Email: 334679 Autolearn: 0 AvgScore: 5.76 AvgScanTime: 1.35 sec Spam: 127597 Autolearn: 0 AvgScore: 13.58 AvgScanTime: 1.51 sec Ham: 207082 Autolearn: 0 AvgScore: 0.94 AvgScanTime: 1.26 sec Time Spent Running SA: 125.73 hours Time Spent Processing Spam: 53.49 hours Time Spent Processing Ham: 72.24 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 127523 99.74 99.94 99.62 2 HTML_MESSAGE 123472 89.72 96.77 85.37 3 DKIM_SIGNED 118110 84.18 92.56 79.01 4 XM_DK_Pass 111561 81.73 87.43 78.21 5 DKIM_VALID 111008 81.37 87.00 77.91 6 XM_B_Unicode 110900 80.02 86.91 75.77 7 RELAYCOUNTRY_US 107692 83.41 84.40 82.80 8 DCC_CHECK 98567 57.20 77.25 44.85 9 XMListUnsubscribeExists 92623 63.94 72.59 58.61 10 DKIM_VALID_AU 87513 68.20 68.59 67.96 11 XM_B_SpammyWords 85301 56.38 66.85 49.92 12 LOC_TINY_FONT_1 71633 47.11 56.14 41.54 13 XM_B_Unicode3 65945 51.19 51.68 50.88 14 XM_DK_Undo_02 59673 21.77 46.77 6.37 15 HTML_FONT_LOW_CONTRAST 59516 38.90 46.64 34.13 16 FVGT_m_MULTI_ODD 51513 32.58 40.37 27.78 17 BAYES_50 46060 51.52 36.10 61.02 18 XM_B_SpammyWords2 46040 29.10 36.08 24.80 19 BAYES_99 42613 15.65 33.40 4.72 20 TR_XM_DKIM_Undo 39643 13.17 31.07 2.15 21 DKIM_VALID_EF 38448 29.37 30.13 28.90 22 XM_Multi_Part_URI 34695 21.62 27.19 18.19 23 RCVD_IN_MSPIKE_H2 33693 19.49 26.41 15.23 24 T_KAM_HTML_FONT_INVALID 33546 24.44 26.29 23.31 25 BAYES_999 32102 11.83 25.16 3.61 26 MIME_HTML_ONLY 32096 22.70 25.15 21.18 27 TR_XM_DK_Unsub 32059 19.43 25.13 15.92 28 UNPARSEABLE_RELAY 31829 18.78 24.94 14.97 29 TR_DCC_Bayes_99 30654 9.97 24.02 1.31 30 DCC_CHECK_NEGATIVE 28893 42.72 22.64 55.09 31 XMSubLong 27724 22.22 21.73 22.52 32 RCVD_IN_BL_SPAMCOP_NET 23654 7.72 18.54 1.06 33 XM_B_Unsub 23193 12.50 18.18 9.01 34 TR_XM_BayesUnsub 22235 10.82 17.43 6.75 35 T_TM2_M_HEADER_IN_MSG 22081 19.93 17.31 21.55 36 TR_MAX_INTL_RELAY 21974 11.31 17.22 7.66 37 RELAYCOUNTRY_META 19335 7.57 15.15 2.89 38 TR_XM_UnparsRelay 16591 6.55 13.00 2.57 39 RCVD_IN_MSPIKE_WL 16031 18.06 12.56 21.44 40 XM_B_SpammyWords3 15777 9.91 12.36 8.40 41 TR_XM_SpammyWords2 15168 4.78 11.89 0.41 42 TR_XM_SpammyRelay 14221 5.28 11.15 1.66 43 TR_XM_SPAMCOP 13905 4.38 10.90 0.37 44 LOTS_OF_MONEY 13330 7.18 10.45 5.17 45 BAYES_80 13280 6.86 10.41 4.68 46 BOTNET 13242 4.66 10.38 1.14 47 XM_Evil_Numbers_Gen 13210 10.82 10.35 11.10 48 BOTNET_IPINHOSTNAME 13021 6.15 10.20 3.64 49 