Email: 251159 Autolearn: 0 AvgScore: 5.78 AvgScanTime: 1.40 sec Spam: 90907 Autolearn: 0 AvgScore: 15.21 AvgScanTime: 1.48 sec Ham: 160252 Autolearn: 0 AvgScore: 0.43 AvgScanTime: 1.35 sec Time Spent Running SA: 97.43 hours Time Spent Processing Spam: 37.31 hours Time Spent Processing Ham: 60.12 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 88913 99.01 97.81 99.69 2 HTML_MESSAGE 85696 87.29 94.27 83.33 3 DKIM_SIGNED 79840 80.90 87.83 76.97 4 XM_DK_Pass 77154 79.31 84.87 76.16 5 DKIM_VALID 76703 78.87 84.38 75.75 6 XM_B_Unicode 74254 75.01 81.68 71.23 7 RELAYCOUNTRY_US 71559 79.86 78.72 80.50 8 DCC_CHECK 67049 58.69 73.76 50.15 9 XM_B_SpammyWords 64367 56.46 70.81 48.32 10 DKIM_VALID_AU 60975 65.67 67.07 64.87 11 XMListUnsubscribeExists 59600 57.70 65.56 53.25 12 XM_B_Unicode3 45100 47.06 49.61 45.62 13 LOC_TINY_FONT_1 42635 38.95 46.90 34.43 14 XM_DK_Undo_02 40274 20.53 44.30 7.04 15 XM_B_SpammyWords2 38181 30.38 42.00 23.79 16 BAYES_50 34253 52.76 37.68 61.31 17 BAYES_99 31915 16.27 35.11 5.58 18 FVGT_m_MULTI_ODD 31140 30.40 34.25 28.22 19 HTML_FONT_LOW_CONTRAST 31008 32.94 34.11 32.28 20 TR_XM_DKIM_Undo 29815 13.94 32.80 3.25 21 DKIM_VALID_EF 27283 30.13 30.01 30.19 22 T_KAM_HTML_FONT_INVALID 25467 23.64 28.01 21.16 23 BAYES_999 24827 12.70 27.31 4.41 24 MIME_HTML_ONLY 24754 23.91 27.23 22.02 25 TR_DCC_Bayes_99 22494 10.55 24.74 2.50 26 DCC_CHECK_NEGATIVE 22084 40.58 24.29 49.83 27 TR_XM_DK_Unsub 21263 18.01 23.39 14.96 28 T_TM2_M_HEADER_IN_MSG 20633 23.40 22.70 23.79 29 XMSubLong 20280 23.79 22.31 24.63 30 RCVD_IN_MSPIKE_H2 19798 18.11 21.78 16.03 31 XM_Multi_Part_URI 18769 18.67 20.65 17.55 32 XM_B_Unsub 18751 14.40 20.63 10.87 33 TR_XM_BayesUnsub 18135 12.91 19.95 8.92 34 RELAYCOUNTRY_META 16905 8.77 18.60 3.20 35 XM_B_SpammyWords3 15708 11.34 17.28 7.98 36 UNPARSEABLE_RELAY 15181 14.68 16.70 13.53 37 LOTS_OF_MONEY 13351 10.09 14.69 7.49 38 TR_XM_SpammyRelay 13191 6.54 14.51 2.02 39 TR_MAX_INTL_RELAY 13022 9.79 14.32 7.21 40 TR_XM_SpammyWords4 12434 8.64 13.68 5.79 41 TR_XM_SpammyWords2 11798 5.25 12.98 0.86 42 RCVD_IN_BL_SPAMCOP_NET 10065 4.45 11.07 0.70 43 BOTNET_IPINHOSTNAME 9795 6.63 10.77 4.28 44 XM_Evil_Numbers_Gen 9507 11.06 10.46 11.40 45 XM_B_Phish_Phrases 9117 7.22 10.03 5.62 46 TR_XM_UnparsRelay 8593 4.63 9.45 1.89 47 FSL_BULK_SIG 8206 10.88 9.03 11.94 48 BAYES_80 7920 5.91 8.71 4.32 