Email: 254354 Autolearn: 0 AvgScore: 5.29 AvgScanTime: 1.38 sec Spam: 88173 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.47 sec Ham: 166181 Autolearn: 0 AvgScore: 0.69 AvgScanTime: 1.33 sec Time Spent Running SA: 97.58 hours Time Spent Processing Spam: 36.09 hours Time Spent Processing Ham: 61.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 87657 99.59 99.41 99.69 2 HTML_MESSAGE 83626 87.70 94.84 83.90 3 DKIM_SIGNED 79001 80.45 89.60 75.59 4 XM_DK_Pass 74880 78.16 84.92 74.58 5 XM_B_Unicode 74753 75.48 84.78 70.54 6 DKIM_VALID 74275 77.58 84.24 74.05 7 RELAYCOUNTRY_US 71100 80.83 80.64 80.93 8 DCC_CHECK 69942 59.44 79.32 48.89 9 XM_B_SpammyWords 61304 54.56 69.53 46.62 10 XMListUnsubscribeExists 61118 59.23 69.32 53.88 11 DKIM_VALID_AU 59523 64.63 67.51 63.11 12 XM_B_Unicode3 44328 46.63 50.27 44.69 13 LOC_TINY_FONT_1 44029 38.55 49.93 32.50 14 XM_DK_Undo_02 37157 18.83 42.14 6.47 15 XM_B_SpammyWords2 36350 28.48 41.23 21.72 16 BAYES_50 32903 52.68 37.32 60.83 17 HTML_FONT_LOW_CONTRAST 32369 33.38 36.71 31.62 18 BAYES_99 30384 15.49 34.46 5.42 19 FVGT_m_MULTI_ODD 29245 29.75 33.17 27.94 20 DKIM_VALID_EF 27943 30.78 31.69 30.29 21 TR_XM_DKIM_Undo 27063 12.21 30.69 2.40 22 T_KAM_HTML_FONT_INVALID 26538 24.08 30.10 20.89 23 MIME_HTML_ONLY 26331 24.87 29.86 22.22 24 BAYES_999 23342 12.03 26.47 4.37 25 TR_DCC_Bayes_99 22640 10.20 25.68 1.98 26 TR_XM_DK_Unsub 21765 19.27 24.68 16.40 27 XMSubLong 19342 23.45 21.94 24.26 28 XM_B_Unsub 18526 15.01 21.01 11.82 29 XM_Multi_Part_URI 18332 18.15 20.79 16.75 30 TR_XM_BayesUnsub 17904 12.59 20.31 8.49 31 T_TM2_M_HEADER_IN_MSG 17870 23.89 20.27 25.81 32 DCC_CHECK_NEGATIVE 17802 40.38 20.19 51.09 33 RELAYCOUNTRY_META 16853 8.75 19.11 3.25 34 UNPARSEABLE_RELAY 16039 15.01 18.19 13.32 35 RCVD_IN_MSPIKE_H2 15145 15.16 17.18 14.10 36 TR_MAX_INTL_RELAY 13892 9.99 15.76 6.93 37 XM_B_SpammyWords3 12972 9.32 14.71 6.46 38 TR_XM_SpammyRelay 12208 6.07 13.85 1.94 39 TR_XM_SpammyWords2 11401 4.92 12.93 0.67 40 BOTNET_IPINHOSTNAME 10512 6.62 11.92 3.81 41 RCVD_IN_BL_SPAMCOP_NET 9479 4.17 10.75 0.68 42 FSL_BULK_SIG 9406 11.11 10.67 11.34 43 LOTS_OF_MONEY 9164 7.39 10.39 5.79 44 TR_XM_UnparsRelay 8579 4.68 9.73 2.00 45 TR_XM_SpammyWords4 8432 6.08 9.56 4.23 46 BAYES_80 8231 5.94 9.34 4.13 47 RCVD_IN_MSPIKE_WL 7883 13.93 8.94 16.58 48 BOTNET 7749 3.74 8.79 1.07 49 BAYES_60 