Email: 250579 Autolearn: 0 AvgScore: 5.51 AvgScanTime: 1.37 sec Spam: 84499 Autolearn: 0 AvgScore: 14.45 AvgScanTime: 1.45 sec Ham: 166080 Autolearn: 0 AvgScore: 0.96 AvgScanTime: 1.33 sec Time Spent Running SA: 95.24 hours Time Spent Processing Spam: 33.96 hours Time Spent Processing Ham: 61.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 83816 99.50 99.19 99.66 2 HTML_MESSAGE 79937 87.50 94.60 83.89 3 DKIM_SIGNED 76671 78.54 90.74 72.33 4 DKIM_VALID 72031 75.87 85.24 71.10 5 XM_DK_Pass 71534 76.11 84.66 71.77 6 XM_B_Unicode 70605 75.19 83.56 70.94 7 RELAYCOUNTRY_US 66201 81.01 78.35 82.37 8 DCC_CHECK 65717 59.47 77.77 50.15 9 DKIM_VALID_AU 58950 64.16 69.76 61.31 10 XM_B_SpammyWords 58934 54.59 69.75 46.87 11 XMListUnsubscribeExists 58549 57.25 69.29 51.13 12 XM_B_Unicode3 43054 48.31 50.95 46.97 13 LOC_TINY_FONT_1 39751 37.51 47.04 32.65 14 XM_DK_Undo_02 36644 18.73 43.37 6.19 15 XM_B_SpammyWords2 33117 27.37 39.19 21.36 16 BAYES_99 30491 15.49 36.08 5.01 17 HTML_FONT_LOW_CONTRAST 30431 36.65 36.01 36.98 18 BAYES_50 29856 52.70 35.33 61.54 19 FVGT_m_MULTI_ODD 29502 29.47 34.91 26.70 20 DKIM_VALID_EF 27948 29.59 33.07 27.82 21 TR_XM_DKIM_Undo 26841 12.51 31.76 2.71 22 BAYES_999 24028 12.22 28.44 3.97 23 T_KAM_HTML_FONT_INVALID 22917 22.68 27.12 20.42 24 MIME_HTML_ONLY 22641 21.47 26.79 18.76 25 TR_DCC_Bayes_99 21559 10.24 25.51 2.47 26 TR_XM_DK_Unsub 20212 17.38 23.92 14.06 27 XM_Multi_Part_URI 18542 17.92 21.94 15.88 28 DCC_CHECK_NEGATIVE 18368 40.35 21.74 49.82 29 RELAYCOUNTRY_META 17974 9.20 21.27 3.05 30 RCVD_IN_MSPIKE_H2 16998 16.26 20.12 14.30 31 XMSubLong 16755 21.00 19.83 21.59 32 T_TM2_M_HEADER_IN_MSG 15038 24.49 17.80 27.90 33 UNPARSEABLE_RELAY 14971 14.51 17.72 12.88 34 TR_MAX_INTL_RELAY 14066 9.68 16.65 6.13 35 XM_B_Unsub 13918 11.49 16.47 8.96 36 TR_XM_SpammyRelay 13767 6.51 16.29 1.53 37 TR_XM_BayesUnsub 13411 10.08 15.87 7.13 38 XM_B_SpammyWords3 12851 9.66 15.21 6.84 39 TR_XM_SpammyWords2 10571 4.82 12.51 0.91 40 FSL_BULK_SIG 9891 11.60 11.71 11.54 41 RCVD_IN_BL_SPAMCOP_NET 9780 4.26 11.57 0.53 42 TR_XM_UnparsRelay 9286 4.72 10.99 1.52 43 BOTNET 9245 4.44 10.94 1.14 44 BOTNET_IPINHOSTNAME 9154 6.14 10.83 3.76 45 BAYES_80 8494 5.83 10.05 3.68 46 LOTS_OF_MONEY 8287 6.75 9.81 5.20 47 UNTRUSTED_Relay 7673 4.08 9.08 1.53 48 XM_Evil_Numbers_Gen 7622 11.97 9.02 13.47 49 TR_XM_SpammyWords4 7348 