Email: 246948 Autolearn: 0 AvgScore: 5.39 AvgScanTime: 1.39 sec Spam: 85409 Autolearn: 0 AvgScore: 14.41 AvgScanTime: 1.53 sec Ham: 161539 Autolearn: 0 AvgScore: 0.61 AvgScanTime: 1.32 sec Time Spent Running SA: 95.34 hours Time Spent Processing Spam: 36.31 hours Time Spent Processing Ham: 59.03 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 84722 99.45 99.20 99.58 2 HTML_MESSAGE 81197 87.40 95.07 83.35 3 DKIM_SIGNED 75741 79.45 88.68 74.58 4 XM_DK_Pass 72651 77.80 85.06 73.97 5 DKIM_VALID 72140 77.25 84.46 73.43 6 XM_B_Unicode 71231 74.23 83.40 69.39 7 RELAYCOUNTRY_US 68150 80.17 79.79 80.37 8 DCC_CHECK 67426 59.30 78.94 48.91 9 XM_B_SpammyWords 59398 53.89 69.55 45.61 10 XMListUnsubscribeExists 58633 56.67 68.65 50.34 11 DKIM_VALID_AU 57859 64.24 67.74 62.38 12 XM_B_Unicode3 42931 46.65 50.27 44.74 13 LOC_TINY_FONT_1 41143 37.66 48.17 32.10 14 XM_DK_Undo_02 36984 19.08 43.30 6.27 15 XM_B_SpammyWords2 34639 28.21 40.56 21.68 16 BAYES_50 31675 53.05 37.09 61.49 17 HTML_FONT_LOW_CONTRAST 31546 33.83 36.94 32.18 18 BAYES_99 29422 15.17 34.45 4.98 19 FVGT_m_MULTI_ODD 28744 28.33 33.65 25.52 20 TR_XM_DKIM_Undo 27260 12.63 31.92 2.43 21 DKIM_VALID_EF 27075 30.66 31.70 30.10 22 T_KAM_HTML_FONT_INVALID 25688 23.99 30.08 20.77 23 MIME_HTML_ONLY 24943 24.51 29.20 22.03 24 BAYES_999 23087 11.88 27.03 3.87 25 TR_DCC_Bayes_99 21744 10.31 25.46 2.31 26 TR_XM_DK_Unsub 21130 17.95 24.74 14.36 27 XMSubLong 19514 22.45 22.85 22.24 28 XM_Multi_Part_URI 19061 19.24 22.32 17.61 29 T_TM2_M_HEADER_IN_MSG 17633 24.86 20.65 27.09 30 DCC_CHECK_NEGATIVE 17516 40.49 20.51 51.06 31 RCVD_IN_MSPIKE_H2 16870 16.07 19.75 14.13 32 XM_B_Unsub 16745 14.36 19.61 11.59 33 RELAYCOUNTRY_META 16681 8.79 19.53 3.10 34 UNPARSEABLE_RELAY 16455 14.89 19.27 12.58 35 TR_XM_BayesUnsub 16185 12.56 18.95 9.18 36 TR_MAX_INTL_RELAY 13169 9.58 15.42 6.49 37 XM_B_SpammyWords3 12664 8.99 14.83 5.91 38 TR_XM_SpammyRelay 12558 6.27 14.70 1.82 39 TR_XM_SpammyWords2 11293 4.99 13.22 0.63 40 LOTS_OF_MONEY 11158 8.88 13.06 6.68 41 RCVD_IN_BL_SPAMCOP_NET 10710 4.74 12.54 0.62 42 TR_XM_SpammyWords4 9951 7.14 11.65 4.75 43 FSL_BULK_SIG 9760 11.83 11.43 12.04 44 BOTNET_IPINHOSTNAME 9726 6.52 11.39 3.94 45 TR_XM_UnparsRelay 8660 4.65 10.14 1.75 46 BAYES_80 8075 5.80 9.45 3.87 47 RCVD_IN_MSPIKE_WL 7994 14.47 9.36 17.17 48 XM_B_Phish_Phrases 7827 7.35 9.16 6.39 49 