Email: 252855 Autolearn: 0 AvgScore: 5.54 AvgScanTime: 1.40 sec Spam: 83284 Autolearn: 0 AvgScore: 14.51 AvgScanTime: 1.56 sec Ham: 169571 Autolearn: 0 AvgScore: 1.14 AvgScanTime: 1.32 sec Time Spent Running SA: 98.37 hours Time Spent Processing Spam: 36.16 hours Time Spent Processing Ham: 62.21 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 79046 88.08 94.91 84.73 2 DKIM_SIGNED 73588 77.11 88.36 71.59 3 XM_DK_Pass 70569 75.52 84.73 71.00 4 XM_B_Unicode 70441 76.03 84.58 71.83 5 DKIM_VALID 70091 75.02 84.16 70.54 6 RELAYCOUNTRY_US 65305 81.33 78.41 82.76 7 DCC_CHECK 64805 59.30 77.81 50.21 8 XM_B_SpammyWords 57742 53.72 69.33 46.05 9 XMListUnsubscribeExists 56919 55.87 68.34 49.75 10 DKIM_VALID_AU 56335 63.30 67.64 61.17 11 XM_B_Unicode3 42288 48.12 50.78 46.82 12 LOC_TINY_FONT_1 39118 37.61 46.97 33.02 13 XM_DK_Undo_02 35905 17.63 43.11 5.12 14 XM_B_SpammyWords2 33948 26.83 40.76 19.99 15 BAYES_99 30206 14.61 36.27 3.97 16 FVGT_m_MULTI_ODD 28725 28.55 34.49 25.63 17 HTML_FONT_LOW_CONTRAST 28247 36.22 33.92 37.35 18 BAYES_50 28210 53.79 33.87 63.57 19 TR_XM_DKIM_Undo 26258 11.69 31.53 1.94 20 DKIM_VALID_EF 25935 29.54 31.14 28.75 21 T_KAM_HTML_FONT_INVALID 25333 23.20 30.42 19.65 22 MIME_HTML_ONLY 23952 22.38 28.76 19.24 23 BAYES_999 23083 11.19 27.72 3.08 24 TR_DCC_Bayes_99 22250 10.04 26.72 1.86 25 TR_XM_DK_Unsub 19734 17.69 23.69 14.74 26 DCC_CHECK_NEGATIVE 18053 40.51 21.68 49.76 27 T_TM2_M_HEADER_IN_MSG 18024 25.94 21.64 28.05 28 RELAYCOUNTRY_META 17530 8.87 21.05 2.89 29 XMSubLong 17424 22.07 20.92 22.64 30 RCVD_IN_MSPIKE_H2 16942 16.31 20.34 14.33 31 XM_Multi_Part_URI 16761 17.01 20.13 15.48 32 XM_B_Unsub 15310 12.10 18.38 9.02 33 UNPARSEABLE_RELAY 15103 14.81 18.13 13.17 34 TR_MAX_INTL_RELAY 14989 9.98 18.00 6.04 35 TR_XM_BayesUnsub 14844 10.70 17.82 7.20 36 XM_B_SpammyWords3 12326 9.00 14.80 6.15 37 TR_XM_SpammyRelay 12002 5.78 14.41 1.54 38 BOTNET_IPINHOSTNAME 11483 6.95 13.79 3.59 39 TR_XM_SpammyWords2 11086 4.76 13.31 0.55 40 FSL_BULK_SIG 10205 12.07 12.25 11.98 41 BOTNET 9605 4.52 11.53 1.08 42 BAYES_80 9200 6.08 11.05 3.63 43 LOTS_OF_MONEY 8938 7.04 10.73 5.22 44 TR_XM_UnparsRelay 8818 4.64 10.59 1.72 45 RCVD_IN_BL_SPAMCOP_NET 8579 3.70 10.30 0.46 46 TR_XM_SpammyWords4 8009 5.61 9.62 3.64 47 UNTRUSTED_Relay 7652 4.16 9.19 1.69 48 RCVD_IN_MSPIKE_WL 7518 14.25 9.03 16.81 49 XM_Evil_Numbers_Gen 