Email: 251137 Autolearn: 0 AvgScore: 5.64 AvgScanTime: 1.39 sec Spam: 88981 Autolearn: 0 AvgScore: 14.26 AvgScanTime: 1.53 sec Ham: 162156 Autolearn: 0 AvgScore: 0.91 AvgScanTime: 1.32 sec Time Spent Running SA: 97.11 hours Time Spent Processing Spam: 37.85 hours Time Spent Processing Ham: 59.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 84673 86.86 95.16 82.31 2 DKIM_SIGNED 81445 82.63 91.53 77.74 3 XM_DK_Pass 77150 80.49 86.70 77.08 4 DKIM_VALID 76837 80.06 86.35 76.61 5 XM_B_Unicode 75390 76.90 84.73 72.60 6 RELAYCOUNTRY_US 72262 81.50 81.21 81.66 7 DCC_CHECK 70147 60.77 78.83 50.85 8 XMListUnsubscribeExists 62064 58.97 69.75 53.06 9 DKIM_VALID_AU 61774 67.10 69.42 65.83 10 XM_B_SpammyWords 60504 54.34 68.00 46.84 11 LOC_TINY_FONT_1 44731 39.01 50.27 32.83 12 XM_B_Unicode3 44174 46.76 49.64 45.18 13 XM_DK_Undo_02 37457 18.76 42.10 5.95 14 XM_B_SpammyWords2 35654 28.31 40.07 21.86 15 BAYES_50 32318 51.84 36.32 60.35 16 FVGT_m_MULTI_ODD 31102 29.17 34.95 26.00 17 HTML_FONT_LOW_CONTRAST 31099 32.59 34.95 31.30 18 BAYES_99 30800 15.34 34.61 4.77 19 DKIM_VALID_EF 28015 31.83 31.48 32.02 20 TR_XM_DKIM_Undo 27210 12.38 30.58 2.39 21 T_KAM_HTML_FONT_INVALID 26064 24.61 29.29 22.04 22 MIME_HTML_ONLY 25555 23.63 28.72 20.83 23 BAYES_999 23923 11.95 26.89 3.75 24 TR_DCC_Bayes_99 22688 10.34 25.50 2.02 25 TR_XM_DK_Unsub 21471 18.72 24.13 15.75 26 XM_Multi_Part_URI 19212 18.14 21.59 16.25 27 XMSubLong 18905 24.54 21.25 26.35 28 RCVD_IN_MSPIKE_H2 18758 16.99 21.08 14.75 29 DCC_CHECK_NEGATIVE 18434 39.06 20.72 49.12 30 XM_B_Unsub 17299 13.39 19.44 10.08 31 T_TM2_M_HEADER_IN_MSG 17028 21.51 19.14 22.81 32 TR_XM_BayesUnsub 16834 11.62 18.92 7.61 33 UNPARSEABLE_RELAY 16149 14.98 18.15 13.24 34 RELAYCOUNTRY_META 15668 8.20 17.61 3.04 35 TR_MAX_INTL_RELAY 15335 10.38 17.23 6.61 36 XM_B_SpammyWords3 13743 10.24 15.44 7.39 37 TR_XM_SpammyRelay 11785 5.86 13.24 1.81 38 BOTNET_IPINHOSTNAME 10993 6.96 12.35 4.00 39 TR_XM_SpammyWords2 10385 4.42 11.67 0.44 40 RCVD_IN_BL_SPAMCOP_NET 10269 4.37 11.54 0.44 41 LOTS_OF_MONEY 9763 8.13 10.97 6.57 42 BAYES_80 9392 6.29 10.56 3.94 43 TR_XM_UnparsRelay 9276 5.04 10.42 2.09 44 FSL_BULK_SIG 9259 11.66 10.41 12.36 45 TR_XM_SpammyWords4 8752 6.46 9.84 4.60 46 RCVD_IN_MSPIKE_WL 8696 14.80 9.77 17.55 47 XM_Evil_Numbers_Gen 8299 8.77 9.33 8.46 48 BOTNET 8172 4.03 9.18 1.20 49 BAYES_60 