Email: 494182 Autolearn: 0 AvgScore: 5.03 AvgScanTime: 1.09 sec Spam: 130652 Autolearn: 0 AvgScore: 13.90 AvgScanTime: 1.55 sec Ham: 363530 Autolearn: 0 AvgScore: 1.84 AvgScanTime: 0.93 sec Time Spent Running SA: 149.88 hours Time Spent Processing Spam: 56.24 hours Time Spent Processing Ham: 93.64 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 130574 99.89 99.94 99.88 2 HTML_MESSAGE 127246 93.03 97.39 91.46 3 DKIM_SIGNED 116456 60.19 89.13 49.79 4 XM_B_Unicode 113092 85.21 86.56 84.72 5 RELAYCOUNTRY_US 108746 59.52 83.23 50.99 6 XM_DK_Pass 107892 58.05 82.58 49.24 7 DKIM_VALID 107201 57.77 82.05 49.05 8 DCC_CHECK 96026 54.41 73.50 47.56 9 DKIM_VALID_AU 85999 48.05 65.82 41.66 10 XM_B_SpammyWords 84835 66.82 64.93 67.51 11 XMListUnsubscribeExists 84422 45.42 64.62 38.51 12 XM_B_Unicode3 70425 62.78 53.90 65.98 13 LOC_TINY_FONT_1 69077 31.89 52.87 24.35 14 XM_DK_Undo_02 58698 15.28 44.93 4.63 15 HTML_FONT_LOW_CONTRAST 57601 26.99 44.09 20.84 16 FVGT_m_MULTI_ODD 51270 23.94 39.24 18.43 17 BAYES_50 48137 59.98 36.84 68.30 18 BAYES_99 46245 11.88 35.40 3.43 19 XM_B_SpammyWords2 42462 18.66 32.50 13.68 20 TR_XM_DKIM_Undo 37558 8.52 28.75 1.26 21 BAYES_999 36350 9.33 27.82 2.69 22 RCVD_IN_MSPIKE_H2 36072 14.88 27.61 10.30 23 DKIM_VALID_EF 35353 19.62 27.06 16.95 24 DCC_CHECK_NEGATIVE 34488 45.53 26.40 52.41 25 XM_Multi_Part_URI 33765 14.27 25.84 10.12 26 T_KAM_HTML_FONT_INVALID 33023 37.94 25.28 42.50 27 TR_DCC_Bayes_99 32879 7.31 25.17 0.89 28 XM_B_Unsub 31085 10.35 23.79 5.51 29 TR_XM_BayesUnsub 30615 9.44 23.43 4.41 30 MIME_HTML_ONLY 30578 15.48 23.40 12.64 31 XMSubLong 30297 16.64 23.19 14.28 32 UNPARSEABLE_RELAY 29897 12.81 22.88 9.20 33 TR_XM_DK_Unsub 27243 13.00 20.85 10.17 34 T_TM2_M_HEADER_IN_MSG 22434 14.45 17.17 13.48 35 RELAYCOUNTRY_META 21824 6.45 16.70 2.76 36 TR_MAX_INTL_RELAY 20827 10.89 15.94 9.07 37 RCVD_IN_BL_SPAMCOP_NET 20682 4.73 15.83 0.75 38 TR_XM_UnparsRelay 17073 4.66 13.07 1.64 39 FSL_BULK_SIG 17012 5.26 13.02 2.47 40 RCVD_IN_MSPIKE_WL 16200 13.71 12.40 14.17 41 XM_Evil_Numbers_Gen 14589 7.41 11.17 6.06 42 BOTNET 14472 3.47 11.08 0.74 43 XM_B_SpammyWords3 13988 5.96 10.71 4.25 44 MPART_ALT_DIFF 13594 4.76 10.40 2.74 45 UNTRUSTED_Relay 13469 3.86 10.31 1.54 46 LOTS_OF_MONEY 13326 4.74 10.20 2.77 47 TR_XM_SPAMCOP 13282 2.94 10.17 0.34 48 BAYES_80 12806 7.70 9.80 6.94 49 TR_XM_SpammyWords2 12741 2.75 