FSL_BULK_SIG 12544 6.62 9.83 4.65 50 BAYES_60 12268 8.86 9.61 8.39 51 TR_XM_SpammyWords4 11994 5.78 9.40 3.55 52 HTML_IMAGE_RATIO_02 10969 7.56 8.60 6.93 53 XM_B_Phish_Phrases 10423 6.91 8.17 6.14 54 MPART_ALT_DIFF 10070 5.54 7.89 4.09 55 RCVD_IN_MSPIKE_BL 10048 3.69 7.87 1.11 56 TR_XM_MSPIKECOMBO 10030 3.69 7.86 1.11 57 XM_H_GMP 8733 5.49 6.84 4.65 58 UNTRUSTED_Relay 8447 3.74 6.62 1.96 59 BAYES_95 7952 4.22 6.23 2.98 60 XM_H_Long_From01 7731 5.72 6.06 5.51 61 XMSubMetaSx_00 7364 4.21 5.77 3.25 62 RCVD_IN_MSPIKE_H3 7203 7.59 5.65 8.78 63 RELAYCOUNTRY_CA 7180 2.63 5.63 0.78 64 DKIM_INVALID 7102 2.80 5.57 1.10 65 XM_UncommonTLD01 6757 4.57 5.30 4.13 66 MIME_HTML_MOSTLY 6680 3.36 5.24 2.21 67 TR_XM_SpammyWords3 6320 2.26 4.95 0.61 68 XM_B_PhoneNumber 6300 6.72 4.94 7.83 69 HTML_IMAGE_RATIO_04 6283 4.82 4.92 4.76 70 XMStrtUSub 6245 5.44 4.89 5.77 71 XM_B_SpammyTLD 6221 3.79 4.88 3.13 72 TR_XM_PhishingBody 6137 2.84 4.81 1.62 73 RCVD_IN_MSPIKE_L3 5917 2.31 4.64 0.88 74 LotsOfNums_01 5802 7.09 4.55 8.66 75 XM_Body_Dirty_Words 5716 2.94 4.48 1.99 76 T_XMDrugObfuBody_14 5544 2.56 4.34 1.46 77 TM2_M_VERY_LONG_WORD 5066 2.66 3.97 1.86 78 XM_B_Investor 4880 2.42 3.82 1.55 79 TR_XM_SpammyWords5 4776 2.47 3.74 1.69 80 SUBJ_ALL_CAPS 4774 2.57 3.74 1.84 81 RCVD_IN_MSPIKE_H5 4680 6.07 3.67 7.56 82 XM_CamelCaseFrm001 4553 2.78 3.57 2.30 83 XMBody_17 4486 1.82 3.52 0.77 84 T_XMHurry_00 4445 1.95 3.48 1.01 85 TR_XM_MSPIKECOMBO2 4310 1.33 3.38 0.07 86 XMSexyCombo_05 4289 1.86 3.36 0.94 87 USER_IN_DEF_DKIM_WL 4240 13.49 3.32 19.75 88 RCVD_IN_MSPIKE_H4 4148 4.39 3.25 5.10 89 XMNumbers 4069 3.97 3.19 4.46 90 TooManyTo_001 3877 4.14 3.04 4.82 91 T_XMDrugObfuBody_08 3779 1.92 2.96 1.27 92 RCVD_IN_VALIDITY_RPBL 3705 1.12 2.90 0.03 93 XMStockSpam_06 3699 1.69 2.90 0.95 94 DKIM_ADSP_NXDOMAIN 3645 1.36 2.86 0.44 95 T_TooManySym_01 3640 5.96 2.85 7.88 96 T_REMOTE_IMAGE 3604 3.02 2.82 3.14 97 HTML_IMAGE_RATIO_06 3604 3.08 2.82 3.24 98 XM_OfRef6 3478 1.51 2.73 0.76 99 BOTNET_NORDNS 3466 1.04 2.72 0.01 100 XM_UB50 3328 1.79 2.61 1.29 101 THIS_AD 3270 1.35 2.56 0.61 102 T_FILL_THIS_FORM_SHORT 3266 1.40 2.56 0.68 103 TR_XM_NoHeaderRelay 3263 1.04 2.56 0.11 104 XM_ProductURIs 3230 1.36 2.53 0.63 105 XM_SPF_SoftFail 3108 1.54 2.44 0.99 106 SHOPIFY_IMG_NOT_RCVD_SFY 3066 1.18 2.40 0.42 107 MIME_QP_LONG_LINE 3056 3.39 2.40 4.00 108 HTML_IMAGE_RATIO_08 