7838 8.00 8.81 7.56 50 RELAYCOUNTRY_CA 7209 3.52 8.10 1.01 51 XM_B_Phish_Phrases 6995 6.16 7.86 5.23 52 HTML_IMAGE_RATIO_02 6361 5.92 7.15 5.24 53 XM_Body_Dirty_Words 6212 4.36 6.98 2.92 54 MPART_ALT_DIFF 6016 6.37 6.76 6.15 55 UNTRUSTED_Relay 5679 3.37 6.38 1.71 56 XM_UncommonTLD01 5664 5.61 6.37 5.20 57 LotsOfNums_01 5590 6.83 6.28 7.13 58 XMSubMetaSx_00 5489 4.75 6.17 3.96 59 BAYES_95 5428 3.88 6.10 2.67 60 XM_H_Long_From01 5336 5.85 6.00 5.77 61 XM_H_GMP 5205 6.21 5.85 6.41 62 TR_XM_MSPIKECOMBO 5163 2.57 5.80 0.79 63 RCVD_IN_MSPIKE_BL 5163 2.57 5.80 0.79 64 DKIM_INVALID 4608 2.57 5.18 1.13 65 TR_XM_SPAMCOP 4568 1.90 5.13 0.13 66 T_XMDrugObfuBody_14 4387 3.31 4.93 2.43 67 XM_B_Investor 4305 2.66 4.84 1.47 68 XMSexyCombo_05 4285 2.59 4.82 1.37 69 HTML_IMAGE_RATIO_04 4259 4.03 4.79 3.61 70 XM_B_PhoneNumber 4121 6.00 4.63 6.75 71 TR_XM_PhishingBody 3978 2.76 4.47 1.82 72 XM_B_SpammyTLD 3953 3.23 4.44 2.56 73 TR_XM_SpammyWords3 3831 1.76 4.31 0.36 74 RCVD_IN_MSPIKE_H3 3797 6.48 4.27 7.69 75 XMStrtUSub 3743 5.10 4.21 5.58 76 XM_OfRef6 3597 2.01 4.04 0.90 77 USER_IN_DEF_DKIM_WL 3432 13.23 3.86 18.37 78 TooManyTo_001 3364 5.20 3.78 5.98 79 XMBody_17 3340 1.76 3.75 0.67 80 MIME_HTML_MOSTLY 3067 3.41 3.45 3.39 81 T_XMHurry_00 3026 2.05 3.40 1.30 82 RCVD_IN_MSPIKE_L3 3014 1.55 3.39 0.54 83 XM_CamelCaseFrm001 2883 2.88 3.24 2.68 84 XM_B_Unsub2 2820 1.99 3.17 1.35 85 XM_URI_RBL 2800 1.37 3.15 0.40 86 TR_XM_NoHeaderRelay 2791 1.25 3.14 0.22 87 T_FILL_THIS_FORM_SHORT 2698 1.50 3.03 0.67 88 TM2_M_VERY_LONG_WORD 2685 2.19 3.02 1.74 89 MIME_QP_LONG_LINE 2682 3.37 3.01 3.57 90 MIME_HTML_ONLY_MULTI 2646 3.06 2.97 3.10 91 TR_XM_SpammyWords5 2621 1.78 2.95 1.14 92 HTML_IMAGE_RATIO_08 2589 2.39 2.91 2.10 93 RCVD_IN_MSPIKE_H4 2499 3.70 2.81 4.18 94 RCVD_IN_VALIDITY_SAFE 2498 3.94 2.81 4.56 95 HTML_IMAGE_RATIO_06 2484 3.37 2.79 3.68 96 XMNumbers 2482 4.05 2.79 4.74 97 RELAYCOUNTRY_AU 2465 1.22 2.77 0.36 98 FROM_EXCESS_BASE64 2461 2.13 2.77 1.78 99 DKIM_ADSP_NXDOMAIN 2441 1.27 2.74 0.47 100 RCVD_IN_VALIDITY_RPBL 2403 1.01 2.70 0.08 101 RCVD_IN_MSPIKE_H5 2400 4.62 2.70 5.68 102 T_XMDrugObfuBody_08 2390 1.75 2.69 1.24 103 XM_UB50 2222 1.47 2.50 0.91 104 XM_SPF_SoftFail 2205 1.48 2.48 0.94 105 SUBJ_ALL_CAPS 2181 1.46 2.45 0.92 106 HK_RANDOM_REPLYTO 2165 0.96 2.43 0.15 107 T_TooManySym_01 2119 5.54 2.38 7.27 108 TR_XM_INV_DKIM 