Email: 266618 Autolearn: 0 AvgScore: 5.33 AvgScanTime: 1.24 sec Spam: 91240 Autolearn: 0 AvgScore: 13.78 AvgScanTime: 1.38 sec Ham: 175378 Autolearn: 0 AvgScore: 0.94 AvgScanTime: 1.17 sec Time Spent Running SA: 92.02 hours Time Spent Processing Spam: 34.90 hours Time Spent Processing Ham: 57.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 91116 99.33 99.86 99.05 2 HTML_MESSAGE 87850 87.99 96.28 83.68 3 DKIM_SIGNED 83848 81.87 91.90 76.65 4 XM_DK_Pass 79715 79.75 87.37 75.79 5 DKIM_VALID 79271 79.25 86.88 75.28 6 XM_B_Unicode 78001 77.00 85.49 72.59 7 RELAYCOUNTRY_US 74670 81.56 81.84 81.42 8 DCC_CHECK 70439 54.57 77.20 42.79 9 XMListUnsubscribeExists 63986 58.86 70.13 52.99 10 DKIM_VALID_AU 63101 67.19 69.16 66.17 11 XM_B_SpammyWords 62718 55.12 68.74 48.03 12 LOC_TINY_FONT_1 48364 43.28 53.01 38.22 13 XM_B_Unicode3 46625 49.46 51.10 48.61 14 XM_DK_Undo_02 41438 19.64 45.42 6.23 15 XM_B_SpammyWords2 36383 28.95 39.88 23.27 16 HTML_FONT_LOW_CONTRAST 34749 34.64 38.09 32.85 17 FVGT_m_MULTI_ODD 32526 30.54 35.65 27.89 18 BAYES_50 32342 52.75 35.45 61.76 19 BAYES_99 31439 14.97 34.46 4.83 20 TR_XM_DKIM_Undo 29818 12.65 32.68 2.23 21 DKIM_VALID_EF 28911 30.66 31.69 30.12 22 T_KAM_HTML_FONT_INVALID 27330 25.12 29.95 22.61 23 MIME_HTML_ONLY 24490 22.44 26.84 20.15 24 BAYES_999 23998 11.47 26.30 3.75 25 TR_DCC_Bayes_99 23164 10.00 25.39 1.99 26 TR_XM_DK_Unsub 22925 18.77 25.13 15.47 27 RCVD_IN_MSPIKE_H2 20874 18.54 22.88 16.29 28 XM_Multi_Part_URI 20806 18.62 22.80 16.45 29 DCC_CHECK_NEGATIVE 20748 45.37 22.74 57.14 30 XMSubLong 18895 22.54 20.71 23.49 31 UNPARSEABLE_RELAY 17583 15.56 19.27 13.63 32 XM_B_Unsub 17267 12.89 18.92 9.76 33 T_TM2_M_HEADER_IN_MSG 17201 22.05 18.85 23.72 34 TR_XM_BayesUnsub 16748 11.47 18.36 7.89 35 RELAYCOUNTRY_META 16379 8.00 17.95 2.83 36 TR_MAX_INTL_RELAY 15567 10.72 17.06 7.42 37 RCVD_IN_BL_SPAMCOP_NET 13608 5.65 14.91 0.83 38 XM_B_SpammyWords3 13299 10.22 14.58 7.95 39 TR_XM_SpammyRelay 12550 5.65 13.75 1.43 40 TR_XM_SpammyWords2 11287 4.54 12.37 0.46 41 RCVD_IN_MSPIKE_WL 10699 16.89 11.73 19.58 42 LOTS_OF_MONEY 10446 7.89 11.45 6.03 43 BOTNET 9437 4.22 10.34 1.04 44 BOTNET_IPINHOSTNAME 9362 6.08 10.26 3.90 45 BAYES_80 9329 6.59 10.22 4.70 46 TR_XM_UnparsRelay 9267 4.83 10.16 2.06 47 TR_XM_SpammyWords4 9156 6.24 10.04 4.26 48 FSL_BULK_SIG 8223 6.32 9.01 4.93 49 RCVD_IN_MSPIKE_BL 