2398 0.90 2.86 0.02 95 MIME_HTML_ONLY_MULTI 2390 2.45 2.85 2.27 96 XM_SPF_SoftFail 2377 1.51 2.84 0.92 97 HTML_IMAGE_RATIO_06 2308 3.26 2.75 3.49 98 RELAYCOUNTRY_AU 2280 1.07 2.72 0.32 99 FROM_EXCESS_BASE64 2257 2.23 2.69 2.03 100 XM_UB50 2219 1.39 2.65 0.83 101 RCVD_IN_SBL_CSS 2192 0.82 2.62 0.02 102 T_TooManySym_01 2113 5.61 2.52 6.99 103 XMPhish30 2106 1.39 2.51 0.89 104 XM_B_Unsub2 2105 1.58 2.51 1.17 105 XM_B_SpammyWords4 1996 1.28 2.38 0.79 106 TR_LOTS_OF_MONEY3 1967 1.02 2.35 0.42 107 T_XMHurry_00 1940 1.18 2.32 0.67 108 RCVD_IN_VALIDITY_RPBL 1918 0.80 2.29 0.13 109 XMBody_17 1881 0.91 2.24 0.31 110 XMStockSpam_06 1860 2.35 2.22 2.41 111 XMBdyGiftCard01 1839 1.26 2.19 0.84 112 KHOP_HELO_FCRDNS 1832 5.66 2.19 7.21 113 HTML_IMAGE_RATIO_08 1820 2.78 2.17 3.06 114 XMSubMetaI_00 1800 1.01 2.15 0.50 115 TR_XM_MSPIKECOMBO2 1735 0.65 2.07 0.02 116 XM_B_URI_Unicode 1722 1.57 2.05 1.36 117 RCVD_IN_MSPIKE_H4 1704 3.20 2.03 3.73 118 XM_HighProb1 1690 0.63 2.02 0.00 119 SpammyFromTLD_01 1663 0.84 1.98 0.32 120 SUBJ_ALL_CAPS 1638 1.24 1.95 0.92 121 DIET_1 1611 0.88 1.92 0.41 122 RCVD_IN_PBL 1610 0.93 1.92 0.48 123 TM2_M_URI_OPT_OUT 1599 1.80 1.91 1.75 124 XMBrknScrpt_02 1540 1.61 1.84 1.50 125 TR_XM_INV_DKIM 1540 0.58 1.84 0.01 126 SpammyFromTLD_02 1529 0.69 1.82 0.18 127 MultiRelay_CC 1508 0.61 1.80 0.08 128 THIS_AD 1496 0.83 1.79 0.40 129 RDNS_DYNAMIC 1454 0.68 1.74 0.22 130 STY_INVIS_DIRECT 1448 0.83 1.73 0.42 131 MIME_QP_LONG_LINE 1443 2.30 1.72 2.55 132 XM_B_Phish66 1368 0.69 1.63 0.27 133 SHOPIFY_IMG_NOT_RCVD_SFY 1367 0.74 1.63 0.34 134 RCVD_IN_MSPIKE_L4 1351 0.53 1.61 0.04 135 TR_XM_MaxSPIKE 1324 0.50 1.58 0.02 136 XM_B_COPY_HTML 1307 1.09 1.56 0.88 137 MAILING_LIST_MULTI 1302 1.98 1.55 2.17 138 XM_ProductURIs 1283 0.84 1.53 0.53 139 URI_HEX 1275 1.14 1.52 0.97 140 MPART_ALT_DIFF_COUNT 1275 0.88 1.52 0.60 141 ALL_TRUSTED 1227 9.77 1.46 13.48 142 XM_UB99 1220 0.45 1.46 0.00 143 TVD_RCVD_IP 1171 1.51 1.40 1.56 144 BOTNET_NORDNS 1161 0.43 1.39 0.00 145 TR_XM_Base64_M1 1131 1.01 1.35 0.85 146 XMPhish14 1114 0.79 1.33 0.55 147 URI_NOVOWEL 1098 1.16 1.31 1.09 148 BAYES_40 1077 4.64 1.29 6.14 149 TR_Mismatch_TLD_02 1061 0.44 1.27 0.07 150 URIBL_SBL_A 1045 0.39 1.25 0.00 151 URIBL_SBL 1045 0.39 1.25 0.00 152 SH_BODYURI_REVERSE_SBL 1044 0.39 1.25 0.00 153 HELO_DYNAMIC_SPLIT_IP 1032 0.39 1.23 0.01 154 RCVD_IN_PSBL 1022 0.90 1.22 0.75 155 TR_XM_PHPForged 1018 0.56 1.21 0.26 156 XM_DIRTYINTL 1014 0.40 1.21 0.04 157 TR_XM_PHPDW 