49 BOTNET 7520 3.98 8.27 1.55 50 RELAYCOUNTRY_CA 7409 3.57 8.15 0.97 51 RCVD_IN_MSPIKE_WL 7192 13.92 7.91 17.33 52 HTML_IMAGE_RATIO_02 6822 6.25 7.50 5.54 53 BAYES_60 6614 7.27 7.28 7.26 54 UNTRUSTED_Relay 6550 3.62 7.21 1.59 55 XM_H_GMP 5936 6.72 6.53 6.83 56 XM_Body_Dirty_Words 5911 4.32 6.50 3.08 57 XM_UncommonTLD01 5847 5.62 6.43 5.17 58 LotsOfNums_01 5839 6.94 6.42 7.24 59 TR_XM_SPAMCOP 5514 2.29 6.07 0.14 60 XM_OfRef6 5280 2.88 5.81 1.22 61 XMSubMetaSx_00 5157 4.92 5.67 4.49 62 TR_XM_MSPIKECOMBO 4925 2.52 5.42 0.87 63 RCVD_IN_MSPIKE_BL 4925 2.52 5.42 0.87 64 XM_H_Long_From01 4880 5.31 5.37 5.27 65 RCVD_IN_VALIDITY_RPBL 4809 1.95 5.29 0.05 66 XM_B_Unsub2 4809 2.75 5.29 1.30 67 BAYES_95 4794 3.76 5.27 2.90 68 MPART_ALT_DIFF 4567 5.14 5.02 5.20 69 XMSexyCombo_05 4476 3.24 4.92 2.29 70 XM_B_Investor 4420 2.66 4.86 1.41 71 XM_CamelCaseFrm001 4303 3.24 4.73 2.40 72 XM_B_PhoneNumber 4214 6.09 4.64 6.92 73 HTML_IMAGE_RATIO_04 3923 4.93 4.32 5.29 74 ANY_BOUNCE_MESSAGE 3887 4.49 4.28 4.61 75 BOUNCE_MESSAGE 3886 4.49 4.27 4.61 76 RCVD_IN_MSPIKE_H3 3871 6.45 4.26 7.69 77 TM2_M_VERY_LONG_WORD 3855 2.73 4.24 1.87 78 XM_UB50 3836 2.08 4.22 0.86 79 T_XMDrugObfuBody_14 3734 2.91 4.11 2.23 80 TR_XM_SpammyWords3 3607 1.68 3.97 0.39 81 TR_XM_NoHeaderRelay 3575 1.47 3.93 0.08 82 TR_XM_PhishingBody 3500 2.63 3.85 1.94 83 XMStrtUSub 3423 5.08 3.77 5.83 84 TooManyTo_001 3163 4.84 3.48 5.61 85 XMNumbers 3140 4.19 3.45 4.61 86 DKIM_INVALID 3137 2.03 3.45 1.22 87 URI_OPTOUT_3LD 3037 2.12 3.34 1.42 88 XM_B_SpammyTLD 2872 2.86 3.16 2.69 89 MIME_HTML_ONLY_MULTI 2839 3.02 3.12 2.96 90 TR_XM_SpammyWords5 2722 1.90 2.99 1.28 91 HTML_IMAGE_RATIO_06 2692 3.44 2.96 3.71 92 RCVD_IN_MSPIKE_L3 2644 1.39 2.91 0.52 93 XMDiploma_00 2608 1.86 2.87 1.29 94 RELAYCOUNTRY_AU 2526 1.43 2.78 0.66 95 XM_URI_RBL 2520 1.25 2.77 0.39 96 RCVD_IN_VALIDITY_SAFE 2517 5.02 2.77 6.30 97 XM_B_SpammyWords4 2432 2.03 2.68 1.66 98 XM_SPF_SoftFail 2404 1.82 2.64 1.36 99 MIME_HTML_MOSTLY 2391 2.60 2.63 2.59 100 XMBody_17 2378 1.29 2.62 0.54 101 USER_IN_DEF_DKIM_WL 2332 13.63 2.57 19.91 102 XM_SendGrid 2291 3.16 2.52 3.52 103 FROM_EXCESS_BASE64 2218 1.98 2.44 1.72 104 T_TooManySym_01 2149 6.41 2.36 8.71 105 TM2_M_URI_OPT_OUT 2110 2.07 2.32 1.92 106 T_FILL_THIS_FORM_SHORT 2091 1.25 2.30 0.66 107 XMLngstWrd_00 2082 1.14 2.29 0.48 108 HTML_IMAGE_RATIO_08 2069 2.11 