7365 11.57 8.84 12.90 50 BAYES_60 7146 7.54 8.58 7.02 51 TR_XM_MSPIKECOMBO 6809 3.12 8.18 0.64 52 RCVD_IN_MSPIKE_BL 6809 3.12 8.18 0.64 53 RELAYCOUNTRY_CA 6680 3.24 8.02 0.90 54 XM_Body_Dirty_Words 5797 3.60 6.96 1.95 55 HTML_IMAGE_RATIO_02 5670 5.55 6.81 4.94 56 XM_UncommonTLD01 5567 5.48 6.68 4.89 57 XMSubMetaSx_00 5472 4.94 6.57 4.14 58 LotsOfNums_01 5415 9.95 6.50 11.64 59 BAYES_95 5377 3.74 6.46 2.40 60 TooManyTo_001 5201 5.55 6.24 5.21 61 XM_B_Phish_Phrases 5066 5.38 6.08 5.03 62 MPART_ALT_DIFF 4700 5.18 5.64 4.95 63 XM_H_GMP 4644 5.99 5.58 6.19 64 XM_H_Long_From01 4146 5.04 4.98 5.07 65 XM_B_Investor 4108 2.73 4.93 1.64 66 TR_XM_SpammyWords3 4050 1.83 4.86 0.35 67 ANY_BOUNCE_MESSAGE 4032 9.74 4.84 12.15 68 BOUNCE_MESSAGE 4030 9.74 4.84 12.15 69 HTML_IMAGE_RATIO_04 3971 4.73 4.77 4.70 70 T_XMDrugObfuBody_14 3944 3.52 4.74 2.92 71 TM2_M_VERY_LONG_WORD 3905 7.45 4.69 8.80 72 TR_XM_NoHeaderRelay 3828 1.68 4.60 0.25 73 XMSexyCombo_05 3776 2.58 4.53 1.62 74 XMStrtUSub 3767 5.19 4.52 5.51 75 TR_XM_PhishingBody 3726 2.70 4.47 1.83 76 MIME_QP_LONG_LINE 3655 3.31 4.39 2.79 77 XM_B_PhoneNumber 3518 5.40 4.22 5.98 78 DKIM_INVALID 3497 2.09 4.20 1.05 79 RCVD_IN_MSPIKE_H3 3453 6.15 4.15 7.14 80 XM_B_SpammyTLD 3427 3.06 4.11 2.54 81 XM_OfRef6 3412 1.80 4.10 0.67 82 RCVD_IN_VALIDITY_RPBL 3385 1.37 4.06 0.04 83 DKIM_ADSP_NXDOMAIN 3366 1.64 4.04 0.47 84 XMDiploma_00 3106 2.03 3.73 1.20 85 TR_XM_SPAMCOP 3088 1.27 3.71 0.08 86 T_FILL_THIS_FORM_SHORT 3050 1.62 3.66 0.61 87 MIME_HTML_MOSTLY 2913 3.03 3.50 2.80 88 USER_IN_DEF_DKIM_WL 2891 12.82 3.47 17.41 89 RCVD_IN_MSPIKE_L3 2736 1.40 3.29 0.48 90 T_TooManySym_01 2733 6.02 3.28 7.36 91 XM_URI_RBL 2726 1.49 3.27 0.62 92 RCVD_IN_MSPIKE_L4 2705 1.17 3.25 0.16 93 XMBody_17 2673 1.39 3.21 0.50 94 TR_XM_MSPIKECOMBO2 2660 1.06 3.19 0.01 95 XM_CamelCaseFrm001 2501 2.68 3.00 2.52 96 XMBounce_01 2499 1.00 3.00 0.01 97 RCVD_IN_VALIDITY_SAFE 2471 4.70 2.97 5.55 98 MIME_HTML_ONLY_MULTI 2423 2.59 2.91 2.43 99 RELAYCOUNTRY_AU 2404 1.25 2.89 0.45 100 XMNumbers 2391 3.94 2.87 4.47 101 FROM_EXCESS_BASE64 2322 2.16 2.79 1.86 102 RELAYCOUNTRY_TH 2297 0.91 2.76 0.00 103 RCVD_IN_MSPIKE_H4 2289 3.74 2.75 4.23 104 XM_SPF_SoftFail 2242 1.57 2.69 1.02 105 XM_B_URI_Unicode 2234 1.81 2.68 1.39 106 XM_UB50 2211 1.50 2.65 0.94 107 HTML_IMAGE_RATIO_08 2191 2.44 2.63 2.34 108 TR_XM_SpammyWords5 2173 