1004 0.57 1.20 0.28 158 HTML_FONT_TINY_NORDNS 1001 0.46 1.19 0.14 159 XMBody_78 999 0.52 1.19 0.21 160 TR_XM_FormFill2 987 0.56 1.18 0.28 161 T_REMOTE_IMAGE 985 2.27 1.18 2.76 162 XM_H_PHPOS 969 0.53 1.16 0.25 163 URI_TRY_3LD 968 0.77 1.16 0.60 164 HTML_TAG_BALANCE_BODY 968 0.77 1.16 0.59 165 HTML_MIME_NO_HTML_TAG 955 1.47 1.14 1.62 166 HTML_IMAGE_ONLY_20 945 0.64 1.13 0.43 167 XM_B_REG_HTML 930 0.51 1.11 0.25 168 TR_XM_FormFill 930 0.34 1.11 0.00 169 XM_SendGrid 926 1.13 1.11 1.14 170 XM_RXBody 904 0.50 1.08 0.24 171 TR_Mismatch_TLD_01 904 0.49 1.08 0.22 172 TR_XM_InvalidRelay 899 0.34 1.07 0.01 173 XM_UB60 887 0.37 1.06 0.06 174 XMGenDplmaNmb 844 0.94 1.01 0.91 175 XMReplyNow 840 0.44 1.00 0.19 176 XM_UB80 839 0.32 1.00 0.02 177 MISSING_HEADERS 835 0.67 1.00 0.53 178 SUBJ_DOLLARS 833 0.58 0.99 0.40 179 TR_XM_GMP_BULK_SIG 814 0.34 0.97 0.05 180 DKIM_ADSP_CUSTOM_MED 807 0.72 0.96 0.61 181 XM_UB999 802 0.30 0.96 0.00 182 LongTLD 798 0.47 0.95 0.26 183 XMSlimDrugH 797 0.91 0.95 0.89 184 T_XMDrugObfuBody_00 761 1.00 0.91 1.04 185 BAYES_20 753 2.80 0.90 3.65 186 HTML_FONT_FACE_BAD 752 0.63 0.90 0.51 187 TR_XM_DK_SendGrid 751 0.89 0.90 0.88 188 DKIM_ADSP_NXDOMAIN 745 0.55 0.89 0.40 189 RCVD_IN_IADB_LISTED 744 1.41 0.89 1.64 190 XM_DK_Undo_01 734 1.15 0.88 1.28 191 TR_XM_Bayes_Spamhaus 731 0.27 0.87 0.00 192 AC_HTML_NONSENSE_TAGS 724 0.30 0.86 0.05 193 TR_XM_Base64_L1 724 0.33 0.86 0.09 194 TR_MetaPhish_Combo_01 718 0.86 0.86 0.86 195 ANY_BOUNCE_MESSAGE 705 11.40 0.84 16.12 196 BOUNCE_MESSAGE 704 11.40 0.84 16.12 197 NO_DNS_FOR_FROM 703 0.51 0.84 0.37 198 TR_XM_MaxWHORU 690 0.46 0.82 0.30 199 NML_ADSP_CUSTOM_MED 687 0.50 0.82 0.36 200 XM_OfRef7 686 0.32 0.82 0.10 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161342 88.64 94.23 86.13 2 RELAYCOUNTRY_US 157398 82.67 79.64 84.03 3 XM_B_Unicode 135553 76.38 85.35 72.37 4 DKIM_SIGNED 128959 75.83 91.45 68.84 5 XM_DK_Pass 127549 74.24 87.97 68.09 6 DKIM_VALID 126755 73.82 87.59 67.67 7 BAYES_50 118110 54.60 35.70 63.05 8 DCC_CHECK_NEGATIVE 117127 51.17 25.77 62.53 9 DKIM_VALID_AU 110628 62.38 69.80 59.06 10 XMListUnsubscribeExists 91232 55.93 72.08 48.70 11 XM_B_Unicode3 91171 49.53 51.45 48.67 12 XM_B_SpammyWords 90556 55.25 70.70 48.34 13 HTML_FONT_LOW_CONTRAST 78108 39.50 34.58 41.70 14 DCC_CHECK 70155 48.67 73.74 37.45 15 LOC_TINY_FONT_1 60111 37.85 50.72 32.09 16 T_TM2_M_HEADER_IN_MSG 57719 27.63 20.53 30.81 17 DKIM_VALID_EF 50476 28.84 33.06 26.95 18 