Email: 241935 Autolearn: 0 AvgScore: 5.30 AvgScanTime: 1.41 sec Spam: 81475 Autolearn: 0 AvgScore: 14.14 AvgScanTime: 1.46 sec Ham: 160460 Autolearn: 0 AvgScore: 0.82 AvgScanTime: 1.38 sec Time Spent Running SA: 94.44 hours Time Spent Processing Spam: 33.06 hours Time Spent Processing Ham: 61.38 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 80953 99.60 99.36 99.73 2 HTML_MESSAGE 77254 87.06 94.82 83.12 3 DKIM_SIGNED 72055 78.07 88.44 72.81 4 XM_DK_Pass 69324 76.52 85.09 72.17 5 XM_B_Unicode 69275 74.85 85.03 69.68 6 DKIM_VALID 68831 75.95 84.48 71.61 7 RELAYCOUNTRY_US 64612 80.07 79.30 80.46 8 DCC_CHECK 63810 59.19 78.32 49.48 9 XMListUnsubscribeExists 57446 56.78 70.51 49.81 10 XM_B_SpammyWords 56884 54.16 69.82 46.21 11 DKIM_VALID_AU 55101 63.58 67.63 61.52 12 XM_B_Unicode3 43329 48.11 53.18 45.54 13 LOC_TINY_FONT_1 40445 38.12 49.64 32.27 14 XM_DK_Undo_02 35283 18.35 43.31 5.68 15 XM_B_SpammyWords2 34312 29.08 42.11 22.47 16 BAYES_50 30953 54.57 37.99 62.99 17 HTML_FONT_LOW_CONTRAST 30125 36.22 36.97 35.84 18 BAYES_99 28000 14.64 34.37 4.63 19 FVGT_m_MULTI_ODD 26681 28.75 32.75 26.72 20 TR_XM_DKIM_Undo 26471 12.65 32.49 2.57 21 DKIM_VALID_EF 25924 30.07 31.82 29.18 22 MIME_HTML_ONLY 24960 24.22 30.64 20.96 23 T_KAM_HTML_FONT_INVALID 22098 22.51 27.12 20.17 24 BAYES_999 22081 11.50 27.10 3.58 25 TR_DCC_Bayes_99 20485 9.95 25.14 2.24 26 TR_XM_DK_Unsub 19932 17.54 24.46 14.02 27 XMSubLong 19387 22.72 23.80 22.17 28 DCC_CHECK_NEGATIVE 17207 40.60 21.12 50.50 29 XM_Multi_Part_URI 17092 18.15 20.98 16.71 30 T_TM2_M_HEADER_IN_MSG 16315 25.21 20.02 27.85 31 RELAYCOUNTRY_META 15813 8.82 19.41 3.44 32 RCVD_IN_MSPIKE_H2 14946 15.38 18.34 13.88 33 UNPARSEABLE_RELAY 14223 14.34 17.46 12.75 34 XM_B_Unsub 14091 13.24 17.29 11.18 35 TR_XM_BayesUnsub 13563 11.53 16.65 8.93 36 TR_MAX_INTL_RELAY 12513 9.23 15.36 6.11 37 TR_XM_SpammyRelay 11670 6.03 14.32 1.82 38 XM_B_SpammyWords3 11415 8.91 14.01 6.33 39 RCVD_IN_BL_SPAMCOP_NET 10745 4.79 13.19 0.52 40 TR_XM_SpammyWords2 10532 4.92 12.93 0.85 41 BOTNET_IPINHOSTNAME 8684 6.00 10.66 3.64 42 LOTS_OF_MONEY 8389 6.86 10.30 5.11 43 FSL_BULK_SIG 8237 11.03 10.11 11.49 44 TR_XM_UnparsRelay 8120 4.47 9.97 1.68 45 RCVD_IN_MSPIKE_WL 7814 13.25 9.59 15.11 46 BAYES_80 7769 5.63 9.54 3.65 47 TR_XM_SpammyWords4 7705 5.67 9.46 3.75 48 XM_Evil_Numbers_Gen 6983 10.82 8.57 11.97 49 