1.91 2.61 1.57 109 HK_RANDOM_REPLYTO 2132 0.98 2.56 0.20 110 XM_UB99 2090 0.83 2.51 0.00 111 T_XMDrugObfuBody_08 2064 1.56 2.48 1.11 112 KHOP_HELO_FCRDNS 2050 4.33 2.46 5.26 113 HTML_IMAGE_RATIO_06 2017 3.18 2.42 3.55 114 XMGenDplmaNmb 2008 1.25 2.41 0.68 115 XM_B_Unsub2 1937 1.68 2.33 1.36 116 RCVD_IN_VALIDITY_CERTIFIED 1853 4.03 2.22 4.91 117 URI_NOVOWEL 1828 1.35 2.19 0.94 118 SpammyFromTLD_02 1825 0.86 2.19 0.21 119 RCVD_IN_MSPIKE_H5 1776 4.35 2.13 5.44 120 XPRIO 1773 0.71 2.13 0.02 121 TM2_M_URI_OPT_OUT 1755 1.89 2.11 1.78 122 T_XMHurry_00 1754 1.25 2.11 0.83 123 XM_B_SpammyWords4 1667 1.34 2.00 1.02 124 TR_LOTS_OF_MONEY3 1660 0.91 1.99 0.38 125 TR_XM_INV_DKIM 1652 0.67 1.98 0.02 126 T_REMOTE_IMAGE 1599 2.74 1.92 3.14 127 XMBrknScrpt_02 1596 1.63 1.92 1.48 128 T_XMDrugObfuBody_00 1577 1.22 1.89 0.89 129 TVD_RCVD_IP 1575 1.67 1.89 1.57 130 SUBJ_ALL_CAPS 1563 1.25 1.88 0.94 131 RDNS_DYNAMIC 1561 0.78 1.87 0.24 132 PDS_RDNS_DYNAMIC_FP 1547 0.63 1.86 0.02 133 TR_XM_INTL_Spamhaus 1525 0.70 1.83 0.15 134 SpammyFromTLD_01 1495 0.80 1.80 0.30 135 XMStockSpam_06 1487 1.68 1.79 1.63 136 TR_Mismatch_TLD_02 1485 0.62 1.78 0.05 137 RELAYCOUNTRY_FR 1433 0.70 1.72 0.19 138 MAILING_LIST_MULTI 1410 1.99 1.69 2.13 139 MultiRelay_CC 1389 0.64 1.67 0.13 140 MPART_ALT_DIFF_COUNT 1386 1.01 1.66 0.69 141 XMPhish30 1382 1.04 1.66 0.73 142 RCVD_IN_MSPIKE_L5 1373 0.55 1.65 0.01 143 URI_HEX 1367 1.04 1.64 0.75 144 RCVD_IN_XBL 1348 0.54 1.62 0.01 145 XMBdyGiftCard01 1341 1.11 1.61 0.87 146 TR_XM_PHPDW 1335 0.66 1.60 0.19 147 TR_XM_PHPForged 1334 0.65 1.60 0.18 148 TR_XM_FormFill2 1313 0.65 1.58 0.19 149 XM_B_Phish66 1299 0.69 1.56 0.27 150 XM_H_PHPOS 1289 0.63 1.55 0.17 151 XM_HighProb1 1268 0.50 1.52 0.00 152 RCVD_IN_SBL_CSS 1266 0.51 1.52 0.02 153 SHOPIFY_IMG_NOT_RCVD_SFY 1256 0.76 1.51 0.39 154 XM_UB999 1251 0.50 1.50 0.00 155 XM_B_COPY_HTML 1238 1.30 1.49 1.20 156 BAYES_40 1232 4.31 1.48 5.70 157 XM_UB80 1206 0.49 1.45 0.01 158 XM_ProductURIs 1182 1.46 1.42 1.48 159 THIS_AD 1176 0.63 1.41 0.25 160 TR_XM_MaxSPIKE 1163 0.46 1.40 0.01 161 XM_SendGrid 1143 1.30 1.37 1.26 162 RCVD_IN_PSBL 1138 0.96 1.37 0.77 163 ALL_TRUSTED 1137 9.93 1.37 14.14 164 DIET_1 1101 1.44 1.32 1.50 165 MIME_CHARSET_FARAWAY 1075 2.52 1.29 3.12 166 TR_XM_FormFill 1060 0.43 1.27 0.01 167 RCVD_IN_PBL 1012 0.77 1.22 0.55 168 HTML_FONT_TINY_NORDNS 1006 0.43 1.21 