FVGT_m_MULTI_ODD 46613 27.69 33.96 24.88 19 XMSubLong 40264 21.03 20.00 21.49 20 XM_B_SpammyWords2 39483 26.62 39.00 21.08 21 T_KAM_HTML_FONT_INVALID 35615 21.84 28.15 19.01 22 MIME_HTML_ONLY 33973 21.24 28.17 18.14 23 USER_IN_DEF_DKIM_WL 32620 13.34 4.23 17.41 24 ANY_BOUNCE_MESSAGE 30198 11.40 0.84 16.12 25 BOUNCE_MESSAGE 30196 11.40 0.84 16.12 26 RCVD_IN_MSPIKE_WL 28683 13.47 9.37 15.31 27 XM_Evil_Numbers_Gen 28164 13.15 8.92 15.04 28 XM_Multi_Part_URI 28155 16.96 21.28 15.03 29 ALL_TRUSTED 25253 9.77 1.46 13.48 30 TR_XM_DK_Unsub 25077 17.21 25.76 13.39 31 RCVD_IN_MSPIKE_H2 25010 15.60 20.62 13.35 32 TM2_M_VERY_LONG_WORD 23503 9.80 3.67 12.55 33 UNPARSEABLE_RELAY 23369 14.20 18.05 12.48 34 LotsOfNums_01 18862 8.61 5.34 10.07 35 XM_B_Unsub 15302 10.61 16.07 8.17 36 XM_DKIMWhitelistDomains 14618 5.41 0.07 7.80 37 BAYES_00 14601 5.55 0.52 7.79 38 HTML_IMAGE_ONLY_32 14149 5.29 0.24 7.55 39 KHOP_HELO_FCRDNS 13504 5.66 2.19 7.21 40 BAYES_60 13189 7.76 9.35 7.04 41 T_TooManySym_01 13096 5.61 2.52 6.99 42 RCVD_IN_MSPIKE_H3 12305 5.90 4.40 6.57 43 TR_XM_BayesUnsub 12022 9.23 15.53 6.42 44 XMStrtUSub 11528 5.64 4.50 6.15 45 BAYES_40 11492 4.64 1.29 6.14 46 TR_XM_DK_Bayes 11480 4.36 0.41 6.13 47 TR_XM_DK_Bayes1 11378 4.32 0.41 6.07 48 TR_MAX_INTL_RELAY 11246 9.81 18.32 6.00 49 LOTS_OF_MONEY 11241 7.84 11.94 6.00 50 XM_B_SpammyWords3 11233 9.00 15.71 6.00 51 XM_B_PhoneNumber 11193 5.43 4.21 5.98 52 XM_H_GMP 11022 5.74 5.43 5.88 53 XM_DK_Undo_02 10820 17.52 43.78 5.78 54 RCVD_IN_VALIDITY_SAFE 10622 5.00 3.51 5.67 55 MIME_CHARSET_FARAWAY 10268 3.95 0.54 5.48 56 MPART_ALT_DIFF 10248 5.71 6.23 5.47 57 CHARSET_FARAWAY_HEADER 10017 3.78 0.29 5.35 58 TooManyTo_001 9836 4.66 3.34 5.25 59 TR_XM_DK_Bayes2 9824 3.71 0.29 5.24 60 XM_B_Phish_Phrases 9440 5.79 7.46 5.04 61 RCVD_IN_MSPIKE_H5 9398 4.37 2.93 5.02 62 RCVD_IN_VALIDITY_CERTIFIED 8889 4.17 2.88 4.75 63 BAYES_99 8654 13.56 33.55 4.62 64 TR_XM_SpammyWords4 8572 6.54 10.92 4.58 65 XM_UncommonTLD01 8405 5.25 6.96 4.49 66 XM_H_Long_From01 8069 4.63 5.34 4.31 67 XMNumbers 8047 4.09 3.61 4.30 68 HTML_IMAGE_RATIO_02 7933 5.02 6.77 4.24 69 T_TooManySym_02 7828 3.06 0.56 4.18 70 FSL_BULK_SIG 7803 4.83 6.30 4.17 71 HTML_IMAGE_RATIO_04 7781 4.34 4.77 4.15 72 RCVD_IN_MSPIKE_H4 6980 3.20 2.03 3.73 73 BAYES_80 6875 5.95 11.03 3.67 74 BAYES_20 6840 2.80 0.90 3.65 75 MIME_HTML_MOSTLY 6799 3.99 4.81 3.63 76 BOTNET_IPINHOSTNAME 6772 5.69 10.32 3.62 77 BAYES_999 6731 10.21 24.99 3.59 78 INVALID_MSGID 