Email: 284652 Autolearn: 0 AvgScore: 4.75 AvgScanTime: 1.28 sec Spam: 92633 Autolearn: 0 AvgScore: 12.88 AvgScanTime: 1.46 sec Ham: 192019 Autolearn: 0 AvgScore: 0.83 AvgScanTime: 1.19 sec Time Spent Running SA: 101.28 hours Time Spent Processing Spam: 37.63 hours Time Spent Processing Ham: 63.65 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 92560 99.77 99.92 99.70 2 HTML_MESSAGE 90050 88.72 97.21 84.62 3 DKIM_SIGNED 86675 82.92 93.57 77.79 4 XM_DK_Pass 82785 80.94 89.37 76.88 5 DKIM_VALID 82395 80.55 88.95 76.50 6 XM_B_Unicode 81225 79.57 87.68 75.65 7 RELAYCOUNTRY_US 76353 82.15 82.43 82.02 8 XMListUnsubscribeExists 68389 61.54 73.83 55.61 9 DCC_CHECK 65495 47.34 70.70 36.07 10 XM_B_SpammyWords 64903 56.15 70.06 49.44 11 DKIM_VALID_AU 64878 68.11 70.04 67.18 12 LOC_TINY_FONT_1 50312 44.17 54.31 39.28 13 XM_B_Unicode3 49484 51.31 53.42 50.29 14 XM_DK_Undo_02 42479 19.58 45.86 6.90 15 HTML_FONT_LOW_CONTRAST 40413 36.87 43.63 33.61 16 XM_B_SpammyWords2 36871 28.85 39.80 23.56 17 FVGT_m_MULTI_ODD 35315 30.85 38.12 27.34 18 BAYES_99 33165 15.54 35.80 5.77 19 BAYES_50 32965 52.53 35.59 60.70 20 TR_XM_DKIM_Undo 29874 11.96 32.25 2.17 21 DKIM_VALID_EF 27924 30.57 30.14 30.77 22 T_KAM_HTML_FONT_INVALID 27733 25.77 29.94 23.75 23 DCC_CHECK_NEGATIVE 27074 52.57 29.23 63.84 24 BAYES_999 25567 12.05 27.60 4.54 25 MIME_HTML_ONLY 25154 22.96 27.15 20.93 26 XM_Multi_Part_URI 23787 19.76 25.68 16.91 27 TR_XM_DK_Unsub 22447 19.11 24.23 16.63 28 TR_DCC_Bayes_99 21382 8.36 23.08 1.26 29 RCVD_IN_MSPIKE_H2 20771 17.23 22.42 14.73 30 XMSubLong 20652 23.31 22.29 23.80 31 UNPARSEABLE_RELAY 19420 15.49 20.96 12.85 32 T_TM2_M_HEADER_IN_MSG 17174 20.65 18.54 21.67 33 XM_B_Unsub 17155 12.90 18.52 10.19 34 TR_XM_BayesUnsub 16362 11.32 17.66 8.26 35 RELAYCOUNTRY_META 15964 7.66 17.23 3.04 36 TR_MAX_INTL_RELAY 14939 10.41 16.13 7.65 37 XM_B_SpammyWords3 12930 10.14 13.96 8.30 38 TR_XM_SpammyRelay 12722 5.53 13.73 1.57 39 TR_XM_SpammyWords2 12698 4.83 13.71 0.55 40 RCVD_IN_MSPIKE_WL 12181 19.01 13.15 21.84 41 RCVD_IN_BL_SPAMCOP_NET 11268 4.46 12.16 0.75 42 TR_XM_UnparsRelay 10236 4.98 11.05 2.06 43 BOTNET_IPINHOSTNAME 9746 5.98 10.52 3.79 44 LOTS_OF_MONEY 9543 7.61 10.30 6.30 45 BAYES_80 9119 6.33 9.84 4.64 46 BOTNET 8812 3.83 9.51 1.08 47 TR_XM_SpammyWords4 8182 5.87 8.83 4.44 48 XM_B_Phish_Phrases 7947 7.12 8.58 6.41 49 