Email: 278300 Autolearn: 0 AvgScore: 5.32 AvgScanTime: 1.30 sec Spam: 91855 Autolearn: 0 AvgScore: 14.06 AvgScanTime: 1.48 sec Ham: 186445 Autolearn: 0 AvgScore: 1.01 AvgScanTime: 1.21 sec Time Spent Running SA: 100.26 hours Time Spent Processing Spam: 37.69 hours Time Spent Processing Ham: 62.57 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 87518 82.60 95.28 76.35 2 DKIM_SIGNED 83772 77.03 91.20 70.04 3 XM_DK_Pass 80336 75.29 87.46 69.29 4 DKIM_VALID 79905 74.84 86.99 68.85 5 XM_B_Unicode 78499 72.50 85.46 66.11 6 RELAYCOUNTRY_US 75817 76.58 82.54 73.64 7 DCC_CHECK 69817 56.60 76.01 47.03 8 XMListUnsubscribeExists 64177 55.56 69.87 48.50 9 XM_B_SpammyWords 63979 52.55 69.65 44.13 10 DKIM_VALID_AU 63881 63.59 69.55 60.66 11 LOC_TINY_FONT_1 47546 40.27 51.76 34.61 12 XM_B_Unicode3 46256 44.80 50.36 42.07 13 XM_DK_Undo_02 42646 19.29 46.43 5.92 14 XM_B_SpammyWords2 36627 27.30 39.87 21.10 15 HTML_FONT_LOW_CONTRAST 35401 32.59 38.54 29.66 16 BAYES_50 32449 49.01 35.33 55.75 17 FVGT_m_MULTI_ODD 32282 27.21 35.14 23.30 18 BAYES_99 31637 15.04 34.44 5.48 19 TR_XM_DKIM_Undo 30645 12.62 33.36 2.39 20 DKIM_VALID_EF 28527 28.52 31.06 27.28 21 T_KAM_HTML_FONT_INVALID 26504 22.92 28.85 20.00 22 BAYES_999 23962 11.46 26.09 4.25 23 MIME_HTML_ONLY 23822 21.67 25.93 19.56 24 TR_DCC_Bayes_99 23265 9.60 25.33 1.85 25 TR_XM_DK_Unsub 22727 17.58 24.74 14.06 26 DCC_CHECK_NEGATIVE 21520 43.18 23.43 52.91 27 RCVD_IN_MSPIKE_H2 21147 17.08 23.02 14.15 28 XM_Multi_Part_URI 19931 17.11 21.70 14.85 29 XMSubLong 19138 22.14 20.84 22.78 30 XM_B_Unsub 18116 12.17 19.72 8.45 31 TR_XM_BayesUnsub 17246 10.68 18.78 6.69 32 T_TM2_M_HEADER_IN_MSG 17094 21.10 18.61 22.32 33 UNPARSEABLE_RELAY 16073 13.92 17.50 12.15 34 RELAYCOUNTRY_META 15827 7.64 17.23 2.91 35 TR_MAX_INTL_RELAY 15518 10.07 16.89 6.71 36 RCVD_IN_BL_SPAMCOP_NET 14841 5.80 16.16 0.70 37 XM_B_SpammyWords3 12622 9.08 13.74 6.78 38 TR_XM_SpammyRelay 12018 5.49 13.08 1.76 39 TR_XM_SpammyWords2 11464 4.48 12.48 0.54 40 RCVD_IN_MSPIKE_WL 9847 14.97 10.72 17.06 41 BAYES_80 9386 5.98 10.22 3.89 42 BOTNET_IPINHOSTNAME 9333 5.88 10.16 3.77 43 LOTS_OF_MONEY 9194 7.06 10.01 5.61 44 BOTNET 8956 4.03 9.75 1.21 45 TR_XM_SpammyWords4 8436 5.39 9.18 3.51 46 TR_XM_SPAMCOP 8381 3.14 9.12 0.19 47 TR_XM_UnparsRelay 8311 4.18 9.05 1.78 48 XM_B_Phish_Phrases 8261 6.34 8.99 5.04 49 