5.33 8.70 3.62 50 BAYES_60 7262 7.28 8.59 6.62 51 RELAYCOUNTRY_CA 7099 3.38 8.40 0.83 52 XM_UncommonTLD01 7040 6.15 8.33 5.04 53 RCVD_IN_MSPIKE_WL 6839 12.97 8.09 15.45 54 XM_Body_Dirty_Words 6582 4.31 7.79 2.54 55 LotsOfNums_01 6493 6.91 7.68 6.52 56 XM_B_Phish_Phrases 5541 5.60 6.56 5.11 57 HTML_IMAGE_RATIO_02 5147 5.36 6.09 4.98 58 BAYES_95 5078 3.65 6.01 2.45 59 XM_H_GMP 4843 6.21 5.73 6.46 60 XMSubMetaSx_00 4825 4.34 5.71 3.65 61 RCVD_IN_MSPIKE_BL 4792 2.45 5.67 0.81 62 TR_XM_MSPIKECOMBO 4792 2.45 5.67 0.81 63 TooManyTo_001 4720 5.65 5.59 5.69 64 MPART_ALT_DIFF 4690 5.34 5.55 5.23 65 DKIM_INVALID 4640 2.67 5.49 1.24 66 XM_H_Long_From01 4412 5.29 5.22 5.33 67 XM_B_Investor 4378 2.69 5.18 1.42 68 T_XMDrugObfuBody_14 4370 3.12 5.17 2.07 69 XM_B_SpammyTLD 4356 3.17 5.16 2.17 70 TR_XM_SPAMCOP 4279 1.79 5.06 0.12 71 TR_XM_PhishingBody 4272 2.88 5.06 1.77 72 MIME_HTML_MOSTLY 4054 3.50 4.80 2.84 73 T_FILL_THIS_FORM_SHORT 3925 1.98 4.65 0.63 74 TM2_M_VERY_LONG_WORD 3842 6.30 4.55 7.19 75 XMStrtUSub 3781 5.29 4.47 5.71 76 SpammyFromTLD_02 3660 1.58 4.33 0.18 77 TR_XM_NoHeaderRelay 3604 1.59 4.27 0.23 78 HTML_IMAGE_RATIO_04 3572 4.32 4.23 4.37 79 XM_OfRef6 3496 2.44 4.14 1.58 80 TR_XM_SpammyWords3 3461 1.65 4.10 0.41 81 XMSexyCombo_05 3192 2.23 3.78 1.45 82 XM_B_PhoneNumber 3174 5.15 3.76 5.86 83 TR_XM_SpammyWords5 3157 2.16 3.74 1.35 84 XM_CamelCaseFrm001 3045 2.73 3.60 2.29 85 XM_UB50 3024 1.78 3.58 0.86 86 RCVD_IN_MSPIKE_H3 3017 5.87 3.57 7.05 87 XMNumbers 2948 4.21 3.49 4.58 88 XM_URI_RBL 2912 1.52 3.45 0.54 89 USER_IN_DEF_DKIM_WL 2777 13.53 3.29 18.75 90 RCVD_IN_VALIDITY_SAFE 2696 5.29 3.19 6.37 91 XM_SPF_SoftFail 2671 1.75 3.16 1.03 92 RCVD_IN_MSPIKE_L3 2648 1.40 3.13 0.52 93 RCVD_IN_VALIDITY_RPBL 2562 1.07 3.03 0.07 94 XMStockSpam_06 2444 2.05 2.89 1.62 95 HTML_IMAGE_RATIO_06 2421 3.04 2.87 3.13 96 T_XMDrugObfuBody_08 2344 1.65 2.77 1.08 97 T_XMHurry_00 2334 1.36 2.76 0.65 98 MIME_HTML_ONLY_MULTI 2304 2.65 2.73 2.62 99 T_TooManySym_01 2295 6.19 2.72 7.95 100 RCVD_IN_MSPIKE_H4 2290 3.22 2.71 3.47 101 XMBody_17 2289 1.21 2.71 0.45 102 TR_XM_INV_DKIM 2277 0.92 2.69 0.02 103 FROM_EXCESS_BASE64 2245 2.11 2.66 1.84 104 XMPhish30 2198 1.29 2.60 0.62 105 RELAYCOUNTRY_AU 2188 1.18 2.59 0.46 106 MPART_ALT_DIFF_COUNT 2186 1.24 2.59 0.56 107 TR_XM_MSPIKECOMBO2 2161 0.87 2.56 0.02 108 XMDiploma_00 2153 2.02 2.55 1.74 