2.28 2.02 109 ALL_TRUSTED 2064 11.24 2.27 16.33 110 T_XMHurry_00 2047 1.16 2.25 0.53 111 XMBrknScrpt_02 1973 1.72 2.17 1.46 112 RCVD_IN_VALIDITY_CERTIFIED 1932 4.01 2.13 5.07 113 MultiRelay_CC 1920 0.82 2.11 0.09 114 T_XMDrugObfuBody_08 1908 1.45 2.10 1.09 115 TR_XM_MSPIKECOMBO2 1872 0.76 2.06 0.02 116 KHOP_HELO_FCRDNS 1805 1.87 1.99 1.80 117 XM_B_URI_Unicode 1799 1.95 1.98 1.94 118 XM_DK_Undo_01 1789 1.78 1.97 1.68 119 HK_RANDOM_REPLYTO 1780 0.78 1.96 0.11 120 RCVD_IN_MSPIKE_H4 1779 3.24 1.96 3.97 121 SpammyFromTLD_01 1765 0.97 1.94 0.42 122 RCVD_IN_ZEN_LASTEXTERNAL 1753 0.70 1.93 0.00 123 SHORTCIRCUIT 1753 0.70 1.93 0.00 124 XMGenDplmaNmb 1741 1.12 1.92 0.67 125 RCVD_IN_XBL 1735 0.70 1.91 0.01 126 XMLngstWrd_01 1732 0.95 1.91 0.41 127 T_XMDrugObfuBody_00 1709 1.00 1.88 0.50 128 TR_Mismatch_TLD_02 1708 0.72 1.88 0.07 129 MISSING_HEADERS 1579 0.78 1.74 0.23 130 BAYES_40 1576 3.56 1.73 4.59 131 MAILING_LIST_MULTI 1573 2.14 1.73 2.38 132 XMStockSpam_06 1554 2.29 1.71 2.63 133 REPLYTO_WITHOUT_TO_CC 1549 0.63 1.70 0.02 134 RCVD_IN_MSPIKE_H5 1542 4.23 1.70 5.67 135 RCVD_IN_MSPIKE_L4 1529 0.83 1.68 0.34 136 SpammyFromTLD_02 1495 0.80 1.64 0.32 137 XMPhish30 1485 1.09 1.63 0.78 138 XM_B_COPY_HTML 1467 1.24 1.61 1.02 139 URI_NOVOWEL 1466 1.47 1.61 1.39 140 TR_XM_INV_DKIM 1463 0.66 1.61 0.12 141 SCC_BODY_URI_ONLY 1459 2.51 1.60 3.03 142 RDNS_DYNAMIC 1457 0.73 1.60 0.24 143 MIME_QP_LONG_LINE 1450 2.94 1.60 3.70 144 SUBJ_ALL_CAPS 1430 1.12 1.57 0.86 145 PDS_RDNS_DYNAMIC_FP 1423 0.59 1.57 0.03 146 XM_B_DNDMA 1418 1.14 1.56 0.90 147 BOTNET_NORDNS 1406 0.57 1.55 0.02 148 TM2_M_OBFU_COMMENT 1390 0.73 1.53 0.28 149 TR_XM_DK_SendGrid 1366 2.07 1.50 2.39 150 XMLngstWrd_02 1364 0.73 1.50 0.29 151 TVD_RCVD_IP 1362 1.59 1.50 1.63 152 DIET_1 1332 1.08 1.47 0.87 153 MIME_HEADER_CTYPE_ONLY 1306 0.77 1.44 0.39 154 MPART_ALT_DIFF_COUNT 1283 0.86 1.41 0.55 155 XM_H_Long_From02 1245 0.99 1.37 0.77 156 RCVD_IN_PSBL 1237 1.01 1.36 0.82 157 TR_XM_PHPDW 1234 0.76 1.36 0.42 158 TR_XM_PHPForged 1214 0.76 1.34 0.43 159 TR_XM_FormFill2 1209 0.75 1.33 0.42 160 T_REMOTE_IMAGE 1194 2.63 1.31 3.38 161 TR_XM_MaxSPIKE 1183 0.48 1.30 0.01 162 XM_H_PHPOS 1180 0.73 1.30 0.41 163 XMBdyGiftCard01 1179 1.35 1.30 1.37 164 XMReplyNow 1141 0.59 1.26 0.22 165 TR_MetaPhish_Combo_01 1121 1.70 1.23 1.96 166 XM_B_Phish66 1090 0.65 1.20 0.33 167 XM_B_SEO 1052 0.57 