Email: 281359 Autolearn: 0 AvgScore: 5.54 AvgScanTime: 1.31 sec Spam: 98430 Autolearn: 0 AvgScore: 14.04 AvgScanTime: 1.46 sec Ham: 182929 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.22 sec Time Spent Running SA: 102.16 hours Time Spent Processing Spam: 39.93 hours Time Spent Processing Ham: 62.23 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 98327 99.78 99.90 99.72 2 HTML_MESSAGE 94958 88.62 96.47 84.39 3 DKIM_SIGNED 91333 82.22 92.79 76.53 4 XM_DK_Pass 84352 79.16 85.70 75.63 5 DKIM_VALID 83874 78.68 85.21 75.17 6 XM_B_Unicode 82729 77.40 84.05 73.82 7 RELAYCOUNTRY_US 80035 81.11 81.31 80.99 8 DCC_CHECK 76594 55.07 77.82 42.83 9 XM_B_SpammyWords 69180 55.47 70.28 47.50 10 XMListUnsubscribeExists 68368 60.25 69.46 55.30 11 DKIM_VALID_AU 66456 66.72 67.52 66.28 12 LOC_TINY_FONT_1 52304 44.99 53.14 40.60 13 XM_B_Unicode3 50212 49.42 51.01 48.57 14 XM_DK_Undo_02 42712 19.00 43.39 5.88 15 HTML_FONT_LOW_CONTRAST 40509 37.25 41.16 35.15 16 XM_B_SpammyWords2 39823 29.11 40.46 23.01 17 BAYES_50 37193 54.04 37.79 62.79 18 FVGT_m_MULTI_ODD 36541 31.06 37.12 27.80 19 BAYES_99 31345 13.99 31.84 4.39 20 DKIM_VALID_EF 31228 30.51 31.73 29.85 21 TR_XM_DKIM_Undo 30028 12.21 30.51 2.36 22 T_KAM_HTML_FONT_INVALID 26592 24.04 27.02 22.43 23 TR_XM_DK_Unsub 24860 19.48 25.26 16.37 24 XM_Multi_Part_URI 24806 19.85 25.20 16.97 25 MIME_HTML_ONLY 24753 22.23 25.15 20.67 26 BAYES_999 23794 10.61 24.17 3.32 27 TR_DCC_Bayes_99 22876 9.28 23.24 1.77 28 RCVD_IN_MSPIKE_H2 22173 17.42 22.53 14.67 29 DCC_CHECK_NEGATIVE 21735 44.81 22.08 57.04 30 XMSubLong 21312 22.36 21.65 22.73 31 XM_B_Unsub 21084 13.62 21.42 9.42 32 RELAYCOUNTRY_META 20974 9.57 21.31 3.26 33 TR_XM_BayesUnsub 20499 11.97 20.83 7.20 34 T_TM2_M_HEADER_IN_MSG 18368 21.01 18.66 22.27 35 UNPARSEABLE_RELAY 18009 15.06 18.30 13.32 36 RCVD_IN_BL_SPAMCOP_NET 17714 6.76 18.00 0.72 37 TR_MAX_INTL_RELAY 16784 10.53 17.05 7.03 38 TR_XM_SpammyRelay 14502 6.45 14.73 1.99 39 XM_B_SpammyWords3 13517 10.34 13.73 8.52 40 RCVD_IN_MSPIKE_WL 12685 17.60 12.89 20.14 41 BOTNET 12457 5.29 12.66 1.32 42 TR_XM_SpammyWords2 11979 4.50 12.17 0.38 43 LOTS_OF_MONEY 11426 8.28 11.61 6.49 44 FSL_BULK_SIG 10860 6.70 11.03 4.36 45 BAYES_80 10172 6.31 10.33 4.14 46 TR_XM_SpammyWords4 10104 6.34 10.27 4.22 47 BOTNET_IPINHOSTNAME 9782 6.15 9.94 4.12 48 TR_XM_UnparsRelay 9637 4.75 9.79 2.03 49 