Email: 241164 Autolearn: 0 AvgScore: 5.38 AvgScanTime: 1.39 sec Spam: 80775 Autolearn: 0 AvgScore: 14.45 AvgScanTime: 1.48 sec Ham: 160389 Autolearn: 0 AvgScore: 0.82 AvgScanTime: 1.34 sec Time Spent Running SA: 92.81 hours Time Spent Processing Spam: 33.31 hours Time Spent Processing Ham: 59.50 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 80270 99.60 99.37 99.72 2 HTML_MESSAGE 76677 86.54 94.93 82.31 3 DKIM_SIGNED 70848 78.53 87.71 73.91 4 XM_DK_Pass 67999 76.82 84.18 73.12 5 DKIM_VALID 67562 76.31 83.64 72.62 6 XM_B_Unicode 67182 74.37 83.17 69.94 7 RELAYCOUNTRY_US 62984 80.04 77.97 81.07 8 DCC_CHECK 62337 58.76 77.17 49.48 9 XM_B_SpammyWords 55687 53.05 68.94 45.04 10 XMListUnsubscribeExists 55664 56.86 68.91 50.78 11 DKIM_VALID_AU 53674 63.67 66.45 62.27 12 XM_B_Unicode3 41375 47.07 51.22 44.97 13 LOC_TINY_FONT_1 38041 38.57 47.10 34.27 14 XM_DK_Undo_02 34447 17.84 42.65 5.34 15 XM_B_SpammyWords2 34211 28.12 42.35 20.95 16 BAYES_50 29156 53.02 36.10 61.54 17 BAYES_99 28090 14.55 34.78 4.37 18 HTML_FONT_LOW_CONTRAST 27930 33.71 34.58 33.27 19 FVGT_m_MULTI_ODD 25981 28.82 32.16 27.13 20 DKIM_VALID_EF 25909 30.21 32.08 29.27 21 MIME_HTML_ONLY 25592 25.47 31.68 22.34 22 TR_XM_DKIM_Undo 25083 12.15 31.05 2.63 23 T_KAM_HTML_FONT_INVALID 22920 22.80 28.38 19.99 24 BAYES_999 22050 11.42 27.30 3.43 25 TR_DCC_Bayes_99 19985 9.50 24.74 1.82 26 TR_XM_DK_Unsub 19746 18.12 24.45 14.94 27 T_TM2_M_HEADER_IN_MSG 18294 24.37 22.65 25.24 28 DCC_CHECK_NEGATIVE 18019 41.05 22.31 50.49 29 RELAYCOUNTRY_META 17015 9.32 21.06 3.41 30 XM_Multi_Part_URI 16445 18.39 20.36 17.41 31 XMSubLong 15508 21.93 19.20 23.30 32 RCVD_IN_MSPIKE_H2 14968 16.91 18.53 16.10 33 XM_B_Unsub 14346 14.02 17.76 12.14 34 TR_XM_BayesUnsub 13682 11.71 16.94 9.08 35 UNPARSEABLE_RELAY 13592 14.61 16.83 13.50 36 TR_MAX_INTL_RELAY 13327 9.88 16.50 6.54 37 XM_B_SpammyWords3 12613 9.57 15.61 6.53 38 TR_XM_SpammyRelay 12438 6.17 15.40 1.52 39 TR_XM_SpammyWords2 10604 4.83 13.13 0.65 40 LOTS_OF_MONEY 9332 7.26 11.55 5.10 41 BOTNET_IPINHOSTNAME 9257 6.21 11.46 3.57 42 TR_XM_SpammyWords4 8516 6.02 10.54 3.75 43 FSL_BULK_SIG 8395 11.39 10.39 11.89 44 BAYES_80 8277 6.01 10.25 3.88 45 RCVD_IN_BL_SPAMCOP_NET 8137 3.69 10.07 0.48 46 TR_XM_UnparsRelay 7523 4.35 9.31 1.86 47 RELAYCOUNTRY_CA 7404 3.76 9.17 1.04 48 BAYES_60 7091 7.59 8.78 7.00 49 BOTNET 6959 3.59 8.62 