HTML_IMAGE_RATIO_02 7751 6.59 8.37 5.74 50 BAYES_60 7546 8.29 8.15 8.36 51 RCVD_IN_MSPIKE_BL 7493 3.33 8.09 1.04 52 TR_XM_MSPIKECOMBO 7490 3.33 8.09 1.04 53 XMSubMetaSx_00 7376 5.50 7.96 4.31 54 XM_Evil_Numbers_Gen 7057 10.22 7.62 11.48 55 XM_H_GMP 6557 5.81 7.08 5.20 56 RELAYCOUNTRY_CA 6503 2.87 7.02 0.87 57 UNTRUSTED_Relay 6400 3.41 6.91 1.72 58 TR_XM_SPAMCOP 6264 2.32 6.76 0.18 59 RCVD_IN_MSPIKE_H3 5669 8.11 6.12 9.06 60 XM_H_Long_From01 5471 5.86 5.91 5.83 61 BAYES_95 5440 3.95 5.87 3.02 62 FSL_BULK_SIG 5377 3.68 5.80 2.65 63 TR_XM_SpammyWords3 5189 2.18 5.60 0.52 64 RCVD_IN_MSPIKE_L3 4963 2.28 5.36 0.79 65 T_XMDrugObfuBody_14 4868 2.56 5.26 1.25 66 MPART_ALT_DIFF 4765 5.74 5.14 6.03 67 XM_Body_Dirty_Words 4745 3.06 5.12 2.07 68 LotsOfNums_01 4722 6.59 5.10 7.31 69 XM_UncommonTLD01 4520 4.61 4.88 4.48 70 XM_CamelCaseFrm001 4337 3.13 4.68 2.39 71 DKIM_INVALID 4280 2.37 4.62 1.28 72 XMStrtUSub 4276 5.86 4.62 6.47 73 TR_XM_PhishingBody 4262 2.96 4.60 2.17 74 XM_B_SpammyTLD 4231 3.85 4.57 3.50 75 XM_B_PhoneNumber 4137 6.65 4.47 7.70 76 TM2_M_VERY_LONG_WORD 4005 2.42 4.32 1.50 77 XMSexyCombo_05 3852 2.46 4.16 1.64 78 TooManyTo_001 3762 4.63 4.06 4.91 79 HTML_IMAGE_RATIO_04 3744 4.34 4.04 4.49 80 MIME_HTML_MOSTLY 3552 3.72 3.83 3.66 81 RCVD_IN_MSPIKE_H5 3552 6.37 3.83 7.59 82 XM_B_Investor 3355 2.13 3.62 1.41 83 XM_OfRef6 3294 1.70 3.56 0.81 84 TR_XM_MSPIKECOMBO2 3152 1.15 3.40 0.06 85 TR_XM_SpammyWords5 3028 2.34 3.27 1.89 86 TR_XM_NoHeaderRelay 2984 1.19 3.22 0.21 87 RCVD_IN_MSPIKE_H4 2960 4.54 3.20 5.18 88 XM_B_Unsub2 2743 1.73 2.96 1.14 89 XMNumbers 2691 4.07 2.91 4.63 90 HTML_IMAGE_RATIO_06 2682 3.66 2.90 4.03 91 USER_IN_DEF_DKIM_WL 2639 13.90 2.85 19.24 92 RELAYCOUNTRY_AU 2583 1.23 2.79 0.48 93 T_XMHurry_00 2547 1.59 2.75 1.03 94 XMBody_17 2527 1.34 2.73 0.67 95 TM2_M_URI_OPT_OUT 2412 2.28 2.60 2.13 96 TR_XM_MaxSPIKE 2326 0.85 2.51 0.05 97 XM_URI_RBL 2318 1.11 2.50 0.44 98 XM_UB50 2305 1.53 2.49 1.07 99 XMDiploma_00 2268 1.72 2.45 1.37 100 XM_SPF_SoftFail 2266 1.44 2.45 0.96 101 T_FILL_THIS_FORM_SHORT 2246 1.25 2.42 0.69 102 MIME_HTML_ONLY_MULTI 2245 2.71 2.42 2.85 103 FROM_EXCESS_BASE64 2192 2.57 2.37 2.68 104 XMPhish30 2181 1.31 2.35 0.80 105 MAILING_LIST_MULTI 2143 2.49 2.31 2.58 106 XMStockSpam_06 2143 1.87 2.31 1.65 107 TR_XM_INV_DKIM 2134 0.76 2.30 0.02 108 RCVD_IN_VALIDITY_SAFE 2106 4.92 2.27 6.20 109 