9.75 0.24 50 TR_XM_SpammyRelay 12647 3.54 9.68 1.33 51 BAYES_60 12568 8.01 9.62 7.43 52 TR_XM_SpammyWords4 12104 3.84 9.26 1.89 53 BOTNET_IPINHOSTNAME 11934 4.15 9.13 2.36 54 XM_B_Phish_Phrases 11380 5.66 8.71 4.57 55 RCVD_IN_MSPIKE_BL 10882 2.82 8.33 0.84 56 TR_XM_MSPIKECOMBO 10830 2.80 8.29 0.82 57 XM_H_GMP 10321 4.84 7.90 3.74 58 MIME_HTML_MOSTLY 10044 3.15 7.69 1.52 59 TR_XM_SpammyWords5 9962 8.38 7.62 8.65 60 XM_H_Long_From01 9949 4.44 7.61 3.30 61 XM_UncommonTLD01 9863 4.22 7.55 3.03 62 HTML_IMAGE_RATIO_04 9424 4.12 7.21 3.01 63 DKIM_INVALID 9255 2.42 7.08 0.75 64 HTML_IMAGE_RATIO_02 8711 5.03 6.67 4.45 65 XM_Body_Dirty_Words 8260 2.59 6.32 1.25 66 SUBJ_ALL_CAPS 8127 7.94 6.22 8.56 67 RCVD_IN_MSPIKE_H3 7773 5.89 5.95 5.87 68 XMSubMetaSx_00 7472 2.99 5.72 2.01 69 XM_B_SpammyTLD 7391 8.65 5.66 9.73 70 BAYES_95 7170 3.02 5.49 2.13 71 MIME_QP_LONG_LINE 7126 28.84 5.45 37.24 72 USER_IN_DEF_DKIM_WL 7003 10.55 5.36 12.42 73 LotsOfNums_01 6963 6.46 5.33 6.87 74 XM_B_PhoneNumber 6842 5.29 5.24 5.31 75 XMStockSpam_06 6613 1.77 5.06 0.59 76 T_XMDrugObfuBody_14 6268 1.91 4.80 0.87 77 XM_UB50 5788 1.95 4.43 1.06 78 XMNumbers 5706 3.01 4.37 2.52 79 XM_SPF_SoftFail 5619 1.68 4.30 0.74 80 TM2_M_VERY_LONG_WORD 5550 2.17 4.25 1.43 81 TR_XM_PhishingBody 5448 1.98 4.17 1.20 82 KHOP_HELO_FCRDNS 5112 2.16 3.91 1.53 83 DKIM_ADSP_NXDOMAIN 5100 1.46 3.90 0.58 84 XMBdyGiftCard01 5047 1.57 3.86 0.75 85 XMStrtUSub 4919 3.14 3.76 2.91 86 XMSexyCombo_05 4890 1.51 3.74 0.70 87 RCVD_IN_MSPIKE_L4 4763 1.09 3.65 0.17 88 XM_CamelCaseFrm001 4730 1.98 3.62 1.39 89 TR_XM_SpammyWords3 4660 1.23 3.57 0.39 90 BOTNET_NORDNS 4649 0.94 3.56 0.00 91 TM2_M_URI_OPT_OUT 4501 27.22 3.45 35.77 92 RCVD_IN_MSPIKE_H5 4429 4.71 3.39 5.19 93 RCVD_IN_MSPIKE_L3 4410 1.36 3.38 0.64 94 TR_XM_NoHeaderRelay 4220 1.07 3.23 0.29 95 TR_XM_MSPIKECOMBO2 4200 0.90 3.21 0.07 96 TooManyTo_001 4079 3.14 3.12 3.15 97 RCVD_IN_VALIDITY_RPBL 4048 0.84 3.10 0.03 98 T_XMDrugObfuBody_00 4022 1.63 3.08 1.11 99 RCVD_IN_MSPIKE_H4 3998 3.10 3.06 3.11 100 RELAYCOUNTRY_CA 3748 1.12 2.87 0.49 101 TR_XM_InvalidRelay 3624 0.74 2.77 0.01 102 TR_Caps_n_Bayes_99 3611 0.80 2.76 0.10 103 XM_B_Unsub2 3605 1.19 2.76 0.62 104 XM_H_DKIM_GOOG 3566 0.73 2.73 0.01 105 RELAYCOUNTRY_AU 3510 1.07 2.69 0.49 106 ANY_BOUNCE_MESSAGE 3504 7.04 2.68 8.61 107 BOUNCE_MESSAGE 3500 7.04 2.68 8.61 108 HTML_IMAGE_RATIO_06 3485 2.44 