1.06 50 XM_Evil_Numbers_Gen 6867 10.22 8.50 11.08 51 UNTRUSTED_Relay 6585 3.79 8.15 1.59 52 RCVD_IN_MSPIKE_BL 6319 3.15 7.82 0.80 53 TR_XM_MSPIKECOMBO 6313 3.15 7.82 0.80 54 XMSubMetaSx_00 6310 5.42 7.81 4.22 55 RCVD_IN_MSPIKE_WL 6248 13.06 7.74 15.74 56 HTML_IMAGE_RATIO_02 6230 6.01 7.71 5.15 57 XM_B_Phish_Phrases 5548 6.21 6.87 5.87 58 XM_Body_Dirty_Words 5297 4.34 6.56 3.22 59 XM_B_Investor 5005 2.96 6.20 1.33 60 XM_UncommonTLD01 4890 5.54 6.05 5.28 61 MPART_ALT_DIFF 4861 5.44 6.02 5.14 62 LotsOfNums_01 4672 6.20 5.78 6.41 63 XM_H_Long_From01 4619 5.80 5.72 5.84 64 RCVD_IN_VALIDITY_RPBL 4523 1.94 5.60 0.10 65 BAYES_95 4468 3.62 5.53 2.66 66 TR_XM_SpammyWords3 4414 2.09 5.46 0.40 67 TR_XM_SpammyWords5 4396 2.66 5.44 1.27 68 T_XMDrugObfuBody_14 4286 3.37 5.31 2.39 69 XM_H_GMP 4246 6.25 5.26 6.76 70 XMSexyCombo_05 3942 3.39 4.88 2.64 71 XM_OfRef6 3930 2.36 4.87 1.10 72 TR_XM_NoHeaderRelay 3818 1.65 4.73 0.10 73 HTML_IMAGE_RATIO_04 3813 4.83 4.72 4.88 74 XM_B_PhoneNumber 3724 6.70 4.61 7.75 75 XM_CamelCaseFrm001 3498 3.02 4.33 2.36 76 XMStrtUSub 3451 5.31 4.27 5.83 77 TooManyTo_001 3414 6.10 4.23 7.05 78 XMBody_17 3375 1.67 4.18 0.41 79 TM2_M_VERY_LONG_WORD 3336 2.94 4.13 2.34 80 TR_XM_PhishingBody 3295 2.47 4.08 1.65 81 DKIM_INVALID 3286 2.22 4.07 1.29 82 RCVD_IN_MSPIKE_H3 3173 5.97 3.93 7.00 83 XM_B_SpammyTLD 2991 2.95 3.70 2.57 84 MIME_HTML_MOSTLY 2974 2.77 3.68 2.31 85 XMNumbers 2907 4.77 3.60 5.36 86 RCVD_IN_MSPIKE_L3 2800 1.46 3.47 0.44 87 MIME_HTML_ONLY_MULTI 2794 3.13 3.46 2.97 88 XM_B_Unsub2 2664 1.99 3.30 1.33 89 XM_URI_RBL 2623 1.38 3.25 0.43 90 XM_UB50 2613 1.63 3.23 0.82 91 RCVD_IN_XBL 2576 1.07 3.19 0.01 92 TR_XM_SPAMCOP 2532 1.12 3.13 0.11 93 XM_SPF_SoftFail 2524 1.91 3.12 1.30 94 RELAYCOUNTRY_AU 2406 1.20 2.98 0.30 95 SUBJ_ALL_CAPS 2374 1.71 2.94 1.09 96 RCVD_IN_MSPIKE_L4 2339 1.20 2.90 0.35 97 ALL_TRUSTED 2322 11.64 2.87 16.06 98 RCVD_IN_VALIDITY_SAFE 2238 5.20 2.77 6.42 99 RCVD_IN_SBL_CSS 2232 0.94 2.76 0.03 100 T_XMHurry_00 2213 1.29 2.74 0.55 101 T_FILL_THIS_FORM_SHORT 2173 1.51 2.69 0.92 102 XM_SendGrid 2080 3.38 2.58 3.78 103 T_TooManySym_01 2072 6.57 2.57 8.58 104 FROM_EXCESS_BASE64 2060 2.39 2.55 2.30 105 USER_IN_DEF_DKIM_WL 2043 13.47 2.53 18.98 106 TM2_M_URI_OPT_OUT 2040 2.34 2.53 2.25 107 T_XMDrugObfuBody_08 2037 1.66 2.52 1.23 108 MultiRelay_CC 2014 0.90 2.49 0.10 109 HTML_IMAGE_RATIO_06 