BAYES_60 7540 7.35 8.83 6.57 50 BOTNET 7022 3.71 8.22 1.32 51 RELAYCOUNTRY_CA 6879 3.47 8.05 1.05 52 XM_Evil_Numbers_Gen 6707 9.48 7.85 10.34 53 XMSubMetaSx_00 6482 4.87 7.59 3.43 54 HTML_IMAGE_RATIO_02 6386 5.98 7.48 5.18 55 RCVD_IN_MSPIKE_BL 5834 2.98 6.83 0.94 56 TR_XM_MSPIKECOMBO 5833 2.98 6.83 0.94 57 XM_Body_Dirty_Words 5796 3.90 6.79 2.37 58 TR_XM_SPAMCOP 5593 2.35 6.55 0.13 59 UNTRUSTED_Relay 5502 3.15 6.44 1.42 60 XM_H_Long_From01 5004 5.33 5.86 5.05 61 MPART_ALT_DIFF 4992 5.76 5.84 5.71 62 XM_UncommonTLD01 4914 5.38 5.75 5.18 63 XM_B_PhoneNumber 4866 6.51 5.70 6.95 64 BAYES_95 4827 3.67 5.65 2.62 65 RCVD_IN_MSPIKE_H3 4560 7.02 5.34 7.90 66 XM_H_GMP 4546 6.27 5.32 6.77 67 LotsOfNums_01 4457 7.09 5.22 8.08 68 XMStrtUSub 4328 5.98 5.07 6.46 69 TR_XM_SpammyWords5 4257 2.57 4.98 1.29 70 TR_XM_SpammyWords3 4133 1.92 4.84 0.38 71 RCVD_IN_VALIDITY_RPBL 4075 1.72 4.77 0.11 72 XM_B_Investor 4046 2.57 4.74 1.42 73 XM_CamelCaseFrm001 3969 3.14 4.65 2.34 74 TR_XM_NoHeaderRelay 3887 1.63 4.55 0.09 75 RCVD_IN_MSPIKE_L3 3868 1.93 4.53 0.56 76 XMSexyCombo_05 3648 2.34 4.27 1.31 77 T_FILL_THIS_FORM_SHORT 3639 1.89 4.26 0.64 78 HTML_IMAGE_RATIO_04 3619 3.67 4.24 3.36 79 DKIM_INVALID 3601 2.21 4.22 1.14 80 TR_XM_PhishingBody 3542 2.59 4.15 1.77 81 TooManyTo_001 3489 5.50 4.09 6.24 82 T_XMDrugObfuBody_14 3394 2.81 3.97 2.19 83 TM2_M_VERY_LONG_WORD 3256 3.24 3.81 2.94 84 XM_SPF_SoftFail 3199 2.19 3.75 1.36 85 XM_URI_RBL 3147 1.57 3.68 0.45 86 XMNumbers 3019 4.23 3.53 4.59 87 XM_B_Unsub2 3004 1.95 3.52 1.13 88 XM_OfRef6 2865 1.80 3.35 0.98 89 MIME_HTML_MOSTLY 2848 3.08 3.33 2.95 90 HTML_IMAGE_RATIO_06 2818 3.43 3.30 3.49 91 XM_UB50 2603 1.53 3.05 0.73 92 XMBody_17 2579 1.39 3.02 0.53 93 MIME_HTML_ONLY_MULTI 2529 3.10 2.96 3.17 94 XM_B_SpammyTLD 2373 2.59 2.78 2.48 95 RELAYCOUNTRY_AU 2242 1.27 2.63 0.56 96 RCVD_IN_SBL_CSS 2224 0.93 2.60 0.04 97 ALL_TRUSTED 2224 11.79 2.60 16.64 98 XMDiploma_00 2210 1.77 2.59 1.34 99 HK_RANDOM_REPLYTO 2181 0.96 2.55 0.13 100 T_REMOTE_IMAGE 2181 3.11 2.55 3.40 101 FROM_EXCESS_BASE64 2119 2.22 2.48 2.08 102 RCVD_IN_VALIDITY_SAFE 2101 4.61 2.46 5.74 103 T_XMHurry_00 2097 1.32 2.46 0.73 104 MIME_QP_LONG_LINE 2075 3.14 2.43 3.51 105 TM2_M_URI_OPT_OUT 2018 2.14 2.36 2.02 106 RCVD_IN_MSPIKE_H4 2005 3.36 2.35 3.89 107 T_TooManySym_01 2004 5.94 2.35 7.84 108 SUBJ_ALL_CAPS 1996 1.55 2.34 1.13 109 