8024 3.46 8.79 0.68 50 TR_XM_MSPIKECOMBO 8022 3.45 8.79 0.68 51 XM_B_Phish_Phrases 7994 7.16 8.76 6.33 52 TR_XM_SPAMCOP 7984 3.11 8.75 0.18 53 BAYES_60 7956 7.95 8.72 7.55 54 XM_Evil_Numbers_Gen 7233 9.77 7.93 10.72 55 UNTRUSTED_Relay 7129 3.76 7.81 1.65 56 HTML_IMAGE_RATIO_02 6942 6.38 7.61 5.73 57 RELAYCOUNTRY_CA 6751 3.05 7.40 0.78 58 XM_H_GMP 6424 6.97 7.04 6.94 59 MPART_ALT_DIFF 5948 5.91 6.52 5.60 60 TR_XM_SpammyWords3 5904 2.43 6.47 0.33 61 BAYES_95 5876 3.99 6.44 2.72 62 XMSubMetaSx_00 5775 4.38 6.33 3.37 63 T_XMDrugObfuBody_14 5270 2.79 5.78 1.24 64 XM_UncommonTLD01 5165 5.09 5.66 4.79 65 XM_H_Long_From01 4824 5.03 5.29 4.90 66 MIME_HTML_MOSTLY 4671 4.35 5.12 3.94 67 DKIM_INVALID 4577 2.62 5.02 1.37 68 TR_XM_PhishingBody 4383 2.84 4.80 1.82 69 XM_Body_Dirty_Words 4360 3.02 4.78 2.11 70 XM_B_SpammyTLD 4237 3.65 4.64 3.13 71 RCVD_IN_MSPIKE_H3 4190 7.10 4.59 8.40 72 LotsOfNums_01 4170 7.13 4.57 8.46 73 XM_B_Investor 4070 2.40 4.46 1.32 74 XM_B_PhoneNumber 4035 6.10 4.42 6.97 75 XMStrtUSub 3724 5.40 4.08 6.09 76 RCVD_IN_MSPIKE_H5 3711 5.89 4.07 6.84 77 XM_CamelCaseFrm001 3571 2.70 3.91 2.07 78 RCVD_IN_MSPIKE_L3 3569 1.69 3.91 0.53 79 TM2_M_VERY_LONG_WORD 3531 2.41 3.87 1.65 80 XMSexyCombo_05 3435 2.13 3.76 1.29 81 HTML_IMAGE_RATIO_04 3385 4.15 3.71 4.37 82 TR_XM_NoHeaderRelay 3298 1.36 3.61 0.18 83 TR_XM_SpammyWords5 3213 2.17 3.52 1.47 84 T_XMHurry_00 3189 1.64 3.50 0.68 85 XM_OfRef6 3103 1.71 3.40 0.84 86 XM_UB50 3098 1.81 3.40 0.98 87 HTML_IMAGE_RATIO_06 2962 3.38 3.25 3.45 88 T_XMDrugObfuBody_08 2947 2.15 3.23 1.59 89 HTML_IMAGE_RATIO_08 2919 2.59 3.20 2.28 90 RCVD_IN_MSPIKE_H4 2798 3.91 3.07 4.34 91 XM_B_Unsub2 2764 1.88 3.03 1.29 92 TR_XM_MSPIKECOMBO2 2642 1.01 2.90 0.03 93 RCVD_IN_PSBL 2536 0.97 2.78 0.03 94 MIME_HTML_ONLY_MULTI 2481 2.72 2.72 2.72 95 RCVD_IN_MSPIKE_L4 2462 1.00 2.70 0.11 96 T_FILL_THIS_FORM_SHORT 2433 1.46 2.67 0.84 97 RCVD_IN_VALIDITY_RPBL 2344 0.90 2.57 0.03 98 XM_SPF_SoftFail 2337 1.51 2.56 0.96 99 RELAYCOUNTRY_AU 2334 1.20 2.56 0.49 100 XM_URI_RBL 2266 1.06 2.48 0.32 101 XMNumbers 2255 3.56 2.47 4.13 102 XMBody_17 2201 1.21 2.41 0.59 103 USER_IN_DEF_DKIM_WL 2201 13.13 2.41 18.70 104 TR_XM_INV_DKIM 2156 0.82 2.36 0.01 105 TooManyTo_001 2146 4.16 2.35 5.09 106 SUBJ_ALL_CAPS 2133 1.58 2.34 1.18 107 RCVD_IN_VALIDITY_SAFE 2104 4.75 2.31 6.02 108 XM_B_SpammyWords4 2057 