Email: 254356 Autolearn: 0 AvgScore: 5.57 AvgScanTime: 1.41 sec Spam: 89842 Autolearn: 0 AvgScore: 13.98 AvgScanTime: 1.59 sec Ham: 164514 Autolearn: 0 AvgScore: 0.97 AvgScanTime: 1.32 sec Time Spent Running SA: 99.95 hours Time Spent Processing Spam: 39.67 hours Time Spent Processing Ham: 60.28 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 86000 87.96 95.72 83.72 2 DKIM_SIGNED 83753 84.02 93.22 79.00 3 XM_DK_Pass 79844 82.07 88.87 78.36 4 DKIM_VALID 79570 81.65 88.57 77.88 5 XM_B_Unicode 78183 77.80 87.02 72.76 6 RELAYCOUNTRY_US 72928 81.70 81.17 81.99 7 DCC_CHECK 70873 62.89 78.89 54.16 8 XMListUnsubscribeExists 64466 60.45 71.75 54.27 9 DKIM_VALID_AU 63288 68.67 70.44 67.71 10 XM_B_SpammyWords 62444 55.84 69.50 48.37 11 XM_B_Unicode3 46973 47.87 52.28 45.46 12 LOC_TINY_FONT_1 46105 41.39 51.32 35.96 13 XM_DK_Undo_02 40126 20.26 44.66 6.93 14 XM_B_SpammyWords2 37868 28.71 42.15 21.37 15 HTML_FONT_LOW_CONTRAST 32959 33.85 36.69 32.31 16 BAYES_50 32753 52.35 36.46 61.03 17 FVGT_m_MULTI_ODD 30750 29.13 34.23 26.34 18 BAYES_99 30568 15.61 34.02 5.55 19 DKIM_VALID_EF 28734 31.66 31.98 31.48 20 TR_XM_DKIM_Undo 28560 13.33 31.79 3.25 21 T_KAM_HTML_FONT_INVALID 25450 24.16 28.33 21.89 22 MIME_HTML_ONLY 24668 23.21 27.46 20.89 23 BAYES_999 23635 12.16 26.31 4.43 24 TR_XM_DK_Unsub 22588 18.99 25.14 15.63 25 TR_DCC_Bayes_99 22090 10.56 24.59 2.91 26 XMSubLong 20294 23.90 22.59 24.62 27 XM_Multi_Part_URI 18789 17.78 20.91 16.07 28 DCC_CHECK_NEGATIVE 18574 36.94 20.67 45.82 29 RCVD_IN_MSPIKE_H2 18077 17.48 20.12 16.04 30 RELAYCOUNTRY_META 17267 8.76 19.22 3.05 31 T_TM2_M_HEADER_IN_MSG 16980 20.94 18.90 22.05 32 UNPARSEABLE_RELAY 16569 15.35 18.44 13.66 33 XM_B_Unsub 16030 12.95 17.84 10.28 34 TR_MAX_INTL_RELAY 15610 10.32 17.37 6.47 35 TR_XM_BayesUnsub 15470 11.40 17.22 8.22 36 XM_B_SpammyWords3 13517 9.61 15.05 6.64 37 TR_XM_SpammyRelay 13470 6.50 14.99 1.86 38 RCVD_IN_BL_SPAMCOP_NET 12222 5.31 13.60 0.78 39 LOTS_OF_MONEY 11225 8.41 12.49 6.18 40 TR_XM_SpammyWords2 10981 4.78 12.22 0.71 41 TR_XM_SpammyWords4 10320 7.01 11.49 4.56 42 XM_Evil_Numbers_Gen 9781 10.34 10.89 10.04 43 BOTNET_IPINHOSTNAME 