3047 2.67 2.39 2.84 109 RELAYCOUNTRY_AU 3035 1.11 2.38 0.33 110 RCVD_IN_VALIDITY_SAFE 3001 5.25 2.35 7.03 111 TM2_M_URI_OPT_OUT 2985 2.21 2.34 2.13 112 XM_B_SpammyWords4 2958 1.68 2.32 1.28 113 XMDiploma_00 2953 1.79 2.31 1.47 114 MIME_HTML_ONLY_MULTI 2926 2.38 2.29 2.43 115 XM_B_Unsub2 2903 1.53 2.28 1.07 116 MPART_ALT_DIFF_COUNT 2892 1.31 2.27 0.72 117 XM_B_URI_Unicode 2866 1.87 2.25 1.64 118 TR_XM_INV_DKIM 2825 0.86 2.21 0.02 119 TR_XM_GMP_BULK_SIG 2716 0.84 2.13 0.05 120 TR_XM_MaxSPIKE 2564 0.81 2.01 0.07 121 XMPhish30 2544 1.20 1.99 0.72 122 XMBrknScrpt_02 2512 1.64 1.97 1.44 123 XMSubMetaI_00 2471 1.40 1.94 1.07 124 RCVD_IN_MSPIKE_L4 2408 0.84 1.89 0.19 125 URI_NOVOWEL 2355 1.44 1.85 1.20 126 XM_URI_RBL 2344 1.00 1.84 0.48 127 RCVD_IN_PSBL 2326 0.70 1.82 0.01 128 MAILING_LIST_MULTI 2276 2.17 1.78 2.42 129 SpammyFromTLD_02 2268 0.81 1.78 0.22 130 KHOP_HELO_FCRDNS 2227 1.93 1.75 2.05 131 XM_UB99 2155 0.64 1.69 0.00 132 BAYES_40 2151 3.46 1.69 4.56 133 XM_H_Long_From02 2135 1.19 1.67 0.89 134 LOW_PRICE 2116 0.97 1.66 0.54 135 FROM_EXCESS_BASE64 2051 2.35 1.61 2.81 136 XM_H_DKIM_GOOG 1906 0.57 1.49 0.00 137 DIET_1 1818 0.83 1.42 0.46 138 T_MONEY_PERCENT 1816 0.80 1.42 0.41 139 TR_LOTS_OF_MONEY2 1816 0.80 1.42 0.41 140 RCVD_IN_VALIDITY_CERTIFIED 1802 3.83 1.41 5.32 141 BAYES_20 1800 2.47 1.41 3.12 142 XM_DK_Undo_01 1800 1.49 1.41 1.54 143 XMBdyGiftCard01 1752 1.29 1.37 1.25 144 SpammyFromTLD_01 1723 0.72 1.35 0.33 145 RCVD_IN_MSPIKE_L5 1705 0.53 1.34 0.04 146 XM_B_REG_HTML 1703 0.67 1.33 0.26 147 XMClaimOffer 1694 0.99 1.33 0.78 148 RDNS_DYNAMIC 1667 0.64 1.31 0.22 149 RELAYCOUNTRY_FR 1651 0.68 1.29 0.30 150 XM_UB999 1641 0.49 1.29 0.00 151 TR_Symld_Words 1610 1.11 1.26 1.02 152 T_Symld_Words_02 1580 0.65 1.24 0.30 153 PLING_QUERY 1574 0.87 1.23 0.65 154 XMPhish14 1543 0.74 1.21 0.44 155 XM_B_DNDMA 1526 1.10 1.20 1.04 156 TR_XM_FormFill 1482 0.45 1.16 0.02 157 ALL_TRUSTED 1480 9.10 1.16 13.99 158 XM_SendGrid 1430 1.40 1.12 1.58 159 RCVD_IN_IADB_LISTED 1404 2.12 1.10 2.74 160 TR_LOTS_OF_MONEY3 1377 0.69 1.08 0.45 161 XM_GoogleGroups 1373 0.96 1.08 0.89 162 TR_Caps_n_Bayes_99 1360 0.43 1.07 0.04 163 TVD_RCVD_IP 1358 1.20 1.06 1.29 164 HTML_TAG_BALANCE_BODY 1337 0.80 1.05 0.65 165 HTML_IMAGE_ONLY_28 1330 0.55 1.04 0.25 166 TR_XM_InvalidRelay 1327 0.40 1.04 0.01 167 HELO_DYNAMIC_SPLIT_IP 1323 0.40 1.04 0.01 168 