2085 0.84 2.34 0.01 109 SpammyFromTLD_02 2059 1.04 2.31 0.33 110 RCVD_IN_VALIDITY_CERTIFIED 2005 3.31 2.25 3.89 111 TM2_M_URI_OPT_OUT 1963 1.98 2.21 1.86 112 XMBdyGiftCard01 1915 1.01 2.15 0.38 113 XM_B_SpammyWords4 1911 1.29 2.15 0.81 114 KHOP_HELO_FCRDNS 1896 1.62 2.13 1.35 115 RCVD_IN_PSBL 1883 1.25 2.12 0.77 116 XM_B_URI_Unicode 1879 1.74 2.11 1.54 117 XM_HighProb1 1851 0.74 2.08 0.00 118 TR_LOTS_OF_MONEY3 1806 0.94 2.03 0.34 119 MPART_ALT_DIFF_COUNT 1799 1.06 2.02 0.53 120 XMBrknScrpt_02 1758 1.60 1.98 1.40 121 TR_XM_MSPIKECOMBO2 1709 0.70 1.92 0.02 122 MAILING_LIST_MULTI 1632 2.26 1.83 2.49 123 TR_XM_INTL_Spamhaus 1623 0.73 1.82 0.12 124 XMStockSpam_06 1616 1.82 1.82 1.82 125 XMDiploma_00 1587 1.51 1.78 1.36 126 XMPhish30 1585 1.12 1.78 0.75 127 XM_B_COPY_HTML 1564 1.18 1.76 0.87 128 SpammyFromTLD_01 1504 0.82 1.69 0.34 129 URI_NOVOWEL 1492 1.43 1.68 1.30 130 URI_HEX 1462 1.18 1.64 0.93 131 T_REMOTE_IMAGE 1443 2.87 1.62 3.56 132 RCVD_IN_XBL 1422 0.57 1.60 0.00 133 RDNS_DYNAMIC 1388 0.72 1.56 0.25 134 PDS_RDNS_DYNAMIC_FP 1370 0.57 1.54 0.03 135 RCVD_IN_MSPIKE_L4 1357 0.70 1.53 0.24 136 TVD_RCVD_IP 1338 1.53 1.50 1.55 137 HTML_IMAGE_ONLY_20 1334 0.79 1.50 0.41 138 ALL_TRUSTED 1301 10.33 1.46 15.20 139 XM_UB99 1299 0.52 1.46 0.00 140 TM2_M_OBFU_COMMENT 1298 0.80 1.46 0.43 141 XM_ProductURIs 1289 0.92 1.45 0.63 142 XMSubMetaI_00 1281 0.98 1.44 0.73 143 URIBL_SBL_A 1277 0.51 1.44 0.01 144 SH_BODYURI_REVERSE_SBL 1277 0.51 1.44 0.01 145 URIBL_SBL 1277 0.51 1.44 0.01 146 XM_B_Phish66 1258 0.72 1.41 0.33 147 THIS_AD 1239 0.66 1.39 0.26 148 RELAYCOUNTRY_FR 1238 0.64 1.39 0.23 149 T_XMDrugObfuBody_00 1220 1.06 1.37 0.89 150 TR_XM_PHPForged 1210 0.66 1.36 0.28 151 BAYES_40 1200 3.68 1.35 4.96 152 HTML_MIME_NO_HTML_TAG 1199 1.65 1.35 1.81 153 TR_XM_FormFill 1199 0.48 1.35 0.01 154 TR_XM_PHPDW 1195 0.66 1.34 0.28 155 XM_DK_Undo_01 1194 1.58 1.34 1.71 156 XM_H_Long_From02 1193 1.00 1.34 0.81 157 TR_XM_FormFill2 1191 0.66 1.34 0.28 158 MultiRelay_CC 1174 0.51 1.32 0.07 159 RCVD_IN_SBL_CSS 1165 0.50 1.31 0.05 160 XM_H_PHPOS 1165 0.64 1.31 0.27 161 DIET_1 1143 0.83 1.28 0.59 162 XM_H_DKIM_GOOG 1143 0.46 1.28 0.01 163 XM_SendGrid 1132 1.26 1.27 1.25 164 TR_XM_GMP_BULK_SIG 1121 0.53 1.26 0.13 165 XM_OfRef7 1098 0.55 1.23 0.17 166 STY_INVIS_DIRECT 1093 0.81 1.23 0.59 167 RCVD_IN_PBL 1092 0.82 1.23 0.60 168 