MIME_QP_LONG_LINE 2076 2.97 2.24 3.32 110 T_XMDrugObfuBody_08 2051 1.46 2.21 1.10 111 XM_B_URI_Unicode 2039 1.55 2.20 1.24 112 URI_NOVOWEL 2021 1.55 2.18 1.25 113 XMBrknScrpt_02 1972 1.58 2.13 1.31 114 RCVD_IN_MSPIKE_L4 1934 0.82 2.09 0.21 115 T_TooManySym_01 1915 6.01 2.07 7.91 116 HTML_IMAGE_RATIO_08 1865 2.28 2.01 2.41 117 XM_B_DNDMA 1861 1.05 2.01 0.59 118 RCVD_IN_VALIDITY_RPBL 1817 0.70 1.96 0.08 119 XM_B_SpammyWords4 1791 1.22 1.93 0.87 120 XM_H_Long_From02 1790 1.21 1.93 0.87 121 HK_RANDOM_REPLYTO 1714 0.67 1.85 0.10 122 SpammyFromTLD_02 1705 0.78 1.84 0.27 123 SUBJ_ALL_CAPS 1705 1.65 1.84 1.56 124 BAYES_40 1697 3.74 1.83 4.66 125 THIS_AD 1660 0.89 1.79 0.46 126 XM_UB99 1644 0.58 1.77 0.00 127 T_REMOTE_IMAGE 1583 2.64 1.71 3.08 128 RELAYCOUNTRY_FR 1575 0.78 1.70 0.34 129 XM_ProductURIs 1572 0.94 1.70 0.57 130 T_XMDrugObfuBody_00 1522 1.28 1.64 1.10 131 MPART_ALT_DIFF_COUNT 1464 0.81 1.58 0.44 132 SHOPIFY_IMG_NOT_RCVD_SFY 1402 0.74 1.51 0.36 133 BAYES_20 1396 2.58 1.51 3.10 134 XM_DK_Undo_01 1347 1.62 1.45 1.70 135 XM_B_COPY_HTML 1295 0.99 1.40 0.79 136 RDNS_DYNAMIC 1229 0.59 1.33 0.23 137 DKIM_ADSP_NXDOMAIN 1226 0.71 1.32 0.42 138 XM_GoogleGroups 1223 1.18 1.32 1.11 139 BOTNET_NORDNS 1167 0.42 1.26 0.01 140 XMGenDplmaNmb 1163 0.85 1.26 0.66 141 XM_UB999 1163 0.41 1.26 0.00 142 XMClaimOffer 1160 0.45 1.25 0.07 143 ALL_TRUSTED 1159 10.42 1.25 14.84 144 XMBody_78 1151 0.65 1.24 0.37 145 TR_LOTS_OF_MONEY3 1149 0.66 1.24 0.38 146 RCVD_IN_VALIDITY_CERTIFIED 1145 3.63 1.24 4.78 147 TVD_RCVD_IP 1139 1.38 1.23 1.45 148 XM_B_Phish66 1129 0.63 1.22 0.35 149 XM_SendGrid 1118 1.35 1.21 1.42 150 URI_TRY_3LD 1111 0.95 1.20 0.83 151 XMBdyGiftCard01 1110 1.49 1.20 1.64 152 XMSubMetaI_00 1083 0.77 1.17 0.58 153 DIET_1 1070 0.76 1.16 0.58 154 HTML_TEXT_INVISIBLE_STYLE 1066 0.58 1.15 0.30 155 RCVD_IN_IADB_LISTED 1060 1.91 1.14 2.28 156 TR_XM_FormFill 1052 0.37 1.14 0.01 157 HELO_DYNAMIC_SPLIT_IP 1052 0.38 1.14 0.01 158 SpammyFromTLD_01 1052 0.61 1.14 0.35 159 HTML_TAG_BALANCE_BODY 1031 0.73 1.11 0.55 160 ANY_BOUNCE_MESSAGE 1018 4.62 1.10 6.32 161 BOUNCE_MESSAGE 1018 4.62 1.10 6.32 162 XM_B_REG_HTML 976 0.61 1.05 0.40 163 TR_XM_RelayPhish 967 0.39 1.04 0.08 164 XMSubMetaSxObfu_03 930 0.83 1.00 0.75 165 TR_XM_InvalidRelay 927 0.33 1.00 0.01 166 XM_B_SEO 923 0.46 1.00 0.20 167 BAYES_05 916 1.42 0.99 1.63 168 XM_UB60 903 