BAYES_60 9517 8.47 9.67 7.82 50 MPART_ALT_DIFF 9185 6.90 9.33 5.60 51 UNTRUSTED_Relay 8351 4.18 8.48 1.86 52 XM_Evil_Numbers_Gen 8327 10.46 8.46 11.54 53 TR_XM_SPAMCOP 8238 3.09 8.37 0.24 54 RCVD_IN_MSPIKE_BL 7563 3.26 7.68 0.88 55 TR_XM_MSPIKECOMBO 7556 3.26 7.68 0.88 56 XMSubMetaSx_00 7515 4.88 7.63 3.40 57 DKIM_INVALID 7459 3.54 7.58 1.37 58 XMStrtUSub 7123 6.53 7.24 6.14 59 HTML_IMAGE_RATIO_02 7027 6.15 7.14 5.61 60 TR_XM_NoHeaderRelay 6666 2.45 6.77 0.12 61 XM_B_Phish_Phrases 6663 5.77 6.77 5.24 62 XM_H_GMP 6521 5.84 6.63 5.42 63 XM_Body_Dirty_Words 6478 3.93 6.58 2.50 64 RELAYCOUNTRY_CA 6374 2.88 6.48 0.95 65 BAYES_95 6086 4.04 6.18 2.88 66 T_XMDrugObfuBody_14 5877 3.05 5.97 1.47 67 XM_UncommonTLD01 5785 5.07 5.88 4.63 68 RCVD_IN_MSPIKE_H3 5649 7.55 5.74 8.52 69 TR_XM_SpammyWords3 5308 2.12 5.39 0.35 70 XM_H_Long_From01 5090 5.29 5.17 5.36 71 HTML_IMAGE_RATIO_04 5080 4.43 5.16 4.04 72 XM_B_SpammyTLD 5028 3.73 5.11 2.99 73 MIME_HTML_MOSTLY 4971 3.81 5.05 3.14 74 LotsOfNums_01 4484 6.31 4.56 7.26 75 TR_XM_PhishingBody 4263 2.67 4.33 1.78 76 XM_CamelCaseFrm001 4193 3.20 4.26 2.64 77 RCVD_IN_MSPIKE_L3 4090 1.92 4.16 0.72 78 T_TooManySym_01 4041 6.45 4.11 7.71 79 XM_B_PhoneNumber 3909 5.45 3.97 6.25 80 XM_B_Investor 3860 2.12 3.92 1.14 81 RCVD_IN_MSPIKE_H5 3840 5.83 3.90 6.87 82 DKIM_ADSP_NXDOMAIN 3781 1.61 3.84 0.41 83 XM_OfRef6 3761 1.93 3.82 0.91 84 XMSexyCombo_05 3733 2.09 3.79 1.18 85 TM2_M_VERY_LONG_WORD 3618 2.27 3.68 1.51 86 USER_IN_DEF_DKIM_WL 3594 13.51 3.65 18.81 87 XMStockSpam_06 3219 2.15 3.27 1.55 88 RCVD_IN_MSPIKE_H4 3196 4.22 3.25 4.75 89 XM_UB50 3132 1.90 3.18 1.20 90 BOTNET_NORDNS 3131 1.13 3.18 0.03 91 TR_XM_SpammyWords5 3060 2.06 3.11 1.49 92 RELAYCOUNTRY_NZ 2997 1.07 3.04 0.00 93 XM_H_DKIM_GOOG 2973 1.06 3.02 0.01 94 XMDiploma_00 2954 1.99 3.00 1.44 95 RCVD_IN_VALIDITY_RPBL 2811 1.02 2.86 0.03 96 XM_SPF_SoftFail 2768 1.64 2.81 1.01 97 RELAYCOUNTRY_AU 2758 1.41 2.80 0.66 98 XMNumbers 2726 3.91 2.77 4.52 99 T_XMHurry_00 2711 1.52 2.75 0.86 100 T_FILL_THIS_FORM_SHORT 2677 1.49 2.72 0.82 101 XM_URI_RBL 2667 1.23 2.71 0.43 102 TooManyTo_001 2659 4.30 2.70 5.16 103 T_XMDrugObfuBody_08 2585 1.77 2.63 1.30 104 MIME_QP_LONG_LINE 2584 3.06 2.63 3.30 105 RCVD_IN_MSPIKE_L4 2543 0.99 2.58 0.14 106 MIME_HTML_ONLY_MULTI 2537 2.79 2.58 2.90 107 HTML_IMAGE_RATIO_06 2528 3.15 2.57 3.47 108 SCC_CANSPAM_2 2508 0.90 