Email: 244644 Autolearn: 0 AvgScore: 5.57 AvgScanTime: 1.37 sec Spam: 87595 Autolearn: 0 AvgScore: 14.19 AvgScanTime: 1.48 sec Ham: 157049 Autolearn: 0 AvgScore: 0.76 AvgScanTime: 1.31 sec Time Spent Running SA: 92.90 hours Time Spent Processing Spam: 35.94 hours Time Spent Processing Ham: 56.96 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 87059 99.57 99.39 99.67 2 HTML_MESSAGE 82956 87.09 94.70 82.85 3 DKIM_SIGNED 80535 82.39 91.94 77.07 4 XM_B_Unicode 75173 76.65 85.82 71.54 5 XM_DK_Pass 74887 79.60 85.49 76.31 6 DKIM_VALID 74525 79.18 85.08 75.88 7 RELAYCOUNTRY_US 71686 81.54 81.84 81.37 8 DCC_CHECK 69537 61.37 79.38 51.33 9 XMListUnsubscribeExists 61475 59.31 70.18 53.25 10 XM_B_SpammyWords 59924 55.09 68.41 47.66 11 DKIM_VALID_AU 59574 66.19 68.01 65.17 12 XM_B_Unicode3 45172 47.91 51.57 45.87 13 LOC_TINY_FONT_1 42925 38.80 49.00 33.11 14 XM_DK_Undo_02 38063 19.38 43.45 5.95 15 XM_B_SpammyWords2 35804 28.73 40.87 21.96 16 BAYES_99 31327 15.86 35.76 4.75 17 HTML_FONT_LOW_CONTRAST 31240 32.91 35.66 31.37 18 FVGT_m_MULTI_ODD 30366 29.82 34.67 27.12 19 BAYES_50 29836 51.85 34.06 61.77 20 DKIM_VALID_EF 28037 30.92 32.01 30.31 21 TR_XM_DKIM_Undo 27305 12.79 31.17 2.53 22 T_KAM_HTML_FONT_INVALID 25918 24.27 29.59 21.31 23 BAYES_999 24306 12.34 27.75 3.74 24 MIME_HTML_ONLY 23566 22.55 26.90 20.13 25 TR_DCC_Bayes_99 23146 10.77 26.42 2.04 26 TR_XM_DK_Unsub 22459 19.08 25.64 15.42 27 XMSubLong 18690 22.41 21.34 23.02 28 XM_Multi_Part_URI 18304 18.17 20.90 16.65 29 RCVD_IN_MSPIKE_H2 18083 17.02 20.64 15.00 30 DCC_CHECK_NEGATIVE 17640 38.43 20.14 48.64 31 UNPARSEABLE_RELAY 16985 15.36 19.39 13.11 32 RELAYCOUNTRY_META 16813 8.86 19.19 3.09 33 XM_B_Unsub 16323 12.81 18.63 9.56 34 T_TM2_M_HEADER_IN_MSG 16311 22.11 18.62 24.06 35 TR_XM_BayesUnsub 15703 11.16 17.93 7.38 36 TR_MAX_INTL_RELAY 14710 10.47 16.79 6.94 37 XM_B_SpammyWords3 12355 9.95 14.10 7.63 38 TR_XM_SpammyRelay 12223 6.00 13.95 1.57 39 RCVD_IN_BL_SPAMCOP_NET 11300 4.98 12.90 0.56 40 TR_XM_SpammyWords2 10843 4.86 12.38 0.67 41 LOTS_OF_MONEY 10568 8.28 12.06 6.17 42 BOTNET_IPINHOSTNAME 10322 6.78 11.78 4.00 43 FSL_BULK_SIG 10278 12.27 11.73 12.57 44 TR_XM_UnparsRelay 9256 4.97 10.57 1.84 45 BOTNET 9042 4.47 10.32 1.21 46 BAYES_80 8907 6.28 10.17 4.11 47 TR_XM_SpammyWords4 8460 6.21 9.66 4.28 48 RCVD_IN_MSPIKE_WL 7762 14.18 8.86 17.14 49 BAYES_60 