109 RCVD_IN_PSBL 2150 1.43 2.54 0.86 110 RCVD_IN_VALIDITY_CERTIFIED 2089 4.41 2.47 5.39 111 DKIM_ADSP_NXDOMAIN 2045 1.07 2.42 0.39 112 RELAYCOUNTRY_IN 1956 0.79 2.31 0.02 113 TM2_M_URI_OPT_OUT 1933 2.07 2.29 1.96 114 HTML_IMAGE_RATIO_08 1882 2.12 2.23 2.07 115 SUBJ_ALL_CAPS 1811 1.33 2.14 0.91 116 HK_RANDOM_REPLYTO 1811 0.82 2.14 0.14 117 KHOP_HELO_FCRDNS 1809 3.74 2.14 4.55 118 RCVD_IN_MSPIKE_L4 1791 0.90 2.12 0.28 119 XM_B_SpammyWords4 1781 1.17 2.11 0.69 120 XM_B_Unsub2 1780 1.57 2.11 1.30 121 MIME_QP_LONG_LINE 1768 2.71 2.09 3.02 122 XMBrknScrpt_02 1655 1.48 1.96 1.23 123 SpammyFromTLD_01 1629 0.89 1.93 0.36 124 TR_XM_InvalidRelay 1594 0.64 1.89 0.01 125 XM_UB99 1545 0.62 1.83 0.00 126 RCVD_IN_MSPIKE_H5 1532 3.88 1.81 4.93 127 BASE64_LENGTH_79_INF 1510 0.80 1.79 0.29 128 ALL_TRUSTED 1510 10.45 1.79 14.86 129 RELAYCOUNTRY_FR 1508 0.72 1.78 0.18 130 XM_Body_Dirty_Words_01 1497 0.64 1.77 0.07 131 BOTNET_NORDNS 1478 0.59 1.75 0.00 132 XMBdyGiftCard01 1472 1.31 1.74 1.09 133 URIBL_CSS 1468 0.59 1.74 0.01 134 URIBL_CSS_A 1468 0.59 1.74 0.01 135 XMGenDplmaNmb 1458 1.27 1.73 1.03 136 HTML_IMAGE_ONLY_20 1442 0.77 1.71 0.30 137 RCVD_IN_XBL 1439 0.58 1.70 0.00 138 XM_H_Long_From02 1436 1.01 1.70 0.66 139 XM_B_URI_Unicode 1431 1.59 1.69 1.53 140 SCC_BODY_URI_ONLY 1430 2.63 1.69 3.11 141 MAILING_LIST_MULTI 1418 2.52 1.68 2.95 142 T_XMDrugObfuBody_00 1404 1.14 1.66 0.87 143 XM_UB60 1386 0.60 1.64 0.07 144 THIS_AD 1375 0.86 1.63 0.46 145 URI_NOVOWEL 1370 1.38 1.62 1.26 146 RDNS_DYNAMIC 1370 0.71 1.62 0.25 147 XM_HighProb1 1360 0.55 1.61 0.01 148 HTML_TAG_BALANCE_BODY 1354 1.04 1.60 0.75 149 PDS_RDNS_DYNAMIC_FP 1336 0.55 1.58 0.03 150 DIET_1 1322 0.81 1.56 0.43 151 URI_TRUNCATED 1320 0.55 1.56 0.04 152 TVD_RCVD_IP 1305 1.57 1.54 1.59 153 BOUNCE_MESSAGE 1301 7.91 1.54 11.15 154 ANY_BOUNCE_MESSAGE 1301 7.91 1.54 11.15 155 TM2_M_A_HREF_HREF 1294 0.72 1.53 0.30 156 XM_DIRTYINTL 1286 0.55 1.52 0.05 157 TR_LOTS_OF_MONEY3 1243 0.68 1.47 0.27 158 RCVD_IN_PBL 1229 0.90 1.45 0.62 159 TR_XM_MaxSPIKE 1225 0.49 1.45 0.01 160 RCVD_IN_SBL_CSS 1223 0.50 1.45 0.01 161 TR_XM_PHPForged 1211 0.62 1.43 0.21 162 TR_XM_FormFill2 1206 0.61 1.43 0.20 163 DKIM_ADSP_CUSTOM_MED 1199 1.00 1.42 0.78 164 XM_UB999 1194 0.48 1.41 0.00 165 BAYES_40 1191 4.42 1.41 5.95 166 TR_XM_PHPDW 1185 0.60 1.40 0.19 167 SHOPIFY_IMG_NOT_RCVD_SFY 1182 0.72 1.40 0.38 168 