0.04 169 STY_INVIS_DIRECT 973 0.79 1.17 0.60 170 HTML_MIME_NO_HTML_TAG 958 1.61 1.15 1.84 171 BOTNET_NORDNS 955 0.39 1.15 0.02 172 XM_S_SpammyWords 947 0.51 1.14 0.20 173 TR_XM_Spammywords 947 0.51 1.14 0.20 174 XMSexyCombo_01 945 0.50 1.13 0.20 175 XMBody_78 944 0.53 1.13 0.23 176 MISSING_HEADERS 938 0.52 1.13 0.23 177 XM_UB95 927 0.37 1.11 0.01 178 HTML_IMAGE_ONLY_20 920 0.62 1.10 0.38 179 TR_XM_Base64_M1 919 1.00 1.10 0.95 180 CHARSET_FARAWAY_HEADER 909 2.36 1.09 2.99 181 TR_XM_GMP_BULK_SIG 904 0.44 1.09 0.13 182 XM_UB60 890 0.39 1.07 0.06 183 HELO_DYNAMIC_SPLIT_IP 887 0.35 1.07 0.01 184 XM_DK_Undo_01 884 1.21 1.06 1.29 185 XM_DIRTYINTL 881 0.39 1.06 0.07 186 TR_XM_InvalidRelay 881 0.36 1.06 0.01 187 HTML_TAG_BALANCE_BODY 879 0.86 1.06 0.76 188 TM2_M_OBFU_COMMENT 877 0.65 1.05 0.46 189 XM_B_SEO 874 0.46 1.05 0.17 190 XMGppyBdWords 868 0.44 1.04 0.14 191 FORGED_MUA_OUTLOOK 862 0.37 1.04 0.04 192 AXB_XMAILER_MIMEOLE_OL_024C2 858 0.34 1.03 0.00 193 XMSubMetaI_00 857 0.71 1.03 0.55 194 TR_XM_DK_SendGrid 856 0.97 1.03 0.94 195 XMReplyNow 852 0.50 1.02 0.24 196 XM_B_REG_HTML 848 0.49 1.02 0.23 197 AC_HTML_NONSENSE_TAGS 839 0.36 1.01 0.05 198 URI_TRY_3LD 833 0.70 1.00 0.55 199 REPLYTO_WITHOUT_TO_CC 823 0.33 0.99 0.01 200 TR_Mismatch_TLD_01 823 0.50 0.99 0.26 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 143674 88.08 94.91 84.73 2 RELAYCOUNTRY_US 140340 81.33 78.41 82.76 3 XM_B_Unicode 121803 76.03 84.58 71.83 4 DKIM_SIGNED 121395 77.11 88.36 71.59 5 XM_DK_Pass 120398 75.52 84.73 71.00 6 DKIM_VALID 119613 75.02 84.16 70.54 7 BAYES_50 107792 53.79 33.87 63.57 8 DKIM_VALID_AU 103732 63.30 67.64 61.17 9 DCC_CHECK 85149 59.30 77.81 50.21 10 DCC_CHECK_NEGATIVE 84373 40.51 21.68 49.76 11 XMListUnsubscribeExists 84357 55.87 68.34 49.75 12 XM_B_Unicode3 79391 48.12 50.78 46.82 13 XM_B_SpammyWords 78089 53.72 69.33 46.05 14 HTML_FONT_LOW_CONTRAST 63330 36.22 33.92 37.35 15 LOC_TINY_FONT_1 55987 37.61 46.97 33.02 16 DKIM_VALID_EF 48757 29.54 31.14 28.75 17 T_TM2_M_HEADER_IN_MSG 47557 25.94 21.64 28.05 18 FVGT_m_MULTI_ODD 43469 28.55 34.49 25.63 19 XMSubLong 38392 22.07 20.92 22.64 20 XM_B_SpammyWords2 33902 26.83 40.76 19.99 21 T_KAM_HTML_FONT_INVALID 33328 23.20 30.42 19.65 22 MIME_HTML_ONLY 32628 22.38 28.76 19.24 23 USER_IN_DEF_DKIM_WL 29523 12.82 3.47 17.41 24 RCVD_IN_MSPIKE_WL 28504 14.25 9.03 16.81 25 