RELAYCOUNTRY_CA 6693 3.46 8.21 1.05 50 BAYES_60 6621 7.11 8.13 6.59 51 BOTNET 5993 3.19 7.36 1.08 52 TR_XM_MSPIKECOMBO 5976 3.06 7.33 0.89 53 RCVD_IN_MSPIKE_BL 5976 3.06 7.33 0.89 54 HTML_IMAGE_RATIO_02 5963 5.90 7.32 5.19 55 XM_B_Phish_Phrases 5917 6.09 7.26 5.49 56 LotsOfNums_01 5754 8.28 7.06 8.90 57 UNTRUSTED_Relay 5444 3.44 6.68 1.79 58 XM_Body_Dirty_Words 5414 3.87 6.64 2.46 59 MPART_ALT_DIFF 5223 5.29 6.41 4.72 60 XMSubMetaSx_00 5182 4.60 6.36 3.71 61 XM_UncommonTLD01 4798 5.49 5.89 5.29 62 TR_XM_SPAMCOP 4793 2.08 5.88 0.15 63 XM_H_Long_From01 4579 5.47 5.62 5.40 64 XM_B_PhoneNumber 4569 6.35 5.61 6.73 65 T_FILL_THIS_FORM_SHORT 4560 2.28 5.60 0.60 66 RCVD_IN_MSPIKE_H3 4520 6.55 5.55 7.06 67 BAYES_95 4459 3.48 5.47 2.47 68 XM_H_GMP 4267 6.52 5.24 7.17 69 TR_XM_PhishingBody 4226 2.87 5.19 1.70 70 TR_XM_SpammyWords3 4224 2.02 5.18 0.41 71 XMStrtUSub 3902 5.21 4.79 5.42 72 XMSexyCombo_05 3823 2.78 4.69 1.80 73 XM_B_Investor 3717 2.47 4.56 1.41 74 TR_XM_SpammyWords5 3558 2.45 4.37 1.47 75 HTML_IMAGE_RATIO_04 3448 4.32 4.23 4.36 76 RCVD_IN_VALIDITY_RPBL 3382 1.49 4.15 0.15 77 MIME_HTML_MOSTLY 3363 2.93 4.13 2.33 78 TR_XM_NoHeaderRelay 3363 1.61 4.13 0.33 79 T_XMDrugObfuBody_14 3268 2.99 4.01 2.47 80 RCVD_IN_MSPIKE_L3 3251 1.71 3.99 0.56 81 DKIM_INVALID 3224 2.12 3.96 1.19 82 XM_OfRef6 3199 1.98 3.93 1.00 83 XM_CamelCaseFrm001 3163 2.79 3.88 2.23 84 XM_SPF_SoftFail 3032 2.07 3.72 1.24 85 TooManyTo_001 2982 5.34 3.66 6.19 86 XM_URI_RBL 2852 1.43 3.50 0.37 87 TM2_M_VERY_LONG_WORD 2629 4.11 3.23 4.56 88 XM_UB50 2615 1.68 3.21 0.91 89 XM_B_SpammyTLD 2599 2.74 3.19 2.51 90 MIME_HTML_ONLY_MULTI 2509 2.93 3.08 2.86 91 HTML_IMAGE_RATIO_08 2499 2.54 3.07 2.27 92 XM_B_Unsub2 2463 1.81 3.02 1.20 93 XMBody_17 2432 1.42 2.98 0.63 94 HTML_IMAGE_RATIO_06 2405 2.93 2.95 2.92 95 ALL_TRUSTED 2379 11.73 2.92 16.20 96 RCVD_IN_VALIDITY_SAFE 2330 4.99 2.86 6.08 97 XMNumbers 2322 4.11 2.85 4.75 98 T_TooManySym_01 2289 6.45 2.81 8.30 99 XMPhish30 2273 1.43 2.79 0.74 100 T_XMDrugObfuBody_08 2256 1.75 2.77 1.23 101 RCVD_IN_MSPIKE_L4 2175 1.03 2.67 0.20 102 USER_IN_DEF_DKIM_WL 2170 13.47 2.66 18.96 103 XM_B_SpammyWords4 2123 2.19 2.61 1.98 104 RELAYCOUNTRY_AU 2096 1.21 2.57 0.51 105 RCVD_IN_SBL_CSS 2054 0.86 2.52 0.02 106 FROM_EXCESS_BASE64 1991 2.29 2.44 2.22 107 TM2_M_URI_OPT_OUT 1880 2.26 2.31 2.23 108 XMBrknScrpt_02 1819 1.54 2.23 