7459 7.48 8.46 6.97 50 RELAYCOUNTRY_CA 7226 3.49 8.20 0.99 51 XM_B_Phish_Phrases 6991 6.44 7.93 5.65 52 XM_Evil_Numbers_Gen 6955 9.09 7.89 9.73 53 HTML_IMAGE_RATIO_02 6604 6.14 7.49 5.42 54 XM_Body_Dirty_Words 6527 4.22 7.40 2.53 55 XMSubMetaSx_00 6517 5.37 7.39 4.30 56 UNTRUSTED_Relay 6126 3.40 6.95 1.52 57 RCVD_IN_MSPIKE_BL 5957 2.74 6.76 0.62 58 TR_XM_MSPIKECOMBO 5957 2.74 6.76 0.62 59 MPART_ALT_DIFF 5373 5.28 6.09 4.85 60 BAYES_95 5273 3.90 5.98 2.79 61 LotsOfNums_01 5175 7.15 5.87 7.83 62 XM_H_Long_From01 5126 5.47 5.81 5.28 63 XMSexyCombo_05 4741 3.16 5.38 1.99 64 DKIM_INVALID 4726 2.87 5.36 1.54 65 XM_H_GMP 4708 5.97 5.34 6.31 66 XM_UncommonTLD01 4657 5.08 5.28 4.97 67 RCVD_IN_VALIDITY_RPBL 4357 1.89 4.94 0.26 68 XM_CamelCaseFrm001 4331 2.99 4.91 1.97 69 XM_B_Investor 4299 2.63 4.88 1.44 70 XMStrtUSub 4252 5.60 4.82 6.01 71 HTML_IMAGE_RATIO_04 4161 4.46 4.72 4.32 72 T_XMDrugObfuBody_14 4016 3.03 4.55 2.22 73 TR_XM_NoHeaderRelay 3895 1.70 4.42 0.25 74 XM_B_PhoneNumber 3751 6.86 4.25 8.25 75 TR_XM_SpammyWords3 3745 1.65 4.25 0.28 76 TR_XM_SPAMCOP 3718 1.55 4.22 0.13 77 RCVD_IN_MSPIKE_H3 3690 5.96 4.18 6.90 78 TR_XM_PhishingBody 3577 2.57 4.06 1.78 79 MIME_HTML_MOSTLY 3530 3.04 4.00 2.52 80 XM_B_SpammyTLD 3363 3.11 3.81 2.74 81 TM2_M_VERY_LONG_WORD 3274 2.43 3.71 1.74 82 TooManyTo_001 3218 5.98 3.65 7.21 83 T_XMDrugObfuBody_08 3216 2.08 3.65 1.25 84 XM_B_Unsub2 3002 1.94 3.40 1.16 85 XMNumbers 3000 4.79 3.40 5.53 86 XM_OfRef6 2957 1.83 3.35 1.03 87 XM_URI_RBL 2950 1.43 3.35 0.41 88 XM_UB50 2949 1.69 3.34 0.82 89 HTML_IMAGE_RATIO_06 2907 3.41 3.30 3.47 90 RCVD_IN_MSPIKE_L3 2882 1.31 3.27 0.27 91 XMBody_17 2849 1.44 3.23 0.48 92 MIME_HTML_ONLY_MULTI 2805 2.91 3.18 2.76 93 RCVD_IN_MSPIKE_H4 2676 3.22 3.03 3.32 94 RCVD_IN_VALIDITY_SAFE 2631 4.94 2.98 5.97 95 TR_XM_SpammyWords5 2616 2.06 2.97 1.58 96 XM_SPF_SoftFail 2517 1.76 2.85 1.17 97 FROM_EXCESS_BASE64 2441 2.31 2.77 2.07 98 USER_IN_DEF_DKIM_WL 2416 12.43 2.74 17.57 99 XM_B_SpammyWords4 2414 1.49 2.74 0.83 100 RELAYCOUNTRY_AU 2338 1.38 2.65 0.70 101 MIME_QP_LONG_LINE 2281 3.25 2.59 3.61 102 XMDiploma_00 2269 1.76 2.57 1.33 103 SUBJ_ALL_CAPS 2253 1.77 2.56 1.36 104 HTML_IMAGE_RATIO_08 2150 2.18 2.44 2.04 105 T_FILL_THIS_FORM_SHORT 2140 1.21 2.43 0.57 106 ALL_TRUSTED 2112 11.20 2.40 15.87 107 HK_RANDOM_REPLYTO 2017 0.90 2.29 0.17 108 TM2_M_URI_OPT_OUT 