2.67 2.36 109 XM_B_Investor 3410 1.28 2.61 0.80 110 XM_UB99 3356 0.68 2.57 0.00 111 TR_XM_INV_DKIM 3252 0.67 2.49 0.01 112 RCVD_IN_VALIDITY_SAFE 2984 3.87 2.28 4.44 113 XM_B_URI_Unicode 2931 1.18 2.24 0.80 114 THIS_AD 2904 0.87 2.22 0.38 115 XMBody_17 2900 0.89 2.22 0.42 116 T_TooManySym_01 2866 4.16 2.19 4.87 117 MAILING_LIST_MULTI 2808 2.00 2.15 1.95 118 T_XMDrugObfuBody_08 2766 1.47 2.12 1.23 119 T_REMOTE_IMAGE 2742 1.66 2.10 1.51 120 HTML_IMAGE_RATIO_08 2719 2.05 2.08 2.04 121 XMPhish30 2698 0.86 2.07 0.43 122 TR_XM_GMP_BULK_SIG 2693 0.57 2.06 0.03 123 MPART_ALT_DIFF_COUNT 2689 0.83 2.06 0.39 124 XM_UB999 2684 0.54 2.05 0.00 125 SHOPIFY_IMG_NOT_RCVD_SFY 2646 0.71 2.03 0.24 126 T_XMHurry_00 2595 0.94 1.99 0.56 127 RELAYCOUNTRY_JP 2592 0.53 1.98 0.01 128 HTML_FONT_SIZE_LARGE 2482 0.52 1.90 0.02 129 SpammyFromTLD_02 2468 0.69 1.89 0.26 130 XM_URI_RBL 2409 0.76 1.84 0.37 131 TR_XM_SpoofStaff 2347 0.54 1.80 0.09 132 XMSpoofStaff2 2341 0.54 1.79 0.09 133 MIME_HTML_ONLY_MULTI 2340 1.51 1.79 1.41 134 XM_B_SpammyWords4 2336 1.12 1.79 0.88 135 TR_XM_PSC1 2328 0.53 1.78 0.09 136 XM_H_SpoofStaff4 2326 0.53 1.78 0.09 137 TR_XM_SpoofStaff2 2299 0.47 1.76 0.00 138 PDS_FRNOM_TODOM_NAKED_TO 2282 0.46 1.75 0.00 139 PDS_FROM_NAME_TO_DOMAIN 2282 0.46 1.75 0.00 140 XMSubMetaI_00 2277 0.99 1.74 0.72 141 XM_OfRef6 2176 0.67 1.67 0.31 142 URI_NOVOWEL 2087 0.94 1.60 0.70 143 RELAYCOUNTRY_FR 2086 0.62 1.60 0.27 144 TR_Symld_Words 2064 0.79 1.58 0.51 145 TR_XM_MaxSPIKE 2031 0.45 1.55 0.06 146 FROM_EXCESS_BASE64 2029 1.50 1.55 1.48 147 RCVD_IN_IADB_LISTED 1952 1.88 1.49 2.01 148 XM_ProductURIs 1878 0.70 1.44 0.44 149 XM_SendGrid 1877 1.04 1.44 0.89 150 XM_DK_Undo_01 1840 1.01 1.41 0.86 151 XM_B_REG_HTML 1773 0.50 1.36 0.19 152 XMBrknScrpt_02 1766 0.98 1.35 0.84 153 XM_B_DNDMA 1738 0.66 1.33 0.42 154 RCVD_IN_VALIDITY_CERTIFIED 1719 3.09 1.32 3.72 155 RCVD_IN_MSPIKE_L5 1657 0.35 1.27 0.02 156 XM_UB60 1648 0.40 1.26 0.09 157 BAYES_40 1628 2.26 1.25 2.62 158 RCVD_IN_IADB_SPF 1578 1.68 1.21 1.86 159 XM_B_COPY_HTML 1576 0.91 1.21 0.80 160 HTML_IMAGE_ONLY_28 1568 0.41 1.20 0.13 161 SpammyFromTLD_01 1551 0.51 1.19 0.26 162 XMDiploma_00 1530 0.84 1.17 0.73 163 URI_HEX 1529 0.71 1.17 0.55 164 RCVD_IN_PSBL 1473 0.30 1.13 0.01 165 XM_UB80 1444 0.31 1.11 0.03 166 XMSubMetaSxObfu_03 1442 0.53 1.10 0.32 167 XM_B_Phish66 1435 0.52 1.10 0.31 168 HTML_IMAGE_ONLY_20 