7712 7.80 8.80 7.24 50 RELAYCOUNTRY_CA 7095 3.44 8.10 0.84 51 XM_Evil_Numbers_Gen 6630 9.72 7.57 10.92 52 XM_UncommonTLD01 6533 6.08 7.46 5.31 53 XM_B_Phish_Phrases 6275 6.11 7.16 5.52 54 MPART_ALT_DIFF 6096 6.45 6.96 6.17 55 HTML_IMAGE_RATIO_02 6090 5.88 6.95 5.27 56 DKIM_INVALID 6010 3.22 6.86 1.18 57 XM_Body_Dirty_Words 5544 3.70 6.33 2.23 58 XMSubMetaSx_00 5525 4.82 6.31 3.99 59 BAYES_95 5504 4.07 6.28 2.83 60 UNTRUSTED_Relay 5243 3.33 5.99 1.85 61 RCVD_IN_MSPIKE_BL 4966 2.65 5.67 0.97 62 TR_XM_MSPIKECOMBO 4961 2.65 5.66 0.97 63 TR_XM_SPAMCOP 4550 1.95 5.19 0.15 64 XM_H_Long_From01 4487 5.63 5.12 5.91 65 HTML_IMAGE_RATIO_04 4482 4.46 5.12 4.10 66 XM_H_GMP 4466 6.03 5.10 6.56 67 XMStrtUSub 4371 5.82 4.99 6.28 68 LotsOfNums_01 4331 7.41 4.94 8.79 69 XM_B_Investor 4279 2.82 4.88 1.67 70 TR_XM_NoHeaderRelay 4027 1.75 4.60 0.16 71 XM_CamelCaseFrm001 3986 3.14 4.55 2.35 72 T_XMDrugObfuBody_14 3762 2.81 4.29 1.98 73 RCVD_IN_MSPIKE_H3 3643 6.35 4.16 7.58 74 XM_OfRef6 3589 1.94 4.10 0.74 75 TR_XM_PhishingBody 3587 2.35 4.09 1.38 76 XMSexyCombo_05 3578 2.43 4.08 1.51 77 XM_B_PhoneNumber 3493 5.48 3.99 6.31 78 TR_XM_SpammyWords3 3372 1.71 3.85 0.51 79 TooManyTo_001 3220 4.98 3.68 5.71 80 TM2_M_VERY_LONG_WORD 3208 2.89 3.66 2.46 81 XM_URI_RBL 3022 1.54 3.45 0.47 82 XM_B_SpammyTLD 2994 3.28 3.42 3.20 83 MIME_HTML_MOSTLY 2699 3.42 3.08 3.61 84 XMBody_17 2635 1.38 3.01 0.48 85 MIME_HTML_ONLY_MULTI 2580 2.97 2.95 2.98 86 DKIM_ADSP_NXDOMAIN 2533 1.30 2.89 0.41 87 XMNumbers 2526 3.81 2.88 4.32 88 XM_B_Unsub2 2525 1.93 2.88 1.39 89 T_FILL_THIS_FORM_SHORT 2522 1.41 2.88 0.59 90 USER_IN_DEF_DKIM_WL 2447 13.78 2.79 19.91 91 RCVD_IN_MSPIKE_H4 2416 3.47 2.76 3.86 92 RCVD_IN_MSPIKE_L3 2380 1.33 2.72 0.55 93 RCVD_IN_VALIDITY_RPBL 2372 1.02 2.71 0.07 94 TR_XM_INV_DKIM 2370 0.98 2.71 0.01 95 TR_XM_SpammyWords5 2364 2.01 2.70 1.63 96 XM_SPF_SoftFail 2360 1.69 2.69 1.14 97 FROM_EXCESS_BASE64 2337 1.99 2.67 1.61 98 T_XMDrugObfuBody_08 2245 1.83 2.56 1.42 99 T_XMHurry_00 2238 1.40 2.55 0.76 100 TM2_M_URI_OPT_OUT 2206 2.06 2.52 1.80 101 RELAYCOUNTRY_AU 2052 1.11 2.34 0.43 102 T_TooManySym_01 2032 5.87 2.32 7.86 103 HTML_IMAGE_RATIO_08 2023 2.32 2.31 2.33 104 MIME_QP_LONG_LINE 1984 3.12 2.26 3.59 105 SpammyFromTLD_02 1963 1.19 2.24 0.61 106 XM_UB50 1928 1.49 2.20 1.10 107 RCVD_IN_VALIDITY_SAFE 1901 4.81 2.17 6.29 108 URI_NOVOWEL 1881 