1.74 2.25 1.47 109 XMStockSpam_06 2055 2.00 2.25 1.87 110 FROM_EXCESS_BASE64 2039 1.71 2.23 1.44 111 DKIM_ADSP_NXDOMAIN 2023 1.06 2.22 0.45 112 RCVD_IN_MSPIKE_L5 1991 0.77 2.18 0.03 113 XMPhish30 1958 1.28 2.15 0.82 114 KHOP_HELO_FCRDNS 1949 2.53 2.14 2.74 115 BOTNET_NORDNS 1936 0.73 2.12 0.01 116 T_TooManySym_01 1926 5.77 2.11 7.67 117 TM2_M_URI_OPT_OUT 1833 1.92 2.01 1.87 118 TR_LOTS_OF_MONEY3 1817 0.94 1.99 0.39 119 RELAYCOUNTRY_FR 1810 0.84 1.98 0.25 120 XMDiploma_00 1762 1.70 1.93 1.58 121 SpammyFromTLD_01 1726 0.88 1.89 0.35 122 XM_B_URI_Unicode 1692 1.52 1.85 1.35 123 T_REMOTE_IMAGE 1688 2.77 1.85 3.25 124 BAYES_40 1659 3.93 1.82 5.03 125 XM_B_DNDMA 1627 1.06 1.78 0.68 126 MAILING_LIST_MULTI 1591 2.16 1.74 2.38 127 URI_NOVOWEL 1584 1.36 1.74 1.16 128 BAYES_20 1583 2.67 1.73 3.16 129 XMBrknScrpt_02 1556 1.48 1.71 1.36 130 XM_B_COPY_HTML 1542 1.07 1.69 0.75 131 XM_ProductURIs 1483 0.87 1.63 0.47 132 XM_UB99 1453 0.55 1.59 0.00 133 TR_XM_MaxSPIKE 1442 0.56 1.58 0.02 134 MPART_ALT_DIFF_COUNT 1429 0.99 1.57 0.69 135 SpammyFromTLD_02 1419 0.72 1.56 0.29 136 XM_H_Long_From02 1385 1.00 1.52 0.73 137 T_XMDrugObfuBody_00 1377 1.14 1.51 0.94 138 DIET_1 1340 0.80 1.47 0.45 139 TR_XM_InvalidRelay 1291 0.49 1.41 0.01 140 HTML_MIME_NO_HTML_TAG 1279 1.63 1.40 1.75 141 RCVD_IN_VALIDITY_CERTIFIED 1243 3.60 1.36 4.77 142 XM_B_Phish66 1235 0.73 1.35 0.40 143 RDNS_DYNAMIC 1226 0.62 1.34 0.24 144 TM2_M_OBFU_COMMENT 1223 0.83 1.34 0.56 145 XMBody_78 1187 0.68 1.30 0.36 146 XMBdyGiftCard01 1173 1.18 1.29 1.13 147 HTML_IMAGE_ONLY_20 1164 0.78 1.28 0.53 148 TR_XM_GMP_BULK_SIG 1162 0.47 1.27 0.06 149 XM_DK_Undo_01 1157 1.46 1.27 1.56 150 SHOPIFY_IMG_NOT_RCVD_SFY 1142 0.61 1.25 0.28 151 MIME_QP_LONG_LINE 1135 2.67 1.24 3.41 152 HTML_TAG_BALANCE_BODY 1126 0.78 1.23 0.55 153 XMSolicitRefs_0 1125 0.75 1.23 0.51 154 TR_XM_FormFill 1115 0.43 1.22 0.02 155 THIS_AD 1101 0.61 1.21 0.31 156 URI_HEX 1098 1.27 1.20 1.31 157 TVD_RCVD_IP 1074 1.41 1.18 1.53 158 XM_UB60 1055 0.45 1.16 0.08 159 ALL_TRUSTED 1043 10.59 1.14 15.50 160 TR_XM_RelayPhish 1038 0.44 1.14 0.08 161 XM_B_SEO 1036 0.50 1.14 0.16 162 XM_SendGrid 1026 1.38 1.12 1.51 163 GOOG_STO_NOIMG_HTML 998 0.38 1.09 0.01 164 XMClaimOffer 991 0.63 1.09 0.40 165 TR_XM_PHPForged 991 0.58 1.09 0.32 166 HELO_DYNAMIC_SPLIT_IP 990 0.37 1.09 0.00 167 TR_XM_PHPDW 982 0.59 1.08 0.34 168 