2009 2.06 2.28 1.95 109 TR_XM_INV_DKIM 1998 0.89 2.27 0.16 110 T_TooManySym_01 1967 5.63 2.23 7.44 111 RCVD_IN_VALIDITY_CERTIFIED 1966 3.69 2.23 4.47 112 T_XMHurry_00 1927 1.07 2.19 0.47 113 RCVD_IN_MSPIKE_L4 1868 0.87 2.12 0.20 114 XMStockSpam_06 1860 1.80 2.11 1.64 115 DIET_1 1847 0.95 2.09 0.35 116 TR_XM_MSPIKECOMBO2 1789 0.71 2.03 0.00 117 SpammyFromTLD_01 1774 0.95 2.01 0.38 118 RCVD_IN_PSBL 1734 1.34 1.97 1.00 119 MAILING_LIST_MULTI 1712 2.10 1.94 2.18 120 XM_B_URI_Unicode 1699 1.45 1.93 1.20 121 TR_LOTS_OF_MONEY3 1695 0.86 1.92 0.30 122 XMBrknScrpt_02 1673 1.32 1.90 1.01 123 XM_H_Long_From02 1638 1.07 1.86 0.65 124 XM_HighProb1 1588 0.63 1.80 0.00 125 DKIM_ADSP_NXDOMAIN 1577 0.89 1.79 0.42 126 XMBdyGiftCard01 1562 1.25 1.77 0.98 127 XM_DK_Undo_01 1525 1.52 1.73 1.40 128 RCVD_IN_MSPIKE_H5 1517 4.75 1.72 6.36 129 XM_DIRTYINTL 1506 0.64 1.71 0.07 130 MPART_ALT_DIFF_COUNT 1453 1.07 1.65 0.77 131 URI_NOVOWEL 1451 1.71 1.65 1.75 132 XMPhish30 1424 1.11 1.62 0.84 133 SHOPIFY_IMG_NOT_RCVD_SFY 1412 0.79 1.60 0.36 134 XM_B_COPY_HTML 1380 1.23 1.57 1.06 135 BAYES_40 1369 3.81 1.55 5.01 136 THIS_AD 1368 0.81 1.55 0.41 137 SpammyFromTLD_02 1361 0.71 1.54 0.27 138 XM_B_DNDMA 1330 0.90 1.51 0.57 139 T_XMDrugObfuBody_00 1295 1.03 1.47 0.80 140 XMReplyNow 1291 0.62 1.46 0.17 141 TR_XM_PHPForged 1279 0.70 1.45 0.31 142 RCVD_IN_SBL_CSS 1275 0.51 1.45 0.02 143 URI_HEX 1274 1.10 1.44 0.92 144 TR_XM_FormFill2 1274 0.71 1.44 0.31 145 TR_XM_PHPDW 1272 0.70 1.44 0.30 146 RCVD_IN_XBL 1248 0.49 1.42 0.00 147 XM_H_PHPOS 1247 0.68 1.41 0.29 148 KHOP_HELO_FCRDNS 1246 1.48 1.41 1.52 149 URI_TRY_3LD 1236 0.91 1.40 0.65 150 RELAYCOUNTRY_FR 1211 0.61 1.37 0.21 151 RCVD_IN_MSPIKE_L5 1208 0.57 1.37 0.14 152 SCC_BODY_URI_ONLY 1206 2.30 1.37 2.79 153 XMSexyCombo_01 1205 0.67 1.37 0.30 154 RDNS_DYNAMIC 1170 0.62 1.33 0.24 155 TM2_M_OBFU_COMMENT 1165 0.86 1.32 0.62 156 XMSubMetaI_00 1148 1.02 1.30 0.87 157 PDS_RDNS_DYNAMIC_FP 1125 0.47 1.28 0.03 158 BAYES_20 1124 2.55 1.27 3.22 159 HTML_IMAGE_ONLY_20 1123 0.72 1.27 0.43 160 XM_UB99 1073 0.42 1.22 0.00 161 TR_MetaPhish_Combo_01 1045 1.79 1.19 2.12 162 HTTPS_HTTP_MISMATCH 1040 0.75 1.18 0.52 163 RCVD_IN_PBL 1038 0.82 1.18 0.63 164 TVD_RCVD_IP 1033 1.39 1.17 1.50 165 MultiRelay_CC 1018 0.49 1.15 0.13 166 ANY_BOUNCE_MESSAGE 998 3.43 1.13 4.65 167 T_STY_INVIS_DIRECT 996 0.75 1.13 0.55 168 