MultiRelay_CC 1322 0.46 1.04 0.10 169 T_TooManySym_02 1321 2.88 1.04 4.02 170 MONEY_BACK 1282 0.60 1.00 0.36 171 TR_Mismatch_TLD_02 1255 0.41 0.98 0.06 172 RELAYCOUNTRY_RU 1235 0.38 0.97 0.02 173 HK_RANDOM_REPLYTO 1233 0.42 0.97 0.08 174 HTML_IMAGE_ONLY_20 1229 0.55 0.96 0.29 175 ANY_BOUNCE_MESSAGE 1227 4.10 0.96 6.04 176 BOUNCE_MESSAGE 1226 4.10 0.96 6.03 177 XM_B_COPY_HTML 1221 0.90 0.96 0.87 178 XM_DIRTYINTL 1201 0.38 0.94 0.04 179 HTML_IMAGE_ONLY_24 1200 0.47 0.94 0.18 180 URI_TRY_3LD 1190 0.73 0.93 0.61 181 XMGenDplmaNmb 1186 0.81 0.93 0.73 182 XMBody_78 1184 0.52 0.93 0.28 183 NO_DNS_FOR_FROM 1178 0.59 0.92 0.39 184 TR_XM_MaxWHORU 1172 0.55 0.92 0.32 185 HTML_TEXT_INVISIBLE_STYLE 1149 0.52 0.90 0.28 186 XM_B_Phish66 1145 0.53 0.90 0.31 187 TM2_M_A_HREF_HREF 1137 0.61 0.89 0.44 188 T_XMDrugObfuBody_00 1107 1.05 0.87 1.17 189 RCVD_IN_IADB_SPF 1105 1.89 0.87 2.51 190 XMSubMetaSxObfu_03 1105 0.74 0.87 0.66 191 XM_B_SEO 1103 0.45 0.86 0.19 192 XM_UB60 1090 0.39 0.85 0.10 193 URI_HEX 1086 0.86 0.85 0.87 194 DKIM_ADSP_CUSTOM_MED 1080 0.74 0.85 0.68 195 TR_XM_Base64_M1 1045 0.72 0.82 0.65 196 RCVD_IN_IADB_VOUCHED 1013 1.29 0.79 1.60 197 TR_XM_DK_SendGrid 998 1.05 0.78 1.22 198 FORGED_GMAIL_RCVD 992 0.61 0.78 0.50 199 XMPhish08 985 0.33 0.77 0.06 200 FORGED_MUA_OUTLOOK 968 0.31 0.76 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 206289 99.74 99.94 99.62 2 HTML_MESSAGE 176788 89.72 96.77 85.37 3 RELAYCOUNTRY_US 171459 83.41 84.40 82.80 4 DKIM_SIGNED 163610 84.18 92.56 79.01 5 XM_DK_Pass 161967 81.73 87.43 78.21 6 DKIM_VALID 161328 81.37 87.00 77.91 7 XM_B_Unicode 156901 80.02 86.91 75.77 8 DKIM_VALID_AU 140732 68.20 68.59 67.96 9 BAYES_50 126369 51.52 36.10 61.02 10 XMListUnsubscribeExists 121375 63.94 72.59 58.61 11 DCC_CHECK_NEGATIVE 114085 42.72 22.64 55.09 12 XM_B_Unicode3 105366 51.19 51.68 50.88 13 XM_B_SpammyWords 103375 56.38 66.85 49.92 14 DCC_CHECK 92869 57.20 77.25 44.85 15 LOC_TINY_FONT_1 86029 47.11 56.14 41.54 16 HTML_FONT_LOW_CONTRAST 70678 38.90 46.64 34.13 17 DKIM_VALID_EF 59850 29.37 30.13 28.90 18 FVGT_m_MULTI_ODD 57537 32.58 40.37 27.78 19 XM_B_SpammyWords2 51347 29.10 36.08 24.80 20 T_KAM_HTML_FONT_INVALID 48263 24.44 26.29 23.31 21 XMSubLong 46635 22.22 21.73 22.52 22 T_TM2_M_HEADER_IN_MSG 44631 19.93 17.31 21.55 23 RCVD_IN_MSPIKE_WL 44397 18.06 12.56 21.44 24 MIME_HTML_ONLY 43868 22.70 25.15 