URI_NOVOWEL 1974 1.58 2.31 1.20 110 HTML_IMAGE_RATIO_08 1961 2.25 2.30 2.22 111 XM_B_SpammyWords4 1955 1.48 2.29 1.05 112 XM_B_URI_Unicode 1940 1.74 2.27 1.45 113 T_XMDrugObfuBody_08 1925 1.48 2.25 1.08 114 XMBrknScrpt_02 1841 1.40 2.16 1.00 115 USER_IN_DEF_DKIM_WL 1809 13.30 2.12 19.21 116 SpammyFromTLD_02 1796 0.90 2.10 0.26 117 XMStockSpam_06 1773 1.88 2.08 1.77 118 TR_XM_RelayPhish 1756 0.77 2.06 0.09 119 XM_H_Long_From02 1685 1.18 1.97 0.76 120 SpammyFromTLD_01 1680 0.95 1.97 0.41 121 XM_DK_Undo_01 1593 1.70 1.87 1.61 122 MAILING_LIST_MULTI 1553 2.15 1.82 2.32 123 KHOP_HELO_FCRDNS 1544 2.16 1.81 2.35 124 TR_XM_INV_DKIM 1534 0.67 1.80 0.08 125 RCVD_IN_VALIDITY_CERTIFIED 1499 3.74 1.76 4.79 126 TR_LOTS_OF_MONEY3 1469 0.75 1.72 0.24 127 DKIM_ADSP_NXDOMAIN 1457 0.86 1.71 0.41 128 RCVD_IN_MSPIKE_H5 1429 4.09 1.67 5.37 129 RELAYCOUNTRY_GB 1425 0.79 1.67 0.32 130 RCVD_IN_XBL 1418 0.58 1.66 0.01 131 XMPhish30 1405 1.15 1.65 0.89 132 BAYES_40 1348 3.98 1.58 5.24 133 XM_HighProb1 1305 0.53 1.53 0.00 134 RCVD_IN_PSBL 1291 0.81 1.51 0.44 135 RCVD_IN_SBL 1281 0.52 1.50 0.00 136 SHOPIFY_IMG_NOT_RCVD_SFY 1269 0.71 1.49 0.31 137 DEAR_SOMETHING 1267 0.52 1.48 0.01 138 XM_B_DNDMA 1261 0.84 1.48 0.50 139 TR_XM_MSPIKECOMBO2 1237 0.51 1.45 0.01 140 T_XMDrugObfuBody_00 1233 0.91 1.44 0.63 141 RCVD_IN_SBL_DROP 1227 0.50 1.44 0.00 142 XMSubMetaI_00 1199 0.79 1.40 0.46 143 TR_MetaPhish_Combo_01 1196 1.99 1.40 2.31 144 SCC_BODY_URI_ONLY 1187 2.59 1.39 3.22 145 TR_XM_PHPDW 1178 0.74 1.38 0.40 146 TR_XM_PHPForged 1176 0.73 1.38 0.39 147 URI_TRY_3LD 1175 0.89 1.38 0.63 148 TR_XM_FormFill2 1165 0.73 1.36 0.40 149 XM_B_COPY_HTML 1164 1.01 1.36 0.82 150 XM_H_PHPOS 1137 0.71 1.33 0.38 151 BAYES_20 1130 2.71 1.32 3.45 152 MultiRelay_CC 1129 0.50 1.32 0.07 153 XM_DIRTYINTL 1084 0.48 1.27 0.06 154 MPART_ALT_DIFF_COUNT 1079 0.71 1.26 0.42 155 XM_SendGrid 1076 1.27 1.26 1.27 156 RCVD_IN_PBL 1070 0.83 1.25 0.61 157 URI_GOOGLE_PROXY 1068 0.45 1.25 0.03 158 DIET_1 1062 0.62 1.24 0.29 159 TM2_M_OBFU_COMMENT 1056 0.81 1.24 0.58 160 TR_Mismatch_TLD_02 1053 0.48 1.23 0.08 161 RCVD_IN_MSPIKE_L4 1052 0.56 1.23 0.21 162 ANY_BOUNCE_MESSAGE 1049 4.16 1.23 5.71 163 BOUNCE_MESSAGE 1049 4.16 1.23 5.70 164 T_HTML_ATTACH 1037 0.43 1.21 0.01 165 RDNS_DYNAMIC 1023 0.59 1.20 0.26 166 XM_B_Phish66 1023 0.59 1.20 0.27 167 T_STY_INVIS_DIRECT 1014 0.86 1.19 0.68 168 