1.50 2.15 1.14 109 HTML_IMAGE_RATIO_06 1831 2.99 2.09 3.50 110 XM_B_URI_Unicode 1824 1.67 2.08 1.44 111 RELAYCOUNTRY_IN 1813 0.76 2.07 0.03 112 TR_XM_MSPIKECOMBO2 1774 0.74 2.03 0.02 113 TR_Mismatch_TLD_02 1754 0.76 2.00 0.07 114 XM_H_DKIM_GOOG 1739 0.71 1.99 0.01 115 LongTLD 1739 0.91 1.99 0.32 116 HK_RANDOM_REPLYTO 1731 0.81 1.98 0.16 117 SpammyFromTLD_01 1724 0.96 1.97 0.39 118 XM_H_Long_From02 1714 1.16 1.96 0.71 119 HTML_FONT_TINY_NORDNS 1711 0.73 1.95 0.05 120 RCVD_IN_MSPIKE_H5 1703 4.36 1.94 5.71 121 XMBrknScrpt_02 1592 1.51 1.82 1.34 122 RDNS_DYNAMIC 1569 0.81 1.79 0.26 123 XMDiploma_00 1550 1.51 1.77 1.36 124 PDS_RDNS_DYNAMIC_FP 1550 0.66 1.77 0.04 125 MAILING_LIST_MULTI 1531 2.23 1.75 2.50 126 RCVD_IN_MSPIKE_L4 1516 0.86 1.73 0.37 127 XM_HighProb1 1498 0.62 1.71 0.01 128 BAYES_40 1496 3.80 1.71 4.97 129 XM_B_SpammyWords4 1483 1.21 1.69 0.95 130 T_XMDrugObfuBody_00 1476 1.17 1.69 0.89 131 RCVD_IN_XBL 1473 0.61 1.68 0.01 132 XM_B_DNDMA 1472 0.82 1.68 0.34 133 TR_LOTS_OF_MONEY3 1461 0.81 1.67 0.33 134 XMStockSpam_06 1459 1.64 1.67 1.63 135 MPART_ALT_DIFF_COUNT 1420 0.97 1.62 0.61 136 SUBJ_ALL_CAPS 1412 1.51 1.61 1.45 137 RCVD_IN_VALIDITY_CERTIFIED 1406 3.80 1.61 5.03 138 KHOP_HELO_FCRDNS 1404 1.80 1.60 1.91 139 TR_XM_PHPForged 1380 0.76 1.58 0.30 140 TR_XM_FormFill2 1367 0.76 1.56 0.32 141 TR_XM_PHPDW 1358 0.76 1.55 0.31 142 RCVD_IN_SBL_CSS 1346 0.58 1.54 0.05 143 BAYES_20 1343 2.72 1.53 3.39 144 ALL_TRUSTED 1338 10.47 1.53 15.46 145 XM_H_PHPOS 1326 0.73 1.51 0.29 146 SH_BODYURI_REVERSE_CSS 1319 0.54 1.51 0.01 147 URIBL_CSS 1316 0.54 1.50 0.01 148 URIBL_CSS_A 1316 0.54 1.50 0.01 149 TVD_RCVD_IP 1314 1.55 1.50 1.58 150 HTML_FONT_SIZE_LARGE 1307 0.56 1.49 0.05 151 XM_UB99 1302 0.53 1.49 0.00 152 XMPhish30 1296 0.90 1.48 0.58 153 TM2_M_OBFU_COMMENT 1295 0.84 1.48 0.48 154 XM_DK_Undo_01 1272 1.61 1.45 1.70 155 SHOPIFY_IMG_NOT_RCVD_SFY 1267 0.77 1.45 0.39 156 NO_DNS_FOR_FROM 1262 0.75 1.44 0.37 157 TR_XM_MaxWHORU 1251 0.69 1.43 0.29 158 XM_B_COPY_HTML 1229 1.15 1.40 1.02 159 T_REMOTE_IMAGE 1223 2.84 1.40 3.64 160 DIET_1 1216 0.94 1.39 0.70 161 XM_ProductURIs 1207 0.88 1.38 0.60 162 MultiRelay_CC 1202 0.54 1.37 0.07 163 URI_TRY_3LD 1201 0.97 1.37 0.75 164 SCC_BODY_URI_ONLY 1186 2.37 1.35 2.93 165 HTML_IMAGE_ONLY_20 1177 0.69 1.34 0.32 166 RCVD_IN_PSBL 1170 1.02 1.34 0.84 167 BOTNET_NORDNS 1164 0.48 1.33 0.01 