Email: 292334 Autolearn: 0 AvgScore: 4.92 AvgScanTime: 1.40 sec Spam: 92877 Autolearn: 0 AvgScore: 13.87 AvgScanTime: 1.59 sec Ham: 199457 Autolearn: 0 AvgScore: 0.75 AvgScanTime: 1.31 sec Time Spent Running SA: 113.52 hours Time Spent Processing Spam: 41.04 hours Time Spent Processing Ham: 72.48 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 92380 99.28 99.46 99.20 2 HTML_MESSAGE 88345 86.93 95.12 83.12 3 DKIM_SIGNED 83252 76.26 89.64 70.03 4 XM_DK_Pass 80141 74.61 86.29 69.17 5 XM_B_Unicode 79608 73.21 85.71 67.39 6 DKIM_VALID 79546 74.08 85.65 68.69 7 RELAYCOUNTRY_US 75593 80.07 81.39 79.45 8 DCC_CHECK 72733 55.63 78.31 45.07 9 XMListUnsubscribeExists 64445 54.11 69.39 47.00 10 XM_B_SpammyWords 64436 53.26 69.38 45.75 11 DKIM_VALID_AU 63824 61.33 68.72 57.90 12 XM_B_Unicode3 50669 47.64 54.55 44.42 13 LOC_TINY_FONT_1 46284 36.14 49.83 29.76 14 XM_DK_Undo_02 39449 17.23 42.47 5.47 15 XM_B_SpammyWords2 38112 27.89 41.03 21.77 16 BAYES_50 35201 53.43 37.90 60.66 17 HTML_FONT_LOW_CONTRAST 34232 34.60 36.86 33.55 18 BAYES_99 31908 13.86 34.36 4.31 19 FVGT_m_MULTI_ODD 30673 27.18 33.03 24.45 20 DKIM_VALID_EF 30051 29.30 32.36 27.87 21 TR_XM_DKIM_Undo 28401 11.23 30.58 2.21 22 MIME_HTML_ONLY 27436 24.09 29.54 21.55 23 T_KAM_HTML_FONT_INVALID 27412 22.99 29.51 19.96 24 BAYES_999 24765 10.75 26.66 3.35 25 TR_XM_DK_Unsub 23593 17.16 25.40 13.32 26 TR_DCC_Bayes_99 23486 9.33 25.29 1.90 27 XMSubLong 23200 24.40 24.98 24.12 28 XM_Multi_Part_URI 21237 18.40 22.87 16.31 29 DCC_CHECK_NEGATIVE 19769 44.22 21.29 54.90 30 T_TM2_M_HEADER_IN_MSG 18755 24.47 20.19 26.46 31 XM_B_Unsub 18522 13.66 19.94 10.74 32 UNPARSEABLE_RELAY 18172 14.94 19.57 12.78 33 RCVD_IN_MSPIKE_H2 17906 15.30 19.28 13.44 34 TR_XM_BayesUnsub 17737 11.47 19.10 7.93 35 RELAYCOUNTRY_META 16505 7.56 17.77 2.80 36 XM_B_SpammyWords3 13963 9.06 15.03 6.28 37 TR_MAX_INTL_RELAY 13688 8.79 14.74 6.02 38 TR_XM_SpammyRelay 12106 5.17 13.03 1.50 39 LOTS_OF_MONEY 11557 7.45 12.44 5.12 40 TR_XM_SpammyWords2 11543 4.33 12.43 0.56 41 RCVD_IN_BL_SPAMCOP_NET 10212 4.00 11.00 0.74 42 TR_XM_SpammyWords4 10151 5.92 10.93 3.58 43 BOTNET_IPINHOSTNAME 10053 5.62 10.82 3.19 44 FSL_BULK_SIG 10032 11.20 10.80 11.39 45 TR_XM_UnparsRelay 9881 4.74 10.64 1.99 46 RCVD_IN_MSPIKE_WL 8945 13.36 9.63 15.10 47 XM_Evil_Numbers_Gen 8744 10.84 9.41 11.50 48 BAYES_80 8333 5.29 8.97 3.58 49 