1431 0.40 1.10 0.15 169 RCVD_IN_IADB_DK 1426 1.51 1.09 1.66 170 RCVD_IN_IADB_SENDERID 1411 1.54 1.08 1.71 171 XMClaimOffer 1380 0.50 1.06 0.30 172 XM_GoogleGroups 1341 0.82 1.03 0.74 173 ALL_TRUSTED 1331 34.38 1.02 46.37 174 HTML_MIME_NO_HTML_TAG 1274 1.13 0.98 1.18 175 XMHTML_After_End 1264 1.10 0.97 1.15 176 TR_XM_DK_SendGrid 1263 0.72 0.97 0.63 177 XMLngstWrd_00 1252 0.47 0.96 0.29 178 RCVD_IN_IADB_VOUCHED 1245 1.10 0.95 1.16 179 HTML_TAG_BALANCE_BODY 1216 0.48 0.93 0.32 180 XMLngstWrd_01 1208 0.43 0.92 0.25 181 T_FILL_THIS_FORM_SHORT 1202 0.48 0.92 0.33 182 BAYES_20 1201 2.03 0.92 2.43 183 T_TooManySym_02 1166 2.09 0.89 2.52 184 XM_B_SEO 1165 0.34 0.89 0.14 185 FVGT_m_MULTI_ODD_EMAIL 1163 0.25 0.89 0.02 186 PLING_QUERY 1154 0.53 0.88 0.40 187 HTML_IMAGE_ONLY_24 1150 0.30 0.88 0.09 188 MultiRelay_CC 1150 0.34 0.88 0.14 189 TR_XM_INTL_Spamhaus 1149 0.25 0.88 0.03 190 RDNS_DYNAMIC 1145 0.31 0.88 0.11 191 TR_XM_RelayPhish 1143 0.27 0.87 0.05 192 XMBounce_01 1142 0.27 0.87 0.05 193 DIET_1 1115 0.42 0.85 0.27 194 MIXED_HREF_CASE 1076 5.47 0.82 7.13 195 RCVD_IN_PBL 1033 0.27 0.79 0.08 196 XMBody_78 1032 0.40 0.79 0.26 197 URI_OPTOUT_3LD 1029 0.25 0.79 0.05 198 XM_RXBody 1024 0.32 0.78 0.15 199 TR_Mismatch_TLD_02 1007 0.24 0.77 0.05 200 TVD_RCVD_IP 1004 0.80 0.77 0.82 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 363085 99.89 99.94 99.88 2 HTML_MESSAGE 332480 93.03 97.39 91.46 3 XM_B_Unicode 307982 85.21 86.56 84.72 4 BAYES_50 248295 59.98 36.84 68.30 5 XM_B_SpammyWords 245401 66.82 64.93 67.51 6 XM_B_Unicode3 239841 62.78 53.90 65.98 7 DCC_CHECK_NEGATIVE 190523 45.53 26.40 52.41 8 RELAYCOUNTRY_US 185378 59.52 83.23 50.99 9 DKIM_SIGNED 181015 60.19 89.13 49.79 10 XM_DK_Pass 178986 58.05 82.58 49.24 11 DKIM_VALID 178306 57.77 82.05 49.05 12 DCC_CHECK 172881 54.41 73.50 47.56 13 ALL_TRUSTED 168579 34.38 1.02 46.37 14 T_KAM_HTML_FONT_INVALID 154492 37.94 25.28 42.50 15 DKIM_VALID_AU 151437 48.05 65.82 41.66 16 XMListUnsubscribeExists 140011 45.42 64.62 38.51 17 MIME_QP_LONG_LINE 135395 28.84 5.45 37.24 18 TM2_M_URI_OPT_OUT 130024 27.22 3.45 35.77 19 LOC_TINY_FONT_1 88526 31.89 52.87 24.35 20 HTML_FONT_LOW_CONTRAST 75767 26.99 44.09 20.84 21 FVGT_m_MULTI_ODD 67016 23.94 39.24 18.43 22 DKIM_VALID_EF 61604 19.62 27.06 16.95 23 XMSubLong 51914 16.64 23.19 14.28 24 RCVD_IN_MSPIKE_WL 51529 13.71 12.40 14.17 25 XM_B_SpammyWords2 