1.16 0.24 168 XM_HighProb1 1037 0.42 1.14 0.01 169 XMLngstWrd_03 1031 0.55 1.13 0.22 170 URI_TRY_3LD 1028 0.80 1.13 0.62 171 XM_OfRef7 1023 0.59 1.13 0.28 172 RELAYCOUNTRY_HR 1014 0.41 1.12 0.00 173 DKIM_ADSP_NXDOMAIN 1006 0.69 1.11 0.45 174 HELO_DYNAMIC_SPLIT_IP 1003 0.40 1.10 0.00 175 RELAYCOUNTRY_HU 995 0.40 1.09 0.00 176 RCVD_IN_PBL 990 0.75 1.09 0.56 177 J_POPCORN_WO_D 984 0.50 1.08 0.17 178 XM_DIRTYINTL 983 0.42 1.08 0.05 179 TR_LOTS_OF_MONEY2 975 0.48 1.07 0.14 180 T_MONEY_PERCENT 975 0.48 1.07 0.14 181 TR_LOTS_OF_MONEY3 973 0.56 1.07 0.27 182 TR_XM_SEO4 968 0.44 1.06 0.08 183 T_STY_INVIS_DIRECT 967 0.77 1.06 0.61 184 TR_XM_InvalidRelay 967 0.39 1.06 0.01 185 XM_B_REG_HTML 966 0.56 1.06 0.27 186 TR_XM_RelayPhish 949 0.42 1.04 0.07 187 THIS_AD 946 0.64 1.04 0.41 188 RELAYCOUNTRY_FR 917 0.53 1.01 0.25 189 BAYES_20 909 2.26 1.00 2.97 190 URI_HEX 896 0.98 0.99 0.98 191 XM_ProductURIs 895 0.76 0.98 0.63 192 XM_UB99 886 0.35 0.97 0.00 193 FONT_INVIS_LONG_LINE 875 0.37 0.96 0.04 194 HTML_FONT_TINY_NORDNS 858 0.40 0.94 0.10 195 HTML_MIME_NO_HTML_TAG 856 1.81 0.94 2.31 196 TR_Symld_Words 856 1.04 0.94 1.10 197 XMGppyBdWords 851 0.45 0.94 0.18 198 TR_XM_FormFill 850 0.34 0.94 0.01 199 DKIM_ADSP_CUSTOM_MED 846 0.85 0.93 0.81 200 TR_Mismatch_TLD_01 840 0.53 0.92 0.31 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 159748 99.01 97.81 99.69 2 HTML_MESSAGE 133541 87.29 94.27 83.33 3 RELAYCOUNTRY_US 129008 79.86 78.72 80.50 4 DKIM_SIGNED 123340 80.90 87.83 76.97 5 XM_DK_Pass 122044 79.31 84.87 76.16 6 DKIM_VALID 121389 78.87 84.38 75.75 7 XM_B_Unicode 114149 75.01 81.68 71.23 8 DKIM_VALID_AU 103958 65.67 67.07 64.87 9 BAYES_50 98257 52.76 37.68 61.31 10 XMListUnsubscribeExists 85329 57.70 65.56 53.25 11 DCC_CHECK 80363 58.69 73.76 50.15 12 DCC_CHECK_NEGATIVE 79846 40.58 24.29 49.83 13 XM_B_SpammyWords 77428 56.46 70.81 48.32 14 XM_B_Unicode3 73103 47.06 49.61 45.62 15 LOC_TINY_FONT_1 55182 38.95 46.90 34.43 16 HTML_FONT_LOW_CONTRAST 51728 32.94 34.11 32.28 17 DKIM_VALID_EF 48383 30.13 30.01 30.19 18 FVGT_m_MULTI_ODD 45218 30.40 34.25 28.22 19 XMSubLong 39477 23.79 22.31 24.63 20 T_TM2_M_HEADER_IN_MSG 38131 23.40 22.70 23.79 21 XM_B_SpammyWords2 38128 30.38 42.00 23.79 22 MIME_HTML_ONLY 35287 23.91 27.23 22.02 23 T_KAM_HTML_FONT_INVALID 33908 23.64 28.01 21.16 24 USER_IN_DEF_DKIM_WL 31905 13.63 2.57 19.91 25 