2.55 0.01 109 XMSexyCombo_01 2438 0.98 2.48 0.17 110 XMBody_17 2374 1.24 2.41 0.61 111 HTML_IMAGE_RATIO_08 2359 3.01 2.40 3.34 112 TM2_M_URI_OPT_OUT 2334 2.27 2.37 2.22 113 SpammyFromTLD_02 2284 0.93 2.32 0.18 114 XM_B_Unsub2 2263 1.58 2.30 1.20 115 RCVD_IN_VALIDITY_SAFE 2149 4.77 2.18 6.16 116 XMBrknScrpt_02 2149 2.10 2.18 2.06 117 MPART_ALT_DIFF_COUNT 2144 1.60 2.18 1.30 118 MultiRelay_CC 2122 0.80 2.16 0.08 119 TR_XM_MSPIKECOMBO2 2102 0.77 2.14 0.03 120 RELAYCOUNTRY_FR 2078 0.95 2.11 0.32 121 HK_RANDOM_REPLYTO 1996 0.80 2.03 0.14 122 TR_XM_INV_DKIM 1958 0.76 1.99 0.10 123 TR_LOTS_OF_MONEY3 1947 1.03 1.98 0.52 124 URI_NOVOWEL 1916 1.62 1.95 1.45 125 XM_B_URI_Unicode 1910 1.50 1.94 1.26 126 XM_B_SpammyWords4 1895 1.43 1.93 1.16 127 XMSubMetaSxObfu_03 1886 0.91 1.92 0.36 128 XM_UB99 1821 0.65 1.85 0.00 129 XMPhish30 1813 1.10 1.84 0.70 130 XMSubMetaSx_01 1749 0.65 1.78 0.05 131 XMSexyCombo_02 1687 0.60 1.71 0.01 132 XMSubMetaI_00 1671 0.97 1.70 0.57 133 TR_XM_InvalidRelay 1662 0.59 1.69 0.01 134 SUBJ_ALL_CAPS 1645 1.30 1.67 1.10 135 FROM_EXCESS_BASE64 1636 1.95 1.66 2.11 136 BAYES_40 1625 3.50 1.65 4.50 137 MAILING_LIST_MULTI 1615 1.89 1.64 2.02 138 NORDNS_LOW_CONTRAST 1590 0.57 1.62 0.01 139 XM_ProductURIs 1544 1.44 1.57 1.36 140 TR_XM_GMP_BULK_SIG 1538 0.60 1.56 0.08 141 RCVD_IN_PSBL 1531 0.56 1.56 0.02 142 XMBdyGiftCard01 1519 1.43 1.54 1.36 143 T_REMOTE_IMAGE 1499 2.46 1.52 2.96 144 XM_B_DNDMA 1495 1.21 1.52 1.05 145 RDNS_DYNAMIC 1474 0.68 1.50 0.23 146 XMGenDplmaNmb 1456 0.84 1.48 0.49 147 XM_H_Long_From02 1449 1.02 1.47 0.78 148 THIS_AD 1423 1.02 1.45 0.80 149 TM2_M_OBFU_COMMENT 1411 0.95 1.43 0.69 150 SHOPIFY_IMG_NOT_RCVD_SFY 1402 0.72 1.42 0.34 151 TR_XM_MaxSPIKE 1379 0.51 1.40 0.03 152 HTML_IMAGE_ONLY_16 1361 0.91 1.38 0.65 153 BAYES_20 1343 2.56 1.36 3.20 154 DIET_1 1333 0.78 1.35 0.46 155 RCVD_IN_VALIDITY_CERTIFIED 1315 3.74 1.34 5.03 156 TVD_RCVD_IP 1314 1.50 1.33 1.59 157 XM_B_COPY_HTML 1288 1.11 1.31 1.00 158 XM_UB60 1283 0.52 1.30 0.09 159 URI_HEX 1272 1.23 1.29 1.19 160 DKIM_ADSP_CUSTOM_MED 1259 0.87 1.28 0.66 161 HTML_TAG_BALANCE_BODY 1243 0.78 1.26 0.52 162 XM_DK_Undo_01 1227 1.41 1.25 1.50 163 ALL_TRUSTED 1212 10.48 1.23 15.46 164 TR_Mismatch_TLD_02 1204 0.50 1.22 0.12 165 T_XMDrugObfuBody_00 1199 1.18 1.22 1.15 166 HELO_DYNAMIC_SPLIT_IP 1198 0.43 1.22 0.01 167 XMBody_78 1183 0.63 1.20 0.32 168 