0.40 0.97 0.12 169 TR_Symld_Words 882 1.19 0.95 1.31 170 XM_DIRTYINTL 876 0.33 0.95 0.04 171 RCVD_IN_PSBL 871 0.31 0.94 0.00 172 RCVD_IN_IADB_SPF 866 1.67 0.93 2.03 173 XM_HighProb1 859 0.31 0.93 0.01 174 SUBJ_DOLLARS 850 0.73 0.92 0.65 175 TR_Mismatch_TLD_02 825 0.35 0.89 0.09 176 XM_UB80 824 0.31 0.89 0.02 177 HTML_IMAGE_ONLY_20 803 0.54 0.87 0.39 178 TM2_M_A_HREF_HREF 780 0.46 0.84 0.28 179 RCVD_IN_IADB_VOUCHED 780 1.29 0.84 1.51 180 PLING_QUERY 774 0.70 0.84 0.64 181 RCVD_IN_IADB_DK 771 1.46 0.83 1.77 182 TR_XM_SEO4 750 0.33 0.81 0.10 183 RCVD_IN_IADB_SENDERID 748 1.50 0.81 1.84 184 TR_XM_Base64_M1 747 1.06 0.81 1.19 185 DKIM_ADSP_CUSTOM_MED 742 0.76 0.80 0.74 186 MultiRelay_CC 739 0.32 0.80 0.08 187 XM_S_SpammyWords 738 0.61 0.80 0.53 188 TR_XM_Spammywords 737 0.61 0.80 0.53 189 T_MONEY_PERCENT 731 0.38 0.79 0.18 190 TR_LOTS_OF_MONEY2 731 0.38 0.79 0.18 191 HTML_MIME_NO_HTML_TAG 721 1.30 0.78 1.55 192 HTTPS_HTTP_MISMATCH 717 0.53 0.77 0.41 193 NO_DNS_FOR_FROM 705 0.50 0.76 0.37 194 TR_XM_MaxWHORU 700 0.45 0.76 0.31 195 HTML_FONT_SIZE_LARGE 699 0.71 0.75 0.69 196 XMNoVowels 694 0.60 0.75 0.53 197 NORDNS_LOW_CONTRAST 690 0.26 0.74 0.02 198 TR_BOTNET_NEGATE 688 0.37 0.74 0.20 199 TR_XM_DK_SendGrid 687 1.00 0.74 1.13 200 AC_HTML_NONSENSE_TAGS 686 0.28 0.74 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 191442 99.77 99.92 99.70 2 HTML_MESSAGE 162487 88.72 97.21 84.62 3 RELAYCOUNTRY_US 157497 82.15 82.43 82.02 4 DKIM_SIGNED 149366 82.92 93.57 77.79 5 XM_DK_Pass 147615 80.94 89.37 76.88 6 DKIM_VALID 146899 80.55 88.95 76.50 7 XM_B_Unicode 145265 79.57 87.68 75.65 8 DKIM_VALID_AU 128996 68.11 70.04 67.18 9 DCC_CHECK_NEGATIVE 122580 52.57 29.23 63.84 10 BAYES_50 116557 52.53 35.59 60.70 11 XMListUnsubscribeExists 106781 61.54 73.83 55.61 12 XM_B_Unicode3 96557 51.31 53.42 50.29 13 XM_B_SpammyWords 94935 56.15 70.06 49.44 14 LOC_TINY_FONT_1 75416 44.17 54.31 39.28 15 DCC_CHECK 69256 47.34 70.70 36.07 16 HTML_FONT_LOW_CONTRAST 64535 36.87 43.63 33.61 17 DKIM_VALID_EF 59086 30.57 30.14 30.77 18 FVGT_m_MULTI_ODD 52504 30.85 38.12 27.34 19 XMSubLong 45693 23.31 22.29 23.80 20 T_KAM_HTML_FONT_INVALID 45608 25.77 29.94 23.75 21 XM_B_SpammyWords2 45237 28.85 39.80 23.56 22 RCVD_IN_MSPIKE_WL 41936 19.01 13.15 21.84 23 T_TM2_M_HEADER_IN_MSG 41601 20.65 18.54 21.67 24 MIME_HTML_ONLY 40198 22.96 27.15 20.93 25 