1.19 109 T_REMOTE_IMAGE 1810 2.73 2.22 2.99 110 SUBJ_ALL_CAPS 1790 1.34 2.20 0.91 111 RCVD_IN_MSPIKE_H4 1782 2.93 2.19 3.30 112 RCVD_IN_VALIDITY_CERTIFIED 1715 4.12 2.10 5.15 113 SpammyFromTLD_02 1666 0.84 2.04 0.23 114 XM_B_COPY_HTML 1658 1.66 2.03 1.47 115 SpammyFromTLD_01 1602 0.96 1.97 0.44 116 XMStockSpam_06 1596 1.79 1.96 1.71 117 XM_B_URI_Unicode 1572 1.51 1.93 1.30 118 T_XMHurry_00 1545 1.10 1.90 0.69 119 RCVD_IN_MSPIKE_H5 1512 3.77 1.86 4.74 120 XMDiploma_00 1502 1.31 1.84 1.04 121 RCVD_IN_XBL 1460 0.61 1.79 0.01 122 TR_XM_INV_DKIM 1451 0.67 1.78 0.10 123 MAILING_LIST_MULTI 1446 2.40 1.77 2.72 124 MIME_QP_LONG_LINE 1421 2.51 1.74 2.90 125 DIET_1 1402 0.88 1.72 0.45 126 SHOPIFY_IMG_NOT_RCVD_SFY 1399 0.80 1.72 0.34 127 TR_XM_RelayPhish 1394 0.62 1.71 0.06 128 KHOP_HELO_FCRDNS 1380 2.73 1.69 3.26 129 RCVD_IN_PSBL 1364 0.97 1.67 0.61 130 T_XMDrugObfuBody_00 1308 0.86 1.61 0.49 131 RELAYCOUNTRY_GB 1296 0.70 1.59 0.24 132 BAYES_40 1295 4.22 1.59 5.55 133 TR_XM_MSPIKECOMBO2 1285 0.54 1.58 0.01 134 XM_HighProb1 1273 0.53 1.56 0.00 135 TR_XM_PHPForged 1228 0.66 1.51 0.23 136 URI_NOVOWEL 1210 1.42 1.49 1.38 137 TR_XM_FormFill2 1207 0.66 1.48 0.24 138 MultiRelay_CC 1191 0.54 1.46 0.08 139 TR_XM_PHPDW 1181 0.64 1.45 0.22 140 XM_H_PHPOS 1166 0.62 1.43 0.22 141 RCVD_IN_PBL 1163 0.93 1.43 0.67 142 SCC_BODY_URI_ONLY 1152 2.56 1.41 3.15 143 RCVD_IN_SBL 1142 0.47 1.40 0.00 144 DEAR_SOMETHING 1134 0.49 1.39 0.03 145 TR_MetaPhish_Combo_01 1109 1.96 1.36 2.26 146 RCVD_IN_SBL_DROP 1096 0.45 1.35 0.00 147 XMSubMetaI_00 1078 0.66 1.32 0.33 148 DKIM_ADSP_NXDOMAIN 1076 0.73 1.32 0.43 149 ANY_BOUNCE_MESSAGE 1075 5.62 1.32 7.80 150 BOUNCE_MESSAGE 1075 5.61 1.32 7.80 151 RDNS_DYNAMIC 1073 0.61 1.32 0.25 152 BAYES_20 1069 2.69 1.31 3.39 153 URI_HEX 1068 1.08 1.31 0.96 154 MPART_ALT_DIFF_COUNT 1061 0.77 1.30 0.50 155 PDS_RDNS_DYNAMIC_FP 1058 0.46 1.30 0.03 156 XM_DIRTYINTL 1046 0.47 1.28 0.06 157 URI_GOOGLE_PROXY 1039 0.48 1.28 0.07 158 TVD_RCVD_IP 1035 1.51 1.27 1.64 159 XM_B_REG_HTML 982 0.60 1.21 0.30 160 TM2_M_OBFU_COMMENT 964 0.79 1.18 0.59 161 T_STY_INVIS_DIRECT 962 0.89 1.18 0.75 162 XMReplyNow 943 0.55 1.16 0.24 163 HK_RANDOM_REPLYTO 941 0.49 1.15 0.15 164 XMBdyGiftCard01 932 1.46 1.14 1.63 165 XM_DK_Undo_01 927 1.43 1.14 1.58 166 TR_XM_FormFill 912 0.38 1.12 0.01 167 XM_H_Long_From02 911 0.84 1.12 0.71 168 T_HTML_ATTACH 