T_REMOTE_IMAGE 1175 2.29 1.39 2.75 169 XM_H_PHPOS 1166 0.59 1.38 0.18 170 XM_B_Phish66 1142 0.65 1.35 0.30 171 URI_HEX 1141 1.03 1.35 0.87 172 T_TooManySym_02 1135 3.62 1.34 4.77 173 TR_XM_FormFill 1131 0.46 1.34 0.01 174 URI_TRY_3LD 1123 0.87 1.33 0.64 175 TR_Mismatch_TLD_01 1118 0.65 1.32 0.31 176 XM_ProductURIs 1089 0.90 1.29 0.70 177 XM_SendGrid 1073 1.33 1.27 1.36 178 NML_ADSP_CUSTOM_MED 1070 0.74 1.27 0.47 179 XM_UB80 1066 0.43 1.26 0.01 180 TR_XM_Base64_L1 1037 0.45 1.23 0.06 181 SH_BODYURI_REVERSE_CSS 1005 0.40 1.19 0.01 182 XMClaimOffer 981 0.61 1.16 0.33 183 T_STY_INVIS_DIRECT 974 0.73 1.15 0.51 184 TR_Mismatch_TLD_02 968 0.43 1.15 0.06 185 XM_B_COPY_HTML 966 1.45 1.14 1.61 186 XM_OfRef7 949 0.46 1.12 0.13 187 HELO_DYNAMIC_SPLIT_IP 939 0.38 1.11 0.00 188 BAYES_20 932 2.99 1.10 3.95 189 XMSubMetaI_00 929 0.66 1.10 0.43 190 FORGED_GMAIL_RCVD 915 0.69 1.08 0.49 191 HTML_MIME_NO_HTML_TAG 912 1.56 1.08 1.81 192 XM_DK_Undo_01 912 1.50 1.08 1.72 193 MultiRelay_CC 905 0.41 1.07 0.08 194 TM2_M_OBFU_COMMENT 894 0.67 1.06 0.47 195 XM_B_DNDMA 861 1.26 1.02 1.38 196 XMBody_78 852 0.51 1.01 0.25 197 T_MONEY_PERCENT 847 0.48 1.00 0.22 198 TR_LOTS_OF_MONEY2 847 0.48 1.00 0.22 199 TR_XM_RelayPhish 835 0.36 0.99 0.05 200 MISSING_HEADERS 833 0.48 0.99 0.22 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 165511 99.50 99.19 99.66 2 HTML_MESSAGE 139330 87.50 94.60 83.89 3 RELAYCOUNTRY_US 136793 81.01 78.35 82.37 4 DKIM_SIGNED 120129 78.54 90.74 72.33 5 XM_DK_Pass 119194 76.11 84.66 71.77 6 DKIM_VALID 118075 75.87 85.24 71.10 7 XM_B_Unicode 117811 75.19 83.56 70.94 8 BAYES_50 102199 52.70 35.33 61.54 9 DKIM_VALID_AU 101828 64.16 69.76 61.31 10 XMListUnsubscribeExists 84919 57.25 69.29 51.13 11 DCC_CHECK 83292 59.47 77.77 50.15 12 DCC_CHECK_NEGATIVE 82735 40.35 21.74 49.82 13 XM_B_Unicode3 78000 48.31 50.95 46.97 14 XM_B_SpammyWords 77845 54.59 69.75 46.87 15 HTML_FONT_LOW_CONTRAST 61413 36.65 36.01 36.98 16 LOC_TINY_FONT_1 54232 37.51 47.04 32.65 17 T_TM2_M_HEADER_IN_MSG 46329 24.49 17.80 27.90 18 DKIM_VALID_EF 46197 29.59 33.07 27.82 19 FVGT_m_MULTI_ODD 44337 29.47 34.91 26.70 20 XMSubLong 35859 21.00 19.83 21.59 21 XM_B_SpammyWords2 35476 27.37 39.19 21.36 22 T_KAM_HTML_FONT_INVALID 33921 22.68 27.12 20.42 23 MIME_HTML_ONLY 31157 21.47 26.79 18.76 24 USER_IN_DEF_DKIM_WL 31137 13.53 3.29 18.75 25 XM_Multi_Part_URI 