9604 6.58 10.69 4.33 44 BAYES_80 9511 6.29 10.59 3.94 45 TR_XM_UnparsRelay 9204 5.08 10.24 2.26 46 XM_Body_Dirty_Words 8765 5.08 9.76 2.53 47 RELAYCOUNTRY_CA 8670 4.00 9.65 0.91 48 FSL_BULK_SIG 8223 11.74 9.15 13.16 49 BAYES_60 7821 8.01 8.71 7.63 50 RCVD_IN_MSPIKE_WL 7645 14.54 8.51 17.83 51 XMSubMetaSx_00 7537 5.45 8.39 3.85 52 BOTNET 7480 3.83 8.33 1.37 53 MPART_ALT_DIFF 7212 7.16 8.03 6.68 54 XM_B_Phish_Phrases 6820 5.81 7.59 4.83 55 HTML_IMAGE_RATIO_02 6073 5.58 6.76 4.93 56 BAYES_95 5782 3.91 6.44 2.53 57 LotsOfNums_01 5767 6.75 6.42 6.93 58 HTML_IMAGE_RATIO_04 5614 5.46 6.25 5.03 59 XM_H_GMP 5463 6.17 6.08 6.22 60 XM_UncommonTLD01 5376 5.33 5.98 4.98 61 MIME_HTML_MOSTLY 5340 4.62 5.94 3.89 62 UNTRUSTED_Relay 4972 3.11 5.53 1.78 63 TR_XM_SPAMCOP 4959 2.04 5.52 0.14 64 XM_B_Investor 4875 3.02 5.43 1.70 65 XM_H_Long_From01 4616 5.84 5.14 6.22 66 USER_IN_DEF_DKIM_WL 4556 14.36 5.07 19.43 67 TR_XM_MSPIKECOMBO 4411 2.03 4.91 0.45 68 RCVD_IN_MSPIKE_BL 4411 2.03 4.91 0.45 69 XM_OfRef6 4336 2.24 4.83 0.83 70 XMSexyCombo_05 4254 2.50 4.73 1.29 71 DKIM_INVALID 4183 2.37 4.66 1.13 72 T_XMDrugObfuBody_14 4180 2.76 4.65 1.73 73 XMStrtUSub 4030 5.89 4.49 6.66 74 TR_XM_PhishingBody 4015 2.64 4.47 1.65 75 XM_B_PhoneNumber 3993 5.73 4.44 6.43 76 XMStockSpam_06 3681 2.50 4.10 1.63 77 XM_CamelCaseFrm001 3591 3.01 4.00 2.47 78 TM2_M_VERY_LONG_WORD 3495 2.29 3.89 1.42 79 TR_XM_SpammyWords5 3477 2.61 3.87 1.92 80 RCVD_IN_MSPIKE_H3 3441 6.40 3.83 7.81 81 T_FILL_THIS_FORM_SHORT 3434 1.81 3.82 0.71 82 XM_B_SpammyTLD 3398 3.30 3.78 3.03 83 T_TooManySym_01 3292 6.23 3.66 7.63 84 TR_XM_SpammyWords3 3233 1.40 3.60 0.20 85 XM_URI_RBL 3110 1.52 3.46 0.46 86 TooManyTo_001 3067 5.14 3.41 6.09 87 RCVD_IN_VALIDITY_SAFE 2974 4.48 3.31 5.12 88 TR_XM_NoHeaderRelay 2928 1.24 3.26 0.14 89 MIME_HTML_ONLY_MULTI 2924 3.28 3.25 3.29 90 XM_B_Unsub2 2757 1.96 3.07 1.35 91 T_XMDrugObfuBody_00 2718 1.48 3.03 0.64 92 XMNumbers 2615 4.22 2.91 4.93 93 HK_RANDOM_REPLYTO 2464 1.08 2.74 0.18 94 FROM_EXCESS_BASE64 2457 2.23 2.73 1.95 95 XMSexyCombo_01 2447 1.05 2.72 0.14 96 RCVD_IN_MSPIKE_L3 2443 1.18 2.72 0.33 97 XMDiploma_00 2443 2.19 2.72 1.90 