TR_XM_FormFill2 976 0.58 1.07 0.32 169 XM_UB999 972 0.37 1.07 0.00 170 XMGenDplmaNmb 970 0.90 1.06 0.81 171 TR_Symld_Words 953 1.15 1.04 1.21 172 XM_H_PHPOS 951 0.56 1.04 0.31 173 TR_Caps_n_Bayes_99 939 0.36 1.03 0.01 174 XMReplyNow 935 0.50 1.02 0.23 175 NORDNS_LOW_CONTRAST 918 0.36 1.01 0.03 176 XMSubMetaSSx_00 894 0.47 0.98 0.21 177 XM_HighProb1 889 0.34 0.97 0.01 178 RELAYCOUNTRY_RU 889 0.34 0.97 0.02 179 URI_TRY_3LD 877 0.72 0.96 0.60 180 RCVD_IN_IADB_LISTED 875 1.72 0.96 2.12 181 TR_XM_Base64_M1 871 0.63 0.95 0.46 182 XM_UB80 870 0.34 0.95 0.02 183 PLING_QUERY 853 0.68 0.93 0.55 184 HTML_TEXT_INVISIBLE_STYLE 844 0.57 0.93 0.39 185 TR_LOTS_OF_MONEY2 842 0.64 0.92 0.49 186 T_MONEY_PERCENT 842 0.64 0.92 0.49 187 XM_B_COVIDMETA 832 0.35 0.91 0.06 188 MultiRelay_CC 829 0.36 0.91 0.08 189 DKIM_ADSP_CUSTOM_MED 823 0.78 0.90 0.72 190 SUBJ_DOLLARS 816 0.43 0.89 0.19 191 TR_Mismatch_TLD_01 807 0.60 0.88 0.46 192 XMSexyCombo_01 793 0.43 0.87 0.21 193 TR_XM_Base64_L1 774 0.37 0.85 0.12 194 ANY_BOUNCE_MESSAGE 762 5.17 0.84 7.43 195 TR_XM_SEO4 749 0.34 0.82 0.09 196 XMSubMetaI_00 746 0.50 0.82 0.34 197 BAYES_05 743 1.46 0.81 1.80 198 BOUNCE_MESSAGE 737 5.16 0.81 7.43 199 HDRS_MISSP 734 0.28 0.80 0.01 200 T_Symld_Words_02 717 0.43 0.79 0.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 173717 99.33 99.86 99.05 2 HTML_MESSAGE 146751 87.99 96.28 83.68 3 RELAYCOUNTRY_US 142792 81.56 81.84 81.42 4 DKIM_SIGNED 134427 81.87 91.90 76.65 5 XM_DK_Pass 132920 79.75 87.37 75.79 6 DKIM_VALID 132022 79.25 86.88 75.28 7 XM_B_Unicode 127303 77.00 85.49 72.59 8 DKIM_VALID_AU 116052 67.19 69.16 66.17 9 BAYES_50 108311 52.75 35.45 61.76 10 DCC_CHECK_NEGATIVE 100214 45.37 22.74 57.14 11 XMListUnsubscribeExists 92936 58.86 70.13 52.99 12 XM_B_Unicode3 85257 49.46 51.10 48.61 13 XM_B_SpammyWords 84229 55.12 68.74 48.03 14 DCC_CHECK 75044 54.57 77.20 42.79 15 LOC_TINY_FONT_1 67038 43.28 53.01 38.22 16 HTML_FONT_LOW_CONTRAST 57611 34.64 38.09 32.85 17 DKIM_VALID_EF 52827 30.66 31.69 30.12 18 FVGT_m_MULTI_ODD 48910 30.54 35.65 27.89 19 T_TM2_M_HEADER_IN_MSG 41594 22.05 18.85 23.72 20 XMSubLong 41197 22.54 20.71 23.49 21 XM_B_SpammyWords2 40815 28.95 39.88 23.27 22 T_KAM_HTML_FONT_INVALID 39651 25.12 29.95 22.61 23 MIME_HTML_ONLY 35337 22.44 26.84 20.15 24 RCVD_IN_MSPIKE_WL 34343 16.89 11.73 19.58 25 USER_IN_DEF_DKIM_WL 32799 13.13 2.41 