USER_IN_DEF_DKIM_WL 36938 13.90 2.85 19.24 26 XM_Multi_Part_URI 32472 19.76 25.68 16.91 27 TR_XM_DK_Unsub 31939 19.11 24.23 16.63 28 ALL_TRUSTED 28504 10.42 1.25 14.84 29 RCVD_IN_MSPIKE_H2 28277 17.23 22.42 14.73 30 UNPARSEABLE_RELAY 24671 15.49 20.96 12.85 31 XM_Evil_Numbers_Gen 22043 10.22 7.62 11.48 32 XM_B_Unsub 19562 12.90 18.52 10.19 33 RCVD_IN_MSPIKE_H3 17406 8.11 6.12 9.06 34 XM_DKIMWhitelistDomains 16469 5.79 0.01 8.58 35 BAYES_60 16051 8.29 8.15 8.36 36 XM_B_SpammyWords3 15941 10.14 13.96 8.30 37 TR_XM_BayesUnsub 15868 11.32 17.66 8.26 38 BAYES_00 15609 5.62 0.42 8.13 39 T_TooManySym_01 15197 6.01 2.07 7.91 40 XM_B_PhoneNumber 14795 6.65 4.47 7.70 41 TR_MAX_INTL_RELAY 14697 10.41 16.13 7.65 42 RCVD_IN_MSPIKE_H5 14574 6.37 3.83 7.59 43 LotsOfNums_01 14040 6.59 5.10 7.31 44 XM_DK_Undo_02 13252 19.58 45.86 6.90 45 XMStrtUSub 12416 5.86 4.62 6.47 46 XM_B_Phish_Phrases 12316 7.12 8.58 6.41 47 TR_XM_DK_Bayes 12275 4.41 0.31 6.39 48 TR_XM_DK_Bayes1 12194 4.38 0.30 6.35 49 ANY_BOUNCE_MESSAGE 12143 4.62 1.10 6.32 50 BOUNCE_MESSAGE 12143 4.62 1.10 6.32 51 LOTS_OF_MONEY 12105 7.61 10.30 6.30 52 RCVD_IN_VALIDITY_SAFE 11911 4.92 2.27 6.20 53 MPART_ALT_DIFF 11572 5.74 5.14 6.03 54 XM_H_Long_From01 11197 5.86 5.91 5.83 55 BAYES_99 11075 15.54 35.80 5.77 56 HTML_IMAGE_RATIO_02 11020 6.59 8.37 5.74 57 TR_XM_DK_Bayes2 10422 3.73 0.22 5.43 58 XM_H_GMP 9984 5.81 7.08 5.20 59 RCVD_IN_MSPIKE_H4 9956 4.54 3.20 5.18 60 TooManyTo_001 9431 4.63 4.06 4.91 61 RCVD_IN_VALIDITY_CERTIFIED 9187 3.63 1.24 4.78 62 BAYES_40 8944 3.74 1.83 4.66 63 BAYES_80 8902 6.33 9.84 4.64 64 XMNumbers 8891 4.07 2.91 4.63 65 BAYES_999 8720 12.05 27.60 4.54 66 HTML_IMAGE_RATIO_04 8615 4.34 4.04 4.49 67 XM_UncommonTLD01 8598 4.61 4.88 4.48 68 TR_XM_SpammyWords4 8525 5.87 8.83 4.44 69 XMSubMetaSx_00 8270 5.50 7.96 4.31 70 T_TooManySym_02 7974 2.98 0.56 4.15 71 HTML_IMAGE_RATIO_06 7731 3.66 2.90 4.03 72 TO_MALFORMED 7407 2.61 0.01 3.86 73 BOTNET_IPINHOSTNAME 7268 5.98 10.52 3.79 74 MIME_HTML_MOSTLY 7032 3.72 3.83 3.66 75 XM_B_SpammyTLD 6721 3.85 4.57 3.50 76 INVALID_MSGID 6561 2.42 0.36 3.42 77 MIME_QP_LONG_LINE 6382 2.97 2.24 3.32 78 T_TVD_MIME_NO_HEADERS 5955 2.11 0.04 3.10 79 BAYES_20 5946 2.58 1.51 3.10 80 T_REMOTE_IMAGE 5921 2.64 1.71 3.08 81 RELAYCOUNTRY_META 5828 7.66 17.23 3.04 82 BAYES_95 5793 3.95 5.87 3.02 83 MIME_HTML_ONLY_MULTI 5482 2.71 