98 RCVD_IN_VALIDITY_CERTIFIED 2416 3.49 2.69 3.93 99 HTML_IMAGE_RATIO_08 2395 2.48 2.67 2.38 100 XMBody_17 2391 1.33 2.66 0.61 101 XM_SPF_SoftFail 2336 1.50 2.60 0.90 102 HTML_IMAGE_RATIO_06 2287 3.13 2.55 3.45 103 RELAYCOUNTRY_AU 2253 1.29 2.51 0.62 104 RCVD_IN_MSPIKE_H4 2251 3.51 2.51 4.07 105 SUBJ_ALL_CAPS 2226 1.74 2.48 1.34 106 XM_B_SpammyWords4 2219 1.35 2.47 0.74 107 TR_XM_INV_DKIM 2120 0.85 2.36 0.03 108 T_XMHurry_00 2071 1.45 2.31 0.98 109 SpammyFromTLD_02 2048 1.10 2.28 0.46 110 T_XMDrugObfuBody_08 2033 1.69 2.26 1.38 111 XMSubMetaSxObfu_03 1996 1.07 2.22 0.45 112 XM_UB50 1959 1.44 2.18 1.04 113 XMBdyGiftCard01 1958 1.08 2.18 0.48 114 RCVD_IN_MSPIKE_H5 1953 4.62 2.17 5.96 115 XMBrknScrpt_02 1916 1.51 2.13 1.17 116 XM_B_URI_Unicode 1908 1.72 2.12 1.50 117 TR_XM_INTL_Spamhaus 1899 0.81 2.11 0.11 118 TM2_M_URI_OPT_OUT 1893 1.86 2.11 1.73 119 XM_HighProb1 1865 0.73 2.08 0.00 120 STY_INVIS_DIRECT 1760 1.03 1.96 0.52 121 RCVD_IN_VALIDITY_RPBL 1758 0.70 1.96 0.01 122 RCVD_IN_XBL 1755 0.69 1.95 0.01 123 XMSubMetaSx_01 1745 0.77 1.94 0.14 124 SpammyFromTLD_01 1712 0.89 1.91 0.33 125 MAILING_LIST_MULTI 1688 2.10 1.88 2.22 126 XMSexyCombo_02 1678 0.67 1.87 0.01 127 DIET_1 1645 1.04 1.83 0.61 128 XMPhish30 1588 1.09 1.77 0.72 129 MIME_QP_LONG_LINE 1551 2.83 1.73 3.44 130 T_REMOTE_IMAGE 1538 3.13 1.71 3.90 131 URI_NOVOWEL 1532 1.47 1.71 1.34 132 TR_XM_MSPIKECOMBO2 1526 0.62 1.70 0.03 133 XM_B_Phish66 1507 0.81 1.68 0.34 134 TR_LOTS_OF_MONEY3 1474 0.80 1.64 0.34 135 RCVD_IN_MSPIKE_L4 1417 0.61 1.58 0.08 136 XM_H_Long_From02 1406 1.04 1.56 0.75 137 RCVD_IN_SBL_CSS 1369 0.56 1.52 0.03 138 MultiRelay_CC 1349 0.59 1.50 0.09 139 XM_B_COPY_HTML 1313 1.09 1.46 0.89 140 KHOP_HELO_FCRDNS 1300 1.24 1.45 1.13 141 XMGenDplmaNmb 1290 1.09 1.44 0.89 142 SHOPIFY_IMG_NOT_RCVD_SFY 1289 0.73 1.43 0.34 143 HTML_IMAGE_ONLY_20 1281 0.79 1.43 0.45 144 BAYES_40 1272 3.86 1.42 5.19 145 ALL_TRUSTED 1225 9.95 1.36 14.64 146 TR_XM_GMP_BULK_SIG 1223 0.55 1.36 0.11 147 TR_XM_PHPForged 1206 0.65 1.34 0.28 148 MPART_ALT_DIFF_COUNT 1193 0.84 1.33 0.58 149 SH_BODYURI_REVERSE_SBL 1176 0.47 1.31 0.00 150 URIBL_SBL 1176 0.47 1.31 0.01 