TR_XM_FormFill 1157 0.41 1.18 0.00 169 NML_ADSP_CUSTOM_MED 1145 0.67 1.16 0.41 170 FORGED_GMAIL_RCVD 1132 0.69 1.15 0.44 171 XM_B_Phish66 1112 0.60 1.13 0.32 172 XM_UB999 1110 0.39 1.13 0.00 173 XM_UB80 1105 0.41 1.12 0.02 174 KHOP_HELO_FCRDNS 1100 1.91 1.12 2.34 175 XM_HighProb1 1080 0.39 1.10 0.01 176 SpammyFromTLD_01 1063 0.60 1.08 0.34 177 TR_MetaPhish_Combo_01 1045 0.89 1.06 0.80 178 XM_SendGrid 983 1.39 1.00 1.59 179 HTML_IMAGE_ONLY_24 972 0.48 0.99 0.21 180 XM_B_DynamicLink 967 0.36 0.98 0.02 181 XMNoVowels 951 0.75 0.97 0.63 182 URI_TRY_3LD 935 0.81 0.95 0.74 183 HTML_TEXT_INVISIBLE_STYLE 931 0.61 0.95 0.43 184 HTML_IMAGE_ONLY_20 926 0.60 0.94 0.41 185 RCVD_IN_MSPIKE_L5 923 0.35 0.94 0.03 186 FONT_INVIS_LONG_LINE 916 0.36 0.93 0.05 187 RCVD_IN_IADB_LISTED 892 1.69 0.91 2.11 188 TR_XM_RelayPhish 890 0.37 0.90 0.08 189 TM2_M_A_HREF_HREF 863 0.50 0.88 0.30 190 MISSING_HEADERS 849 0.44 0.86 0.21 191 T_Symld_Words_02 830 0.51 0.84 0.33 192 HTML_SHORT_LINK_IMG_2 828 0.31 0.84 0.03 193 BAYES_05 800 1.49 0.81 1.85 194 XM_UB95 798 0.29 0.81 0.01 195 HTML_MIME_NO_HTML_TAG 791 1.43 0.80 1.76 196 XMClaimOffer 767 0.57 0.78 0.46 197 TR_Symld_Words 765 1.22 0.78 1.47 198 SUBJ_DOLLARS 762 0.47 0.77 0.30 199 XM_RXBody 762 0.46 0.77 0.28 200 XM_DIRTYINTL 760 0.30 0.77 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 182423 99.78 99.90 99.72 2 HTML_MESSAGE 154373 88.62 96.47 84.39 3 RELAYCOUNTRY_US 148162 81.11 81.31 80.99 4 DKIM_SIGNED 140002 82.22 92.79 76.53 5 XM_DK_Pass 138358 79.16 85.70 75.63 6 DKIM_VALID 137503 78.68 85.21 75.17 7 XM_B_Unicode 135033 77.40 84.05 73.82 8 DKIM_VALID_AU 121253 66.72 67.52 66.28 9 BAYES_50 114858 54.04 37.79 62.79 10 DCC_CHECK_NEGATIVE 104340 44.81 22.08 57.04 11 XMListUnsubscribeExists 101157 60.25 69.46 55.30 12 XM_B_Unicode3 88843 49.42 51.01 48.57 13 XM_B_SpammyWords 86891 55.47 70.28 47.50 14 DCC_CHECK 78353 55.07 77.82 42.83 15 LOC_TINY_FONT_1 74270 44.99 53.14 40.60 16 HTML_FONT_LOW_CONTRAST 64297 37.25 41.16 35.15 17 DKIM_VALID_EF 54604 30.51 31.73 29.85 18 FVGT_m_MULTI_ODD 50849 31.06 37.12 27.80 19 XM_B_SpammyWords2 42084 29.11 40.46 23.01 20 XMSubLong 41586 22.36 21.65 22.73 21 T_KAM_HTML_FONT_INVALID 41040 24.04 27.02 22.43 22 T_TM2_M_HEADER_IN_MSG 40734 21.01 18.66 22.27 23 MIME_HTML_ONLY 37803 22.23 25.15 20.67 24 RCVD_IN_MSPIKE_WL 36834 17.60 12.89 20.14 25 USER_IN_DEF_DKIM_WL 