BOUNCE_MESSAGE 996 3.42 1.13 4.64 169 TR_XM_RelayPhish 994 0.43 1.13 0.06 170 XMBody_78 980 0.55 1.11 0.26 171 HTML_MIME_NO_HTML_TAG 975 1.59 1.11 1.85 172 XM_SendGrid 971 1.21 1.10 1.27 173 BOTNET_NORDNS 955 0.38 1.08 0.01 174 TR_Caps_n_Bayes_99 950 0.38 1.08 0.01 175 BAD_CREDIT 943 0.42 1.07 0.07 176 TR_XM_Base64_L1 941 0.43 1.07 0.09 177 XMGenDplmaNmb 926 0.83 1.05 0.71 178 J_POPCORN_WO_D 925 0.54 1.05 0.28 179 DKIM_ADSP_CUSTOM_MED 913 0.78 1.04 0.65 180 XM_B_Phish66 906 0.55 1.03 0.30 181 TR_Mismatch_TLD_02 898 0.41 1.02 0.09 182 T_REMOTE_IMAGE 897 2.57 1.02 3.40 183 XM_B_REG_HTML 868 0.49 0.98 0.23 184 RELAYCOUNTRY_CN 867 0.40 0.98 0.09 185 HELO_DYNAMIC_SPLIT_IP 849 0.33 0.96 0.00 186 TR_XM_Base64_M1 846 0.88 0.96 0.84 187 XM_B_SpammyWords5 842 0.37 0.95 0.06 188 XM_ProductURIs 839 0.66 0.95 0.51 189 T_Symld_Words_02 825 0.56 0.94 0.37 190 HTML_FONT_TINY_NORDNS 822 0.38 0.93 0.08 191 TR_XM_InvalidRelay 815 0.33 0.92 0.01 192 NML_ADSP_CUSTOM_MED 808 0.58 0.92 0.40 193 HTML_TAG_BALANCE_BODY 806 0.72 0.91 0.61 194 TR_Mismatch_TLD_01 792 0.49 0.90 0.28 195 XMSubMetaSxObfu_03 780 0.58 0.88 0.41 196 XM_UB60 778 0.35 0.88 0.07 197 FORGED_GMAIL_RCVD 754 0.55 0.86 0.39 198 XM_GoogleGroups 746 1.03 0.85 1.13 199 XM_OfRef7 742 0.51 0.84 0.33 200 TR_XM_MaxSPIKE 725 0.29 0.82 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 165665 99.59 99.41 99.69 2 HTML_MESSAGE 139430 87.70 94.84 83.90 3 RELAYCOUNTRY_US 134497 80.83 80.64 80.93 4 DKIM_SIGNED 125621 80.45 89.60 75.59 5 XM_DK_Pass 123933 78.16 84.92 74.58 6 DKIM_VALID 123057 77.58 84.24 74.05 7 XM_B_Unicode 117232 75.48 84.78 70.54 8 DKIM_VALID_AU 104877 64.63 67.51 63.11 9 BAYES_50 101096 52.68 37.32 60.83 10 XMListUnsubscribeExists 89532 59.23 69.32 53.88 11 DCC_CHECK_NEGATIVE 84900 40.38 20.19 51.09 12 DCC_CHECK 81240 59.44 79.32 48.89 13 XM_B_SpammyWords 77477 54.56 69.53 46.62 14 XM_B_Unicode3 74270 46.63 50.27 44.69 15 LOC_TINY_FONT_1 54016 38.55 49.93 32.50 16 HTML_FONT_LOW_CONTRAST 52542 33.38 36.71 31.62 17 DKIM_VALID_EF 50337 30.78 31.69 30.29 18 FVGT_m_MULTI_ODD 46433 29.75 33.17 27.94 19 T_TM2_M_HEADER_IN_MSG 42898 23.89 20.27 25.81 20 XMSubLong 40311 23.45 21.94 24.26 21 MIME_HTML_ONLY 36923 24.87 29.86 22.22 22 XM_B_SpammyWords2 36092 28.48 41.23 21.72 23 T_KAM_HTML_FONT_INVALID 34722 24.08 30.10 20.89 24 USER_IN_DEF_DKIM_WL 29199 12.43 2.74 17.57 