2012 2.71 2.49 2.82 110 FORGED_MUA_OUTLOOK 2007 0.86 2.48 0.04 111 AXB_XMAILER_MIMEOLE_OL_024C2 2001 0.83 2.48 0.00 112 XMBrknScrpt_02 1995 1.63 2.47 1.21 113 FSL_NEW_HELO_USER 1990 0.83 2.46 0.00 114 FSL_CTYPE_WIN1251 1988 0.82 2.46 0.00 115 RCVD_IN_PBL 1904 1.19 2.36 0.60 116 HTML_IMAGE_RATIO_08 1806 2.21 2.24 2.19 117 FORGED_OUTLOOK_TAGS 1783 0.74 2.21 0.00 118 FORGED_OUTLOOK_HTML 1764 0.73 2.18 0.00 119 SpammyFromTLD_01 1734 1.02 2.15 0.45 120 RCVD_IN_SBL 1702 0.71 2.11 0.00 121 RCVD_IN_VALIDITY_CERTIFIED 1689 4.37 2.09 5.51 122 RCVD_IN_MSPIKE_H4 1675 3.26 2.07 3.85 123 XMStockSpam_06 1658 1.94 2.05 1.88 124 TR_XM_MSPIKECOMBO2 1654 0.70 2.05 0.02 125 NSL_RCVD_FROM_USER 1623 0.67 2.01 0.00 126 XMDiploma_00 1622 1.66 2.01 1.48 127 XM_OfRef7 1609 0.84 1.99 0.26 128 URI_NOVOWEL 1596 1.35 1.98 1.04 129 MAILING_LIST_MULTI 1582 2.94 1.96 3.43 130 RCVD_IN_PSBL 1551 1.27 1.92 0.94 131 TR_XM_INV_DKIM 1532 0.69 1.90 0.08 132 TR_Mismatch_TLD_01 1532 0.85 1.90 0.32 133 XM_B_URI_Unicode 1529 1.62 1.89 1.49 134 XM_B_SpammyWords4 1519 1.28 1.88 0.97 135 RELAYCOUNTRY_FR 1500 0.77 1.86 0.22 136 XM_B_COPY_HTML 1499 1.59 1.86 1.45 137 MIME_QP_LONG_LINE 1462 2.58 1.81 2.96 138 SpammyFromTLD_02 1457 0.76 1.80 0.24 139 XPRIO 1439 0.60 1.78 0.00 140 RCVD_IN_MSPIKE_H5 1400 3.83 1.73 4.89 141 TR_XM_InvalidRelay 1394 0.59 1.73 0.01 142 XM_UB99 1364 0.57 1.69 0.00 143 MISSING_HEADERS 1363 0.72 1.69 0.23 144 DIET_1 1339 0.95 1.66 0.59 145 TO_NO_BRKTS_FROM_MSSP 1319 0.56 1.63 0.01 146 FROM_MISSP_REPLYTO 1299 0.54 1.61 0.00 147 BAYES_40 1292 4.10 1.60 5.36 148 XMBdyGiftCard01 1282 1.23 1.59 1.05 149 REPLYTO_WITHOUT_TO_CC 1281 0.54 1.59 0.01 150 FROM_MISSP_EH_MATCH 1280 0.54 1.58 0.02 151 XMPhish30 1274 0.98 1.58 0.67 152 TR_XM_DK_SendGrid 1270 2.32 1.57 2.70 153 URI_HEX 1264 1.10 1.56 0.87 154 FROM_MISSP_MSFT 1256 0.52 1.55 0.00 155 FROM_MISSPACED 1252 0.52 1.55 0.00 156 TR_XM_PHPForged 1249 0.71 1.55 0.29 157 TO_NO_BRKTS_MSFT 1247 0.52 1.54 0.00 158 TR_XM_FormFill2 1230 0.70 1.52 0.29 159 TR_XM_PHPDW 1222 0.70 1.51 0.29 160 DEAR_SOMETHING 1221 0.55 1.51 0.07 161 BOTNET_NORDNS 1196 0.50 1.48 0.01 162 TR_LOTS_OF_MONEY3 1195 0.75 1.48 0.38 163 XM_H_PHPOS 1184 0.67 1.47 0.27 164 TR_MetaPhish_Combo_01 1179 1.95 1.46 2.19 165 RCVD_IN_MSPIKE_L5 1174 0.49 1.45 0.01 166 XM_H_Undi_Recip 1164 0.56 1.44 0.12 167 DKIM_ADSP_NXDOMAIN 1134 0.77 