899 0.38 1.10 0.02 169 BOTNET_NORDNS 890 0.38 1.09 0.01 170 XM_UB99 881 0.36 1.08 0.00 171 URI_TRY_3LD 880 0.70 1.08 0.50 172 RELAYCOUNTRY_DE 873 0.58 1.07 0.33 173 DKIM_ADSP_DISCARD 866 0.36 1.06 0.00 174 TR_LOTS_OF_MONEY3 864 0.51 1.06 0.23 175 HTML_MIME_NO_HTML_TAG 862 1.60 1.06 1.87 176 RELAYCOUNTRY_CN 846 0.44 1.04 0.14 177 TR_XM_HtmlAttach 846 0.35 1.04 0.00 178 HELO_DYNAMIC_SPLIT_IP 846 0.35 1.04 0.00 179 T_OBFU_HTML_ATTACH 846 0.35 1.04 0.00 180 HTTPS_HTTP_MISMATCH 841 0.64 1.03 0.44 181 TR_Mismatch_TLD_01 838 0.52 1.03 0.26 182 XM_B_Phish66 833 0.52 1.02 0.27 183 XM_B_SEO 831 0.51 1.02 0.25 184 DKIM_ADSP_CUSTOM_MED 819 0.83 1.01 0.75 185 TR_Mismatch_TLD_02 805 0.38 0.99 0.08 186 TR_XM_InvalidRelay 804 0.34 0.99 0.01 187 XMSexyCombo_01 792 0.42 0.97 0.14 188 XM_SendGrid 784 1.11 0.96 1.18 189 J_POPCORN_WO_D 756 0.44 0.93 0.20 190 XM_B_DNDMA 752 0.49 0.92 0.27 191 XM_RXBody 752 0.65 0.92 0.51 192 NML_ADSP_CUSTOM_MED 742 0.63 0.91 0.49 193 HTML_IMAGE_ONLY_20 736 0.54 0.90 0.35 194 T_Symld_Words_02 736 0.63 0.90 0.49 195 XMBody_78 735 0.49 0.90 0.28 196 XMHTMLBadTable_001 722 0.46 0.89 0.24 197 TR_XM_SEO4 718 0.35 0.88 0.09 198 XMSubMetaSxObfu_03 718 0.65 0.88 0.54 199 THIS_AD 715 0.49 0.88 0.29 200 XM_UB60 710 0.37 0.87 0.11 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 160022 99.60 99.36 99.73 2 HTML_MESSAGE 133377 87.06 94.82 83.12 3 RELAYCOUNTRY_US 129113 80.07 79.30 80.46 4 DKIM_SIGNED 116829 78.07 88.44 72.81 5 XM_DK_Pass 115807 76.52 85.09 72.17 6 DKIM_VALID 114913 75.95 84.48 71.61 7 XM_B_Unicode 111811 74.85 85.03 69.68 8 BAYES_50 101066 54.57 37.99 62.99 9 DKIM_VALID_AU 98710 63.58 67.63 61.52 10 DCC_CHECK_NEGATIVE 81029 40.60 21.12 50.50 11 XMListUnsubscribeExists 79918 56.78 70.51 49.81 12 DCC_CHECK 79389 59.19 78.32 49.48 13 XM_B_SpammyWords 74155 54.16 69.82 46.21 14 XM_B_Unicode3 73070 48.11 53.18 45.54 15 HTML_FONT_LOW_CONTRAST 57504 36.22 36.97 35.84 16 LOC_TINY_FONT_1 51782 38.12 49.64 32.27 17 DKIM_VALID_EF 46824 30.07 31.82 29.18 18 T_TM2_M_HEADER_IN_MSG 44687 25.21 20.02 27.85 19 FVGT_m_MULTI_ODD 42882 28.75 32.75 26.72 20 XM_B_SpammyWords2 36048 29.08 42.11 22.47 21 XMSubLong 35569 22.72 23.80 22.17 22 MIME_HTML_ONLY 33625 24.22 30.64 20.96 23 T_KAM_HTML_FONT_INVALID 32358 22.51 27.12 20.17 24 USER_IN_DEF_DKIM_WL 30424 13.47 2.66 18.96 25 XM_Multi_Part_URI 26809 18.15 20.98 