34415 13.51 3.65 18.81 26 XM_Multi_Part_URI 31039 19.85 25.20 16.97 27 TR_XM_DK_Unsub 29953 19.48 25.26 16.37 28 ALL_TRUSTED 28282 10.48 1.23 15.46 29 RCVD_IN_MSPIKE_H2 26833 17.42 22.53 14.67 30 UNPARSEABLE_RELAY 24361 15.06 18.30 13.32 31 XM_Evil_Numbers_Gen 21105 10.46 8.46 11.54 32 XM_B_Unsub 17227 13.62 21.42 9.42 33 XM_DKIMWhitelistDomains 15933 5.67 0.01 8.71 34 RCVD_IN_MSPIKE_H3 15592 7.55 5.74 8.52 35 XM_B_SpammyWords3 15580 10.34 13.73 8.52 36 BAYES_00 15398 5.60 0.35 8.42 37 BAYES_60 14313 8.47 9.67 7.82 38 T_TooManySym_01 14098 6.45 4.11 7.71 39 LotsOfNums_01 13283 6.31 4.56 7.26 40 TR_XM_BayesUnsub 13172 11.97 20.83 7.20 41 TR_MAX_INTL_RELAY 12854 10.53 17.05 7.03 42 RCVD_IN_MSPIKE_H5 12559 5.83 3.90 6.87 43 ANY_BOUNCE_MESSAGE 12526 4.71 0.75 6.85 44 BOUNCE_MESSAGE 12524 4.71 0.75 6.85 45 TR_XM_DK_Bayes 12376 4.49 0.26 6.77 46 TR_XM_DK_Bayes1 12297 4.46 0.25 6.72 47 LOTS_OF_MONEY 11873 8.28 11.61 6.49 48 XM_B_PhoneNumber 11435 5.45 3.97 6.25 49 RCVD_IN_VALIDITY_SAFE 11267 4.77 2.18 6.16 50 XMStrtUSub 11240 6.53 7.24 6.14 51 TR_XM_DK_Bayes2 10802 3.90 0.18 5.91 52 XM_DK_Undo_02 10756 19.00 43.39 5.88 53 HTML_IMAGE_RATIO_02 10270 6.15 7.14 5.61 54 MPART_ALT_DIFF 10238 6.90 9.33 5.60 55 XM_H_GMP 9916 5.84 6.63 5.42 56 XM_H_Long_From01 9802 5.29 5.17 5.36 57 XM_B_Phish_Phrases 9581 5.77 6.77 5.24 58 TooManyTo_001 9438 4.30 2.70 5.16 59 RCVD_IN_VALIDITY_CERTIFIED 9198 3.74 1.34 5.03 60 RCVD_IN_MSPIKE_H4 8683 4.22 3.25 4.75 61 XM_UncommonTLD01 8473 5.07 5.88 4.63 62 T_TooManySym_02 8371 3.21 0.67 4.58 63 XMNumbers 8276 3.91 2.77 4.52 64 BAYES_40 8234 3.50 1.65 4.50 65 BAYES_99 8025 13.99 31.84 4.39 66 FSL_BULK_SIG 7977 6.70 11.03 4.36 67 TR_XM_SpammyWords4 7721 6.34 10.27 4.22 68 BAYES_80 7580 6.31 10.33 4.14 69 BOTNET_IPINHOSTNAME 7533 6.15 9.94 4.12 70 HTML_IMAGE_RATIO_04 7392 4.43 5.16 4.04 71 T_TVD_MIME_NO_HEADERS 6979 2.49 0.04 3.82 72 TO_MALFORMED 6869 2.46 0.05 3.76 73 INVALID_MSGID 6570 2.47 0.37 3.59 74 HTML_IMAGE_RATIO_06 6347 3.15 2.57 3.47 75 XMSubMetaSx_00 6224 4.88 7.63 3.40 76 HTML_IMAGE_RATIO_08 6102 3.01 2.40 3.34 77 BAYES_999 6068 10.61 24.17 3.32 78 MIME_QP_LONG_LINE 6032 3.06 2.63 3.30 79 RELAYCOUNTRY_META 5960 9.57 21.31 3.26 80 BAYES_20 5855 2.56 1.36 3.20 81 MIME_HTML_MOSTLY 5737 3.81 5.05 3.14 82 XM_B_SpammyTLD 5470 3.73 5.11 2.99 83 T_REMOTE_IMAGE 5419 2.46 1.52 2.96 84 