BAYES_60 7913 7.55 8.61 7.02 50 FSL_BULK_SIG 7606 10.98 8.28 12.31 51 XM_Evil_Numbers_Gen 7452 9.17 8.11 9.69 52 XM_H_GMP 7179 6.45 7.82 5.77 53 RCVD_IN_MSPIKE_BL 6834 2.84 7.44 0.57 54 TR_XM_MSPIKECOMBO 6834 2.84 7.44 0.57 55 HTML_IMAGE_RATIO_02 6397 5.87 6.96 5.33 56 RELAYCOUNTRY_CA 6160 2.75 6.71 0.80 57 UNTRUSTED_Relay 6121 3.18 6.66 1.47 58 XMSubMetaSx_00 6009 4.72 6.54 3.83 59 T_XMDrugObfuBody_14 5830 2.90 6.35 1.21 60 BAYES_95 5829 3.98 6.35 2.82 61 MPART_ALT_DIFF 5322 5.66 5.79 5.59 62 TR_XM_SpammyWords3 5080 1.99 5.53 0.25 63 XM_H_Long_From01 4646 5.18 5.06 5.24 64 XM_Body_Dirty_Words 4635 3.13 5.05 2.19 65 XM_UncommonTLD01 4593 4.54 5.00 4.31 66 XM_B_Investor 4520 2.36 4.92 1.09 67 XM_B_SpammyTLD 4438 3.23 4.83 2.44 68 XMStrtUSub 4391 5.07 4.78 5.21 69 MIME_HTML_MOSTLY 4378 4.26 4.77 4.01 70 LotsOfNums_01 4137 5.68 4.50 6.26 71 RCVD_IN_MSPIKE_H3 4085 6.39 4.45 7.34 72 RCVD_IN_MSPIKE_L3 4060 1.74 4.42 0.42 73 DKIM_INVALID 3867 2.19 4.21 1.19 74 TR_XM_PhishingBody 3710 2.60 4.04 1.88 75 HTML_IMAGE_RATIO_04 3477 4.35 3.79 4.62 76 XM_CamelCaseFrm001 3473 3.23 3.78 2.97 77 XM_B_PhoneNumber 3426 5.18 3.73 5.90 78 RCVD_IN_MSPIKE_H5 3367 4.98 3.67 5.63 79 TR_XM_NoHeaderRelay 3353 1.31 3.65 0.15 80 XMSexyCombo_05 3299 2.18 3.59 1.49 81 TM2_M_VERY_LONG_WORD 3193 2.05 3.48 1.35 82 XM_OfRef6 3186 1.69 3.47 0.81 83 XM_SPF_SoftFail 3113 1.75 3.39 0.95 84 XM_B_Unsub2 2804 1.82 3.05 1.22 85 HTML_IMAGE_RATIO_06 2764 2.96 3.01 2.94 86 TooManyTo_001 2701 4.36 2.94 5.07 87 USER_IN_DEF_DKIM_WL 2695 12.17 2.93 16.72 88 XMDiploma_00 2590 1.91 2.82 1.47 89 XMBody_17 2430 1.22 2.65 0.52 90 FROM_EXCESS_BASE64 2428 2.07 2.64 1.78 91 RCVD_IN_MSPIKE_H4 2395 3.60 2.61 4.09 92 RELAYCOUNTRY_AU 2369 1.31 2.58 0.68 93 TR_XM_SpammyWords5 2348 1.79 2.56 1.41 94 T_XMDrugObfuBody_08 2328 1.65 2.53 1.22 95 RCVD_IN_VALIDITY_SAFE 2326 4.20 2.53 5.03 96 MIME_HTML_ONLY_MULTI 2326 2.82 2.53 2.97 97 XMNumbers 2319 3.62 2.52 4.15 98 RCVD_IN_VALIDITY_RPBL 2296 0.87 2.50 0.07 99 XM_UB50 2262 1.41 2.46 0.89 100 HTML_IMAGE_RATIO_08 2220 2.40 2.42 2.39 101 T_FILL_THIS_FORM_SHORT 2205 1.29 2.40 0.75 102 XM_URI_RBL 2202 1.12 2.40 0.50 103 T_TooManySym_01 2186 5.48 2.38 7.01 104 T_XMHurry_00 2173 1.21 2.37 0.64 105 TM2_M_URI_OPT_OUT 2088 1.85 2.27 1.64 106 XM_B_URI_Unicode 2072 1.52 2.26 1.15 107 STY_INVIS_DIRECT 2059 0.85 2.24 0.16 108 BOTNET_NORDNS 