168 TM2_M_A_HREF_HREF 1153 0.62 1.32 0.23 169 XMClaimOffer 1096 0.52 1.25 0.12 170 RELAYCOUNTRY_FR 1095 0.59 1.25 0.22 171 RCVD_IN_MSPIKE_L5 1067 0.46 1.22 0.04 172 TR_XM_Base64_L1 1035 0.49 1.18 0.10 173 XM_SendGrid 1026 1.31 1.17 1.38 174 XM_B_Phish66 1018 0.59 1.16 0.28 175 HELO_DYNAMIC_SPLIT_IP 1015 0.42 1.16 0.00 176 RCVD_IN_PBL 1000 0.79 1.14 0.59 177 T_STY_INVIS_DIRECT 998 0.77 1.14 0.56 178 TR_XM_InvalidRelay 980 0.41 1.12 0.01 179 HTML_TAG_BALANCE_BODY 955 0.91 1.09 0.80 180 HTML_MIME_NO_HTML_TAG 948 1.60 1.08 1.89 181 XMHTMLBadTable_001 944 0.63 1.08 0.38 182 XMReplyNow 926 0.51 1.06 0.20 183 J_POPCORN_WO_D 925 0.48 1.06 0.16 184 XM_UB999 921 0.38 1.05 0.00 185 XM_DIRTYINTL 906 0.39 1.03 0.04 186 URI_HEX 905 0.91 1.03 0.83 187 XMBody_78 881 0.55 1.01 0.29 188 TR_XM_MaxSPIKE 877 0.36 1.00 0.01 189 TR_XM_FormFill 866 0.37 0.99 0.03 190 XMGenDplmaNmb 864 0.70 0.99 0.54 191 TR_Symld_Words 830 1.06 0.95 1.12 192 ANY_BOUNCE_MESSAGE 819 4.08 0.93 5.84 193 BOUNCE_MESSAGE 819 4.08 0.93 5.83 194 XMSubMetaI_00 816 0.56 0.93 0.35 195 TR_Mismatch_TLD_01 816 0.58 0.93 0.38 196 XMSexyCombo_01 816 0.42 0.93 0.14 197 DKIM_ADSP_CUSTOM_MED 811 0.81 0.93 0.75 198 BAD_CREDIT 809 0.36 0.92 0.04 199 XMBdyGiftCard01 785 0.77 0.90 0.70 200 THIS_AD 780 0.52 0.89 0.32 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 156530 99.57 99.39 99.67 2 HTML_MESSAGE 130114 87.09 94.70 82.85 3 RELAYCOUNTRY_US 127786 81.54 81.84 81.37 4 DKIM_SIGNED 121031 82.39 91.94 77.07 5 XM_DK_Pass 119841 79.60 85.49 76.31 6 DKIM_VALID 119174 79.18 85.08 75.88 7 XM_B_Unicode 112358 76.65 85.82 71.54 8 DKIM_VALID_AU 102349 66.19 68.01 65.17 9 BAYES_50 97007 51.85 34.06 61.77 10 XMListUnsubscribeExists 83621 59.31 70.18 53.25 11 DCC_CHECK 80611 61.37 79.38 51.33 12 DCC_CHECK_NEGATIVE 76386 38.43 20.14 48.64 13 XM_B_SpammyWords 74857 55.09 68.41 47.66 14 XM_B_Unicode3 72033 47.91 51.57 45.87 15 LOC_TINY_FONT_1 52003 38.80 49.00 33.11 16 HTML_FONT_LOW_CONTRAST 49273 32.91 35.66 31.37 17 DKIM_VALID_EF 47599 30.92 32.01 30.31 18 FVGT_m_MULTI_ODD 42597 29.82 34.67 27.12 19 T_TM2_M_HEADER_IN_MSG 37783 22.11 18.62 24.06 20 XMSubLong 36146 22.41 21.34 23.02 21 XM_B_SpammyWords2 34492 28.73 40.87 21.96 22 T_KAM_HTML_FONT_INVALID 33465 24.27 29.59 21.31 23 MIME_HTML_ONLY 31612 22.55 26.90 20.13 24 USER_IN_DEF_DKIM_WL 31266 13.78 2.79 19.91 25 RCVD_IN_MSPIKE_WL 