XM_Multi_Part_URI 28125 18.67 20.65 17.55 26 RCVD_IN_MSPIKE_WL 27768 13.92 7.91 17.33 27 ALL_TRUSTED 26170 11.24 2.27 16.33 28 RCVD_IN_MSPIKE_H2 25688 18.11 21.78 16.03 29 TR_XM_DK_Unsub 23967 18.01 23.39 14.96 30 UNPARSEABLE_RELAY 21679 14.68 16.70 13.53 31 FSL_BULK_SIG 19131 10.88 9.03 11.94 32 XM_Evil_Numbers_Gen 18269 11.06 10.46 11.40 33 XM_DKIMWhitelistDomains 18099 7.21 0.02 11.29 34 XM_B_Unsub 17425 14.40 20.63 10.87 35 BAYES_00 14974 6.15 0.53 9.34 36 TR_XM_BayesUnsub 14297 12.91 19.95 8.92 37 T_TooManySym_01 13956 6.41 2.36 8.71 38 XM_B_SpammyWords3 12781 11.34 17.28 7.98 39 RCVD_IN_MSPIKE_H3 12322 6.45 4.26 7.69 40 TR_XM_DK_Bayes 12162 5.00 0.45 7.59 41 TR_XM_DK_Bayes1 12095 4.98 0.44 7.55 42 LOTS_OF_MONEY 11999 10.09 14.69 7.49 43 BAYES_60 11637 7.27 7.28 7.26 44 LotsOfNums_01 11601 6.94 6.42 7.24 45 TR_MAX_INTL_RELAY 11562 9.79 14.32 7.21 46 XM_DK_Undo_02 11283 20.53 44.30 7.04 47 XM_B_PhoneNumber 11093 6.09 4.64 6.92 48 XM_H_GMP 10947 6.72 6.53 6.83 49 TR_XM_DK_Bayes2 10548 4.32 0.34 6.58 50 RCVD_IN_VALIDITY_SAFE 10102 5.02 2.77 6.30 51 XMStrtUSub 9345 5.08 3.77 5.83 52 TR_XM_SpammyWords4 9271 8.64 13.68 5.79 53 RCVD_IN_MSPIKE_H5 9091 4.23 1.70 5.67 54 XM_B_Phish_Phrases 9014 7.22 10.03 5.62 55 TooManyTo_001 8985 4.84 3.48 5.61 56 BAYES_99 8943 16.27 35.11 5.58 57 HTML_IMAGE_RATIO_02 8872 6.25 7.50 5.54 58 HTML_IMAGE_RATIO_04 8471 4.93 4.32 5.29 59 XM_H_Long_From01 8448 5.31 5.37 5.27 60 MPART_ALT_DIFF 8332 5.14 5.02 5.20 61 XM_UncommonTLD01 8278 5.62 6.43 5.17 62 RCVD_IN_VALIDITY_CERTIFIED 8130 4.01 2.13 5.07 63 ANY_BOUNCE_MESSAGE 7390 4.49 4.28 4.61 64 XMNumbers 7385 4.19 3.45 4.61 65 BOUNCE_MESSAGE 7383 4.49 4.27 4.61 66 BAYES_40 7360 3.56 1.73 4.59 67 T_TooManySym_02 7295 3.24 0.91 4.55 68 XMSubMetaSx_00 7195 4.92 5.67 4.49 69 BAYES_999 7073 12.70 27.31 4.41 70 BAYES_80 6919 5.91 8.71 4.32 71 BOTNET_IPINHOSTNAME 6856 6.63 10.77 4.28 72 INVALID_MSGID 6631 2.75 0.31 4.14 73 RCVD_IN_MSPIKE_H4 6355 3.24 1.96 3.97 74 TO_MALFORMED 6352 2.57 0.12 3.96 75 HTML_IMAGE_RATIO_06 5950 3.44 2.96 3.71 76 MIME_QP_LONG_LINE 5922 2.94 1.60 3.70 77 XM_SendGrid 5647 3.16 2.52 3.52 78 T_REMOTE_IMAGE 5423 2.63 1.31 3.38 79 TR_XM_DKIM_Undo 5209 13.94 32.80 3.25 80 RELAYCOUNTRY_META 5129 8.77 18.60 3.20 81 XM_Body_Dirty_Words 4931 4.32 6.50 3.08 82 SCC_BODY_URI_ONLY 4856 2.51 1.60 3.03 83 BAYES_20 4762 2.26 1.00 