21.18 25 USER_IN_DEF_DKIM_WL 40906 13.49 3.32 19.75 26 XM_Multi_Part_URI 37670 21.62 27.19 18.19 27 TR_XM_DK_Unsub 32966 19.43 25.13 15.92 28 RCVD_IN_MSPIKE_H2 31546 19.49 26.41 15.23 29 UNPARSEABLE_RELAY 31008 18.78 24.94 14.97 30 ALL_TRUSTED 28973 9.10 1.16 13.99 31 XM_Evil_Numbers_Gen 22986 10.82 10.35 11.10 32 XM_B_Unsub 18654 12.50 18.18 9.01 33 BAYES_00 18222 5.60 0.40 8.80 34 RCVD_IN_MSPIKE_H3 18189 7.59 5.65 8.78 35 XM_DKIMWhitelistDomains 18129 5.44 0.06 8.75 36 LotsOfNums_01 17936 7.09 4.55 8.66 37 XM_B_SpammyWords3 17391 9.91 12.36 8.40 38 BAYES_60 17372 8.86 9.61 8.39 39 T_TooManySym_01 16313 5.96 2.85 7.88 40 XM_B_PhoneNumber 16207 6.72 4.94 7.83 41 TR_MAX_INTL_RELAY 15866 11.31 17.22 7.66 42 RCVD_IN_MSPIKE_H5 15649 6.07 3.67 7.56 43 TR_XM_DK_Bayes 14573 4.45 0.24 7.04 44 RCVD_IN_VALIDITY_SAFE 14561 5.25 2.35 7.03 45 TR_XM_DK_Bayes1 14479 4.42 0.24 6.99 46 HTML_IMAGE_RATIO_02 14346 7.56 8.60 6.93 47 TR_XM_BayesUnsub 13976 10.82 17.43 6.75 48 XM_DK_Undo_02 13191 21.77 46.77 6.37 49 XM_B_Phish_Phrases 12712 6.91 8.17 6.14 50 TR_XM_DK_Bayes2 12517 3.80 0.15 6.04 51 ANY_BOUNCE_MESSAGE 12501 4.10 0.96 6.04 52 BOUNCE_MESSAGE 12496 4.10 0.96 6.03 53 XMStrtUSub 11948 5.44 4.89 5.77 54 XM_H_Long_From01 11413 5.72 6.06 5.51 55 RCVD_IN_VALIDITY_CERTIFIED 11020 3.83 1.41 5.32 56 LOTS_OF_MONEY 10716 7.18 10.45 5.17 57 RCVD_IN_MSPIKE_H4 10559 4.39 3.25 5.10 58 TooManyTo_001 9982 4.14 3.04 4.82 59 HTML_IMAGE_RATIO_04 9862 4.82 4.92 4.76 60 BAYES_99 9765 15.65 33.40 4.72 61 BAYES_80 9695 6.86 10.41 4.68 62 XM_H_GMP 9638 5.49 6.84 4.65 63 FSL_BULK_SIG 9620 6.62 9.83 4.65 64 BAYES_40 9438 3.46 1.69 4.56 65 XMNumbers 9227 3.97 3.19 4.46 66 XM_UncommonTLD01 8551 4.57 5.30 4.13 67 MPART_ALT_DIFF 8472 5.54 7.89 4.09 68 T_TooManySym_02 8333 2.88 1.04 4.02 69 MIME_QP_LONG_LINE 8287 3.39 2.40 4.00 70 BOTNET_IPINHOSTNAME 7548 6.15 10.20 3.64 71 BAYES_999 7475 11.83 25.16 3.61 72 TR_XM_SpammyWords4 7357 5.78 9.40 3.55 73 TO_MALFORMED 7265 2.18 0.01 3.51 74 XMSubMetaSx_00 6733 4.21 5.77 3.25 75 HTML_IMAGE_RATIO_06 6704 3.08 2.82 3.24 76 INVALID_MSGID 6660 2.09 0.26 3.22 77 T_TVD_MIME_NO_HEADERS 6552 1.97 0.02 3.16 78 T_REMOTE_IMAGE 6498 3.02 2.82 3.14 79 XM_B_SpammyTLD 6479 3.79 4.88 3.13 80 BAYES_20 6456 2.47 1.41 3.12 81 BAYES_95 6170 4.22 6.23 2.98 82 RELAYCOUNTRY_META 5986 7.57 15.15 2.89 83 HTML_IMAGE_RATIO_08 5891 2.67 