6653 2.63 0.56 3.55 79 HTML_IMAGE_RATIO_06 6541 3.26 2.75 3.49 80 TO_MALFORMED 6327 2.34 0.02 3.38 81 XMSubMetaSx_00 6025 3.88 5.36 3.22 82 MSGID_NOFQDN1 5928 2.25 0.20 3.16 83 HTML_IMAGE_RATIO_08 5723 2.78 2.17 3.06 84 T_REMOTE_IMAGE 5173 2.27 1.18 2.76 85 T_TVD_MIME_NO_HEADERS 4836 1.84 0.18 2.58 86 MIME_QP_LONG_LINE 4785 2.30 1.72 2.55 87 TR_XM_DKIM_Undo 4617 11.85 32.82 2.46 88 RELAYCOUNTRY_META 4547 7.74 19.61 2.43 89 XMStockSpam_06 4520 2.35 2.22 2.41 90 BAYES_95 4369 3.66 6.63 2.33 91 XM_B_SpammyTLD 4363 2.76 3.73 2.33 92 MIME_HTML_ONLY_MULTI 4258 2.45 2.85 2.27 93 MAILING_LIST_MULTI 4066 1.98 1.55 2.17 94 TR_XM_PhishingBody 3991 3.31 5.95 2.13 95 XM_CamelCaseFrm001 3890 2.52 3.50 2.08 96 TR_DCC_Bayes_99 3860 8.67 23.44 2.06 97 FROM_EXCESS_BASE64 3802 2.23 2.69 2.03 98 XM_Body_Dirty_Words 3768 3.65 7.32 2.01 99 TR_XM_UnparsRelay 3661 4.70 10.83 1.95 100 XM_PDF 3423 1.41 0.47 1.83 101 T_TooManySym_03 3298 1.25 0.12 1.76 102 TM2_M_URI_OPT_OUT 3270 1.80 1.91 1.75 103 T_XMDrugObfuBody_14 3200 2.62 4.64 1.71 104 BAYES_05 3188 1.35 0.55 1.70 105 RCVD_IN_IADB_LISTED 3080 1.41 0.89 1.64 106 HTML_MIME_NO_HTML_TAG 3037 1.47 1.14 1.62 107 TVD_RCVD_IP 2928 1.51 1.40 1.56 108 XMBrknScrpt_02 2819 1.61 1.84 1.50 109 RCVD_IN_IADB_SPF 2797 1.26 0.75 1.49 110 TR_XM_SpammyWords5 2724 2.17 3.77 1.45 111 XMDiploma_00 2717 1.90 2.91 1.45 112 UNTRUSTED_Relay 2696 3.17 7.05 1.44 113 TooManyTo_002 2673 1.13 0.45 1.43 114 RCVD_IN_IADB_SENDERID 2568 1.16 0.68 1.37 115 IN_HORDE_ADDRESS_BOOK 2566 0.97 0.08 1.37 116 XM_B_URI_Unicode 2543 1.57 2.05 1.36 117 XM_B_Investor 2542 2.60 5.38 1.36 118 URI_GOOGLE_PROXY 2531 1.01 0.24 1.35 119 RCVD_IN_IADB_DK 2494 1.13 0.69 1.33 120 T_XMDrugObfuBody_08 2441 1.84 3.04 1.30 121 TVD_SPACE_RATIO 2433 0.93 0.10 1.30 122 XM_DK_Undo_01 2397 1.15 0.88 1.28 123 TR_XM_SpammyRelay 2271 5.18 14.05 1.21 124 DKIM_INVALID 2204 2.01 3.87 1.18 125 XM_B_Unsub2 2189 1.58 2.51 1.17 126 XMSexyCombo_05 2187 2.36 5.01 1.17 127 XM_SendGrid 2141 1.13 1.11 1.14 128 XMBSHREFv2 2140 0.89 0.34 1.14 129 XM_GoogleGroups 2063 1.00 0.77 1.10 130 URI_NOVOWEL 2046 1.16 1.31 1.09 131 BOTNET 2037 3.26 8.12 1.09 132 XMGappySubj_01 1974 0.82 0.31 1.05 133 T_XMDrugObfuBody_00 1951 1.00 0.91 1.04 134 RCVD_IN_IADB_VOUCHED 1931 0.88 0.55 1.03 135 XM_H_PHPMailer 1839 0.87 0.61 0.98 136 URI_HEX 1813 1.14 1.52 0.97 137 XM_SPF_SoftFail 1726 1.51 2.84 0.92 138 SUBJ_ALL_CAPS 1722 1.24 1.95 0.92 139 XMGenDplmaNmb 1708 0.94 1.01 0.91 140 