XM_Multi_Part_URI 26245 17.01 20.13 15.48 26 TR_XM_DK_Unsub 24990 17.69 23.69 14.74 27 RCVD_IN_MSPIKE_H2 24302 16.31 20.34 14.33 28 ALL_TRUSTED 23981 9.93 1.37 14.14 29 UNPARSEABLE_RELAY 22340 14.81 18.13 13.17 30 XM_Evil_Numbers_Gen 21883 11.57 8.84 12.90 31 ANY_BOUNCE_MESSAGE 20604 9.74 4.84 12.15 32 BOUNCE_MESSAGE 20603 9.74 4.84 12.15 33 FSL_BULK_SIG 20316 12.07 12.25 11.98 34 LotsOfNums_01 19746 9.95 6.50 11.64 35 XM_B_Unsub 15290 12.10 18.38 9.02 36 TM2_M_VERY_LONG_WORD 14926 7.45 4.69 8.80 37 BAYES_00 14283 5.77 0.36 8.42 38 XM_DKIMWhitelistDomains 14012 5.55 0.02 8.26 39 HTML_IMAGE_ONLY_32 13678 5.46 0.15 8.07 40 T_TooManySym_01 12487 6.02 3.28 7.36 41 TR_XM_BayesUnsub 12213 10.70 17.82 7.20 42 RCVD_IN_MSPIKE_H3 12102 6.15 4.15 7.14 43 BAYES_60 11911 7.54 8.58 7.02 44 TR_XM_DK_Bayes 11277 4.55 0.29 6.65 45 TR_XM_DK_Bayes1 11220 4.53 0.29 6.62 46 XM_H_GMP 10495 5.99 5.58 6.19 47 XM_B_SpammyWords3 10432 9.00 14.80 6.15 48 TR_MAX_INTL_RELAY 10234 9.98 18.00 6.04 49 XM_B_PhoneNumber 10138 5.40 4.22 5.98 50 TR_XM_DK_Bayes2 9772 3.93 0.20 5.76 51 BAYES_40 9665 4.31 1.48 5.70 52 RCVD_IN_VALIDITY_SAFE 9407 4.70 2.97 5.55 53 XMStrtUSub 9344 5.19 4.52 5.51 54 RCVD_IN_MSPIKE_H5 9229 4.35 2.13 5.44 55 KHOP_HELO_FCRDNS 8911 4.33 2.46 5.26 56 LOTS_OF_MONEY 8858 7.04 10.73 5.22 57 TooManyTo_001 8843 5.55 6.24 5.21 58 XM_DK_Undo_02 8677 17.63 43.11 5.12 59 XM_H_Long_From01 8595 5.04 4.98 5.07 60 XM_B_Phish_Phrases 8534 5.38 6.08 5.03 61 MPART_ALT_DIFF 8400 5.18 5.64 4.95 62 HTML_IMAGE_RATIO_02 8374 5.55 6.81 4.94 63 RCVD_IN_VALIDITY_CERTIFIED 8334 4.03 2.22 4.91 64 XM_UncommonTLD01 8286 5.48 6.68 4.89 65 HTML_IMAGE_RATIO_04 7977 4.73 4.77 4.70 66 T_TooManySym_02 7575 3.19 0.60 4.47 67 XMNumbers 7572 3.94 2.87 4.47 68 RCVD_IN_MSPIKE_H4 7173 3.74 2.75 4.23 69 XMSubMetaSx_00 7013 4.94 6.57 4.14 70 BAYES_99 6734 14.61 36.27 3.97 71 INVALID_MSGID 6722 2.77 0.33 3.96 72 TO_MALFORMED 6442 2.55 0.01 3.80 73 TR_XM_SpammyWords4 6178 5.61 9.62 3.64 74 BAYES_80 6161 6.08 11.05 3.63 75 BOTNET_IPINHOSTNAME 6088 6.95 13.79 3.59 76 MSGID_NOFQDN1 6055 2.41 0.06 3.57 77 HTML_IMAGE_RATIO_06 6022 3.18 2.42 3.55 78 BAYES_20 5829 2.61 0.92 3.44 79 T_REMOTE_IMAGE 5326 2.74 1.92 3.14 80 MIME_CHARSET_FARAWAY 5285 2.52 1.29 3.12 81 BAYES_999 5217 11.19 27.72 3.08 82 CHARSET_FARAWAY_HEADER 5066 2.36 1.09 2.99 83 T_XMDrugObfuBody_14 4951 3.52 4.74 2.92 