2039 0.74 2.22 0.01 109 XM_B_SpammyWords4 1967 1.13 2.14 0.63 110 TR_XM_INV_DKIM 1923 0.70 2.09 0.02 111 THIS_AD 1905 1.02 2.07 0.51 112 XMPhish30 1903 1.18 2.07 0.73 113 TR_XM_MSPIKECOMBO2 1898 0.70 2.07 0.02 114 TR_XM_INTL_Spamhaus 1896 0.75 2.06 0.10 115 HTML_FONT_TINY_NORDNS 1819 0.68 1.98 0.05 116 XMStockSpam_06 1795 1.69 1.95 1.56 117 RCVD_IN_PSBL 1778 0.66 1.94 0.03 118 MAILING_LIST_MULTI 1777 2.00 1.93 2.03 119 MPART_ALT_DIFF_COUNT 1740 1.04 1.89 0.62 120 XMSubMetaI_00 1711 1.00 1.86 0.58 121 XMBrknScrpt_02 1708 1.53 1.86 1.37 122 RCVD_IN_MSPIKE_L4 1703 0.69 1.85 0.12 123 BAYES_40 1698 4.10 1.85 5.22 124 URI_NOVOWEL 1676 1.40 1.82 1.19 125 XM_B_DNDMA 1675 0.93 1.82 0.48 126 KHOP_HELO_FCRDNS 1656 1.70 1.80 1.65 127 SUBJ_ALL_CAPS 1649 1.21 1.80 0.92 128 RCVD_IN_SBL_CSS 1633 0.59 1.78 0.01 129 SpammyFromTLD_02 1620 0.76 1.76 0.26 130 DIET_1 1542 0.73 1.68 0.26 131 URI_TRY_3LD 1517 0.85 1.65 0.46 132 RCVD_IN_XBL 1480 0.54 1.61 0.01 133 SpammyFromTLD_01 1462 0.74 1.59 0.31 134 XM_ProductURIs 1457 1.02 1.59 0.74 135 RELAYCOUNTRY_FR 1441 0.68 1.57 0.24 136 XM_H_Long_From02 1432 0.90 1.56 0.58 137 T_REMOTE_IMAGE 1413 2.48 1.54 2.94 138 SHOPIFY_IMG_NOT_RCVD_SFY 1410 0.69 1.54 0.27 139 URI_HEX 1409 1.25 1.53 1.11 140 MultiRelay_CC 1399 0.56 1.52 0.09 141 BAYES_20 1392 7.37 1.52 10.26 142 MIME_QP_LONG_LINE 1387 2.42 1.51 2.87 143 RDNS_DYNAMIC 1386 0.64 1.51 0.21 144 RCVD_IN_VALIDITY_CERTIFIED 1367 3.20 1.49 4.04 145 TVD_RCVD_IP 1325 1.33 1.44 1.27 146 TR_XM_GMP_BULK_SIG 1308 0.54 1.42 0.11 147 XM_B_Phish66 1258 0.82 1.37 0.54 148 XM_B_COPY_HTML 1238 1.10 1.35 0.98 149 XMClaimOffer 1229 0.50 1.34 0.09 150 XM_DK_Undo_01 1228 1.37 1.34 1.38 151 XMGenDplmaNmb 1209 0.81 1.32 0.57 152 XMBody_78 1203 0.65 1.31 0.33 153 TR_XM_MaxSPIKE 1200 0.44 1.31 0.02 154 XMReplyNow 1193 0.55 1.30 0.19 155 XM_UB99 1177 0.42 1.28 0.00 156 TR_XM_InvalidRelay 1163 0.42 1.27 0.01 157 TR_LOTS_OF_MONEY3 1149 0.65 1.25 0.36 158 HELO_DYNAMIC_SPLIT_IP 1146 0.42 1.25 0.01 159 HTML_IMAGE_ONLY_20 1122 0.68 1.22 0.42 160 T_XMDrugObfuBody_00 1109 1.09 1.21 1.04 161 ALL_TRUSTED 1107 16.03 1.21 23.33 162 TM2_M_OBFU_COMMENT 1098 0.65 1.20 0.37 163 HTML_TAG_BALANCE_BODY 1090 0.74 1.19 0.53 164 XM_B_SEO 1082 0.48 1.18 0.14 165 RCVD_IN_MSPIKE_L5 1071 0.40 1.17 0.02 166 TR_XM_FormFill 1066 0.39 1.16 0.01 167 PLING_QUERY 1064 0.69 1.16 