1.40 0.45 168 XM_HighProb1 1128 0.47 1.40 0.00 169 FILL_THIS_FORM 1122 0.74 1.39 0.41 170 KHOP_HELO_FCRDNS 1108 1.93 1.37 2.22 171 T_REMOTE_IMAGE 1090 2.41 1.35 2.95 172 TR_LOTS_OF_MONEY1 1083 0.45 1.34 0.00 173 MONEY_FROM_MISSP 1081 0.45 1.34 0.00 174 XM_B_Phish66 1080 0.63 1.34 0.27 175 TR_Mismatch_TLD_02 1062 0.54 1.31 0.15 176 XM_DK_Undo_01 1057 1.42 1.31 1.48 177 THIS_AD 1045 0.75 1.29 0.48 178 SCC_BODY_URI_ONLY 1041 2.48 1.29 3.09 179 RDNS_DYNAMIC 1008 0.59 1.25 0.26 180 HTML_MIME_NO_HTML_TAG 1007 1.69 1.25 1.92 181 XM_UB999 1002 0.42 1.24 0.00 182 BAYES_20 1000 2.58 1.24 3.26 183 TVD_RCVD_IP 1000 1.46 1.24 1.58 184 MONEY_FORM 996 0.42 1.23 0.01 185 T_MONEY_PERCENT 993 0.57 1.23 0.24 186 TR_LOTS_OF_MONEY2 993 0.57 1.23 0.24 187 PDS_RDNS_DYNAMIC_FP 993 0.43 1.23 0.03 188 XM_B_REG_HTML 971 0.56 1.20 0.23 189 BOUNCE_MESSAGE 961 4.09 1.19 5.55 190 ANY_BOUNCE_MESSAGE 961 4.09 1.19 5.55 191 ADVANCE_FEE_5_NEW_FRM_MNY 960 0.40 1.19 0.00 192 T_XMDrugObfuBody_00 951 0.85 1.18 0.69 193 TR_XM_Undi_Recip11 951 0.41 1.18 0.02 194 T_FILL_THIS_FORM_LOAN 947 0.42 1.17 0.04 195 XM_UB80 936 0.40 1.16 0.01 196 XMBody_78 922 0.54 1.14 0.24 197 XM_H_Long_From02 903 0.88 1.12 0.75 198 URI_TRY_3LD 902 0.77 1.12 0.60 199 DKIM_ADSP_CUSTOM_MED 896 0.91 1.11 0.80 200 RCVD_IN_SBL_DROP 894 0.37 1.11 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 159941 99.60 99.37 99.72 2 HTML_MESSAGE 132023 86.54 94.93 82.31 3 RELAYCOUNTRY_US 130032 80.04 77.97 81.07 4 DKIM_SIGNED 118542 78.53 87.71 73.91 5 XM_DK_Pass 117275 76.82 84.18 73.12 6 DKIM_VALID 116472 76.31 83.64 72.62 7 XM_B_Unicode 112169 74.37 83.17 69.94 8 DKIM_VALID_AU 99874 63.67 66.45 62.27 9 BAYES_50 98700 53.02 36.10 61.54 10 XMListUnsubscribeExists 81452 56.86 68.91 50.78 11 DCC_CHECK_NEGATIVE 80973 41.05 22.31 50.49 12 DCC_CHECK 79367 58.76 77.17 49.48 13 XM_B_SpammyWords 72239 53.05 68.94 45.04 14 XM_B_Unicode3 72129 47.07 51.22 44.97 15 LOC_TINY_FONT_1 54973 38.57 47.10 34.27 16 HTML_FONT_LOW_CONTRAST 53360 33.71 34.58 33.27 17 DKIM_VALID_EF 46950 30.21 32.08 29.27 18 FVGT_m_MULTI_ODD 43516 28.82 32.16 27.13 19 T_TM2_M_HEADER_IN_MSG 40483 24.37 22.65 25.24 20 XMSubLong 37370 21.93 19.20 23.30 21 MIME_HTML_ONLY 35826 25.47 31.68 22.34 22 XM_B_SpammyWords2 33596 28.12 42.35 20.95 23 T_KAM_HTML_FONT_INVALID 32054 22.80 28.38 19.99 24 USER_IN_DEF_DKIM_WL 30444 13.47 2.53 