BOTNET 8297 3.52 8.93 1.01 50 XM_B_Phish_Phrases 7733 6.41 8.33 5.52 51 BAYES_60 7352 6.81 7.92 6.29 52 XM_Body_Dirty_Words 7069 4.10 7.61 2.47 53 XMSubMetaSx_00 6923 5.07 7.45 3.96 54 HTML_IMAGE_RATIO_02 6867 5.71 7.39 4.93 55 UNTRUSTED_Relay 6520 3.19 7.02 1.41 56 RELAYCOUNTRY_CA 6452 2.83 6.95 0.91 57 TR_XM_SPAMCOP 5907 2.09 6.36 0.10 58 MPART_ALT_DIFF 5694 5.22 6.13 4.79 59 XM_H_Long_From01 5545 5.55 5.97 5.35 60 RCVD_IN_MSPIKE_BL 5408 2.47 5.82 0.92 61 TR_XM_MSPIKECOMBO 5408 2.47 5.82 0.92 62 RCVD_IN_VALIDITY_RPBL 5388 1.95 5.80 0.16 63 XM_H_GMP 5207 5.66 5.61 5.69 64 XM_UncommonTLD01 5119 5.84 5.51 6.00 65 LotsOfNums_01 5093 7.42 5.48 8.32 66 XMSexyCombo_05 5074 2.86 5.46 1.65 67 BAYES_95 4973 3.36 5.35 2.44 68 RCVD_IN_MSPIKE_H3 4811 6.13 5.18 6.57 69 HTML_IMAGE_RATIO_04 4690 4.09 5.05 3.65 70 XM_CamelCaseFrm001 4463 2.87 4.81 1.96 71 T_XMDrugObfuBody_14 4442 3.21 4.78 2.48 72 XM_B_SpammyTLD 4301 3.29 4.63 2.67 73 TR_XM_PhishingBody 4294 2.47 4.62 1.46 74 XM_B_PhoneNumber 4118 6.29 4.43 7.16 75 XMStrtUSub 3991 5.90 4.30 6.65 76 TR_XM_NoHeaderRelay 3974 1.50 4.28 0.20 77 XM_B_Investor 3952 2.31 4.26 1.40 78 DKIM_INVALID 3706 2.18 3.99 1.34 79 TR_XM_SpammyWords3 3530 1.49 3.80 0.42 80 TM2_M_VERY_LONG_WORD 3513 5.43 3.78 6.20 81 HTML_IMAGE_RATIO_06 3471 3.36 3.74 3.18 82 XMNumbers 3463 4.67 3.73 5.11 83 TR_XM_SpammyWords5 3455 2.17 3.72 1.45 84 XM_B_Unsub2 3380 1.92 3.64 1.12 85 XM_OfRef6 3281 1.81 3.53 1.01 86 TooManyTo_001 3180 5.36 3.42 6.26 87 MIME_HTML_MOSTLY 3145 2.83 3.39 2.56 88 RCVD_IN_MSPIKE_L3 3122 1.50 3.36 0.63 89 XM_URI_RBL 3087 1.31 3.32 0.37 90 MIME_HTML_ONLY_MULTI 3084 2.83 3.32 2.60 91 XM_SPF_SoftFail 2914 1.71 3.14 1.05 92 XM_UB50 2903 1.52 3.13 0.78 93 XMDiploma_00 2885 2.03 3.11 1.53 94 RCVD_IN_MSPIKE_H4 2735 3.24 2.94 3.38 95 RELAYCOUNTRY_AU 2730 1.20 2.94 0.39 96 USER_IN_DEF_DKIM_WL 2716 12.26 2.92 16.61 97 XMBody_17 2642 1.14 2.84 0.35 98 HTML_IMAGE_RATIO_08 2631 2.16 2.83 1.85 99 RCVD_IN_VALIDITY_SAFE 2613 4.56 2.81 5.37 100 T_TooManySym_01 2507 5.62 2.70 6.98 101 FROM_EXCESS_BASE64 2414 2.25 2.60 2.08 102 T_XMDrugObfuBody_08 2407 1.82 2.59 1.46 103 ALL_TRUSTED 2378 12.95 2.56 17.79 104 SUBJ_ALL_CAPS 2343 1.60 2.52 1.16 105 T_FILL_THIS_FORM_SHORT 2328 1.39 2.51 0.88 106 RCVD_IN_PSBL 2109 1.20 2.27 0.70 107 TM2_M_URI_OPT_OUT 2108 1.78 2.27 1.55 108 XM_B_SpammyWords4 2090 1.39 2.25 0.99 