TR_Mismatch_TLD_02 1074 0.47 1.21 0.07 169 HTML_TAG_BALANCE_BODY 1038 0.78 1.17 0.56 170 TR_XM_MaxSPIKE 1038 0.43 1.17 0.02 171 TR_XM_Base64_M1 1020 0.69 1.15 0.45 172 BOTNET_NORDNS 1019 0.42 1.15 0.02 173 SHOPIFY_IMG_NOT_RCVD_SFY 1003 0.61 1.13 0.33 174 ANY_BOUNCE_MESSAGE 965 3.55 1.08 4.91 175 BOUNCE_MESSAGE 941 3.54 1.06 4.91 176 XM_UB999 934 0.37 1.05 0.00 177 HELO_DYNAMIC_SPLIT_IP 932 0.37 1.05 0.00 178 XMBody_78 928 0.50 1.04 0.20 179 XM_B_REG_HTML 908 0.57 1.02 0.32 180 TR_XM_Base64_L1 902 0.43 1.01 0.11 181 TM2_M_A_HREF_HREF 900 0.53 1.01 0.27 182 T_TVD_MIME_EPI 891 0.36 1.00 0.00 183 XMGenDplmaNmb 878 0.67 0.99 0.50 184 XM_B_SEO 875 0.44 0.98 0.14 185 HTML_FONT_TINY_NORDNS 870 0.37 0.98 0.04 186 URI_TRY_3LD 862 0.83 0.97 0.76 187 LongTLD 861 0.64 0.97 0.46 188 XM_H_Undi_Recip 860 0.44 0.97 0.15 189 XMHTMLBadTable_001 844 0.57 0.95 0.36 190 GOOG_STO_NOIMG_HTML 844 0.34 0.95 0.00 191 TR_XM_RelayPhish 841 0.38 0.95 0.07 192 XM_UB60 832 0.38 0.94 0.07 193 HTML_TAG_BALANCE_CENTER 811 0.47 0.91 0.22 194 XMReplyNow 806 0.47 0.91 0.23 195 TR_Caps_n_Bayes_99 799 0.33 0.90 0.01 196 TR_XM_DK_SendGrid 799 0.85 0.90 0.83 197 TR_XM_InvalidRelay 795 0.33 0.89 0.02 198 RCVD_IN_MSPIKE_L5 792 0.32 0.89 0.01 199 BAYES_20 781 2.50 0.88 3.39 200 XMNoVowels 753 0.66 0.85 0.56 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 133477 86.86 95.16 82.31 2 RELAYCOUNTRY_US 132417 81.50 81.21 81.66 3 DKIM_SIGNED 126060 82.63 91.53 77.74 4 XM_DK_Pass 124994 80.49 86.70 77.08 5 DKIM_VALID 124225 80.06 86.35 76.61 6 XM_B_Unicode 117731 76.90 84.73 72.60 7 DKIM_VALID_AU 106749 67.10 69.42 65.83 8 BAYES_50 97868 51.84 36.32 60.35 9 XMListUnsubscribeExists 86040 58.97 69.75 53.06 10 DCC_CHECK 82460 60.77 78.83 50.85 11 DCC_CHECK_NEGATIVE 79649 39.06 20.72 49.12 12 XM_B_SpammyWords 75955 54.34 68.00 46.84 13 XM_B_Unicode3 73268 46.76 49.64 45.18 14 LOC_TINY_FONT_1 53228 39.01 50.27 32.83 15 DKIM_VALID_EF 51920 31.83 31.48 32.02 16 HTML_FONT_LOW_CONTRAST 50750 32.59 34.95 31.30 17 XMSubLong 42731 24.54 21.25 26.35 18 FVGT_m_MULTI_ODD 42161 29.17 34.95 26.00 19 T_TM2_M_HEADER_IN_MSG 36990 21.51 19.14 22.81 20 T_KAM_HTML_FONT_INVALID 35737 24.61 29.29 22.04 21 XM_B_SpammyWords2 35447 28.31 40.07 21.86 22 MIME_HTML_ONLY 33779 23.63 28.72 20.83 23 USER_IN_DEF_DKIM_WL 29789 13.23 3.86 18.37 24 RCVD_IN_MSPIKE_WL 28464 14.80 9.77 17.55 25 