18.98 25 XM_Multi_Part_URI 27916 18.39 20.36 17.41 26 RCVD_IN_MSPIKE_H2 25821 16.91 18.53 16.10 27 ALL_TRUSTED 25759 11.64 2.87 16.06 28 RCVD_IN_MSPIKE_WL 25251 13.06 7.74 15.74 29 TR_XM_DK_Unsub 23963 18.12 24.45 14.94 30 UNPARSEABLE_RELAY 21645 14.61 16.83 13.50 31 XM_B_Unsub 19469 14.02 17.76 12.14 32 FSL_BULK_SIG 19076 11.39 10.39 11.89 33 XM_Evil_Numbers_Gen 17770 10.22 8.50 11.08 34 BAYES_00 16219 6.91 0.56 10.11 35 TR_XM_BayesUnsub 14556 11.71 16.94 9.08 36 XM_DKIMWhitelistDomains 14218 5.90 0.00 8.86 37 T_TooManySym_01 13766 6.57 2.57 8.58 38 XM_B_PhoneNumber 12434 6.70 4.61 7.75 39 TR_XM_DK_Bayes 11571 4.90 0.32 7.21 40 TR_XM_DK_Bayes1 11474 4.86 0.31 7.15 41 TooManyTo_001 11306 6.10 4.23 7.05 42 RCVD_IN_MSPIKE_H3 11225 5.97 3.93 7.00 43 BAYES_60 11223 7.59 8.78 7.00 44 XM_H_GMP 10838 6.25 5.26 6.76 45 TR_MAX_INTL_RELAY 10488 9.88 16.50 6.54 46 XM_B_SpammyWords3 10471 9.57 15.61 6.53 47 RCVD_IN_VALIDITY_SAFE 10300 5.20 2.77 6.42 48 LotsOfNums_01 10288 6.20 5.78 6.41 49 TR_XM_DK_Bayes2 10122 4.26 0.19 6.31 50 XM_B_Phish_Phrases 9418 6.21 6.87 5.87 51 XM_H_Long_From01 9364 5.80 5.72 5.84 52 XMStrtUSub 9344 5.31 4.27 5.83 53 ANY_BOUNCE_MESSAGE 8901 4.09 1.19 5.55 54 BOUNCE_MESSAGE 8901 4.09 1.19 5.55 55 RCVD_IN_VALIDITY_CERTIFIED 8844 4.37 2.09 5.51 56 XMNumbers 8592 4.77 3.60 5.36 57 BAYES_40 8591 4.10 1.60 5.36 58 XM_DK_Undo_02 8572 17.84 42.65 5.34 59 T_TooManySym_02 8507 3.82 0.86 5.30 60 XM_UncommonTLD01 8472 5.54 6.05 5.28 61 HTML_IMAGE_RATIO_02 8267 6.01 7.71 5.15 62 MPART_ALT_DIFF 8250 5.44 6.02 5.14 63 LOTS_OF_MONEY 8178 7.26 11.55 5.10 64 RCVD_IN_MSPIKE_H5 7848 3.83 1.73 4.89 65 HTML_IMAGE_RATIO_04 7826 4.83 4.72 4.88 66 BAYES_99 7006 14.55 34.78 4.37 67 XMSubMetaSx_00 6769 5.42 7.81 4.22 68 INVALID_MSGID 6527 2.88 0.51 4.07 69 TO_MALFORMED 6270 2.60 0.01 3.91 70 BAYES_80 6227 6.01 10.25 3.88 71 RCVD_IN_MSPIKE_H4 6178 3.26 2.07 3.85 72 XM_SendGrid 6068 3.38 2.58 3.78 73 TR_XM_SpammyWords4 6012 6.02 10.54 3.75 74 BOTNET_IPINHOSTNAME 5721 6.21 11.46 3.57 75 MAILING_LIST_MULTI 5504 2.94 1.96 3.43 76 BAYES_999 5500 11.42 27.30 3.43 77 RELAYCOUNTRY_META 5466 9.32 21.06 3.41 78 BAYES_20 5234 2.58 1.24 3.26 79 XM_Body_Dirty_Words 5163 4.34 6.56 3.22 80 TooManyTo_002 4998 2.33 0.76 3.12 81 SCC_BODY_URI_ONLY 4950 2.48 1.29 3.09 82 MIME_HTML_ONLY_MULTI 4761 3.13 3.46 2.97 83 MIME_QP_LONG_LINE 4750 2.58 