109 RCVD_IN_VALIDITY_CERTIFIED 1998 3.58 2.15 4.25 110 XM_ProductURIs 1973 1.02 2.12 0.51 111 SpammyFromTLD_01 1949 0.92 2.10 0.37 112 XM_B_DNDMA 1936 1.03 2.08 0.54 113 XMStockSpam_06 1926 1.71 2.07 1.55 114 XM_B_URI_Unicode 1921 1.55 2.07 1.30 115 URI_HEX 1865 1.24 2.01 0.88 116 URI_NOVOWEL 1858 1.64 2.00 1.47 117 XM_B_SEO 1848 0.80 1.99 0.25 118 XMBrknScrpt_02 1831 1.31 1.97 1.00 119 MIME_QP_LONG_LINE 1812 3.08 1.95 3.60 120 TR_LOTS_OF_MONEY3 1792 0.74 1.93 0.18 121 T_XMHurry_00 1745 1.09 1.88 0.73 122 TR_XM_SEO4 1729 0.68 1.86 0.13 123 TR_XM_INV_DKIM 1667 0.69 1.79 0.18 124 MAILING_LIST_MULTI 1612 1.91 1.74 2.00 125 T_XMDrugObfuBody_00 1583 0.88 1.70 0.49 126 SpammyFromTLD_02 1578 0.82 1.70 0.41 127 BAYES_40 1558 4.43 1.68 5.71 128 TR_XM_MSPIKECOMBO2 1544 0.54 1.66 0.01 129 SHOPIFY_IMG_NOT_RCVD_SFY 1540 0.76 1.66 0.35 130 MPART_ALT_DIFF_COUNT 1504 1.01 1.62 0.73 131 XMPhish30 1500 0.97 1.62 0.68 132 TR_XM_PHPDW 1461 0.76 1.57 0.38 133 XM_HighProb1 1458 0.50 1.57 0.00 134 TR_XM_PHPForged 1456 0.75 1.57 0.37 135 THIS_AD 1452 0.82 1.56 0.47 136 TR_XM_FormFill2 1433 0.74 1.54 0.37 137 RCVD_IN_SBL_CSS 1429 0.51 1.54 0.02 138 RDNS_DYNAMIC 1424 0.63 1.53 0.22 139 XMBdyGiftCard01 1420 1.56 1.53 1.58 140 RCVD_IN_MSPIKE_L4 1418 0.68 1.53 0.28 141 XM_H_PHPOS 1406 0.72 1.51 0.35 142 TR_MetaPhish_Combo_01 1402 1.94 1.51 2.14 143 RCVD_IN_MSPIKE_H5 1399 3.99 1.51 5.15 144 XM_DIRTYINTL 1376 0.56 1.48 0.13 145 PDS_RDNS_DYNAMIC_FP 1374 0.50 1.48 0.04 146 BOTNET_NORDNS 1366 0.48 1.47 0.02 147 TVD_RCVD_IP 1361 1.24 1.47 1.14 148 DIET_1 1359 0.71 1.46 0.35 149 RELAYCOUNTRY_FR 1359 0.65 1.46 0.28 150 DKIM_ADSP_CUSTOM_MED 1346 0.95 1.45 0.72 151 XMClaimOffer 1322 0.58 1.42 0.18 152 XM_B_Phish66 1304 0.64 1.40 0.29 153 TR_XM_InvalidRelay 1262 0.44 1.36 0.01 154 DKIM_ADSP_NXDOMAIN 1245 0.66 1.34 0.34 155 KHOP_HELO_FCRDNS 1243 2.91 1.34 3.64 156 BAYES_00 1225 7.59 1.32 10.51 157 XM_SendGrid 1225 1.35 1.32 1.36 158 RCVD_IN_XBL 1218 0.42 1.31 0.01 159 NML_ADSP_CUSTOM_MED 1203 0.71 1.30 0.43 160 T_REMOTE_IMAGE 1202 2.71 1.29 3.37 161 BAYES_20 1195 3.22 1.29 4.12 162 XM_DK_Undo_01 1181 1.31 1.27 1.33 163 XM_B_COPY_HTML 1176 1.00 1.27 0.87 164 HELO_DYNAMIC_SPLIT_IP 1173 0.40 1.26 0.00 165 XM_UB99 1172 0.40 1.26 0.00 166 XM_H_Long_From02 1153 0.96 1.24 0.83 167 FORGED_GMAIL_RCVD 1146 0.72 1.23 0.48 168 TR_XM_DK_Bayes 1143 5.17 1.23 7.00 