16.71 26 ALL_TRUSTED 25992 11.73 2.92 16.20 27 RCVD_IN_MSPIKE_WL 24245 13.25 9.59 15.11 28 TR_XM_DK_Unsub 22494 17.54 24.46 14.02 29 RCVD_IN_MSPIKE_H2 22273 15.38 18.34 13.88 30 UNPARSEABLE_RELAY 20461 14.34 17.46 12.75 31 XM_Evil_Numbers_Gen 19203 10.82 8.57 11.97 32 FSL_BULK_SIG 18439 11.03 10.11 11.49 33 XM_B_Unsub 17939 13.24 17.29 11.18 34 XM_DKIMWhitelistDomains 16345 6.78 0.06 10.19 35 BAYES_00 14342 6.07 0.42 8.94 36 TR_XM_BayesUnsub 14327 11.53 16.65 8.93 37 LotsOfNums_01 14286 8.28 7.06 8.90 38 T_TooManySym_01 13325 6.45 2.81 8.30 39 ANY_BOUNCE_MESSAGE 12511 5.62 1.32 7.80 40 BOUNCE_MESSAGE 12509 5.61 1.32 7.80 41 XM_H_GMP 11512 6.52 5.24 7.17 42 RCVD_IN_MSPIKE_H3 11335 6.55 5.55 7.06 43 TR_XM_DK_Bayes 10890 4.60 0.28 6.79 44 XM_B_PhoneNumber 10791 6.35 5.61 6.73 45 TR_XM_DK_Bayes1 10789 4.55 0.28 6.72 46 BAYES_60 10582 7.11 8.13 6.59 47 XM_B_SpammyWords3 10152 8.91 14.01 6.33 48 TooManyTo_001 9931 5.34 3.66 6.19 49 TR_MAX_INTL_RELAY 9811 9.23 15.36 6.11 50 RCVD_IN_VALIDITY_SAFE 9749 4.99 2.86 6.08 51 TR_XM_DK_Bayes2 9359 3.94 0.20 5.83 52 XM_DK_Undo_02 9119 18.35 43.31 5.68 53 BAYES_40 8907 4.22 1.59 5.55 54 XM_B_Phish_Phrases 8817 6.09 7.26 5.49 55 XMStrtUSub 8691 5.21 4.79 5.42 56 XM_H_Long_From01 8659 5.47 5.62 5.40 57 XM_UncommonTLD01 8491 5.49 5.89 5.29 58 HTML_IMAGE_RATIO_02 8322 5.90 7.32 5.19 59 RCVD_IN_VALIDITY_CERTIFIED 8257 4.12 2.10 5.15 60 LOTS_OF_MONEY 8198 6.86 10.30 5.11 61 T_TooManySym_02 7946 3.57 0.85 4.95 62 XMNumbers 7620 4.11 2.85 4.75 63 RCVD_IN_MSPIKE_H5 7609 3.77 1.86 4.74 64 MPART_ALT_DIFF 7569 5.29 6.41 4.72 65 HTML_IMAGE_ONLY_32 7555 3.15 0.09 4.71 66 BAYES_99 7429 14.64 34.37 4.63 67 TM2_M_VERY_LONG_WORD 7324 4.11 3.23 4.56 68 HTML_IMAGE_RATIO_04 6994 4.32 4.23 4.36 69 INVALID_MSGID 6538 2.86 0.47 4.07 70 TO_MALFORMED 6274 2.60 0.03 3.91 71 TR_XM_SpammyWords4 6012 5.67 9.46 3.75 72 XMSubMetaSx_00 5951 4.60 6.36 3.71 73 BAYES_80 5849 5.63 9.54 3.65 74 BOTNET_IPINHOSTNAME 5842 6.00 10.66 3.64 75 BAYES_999 5745 11.50 27.10 3.58 76 RELAYCOUNTRY_META 5522 8.82 19.41 3.44 77 BAYES_20 5444 2.69 1.31 3.39 78 MAY_BE_FORGED 5399 2.30 0.19 3.36 79 RCVD_IN_MSPIKE_H4 5301 2.93 2.19 3.30 80 KHOP_HELO_FCRDNS 5230 2.73 1.69 3.26 81 SCC_BODY_URI_ONLY 5051 2.56 1.41 3.15 82 T_REMOTE_IMAGE 4801 2.73 2.22 2.99 83 HTML_IMAGE_RATIO_06 4686 2.93 2.95 2.92 84 MIME_QP_LONG_LINE 4653 2.51 