26923 14.18 8.86 17.14 26 XM_Multi_Part_URI 26146 18.17 20.90 16.65 27 ALL_TRUSTED 24280 10.47 1.53 15.46 28 TR_XM_DK_Unsub 24215 19.08 25.64 15.42 29 RCVD_IN_MSPIKE_H2 23563 17.02 20.64 15.00 30 UNPARSEABLE_RELAY 20593 15.36 19.39 13.11 31 FSL_BULK_SIG 19744 12.27 11.73 12.57 32 XM_Evil_Numbers_Gen 17149 9.72 7.57 10.92 33 XM_B_Unsub 15018 12.81 18.63 9.56 34 BAYES_00 14160 5.96 0.49 9.02 35 XM_DKIMWhitelistDomains 13941 5.70 0.00 8.88 36 LotsOfNums_01 13798 7.41 4.94 8.79 37 T_TooManySym_01 12338 5.87 2.32 7.86 38 XM_B_SpammyWords3 11987 9.95 14.10 7.63 39 RCVD_IN_MSPIKE_H3 11897 6.35 4.16 7.58 40 TR_XM_BayesUnsub 11593 11.16 17.93 7.38 41 TR_XM_DK_Bayes 11394 4.78 0.35 7.26 42 BAYES_60 11366 7.80 8.80 7.24 43 TR_XM_DK_Bayes1 11346 4.76 0.35 7.22 44 TR_MAX_INTL_RELAY 10899 10.47 16.79 6.94 45 XM_H_GMP 10295 6.03 5.10 6.56 46 XM_B_PhoneNumber 9915 5.48 3.99 6.31 47 RCVD_IN_VALIDITY_SAFE 9878 4.81 2.17 6.29 48 XMStrtUSub 9861 5.82 4.99 6.28 49 LOTS_OF_MONEY 9694 8.28 12.06 6.17 50 MPART_ALT_DIFF 9684 6.45 6.96 6.17 51 TR_XM_DK_Bayes2 9622 4.02 0.23 6.13 52 XM_DK_Undo_02 9338 19.38 43.45 5.95 53 XM_H_Long_From01 9279 5.63 5.12 5.91 54 ANY_BOUNCE_MESSAGE 9164 4.08 0.93 5.84 55 BOUNCE_MESSAGE 9159 4.08 0.93 5.83 56 TooManyTo_001 8963 4.98 3.68 5.71 57 RCVD_IN_MSPIKE_H5 8962 4.36 1.94 5.71 58 XM_B_Phish_Phrases 8667 6.11 7.16 5.52 59 XM_UncommonTLD01 8334 6.08 7.46 5.31 60 HTML_IMAGE_RATIO_02 8283 5.88 6.95 5.27 61 RCVD_IN_VALIDITY_CERTIFIED 7896 3.80 1.61 5.03 62 BAYES_40 7812 3.80 1.71 4.97 63 BAYES_99 7463 15.86 35.76 4.75 64 T_TooManySym_02 7186 3.25 0.86 4.58 65 XMNumbers 6787 3.81 2.88 4.32 66 TR_XM_SpammyWords4 6725 6.21 9.66 4.28 67 INVALID_MSGID 6712 2.88 0.39 4.27 68 BAYES_80 6450 6.28 10.17 4.11 69 HTML_IMAGE_RATIO_04 6439 4.46 5.12 4.10 70 TO_MALFORMED 6394 2.62 0.02 4.07 71 BOTNET_IPINHOSTNAME 6275 6.78 11.78 4.00 72 XMSubMetaSx_00 6261 4.82 6.31 3.99 73 RCVD_IN_MSPIKE_H4 6064 3.47 2.76 3.86 74 BAYES_999 5871 12.34 27.75 3.74 75 T_REMOTE_IMAGE 5720 2.84 1.40 3.64 76 MIME_HTML_MOSTLY 5674 3.42 3.08 3.61 77 MIME_QP_LONG_LINE 5637 3.12 2.26 3.59 78 HTML_IMAGE_RATIO_06 5490 2.99 2.09 3.50 79 BAYES_20 5317 2.72 1.53 3.39 80 XM_B_SpammyTLD 5033 3.28 3.42 3.20 81 RELAYCOUNTRY_META 4851 8.86 19.19 3.09 82 MIME_HTML_ONLY_MULTI 4681 2.97 2.95 2.98 83 SCC_BODY_URI_ONLY 4609 2.37 1.35 2.93 84 BAYES_95 