84 RELAYCOUNTRY_META 4904 8.87 21.05 2.89 85 MIME_HTML_MOSTLY 4744 3.03 3.50 2.80 86 MIME_QP_LONG_LINE 4723 3.31 4.39 2.79 87 XM_B_SpammyTLD 4301 3.06 4.11 2.54 88 XM_CamelCaseFrm001 4280 2.68 3.00 2.52 89 MIME_HTML_ONLY_MULTI 4124 2.59 2.91 2.43 90 BAYES_95 4071 3.74 6.46 2.40 91 HTML_IMAGE_RATIO_08 3972 2.44 2.63 2.34 92 T_TVD_MIME_NO_HEADERS 3759 1.50 0.03 2.22 93 MAILING_LIST_MULTI 3610 1.99 1.69 2.13 94 XM_PDF 3519 1.55 0.49 2.08 95 XM_Body_Dirty_Words 3307 3.60 6.96 1.95 96 TR_XM_DKIM_Undo 3290 11.69 31.53 1.94 97 T_TooManySym_03 3276 1.35 0.17 1.93 98 FROM_EXCESS_BASE64 3149 2.16 2.79 1.86 99 TR_DCC_Bayes_99 3147 10.04 26.72 1.86 100 BAYES_05 3123 1.41 0.52 1.84 101 HTML_MIME_NO_HTML_TAG 3117 1.61 1.15 1.84 102 TR_XM_PhishingBody 3103 2.70 4.47 1.83 103 TM2_M_URI_OPT_OUT 3019 1.89 2.11 1.78 104 TooManyTo_002 2936 1.41 0.77 1.73 105 TR_XM_UnparsRelay 2921 4.64 10.59 1.72 106 RCVD_IN_IADB_LISTED 2896 1.37 0.68 1.71 107 UNTRUSTED_Relay 2871 4.16 9.19 1.69 108 IN_HORDE_ADDRESS_BOOK 2815 1.14 0.09 1.66 109 XM_B_Investor 2789 2.73 4.93 1.64 110 XMStockSpam_06 2772 1.68 1.79 1.63 111 XMSexyCombo_05 2739 2.58 4.53 1.62 112 TR_XM_SpammyWords5 2660 1.91 2.61 1.57 113 TVD_RCVD_IP 2655 1.67 1.89 1.57 114 TR_XM_SpammyRelay 2605 5.78 14.41 1.54 115 RCVD_IN_IADB_SPF 2588 1.22 0.59 1.53 116 DIET_1 2551 1.44 1.32 1.50 117 XMBrknScrpt_02 2518 1.63 1.92 1.48 118 XM_ProductURIs 2509 1.46 1.42 1.48 119 TVD_SPACE_RATIO 2472 1.02 0.13 1.46 120 XM_B_URI_Unicode 2352 1.81 2.68 1.39 121 RCVD_IN_IADB_SENDERID 2349 1.10 0.53 1.39 122 XMGappySubj_01 2345 1.00 0.22 1.38 123 RCVD_IN_IADB_DK 2327 1.10 0.55 1.37 124 XM_B_Unsub2 2302 1.68 2.33 1.36 125 XM_DK_Undo_01 2183 1.21 1.06 1.29 126 XM_SendGrid 2141 1.30 1.37 1.26 127 XMGappySubj_02 2043 0.84 0.09 1.20 128 XM_B_COPY_HTML 2041 1.30 1.49 1.20 129 XMDiploma_00 2036 2.03 3.73 1.20 130 LOW_PRICE 1988 0.87 0.25 1.17 131 RCVD_IN_IADB_VOUCHED 1926 0.89 0.38 1.14 132 T_XMDrugObfuBody_08 1886 1.56 2.48 1.11 133 XM_GoogleGroups 1847 1.01 0.85 1.09 134 TR_Symld_Words 1831 1.00 0.85 1.08 135 BOTNET 1830 4.52 11.53 1.08 136 DKIM_INVALID 1782 2.09 4.20 1.05 137 XM_B_SpammyWords4 1732 1.34 2.00 1.02 138 XM_SPF_SoftFail 1724 1.57 2.69 1.02 139 TooManyTo_003 1635 0.88 0.70 0.96 140 TR_XM_Base64_M1 1606 1.00 1.10 0.95 141 TR_XM_DK_SendGrid 1600 0.97 1.03 0.94 142 URI_NOVOWEL 1592 1.35 2.19 0.94 