1.74 2.90 85 MIME_HTML_ONLY_MULTI 4582 2.93 3.08 2.86 86 MAILING_LIST_MULTI 4362 2.40 1.77 2.72 87 TR_XM_DKIM_Undo 4127 12.65 32.49 2.57 88 XM_B_SpammyTLD 4025 2.74 3.19 2.51 89 T_XMDrugObfuBody_14 3970 2.99 4.01 2.47 90 BAYES_95 3961 3.48 5.47 2.47 91 XM_Body_Dirty_Words 3954 3.87 6.64 2.46 92 MIME_HTML_MOSTLY 3736 2.93 4.13 2.33 93 HTML_IMAGE_RATIO_08 3635 2.54 3.07 2.27 94 TR_MetaPhish_Combo_01 3631 1.96 1.36 2.26 95 TR_DCC_Bayes_99 3592 9.95 25.14 2.24 96 TM2_M_URI_OPT_OUT 3578 2.26 2.31 2.23 97 XM_CamelCaseFrm001 3575 2.79 3.88 2.23 98 FROM_EXCESS_BASE64 3556 2.29 2.44 2.22 99 TooManyTo_002 3389 1.59 0.55 2.11 100 RCVD_IN_IADB_LISTED 3292 1.58 0.65 2.05 101 T_TooManySym_03 3234 1.47 0.41 2.02 102 T_TVD_MIME_NO_HEADERS 3218 1.35 0.07 2.01 103 XM_B_SpammyWords4 3178 2.19 2.61 1.98 104 XM_PDF 3147 1.44 0.41 1.96 105 HTML_MIME_NO_HTML_TAG 3004 1.60 1.06 1.87 106 TR_XM_SpammyRelay 2914 6.03 14.32 1.82 107 XMSexyCombo_05 2892 2.78 4.69 1.80 108 RCVD_IN_IADB_SPF 2890 1.38 0.55 1.80 109 UNTRUSTED_Relay 2877 3.44 6.68 1.79 110 BAYES_05 2876 1.40 0.63 1.79 111 XMStockSpam_06 2741 1.79 1.96 1.71 112 TR_XM_PhishingBody 2722 2.87 5.19 1.70 113 TR_XM_UnparsRelay 2689 4.47 9.97 1.68 114 IN_HORDE_ADDRESS_BOOK 2652 1.13 0.11 1.65 115 TVD_SPACE_RATIO 2650 1.19 0.29 1.65 116 XMGappySubj_01 2631 1.20 0.33 1.64 117 TVD_RCVD_IP 2627 1.51 1.27 1.64 118 XMBdyGiftCard01 2611 1.46 1.14 1.63 119 RCVD_IN_IADB_SENDERID 2598 1.25 0.52 1.62 120 URI_OPTOUT_3LD 2571 1.31 0.73 1.60 121 MIME_CHARSET_FARAWAY 2552 1.25 0.59 1.59 122 XM_DK_Undo_01 2540 1.43 1.14 1.58 123 RCVD_IN_IADB_DK 2532 1.22 0.53 1.58 124 XM_B_COPY_HTML 2366 1.66 2.03 1.47 125 TR_XM_SpammyWords5 2358 2.45 4.37 1.47 126 CHARSET_FARAWAY_HEADER 2333 1.11 0.42 1.45 127 RCVD_IN_IADB_VOUCHED 2288 1.06 0.35 1.43 128 XM_B_Investor 2256 2.47 4.56 1.41 129 URI_NOVOWEL 2217 1.42 1.49 1.38 130 XM_B_URI_Unicode 2087 1.51 1.93 1.30 131 TR_Symld_Words 2018 1.06 0.68 1.26 132 XM_GoogleGroups 1985 1.08 0.76 1.24 133 XM_SPF_SoftFail 1984 2.07 3.72 1.24 134 XMGappySubj_02 1984 0.88 0.19 1.24 135 T_XMDrugObfuBody_08 1969 1.75 2.77 1.23 136 XM_B_Unsub2 1927 1.81 3.02 1.20 137 DKIM_INVALID 1916 2.12 3.96 1.19 138 XMBrknScrpt_02 1906 1.54 2.23 1.19 139 HTML_TAG_BALANCE_BODY 1898 1.07 0.85 1.18 140 XM_SendGrid 1893 1.11 0.96 1.18 141 XMBSHREFv2 1875 0.90 0.37 1.17 142 BOTNET 1729 3.19 7.36 1.08 