18.70 26 XM_Multi_Part_URI 28850 18.62 22.80 16.45 27 RCVD_IN_MSPIKE_H2 28568 18.54 22.88 16.29 28 ALL_TRUSTED 27180 10.59 1.14 15.50 29 TR_XM_DK_Unsub 27130 18.77 25.13 15.47 30 UNPARSEABLE_RELAY 23896 15.56 19.27 13.63 31 XM_Evil_Numbers_Gen 18807 9.77 7.93 10.72 32 XM_B_Unsub 17111 12.89 18.92 9.76 33 XM_DKIMWhitelistDomains 15456 5.81 0.05 8.81 34 LotsOfNums_01 14838 7.13 4.57 8.46 35 BAYES_00 14817 5.67 0.34 8.45 36 RCVD_IN_MSPIKE_H3 14730 7.10 4.59 8.40 37 XM_B_SpammyWords3 13950 10.22 14.58 7.95 38 TR_XM_BayesUnsub 13841 11.47 18.36 7.89 39 T_TooManySym_01 13449 5.77 2.11 7.67 40 BAYES_60 13234 7.95 8.72 7.55 41 BOUNCE_MESSAGE 13033 5.16 0.81 7.43 42 ANY_BOUNCE_MESSAGE 13033 5.17 0.84 7.43 43 TR_MAX_INTL_RELAY 13021 10.72 17.06 7.42 44 TR_XM_DK_Bayes 12403 4.74 0.24 7.07 45 TR_XM_DK_Bayes1 12302 4.70 0.24 7.01 46 XM_B_PhoneNumber 12227 6.10 4.42 6.97 47 XM_H_GMP 12168 6.97 7.04 6.94 48 RCVD_IN_MSPIKE_H5 11997 5.89 4.07 6.84 49 XM_B_Phish_Phrases 11106 7.16 8.76 6.33 50 XM_DK_Undo_02 10932 19.64 45.42 6.23 51 TR_XM_DK_Bayes2 10877 4.13 0.15 6.20 52 XMStrtUSub 10677 5.40 4.08 6.09 53 LOTS_OF_MONEY 10580 7.89 11.45 6.03 54 RCVD_IN_VALIDITY_SAFE 10565 4.75 2.31 6.02 55 HTML_IMAGE_RATIO_02 10056 6.38 7.61 5.73 56 MPART_ALT_DIFF 9821 5.91 6.52 5.60 57 TooManyTo_001 8933 4.16 2.35 5.09 58 BAYES_40 8823 3.93 1.82 5.03 59 FSL_BULK_SIG 8638 6.32 9.01 4.93 60 XM_H_Long_From01 8595 5.03 5.29 4.90 61 BAYES_99 8474 14.97 34.46 4.83 62 XM_UncommonTLD01 8393 5.09 5.66 4.79 63 RCVD_IN_VALIDITY_CERTIFIED 8360 3.60 1.36 4.77 64 BAYES_80 8248 6.59 10.22 4.70 65 HTML_IMAGE_RATIO_04 7671 4.15 3.71 4.37 66 RCVD_IN_MSPIKE_H4 7616 3.91 3.07 4.34 67 T_TooManySym_02 7599 3.02 0.50 4.33 68 TR_XM_SpammyWords4 7478 6.24 10.04 4.26 69 XMNumbers 7241 3.56 2.47 4.13 70 MIME_HTML_MOSTLY 6917 4.35 5.12 3.94 71 BOTNET_IPINHOSTNAME 6846 6.08 10.26 3.90 72 TO_MALFORMED 6737 2.53 0.02 3.84 73 INVALID_MSGID 6661 2.64 0.42 3.80 74 BAYES_999 6572 11.47 26.30 3.75 75 HTML_IMAGE_RATIO_06 6054 3.38 3.25 3.45 76 MIME_QP_LONG_LINE 5986 2.67 1.24 3.41 77 XMSubMetaSx_00 5913 4.38 6.33 3.37 78 T_REMOTE_IMAGE 5696 2.77 1.85 3.25 79 BAYES_20 5544 2.67 1.73 3.16 80 XM_B_SpammyTLD 5483 3.65 4.64 3.13 81 RELAYCOUNTRY_META 4962 8.00 17.95 2.83 82 KHOP_HELO_FCRDNS 4809 2.53 2.14 2.74 83 T_TVD_MIME_NO_HEADERS 4779 1.81 0.04 2.72 84 MIME_HTML_ONLY_MULTI 