TR_Symld_Words 1693 0.85 0.75 0.90 141 XMSlimDrugH 1671 0.91 0.95 0.89 142 XMPhish30 1667 1.39 2.51 0.89 143 TR_XM_DK_SendGrid 1652 0.89 0.90 0.88 144 XM_B_COPY_HTML 1650 1.09 1.56 0.88 145 TR_MetaPhish_Combo_01 1609 0.86 0.86 0.86 146 TR_XM_Base64_M1 1601 1.01 1.35 0.85 147 XMBdyGiftCard01 1574 1.26 2.19 0.84 148 XMGappySubj_02 1563 0.58 0.02 0.83 149 XM_UB50 1553 1.39 2.65 0.83 150 XM_B_SpammyWords4 1475 1.28 2.38 0.79 151 RCVD_IN_IADB_OPTIN 1457 0.65 0.36 0.78 152 TR_XM_SpammyWords2 1440 3.75 10.41 0.77 153 XM_OfRef6 1409 1.88 4.40 0.75 154 RCVD_IN_PSBL 1409 0.90 1.22 0.75 155 TooManyTo_003 1397 0.63 0.38 0.75 156 TR_XM_GMP_MSPIKE_UNDO2 1362 0.55 0.14 0.73 157 MSGID_FROM_MTA_HEADER 1346 0.60 0.34 0.72 158 RELAYCOUNTRY_CA 1330 3.27 9.00 0.71 159 T_XMHurry_00 1255 1.18 2.32 0.67 160 DKIM_ADSP_CUSTOM_MED 1134 0.72 0.96 0.61 161 URI_TRY_3LD 1127 0.77 1.16 0.60 162 TooManyTo_004 1126 0.53 0.36 0.60 163 MPART_ALT_DIFF_COUNT 1116 0.88 1.52 0.60 164 HTML_TAG_BALANCE_BODY 1111 0.77 1.16 0.59 165 RCVD_IN_BL_SPAMCOP_NET 1108 4.41 12.94 0.59 166 XMPhish14 1039 0.79 1.33 0.55 167 TR_XM_MSPIKECOMBO 1028 2.70 7.50 0.55 168 RCVD_IN_MSPIKE_BL 1028 2.70 7.50 0.55 169 T_FILL_THIS_FORM_SHORT 1013 1.38 3.26 0.54 170 TM2_M_OBFU_COMMENT 996 0.62 0.81 0.53 171 XM_ProductURIs 989 0.84 1.53 0.53 172 MISSING_HEADERS 987 0.67 1.00 0.53 173 XM_H_Long_From02 973 0.57 0.69 0.52 174 T_TooManySym_04 972 0.36 0.02 0.52 175 TooManyTo_005 963 0.46 0.35 0.51 176 SHORT_URI_3 960 0.44 0.27 0.51 177 HTML_FONT_FACE_BAD 953 0.63 0.90 0.51 178 XMSubMetaI_00 943 1.01 2.15 0.50 179 RCVD_IN_MSPIKE_L3 940 1.97 5.24 0.50 180 XMBody_95 918 0.36 0.07 0.49 181 TR_MetaPhish_Combo_01b 916 0.47 0.43 0.49 182 RCVD_IN_PBL 901 0.93 1.92 0.48 183 XMLngstWrd_00 863 0.46 0.45 0.46 184 XM_B_DNDMA 841 0.55 0.79 0.45 185 XMNoVowels 826 0.45 0.47 0.44 186 XM_B_FormFill 812 0.30 0.01 0.43 187 HTML_EXTRA_CLOSE 805 0.30 0.01 0.43 188 HTML_IMAGE_ONLY_20 801 0.64 1.13 0.43 189 TR_LOTS_OF_MONEY3 794 1.02 2.35 0.42 190 STY_INVIS_DIRECT 791 0.83 1.73 0.42 191 XM_S_SubURI 774 0.30 0.03 0.41 192 HTTPS_HTTP_MISMATCH 772 0.49 0.65 0.41 193 DIET_1 762 0.88 1.92 0.41 194 DKIM_ADSP_NXDOMAIN 753 0.55 0.89 0.40 195 FUZZY_UNSUBSCRIBE 749 0.40 0.42 0.40 196 AD_PREFS 748 0.32 0.13 0.40 197 THIS_AD 745 0.83 1.79 0.40 198 SUBJ_DOLLARS 743 0.58 0.99 0.40 199 ONE_TIME 742 0.29 0.04 0.40 200 XMSubMetaSxObfu_02 729 0.43 0.52 0.39 ----------------------------------------------------------------------