25 XM_Multi_Part_URI 27830 18.15 20.79 16.75 26 RCVD_IN_MSPIKE_WL 27550 13.93 8.94 16.58 27 TR_XM_DK_Unsub 27246 19.27 24.68 16.40 28 ALL_TRUSTED 26376 11.20 2.40 15.87 29 RCVD_IN_MSPIKE_H2 23426 15.16 17.18 14.10 30 UNPARSEABLE_RELAY 22139 15.01 18.19 13.32 31 XM_B_Unsub 19645 15.01 21.01 11.82 32 FSL_BULK_SIG 18845 11.11 10.67 11.34 33 BAYES_00 16363 6.57 0.39 9.85 34 XM_Evil_Numbers_Gen 16176 9.09 7.89 9.73 35 XM_DKIMWhitelistDomains 15882 6.25 0.03 9.56 36 TR_XM_BayesUnsub 14107 12.59 20.31 8.49 37 XM_B_PhoneNumber 13708 6.86 4.25 8.25 38 LotsOfNums_01 13011 7.15 5.87 7.83 39 T_TooManySym_01 12356 5.63 2.23 7.44 40 TooManyTo_001 11983 5.98 3.65 7.21 41 BAYES_60 11575 7.48 8.46 6.97 42 TR_MAX_INTL_RELAY 11513 9.99 15.76 6.93 43 RCVD_IN_MSPIKE_H3 11459 5.96 4.18 6.90 44 TR_XM_DK_Bayes 11056 4.42 0.22 6.65 45 TR_XM_DK_Bayes1 10950 4.38 0.22 6.59 46 XM_DK_Undo_02 10749 18.83 42.14 6.47 47 XM_B_SpammyWords3 10733 9.32 14.71 6.46 48 RCVD_IN_MSPIKE_H5 10571 4.75 1.72 6.36 49 XM_H_GMP 10482 5.97 5.34 6.31 50 XMStrtUSub 9994 5.60 4.82 6.01 51 RCVD_IN_VALIDITY_SAFE 9927 4.94 2.98 5.97 52 LOTS_OF_MONEY 9621 7.39 10.39 5.79 53 XM_B_Phish_Phrases 9397 6.44 7.93 5.65 54 TR_XM_DK_Bayes2 9332 3.73 0.17 5.62 55 XMNumbers 9189 4.79 3.40 5.53 56 HTML_IMAGE_RATIO_02 9011 6.14 7.49 5.42 57 BAYES_99 9009 15.49 34.46 5.42 58 XM_H_Long_From01 8778 5.47 5.81 5.28 59 BAYES_40 8326 3.81 1.55 5.01 60 XM_UncommonTLD01 8255 5.08 5.28 4.97 61 MPART_ALT_DIFF 8068 5.28 6.09 4.85 62 ANY_BOUNCE_MESSAGE 7720 3.43 1.13 4.65 63 BOUNCE_MESSAGE 7712 3.42 1.13 4.64 64 RCVD_IN_VALIDITY_CERTIFIED 7425 3.69 2.23 4.47 65 T_TooManySym_02 7404 3.19 0.80 4.46 66 BAYES_999 7257 12.03 26.47 4.37 67 HTML_IMAGE_RATIO_04 7185 4.46 4.72 4.32 68 XMSubMetaSx_00 7142 5.37 7.39 4.30 69 TR_XM_SpammyWords4 7031 6.08 9.56 4.23 70 BAYES_80 6871 5.94 9.34 4.13 71 INVALID_MSGID 6657 2.74 0.36 4.01 72 BOTNET_IPINHOSTNAME 6330 6.62 11.92 3.81 73 TO_MALFORMED 6250 2.46 0.02 3.76 74 MIME_QP_LONG_LINE 5998 3.25 2.59 3.61 75 HTML_IMAGE_RATIO_06 5760 3.41 3.30 3.47 76 T_REMOTE_IMAGE 5652 2.57 1.02 3.40 77 RCVD_IN_MSPIKE_H4 5520 3.22 3.03 3.32 78 TooManyTo_002 5456 2.37 0.64 3.28 79 RELAYCOUNTRY_META 5396 8.75 19.11 3.25 80 BAYES_20 5353 2.55 1.27 3.22 81 BAYES_95 4640 3.90 5.98 2.79 82 SCC_BODY_URI_ONLY 4638 2.30 1.37 2.79 83 MIME_HTML_ONLY_MULTI 4588 2.91 3.18 2.76 84 