4773 2.72 2.72 2.72 85 BAYES_95 4768 3.99 6.44 2.72 86 XM_PDF 4657 1.90 0.45 2.66 87 MAILING_LIST_MULTI 4169 2.16 1.74 2.38 88 HTML_IMAGE_RATIO_08 3999 2.59 3.20 2.28 89 TR_XM_DKIM_Undo 3918 12.65 32.68 2.23 90 RCVD_IN_IADB_LISTED 3720 1.72 0.96 2.12 91 XM_Body_Dirty_Words 3696 3.02 4.78 2.11 92 XM_CamelCaseFrm001 3638 2.70 3.91 2.07 93 TR_XM_UnparsRelay 3619 4.83 10.16 2.06 94 TR_DCC_Bayes_99 3497 10.00 25.39 1.99 95 RCVD_IN_IADB_SPF 3379 1.53 0.77 1.93 96 XMStockSpam_06 3286 2.00 2.25 1.87 97 TM2_M_URI_OPT_OUT 3283 1.92 2.01 1.87 98 T_TooManySym_03 3244 1.28 0.17 1.85 99 TR_XM_PhishingBody 3197 2.84 4.80 1.82 100 BAYES_05 3157 1.46 0.81 1.80 101 RCVD_IN_IADB_SENDERID 3094 1.39 0.68 1.76 102 HTML_MIME_NO_HTML_TAG 3076 1.63 1.40 1.75 103 TVD_SPACE_RATIO 3022 1.18 0.15 1.72 104 RCVD_IN_IADB_DK 3011 1.36 0.69 1.72 105 TM2_M_VERY_LONG_WORD 2891 2.41 3.87 1.65 106 UNTRUSTED_Relay 2887 3.76 7.81 1.65 107 T_XMDrugObfuBody_08 2796 2.15 3.23 1.59 108 XMDiploma_00 2777 1.70 1.93 1.58 109 IN_HORDE_ADDRESS_BOOK 2756 1.06 0.09 1.57 110 XM_DK_Undo_01 2743 1.46 1.27 1.56 111 TVD_RCVD_IP 2692 1.41 1.18 1.53 112 XM_SendGrid 2647 1.38 1.12 1.51 113 TR_XM_SpammyWords5 2575 2.17 3.52 1.47 114 XM_B_SpammyWords4 2574 1.74 2.25 1.47 115 TooManyTo_002 2564 1.12 0.46 1.46 116 FROM_EXCESS_BASE64 2521 1.71 2.23 1.44 117 TR_XM_SpammyRelay 2512 5.65 13.75 1.43 118 DKIM_INVALID 2405 2.62 5.02 1.37 119 RCVD_IN_IADB_VOUCHED 2390 1.13 0.67 1.36 120 XMBrknScrpt_02 2385 1.48 1.71 1.36 121 XM_B_URI_Unicode 2370 1.52 1.85 1.35 122 XM_B_Investor 2320 2.40 4.46 1.32 123 URI_HEX 2293 1.27 1.20 1.31 124 XMGappySubj_01 2279 0.90 0.14 1.30 125 XM_B_Unsub2 2260 1.88 3.03 1.29 126 XMSexyCombo_05 2255 2.13 3.76 1.29 127 T_XMDrugObfuBody_14 2169 2.79 5.78 1.24 128 XMBody_95 2162 0.88 0.20 1.23 129 TR_XM_DK_SendGrid 2137 1.06 0.75 1.22 130 TR_Symld_Words 2126 1.15 1.04 1.21 131 SUBJ_ALL_CAPS 2072 1.58 2.34 1.18 132 URI_NOVOWEL 2043 1.36 1.74 1.16 133 XMBSHREFv2 1991 0.84 0.28 1.14 134 XMBdyGiftCard01 1986 1.18 1.29 1.13 135 XMGappySubj_02 1854 0.70 0.03 1.06 136 BOTNET 1824 4.22 10.34 1.04 137 XM_GoogleGroups 1773 0.90 0.69 1.01 138 XM_UB50 1723 1.81 3.40 0.98 139 RCVD_IN_IADB_OPTIN 1700 0.80 0.46 0.97 140 XM_SPF_SoftFail 1676 1.51 2.56 0.96 141 T_XMDrugObfuBody_00 1652 1.14 1.51 0.94 142 TR_MetaPhish_Combo_01 1595 0.85 0.74 0.91 143 HOSTED_IMG_DIRECT_MX 