2.97 84 MIME_HTML_ONLY_MULTI 4741 3.02 3.12 2.96 85 BAYES_95 4643 3.76 5.27 2.90 86 XM_B_SpammyTLD 4310 2.86 3.16 2.69 87 XMStockSpam_06 4207 2.29 1.71 2.63 88 MIME_HTML_MOSTLY 4149 2.60 2.63 2.59 89 XM_PDF 4037 1.79 0.50 2.52 90 TR_DCC_Bayes_99 4003 10.55 24.74 2.50 91 XM_CamelCaseFrm001 3842 3.24 4.73 2.40 92 TR_XM_DK_SendGrid 3823 2.07 1.50 2.39 93 MAILING_LIST_MULTI 3806 2.14 1.73 2.38 94 RCVD_IN_IADB_LISTED 3789 1.72 0.58 2.36 95 HTML_MIME_NO_HTML_TAG 3694 1.81 0.94 2.31 96 XMSexyCombo_05 3671 3.24 4.92 2.29 97 T_XMDrugObfuBody_14 3579 2.91 4.11 2.23 98 RCVD_IN_IADB_SPF 3373 1.52 0.50 2.10 99 TR_XM_SpammyRelay 3242 6.54 14.51 2.02 100 HTML_IMAGE_RATIO_08 3241 2.11 2.28 2.02 101 TR_MetaPhish_Combo_01 3141 1.70 1.23 1.96 102 TR_XM_PhishingBody 3111 2.63 3.85 1.94 103 XM_B_URI_Unicode 3102 1.95 1.98 1.94 104 TM2_M_URI_OPT_OUT 3080 2.07 2.32 1.92 105 RCVD_IN_IADB_SENDERID 3067 1.39 0.46 1.91 106 TR_XM_UnparsRelay 3024 4.63 9.45 1.89 107 TM2_M_VERY_LONG_WORD 2998 2.73 4.24 1.87 108 RCVD_IN_IADB_DK 2997 1.36 0.47 1.87 109 T_TooManySym_03 2924 1.34 0.48 1.82 110 KHOP_HELO_FCRDNS 2884 1.87 1.99 1.80 111 FROM_EXCESS_BASE64 2764 1.98 2.44 1.72 112 BAYES_05 2756 1.37 0.76 1.72 113 XM_DK_Undo_01 2693 1.78 1.97 1.68 114 XM_B_SpammyWords4 2662 2.03 2.68 1.66 115 TooManyTo_002 2626 1.25 0.55 1.64 116 TVD_RCVD_IP 2620 1.59 1.50 1.63 117 IN_HORDE_ADDRESS_BOOK 2612 1.07 0.07 1.63 118 TVD_SPACE_RATIO 2581 1.08 0.14 1.61 119 UNTRUSTED_Relay 2549 3.62 7.21 1.59 120 RCVD_IN_IADB_VOUCHED 2507 1.14 0.38 1.56 121 T_TVD_MIME_NO_HEADERS 2494 1.02 0.08 1.56 122 BOTNET 2480 3.98 8.27 1.55 123 XMGappySubj_01 2427 1.03 0.16 1.51 124 XMBrknScrpt_02 2343 1.72 2.17 1.46 125 URI_OPTOUT_3LD 2278 2.12 3.34 1.42 126 XM_B_Investor 2257 2.66 4.86 1.41 127 URI_NOVOWEL 2222 1.47 1.61 1.39 128 XMBdyGiftCard01 2201 1.35 1.30 1.37 129 XMSubMetaSxObfu_03 2177 1.05 0.49 1.36 130 XM_SPF_SoftFail 2174 1.82 2.64 1.36 131 XM_B_Unsub2 2089 2.75 5.29 1.30 132 XMDiploma_00 2075 1.86 2.87 1.29 133 TR_XM_SpammyWords5 2050 1.90 2.99 1.28 134 XM_OfRef6 1959 2.88 5.81 1.22 135 DKIM_INVALID 1951 2.03 3.45 1.22 136 XMGappySubj_02 1931 0.78 0.03 1.20 137 XM_GoogleGroups 1830 1.03 0.83 1.14 138 HTML_EXTRA_CLOSE 1791 0.72 0.02 1.12 139 TR_Symld_Words 1755 1.04 0.94 1.10 140 T_XMDrugObfuBody_08 1739 1.45 2.10 1.09 141 RCVD_IN_IADB_OPTIN 1707 0.77 0.26 1.07 142 