0.45 168 TR_Symld_Words 1060 1.21 1.15 1.23 169 DKIM_ADSP_NXDOMAIN 1056 0.65 1.15 0.40 170 XM_B_DynamicLink 1053 0.39 1.15 0.01 171 XM_UB60 1023 0.42 1.11 0.08 172 RCVD_IN_PBL 1019 0.71 1.11 0.51 173 TR_XM_PHPForged 1015 0.52 1.11 0.23 174 TR_XM_FormFill2 1010 0.52 1.10 0.23 175 XMSubMetaD_03 1004 0.43 1.09 0.10 176 TR_XM_PHPDW 990 0.51 1.08 0.23 177 XM_SendGrid 986 1.19 1.07 1.25 178 XM_H_PHPOS 978 0.50 1.06 0.22 179 XM_DIRTYINTL 978 0.38 1.06 0.04 180 TR_Mismatch_TLD_02 938 0.38 1.02 0.06 181 XMMoneyMeta_00 924 0.53 1.01 0.29 182 TR_XM_Base64_L1 904 0.39 0.98 0.10 183 BAD_CREDIT 897 0.34 0.98 0.02 184 XM_GoogleGroups 896 1.01 0.98 1.03 185 XM_UB80 896 0.34 0.98 0.02 186 DEAR_FRIEND 887 0.39 0.97 0.11 187 XMBdyGiftCard01 844 0.95 0.92 0.97 188 HTML_MIME_NO_HTML_TAG 838 1.46 0.91 1.73 189 XM_HighProb1 826 0.30 0.90 0.01 190 TR_XM_SEO4 826 0.35 0.90 0.07 191 TR_XM_Base64_M1 816 0.79 0.89 0.75 192 HTTPS_HTTP_MISMATCH 815 0.59 0.89 0.44 193 NO_DNS_FOR_FROM 812 0.52 0.88 0.34 194 DKIM_ADSP_CUSTOM_MED 810 0.74 0.88 0.68 195 TR_XM_MaxWHORU 803 0.48 0.87 0.28 196 XMSlimDrugH 802 0.57 0.87 0.42 197 TR_XM_RelayPhish 771 0.32 0.84 0.07 198 XMMoneyMeta_01 771 0.29 0.84 0.02 199 TR_Mismatch_TLD_01 761 0.62 0.83 0.52 200 SHORT_SHORTNER 758 0.29 0.83 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 142346 82.60 95.28 76.35 2 RELAYCOUNTRY_US 137298 76.58 82.54 73.64 3 DKIM_SIGNED 130595 77.03 91.20 70.04 4 XM_DK_Pass 129197 75.29 87.46 69.29 5 DKIM_VALID 128370 74.84 86.99 68.85 6 XM_B_Unicode 123255 72.50 85.46 66.11 7 DKIM_VALID_AU 113099 63.59 69.55 60.66 8 BAYES_50 103940 49.01 35.33 55.75 9 DCC_CHECK_NEGATIVE 98653 43.18 23.43 52.91 10 XMListUnsubscribeExists 90433 55.56 69.87 48.50 11 DCC_CHECK 87687 56.60 76.01 47.03 12 XM_B_SpammyWords 82270 52.55 69.65 44.13 13 XM_B_Unicode3 78430 44.80 50.36 42.07 14 LOC_TINY_FONT_1 64529 40.27 51.76 34.61 15 HTML_FONT_LOW_CONTRAST 55301 32.59 38.54 29.66 16 DKIM_VALID_EF 50853 28.52 31.06 27.28 17 ALL_TRUSTED 43505 16.03 1.21 23.33 18 FVGT_m_MULTI_ODD 43437 27.21 35.14 23.30 19 XMSubLong 42465 22.14 20.84 22.78 20 T_TM2_M_HEADER_IN_MSG 41614 21.10 18.61 22.32 21 XM_B_SpammyWords2 39337 27.30 39.87 21.10 22 T_KAM_HTML_FONT_INVALID 37289 22.92 28.85 20.00 23 MIME_HTML_ONLY 36474 21.67 25.93 19.56 24 RCVD_IN_MSPIKE_WL 31810 14.97 10.72 17.06 25 USER_IN_DEF_DKIM_WL 