XM_Multi_Part_URI 26349 18.14 21.59 16.25 26 TR_XM_DK_Unsub 25532 18.72 24.13 15.75 27 ALL_TRUSTED 24649 10.33 1.46 15.20 28 RCVD_IN_MSPIKE_H2 23916 16.99 21.08 14.75 29 UNPARSEABLE_RELAY 21475 14.98 18.15 13.24 30 FSL_BULK_SIG 20035 11.66 10.41 12.36 31 BAYES_00 16809 6.84 0.42 10.37 32 XM_B_Unsub 16339 13.39 19.44 10.08 33 XM_DKIMWhitelistDomains 13994 5.59 0.05 8.63 34 XM_Evil_Numbers_Gen 13720 8.77 9.33 8.46 35 TR_XM_DK_Bayes 13305 5.41 0.32 8.21 36 TR_XM_DK_Bayes1 13258 5.39 0.32 8.18 37 RCVD_IN_MSPIKE_H3 12473 6.48 4.27 7.69 38 TR_XM_BayesUnsub 12347 11.62 18.92 7.61 39 BAYES_60 12260 8.00 8.81 7.56 40 XM_B_SpammyWords3 11984 10.24 15.44 7.39 41 T_TooManySym_01 11782 5.54 2.38 7.27 42 TR_XM_DK_Bayes2 11635 4.71 0.23 7.18 43 LotsOfNums_01 11554 6.83 6.28 7.13 44 XM_B_PhoneNumber 10945 6.00 4.63 6.75 45 TR_MAX_INTL_RELAY 10721 10.38 17.23 6.61 46 LOTS_OF_MONEY 10656 8.13 10.97 6.57 47 XM_H_GMP 10394 6.21 5.85 6.41 48 MPART_ALT_DIFF 9977 6.37 6.76 6.15 49 TooManyTo_001 9696 5.20 3.78 5.98 50 XM_DK_Undo_02 9645 18.76 42.10 5.95 51 XM_H_Long_From01 9352 5.85 6.00 5.77 52 RCVD_IN_MSPIKE_H5 9209 4.62 2.70 5.68 53 XMStrtUSub 9054 5.10 4.21 5.58 54 HTML_IMAGE_RATIO_02 8500 5.92 7.15 5.24 55 XM_B_Phish_Phrases 8480 6.16 7.86 5.23 56 XM_UncommonTLD01 8436 5.61 6.37 5.20 57 BAYES_40 8042 3.68 1.35 4.96 58 BOUNCE_MESSAGE 7957 3.54 1.06 4.91 59 ANY_BOUNCE_MESSAGE 7957 3.55 1.08 4.91 60 BAYES_99 7730 15.34 34.61 4.77 61 XMNumbers 7687 4.05 2.79 4.74 62 TR_XM_SpammyWords4 7459 6.46 9.84 4.60 63 T_TooManySym_02 7450 3.13 0.47 4.59 64 RCVD_IN_VALIDITY_SAFE 7402 3.94 2.81 4.56 65 RCVD_IN_MSPIKE_H4 6782 3.70 2.81 4.18 66 INVALID_MSGID 6707 2.78 0.32 4.14 67 BOTNET_IPINHOSTNAME 6493 6.96 12.35 4.00 68 XMSubMetaSx_00 6428 4.75 6.17 3.96 69 TO_MALFORMED 6407 2.57 0.06 3.95 70 BAYES_80 6396 6.29 10.56 3.94 71 RCVD_IN_VALIDITY_CERTIFIED 6312 3.31 2.25 3.89 72 BAYES_999 6078 11.95 26.89 3.75 73 HTML_IMAGE_RATIO_06 5970 3.37 2.79 3.68 74 MSGID_NOFQDN1 5942 2.37 0.01 3.66 75 HTML_IMAGE_RATIO_04 5858 4.03 4.79 3.61 76 MIME_QP_LONG_LINE 5784 3.37 3.01 3.57 77 T_REMOTE_IMAGE 5774 2.87 1.62 3.56 78 MIME_HTML_MOSTLY 5497 3.41 3.45 3.39 79 BAYES_20 5493 2.50 0.88 3.39 80 MIME_HTML_ONLY_MULTI 5033 3.06 2.97 3.10 81 RELAYCOUNTRY_META 4931 8.20 17.61 3.04 82 XM_Body_Dirty_Words 4742 4.36 6.98 2.92 83 XM_CamelCaseFrm001 4343 2.88 3.24 