SUBJ_DOLLARS 1008 0.62 1.18 0.32 169 PDS_RDNS_DYNAMIC_FP 988 0.43 1.16 0.04 170 DKIM_ADSP_DISCARD 969 0.39 1.13 0.00 171 T_OBFU_HTML_ATTACH 966 0.39 1.13 0.00 172 TR_XM_HtmlAttach 963 0.39 1.13 0.00 173 XM_ProductURIs 960 0.70 1.12 0.47 174 T_Symld_Words_02 941 0.55 1.10 0.25 175 TVD_RCVD_IP 930 1.43 1.09 1.62 176 RCVD_IN_MSPIKE_L5 916 0.48 1.07 0.17 177 XMReplyNow 907 0.48 1.06 0.17 178 J_POPCORN_WO_D 889 0.57 1.04 0.32 179 BOTNET_NORDNS 886 0.37 1.04 0.01 180 XM_UB99 871 0.36 1.02 0.00 181 RELAYCOUNTRY_FR 865 0.47 1.01 0.19 182 RELAYCOUNTRY_DE 859 0.54 1.01 0.29 183 FONT_INVIS_LONG_LINE 848 0.38 0.99 0.05 184 TR_XM_FormFill 845 0.35 0.99 0.00 185 TR_XM_InvalidRelay 837 0.34 0.98 0.01 186 XMSexyCombo_01 833 0.43 0.98 0.14 187 URI_HEX 827 0.95 0.97 0.94 188 HTML_MIME_NO_HTML_TAG 819 1.51 0.96 1.80 189 XMBdyGiftCard01 819 0.82 0.96 0.75 190 XM_B_REG_HTML 814 0.50 0.95 0.26 191 XM_B_SEO 812 0.48 0.95 0.23 192 XM_UB60 812 0.36 0.95 0.06 193 XMFrmHeader_28 810 0.33 0.95 0.00 194 HELO_DYNAMIC_SPLIT_IP 803 0.33 0.94 0.00 195 T_MONEY_PERCENT 794 0.41 0.93 0.14 196 TR_LOTS_OF_MONEY2 794 0.41 0.93 0.14 197 HTML_FONT_FACE_BAD 792 0.63 0.93 0.47 198 HTTPS_HTTP_MISMATCH 790 0.57 0.92 0.38 199 TR_Mismatch_TLD_01 779 0.57 0.91 0.39 200 RELAYCOUNTRY_CN 767 0.34 0.90 0.04 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 160865 99.45 99.20 99.58 2 HTML_MESSAGE 134639 87.40 95.07 83.35 3 RELAYCOUNTRY_US 129824 80.17 79.79 80.37 4 DKIM_SIGNED 120471 79.45 88.68 74.58 5 XM_DK_Pass 119486 77.80 85.06 73.97 6 DKIM_VALID 118622 77.25 84.46 73.43 7 XM_B_Unicode 112090 74.23 83.40 69.39 8 DKIM_VALID_AU 100772 64.24 67.74 62.38 9 BAYES_50 99329 53.05 37.09 61.49 10 DCC_CHECK_NEGATIVE 82483 40.49 20.51 51.06 11 XMListUnsubscribeExists 81316 56.67 68.65 50.34 12 DCC_CHECK 79016 59.30 78.94 48.91 13 XM_B_SpammyWords 73676 53.89 69.55 45.61 14 XM_B_Unicode3 72273 46.65 50.27 44.74 15 HTML_FONT_LOW_CONTRAST 51986 33.83 36.94 32.18 16 LOC_TINY_FONT_1 51861 37.66 48.17 32.10 17 DKIM_VALID_EF 48629 30.66 31.70 30.10 18 T_TM2_M_HEADER_IN_MSG 43753 24.86 20.65 27.09 19 FVGT_m_MULTI_ODD 41228 28.33 33.65 25.52 20 XMSubLong 35933 22.45 22.85 22.24 21 MIME_HTML_ONLY 35579 24.51 29.20 22.03 22 XM_B_SpammyWords2 35014 28.21 40.56 21.68 23 T_KAM_HTML_FONT_INVALID 33548 23.99 30.08 20.77 24 USER_IN_DEF_DKIM_WL 31031 13.30 2.12 19.21 25 