31165 12.17 2.93 16.72 26 XM_Multi_Part_URI 27683 17.11 21.70 14.85 27 RCVD_IN_MSPIKE_H2 26374 17.08 23.02 14.15 28 ANY_BOUNCE_MESSAGE 26278 9.61 0.50 14.09 29 BOUNCE_MESSAGE 26271 9.61 0.50 14.09 30 TR_XM_DK_Unsub 26212 17.58 24.74 14.06 31 FSL_BULK_SIG 22954 10.98 8.28 12.31 32 UNPARSEABLE_RELAY 22656 13.92 17.50 12.15 33 BAYES_20 19132 7.37 1.52 10.26 34 XM_Evil_Numbers_Gen 18068 9.17 8.11 9.69 35 XM_B_Unsub 15749 12.17 19.72 8.45 36 XM_DKIMWhitelistDomains 14844 5.36 0.08 7.96 37 BAYES_00 14472 5.33 0.40 7.76 38 RCVD_IN_MSPIKE_H3 13691 6.39 4.45 7.34 39 BAYES_60 13096 7.55 8.61 7.02 40 T_TooManySym_01 13063 5.48 2.38 7.01 41 XM_B_SpammyWords3 12642 9.08 13.74 6.78 42 TR_MAX_INTL_RELAY 12514 10.07 16.89 6.71 43 TR_XM_BayesUnsub 12467 10.68 18.78 6.69 44 TR_XM_DK_Bayes 11957 4.40 0.31 6.41 45 TR_XM_DK_Bayes1 11827 4.35 0.30 6.34 46 LotsOfNums_01 11673 5.68 4.50 6.26 47 XM_DK_Undo_02 11039 19.29 46.43 5.92 48 XM_B_PhoneNumber 11001 5.18 3.73 5.90 49 XM_H_GMP 10759 6.45 7.82 5.77 50 RCVD_IN_MSPIKE_H5 10501 4.98 3.67 5.63 51 LOTS_OF_MONEY 10458 7.06 10.01 5.61 52 MPART_ALT_DIFF 10425 5.66 5.79 5.59 53 TR_XM_DK_Bayes2 10211 3.74 0.22 5.48 54 BAYES_99 10208 15.04 34.44 5.48 55 HTML_IMAGE_RATIO_02 9941 5.87 6.96 5.33 56 XM_H_Long_From01 9776 5.18 5.06 5.24 57 BAYES_40 9724 4.10 1.85 5.22 58 XMStrtUSub 9714 5.07 4.78 5.21 59 TooManyTo_001 9444 4.36 2.94 5.07 60 XM_B_Phish_Phrases 9391 6.34 8.99 5.04 61 RCVD_IN_VALIDITY_SAFE 9369 4.20 2.53 5.03 62 HTML_IMAGE_RATIO_04 8618 4.35 3.79 4.62 63 XM_UncommonTLD01 8044 4.54 5.00 4.31 64 BAYES_999 7928 11.46 26.09 4.25 65 T_TooManySym_02 7776 3.03 0.70 4.17 66 XMNumbers 7746 3.62 2.52 4.15 67 RCVD_IN_MSPIKE_H4 7618 3.60 2.61 4.09 68 RCVD_IN_VALIDITY_CERTIFIED 7526 3.20 1.49 4.04 69 MIME_HTML_MOSTLY 7476 4.26 4.77 4.01 70 BAYES_80 7255 5.98 10.22 3.89 71 XMSubMetaSx_00 7138 4.72 6.54 3.83 72 BOTNET_IPINHOSTNAME 7025 5.88 10.16 3.77 73 INVALID_MSGID 6665 2.52 0.39 3.57 74 TO_MALFORMED 6574 2.37 0.03 3.53 75 TR_XM_SpammyWords4 6553 5.39 9.18 3.51 76 MSGID_NOFQDN1 5912 2.13 0.01 3.17 77 MIME_HTML_ONLY_MULTI 5533 2.82 2.53 2.97 78 XM_CamelCaseFrm001 5529 3.23 3.78 2.97 79 T_REMOTE_IMAGE 5488 2.48 1.54 2.94 80 HTML_IMAGE_RATIO_06 5474 2.96 3.01 2.94 81 RELAYCOUNTRY_META 5424 7.64 17.23 2.91 82 MIME_QP_LONG_LINE 5350 2.42 1.51 2.87 83 BAYES_95 5258 3.98 6.35 2.82 84 