151 TR_XM_PHPDW 1176 0.64 1.31 0.28 152 URIBL_SBL_A 1176 0.47 1.31 0.01 153 TR_XM_FormFill2 1172 0.64 1.30 0.28 154 XM_H_PHPOS 1160 0.63 1.29 0.27 155 XM_SendGrid 1139 1.33 1.27 1.36 156 TR_Mismatch_TLD_02 1119 0.48 1.25 0.06 157 URI_TRY_3LD 1113 0.77 1.24 0.52 158 RDNS_DYNAMIC 1101 0.60 1.23 0.27 159 RCVD_IN_PSBL 1089 0.92 1.21 0.77 160 XM_ProductURIs 1085 1.10 1.21 1.04 161 BOTNET_NORDNS 1079 0.43 1.20 0.01 162 PDS_RDNS_DYNAMIC_FP 1074 0.44 1.20 0.03 163 HTTPS_HTTP_MISMATCH 1040 0.71 1.16 0.46 164 XM_B_DNDMA 1038 0.90 1.16 0.76 165 XM_DK_Undo_01 1019 1.42 1.13 1.57 166 TR_XM_FormFill 1018 0.40 1.13 0.00 167 TVD_RCVD_IP 1017 1.41 1.13 1.56 168 HTML_TAG_BALANCE_BODY 998 0.74 1.11 0.53 169 URI_HEX 986 1.14 1.10 1.17 170 DKIM_ADSP_NXDOMAIN 974 0.71 1.08 0.51 171 DKIM_ADSP_CUSTOM_MED 964 0.82 1.07 0.68 172 TR_XM_MaxSPIKE 964 0.40 1.07 0.03 173 XM_DIRTYINTL 945 0.40 1.05 0.05 174 TR_XM_InvalidRelay 929 0.37 1.03 0.01 175 XM_UB99 914 0.36 1.02 0.00 176 XMSubMetaI_00 906 0.71 1.01 0.55 177 RELAYCOUNTRY_IN 901 0.36 1.00 0.02 178 BAYES_20 893 2.51 0.99 3.34 179 HTML_FONT_TINY_NORDNS 882 0.37 0.98 0.04 180 RCVD_IN_PBL 879 0.73 0.98 0.59 181 XMBody_78 878 0.51 0.98 0.25 182 TM2_M_OBFU_COMMENT 868 0.57 0.97 0.36 183 HELO_DYNAMIC_SPLIT_IP 861 0.34 0.96 0.00 184 XMClaimOffer 861 0.74 0.96 0.62 185 RELAYCOUNTRY_FR 855 0.48 0.95 0.22 186 XMReplyNow 855 0.44 0.95 0.17 187 TR_XM_DK_SendGrid 850 0.97 0.95 0.98 188 XMHTMLBadTable_001 848 0.54 0.94 0.33 189 HTML_MIME_NO_HTML_TAG 841 1.57 0.94 1.92 190 TR_XM_Base64_L1 834 0.38 0.93 0.08 191 XMGppyBdWords 828 0.40 0.92 0.12 192 NML_ADSP_CUSTOM_MED 816 0.60 0.91 0.43 193 TR_XM_Base64_M1 806 0.77 0.90 0.70 194 LongTLD 804 0.52 0.89 0.32 195 XM_UB60 790 0.37 0.88 0.08 196 XM_UB80 782 0.32 0.87 0.02 197 FONT_INVIS_LONG_LINE 780 0.34 0.87 0.05 198 FORGED_GMAIL_RCVD 778 0.57 0.87 0.41 199 HTML_FONT_FACE_BAD 776 0.62 0.86 0.49 200 XMSlimDrugH 774 0.60 0.86 0.46 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 137729 87.96 95.72 83.72 2 RELAYCOUNTRY_US 134883 81.70 81.17 81.99 3 DKIM_SIGNED 129969 84.02 93.22 79.00 4 XM_DK_Pass 128910 82.07 88.87 78.36 5 DKIM_VALID 128117 