MIME_HTML_ONLY_MULTI 5301 2.79 2.58 2.90 85 BAYES_95 5273 4.04 6.18 2.88 86 XM_CamelCaseFrm001 4823 3.20 4.26 2.64 87 XM_Body_Dirty_Words 4578 3.93 6.58 2.50 88 TR_XM_DKIM_Undo 4312 12.21 30.51 2.36 89 KHOP_HELO_FCRDNS 4286 1.91 1.12 2.34 90 TM2_M_URI_OPT_OUT 4065 2.27 2.37 2.22 91 XM_PDF 4032 1.61 0.49 2.20 92 RCVD_IN_IADB_LISTED 3858 1.69 0.91 2.11 93 FROM_EXCESS_BASE64 3853 1.95 1.66 2.11 94 XMBrknScrpt_02 3763 2.10 2.18 2.06 95 T_TooManySym_03 3739 1.40 0.19 2.04 96 TR_XM_UnparsRelay 3717 4.75 9.79 2.03 97 MAILING_LIST_MULTI 3690 1.89 1.64 2.02 98 TR_XM_SpammyRelay 3635 6.45 14.73 1.99 99 RCVD_IN_IADB_SPF 3495 1.51 0.76 1.91 100 UNTRUSTED_Relay 3406 4.18 8.48 1.86 101 BAYES_05 3386 1.49 0.81 1.85 102 TR_XM_PhishingBody 3254 2.67 4.33 1.78 103 TR_DCC_Bayes_99 3232 9.28 23.24 1.77 104 HTML_MIME_NO_HTML_TAG 3223 1.43 0.80 1.76 105 RCVD_IN_IADB_SENDERID 3187 1.37 0.67 1.74 106 TooManyTo_002 3172 1.31 0.53 1.73 107 RCVD_IN_IADB_DK 3098 1.34 0.68 1.69 108 XM_SendGrid 2914 1.39 1.00 1.59 109 TVD_RCVD_IP 2911 1.50 1.33 1.59 110 IN_HORDE_ADDRESS_BOOK 2870 1.05 0.09 1.57 111 XMStockSpam_06 2840 2.15 3.27 1.55 112 TM2_M_VERY_LONG_WORD 2770 2.27 3.68 1.51 113 XM_DK_Undo_01 2741 1.41 1.25 1.50 114 TR_XM_SpammyWords5 2725 2.06 3.11 1.49 115 T_XMDrugObfuBody_14 2691 3.05 5.97 1.47 116 TR_Symld_Words 2681 1.22 0.78 1.47 117 URI_NOVOWEL 2645 1.62 1.95 1.45 118 XMDiploma_00 2643 1.99 3.00 1.44 119 DKIM_INVALID 2499 3.54 7.58 1.37 120 XMBdyGiftCard01 2496 1.43 1.54 1.36 121 XM_ProductURIs 2495 1.44 1.57 1.36 122 RCVD_IN_IADB_VOUCHED 2457 1.07 0.55 1.34 123 TVD_SPACE_RATIO 2452 0.96 0.25 1.34 124 BOTNET 2419 5.29 12.66 1.32 125 T_XMDrugObfuBody_08 2383 1.77 2.63 1.30 126 MPART_ALT_DIFF_COUNT 2369 1.60 2.18 1.30 127 TR_XM_DK_SendGrid 2327 1.06 0.65 1.27 128 XM_B_URI_Unicode 2302 1.50 1.94 1.26 129 XM_UB50 2200 1.90 3.18 1.20 130 XMBSHREFv2 2197 0.89 0.33 1.20 131 XM_B_Unsub2 2188 1.58 2.30 1.20 132 URI_HEX 2176 1.23 1.29 1.19 133 XMGappySubj_01 2155 0.81 0.12 1.18 134 XMSexyCombo_05 2155 2.09 3.79 1.18 135 XM_B_SpammyWords4 2125 1.43 1.93 1.16 136 T_XMDrugObfuBody_00 2111 1.18 1.22 1.15 137 XM_B_Investor 2093 2.12 3.92 1.14 138 XMBody_95 2045 0.77 0.14 1.12 139 SUBJ_ALL_CAPS 2021 1.30 1.67 1.10 140 XM_B_DNDMA 1915 1.21 1.52 1.05 141 RCVD_IN_IADB_OPTIN 1861 0.80 0.40 1.02 142 XM_SPF_SoftFail 1844 1.64 2.81 1.01 143 XM_B_COPY_HTML 1828 