4445 4.07 6.28 2.83 85 TR_XM_DKIM_Undo 3977 12.79 31.17 2.53 86 MAILING_LIST_MULTI 3931 2.23 1.75 2.50 87 TM2_M_VERY_LONG_WORD 3871 2.89 3.66 2.46 88 XM_PDF 3746 1.71 0.50 2.39 89 XM_CamelCaseFrm001 3690 3.14 4.55 2.35 90 HTML_IMAGE_RATIO_08 3664 2.32 2.31 2.33 91 XM_Body_Dirty_Words 3504 3.70 6.33 2.23 92 RCVD_IN_IADB_LISTED 3470 1.68 0.72 2.21 93 TR_DCC_Bayes_99 3208 10.77 26.42 2.04 94 RCVD_IN_IADB_SPF 3116 1.49 0.60 1.98 95 T_XMDrugObfuBody_14 3103 2.81 4.29 1.98 96 BAYES_05 3029 1.50 0.73 1.93 97 KHOP_HELO_FCRDNS 2996 1.80 1.60 1.91 98 HTML_MIME_NO_HTML_TAG 2963 1.60 1.08 1.89 99 T_TooManySym_03 2920 1.38 0.53 1.86 100 UNTRUSTED_Relay 2899 3.33 5.99 1.85 101 TR_XM_UnparsRelay 2897 4.97 10.57 1.84 102 XMGappySubj_01 2865 1.24 0.18 1.82 103 RCVD_IN_IADB_SENDERID 2825 1.34 0.53 1.80 104 TM2_M_URI_OPT_OUT 2823 2.06 2.52 1.80 105 RCVD_IN_IADB_DK 2753 1.32 0.55 1.75 106 TooManyTo_002 2723 1.41 0.84 1.73 107 IN_HORDE_ADDRESS_BOOK 2682 1.14 0.12 1.71 108 XM_DK_Undo_01 2671 1.61 1.45 1.70 109 XM_B_Investor 2619 2.82 4.88 1.67 110 T_TVD_MIME_NO_HEADERS 2589 1.08 0.06 1.65 111 XMStockSpam_06 2563 1.64 1.67 1.63 112 TR_XM_SpammyWords5 2559 2.01 2.70 1.63 113 FROM_EXCESS_BASE64 2536 1.99 2.67 1.61 114 TVD_RCVD_IP 2489 1.55 1.50 1.58 115 TR_XM_SpammyRelay 2462 6.00 13.95 1.57 116 TVD_SPACE_RATIO 2388 1.03 0.14 1.52 117 XMSexyCombo_05 2374 2.43 4.08 1.51 118 RCVD_IN_IADB_VOUCHED 2309 1.11 0.46 1.47 119 SUBJ_ALL_CAPS 2279 1.51 1.61 1.45 120 XM_B_URI_Unicode 2260 1.67 2.08 1.44 121 T_XMDrugObfuBody_08 2232 1.83 2.56 1.42 122 XM_B_Unsub2 2189 1.93 2.88 1.39 123 XM_SendGrid 2174 1.31 1.17 1.38 124 TR_XM_PhishingBody 2161 2.35 4.09 1.38 125 XMDiploma_00 2137 1.51 1.77 1.36 126 XMBrknScrpt_02 2099 1.51 1.82 1.34 127 XMGappySubj_02 1952 0.81 0.04 1.24 128 HTML_IMAGE_ONLY_32 1931 0.83 0.12 1.23 129 BOTNET 1898 4.47 10.32 1.21 130 DKIM_INVALID 1857 3.22 6.86 1.18 131 HTML_EXTRA_CLOSE 1811 0.75 0.03 1.15 132 XM_GoogleGroups 1798 1.02 0.80 1.14 133 XM_SPF_SoftFail 1786 1.69 2.69 1.14 134 URI_NOVOWEL 1786 1.50 2.15 1.14 135 TR_Symld_Words 1766 1.06 0.95 1.12 136 XM_UB50 1721 1.49 2.20 1.10 137 LOW_PRICE 1713 0.83 0.37 1.09 138 RCVD_IN_IADB_OPTIN 1670 0.79 0.31 1.06 139 XM_B_COPY_HTML 1596 1.15 1.40 1.02 140 TR_XM_DK_SendGrid 1559 0.92 0.79 0.99 141 TooManyTo_003 1558 0.91 0.77 0.99 142 MAY_BE_FORGED 1545 0.64 0.02 0.98 143 