81.65 88.57 77.88 6 XM_B_Unicode 119696 77.80 87.02 72.76 7 DKIM_VALID_AU 111385 68.67 70.44 67.71 8 BAYES_50 100397 52.35 36.46 61.03 9 XMListUnsubscribeExists 89283 60.45 71.75 54.27 10 DCC_CHECK 89103 62.89 78.89 54.16 11 XM_B_SpammyWords 79581 55.84 69.50 48.37 12 DCC_CHECK_NEGATIVE 75375 36.94 20.67 45.82 13 XM_B_Unicode3 74786 47.87 52.28 45.46 14 LOC_TINY_FONT_1 59163 41.39 51.32 35.96 15 HTML_FONT_LOW_CONTRAST 53150 33.85 36.69 32.31 16 DKIM_VALID_EF 51786 31.66 31.98 31.48 17 FVGT_m_MULTI_ODD 43334 29.13 34.23 26.34 18 XMSubLong 40496 23.90 22.59 24.62 19 T_TM2_M_HEADER_IN_MSG 36282 20.94 18.90 22.05 20 T_KAM_HTML_FONT_INVALID 36006 24.16 28.33 21.89 21 XM_B_SpammyWords2 35163 28.71 42.15 21.37 22 MIME_HTML_ONLY 34371 23.21 27.46 20.89 23 USER_IN_DEF_DKIM_WL 31967 14.36 5.07 19.43 24 RCVD_IN_MSPIKE_WL 29336 14.54 8.51 17.83 25 XM_Multi_Part_URI 26445 17.78 20.91 16.07 26 RCVD_IN_MSPIKE_H2 26395 17.48 20.12 16.04 27 TR_XM_DK_Unsub 25714 18.99 25.14 15.63 28 ALL_TRUSTED 24087 9.95 1.36 14.64 29 UNPARSEABLE_RELAY 22475 15.35 18.44 13.66 30 FSL_BULK_SIG 21650 11.74 9.15 13.16 31 XM_B_Unsub 16917 12.95 17.84 10.28 32 XM_Evil_Numbers_Gen 16520 10.34 10.89 10.04 33 XM_DKIMWhitelistDomains 16150 6.35 0.01 9.82 34 BAYES_00 14905 6.00 0.39 9.06 35 TR_XM_BayesUnsub 13519 11.40 17.22 8.22 36 RCVD_IN_MSPIKE_H3 12843 6.40 3.83 7.81 37 T_TooManySym_01 12551 6.23 3.66 7.63 38 BAYES_60 12548 8.01 8.71 7.63 39 TR_XM_DK_Bayes 11960 4.81 0.29 7.27 40 TR_XM_DK_Bayes1 11888 4.78 0.29 7.23 41 XM_DK_Undo_02 11396 20.26 44.66 6.93 42 LotsOfNums_01 11394 6.75 6.42 6.93 43 MPART_ALT_DIFF 10994 7.16 8.03 6.68 44 XMStrtUSub 10960 5.89 4.49 6.66 45 XM_B_SpammyWords3 10923 9.61 15.05 6.64 46 TR_MAX_INTL_RELAY 10645 10.32 17.37 6.47 47 XM_B_PhoneNumber 10582 5.73 4.44 6.43 48 TR_XM_DK_Bayes2 10392 4.16 0.22 6.32 49 XM_H_Long_From01 10238 5.84 5.14 6.22 50 XM_H_GMP 10226 6.17 6.08 6.22 51 LOTS_OF_MONEY 10164 8.41 12.49 6.18 52 TooManyTo_001 10017 5.14 3.41 6.09 53 RCVD_IN_MSPIKE_H5 9805 4.62 2.17 5.96 54 BAYES_99 9133 15.61 34.02 5.55 55 BAYES_40 8542 3.86 1.42 5.19 56 RCVD_IN_VALIDITY_SAFE 8426 4.48 3.31 5.12 57 