2.68 84 BAYES_95 4324 3.88 6.10 2.67 85 XM_B_SpammyTLD 4157 3.23 4.44 2.56 86 XM_PDF 4122 1.80 0.44 2.54 87 MAILING_LIST_MULTI 4045 2.26 1.83 2.49 88 T_XMDrugObfuBody_14 3934 3.31 4.93 2.43 89 TR_XM_DKIM_Undo 3873 12.38 30.58 2.39 90 RCVD_IN_IADB_LISTED 3676 1.69 0.63 2.27 91 HTML_IMAGE_RATIO_08 3405 2.39 2.91 2.10 92 TR_XM_UnparsRelay 3392 5.04 10.42 2.09 93 TooManyTo_002 3381 1.57 0.64 2.09 94 RCVD_IN_IADB_SPF 3296 1.50 0.54 2.03 95 TR_DCC_Bayes_99 3276 10.34 25.50 2.02 96 BAYES_05 3234 1.48 0.53 1.99 97 T_TooManySym_03 3159 1.30 0.13 1.95 98 RCVD_IN_IADB_SENDERID 3042 1.38 0.48 1.88 99 TM2_M_URI_OPT_OUT 3012 1.98 2.21 1.86 100 RCVD_IN_IADB_DK 2962 1.36 0.51 1.83 101 XMStockSpam_06 2956 1.82 1.82 1.82 102 TR_XM_PhishingBody 2946 2.76 4.47 1.82 103 HTML_MIME_NO_HTML_TAG 2943 1.65 1.35 1.81 104 TR_XM_SpammyRelay 2939 5.86 13.24 1.81 105 FROM_EXCESS_BASE64 2891 2.13 2.77 1.78 106 TM2_M_VERY_LONG_WORD 2825 2.19 3.02 1.74 107 XM_DK_Undo_01 2776 1.58 1.34 1.71 108 UNTRUSTED_Relay 2772 3.37 6.38 1.71 109 XMGappySubj_01 2728 1.14 0.15 1.68 110 IN_HORDE_ADDRESS_BOOK 2569 1.05 0.07 1.58 111 TVD_RCVD_IP 2506 1.53 1.50 1.55 112 T_TVD_MIME_NO_HEADERS 2505 1.02 0.05 1.54 113 XM_B_URI_Unicode 2495 1.74 2.11 1.54 114 TVD_SPACE_RATIO 2445 1.01 0.11 1.51 115 RCVD_IN_IADB_VOUCHED 2391 1.08 0.36 1.47 116 XM_B_Investor 2379 2.66 4.84 1.47 117 XMBrknScrpt_02 2266 1.60 1.98 1.40 118 XMSexyCombo_05 2219 2.59 4.82 1.37 119 XMDiploma_00 2201 1.51 1.78 1.36 120 XM_B_Unsub2 2189 1.99 3.17 1.35 121 KHOP_HELO_FCRDNS 2182 1.62 2.13 1.35 122 T_XMHurry_00 2112 2.05 3.40 1.30 123 URI_NOVOWEL 2101 1.43 1.68 1.30 124 XMGappySubj_02 2074 0.83 0.01 1.28 125 XM_SendGrid 2026 1.26 1.27 1.25 126 T_XMDrugObfuBody_08 2013 1.75 2.69 1.24 127 BOTNET 1952 4.03 9.18 1.20 128 XM_GoogleGroups 1931 1.06 0.82 1.19 129 TR_XM_SpammyWords5 1850 1.78 2.95 1.14 130 DKIM_INVALID 1835 2.57 5.18 1.13 131 LOW_PRICE 1830 0.84 0.33 1.13 132 HTML_EXTRA_CLOSE 1755 0.70 0.02 1.08 133 RCVD_IN_IADB_OPTIN 1754 0.79 0.26 1.08 134 TR_Symld_Words 1717 0.97 0.80 1.06 135 XM_B_DNDMA 1672 0.94 0.77 1.03 136 RELAYCOUNTRY_CA 1638 3.52 8.10 1.01 137 XMBSHREFv2 1628 0.75 0.28 1.00 138 XM_B_FormFill 1611 0.65 0.01 0.99 139 XM_SPF_SoftFail 1524 1.48 2.48 0.94 140 URI_HEX 1502 1.18 1.64 0.93 141 SUBJ_ALL_CAPS 1488 1.46 2.45 0.92 142 XM_UB50 1475 1.47 2.50 0.91 143 XM_OfRef6 1459 