169 TR_XM_DK_Bayes1 1139 5.12 1.23 6.94 170 RCVD_IN_PBL 1129 0.74 1.22 0.51 171 HK_RANDOM_REPLYTO 1120 0.47 1.21 0.13 172 SCC_BODY_URI_ONLY 1080 2.28 1.16 2.80 173 TR_XM_MaxSPIKE 1078 0.37 1.16 0.00 174 TM2_M_OBFU_COMMENT 1073 0.70 1.16 0.49 175 URI_TRY_3LD 1064 0.72 1.15 0.53 176 HTML_MIME_NO_HTML_TAG 1057 2.07 1.14 2.50 177 TR_XM_DK_Bayes2 1033 4.44 1.11 5.99 178 TR_XM_FormFill 1023 0.35 1.10 0.00 179 XMGenDplmaNmb 1022 0.76 1.10 0.60 180 XMBody_78 1009 0.50 1.09 0.23 181 T_STY_INVIS_DIRECT 1009 0.82 1.09 0.70 182 MultiRelay_CC 1005 0.38 1.08 0.06 183 XMSubMetaI_00 988 0.70 1.06 0.53 184 T_MONEY_PERCENT 976 0.40 1.05 0.10 185 TR_LOTS_OF_MONEY2 976 0.40 1.05 0.10 186 XM_UB60 947 0.37 1.02 0.06 187 XMSexyCombo_01 941 0.44 1.01 0.18 188 HTTPS_HTTP_MISMATCH 939 0.73 1.01 0.60 189 MISSING_HEADERS 891 0.43 0.96 0.18 190 XMReplyNow 882 0.40 0.95 0.15 191 HTML_FONT_TINY_NORDNS 882 0.34 0.95 0.05 192 RCVD_IN_MSPIKE_L5 869 0.30 0.94 0.01 193 TR_XM_DK_SendGrid 865 0.96 0.93 0.97 194 T_TooManySym_02 858 2.92 0.92 3.86 195 J_POPCORN_WO_D 852 0.41 0.92 0.17 196 TR_Mismatch_TLD_01 848 0.49 0.91 0.29 197 TR_Mismatch_TLD_02 844 0.35 0.91 0.09 198 TR_XM_RelayPhish 838 0.33 0.90 0.06 199 TR_XM_Base64_L1 832 0.35 0.90 0.10 200 XPRIO 828 0.29 0.89 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 197855 99.28 99.46 99.20 2 HTML_MESSAGE 165782 86.93 95.12 83.12 3 RELAYCOUNTRY_US 158474 80.07 81.39 79.45 4 DKIM_SIGNED 139680 76.26 89.64 70.03 5 XM_DK_Pass 137962 74.61 86.29 69.17 6 DKIM_VALID 137016 74.08 85.65 68.69 7 XM_B_Unicode 134412 73.21 85.71 67.39 8 BAYES_50 120981 53.43 37.90 60.66 9 DKIM_VALID_AU 115479 61.33 68.72 57.90 10 DCC_CHECK_NEGATIVE 109504 44.22 21.29 54.90 11 XMListUnsubscribeExists 93742 54.11 69.39 47.00 12 XM_B_SpammyWords 91247 53.26 69.38 45.75 13 DCC_CHECK 89894 55.63 78.31 45.07 14 XM_B_Unicode3 88595 47.64 54.55 44.42 15 HTML_FONT_LOW_CONTRAST 66925 34.60 36.86 33.55 16 LOC_TINY_FONT_1 59365 36.14 49.83 29.76 17 DKIM_VALID_EF 55589 29.30 32.36 27.87 18 T_TM2_M_HEADER_IN_MSG 52779 24.47 20.19 26.46 19 FVGT_m_MULTI_ODD 48774 27.18 33.03 24.45 20 XMSubLong 48118 24.40 24.98 24.12 21 XM_B_SpammyWords2 43423 27.89 41.03 21.77 22 MIME_HTML_ONLY 42975 24.09 29.54 21.55 23 T_KAM_HTML_FONT_INVALID 39803 22.99 29.51 19.96 24 ALL_TRUSTED 35477 12.95 2.56 17.79 25 USER_IN_DEF_DKIM_WL 33124 12.26 2.92 16.61 26 