XM_Multi_Part_URI 28448 19.24 22.32 17.61 26 RCVD_IN_MSPIKE_WL 27734 14.47 9.36 17.17 27 ALL_TRUSTED 26884 11.79 2.60 16.64 28 TR_XM_DK_Unsub 23191 17.95 24.74 14.36 29 RCVD_IN_MSPIKE_H2 22821 16.07 19.75 14.13 30 UNPARSEABLE_RELAY 20326 14.89 19.27 12.58 31 FSL_BULK_SIG 19443 11.83 11.43 12.04 32 XM_B_Unsub 18717 14.36 19.61 11.59 33 XM_Evil_Numbers_Gen 16698 9.48 7.85 10.34 34 BAYES_00 15961 6.63 0.47 9.88 35 XM_DKIMWhitelistDomains 15795 6.40 0.03 9.78 36 TR_XM_BayesUnsub 14830 12.56 18.95 9.18 37 LotsOfNums_01 13055 7.09 5.22 8.08 38 RCVD_IN_MSPIKE_H3 12765 7.02 5.34 7.90 39 T_TooManySym_01 12657 5.94 2.35 7.84 40 TR_XM_DK_Bayes 12053 5.00 0.35 7.46 41 TR_XM_DK_Bayes1 11957 4.96 0.34 7.40 42 XM_B_PhoneNumber 11222 6.51 5.70 6.95 43 XM_H_GMP 10937 6.27 5.32 6.77 44 LOTS_OF_MONEY 10783 8.88 13.06 6.68 45 BAYES_60 10607 7.35 8.83 6.57 46 TR_MAX_INTL_RELAY 10484 9.58 15.42 6.49 47 XMStrtUSub 10429 5.98 5.07 6.46 48 XM_B_Phish_Phrases 10328 7.35 9.16 6.39 49 TR_XM_DK_Bayes2 10153 4.19 0.24 6.29 50 XM_DK_Undo_02 10132 19.08 43.30 6.27 51 TooManyTo_001 10083 5.50 4.09 6.24 52 XM_B_SpammyWords3 9540 8.99 14.83 5.91 53 RCVD_IN_VALIDITY_SAFE 9279 4.61 2.46 5.74 54 MPART_ALT_DIFF 9227 5.76 5.84 5.71 55 ANY_BOUNCE_MESSAGE 9217 4.16 1.23 5.71 56 BOUNCE_MESSAGE 9212 4.16 1.23 5.70 57 RCVD_IN_MSPIKE_H5 8682 4.09 1.67 5.37 58 BAYES_40 8471 3.98 1.58 5.24 59 HTML_IMAGE_RATIO_02 8372 5.98 7.48 5.18 60 XM_UncommonTLD01 8367 5.38 5.75 5.18 61 XM_H_Long_From01 8158 5.33 5.86 5.05 62 BAYES_99 8045 15.17 34.45 4.98 63 RCVD_IN_VALIDITY_CERTIFIED 7734 3.74 1.76 4.79 64 TR_XM_SpammyWords4 7669 7.14 11.65 4.75 65 XMNumbers 7416 4.23 3.53 4.59 66 T_TooManySym_02 7215 3.21 0.83 4.47 67 INVALID_MSGID 6487 2.71 0.23 4.02 68 BOTNET_IPINHOSTNAME 6367 6.52 11.39 3.94 69 TO_MALFORMED 6320 2.58 0.05 3.91 70 RCVD_IN_MSPIKE_H4 6287 3.36 2.35 3.89 71 BAYES_80 6252 5.80 9.45 3.87 72 BAYES_999 6249 11.88 27.03 3.87 73 MIME_QP_LONG_LINE 5669 3.14 2.43 3.51 74 HTML_IMAGE_RATIO_06 5642 3.43 3.30 3.49 75 BAYES_20 5567 2.71 1.32 3.45 76 XMSubMetaSx_00 5534 4.87 7.59 3.43 77 T_REMOTE_IMAGE 5488 3.11 2.55 3.40 78 HTML_IMAGE_RATIO_04 5433 3.67 4.24 3.36 79 SCC_BODY_URI_ONLY 5199 2.59 1.39 3.22 80 MIME_HTML_ONLY_MULTI 5128 3.10 2.96 3.17 81 RELAYCOUNTRY_META 5015 8.79 19.53 3.10 82 MIME_HTML_MOSTLY 4765 3.08 3.33 2.95 83 TM2_M_VERY_LONG_WORD 4754 3.24 3.81 2.94 