XM_B_SpammyTLD 4546 3.11 3.81 2.74 85 RCVD_IN_IADB_LISTED 4318 1.89 0.56 2.60 86 XM_PDF 4300 1.88 0.55 2.59 87 XM_Body_Dirty_Words 4209 4.22 7.40 2.53 88 MIME_HTML_MOSTLY 4195 3.04 4.00 2.52 89 TR_XM_DKIM_Undo 3984 12.21 30.69 2.40 90 RCVD_IN_IADB_SPF 3886 1.69 0.47 2.34 91 T_XMDrugObfuBody_14 3696 3.03 4.55 2.22 92 MAILING_LIST_MULTI 3622 2.10 1.94 2.18 93 TR_MetaPhish_Combo_01 3518 1.79 1.19 2.12 94 RCVD_IN_IADB_SENDERID 3505 1.54 0.46 2.11 95 FROM_EXCESS_BASE64 3445 2.31 2.77 2.07 96 RCVD_IN_IADB_DK 3438 1.51 0.46 2.07 97 HTML_IMAGE_RATIO_08 3394 2.18 2.44 2.04 98 TR_XM_UnparsRelay 3316 4.68 9.73 2.00 99 XMSexyCombo_05 3305 3.16 5.38 1.99 100 TR_DCC_Bayes_99 3295 10.20 25.68 1.98 101 XM_CamelCaseFrm001 3273 2.99 4.91 1.97 102 TM2_M_URI_OPT_OUT 3239 2.06 2.28 1.95 103 TR_XM_SpammyRelay 3226 6.07 13.85 1.94 104 XM_B_FormFill 3121 1.23 0.02 1.88 105 HTML_MIME_NO_HTML_TAG 3076 1.59 1.11 1.85 106 TR_XM_PhishingBody 2965 2.57 4.06 1.78 107 T_TooManySym_03 2941 1.32 0.47 1.77 108 BAYES_05 2940 1.42 0.76 1.77 109 URI_NOVOWEL 2902 1.71 1.65 1.75 110 IN_HORDE_ADDRESS_BOOK 2901 1.17 0.09 1.75 111 TM2_M_VERY_LONG_WORD 2897 2.43 3.71 1.74 112 XMGappySubj_01 2849 1.22 0.28 1.71 113 RCVD_IN_IADB_VOUCHED 2719 1.17 0.28 1.64 114 XMStockSpam_06 2718 1.80 2.11 1.64 115 TVD_SPACE_RATIO 2639 1.10 0.18 1.59 116 T_TVD_MIME_NO_HEADERS 2634 1.06 0.06 1.59 117 TR_XM_SpammyWords5 2627 2.06 2.97 1.58 118 DKIM_INVALID 2564 2.87 5.36 1.54 119 UNTRUSTED_Relay 2532 3.40 6.95 1.52 120 KHOP_HELO_FCRDNS 2520 1.48 1.41 1.52 121 TVD_RCVD_IP 2498 1.39 1.17 1.50 122 URI_OPTOUT_3LD 2491 1.22 0.69 1.50 123 XM_B_Investor 2396 2.63 4.88 1.44 124 XM_DK_Undo_01 2332 1.52 1.73 1.40 125 SUBJ_ALL_CAPS 2252 1.77 2.56 1.36 126 XMDiploma_00 2218 1.76 2.57 1.33 127 XMGappySubj_02 2183 0.88 0.05 1.31 128 TR_Symld_Words 2152 1.04 0.56 1.29 129 XM_SendGrid 2110 1.21 1.10 1.27 130 LOW_PRICE 2100 0.91 0.23 1.26 131 T_XMDrugObfuBody_08 2081 2.08 3.65 1.25 132 HTML_EXTRA_CLOSE 1992 0.80 0.06 1.20 133 XMBSHREFv2 1987 0.90 0.35 1.20 134 XM_B_URI_Unicode 1986 1.45 1.93 1.20 135 XM_SPF_SoftFail 1952 1.76 2.85 1.17 136 XM_B_Unsub2 1923 1.94 3.40 1.16 137 RCVD_IN_IADB_OPTIN 1913 0.81 0.17 1.15 138 XM_GoogleGroups 1876 1.03 0.85 1.13 139 BOTNET 1771 3.74 8.79 1.07 140 XM_B_COPY_HTML 1758 1.23 1.57 1.06 141 TooManyTo_003 1719 0.88 0.59 1.03 142 XM_OfRef6 1710 1.83 3.35 