T_TVD_MIME_NO_HEADERS 4585 1.67 0.07 2.46 85 XM_B_SpammyTLD 4552 3.23 4.83 2.44 86 TR_XM_DKIM_Undo 4464 12.62 33.36 2.39 87 HTML_IMAGE_RATIO_08 4448 2.40 2.42 2.39 88 XM_PDF 4113 1.61 0.41 2.21 89 XM_Body_Dirty_Words 4081 3.13 5.05 2.19 90 MAILING_LIST_MULTI 3783 2.00 1.93 2.03 91 TR_XM_PhishingBody 3512 2.60 4.04 1.88 92 TR_DCC_Bayes_99 3448 9.60 25.33 1.85 93 BAYES_05 3360 1.47 0.78 1.80 94 RCVD_IN_IADB_LISTED 3347 1.46 0.78 1.80 95 FROM_EXCESS_BASE64 3321 2.07 2.64 1.78 96 TR_XM_UnparsRelay 3318 4.18 9.05 1.78 97 TR_XM_SpammyRelay 3274 5.49 13.08 1.76 98 HTML_MIME_NO_HTML_TAG 3234 1.46 0.91 1.73 99 T_TooManySym_03 3162 1.18 0.14 1.70 100 KHOP_HELO_FCRDNS 3073 1.70 1.80 1.65 101 RCVD_IN_IADB_SPF 3061 1.32 0.65 1.64 102 TM2_M_URI_OPT_OUT 3057 1.85 2.27 1.64 103 XMStockSpam_06 2912 1.69 1.95 1.56 104 RCVD_IN_IADB_SENDERID 2828 1.21 0.58 1.52 105 XMSexyCombo_05 2775 2.18 3.59 1.49 106 RCVD_IN_IADB_DK 2744 1.18 0.59 1.47 107 XMDiploma_00 2739 1.91 2.82 1.47 108 UNTRUSTED_Relay 2739 3.18 6.66 1.47 109 IN_HORDE_ADDRESS_BOOK 2735 1.00 0.05 1.47 110 TooManyTo_002 2700 1.16 0.58 1.45 111 XMGappySubj_01 2645 1.04 0.28 1.42 112 TR_XM_SpammyWords5 2624 1.79 2.56 1.41 113 XM_DK_Undo_01 2579 1.37 1.34 1.38 114 XMBrknScrpt_02 2558 1.53 1.86 1.37 115 TM2_M_VERY_LONG_WORD 2516 2.05 3.48 1.35 116 TVD_SPACE_RATIO 2424 0.95 0.23 1.30 117 TVD_RCVD_IP 2377 1.33 1.44 1.27 118 XM_SendGrid 2328 1.19 1.07 1.25 119 TR_Symld_Words 2302 1.21 1.15 1.23 120 XM_B_Unsub2 2271 1.82 3.05 1.22 121 T_XMDrugObfuBody_08 2268 1.65 2.53 1.22 122 BOTNET 2254 4.03 9.75 1.21 123 T_XMDrugObfuBody_14 2252 2.90 6.35 1.21 124 DKIM_INVALID 2225 2.19 4.21 1.19 125 URI_NOVOWEL 2220 1.40 1.82 1.19 126 XMBody_95 2158 0.81 0.10 1.16 127 XM_B_URI_Unicode 2152 1.52 2.26 1.15 128 RCVD_IN_IADB_VOUCHED 2076 0.92 0.52 1.11 129 URI_HEX 2067 1.25 1.53 1.11 130 XM_B_Investor 2034 2.36 4.92 1.09 131 XMGappySubj_02 1985 0.74 0.08 1.06 132 T_XMDrugObfuBody_00 1932 1.09 1.21 1.04 133 XM_GoogleGroups 1926 1.01 0.98 1.03 134 TO_IN_SUBJ 1905 0.70 0.06 1.02 135 URI_OPTOUT_3LD 1891 0.72 0.12 1.01 136 XM_B_COPY_HTML 1828 1.10 1.35 0.98 137 XM_H_PHPMailer 1818 0.81 0.48 0.98 138 XMBdyGiftCard01 1800 0.95 0.92 0.97 139 XM_SPF_SoftFail 1764 1.75 3.39 0.95 140 LOW_PRICE 1742 0.70 0.23 0.93 141 TR_XM_DK_SendGrid 1723 0.84 0.67 0.92 142 SUBJ_ALL_CAPS 1712 1.21 1.80 0.92 143 