26374 17.92 21.94 15.88 26 RCVD_IN_MSPIKE_WL 25663 12.97 8.09 15.45 27 ALL_TRUSTED 24676 10.45 1.79 14.86 28 RCVD_IN_MSPIKE_H2 23747 16.26 20.12 14.30 29 TR_XM_DK_Unsub 23350 17.38 23.92 14.06 30 XM_Evil_Numbers_Gen 22365 11.97 9.02 13.47 31 UNPARSEABLE_RELAY 21384 14.51 17.72 12.88 32 FSL_BULK_SIG 19165 11.60 11.71 11.54 33 ANY_BOUNCE_MESSAGE 18523 7.91 1.54 11.15 34 BOUNCE_MESSAGE 18521 7.91 1.54 11.15 35 XM_B_Unsub 14873 11.49 16.47 8.96 36 BAYES_00 14672 5.96 0.33 8.83 37 XM_DKIMWhitelistDomains 14345 5.72 0.00 8.64 38 T_TooManySym_01 13204 6.19 2.72 7.95 39 TM2_M_VERY_LONG_WORD 11949 6.30 4.55 7.19 40 TR_XM_BayesUnsub 11846 10.08 15.87 7.13 41 RCVD_IN_MSPIKE_H3 11703 5.87 3.57 7.05 42 HTML_IMAGE_ONLY_32 11476 4.67 0.28 6.91 43 XM_B_SpammyWords3 11367 9.66 15.21 6.84 44 TR_XM_DK_Bayes 11352 4.62 0.26 6.84 45 TR_XM_DK_Bayes1 11272 4.58 0.25 6.79 46 BAYES_60 10989 7.28 8.59 6.62 47 LotsOfNums_01 10821 6.91 7.68 6.52 48 XM_H_GMP 10725 6.21 5.73 6.46 49 RCVD_IN_VALIDITY_SAFE 10571 5.29 3.19 6.37 50 XM_DK_Undo_02 10278 18.73 43.37 6.19 51 TR_MAX_INTL_RELAY 10185 9.68 16.65 6.13 52 TR_XM_DK_Bayes2 9898 4.02 0.22 5.96 53 BAYES_40 9882 4.42 1.41 5.95 54 XM_B_PhoneNumber 9735 5.15 3.76 5.86 55 MAY_BE_FORGED 9547 3.83 0.05 5.75 56 XMStrtUSub 9487 5.29 4.47 5.71 57 TooManyTo_001 9447 5.65 5.59 5.69 58 RCVD_IN_VALIDITY_CERTIFIED 8950 4.41 2.47 5.39 59 XM_H_Long_From01 8844 5.29 5.22 5.33 60 MPART_ALT_DIFF 8686 5.34 5.55 5.23 61 LOTS_OF_MONEY 8629 6.75 9.81 5.20 62 XM_B_Phish_Phrases 8493 5.60 6.56 5.11 63 XM_UncommonTLD01 8366 6.15 8.33 5.04 64 BAYES_99 8327 15.49 36.08 5.01 65 HTML_IMAGE_RATIO_02 8275 5.36 6.09 4.98 66 RCVD_IN_MSPIKE_H5 8193 3.88 1.81 4.93 67 T_TooManySym_02 7928 3.62 1.34 4.77 68 XMNumbers 7604 4.21 3.49 4.58 69 KHOP_HELO_FCRDNS 7558 3.74 2.14 4.55 70 HTML_IMAGE_RATIO_04 7260 4.32 4.23 4.37 71 INVALID_MSGID 6668 2.76 0.30 4.01 72 BAYES_999 6588 12.22 28.44 3.97 73 BAYES_20 6568 2.99 1.10 3.95 74 TO_MALFORMED 6415 2.56 0.01 3.86 75 BOTNET_IPINHOSTNAME 6243 6.14 10.83 3.76 76 BAYES_80 6116 5.83 10.05 3.68 77 XMSubMetaSx_00 6054 4.34 5.71 3.65 78 TR_XM_SpammyWords4 6013 5.33 8.70 3.62 79 RCVD_IN_MSPIKE_H4 5767 3.22 2.71 3.47 80 HTML_IMAGE_RATIO_06 5199 3.04 2.87 3.13 81 SCC_BODY_URI_ONLY 5159 2.63 1.69 3.11 82 RELAYCOUNTRY_META 5070 9.20 21.27 3.05 83 MIME_QP_LONG_LINE 5020 2.71 2.09 3.02 84 