1.03 143 XMBrknScrpt_02 1684 1.32 1.90 1.01 144 RCVD_IN_PSBL 1669 1.34 1.97 1.00 145 RELAYCOUNTRY_CA 1653 3.49 8.20 0.99 146 XMBdyGiftCard01 1627 1.25 1.77 0.98 147 URI_HEX 1531 1.10 1.44 0.92 148 TR_XM_DK_SendGrid 1501 0.83 0.70 0.90 149 XMSubMetaI_00 1441 1.02 1.30 0.87 150 XMPhish30 1393 1.11 1.62 0.84 151 TR_XM_Base64_M1 1388 0.88 0.96 0.84 152 TooManyTo_004 1385 0.74 0.55 0.83 153 XM_B_SpammyWords4 1376 1.49 2.74 0.83 154 XM_UB50 1362 1.69 3.34 0.82 155 T_XMDrugObfuBody_00 1325 1.03 1.47 0.80 156 XM_H_PHPMailer 1285 0.77 0.77 0.77 157 MPART_ALT_DIFF_COUNT 1277 1.07 1.65 0.77 158 XMGenDplmaNmb 1174 0.83 1.05 0.71 159 RELAYCOUNTRY_AU 1169 1.38 2.65 0.70 160 TooManyTo_005 1164 0.64 0.53 0.70 161 RCVD_IN_BL_SPAMCOP_NET 1131 4.17 10.75 0.68 162 HTML_IMAGE_ONLY_32 1127 0.49 0.15 0.68 163 TR_XM_SpammyWords2 1106 4.92 12.93 0.67 164 XM_H_Long_From02 1080 1.07 1.86 0.65 165 DKIM_ADSP_CUSTOM_MED 1080 0.78 1.04 0.65 166 URI_TRY_3LD 1077 0.91 1.40 0.65 167 RCVD_IN_PBL 1053 0.82 1.18 0.63 168 TM2_M_OBFU_COMMENT 1034 0.86 1.32 0.62 169 TR_XM_MSPIKECOMBO 1023 2.74 6.76 0.62 170 RCVD_IN_MSPIKE_BL 1023 2.74 6.76 0.62 171 HTML_TAG_BALANCE_BODY 1018 0.72 0.91 0.61 172 HTML_FONT_FACE_BAD 980 0.66 0.80 0.59 173 USER_IN_WHITELIST 970 0.38 0.00 0.58 174 USER_IN_WELCOMELIST 970 0.38 0.00 0.58 175 XM_B_DNDMA 954 0.90 1.51 0.57 176 T_FILL_THIS_FORM_SHORT 949 1.21 2.43 0.57 177 T_STY_INVIS_DIRECT 916 0.75 1.13 0.55 178 XMNoVowels 869 0.45 0.30 0.52 179 HTTPS_HTTP_MISMATCH 858 0.75 1.18 0.52 180 XMBody_95 850 0.38 0.13 0.51 181 FILL_THIS_FORM 848 0.43 0.27 0.51 182 XMLngstWrd_00 845 0.59 0.74 0.51 183 XM_ProductURIs 840 0.66 0.95 0.51 184 XMBody_17 805 1.44 3.23 0.48 185 MAY_BE_FORGED 796 0.32 0.01 0.48 186 T_TooManySym_04 789 0.39 0.24 0.47 187 T_XMHurry_00 786 1.07 2.19 0.47 188 XMSlimDrugH 781 0.54 0.68 0.47 189 XM_S_SubURI 772 0.33 0.07 0.46 190 PLING_QUERY 765 0.55 0.72 0.46 191 MSGID_FROM_MTA_HEADER 746 0.34 0.13 0.45 192 SUBJ_DOLLARS 733 0.55 0.76 0.44 193 HTML_IMAGE_ONLY_20 720 0.72 1.27 0.43 194 XM_ShortIntro_01 717 0.42 0.39 0.43 195 XMLngstWrd_01 710 0.51 0.67 0.43 196 DKIM_ADSP_NXDOMAIN 696 0.89 1.79 0.42 197 XMPhish14 688 0.50 0.67 0.41 198 THIS_AD 685 0.81 1.55 0.41 199 XMSubMetaSxObfu_03 683 0.58 0.88 0.41 200 NO_DNS_FOR_FROM 682 0.46 0.55 0.41 ----------------------------------------------------------------------