1592 0.66 0.20 0.91 144 TooManyTo_003 1560 0.72 0.41 0.89 145 XM_H_PHPMailer 1519 0.72 0.45 0.87 146 T_FILL_THIS_FORM_SHORT 1472 1.46 2.67 0.84 147 XM_OfRef6 1467 1.71 3.40 0.84 148 TM2_M_BODY_EMPTY 1457 0.57 0.06 0.83 149 RCVD_IN_BL_SPAMCOP_NET 1454 5.65 14.91 0.83 150 XMPhish30 1444 1.28 2.15 0.82 151 XMGenDplmaNmb 1419 0.90 1.06 0.81 152 RELAYCOUNTRY_CA 1370 3.05 7.40 0.78 153 XM_B_COPY_HTML 1319 1.07 1.69 0.75 154 XM_H_Long_From02 1278 1.00 1.52 0.73 155 TO_IN_SUBJ 1272 0.49 0.05 0.73 156 URI_OPTOUT_3LD 1272 0.50 0.06 0.73 157 DKIM_ADSP_CUSTOM_MED 1259 0.78 0.90 0.72 158 TR_XM_GMP_MSPIKE_UNDO2 1251 0.55 0.23 0.71 159 TooManyTo_004 1244 0.59 0.36 0.71 160 MPART_ALT_DIFF_COUNT 1209 0.99 1.57 0.69 161 T_XMHurry_00 1196 1.64 3.50 0.68 162 HTML_IMAGE_ONLY_12 1196 0.50 0.14 0.68 163 XM_B_DNDMA 1192 1.06 1.78 0.68 164 RCVD_IN_MSPIKE_BL 1189 3.46 8.79 0.68 165 TR_XM_MSPIKECOMBO 1186 3.45 8.79 0.68 166 XMBody_106 1146 0.49 0.17 0.65 167 HTML_IMAGE_ONLY_16 1133 0.46 0.11 0.65 168 TooManyTo_005 1072 0.52 0.33 0.61 169 XMEmptyBody_01 1054 0.40 0.03 0.60 170 URI_TRY_3LD 1049 0.72 0.96 0.60 171 XMBody_17 1027 1.21 2.41 0.59 172 TM2_M_OBFU_COMMENT 983 0.83 1.34 0.56 173 TRACKER_ID 966 0.56 0.58 0.55 174 PLING_QUERY 963 0.68 0.93 0.55 175 HTML_TAG_BALANCE_BODY 962 0.78 1.23 0.55 176 HTTPS_HTTP_MISMATCH 937 0.59 0.70 0.53 177 RCVD_IN_MSPIKE_L3 937 1.69 3.91 0.53 178 HTML_IMAGE_ONLY_20 926 0.78 1.28 0.53 179 XMSlimDrugH 901 0.54 0.60 0.51 180 XMSolicitRefs_0 886 0.75 1.23 0.51 181 XMLngstWrd_00 877 0.42 0.27 0.50 182 XMSubMetaSxObfu_02 874 0.49 0.47 0.50 183 T_TooManySym_04 865 0.34 0.04 0.49 184 RELAYCOUNTRY_AU 864 1.20 2.56 0.49 185 T_MONEY_PERCENT 862 0.64 0.92 0.49 186 TR_LOTS_OF_MONEY2 862 0.64 0.92 0.49 187 XM_ProductURIs 832 0.87 1.63 0.47 188 T_OBFU_PDF_ATTACH 816 0.32 0.03 0.47 189 TR_XM_Base64_M1 810 0.63 0.95 0.46 190 TR_XM_SpammyWords2 810 4.54 12.37 0.46 191 XMNoVowels 807 0.52 0.65 0.46 192 TR_Mismatch_TLD_01 801 0.60 0.88 0.46 193 DKIM_ADSP_NXDOMAIN 797 1.06 2.22 0.45 194 DIET_1 796 0.80 1.47 0.45 195 XMHTML_After_End 794 0.55 0.75 0.45 196 NML_ADSP_CUSTOM_MED 790 0.55 0.73 0.45 197 XM_S_SubURI 785 0.30 0.02 0.45 198 XMSubMetaSxObfu_03 744 0.45 0.51 0.42 199 FORGED_GMAIL_RCVD 736 0.51 0.69 0.42 200 XMLngstWrd_01 722 0.35 0.24 0.41 ----------------------------------------------------------------------