143 RCVD_IN_IADB_OPTIN 1690 0.78 0.24 1.05 144 RELAYCOUNTRY_CA 1681 3.46 8.21 1.05 145 XMDiploma_00 1674 1.31 1.84 1.04 146 TooManyTo_003 1609 0.83 0.50 1.00 147 XM_OfRef6 1603 1.98 3.93 1.00 148 URI_HEX 1548 1.08 1.31 0.96 149 SUBJ_ALL_CAPS 1456 1.34 2.20 0.91 150 XM_UB50 1453 1.68 3.21 0.91 151 RCVD_IN_MSPIKE_BL 1432 3.06 7.33 0.89 152 TR_XM_MSPIKECOMBO 1432 3.06 7.33 0.89 153 TR_XM_DK_SendGrid 1396 0.81 0.70 0.87 154 TR_XM_SpammyWords2 1360 4.92 12.93 0.85 155 XMSlimDrugH 1346 0.82 0.77 0.84 156 XMNoVowels 1334 0.67 0.37 0.83 157 TR_XM_Base64_M1 1333 0.82 0.79 0.83 158 HTML_TAG_BALANCE_CENTER 1327 0.64 0.26 0.83 159 TooManyTo_004 1238 0.67 0.46 0.77 160 XM_H_PHPMailer 1222 0.72 0.65 0.76 161 MSGID_FROM_MTA_HEADER 1213 0.58 0.24 0.76 162 T_STY_INVIS_DIRECT 1198 0.89 1.18 0.75 163 DKIM_ADSP_CUSTOM_MED 1196 0.83 1.01 0.75 164 XMPhish30 1189 1.43 2.79 0.74 165 XM_B_FormFill 1182 0.50 0.02 0.74 166 XM_H_Long_From02 1132 0.84 1.12 0.71 167 T_XMHurry_00 1109 1.10 1.90 0.69 168 XMSolicitRefs_0 1105 0.62 0.49 0.69 169 RCVD_IN_PBL 1077 0.93 1.43 0.67 170 XM_ProductURIs 1037 0.70 0.80 0.65 171 T_TooManySym_04 1027 0.49 0.19 0.64 172 TooManyTo_005 1020 0.57 0.44 0.64 173 XMBody_17 1007 1.42 2.98 0.63 174 PLING_QUERY 990 0.69 0.83 0.62 175 RCVD_IN_PSBL 983 0.97 1.67 0.61 176 T_FILL_THIS_FORM_SHORT 966 2.28 5.60 0.60 177 TM2_M_OBFU_COMMENT 952 0.79 1.18 0.59 178 HTML_EXTRA_CLOSE 935 0.49 0.32 0.58 179 TR_XM_Spammywords 896 0.56 0.56 0.56 180 XM_S_SpammyWords 896 0.56 0.56 0.56 181 RCVD_IN_MSPIKE_L3 892 1.71 3.99 0.56 182 XMSubMetaSxObfu_03 859 0.65 0.88 0.54 183 HTML_TEXT_INVISIBLE_STYLE 847 0.49 0.40 0.53 184 RCVD_IN_BL_SPAMCOP_NET 841 4.79 13.19 0.52 185 RELAYCOUNTRY_AU 820 1.21 2.57 0.51 186 XM_RXBody 820 0.65 0.92 0.51 187 XMLngstWrd_00 814 0.55 0.64 0.51 188 XMBody_95 814 0.36 0.08 0.51 189 URI_TRY_3LD 806 0.70 1.08 0.50 190 MPART_ALT_DIFF_COUNT 801 0.77 1.30 0.50 191 XM_S_SubURI 801 0.39 0.19 0.50 192 NML_ADSP_CUSTOM_MED 791 0.63 0.91 0.49 193 T_Symld_Words_02 784 0.63 0.90 0.49 194 T_XMDrugObfuBody_00 784 0.86 1.61 0.49 195 AD_PREFS 769 0.37 0.16 0.48 196 XMSubMetaSxObfu_02 758 0.44 0.39 0.47 197 XMHTML_After_End 738 0.49 0.56 0.46 198 FORGED_GMAIL_RCVD 718 0.58 0.84 0.45 199 DIET_1 718 0.88 1.72 0.45 200 SpammyFromTLD_01 713 0.96 1.97 0.44 ----------------------------------------------------------------------