2.42 2.85 84 FROM_EXCESS_BASE64 5137 2.57 2.37 2.68 85 FSL_BULK_SIG 5086 3.68 5.80 2.65 86 MAILING_LIST_MULTI 4946 2.49 2.31 2.58 87 HTML_IMAGE_RATIO_08 4625 2.28 2.01 2.41 88 XM_CamelCaseFrm001 4584 3.13 4.68 2.39 89 RCVD_IN_IADB_LISTED 4369 1.91 1.14 2.28 90 TR_XM_PhishingBody 4176 2.96 4.60 2.17 91 TR_XM_DKIM_Undo 4164 11.96 32.25 2.17 92 TM2_M_URI_OPT_OUT 4083 2.28 2.60 2.13 93 XM_Body_Dirty_Words 3974 3.06 5.12 2.07 94 XM_PDF 3974 1.53 0.42 2.07 95 TR_XM_UnparsRelay 3949 4.98 11.05 2.06 96 RCVD_IN_IADB_SPF 3896 1.67 0.93 2.03 97 KHOP_HELO_FCRDNS 3845 1.59 0.73 2.00 98 TR_XM_SpammyWords5 3628 2.34 3.27 1.89 99 RCVD_IN_IADB_SENDERID 3532 1.50 0.81 1.84 100 T_TooManySym_03 3491 1.29 0.20 1.82 101 RCVD_IN_IADB_DK 3391 1.46 0.83 1.77 102 UNTRUSTED_Relay 3296 3.41 6.91 1.72 103 XM_DK_Undo_01 3259 1.62 1.45 1.70 104 XMStockSpam_06 3176 1.87 2.31 1.65 105 XMSexyCombo_05 3149 2.46 4.16 1.64 106 XMBdyGiftCard01 3140 1.49 1.20 1.64 107 BAYES_05 3139 1.42 0.99 1.63 108 TR_XM_SpammyRelay 3019 5.53 13.73 1.57 109 SUBJ_ALL_CAPS 2997 1.65 1.84 1.56 110 HTML_MIME_NO_HTML_TAG 2981 1.30 0.78 1.55 111 RCVD_IN_IADB_VOUCHED 2894 1.29 0.84 1.51 112 TM2_M_VERY_LONG_WORD 2874 2.42 4.32 1.50 113 XMGappySubj_01 2805 1.17 0.57 1.46 114 IN_HORDE_ADDRESS_BOOK 2782 1.01 0.10 1.45 115 TVD_RCVD_IP 2781 1.38 1.23 1.45 116 TooManyTo_002 2737 1.12 0.49 1.43 117 XM_SendGrid 2727 1.35 1.21 1.42 118 XM_B_Investor 2701 2.13 3.62 1.41 119 XMDiploma_00 2628 1.72 2.45 1.37 120 URI_HEX 2576 1.14 0.74 1.34 121 TVD_SPACE_RATIO 2548 0.96 0.20 1.33 122 TR_Symld_Words 2517 1.19 0.95 1.31 123 XMBrknScrpt_02 2515 1.58 2.13 1.31 124 DKIM_INVALID 2467 2.37 4.62 1.28 125 TR_DCC_Bayes_99 2422 8.36 23.08 1.26 126 T_XMDrugObfuBody_14 2406 2.56 5.26 1.25 127 URI_NOVOWEL 2397 1.55 2.18 1.25 128 XM_B_URI_Unicode 2378 1.55 2.20 1.24 129 TR_XM_Base64_M1 2283 1.06 0.81 1.19 130 XM_B_Unsub2 2188 1.73 2.96 1.14 131 TR_XM_DK_SendGrid 2164 1.00 0.74 1.13 132 XMBSHREFv2 2148 0.92 0.50 1.12 133 XM_GoogleGroups 2139 1.18 1.32 1.11 134 T_XMDrugObfuBody_08 2118 1.46 2.21 1.10 135 T_XMDrugObfuBody_00 2115 1.28 1.64 1.10 136 RCVD_IN_IADB_OPTIN 2113 0.95 0.65 1.10 137 BOTNET 2080 3.83 9.51 1.08 138 XM_UB50 2058 1.53 2.49 1.07 139 XMGappySubj_02 2022 0.75 0.12 1.05 140 RCVD_IN_MSPIKE_BL 1991 3.33 8.09 1.04 141 TR_XM_MSPIKECOMBO 1991 3.33 8.09 1.04 142 T_XMHurry_00 1983 1.59 2.75 