MAILING_LIST_MULTI 4905 2.52 1.68 2.95 85 MIME_HTML_MOSTLY 4718 3.50 4.80 2.84 86 T_REMOTE_IMAGE 4569 2.29 1.39 2.75 87 TR_XM_DKIM_Undo 4494 12.51 31.76 2.71 88 MIME_HTML_ONLY_MULTI 4348 2.65 2.73 2.62 89 XM_Body_Dirty_Words 4217 4.31 7.79 2.54 90 TR_DCC_Bayes_99 4103 10.24 25.51 2.47 91 BAYES_95 4063 3.65 6.01 2.45 92 T_TVD_MIME_NO_HEADERS 3940 1.59 0.04 2.37 93 XM_CamelCaseFrm001 3796 2.73 3.60 2.29 94 MIME_CHARSET_FARAWAY 3784 1.64 0.39 2.28 95 XM_B_SpammyTLD 3597 3.17 5.16 2.17 96 CHARSET_FARAWAY_HEADER 3580 1.50 0.22 2.16 97 T_XMDrugObfuBody_14 3437 3.12 5.17 2.07 98 HTML_IMAGE_RATIO_08 3436 2.12 2.23 2.07 99 XM_PDF 3313 1.44 0.35 1.99 100 BAYES_05 3263 1.51 0.62 1.96 101 TM2_M_URI_OPT_OUT 3261 2.07 2.29 1.96 102 T_TooManySym_03 3241 1.46 0.49 1.95 103 RCVD_IN_IADB_LISTED 3196 1.52 0.74 1.92 104 FROM_EXCESS_BASE64 3051 2.11 2.66 1.84 105 HTML_MIME_NO_HTML_TAG 3003 1.56 1.08 1.81 106 TR_XM_PhishingBody 2936 2.88 5.06 1.77 107 XMDiploma_00 2897 2.02 2.55 1.74 108 TooManyTo_002 2875 1.39 0.73 1.73 109 XM_DK_Undo_01 2858 1.50 1.08 1.72 110 RCVD_IN_IADB_SPF 2820 1.34 0.64 1.70 111 XMStockSpam_06 2697 2.05 2.89 1.62 112 XM_B_COPY_HTML 2673 1.45 1.14 1.61 113 IN_HORDE_ADDRESS_BOOK 2659 1.09 0.08 1.60 114 TVD_RCVD_IP 2640 1.57 1.54 1.59 115 XM_OfRef6 2622 2.44 4.14 1.58 116 RCVD_IN_IADB_SENDERID 2553 1.22 0.59 1.54 117 XM_B_URI_Unicode 2548 1.59 1.69 1.53 118 UNTRUSTED_Relay 2548 4.08 9.08 1.53 119 TR_XM_SpammyRelay 2542 6.51 16.29 1.53 120 TR_XM_UnparsRelay 2530 4.72 10.99 1.52 121 RCVD_IN_IADB_DK 2476 1.19 0.61 1.49 122 XMSexyCombo_05 2406 2.23 3.78 1.45 123 TVD_SPACE_RATIO 2397 1.05 0.26 1.44 124 XM_B_Investor 2365 2.69 5.18 1.42 125 XMGappySubj_01 2349 1.01 0.21 1.41 126 XM_B_DNDMA 2286 1.26 1.02 1.38 127 XM_SendGrid 2261 1.33 1.27 1.36 128 TR_XM_SpammyWords5 2250 2.16 3.74 1.35 129 RCVD_IN_IADB_VOUCHED 2214 1.01 0.38 1.33 130 XM_B_Unsub2 2156 1.57 2.11 1.30 131 URI_NOVOWEL 2086 1.38 1.62 1.26 132 DKIM_INVALID 2054 2.67 5.49 1.24 133 XMBrknScrpt_02 2042 1.48 1.96 1.23 134 XMGappySubj_02 1979 0.80 0.03 1.19 135 XM_GoogleGroups 1895 1.03 0.80 1.14 136 BOTNET 1890 4.44 10.94 1.14 137 XMBdyGiftCard01 1810 1.31 1.74 1.09 138 T_XMDrugObfuBody_08 1796 1.65 2.77 1.08 139 TR_Symld_Words 1742 0.98 0.84 1.05 140 XMGenDplmaNmb 1715 1.27 1.73 1.03 141 XM_SPF_SoftFail 1708 1.75 3.16 1.03 142 XMNoVowels 1604 0.90 0.78 0.97 143 