1.11 1.31 1.00 144 XM_GoogleGroups 1795 0.86 0.63 0.98 145 RELAYCOUNTRY_CA 1737 2.88 6.48 0.95 146 XMGappySubj_02 1724 0.63 0.05 0.94 147 XM_OfRef6 1658 1.93 3.82 0.91 148 TooManyTo_003 1645 0.74 0.46 0.90 149 XM_H_PHPMailer 1645 0.78 0.56 0.90 150 TR_XM_MSPIKECOMBO 1611 3.26 7.68 0.88 151 RCVD_IN_MSPIKE_BL 1611 3.26 7.68 0.88 152 T_XMHurry_00 1576 1.52 2.75 0.86 153 T_FILL_THIS_FORM_SHORT 1503 1.49 2.72 0.82 154 TR_XM_GMP_MSPIKE_UNDO2 1488 0.62 0.27 0.81 155 TR_MetaPhish_Combo_01 1472 0.89 1.06 0.80 156 THIS_AD 1458 1.02 1.45 0.80 157 T_TooManySym_04 1430 0.53 0.05 0.78 158 XM_H_Long_From02 1420 1.02 1.47 0.78 159 TVD_PH_BODY_ACCOUNTS_PRE 1378 0.51 0.07 0.75 160 URI_TRY_3LD 1350 0.81 0.95 0.74 161 TooManyTo_004 1322 0.61 0.41 0.72 162 RCVD_IN_BL_SPAMCOP_NET 1319 6.76 18.00 0.72 163 RCVD_IN_MSPIKE_L3 1313 1.92 4.16 0.72 164 XMPhish30 1279 1.10 1.84 0.70 165 TM2_M_OBFU_COMMENT 1259 0.95 1.43 0.69 166 XMSlimDrugH 1223 0.68 0.71 0.67 167 RELAYCOUNTRY_AU 1216 1.41 2.80 0.66 168 DKIM_ADSP_CUSTOM_MED 1201 0.87 1.28 0.66 169 HTML_IMAGE_ONLY_16 1193 0.91 1.38 0.65 170 XMNoVowels 1157 0.75 0.97 0.63 171 XMBody_106 1125 0.43 0.09 0.61 172 XMBody_17 1124 1.24 2.41 0.61 173 TooManyTo_005 1112 0.53 0.38 0.61 174 XMLngstWrd_00 1081 0.49 0.30 0.59 175 XMSubMetaI_00 1045 0.97 1.70 0.57 176 HTML_IMAGE_ONLY_12 1038 0.41 0.11 0.57 177 XMSolicitRefs_0 1026 0.54 0.50 0.56 178 TR_XM_Base64_M1 991 0.58 0.64 0.54 179 XMLngstWrd_01 959 0.44 0.27 0.52 180 XM_S_SubURI 957 0.35 0.03 0.52 181 TR_LOTS_OF_MONEY3 955 1.03 1.98 0.52 182 HTML_TAG_BALANCE_BODY 951 0.78 1.26 0.52 183 TR_Mismatch_TLD_01 949 0.42 0.24 0.52 184 XMGenDplmaNmb 904 0.84 1.48 0.49 185 XM_B_FormFill 879 0.32 0.01 0.48 186 XMHTML_After_End 851 0.50 0.55 0.47 187 DIET_1 848 0.78 1.35 0.46 188 XMClaimOffer 837 0.57 0.78 0.46 189 FORGED_GMAIL_RCVD 805 0.69 1.15 0.44 190 HTTPS_HTTP_MISMATCH 794 0.51 0.66 0.43 191 PLING_QUERY 788 0.54 0.74 0.43 192 XM_URI_RBL 788 1.23 2.71 0.43 193 HTML_TEXT_INVISIBLE_STYLE 786 0.61 0.95 0.43 194 HTML_IMAGE_ONLY_20 753 0.60 0.94 0.41 195 NML_ADSP_CUSTOM_MED 749 0.67 1.16 0.41 196 XMSubMetaSxObfu_02 748 0.39 0.36 0.41 197 DKIM_ADSP_NXDOMAIN 744 1.61 3.84 0.41 198 HTML_FONT_FACE_BAD 698 0.46 0.60 0.38 199 XMLngstWrd_02 697 0.32 0.20 0.38 200 TR_LOTS_OF_MONEY2 695 0.44 0.54 0.38 ----------------------------------------------------------------------