XM_UB50 1665 1.41 2.46 0.89 144 XMBSHREFv2 1663 0.71 0.34 0.89 145 RCVD_IN_IADB_OPTIN 1553 0.69 0.39 0.83 146 XM_OfRef6 1511 1.69 3.47 0.81 147 RELAYCOUNTRY_CA 1487 2.75 6.71 0.80 148 TooManyTo_003 1415 0.67 0.50 0.76 149 TR_XM_Base64_M1 1396 0.79 0.89 0.75 150 T_FILL_THIS_FORM_SHORT 1390 1.29 2.40 0.75 151 XM_ProductURIs 1374 1.02 1.59 0.74 152 XMPhish30 1370 1.18 2.07 0.73 153 RCVD_IN_BL_SPAMCOP_NET 1311 5.80 16.16 0.70 154 RELAYCOUNTRY_AU 1263 1.31 2.58 0.68 155 DKIM_ADSP_CUSTOM_MED 1262 0.74 0.88 0.68 156 T_XMHurry_00 1196 1.21 2.37 0.64 157 XM_B_SpammyWords4 1180 1.13 2.14 0.63 158 MPART_ALT_DIFF_COUNT 1154 1.04 1.89 0.62 159 TR_XM_GMP_MSPIKE_UNDO2 1140 0.52 0.32 0.61 160 TR_MetaPhish_Combo_01 1124 0.63 0.69 0.60 161 TooManyTo_004 1121 0.56 0.48 0.60 162 XMBody_106 1116 0.41 0.04 0.60 163 XMSubMetaI_00 1084 1.00 1.86 0.58 164 XM_H_Long_From02 1083 0.90 1.56 0.58 165 TR_XM_MSPIKECOMBO 1057 2.84 7.44 0.57 166 RCVD_IN_MSPIKE_BL 1057 2.84 7.44 0.57 167 XMGenDplmaNmb 1056 0.81 1.32 0.57 168 XM_B_Phish66 1015 0.82 1.37 0.54 169 TR_XM_SpammyWords2 1013 4.48 12.48 0.54 170 HTML_TEXT_INVISIBLE_STYLE 997 0.57 0.65 0.53 171 HTML_TAG_BALANCE_BODY 982 0.74 1.19 0.53 172 HTML_FONT_FACE_BAD 974 0.53 0.55 0.52 173 XMBody_17 970 1.22 2.65 0.52 174 TR_Mismatch_TLD_01 963 0.62 0.83 0.52 175 RCVD_IN_PBL 952 0.71 1.11 0.51 176 TooManyTo_005 952 0.49 0.46 0.51 177 THIS_AD 946 1.02 2.07 0.51 178 XM_URI_RBL 925 1.12 2.40 0.50 179 XM_B_DNDMA 903 0.93 1.82 0.48 180 XMPhish14 896 0.50 0.55 0.48 181 T_TooManySym_04 891 0.33 0.02 0.48 182 XMLngstWrd_00 850 0.40 0.29 0.46 183 URI_TRY_3LD 849 0.85 1.65 0.46 184 XMHTML_After_End 848 0.47 0.51 0.45 185 PLING_QUERY 843 0.69 1.16 0.45 186 FORGED_GMAIL_RCVD 830 0.50 0.62 0.45 187 HTTPS_HTTP_MISMATCH 826 0.59 0.89 0.44 188 XMSolicitRefs_0 815 0.52 0.68 0.44 189 XM_ShortIntro_01 805 0.49 0.61 0.43 190 RCVD_IN_MSPIKE_L3 789 1.74 4.42 0.42 191 XMNoVowels 787 0.36 0.25 0.42 192 XMSlimDrugH 785 0.57 0.87 0.42 193 HTML_IMAGE_ONLY_20 775 0.68 1.22 0.42 194 NML_ADSP_CUSTOM_MED 765 0.52 0.75 0.41 195 XM_S_SubURI 761 0.28 0.03 0.41 196 DKIM_ADSP_NXDOMAIN 742 0.65 1.15 0.40 197 XMLngstWrd_01 729 0.35 0.25 0.39 198 FONT_INVIS_MSGID 728 0.28 0.05 0.39 199 XM_RXBody 718 0.46 0.60 0.39 200 TM2_M_OBFU_COMMENT 699 0.65 1.20 0.37 ----------------------------------------------------------------------