XM_Multi_Part_URI 32539 18.40 22.87 16.31 27 RCVD_IN_MSPIKE_WL 30113 13.36 9.63 15.10 28 RCVD_IN_MSPIKE_H2 26814 15.30 19.28 13.44 29 TR_XM_DK_Unsub 26564 17.16 25.40 13.32 30 UNPARSEABLE_RELAY 25490 14.94 19.57 12.78 31 XM_Evil_Numbers_Gen 22931 10.84 9.41 11.50 32 FSL_BULK_SIG 22717 11.20 10.80 11.39 33 XM_B_Unsub 21413 13.66 19.94 10.74 34 BAYES_00 20962 7.59 1.32 10.51 35 ANY_BOUNCE_MESSAGE 17681 6.30 0.78 8.86 36 BOUNCE_MESSAGE 17678 6.30 0.78 8.86 37 LotsOfNums_01 16598 7.42 5.48 8.32 38 XM_DKIMWhitelistDomains 16486 5.64 0.01 8.27 39 TR_XM_BayesUnsub 15808 11.47 19.10 7.93 40 XM_B_PhoneNumber 14281 6.29 4.43 7.16 41 TR_XM_DK_Bayes 13964 5.17 1.23 7.00 42 T_TooManySym_01 13926 5.62 2.70 6.98 43 TR_XM_DK_Bayes1 13840 5.12 1.23 6.94 44 XMStrtUSub 13257 5.90 4.30 6.65 45 RCVD_IN_MSPIKE_H3 13106 6.13 5.18 6.57 46 BAYES_60 12552 6.81 7.92 6.29 47 XM_B_SpammyWords3 12519 9.06 15.03 6.28 48 TooManyTo_001 12478 5.36 3.42 6.26 49 TM2_M_VERY_LONG_WORD 12367 5.43 3.78 6.20 50 TR_MAX_INTL_RELAY 11998 8.79 14.74 6.02 51 XM_UncommonTLD01 11966 5.84 5.51 6.00 52 TR_XM_DK_Bayes2 11957 4.44 1.11 5.99 53 BAYES_40 11392 4.43 1.68 5.71 54 XM_H_GMP 11353 5.66 5.61 5.69 55 XM_B_Phish_Phrases 11016 6.41 8.33 5.52 56 XM_DK_Undo_02 10919 17.23 42.47 5.47 57 XM_PDF 10789 3.92 0.73 5.41 58 RCVD_IN_VALIDITY_SAFE 10704 4.56 2.81 5.37 59 XM_H_Long_From01 10676 5.55 5.97 5.35 60 RCVD_IN_MSPIKE_H5 10272 3.99 1.51 5.15 61 LOTS_OF_MONEY 10221 7.45 12.44 5.12 62 XMNumbers 10183 4.67 3.73 5.11 63 MAY_BE_FORGED 10020 3.43 0.01 5.02 64 HTML_IMAGE_RATIO_02 9831 5.71 7.39 4.93 65 MPART_ALT_DIFF 9563 5.22 6.13 4.79 66 BAYES_99 8606 13.86 34.36 4.31 67 RCVD_IN_VALIDITY_CERTIFIED 8481 3.58 2.15 4.25 68 BAYES_20 8210 3.22 1.29 4.12 69 XMSubMetaSx_00 7906 5.07 7.45 3.96 70 INVALID_MSGID 7735 2.78 0.43 3.88 71 T_TooManySym_02 7690 2.92 0.92 3.86 72 HTML_IMAGE_RATIO_04 7280 4.09 5.05 3.65 73 KHOP_HELO_FCRDNS 7261 2.91 1.34 3.64 74 MIME_QP_LONG_LINE 7185 3.08 1.95 3.60 75 TR_XM_SpammyWords4 7145 5.92 10.93 3.58 76 BAYES_80 7133 5.29 8.97 3.58 77 RCVD_IN_MSPIKE_H4 6735 3.24 2.94 3.38 78 T_REMOTE_IMAGE 6723 2.71 1.29 3.37 79 BAYES_999 6675 10.75 26.66 3.35 80 BOTNET_IPINHOSTNAME 6362 5.62 10.82 3.19 81 HTML_IMAGE_RATIO_06 6340 3.36 3.74 3.18 82 TO_MALFORMED 6261 2.16 0.05 3.14 83 SCC_BODY_URI_ONLY 5587 2.28 1.16 2.80 84 RELAYCOUNTRY_META 5586 7.56 17.77 2.80 