49731 18.66 32.50 13.68 26 T_TM2_M_HEADER_IN_MSG 48989 14.45 17.17 13.48 27 MIME_HTML_ONLY 45935 15.48 23.40 12.64 28 USER_IN_DEF_DKIM_WL 45152 10.55 5.36 12.42 29 RCVD_IN_MSPIKE_H2 37455 14.88 27.61 10.30 30 TR_XM_DK_Unsub 36976 13.00 20.85 10.17 31 XM_Multi_Part_URI 36778 14.27 25.84 10.12 32 XM_B_SpammyTLD 35369 8.65 5.66 9.73 33 UNPARSEABLE_RELAY 33432 12.81 22.88 9.20 34 TR_MAX_INTL_RELAY 32970 10.89 15.94 9.07 35 TR_XM_SpammyWords5 31440 8.38 7.62 8.65 36 BOUNCE_MESSAGE 31309 7.04 2.68 8.61 37 ANY_BOUNCE_MESSAGE 31309 7.04 2.68 8.61 38 SUBJ_ALL_CAPS 31117 7.94 6.22 8.56 39 BAYES_60 27001 8.01 9.62 7.43 40 MIXED_HREF_CASE 25933 5.47 0.82 7.13 41 BAYES_80 25239 7.70 9.80 6.94 42 LotsOfNums_01 24968 6.46 5.33 6.87 43 XM_Evil_Numbers_Gen 22041 7.41 11.17 6.06 44 RCVD_IN_MSPIKE_H3 21347 5.89 5.95 5.87 45 BAYES_00 20099 4.15 0.31 5.53 46 XM_B_Unsub 20043 10.35 23.79 5.51 47 XM_B_PhoneNumber 19300 5.29 5.24 5.31 48 RCVD_IN_MSPIKE_H5 18866 4.71 3.39 5.19 49 T_TooManySym_01 17712 4.16 2.19 4.87 50 XM_DK_Undo_02 16814 15.28 44.93 4.63 51 XM_B_Phish_Phrases 16596 5.66 8.71 4.57 52 HTML_IMAGE_RATIO_02 16162 5.03 6.67 4.45 53 RCVD_IN_VALIDITY_SAFE 16143 3.87 2.28 4.44 54 TR_XM_BayesUnsub 16016 9.44 23.43 4.41 55 XM_DKIMWhitelistDomains 15459 3.13 0.02 4.25 56 XM_B_SpammyWords3 15453 5.96 10.71 4.25 57 TR_XM_DK_Bayes 14421 2.98 0.23 3.97 58 TR_XM_DK_Bayes1 14350 2.96 0.23 3.95 59 XM_H_GMP 13588 4.84 7.90 3.74 60 RCVD_IN_VALIDITY_CERTIFIED 13536 3.09 1.32 3.72 61 BAYES_99 12470 11.88 35.40 3.43 62 TR_XM_DK_Bayes2 12142 2.50 0.16 3.34 63 XM_H_Long_From01 11992 4.44 7.61 3.30 64 TooManyTo_001 11463 3.14 3.12 3.15 65 RCVD_IN_MSPIKE_H4 11316 3.10 3.06 3.11 66 TR_Caps_n_Bayes_80 11086 2.35 0.40 3.05 67 XM_UncommonTLD01 11012 4.22 7.55 3.03 68 HTML_IMAGE_RATIO_04 10951 4.12 7.21 3.01 69 XMStrtUSub 10596 3.14 3.76 2.91 70 LOTS_OF_MONEY 10086 4.74 10.20 2.77 71 RELAYCOUNTRY_META 10049 6.45 16.70 2.76 72 MPART_ALT_DIFF 9948 4.76 10.40 2.74 73 BAYES_999 9761 9.33 27.82 2.69 74 BAYES_40 9535 2.26 1.25 2.62 75 XMNumbers 9177 3.01 4.37 2.52 76 T_TooManySym_02 9153 2.09 0.89 2.52 77 FSL_BULK_SIG 8976 5.26 13.02 2.47 78 BAYES_20 8842 2.03 0.92 2.43 79 BOTNET_IPINHOSTNAME 8580 4.15 9.13 2.36 80 HTML_IMAGE_RATIO_06 8563 2.44 2.67 2.36 81 BAYES_95 7730 3.02 5.49 2.13 82 TO_MALFORMED 7479 1.51 0.00 2.06 83 HTML_IMAGE_RATIO_08 7414 2.05 2.08 2.04 84 