2.01 4.04 0.90 144 T_XMDrugObfuBody_00 1451 1.06 1.37 0.89 145 XM_B_COPY_HTML 1406 1.18 1.76 0.87 146 XM_H_PHPMailer 1402 0.78 0.63 0.86 147 TooManyTo_003 1397 0.77 0.60 0.86 148 TR_MetaPhish_Combo_01 1390 0.83 0.78 0.86 149 TR_XM_DK_SendGrid 1345 0.85 0.90 0.83 150 XM_H_Long_From02 1317 1.00 1.34 0.81 151 XM_B_SpammyWords4 1317 1.29 2.15 0.81 152 TR_XM_MSPIKECOMBO 1286 2.57 5.80 0.79 153 RCVD_IN_MSPIKE_BL 1286 2.57 5.80 0.79 154 DKIM_ADSP_CUSTOM_MED 1255 0.78 0.80 0.77 155 RCVD_IN_PSBL 1248 1.25 2.12 0.77 156 URI_TRY_3LD 1229 0.83 0.97 0.76 157 XMPhish30 1216 1.12 1.78 0.75 158 XMSubMetaI_00 1188 0.98 1.44 0.73 159 PLING_QUERY 1126 0.68 0.66 0.69 160 XMBody_17 1087 1.76 3.75 0.67 161 T_FILL_THIS_FORM_SHORT 1081 1.50 3.03 0.67 162 TooManyTo_004 1067 0.60 0.50 0.66 163 TR_Mismatch_TLD_01 1029 0.71 0.84 0.63 164 XM_ProductURIs 1016 0.92 1.45 0.63 165 RCVD_IN_PBL 967 0.82 1.23 0.60 166 TR_XM_GMP_MSPIKE_UNDO2 967 0.45 0.20 0.60 167 HTML_IMAGE_ONLY_32 962 0.42 0.10 0.59 168 STY_INVIS_DIRECT 952 0.81 1.23 0.59 169 DIET_1 950 0.83 1.28 0.59 170 T_Symld_Words_02 936 0.61 0.66 0.58 171 TooManyTo_005 913 0.53 0.48 0.56 172 HTML_TAG_BALANCE_BODY 912 0.78 1.17 0.56 173 XMNoVowels 903 0.66 0.85 0.56 174 XMPhish14 897 0.55 0.55 0.55 175 T_TooManySym_04 894 0.36 0.02 0.55 176 XMBody_95 885 0.38 0.09 0.55 177 RCVD_IN_MSPIKE_L3 879 1.55 3.39 0.54 178 MPART_ALT_DIFF_COUNT 859 1.06 2.02 0.53 179 XMSolicitRefs_0 848 0.54 0.58 0.52 180 HTML_FONT_FACE_BAD 825 0.57 0.68 0.51 181 XMLngstWrd_00 806 0.41 0.24 0.50 182 XMGenDplmaNmb 805 0.67 0.99 0.50 183 NML_ADSP_CUSTOM_MED 791 0.54 0.65 0.49 184 FORGED_GMAIL_RCVD 784 0.53 0.63 0.48 185 XMHTML_After_End 761 0.50 0.56 0.47 186 DKIM_ADSP_NXDOMAIN 759 1.27 2.74 0.47 187 XMClaimOffer 758 0.48 0.50 0.47 188 XM_S_SubURI 754 0.32 0.05 0.46 189 LongTLD 753 0.64 0.97 0.46 190 HTML_TEXT_INVISIBLE_STYLE 746 0.41 0.31 0.46 191 XM_ShortIntro_01 734 0.44 0.42 0.45 192 XMSlimDrugH 733 0.55 0.74 0.45 193 TR_XM_Base64_M1 723 0.69 1.15 0.45 194 RCVD_IN_BL_SPAMCOP_NET 713 4.37 11.54 0.44 195 TR_XM_SpammyWords2 713 4.42 11.67 0.44 196 TM2_M_OBFU_COMMENT 699 0.80 1.46 0.43 197 XMLngstWrd_01 694 0.34 0.19 0.43 198 HTML_IMAGE_ONLY_20 659 0.79 1.50 0.41 199 NO_DNS_FOR_FROM 658 0.46 0.56 0.41 200 HTTPS_HTTP_MISMATCH 648 0.48 0.63 0.40 ----------------------------------------------------------------------