2.39 2.84 84 FROM_EXCESS_BASE64 5825 2.35 1.61 2.81 85 RCVD_IN_IADB_LISTED 5679 2.12 1.10 2.74 86 TR_XM_UnparsRelay 5327 6.55 13.00 2.57 87 RCVD_IN_IADB_SPF 5208 1.89 0.87 2.51 88 MIME_HTML_ONLY_MULTI 5030 2.38 2.29 2.43 89 MAILING_LIST_MULTI 5002 2.17 1.78 2.42 90 RCVD_IN_IADB_SENDERID 4795 1.72 0.74 2.32 91 XM_CamelCaseFrm001 4763 2.78 3.57 2.30 92 RCVD_IN_IADB_DK 4671 1.68 0.75 2.26 93 MIME_HTML_MOSTLY 4581 3.36 5.24 2.21 94 TR_XM_DKIM_Undo 4450 13.17 31.07 2.15 95 TM2_M_URI_OPT_OUT 4403 2.21 2.34 2.13 96 XM_PDF 4295 1.38 0.26 2.07 97 KHOP_HELO_FCRDNS 4242 1.93 1.75 2.05 98 XM_Body_Dirty_Words 4117 2.94 4.48 1.99 99 UNTRUSTED_Relay 4066 3.74 6.62 1.96 100 TM2_M_VERY_LONG_WORD 3847 2.66 3.97 1.86 101 SUBJ_ALL_CAPS 3815 2.57 3.74 1.84 102 T_TooManySym_03 3766 1.22 0.24 1.82 103 BAYES_05 3592 1.36 0.75 1.73 104 TR_XM_SpammyWords5 3503 2.47 3.74 1.69 105 TR_XM_SpammyRelay 3442 5.28 11.15 1.66 106 XM_B_URI_Unicode 3386 1.87 2.25 1.64 107 TR_XM_PhishingBody 3352 2.84 4.81 1.62 108 RCVD_IN_IADB_VOUCHED 3307 1.29 0.79 1.60 109 XM_SendGrid 3264 1.40 1.12 1.58 110 XM_B_Investor 3203 2.42 3.82 1.55 111 XM_DK_Undo_01 3186 1.49 1.41 1.54 112 HTML_MIME_NO_HTML_TAG 3157 1.18 0.62 1.52 113 XMDiploma_00 3036 1.79 2.31 1.47 114 T_XMDrugObfuBody_14 3018 2.56 4.34 1.46 115 IN_HORDE_ADDRESS_BOOK 3000 0.92 0.06 1.45 116 XMBrknScrpt_02 2983 1.64 1.97 1.44 117 TooManyTo_002 2934 0.99 0.30 1.42 118 TR_DCC_Bayes_99 2710 9.97 24.02 1.31 119 XM_UB50 2675 1.79 2.61 1.29 120 TVD_RCVD_IP 2671 1.20 1.06 1.29 121 XM_B_SpammyWords4 2657 1.68 2.32 1.28 122 T_XMDrugObfuBody_08 2631 1.92 2.96 1.27 123 XMBdyGiftCard01 2581 1.29 1.37 1.25 124 TVD_SPACE_RATIO 2550 0.88 0.30 1.23 125 TR_XM_DK_SendGrid 2531 1.05 0.78 1.22 126 XMGappySubj_01 2487 0.90 0.41 1.20 127 URI_NOVOWEL 2479 1.44 1.85 1.20 128 T_XMDrugObfuBody_00 2419 1.05 0.87 1.17 129 BOTNET 2356 4.66 10.38 1.14 130 RCVD_IN_MSPIKE_BL 2306 3.69 7.87 1.11 131 TR_XM_MSPIKECOMBO 2304 3.69 7.86 1.11 132 RCVD_IN_IADB_OPTIN 2299 0.88 0.52 1.11 133 DKIM_INVALID 2282 2.80 5.57 1.10 134 XMBody_95 2263 0.76 0.21 1.09 135 XM_B_Unsub2 2226 1.53 2.28 1.07 136 XMSubMetaI_00 2222 1.40 1.94 1.07 137 RCVD_IN_BL_SPAMCOP_NET 2193 7.72 18.54 1.06 138 XM_B_DNDMA 2150 1.10 1.20 1.04 139 XMGappySubj_02 2127 0.72 0.21 1.03 140 TR_Symld_Words 2108 1.11 1.26 1.02 141 T_XMHurry_00 2084 1.95 3.48 1.01 142 XM_SPF_SoftFail 