84 BAYES_95 4228 3.67 5.65 2.62 85 XM_B_SpammyTLD 4014 2.59 2.78 2.48 86 RCVD_IN_IADB_LISTED 3997 1.83 0.61 2.47 87 XM_PDF 3993 1.74 0.37 2.47 88 TR_XM_DKIM_Undo 3925 12.63 31.92 2.43 89 XM_Body_Dirty_Words 3827 3.90 6.79 2.37 90 KHOP_HELO_FCRDNS 3796 2.16 1.81 2.35 91 XM_CamelCaseFrm001 3776 3.14 4.65 2.34 92 MAILING_LIST_MULTI 3747 2.15 1.82 2.32 93 TR_MetaPhish_Combo_01 3729 1.99 1.40 2.31 94 TR_DCC_Bayes_99 3726 10.31 25.46 2.31 95 HTML_IMAGE_RATIO_08 3588 2.25 2.30 2.22 96 RCVD_IN_IADB_SPF 3552 1.62 0.53 2.20 97 TooManyTo_002 3551 1.67 0.68 2.20 98 T_XMDrugObfuBody_14 3545 2.81 3.97 2.19 99 FROM_EXCESS_BASE64 3355 2.22 2.48 2.08 100 TM2_M_URI_OPT_OUT 3262 2.14 2.36 2.02 101 HTML_IMAGE_ONLY_32 3218 1.39 0.26 1.99 102 RCVD_IN_IADB_SENDERID 3194 1.46 0.49 1.98 103 RCVD_IN_IADB_DK 3124 1.44 0.50 1.93 104 BAYES_05 3079 1.46 0.63 1.91 105 TR_XM_SpammyRelay 2936 6.27 14.70 1.82 106 T_TooManySym_03 2927 1.36 0.49 1.81 107 HTML_MIME_NO_HTML_TAG 2903 1.51 0.96 1.80 108 XMStockSpam_06 2863 1.88 2.08 1.77 109 TR_XM_PhishingBody 2861 2.59 4.15 1.77 110 TR_XM_UnparsRelay 2826 4.65 10.14 1.75 111 IN_HORDE_ADDRESS_BOOK 2784 1.16 0.09 1.72 112 MAY_BE_FORGED 2752 1.12 0.01 1.70 113 RCVD_IN_IADB_VOUCHED 2744 1.22 0.33 1.70 114 TVD_SPACE_RATIO 2696 1.21 0.35 1.67 115 TVD_RCVD_IP 2613 1.43 1.09 1.62 116 XM_DK_Undo_01 2598 1.70 1.87 1.61 117 URI_OPTOUT_3LD 2511 1.25 0.68 1.55 118 XMGappySubj_01 2503 1.08 0.19 1.55 119 T_TVD_MIME_NO_HEADERS 2478 1.02 0.05 1.53 120 XM_B_URI_Unicode 2350 1.74 2.27 1.45 121 XM_B_Investor 2300 2.57 4.74 1.42 122 UNTRUSTED_Relay 2289 3.15 6.44 1.42 123 XM_SPF_SoftFail 2204 2.19 3.75 1.36 124 TR_Symld_Words 2198 1.18 0.85 1.36 125 XMDiploma_00 2163 1.77 2.59 1.34 126 BOTNET 2129 3.71 8.22 1.32 127 XMSexyCombo_05 2120 2.34 4.27 1.31 128 TR_XM_SpammyWords5 2086 2.57 4.98 1.29 129 XM_SendGrid 2050 1.27 1.26 1.27 130 LOW_PRICE 2050 0.90 0.20 1.27 131 XM_GoogleGroups 1971 1.04 0.70 1.22 132 RCVD_IN_IADB_OPTIN 1949 0.87 0.22 1.21 133 URI_NOVOWEL 1939 1.58 2.31 1.20 134 XMGappySubj_02 1869 0.77 0.04 1.16 135 DKIM_INVALID 1849 2.21 4.22 1.14 136 SUBJ_ALL_CAPS 1829 1.55 2.34 1.13 137 XM_B_Unsub2 1821 1.95 3.52 1.13 138 HTML_EXTRA_CLOSE 1779 0.73 0.04 1.10 139 T_XMDrugObfuBody_08 1739 1.48 2.25 1.08 140 XMBSHREFv2 1707 0.83 0.40 1.06 141 XM_B_SpammyWords4 1693 1.48 2.29 1.05 142 RELAYCOUNTRY_CA 1690 3.47 