1.81 2.96 84 T_REMOTE_IMAGE 4731 2.41 1.35 2.95 85 HTML_IMAGE_RATIO_06 4521 2.71 2.49 2.82 86 TR_XM_DK_SendGrid 4337 2.32 1.57 2.70 87 BAYES_95 4260 3.62 5.53 2.66 88 XMSexyCombo_05 4233 3.39 4.88 2.64 89 TR_XM_DKIM_Undo 4221 12.15 31.05 2.63 90 XM_B_SpammyTLD 4122 2.95 3.70 2.57 91 T_XMDrugObfuBody_14 3833 3.37 5.31 2.39 92 XM_CamelCaseFrm001 3791 3.02 4.33 2.36 93 TM2_M_VERY_LONG_WORD 3753 2.94 4.13 2.34 94 MIME_HTML_MOSTLY 3708 2.77 3.68 2.31 95 FROM_EXCESS_BASE64 3693 2.39 2.55 2.30 96 TM2_M_URI_OPT_OUT 3601 2.34 2.53 2.25 97 KHOP_HELO_FCRDNS 3555 1.93 1.37 2.22 98 TR_MetaPhish_Combo_01 3520 1.95 1.46 2.19 99 HTML_IMAGE_RATIO_08 3518 2.21 2.24 2.19 100 T_TooManySym_03 3456 1.59 0.45 2.15 101 T_TVD_MIME_NO_HEADERS 3430 1.44 0.06 2.14 102 HTML_IMAGE_ONLY_32 3375 1.43 0.08 2.10 103 RCVD_IN_IADB_LISTED 3196 1.65 0.98 1.99 104 HTML_MIME_NO_HTML_TAG 3078 1.69 1.25 1.92 105 XM_PDF 3024 1.41 0.46 1.89 106 XMStockSpam_06 3020 1.94 2.05 1.88 107 TR_XM_UnparsRelay 2977 4.35 9.31 1.86 108 BAYES_05 2926 1.44 0.67 1.82 109 TR_DCC_Bayes_99 2915 9.50 24.74 1.82 110 XMGappySubj_01 2895 1.27 0.20 1.80 111 RCVD_IN_IADB_SPF 2821 1.46 0.88 1.76 112 XM_B_FormFill 2687 1.16 0.13 1.68 113 TR_XM_PhishingBody 2654 2.47 4.08 1.65 114 IN_HORDE_ADDRESS_BOOK 2608 1.11 0.08 1.63 115 XMNoVowels 2603 1.31 0.68 1.62 116 TVD_SPACE_RATIO 2555 1.12 0.18 1.59 117 UNTRUSTED_Relay 2549 3.79 8.15 1.59 118 RCVD_IN_IADB_SENDERID 2538 1.33 0.82 1.58 119 TVD_RCVD_IP 2531 1.46 1.24 1.58 120 RCVD_IN_IADB_DK 2497 1.31 0.83 1.56 121 TR_XM_SpammyRelay 2431 6.17 15.40 1.52 122 XM_B_URI_Unicode 2384 1.62 1.89 1.49 123 XMDiploma_00 2378 1.66 2.01 1.48 124 XM_DK_Undo_01 2366 1.42 1.31 1.48 125 XM_B_COPY_HTML 2329 1.59 1.86 1.45 126 URI_OPTOUT_3LD 2206 1.23 0.93 1.38 127 RCVD_IN_IADB_VOUCHED 2158 1.04 0.43 1.35 128 XM_B_Unsub2 2135 1.99 3.30 1.33 129 XM_B_Investor 2126 2.96 6.20 1.33 130 TR_Symld_Words 2124 1.20 0.96 1.32 131 XM_SPF_SoftFail 2089 1.91 3.12 1.30 132 DKIM_INVALID 2070 2.22 4.07 1.29 133 XM_GoogleGroups 2067 1.14 0.84 1.29 134 XMGappySubj_02 2052 0.87 0.07 1.28 135 TR_XM_SpammyWords5 2030 2.66 5.44 1.27 136 T_XMDrugObfuBody_08 1973 1.66 2.52 1.23 137 XMBrknScrpt_02 1939 1.63 2.47 1.21 138 XM_OfRef6 1760 2.36 4.87 1.10 139 SUBJ_ALL_CAPS 1756 1.71 2.94 1.09 140 BOTNET 1704 3.59 8.62 1.06 141 TooManyTo_003 1693 0.90 0.58 1.06 142 XMBdyGiftCard01 