2058 1.54 2.44 0.99 143 XMBSHREFv2 2043 0.71 0.26 0.99 144 XMStockSpam_06 1966 1.69 2.90 0.95 145 XMSexyCombo_05 1947 1.86 3.36 0.94 146 XM_GoogleGroups 1851 0.96 1.08 0.89 147 XM_H_Long_From02 1846 1.19 1.67 0.89 148 RCVD_IN_MSPIKE_L3 1827 2.31 4.64 0.88 149 TR_XM_FormFill2 1807 0.77 0.61 0.87 150 URI_HEX 1803 0.86 0.85 0.87 151 XM_B_COPY_HTML 1802 0.90 0.96 0.87 152 TR_XM_PHPForged 1794 0.77 0.62 0.87 153 TR_XM_PHPDW 1793 0.76 0.60 0.87 154 XM_H_PHPOS 1778 0.76 0.59 0.86 155 RELAYCOUNTRY_CA 1617 2.63 5.63 0.78 156 XMClaimOffer 1606 0.99 1.33 0.78 157 XMBody_17 1591 1.82 3.52 0.77 158 XM_OfRef6 1583 1.51 2.73 0.76 159 XMGenDplmaNmb 1518 0.81 0.93 0.73 160 MPART_ALT_DIFF_COUNT 1490 1.31 2.27 0.72 161 XMPhish30 1482 1.20 1.99 0.72 162 T_TooManySym_04 1454 0.45 0.04 0.70 163 T_FILL_THIS_FORM_SHORT 1418 1.40 2.56 0.68 164 DKIM_ADSP_CUSTOM_MED 1411 0.74 0.85 0.68 165 TooManyTo_003 1377 0.50 0.24 0.66 166 XMSubMetaSxObfu_03 1373 0.74 0.87 0.66 167 HTML_IMAGE_ONLY_12 1362 0.53 0.32 0.66 168 PLING_QUERY 1353 0.87 1.23 0.65 169 TR_XM_Base64_M1 1350 0.72 0.82 0.65 170 HTML_TAG_BALANCE_BODY 1345 0.80 1.05 0.65 171 FONT_INVIS_LONG_LINE 1340 0.60 0.51 0.65 172 XM_ProductURIs 1307 1.36 2.53 0.63 173 TR_XM_GMP_MSPIKE_UNDO2 1275 0.50 0.32 0.62 174 THIS_AD 1263 1.35 2.56 0.61 175 URI_TRY_3LD 1256 0.73 0.93 0.61 176 TR_XM_SpammyWords3 1256 2.26 4.95 0.61 177 XM_B_FormFill 1223 0.37 0.01 0.59 178 XM_H_PHPMailer 1222 0.48 0.30 0.59 179 TR_MetaPhish_Combo_01 1204 0.54 0.46 0.58 180 XMSlimDrugH 1166 0.53 0.48 0.56 181 HTML_IMAGE_ONLY_16 1149 0.38 0.11 0.55 182 TM2_M_OBFU_COMMENT 1137 0.49 0.38 0.55 183 LOW_PRICE 1118 0.97 1.66 0.54 184 TooManyTo_004 1104 0.40 0.20 0.53 185 XMHTML_After_End 1101 0.60 0.71 0.53 186 XMNoVowels 1081 0.48 0.41 0.52 187 FORGED_GMAIL_RCVD 1042 0.61 0.78 0.50 188 XMSolicitRefs_0 1009 0.54 0.62 0.49 189 SUBJ_DOLLARS 1005 0.58 0.73 0.49 190 XM_URI_RBL 998 1.00 1.84 0.48 191 TRACKER_ID 984 0.33 0.10 0.48 192 XM_S_SubURI 959 0.29 0.02 0.46 193 DIET_1 947 0.83 1.42 0.46 194 TR_LOTS_OF_MONEY3 938 0.69 1.08 0.45 195 TooManyTo_005 936 0.35 0.18 0.45 196 XMPhish14 918 0.74 1.21 0.44 197 DKIM_ADSP_NXDOMAIN 907 1.36 2.86 0.44 198 TM2_M_A_HREF_HREF 903 0.61 0.89 0.44 199 XMLngstWrd_00 902 0.32 0.13 0.44 200 SHOPIFY_IMG_NOT_RCVD_SFY 869 1.18 2.40 0.42 ----------------------------------------------------------------------