8.05 1.05 143 XMBrknScrpt_02 1611 1.40 2.16 1.00 144 XM_OfRef6 1577 1.80 3.35 0.98 145 TooManyTo_003 1538 0.83 0.61 0.95 146 URI_HEX 1524 0.95 0.97 0.94 147 TR_XM_MSPIKECOMBO 1517 2.98 6.83 0.94 148 RCVD_IN_MSPIKE_BL 1517 2.98 6.83 0.94 149 XM_B_FormFill 1505 0.61 0.01 0.93 150 TR_XM_DK_SendGrid 1437 0.88 0.85 0.89 151 XMPhish30 1430 1.15 1.65 0.89 152 DKIM_ADSP_CUSTOM_MED 1360 0.85 0.86 0.84 153 XM_B_COPY_HTML 1330 1.01 1.36 0.82 154 MIME_CHARSET_FARAWAY 1301 0.65 0.35 0.81 155 XM_H_PHPMailer 1230 0.71 0.61 0.76 156 XM_H_Long_From02 1226 1.18 1.97 0.76 157 XMBdyGiftCard01 1212 0.82 0.96 0.75 158 XM_UB50 1179 1.53 3.05 0.73 159 TooManyTo_004 1176 0.68 0.59 0.73 160 T_XMHurry_00 1175 1.32 2.46 0.73 161 T_STY_INVIS_DIRECT 1104 0.86 1.19 0.68 162 CHARSET_FARAWAY_HEADER 1094 0.51 0.20 0.68 163 T_FILL_THIS_FORM_SHORT 1030 1.89 4.26 0.64 164 URI_TRY_3LD 1023 0.89 1.38 0.63 165 TR_XM_SpammyWords2 1018 4.99 13.22 0.63 166 TooManyTo_005 1012 0.61 0.57 0.63 167 T_XMDrugObfuBody_00 1011 0.91 1.44 0.63 168 RCVD_IN_BL_SPAMCOP_NET 1003 4.74 12.54 0.62 169 XMBody_95 996 0.43 0.07 0.62 170 RCVD_IN_PBL 986 0.83 1.25 0.61 171 TR_XM_Base64_M1 982 0.63 0.67 0.61 172 HTML_TAG_BALANCE_BODY 974 0.69 0.85 0.60 173 XMSlimDrugH 944 0.63 0.70 0.58 174 TM2_M_OBFU_COMMENT 937 0.81 1.24 0.58 175 RELAYCOUNTRY_AU 903 1.27 2.63 0.56 176 RCVD_IN_MSPIKE_L3 901 1.93 4.53 0.56 177 XMNoVowels 893 0.50 0.40 0.55 178 XMBody_17 860 1.39 3.02 0.53 179 FORGED_GMAIL_RCVD 832 0.56 0.65 0.52 180 XM_B_DNDMA 812 0.84 1.48 0.50 181 XM_ShortIntro_01 803 0.45 0.36 0.50 182 NML_ADSP_CUSTOM_MED 803 0.58 0.75 0.50 183 XM_RXBody 800 0.52 0.57 0.50 184 T_OBFU_PDF_ATTACH 778 0.34 0.07 0.48 185 XM_S_SubURI 771 0.34 0.07 0.48 186 XMSubMetaSxObfu_03 768 0.54 0.67 0.48 187 HTML_FONT_FACE_BAD 767 0.63 0.93 0.47 188 XM_ProductURIs 765 0.70 1.12 0.47 189 T_TooManySym_04 759 0.38 0.21 0.47 190 XMLngstWrd_00 745 0.44 0.40 0.46 191 XMSubMetaI_00 740 0.79 1.40 0.46 192 PLING_QUERY 736 0.53 0.68 0.46 193 XM_URI_RBL 723 1.57 3.68 0.45 194 XMGenDplmaNmb 711 0.58 0.84 0.44 195 MSGID_FROM_MTA_HEADER 709 0.32 0.10 0.44 196 RCVD_IN_PSBL 705 0.81 1.51 0.44 197 MPART_ALT_DIFF_COUNT 681 0.71 1.26 0.42 198 DKIM_ADSP_NXDOMAIN 670 0.86 1.71 0.41 199 SpammyFromTLD_01 668 0.95 1.97 0.41 200 TR_XM_PHPDW 643 0.74 1.38 0.40 ----------------------------------------------------------------------