85 RCVD_IN_IADB_LISTED 5338 2.05 0.70 2.68 86 XM_B_SpammyTLD 5331 3.29 4.63 2.67 87 TooManyTo_002 5262 1.97 0.54 2.64 88 MIME_HTML_ONLY_MULTI 5180 2.83 3.32 2.60 89 MIME_HTML_MOSTLY 5116 2.83 3.39 2.56 90 MIME_CHARSET_FARAWAY 5084 1.88 0.43 2.55 91 HTML_MIME_NO_HTML_TAG 4987 2.07 1.14 2.50 92 T_XMDrugObfuBody_14 4956 3.21 4.78 2.48 93 XM_Body_Dirty_Words 4926 4.10 7.61 2.47 94 BAYES_95 4863 3.36 5.35 2.44 95 CHARSET_FARAWAY_HEADER 4803 1.71 0.22 2.41 96 BAYES_05 4752 1.89 0.84 2.38 97 RCVD_IN_IADB_SPF 4715 1.81 0.62 2.36 98 TR_XM_DKIM_Undo 4416 11.23 30.58 2.21 99 TR_MetaPhish_Combo_01 4262 1.94 1.51 2.14 100 RCVD_IN_IADB_SENDERID 4227 1.64 0.60 2.12 101 FROM_EXCESS_BASE64 4149 2.25 2.60 2.08 102 RCVD_IN_IADB_DK 4115 1.60 0.61 2.06 103 MAILING_LIST_MULTI 3986 1.91 1.74 2.00 104 TR_XM_UnparsRelay 3962 4.74 10.64 1.99 105 XM_CamelCaseFrm001 3918 2.87 4.81 1.96 106 TR_DCC_Bayes_99 3793 9.33 25.29 1.90 107 HTML_IMAGE_RATIO_08 3698 2.16 2.83 1.85 108 RCVD_IN_IADB_VOUCHED 3569 1.33 0.34 1.79 109 T_OBFU_PDF_ATTACH 3527 1.26 0.18 1.77 110 XMSexyCombo_05 3298 2.86 5.46 1.65 111 XMBdyGiftCard01 3144 1.56 1.53 1.58 112 TVD_SPACE_RATIO 3120 1.14 0.22 1.56 113 IN_HORDE_ADDRESS_BOOK 3114 1.10 0.10 1.56 114 TM2_M_URI_OPT_OUT 3098 1.78 2.27 1.55 115 XMStockSpam_06 3087 1.71 2.07 1.55 116 XMDiploma_00 3050 2.03 3.11 1.53 117 TR_XM_SpammyRelay 2995 5.17 13.03 1.50 118 T_TooManySym_03 2976 1.18 0.50 1.49 119 URI_NOVOWEL 2931 1.64 2.00 1.47 120 TR_XM_PhishingBody 2914 2.47 4.62 1.46 121 T_XMDrugObfuBody_08 2909 1.82 2.59 1.46 122 TR_XM_SpammyWords5 2895 2.17 3.72 1.45 123 XM_B_FormFill 2883 0.99 0.03 1.45 124 UNTRUSTED_Relay 2811 3.19 7.02 1.41 125 XM_B_Investor 2795 2.31 4.26 1.40 126 T_TVD_MIME_NO_HEADERS 2716 0.97 0.14 1.36 127 XM_SendGrid 2708 1.35 1.32 1.36 128 XMGappySubj_01 2687 0.97 0.17 1.35 129 DKIM_INVALID 2664 2.18 3.99 1.34 130 XM_DK_Undo_01 2647 1.31 1.27 1.33 131 XM_B_URI_Unicode 2598 1.55 2.07 1.30 132 URI_OPTOUT_3LD 2527 1.07 0.64 1.27 133 RCVD_IN_IADB_OPTIN 2463 0.91 0.23 1.23 134 SUBJ_ALL_CAPS 2322 1.60 2.52 1.16 135 TR_Symld_Words 2281 1.06 0.89 1.14 136 TVD_RCVD_IP 2269 1.24 1.47 1.14 137 XM_B_Unsub2 2236 1.92 3.64 1.12 138 XM_SPF_SoftFail 2094 1.71 3.14 1.05 139 LOW_PRICE 2091 0.88 0.52 1.05 140 XM_OfRef6 2008 1.81 3.53 1.01 141 BOTNET 2005 3.52 8.93 1.01 142 XM_ShortIntro_01 1998 0.86 0.55 1.00 143 XMBrknScrpt_02 