TooManyTo_003 1604 0.87 0.69 0.97 144 TR_XM_DK_SendGrid 1597 0.96 0.97 0.96 145 XM_H_PHPMailer 1527 0.79 0.54 0.92 146 RCVD_IN_IADB_OPTIN 1524 0.70 0.26 0.92 147 XMBSHREFv2 1514 0.70 0.30 0.91 148 SUBJ_ALL_CAPS 1513 1.33 2.14 0.91 149 TR_XM_SpammyWords2 1508 4.82 12.51 0.91 150 URI_HEX 1444 1.03 1.35 0.87 151 T_XMDrugObfuBody_00 1443 1.14 1.66 0.87 152 RCVD_IN_PSBL 1435 1.43 2.54 0.86 153 XM_UB50 1425 1.78 3.58 0.86 154 RELAYCOUNTRY_CA 1371 3.38 8.40 0.83 155 TR_XM_MSPIKECOMBO 1342 2.45 5.67 0.81 156 RCVD_IN_MSPIKE_BL 1342 2.45 5.67 0.81 157 TR_XM_Base64_M1 1337 0.82 0.85 0.81 158 DKIM_ADSP_CUSTOM_MED 1301 1.00 1.42 0.78 159 TR_MetaPhish_Combo_01 1243 0.73 0.68 0.75 160 HTML_TAG_BALANCE_BODY 1242 1.04 1.60 0.75 161 XMSlimDrugH 1206 0.77 0.86 0.73 162 TooManyTo_004 1198 0.68 0.61 0.72 163 XM_ProductURIs 1155 0.90 1.29 0.70 164 XM_B_SpammyWords4 1153 1.17 2.11 0.69 165 MSGID_FROM_MTA_HEADER 1112 0.53 0.26 0.67 166 XM_H_Long_From02 1093 1.01 1.70 0.66 167 T_XMHurry_00 1085 1.36 2.76 0.65 168 XMBody_95 1082 0.48 0.13 0.65 169 URI_TRY_3LD 1066 0.87 1.33 0.64 170 T_FILL_THIS_FORM_SHORT 1044 1.98 4.65 0.63 171 XMPhish30 1025 1.29 2.60 0.62 172 RCVD_IN_PBL 1025 0.90 1.45 0.62 173 TooManyTo_005 1019 0.60 0.58 0.61 174 T_TooManySym_04 986 0.46 0.19 0.59 175 XMLngstWrd_00 971 0.51 0.36 0.58 176 HTML_FONT_FACE_BAD 971 0.61 0.65 0.58 177 MPART_ALT_DIFF_COUNT 923 1.24 2.59 0.56 178 XM_URI_RBL 902 1.52 3.45 0.54 179 RCVD_IN_BL_SPAMCOP_NET 887 4.26 11.57 0.53 180 RCVD_IN_MSPIKE_L3 866 1.40 3.13 0.52 181 T_STY_INVIS_DIRECT 846 0.73 1.15 0.51 182 XMLngstWrd_01 842 0.44 0.31 0.51 183 FORGED_GMAIL_RCVD 820 0.69 1.08 0.49 184 XM_Walgreens_Forge 817 0.33 0.01 0.49 185 HTTPS_HTTP_MISMATCH 815 0.64 0.93 0.49 186 XMHTML_After_End 791 0.55 0.71 0.48 187 TM2_M_OBFU_COMMENT 787 0.67 1.06 0.47 188 FONT_INVIS_POSTEXTRAS 785 0.32 0.01 0.47 189 AD_PREFS 784 0.37 0.17 0.47 190 PLING_QUERY 776 0.59 0.83 0.47 191 NML_ADSP_CUSTOM_MED 773 0.74 1.27 0.47 192 RELAYCOUNTRY_AU 770 1.18 2.59 0.46 193 HTML_EXTRA_CLOSE 768 0.31 0.00 0.46 194 THIS_AD 768 0.86 1.63 0.46 195 XMSubMetaSxObfu_02 763 0.42 0.33 0.46 196 XM_B_FormFill 757 0.31 0.01 0.46 197 XMBody_17 748 1.21 2.71 0.45 198 XM_S_SubURI 746 0.32 0.06 0.45 199 XM_ShortIntro_01 723 0.44 0.44 0.44 200 XMSubMetaI_00 719 0.66 1.10 0.43 ----------------------------------------------------------------------