RCVD_IN_IADB_LISTED 7320 1.88 1.49 2.01 85 XMSubMetaSx_00 7305 2.99 5.72 2.01 86 MAILING_LIST_MULTI 7085 2.00 2.15 1.95 87 TR_XM_SpammyWords4 6887 3.84 9.26 1.89 88 RCVD_IN_IADB_SPF 6746 1.68 1.21 1.86 89 INVALID_MSGID 6219 1.32 0.25 1.71 90 RCVD_IN_IADB_SENDERID 6215 1.54 1.08 1.71 91 RCVD_IN_IADB_DK 6033 1.51 1.09 1.66 92 TR_XM_UnparsRelay 5971 4.66 13.07 1.64 93 UNTRUSTED_Relay 5614 3.86 10.31 1.54 94 KHOP_HELO_FCRDNS 5566 2.16 3.91 1.53 95 MIME_HTML_MOSTLY 5542 3.15 7.69 1.52 96 T_REMOTE_IMAGE 5479 1.66 2.10 1.51 97 FROM_EXCESS_BASE64 5397 1.50 1.55 1.48 98 TM2_M_VERY_LONG_WORD 5186 2.17 4.25 1.43 99 MIME_HTML_ONLY_MULTI 5122 1.51 1.79 1.41 100 XM_CamelCaseFrm001 5035 1.98 3.62 1.39 101 TR_XM_SpammyRelay 4848 3.54 9.68 1.33 102 MY_SERVERS_FOUND 4769 0.99 0.08 1.31 103 TR_XM_DKIM_Undo 4565 8.52 28.75 1.26 104 XM_Body_Dirty_Words 4554 2.59 6.32 1.25 105 T_XMDrugObfuBody_08 4483 1.47 2.12 1.23 106 T_TooManySym_03 4400 0.94 0.18 1.21 107 TR_XM_PhishingBody 4360 1.98 4.17 1.20 108 BAYES_05 4314 0.97 0.37 1.19 109 HTML_MIME_NO_HTML_TAG 4304 1.13 0.98 1.18 110 RCVD_IN_IADB_VOUCHED 4207 1.10 0.95 1.16 111 XMHTML_After_End 4164 1.10 0.97 1.15 112 T_XMDrugObfuBody_00 4027 1.63 3.08 1.11 113 XM_UB50 3862 1.95 4.43 1.06 114 XM_SendGrid 3243 1.04 1.44 0.89 115 TR_DCC_Bayes_99 3232 7.31 25.17 0.89 116 XM_B_SpammyWords4 3189 1.12 1.79 0.88 117 XMGappySubj_01 3163 0.69 0.20 0.87 118 T_XMDrugObfuBody_14 3159 1.91 4.80 0.87 119 XM_DK_Undo_01 3128 1.01 1.41 0.86 120 XMBrknScrpt_02 3059 0.98 1.35 0.84 121 RCVD_IN_MSPIKE_BL 3046 2.82 8.33 0.84 122 TR_XM_MSPIKECOMBO 2987 2.80 8.29 0.82 123 TVD_RCVD_IP 2967 0.80 0.77 0.82 124 RCVD_IN_IADB_OPTIN 2964 0.77 0.64 0.82 125 IN_HORDE_ADDRESS_BOOK 2953 0.61 0.05 0.81 126 XM_B_URI_Unicode 2919 1.18 2.24 0.80 127 TooManyTo_002 2913 0.68 0.35 0.80 128 XM_B_COPY_HTML 2907 0.91 1.21 0.80 129 XM_B_Investor 2903 1.28 2.61 0.80 130 XM_PDF 2884 0.65 0.25 0.79 131 XMBdyGiftCard01 2722 1.57 3.86 0.75 132 RCVD_IN_BL_SPAMCOP_NET 2716 4.73 15.83 0.75 133 DKIM_INVALID 2709 2.42 7.08 0.75 134 XM_GoogleGroups 2708 0.82 1.03 0.74 135 BOTNET 2689 3.47 11.08 0.74 136 XM_SPF_SoftFail 2674 1.68 4.30 0.74 137 XMDiploma_00 2636 0.84 1.17 0.73 138 XMSubMetaI_00 2607 0.99 1.74 0.72 139 URI_NOVOWEL 2556 0.94 1.60 0.70 140 XMSexyCombo_05 2553 1.51 3.74 0.70 141 TVD_SPACE_RATIO 2415 0.55 0.22 0.66 142 XMBSHREFv2 2354 0.54 0.25 0.65 