RCVD_IN_MSPIKE_BL 1517 2.65 5.67 0.97 144 TR_XM_MSPIKECOMBO 1516 2.65 5.66 0.97 145 XM_B_SpammyWords4 1489 1.21 1.69 0.95 146 XMBSHREFv2 1471 0.71 0.30 0.94 147 T_XMDrugObfuBody_00 1391 1.17 1.69 0.89 148 RELAYCOUNTRY_CA 1320 3.44 8.10 0.84 149 RCVD_IN_PSBL 1319 1.02 1.34 0.84 150 URI_HEX 1310 0.91 1.03 0.83 151 HTML_TAG_BALANCE_BODY 1262 0.91 1.09 0.80 152 TooManyTo_004 1237 0.75 0.68 0.79 153 T_XMHurry_00 1194 1.40 2.55 0.76 154 URI_TRY_3LD 1182 0.97 1.37 0.75 155 TR_MetaPhish_Combo_01 1176 0.68 0.55 0.75 156 DKIM_ADSP_CUSTOM_MED 1174 0.81 0.93 0.75 157 XM_OfRef6 1167 1.94 4.10 0.74 158 XM_H_Long_From02 1118 1.16 1.96 0.71 159 XMBdyGiftCard01 1106 0.77 0.90 0.70 160 XMSolicitRefs_0 1101 0.65 0.57 0.70 161 DIET_1 1093 0.94 1.39 0.70 162 TR_XM_SpammyWords2 1050 4.86 12.38 0.67 163 XM_H_PHPMailer 1045 0.66 0.64 0.67 164 TooManyTo_005 1039 0.66 0.66 0.66 165 XMLngstWrd_00 1031 0.52 0.26 0.66 166 TR_XM_Base64_M1 989 0.66 0.72 0.63 167 MPART_ALT_DIFF_COUNT 964 0.97 1.62 0.61 168 SpammyFromTLD_02 959 1.19 2.24 0.61 169 XM_ProductURIs 946 0.88 1.38 0.60 170 T_FILL_THIS_FORM_SHORT 928 1.41 2.88 0.59 171 FROM_GOV_DKIM_AU 928 0.39 0.04 0.59 172 XMNoVowels 926 0.56 0.51 0.59 173 RCVD_IN_PBL 921 0.79 1.14 0.59 174 XMPhish30 914 0.90 1.48 0.58 175 XMLngstWrd_01 914 0.45 0.21 0.58 176 XMBody_95 897 0.42 0.14 0.57 177 T_STY_INVIS_DIRECT 886 0.77 1.14 0.56 178 RCVD_IN_BL_SPAMCOP_NET 886 4.98 12.90 0.56 179 XMSubMetaSxObfu_03 884 0.62 0.72 0.56 180 RCVD_IN_MSPIKE_L3 870 1.33 2.72 0.55 181 XMGenDplmaNmb 848 0.70 0.99 0.54 182 XMHTML_After_End 826 0.58 0.69 0.53 183 XM_ShortIntro_01 807 0.48 0.42 0.51 184 TR_XM_SpammyWords3 801 1.71 3.85 0.51 185 FORGED_GMAIL_RCVD 794 0.56 0.67 0.51 186 XMSubMetaSxObfu_02 794 0.48 0.43 0.51 187 MIME_CHARSET_FARAWAY 775 0.42 0.30 0.49 188 XM_S_SubURI 756 0.33 0.06 0.48 189 TM2_M_OBFU_COMMENT 750 0.84 1.48 0.48 190 XMBody_17 748 1.38 3.01 0.48 191 XM_URI_RBL 738 1.54 3.45 0.47 192 NML_ADSP_CUSTOM_MED 736 0.59 0.80 0.47 193 T_TooManySym_04 721 0.36 0.19 0.46 194 XM_B_FormFill 708 0.30 0.03 0.45 195 XM_Walgreens_Forge 703 0.30 0.02 0.45 196 PLING_QUERY 693 0.49 0.58 0.44 197 XMSlimDrugH 690 0.55 0.74 0.44 198 FONT_INVIS_POSTEXTRAS 688 0.28 0.01 0.44 199 HTTPS_HTTP_MISMATCH 681 0.53 0.71 0.43 200 RELAYCOUNTRY_AU 669 1.11 2.34 0.43 ----------------------------------------------------------------------