1689 1.23 1.59 1.05 143 RELAYCOUNTRY_CA 1666 3.76 9.17 1.04 144 URI_NOVOWEL 1661 1.35 1.98 1.04 145 RCVD_IN_IADB_OPTIN 1585 0.75 0.28 0.99 146 XM_B_SpammyWords4 1563 1.28 1.88 0.97 147 RCVD_IN_PSBL 1506 1.27 1.92 0.94 148 T_FILL_THIS_FORM_SHORT 1480 1.51 2.69 0.92 149 MAY_BE_FORGED 1418 0.60 0.04 0.88 150 XMBSHREFv2 1416 0.70 0.33 0.88 151 URI_HEX 1392 1.10 1.56 0.87 152 XM_H_PHPMailer 1334 0.85 0.88 0.83 153 XM_UB50 1319 1.63 3.23 0.82 154 TooManyTo_004 1304 0.72 0.52 0.81 155 DKIM_ADSP_CUSTOM_MED 1291 0.91 1.11 0.80 156 RCVD_IN_MSPIKE_BL 1279 3.15 7.82 0.80 157 TR_XM_MSPIKECOMBO 1279 3.15 7.82 0.80 158 MSGID_FROM_MTA_HEADER 1261 0.58 0.18 0.79 159 XMSlimDrugH 1215 0.78 0.83 0.76 160 TR_XM_Base64_M1 1211 0.75 0.75 0.76 161 HTML_TAG_BALANCE_BODY 1209 0.86 1.06 0.75 162 XM_H_Long_From02 1208 0.88 1.12 0.75 163 XMLngstWrd_00 1183 0.59 0.30 0.74 164 T_TooManySym_04 1166 0.55 0.20 0.73 165 XM_ProductURIs 1157 0.77 0.88 0.72 166 TooManyTo_005 1124 0.63 0.50 0.70 167 T_XMDrugObfuBody_00 1100 0.85 1.18 0.69 168 XMPhish30 1079 0.98 1.58 0.67 169 TR_XM_SpammyWords2 1049 4.83 13.13 0.65 170 XMBody_95 1026 0.48 0.15 0.64 171 T_STY_INVIS_DIRECT 1024 0.78 1.08 0.64 172 XM_B_DNDMA 1015 0.64 0.65 0.63 173 RELAYCOUNTRY_NL 1008 0.51 0.27 0.63 174 XMSubMetaI_00 1006 0.75 1.00 0.63 175 RCVD_IN_PBL 967 1.19 2.36 0.60 176 URI_TRY_3LD 955 0.77 1.12 0.60 177 TM2_M_OBFU_COMMENT 949 0.63 0.72 0.59 178 DIET_1 942 0.95 1.66 0.59 179 XMSolicitRefs_0 938 0.57 0.54 0.58 180 XMGenDplmaNmb 926 0.62 0.72 0.58 181 FORGED_GMAIL_RCVD 908 0.69 0.92 0.57 182 T_XMHurry_00 887 1.29 2.74 0.55 183 MPART_ALT_DIFF_COUNT 876 0.73 1.09 0.55 184 MIME_CHARSET_FARAWAY 870 0.51 0.43 0.54 185 AD_PREFS 791 0.43 0.30 0.49 186 HTML_EXTRA_CLOSE 788 0.33 0.01 0.49 187 NML_ADSP_CUSTOM_MED 770 0.65 1.00 0.48 188 THIS_AD 768 0.75 1.29 0.48 189 XM_S_SubURI 765 0.34 0.07 0.48 190 RCVD_IN_BL_SPAMCOP_NET 762 3.69 10.07 0.48 191 PLING_QUERY 746 0.59 0.83 0.47 192 HTML_FONT_FACE_BAD 738 0.58 0.82 0.46 193 XM_ShortIntro_01 732 0.45 0.44 0.46 194 DKIM_ADSP_NXDOMAIN 723 0.77 1.40 0.45 195 SpammyFromTLD_01 717 1.02 2.15 0.45 196 XMPhish14 711 0.52 0.66 0.44 197 RCVD_IN_MSPIKE_L3 710 1.46 3.47 0.44 198 XMHTML_After_End 698 0.47 0.55 0.44 199 XM_URI_RBL 694 1.38 3.25 0.43 200 NO_DNS_FOR_FROM 666 0.52 0.74 0.42 ----------------------------------------------------------------------