XM_B_COPY_HTML 1637 1.24 1.61 1.02 143 XMSubMetaSx_01 1631 0.73 0.22 1.02 144 TooManyTo_003 1619 0.82 0.49 1.01 145 URI_HEX 1567 0.98 0.99 0.98 146 RELAYCOUNTRY_CA 1547 3.57 8.15 0.97 147 XMBSHREFv2 1521 0.70 0.26 0.95 148 XM_B_DNDMA 1449 1.14 1.56 0.90 149 XMSolicitRefs_0 1432 0.74 0.46 0.89 150 RCVD_IN_MSPIKE_BL 1395 2.52 5.42 0.87 151 TR_XM_MSPIKECOMBO 1395 2.52 5.42 0.87 152 DIET_1 1392 1.08 1.47 0.87 153 TR_XM_SpammyWords2 1381 5.25 12.98 0.86 154 XM_UB50 1380 2.08 4.22 0.86 155 SUBJ_ALL_CAPS 1372 1.12 1.57 0.86 156 PLING_QUERY 1341 0.84 0.83 0.84 157 RCVD_IN_PSBL 1310 1.01 1.36 0.82 158 FROM_GOV_DKIM_AU 1305 0.57 0.13 0.81 159 DKIM_ADSP_CUSTOM_MED 1292 0.85 0.93 0.81 160 XMPhish30 1253 1.09 1.63 0.78 161 XM_H_Long_From02 1240 0.99 1.37 0.77 162 TooManyTo_004 1217 0.65 0.44 0.76 163 XM_H_PHPMailer 1180 0.69 0.60 0.74 164 HTML_TAG_BALANCE_BODY 1133 0.75 0.84 0.71 165 RCVD_IN_BL_SPAMCOP_NET 1114 4.45 11.07 0.70 166 XMGenDplmaNmb 1069 1.12 1.92 0.67 167 RELAYCOUNTRY_AU 1058 1.43 2.78 0.66 168 T_FILL_THIS_FORM_SHORT 1053 1.25 2.30 0.66 169 TooManyTo_005 1016 0.55 0.41 0.63 170 XM_ProductURIs 1010 0.76 0.98 0.63 171 URI_TRY_3LD 988 0.80 1.13 0.62 172 T_STY_INVIS_DIRECT 979 0.77 1.06 0.61 173 XM_ShortIntro_01 975 0.54 0.41 0.61 174 FORGED_GMAIL_RCVD 935 0.64 0.73 0.58 175 TR_XM_Base64_M1 923 0.63 0.73 0.58 176 RCVD_IN_PBL 905 0.75 1.09 0.56 177 FONT_INVIS_MSGID 895 0.38 0.08 0.56 178 XMSubMetaI_00 878 0.68 0.91 0.55 179 MPART_ALT_DIFF_COUNT 877 0.86 1.41 0.55 180 XMBody_17 863 1.29 2.62 0.54 181 NML_ADSP_CUSTOM_MED 858 0.64 0.83 0.54 182 T_XMHurry_00 854 1.16 2.25 0.53 183 RCVD_IN_MSPIKE_L3 838 1.39 2.91 0.52 184 XMNoVowels 834 0.43 0.28 0.52 185 XM_WL_UtahGOV 816 0.32 0.00 0.51 186 T_XMDrugObfuBody_00 794 1.00 1.88 0.50 187 XMSlimDrugH 781 0.63 0.89 0.49 188 HTML_FONT_FACE_BAD 778 0.60 0.80 0.49 189 XMLngstWrd_00 777 1.14 2.29 0.48 190 T_TooManySym_04 775 0.38 0.20 0.48 191 XM_S_SubURI 755 0.32 0.05 0.47 192 XMBody_95 752 0.35 0.15 0.47 193 NUMERIC_HTTP_ADDR 746 0.34 0.12 0.47 194 DKIM_ADSP_NXDOMAIN 727 0.69 1.11 0.45 195 TR_XM_PHPForged 694 0.76 1.34 0.43 196 TR_XM_FormFill2 681 0.75 1.33 0.42 197 TR_XM_PHPDW 677 0.76 1.36 0.42 198 XMPhish08 674 0.39 0.33 0.42 199 XMHTML_After_End 672 0.42 0.41 0.42 200 XM_Walgreens_Forge 670 0.29 0.06 0.42 ----------------------------------------------------------------------