143 RCVD_IN_MSPIKE_L3 2317 1.36 3.38 0.64 144 TR_XM_DK_SendGrid 2306 0.72 0.97 0.63 145 XM_B_Unsub2 2260 1.19 2.76 0.62 146 XM_H_Long_From02 2256 0.63 0.64 0.62 147 XMStockSpam_06 2137 1.77 5.06 0.59 148 XMGappySubj_02 2127 0.44 0.03 0.59 149 DKIM_ADSP_NXDOMAIN 2108 1.46 3.90 0.58 150 T_XMHurry_00 2030 0.94 1.99 0.56 151 TO_NO_BRKTS_HTML_ONLY 2022 0.44 0.10 0.56 152 URI_HEX 1993 0.71 1.17 0.55 153 TR_Symld_Words 1847 0.79 1.58 0.51 154 RELAYCOUNTRY_AU 1796 1.07 2.69 0.49 155 RELAYCOUNTRY_CA 1786 1.12 2.87 0.49 156 TR_XM_Base64_M1 1642 0.47 0.52 0.45 157 PDS_LITECOIN_ID 1631 0.38 0.21 0.45 158 URI_TRY_3LD 1599 0.51 0.72 0.44 159 XM_ProductURIs 1588 0.70 1.44 0.44 160 TooManyTo_003 1576 0.39 0.27 0.43 161 XMPhish30 1563 0.86 2.07 0.43 162 T_TooManySym_04 1543 0.32 0.03 0.42 163 XM_B_DNDMA 1537 0.66 1.33 0.42 164 XMBody_17 1513 0.89 2.22 0.42 165 T_TVD_MIME_NO_HEADERS 1507 0.32 0.05 0.41 166 TR_XM_GMP_MSPIKE_UNDO2 1488 0.39 0.34 0.41 167 PLING_QUERY 1459 0.53 0.88 0.40 168 MPART_ALT_DIFF_COUNT 1428 0.83 2.06 0.39 169 FONT_INVIS_LONG_LINE 1419 0.36 0.26 0.39 170 TR_XM_SpammyWords3 1415 1.23 3.57 0.39 171 DKIM_ADSP_CUSTOM_MED 1396 0.47 0.71 0.38 172 RELAYCOUNTRY_GB 1393 0.48 0.75 0.38 173 THIS_AD 1373 0.87 2.22 0.38 174 TR_MetaPhish_Combo_01 1365 0.41 0.51 0.38 175 XM_URI_RBL 1330 0.76 1.84 0.37 176 XM_Ancestry_Forge 1273 0.26 0.00 0.35 177 XMNoVowels 1268 0.34 0.30 0.35 178 TR_XM_SPAMCOP 1247 2.94 10.17 0.34 179 XMSolicitRefs_0 1241 0.34 0.33 0.34 180 TooManyTo_004 1237 0.32 0.25 0.34 181 LOW_PRICE 1225 0.40 0.58 0.34 182 RELAYCOUNTRY_DE 1198 0.42 0.69 0.33 183 T_FILL_THIS_FORM_SHORT 1189 0.48 0.92 0.33 184 XM_H_PHPMailer 1179 0.33 0.35 0.32 185 XMHTMLBadTable_001 1172 0.39 0.58 0.32 186 HTML_TAG_BALANCE_BODY 1170 0.48 0.93 0.32 187 XMSubMetaSxObfu_03 1164 0.53 1.10 0.32 188 XM_B_Phish66 1131 0.52 1.10 0.31 189 TM2_M_OBFU_COMMENT 1130 0.35 0.47 0.31 190 XM_OfRef6 1112 0.67 1.67 0.31 191 XMClaimOffer 1075 0.50 1.06 0.30 192 FORGED_GMAIL_RCVD 1053 0.37 0.61 0.29 193 TooManyTo_005 1052 0.27 0.23 0.29 194 XMLngstWrd_00 1046 0.47 0.96 0.29 195 TR_XM_NoHeaderRelay 1046 1.07 3.23 0.29 196 T_Symld_Words_02 1028 0.35 0.55 0.28 197 DIET_1 976 0.42 0.85 0.27 198 RELAYCOUNTRY_FR 968 0.62 1.60 0.27 199 XMPhish14 960 0.36 0.63 0.26 200 XM_Sams_Club_Forge 956 0.25 0.20 0.26 ----------------------------------------------------------------------