1992 1.31 1.97 1.00 144 XM_B_SpammyWords4 1981 1.39 2.25 0.99 145 TR_XM_DK_SendGrid 1943 0.96 0.93 0.97 146 HTML_IMAGE_ONLY_32 1914 0.69 0.10 0.96 147 XM_GoogleGroups 1897 0.90 0.80 0.95 148 TR_XM_MSPIKECOMBO 1826 2.47 5.82 0.92 149 RCVD_IN_MSPIKE_BL 1826 2.47 5.82 0.92 150 XMGappySubj_02 1812 0.65 0.08 0.91 151 RELAYCOUNTRY_CA 1808 2.83 6.95 0.91 152 XM_H_PHPMailer 1785 0.86 0.77 0.89 153 URI_HEX 1753 1.24 2.01 0.88 154 T_FILL_THIS_FORM_SHORT 1747 1.39 2.51 0.88 155 XM_B_COPY_HTML 1743 1.00 1.27 0.87 156 TooManyTo_003 1686 0.73 0.49 0.85 157 XMBSHREFv2 1682 0.68 0.34 0.84 158 HTML_EXTRA_CLOSE 1665 0.57 0.02 0.83 159 XM_H_Long_From02 1646 0.96 1.24 0.83 160 LongTLD 1645 0.76 0.62 0.82 161 XM_UB50 1551 1.52 3.13 0.78 162 XMLngstWrd_00 1480 0.62 0.35 0.74 163 RCVD_IN_BL_SPAMCOP_NET 1478 4.00 11.00 0.74 164 T_XMHurry_00 1447 1.09 1.88 0.73 165 MPART_ALT_DIFF_COUNT 1447 1.01 1.62 0.73 166 DKIM_ADSP_CUSTOM_MED 1430 0.95 1.45 0.72 167 RCVD_IN_PSBL 1402 1.20 2.27 0.70 168 T_STY_INVIS_DIRECT 1401 0.82 1.09 0.70 169 TM2_M_BODY_EMPTY 1395 0.51 0.11 0.70 170 XMPhish30 1347 0.97 1.62 0.68 171 TooManyTo_004 1340 0.60 0.45 0.67 172 HTML_TAG_BALANCE_BODY 1320 0.72 0.84 0.66 173 RCVD_IN_MSPIKE_L3 1253 1.50 3.36 0.63 174 GMD_PDF_EMPTY_BODY 1228 0.43 0.04 0.62 175 XM_H_CodeIgniter 1209 0.42 0.01 0.61 176 XMGenDplmaNmb 1189 0.76 1.10 0.60 177 HTTPS_HTTP_MISMATCH 1187 0.73 1.01 0.60 178 TooManyTo_005 1165 0.54 0.43 0.58 179 FILL_THIS_FORM 1165 0.54 0.45 0.58 180 TR_XM_SpammyWords2 1119 4.33 12.43 0.56 181 XM_B_DNDMA 1084 1.03 2.08 0.54 182 MSGID_SHORT 1082 0.37 0.00 0.54 183 XMSubMetaI_00 1067 0.70 1.06 0.53 184 USER_IN_WHITELIST 1066 0.36 0.00 0.53 185 USER_IN_WELCOMELIST 1066 0.36 0.00 0.53 186 TR_XM_Base64_M1 1060 0.63 0.84 0.53 187 URI_TRY_3LD 1054 0.72 1.15 0.53 188 FROM_GOV_DKIM_AU 1053 0.39 0.08 0.53 189 RCVD_IN_PBL 1020 0.74 1.22 0.51 190 XM_ProductURIs 1014 1.02 2.12 0.51 191 XMSubMetaSxObfu_03 991 0.52 0.57 0.50 192 TM2_M_OBFU_COMMENT 982 0.70 1.16 0.49 193 T_XMDrugObfuBody_00 980 0.88 1.70 0.49 194 FORGED_GMAIL_RCVD 967 0.72 1.23 0.48 195 THIS_AD 946 0.82 1.56 0.47 196 XMBody_95 940 0.36 0.13 0.47 197 PLING_QUERY 897 0.51 0.64 0.45 198 XMSlimDrugH 884 0.51 0.65 0.44 199 XMLngstWrd_01 867 0.39 0.29 0.43 200 NML_ADSP_CUSTOM_MED 858 0.71 1.30 0.43 ----------------------------------------------------------------------