1.03 143 LOW_PRICE 1971 0.87 0.55 1.03 144 XMBody_95 1895 0.71 0.15 0.99 145 XM_SPF_SoftFail 1846 1.44 2.45 0.96 146 XM_B_SpammyWords4 1680 1.22 1.93 0.87 147 XM_H_Long_From02 1667 1.21 1.93 0.87 148 RELAYCOUNTRY_CA 1664 2.87 7.02 0.87 149 URI_TRY_3LD 1601 0.95 1.20 0.83 150 TooManyTo_003 1588 0.69 0.40 0.83 151 XM_OfRef6 1549 1.70 3.56 0.81 152 XMPhish30 1540 1.31 2.35 0.80 153 RCVD_IN_MSPIKE_L3 1515 2.28 5.36 0.79 154 XM_B_COPY_HTML 1512 0.99 1.40 0.79 155 XMSubMetaSxObfu_03 1443 0.83 1.00 0.75 156 RCVD_IN_BL_SPAMCOP_NET 1432 4.46 12.16 0.75 157 TR_MetaPhish_Combo_01 1428 0.74 0.74 0.74 158 DKIM_ADSP_CUSTOM_MED 1426 0.76 0.80 0.74 159 XM_H_PHPMailer 1332 0.63 0.48 0.69 160 T_FILL_THIS_FORM_SHORT 1319 1.25 2.42 0.69 161 HTML_FONT_SIZE_LARGE 1319 0.71 0.75 0.69 162 TR_XM_GMP_MSPIKE_UNDO2 1316 0.59 0.40 0.69 163 XMBody_17 1292 1.34 2.73 0.67 164 XMGenDplmaNmb 1261 0.85 1.26 0.66 165 TooManyTo_004 1255 0.56 0.36 0.65 166 SUBJ_DOLLARS 1241 0.73 0.92 0.65 167 PLING_QUERY 1222 0.70 0.84 0.64 168 T_TooManySym_04 1176 0.42 0.02 0.61 169 HTML_IMAGE_ONLY_12 1173 0.45 0.12 0.61 170 XM_B_DNDMA 1133 1.05 2.01 0.59 171 XMLngstWrd_00 1122 0.49 0.29 0.58 172 XMSubMetaI_00 1115 0.77 1.17 0.58 173 DIET_1 1105 0.76 1.16 0.58 174 XM_ProductURIs 1091 0.94 1.70 0.57 175 HTML_IMAGE_ONLY_16 1075 0.41 0.10 0.56 176 HTML_TAG_BALANCE_BODY 1057 0.73 1.11 0.55 177 TR_XM_SpammyWords2 1050 4.83 13.71 0.55 178 TooManyTo_005 1049 0.48 0.34 0.55 179 HTML_FONT_FACE_BAD 1024 0.55 0.57 0.53 180 XMNoVowels 1022 0.60 0.75 0.53 181 XM_S_SpammyWords 1009 0.61 0.80 0.53 182 TR_XM_Spammywords 1009 0.61 0.80 0.53 183 TR_XM_SpammyWords3 1007 2.18 5.60 0.52 184 AD_PREFS 991 0.41 0.19 0.52 185 XMLngstWrd_01 982 0.43 0.27 0.51 186 XM_S_SubURI 978 0.36 0.04 0.51 187 FORGED_GMAIL_RCVD 975 0.54 0.61 0.51 188 RELAYCOUNTRY_AU 926 1.23 2.79 0.48 189 THIS_AD 878 0.89 1.79 0.46 190 XMBody_106 862 0.32 0.04 0.45 191 XMDateMe_00 860 0.37 0.20 0.45 192 XMHTML_After_End 851 0.51 0.66 0.44 193 XMSolicitRefs_0 848 0.47 0.52 0.44 194 XMPhish14 844 0.53 0.71 0.44 195 XM_URI_RBL 841 1.11 2.50 0.44 196 MPART_ALT_DIFF_COUNT 839 0.81 1.58 0.44 197 TM2_M_OBFU_COMMENT 813 0.45 0.51 0.42 198 XMPhish08 808 0.42 0.43 0.42 199 DKIM_ADSP_NXDOMAIN 802 0.71 1.32 0.42 200 HTTPS_HTTP_MISMATCH 786 0.53 0.77 0.41 ----------------------------------------------------------------------