143 XM_UB50 1591 1.50 2.65 0.94 144 SUBJ_ALL_CAPS 1588 1.25 1.88 0.94 145 XMBSHREFv2 1578 0.74 0.35 0.93 146 RELAYCOUNTRY_CA 1519 3.24 8.02 0.90 147 T_XMDrugObfuBody_00 1502 1.22 1.89 0.89 148 XMBdyGiftCard01 1473 1.11 1.61 0.87 149 RCVD_IN_IADB_OPTIN 1471 0.67 0.27 0.87 150 XM_H_PHPMailer 1434 0.77 0.61 0.85 151 T_XMHurry_00 1399 1.25 2.11 0.83 152 TooManyTo_004 1338 0.72 0.59 0.79 153 XMSolicitRefs_0 1321 0.74 0.65 0.78 154 RCVD_IN_PSBL 1299 0.96 1.37 0.77 155 HTML_TAG_BALANCE_BODY 1289 0.86 1.06 0.76 156 XMSlimDrugH 1271 0.76 0.77 0.75 157 URI_HEX 1269 1.04 1.64 0.75 158 XMPhish30 1244 1.04 1.66 0.73 159 MSGID_FROM_MTA_HEADER 1209 0.58 0.31 0.71 160 DKIM_ADSP_CUSTOM_MED 1195 0.76 0.88 0.70 161 XM_H_Long_From02 1178 0.73 0.81 0.69 162 MPART_ALT_DIFF_COUNT 1177 1.01 1.66 0.69 163 TooManyTo_005 1167 0.64 0.56 0.69 164 XMGenDplmaNmb 1150 1.25 2.41 0.68 165 TR_MetaPhish_Combo_01 1147 0.71 0.79 0.68 166 XM_OfRef6 1129 1.80 4.10 0.67 167 TR_XM_GMP_MSPIKE_UNDO2 1108 0.50 0.18 0.65 168 RCVD_IN_MSPIKE_BL 1089 3.12 8.18 0.64 169 TR_XM_MSPIKECOMBO 1089 3.12 8.18 0.64 170 XM_URI_RBL 1044 1.49 3.27 0.62 171 T_FILL_THIS_FORM_SHORT 1038 1.62 3.66 0.61 172 STY_INVIS_DIRECT 1014 0.79 1.17 0.60 173 T_TooManySym_04 966 0.39 0.03 0.57 174 XMPhish14 945 0.68 0.92 0.56 175 RCVD_IN_PBL 941 0.77 1.22 0.55 176 TR_XM_SpammyWords2 940 4.76 13.31 0.55 177 XMNoVowels 940 0.47 0.28 0.55 178 XMSubMetaI_00 933 0.71 1.03 0.55 179 URI_TRY_3LD 926 0.70 1.00 0.55 180 XMLngstWrd_00 913 0.44 0.24 0.54 181 XMBody_95 897 0.39 0.12 0.53 182 XM_B_FormFill 845 0.34 0.01 0.50 183 XMBody_17 840 1.39 3.21 0.50 184 HTML_FONT_FACE_BAD 839 0.57 0.71 0.49 185 RCVD_IN_MSPIKE_L3 806 1.40 3.29 0.48 186 DKIM_ADSP_NXDOMAIN 793 1.64 4.04 0.47 187 XMHTML_After_End 783 0.50 0.56 0.46 188 AD_PREFS 782 0.35 0.12 0.46 189 HTML_EXTRA_CLOSE 782 0.31 0.01 0.46 190 XMLngstWrd_01 779 0.37 0.18 0.46 191 TM2_M_OBFU_COMMENT 778 0.65 1.05 0.46 192 RCVD_IN_BL_SPAMCOP_NET 773 3.70 10.30 0.46 193 FORGED_GMAIL_RCVD 757 0.53 0.70 0.45 194 RELAYCOUNTRY_AU 755 1.25 2.89 0.45 195 XM_S_SubURI 752 0.32 0.06 0.44 196 NML_ADSP_CUSTOM_MED 736 0.53 0.73 0.43 197 XMSubMetaSxObfu_03 735 0.45 0.48 0.43 198 SUBJ_DOLLARS 721 0.44 0.48 0.43 199 PP_MIME_FAKE_ASCII_TEXT 703 0.38 0.31 0.41 200 XMSolicitRefs_4 697 0.33 0.16 0.41 ----------------------------------------------------------------------