HTML_IMAGE_RATIO_04 8275 5.46 6.25 5.03 58 XM_UncommonTLD01 8188 5.33 5.98 4.98 59 HTML_IMAGE_RATIO_02 8114 5.58 6.76 4.93 60 XMNumbers 8113 4.22 2.91 4.93 61 XM_B_Phish_Phrases 7949 5.81 7.59 4.83 62 TR_XM_SpammyWords4 7499 7.01 11.49 4.56 63 T_TooManySym_02 7410 3.11 0.55 4.50 64 BAYES_999 7294 12.16 26.31 4.43 65 BOTNET_IPINHOSTNAME 7123 6.58 10.69 4.33 66 INVALID_MSGID 6830 2.80 0.32 4.15 67 ANY_BOUNCE_MESSAGE 6731 2.84 0.55 4.09 68 BOUNCE_MESSAGE 6730 2.84 0.55 4.09 69 RCVD_IN_MSPIKE_H4 6688 3.51 2.51 4.07 70 TO_MALFORMED 6511 2.56 0.01 3.96 71 BAYES_80 6484 6.29 10.59 3.94 72 RCVD_IN_VALIDITY_CERTIFIED 6462 3.49 2.69 3.93 73 T_REMOTE_IMAGE 6414 3.13 1.71 3.90 74 MIME_HTML_MOSTLY 6403 4.62 5.94 3.89 75 XMSubMetaSx_00 6337 5.45 8.39 3.85 76 MSGID_NOFQDN1 5975 2.35 0.01 3.63 77 HTML_IMAGE_RATIO_06 5676 3.13 2.55 3.45 78 MIME_QP_LONG_LINE 5655 2.83 1.73 3.44 79 BAYES_20 5498 2.51 0.99 3.34 80 MIME_HTML_ONLY_MULTI 5417 3.28 3.25 3.29 81 TR_XM_DKIM_Undo 5343 13.33 31.79 3.25 82 RELAYCOUNTRY_META 5012 8.76 19.22 3.05 83 XM_B_SpammyTLD 4987 3.30 3.78 3.03 84 TR_DCC_Bayes_99 4782 10.56 24.59 2.91 85 XM_PDF 4340 1.88 0.49 2.64 86 BAYES_95 4160 3.91 6.44 2.53 87 XM_Body_Dirty_Words 4159 5.08 9.76 2.53 88 XM_CamelCaseFrm001 4065 3.01 4.00 2.47 89 HTML_IMAGE_RATIO_08 3920 2.48 2.67 2.38 90 RCVD_IN_IADB_LISTED 3789 1.73 0.67 2.30 91 TR_XM_UnparsRelay 3723 5.08 10.24 2.26 92 MAILING_LIST_MULTI 3652 2.10 1.88 2.22 93 RCVD_IN_IADB_SPF 3345 1.52 0.57 2.03 94 FROM_EXCESS_BASE64 3206 2.23 2.73 1.95 95 HTML_MIME_NO_HTML_TAG 3161 1.57 0.94 1.92 96 TooManyTo_002 3153 1.51 0.77 1.92 97 TR_XM_SpammyWords5 3151 2.61 3.87 1.92 98 XMDiploma_00 3133 2.19 2.72 1.90 99 T_TooManySym_03 3080 1.25 0.12 1.87 100 TR_XM_SpammyRelay 3065 6.50 14.99 1.86 101 RCVD_IN_IADB_SENDERID 3002 1.36 0.50 1.82 102 XMGappySubj_01 2960 1.25 0.24 1.80 103 UNTRUSTED_Relay 2935 3.11 5.53 1.78 104 RCVD_IN_IADB_DK 2886 1.32 0.52 1.75 105 T_XMDrugObfuBody_14 2850 2.76 4.65 1.73 106 BAYES_05 2842 1.32 0.58 1.73 107 TM2_M_URI_OPT_OUT 2841 1.86 2.11 1.73 108 XM_B_Investor 2802 3.02 5.43 1.70 109 IN_HORDE_ADDRESS_BOOK 2766 1.13 0.11 1.68 110 TR_XM_PhishingBody 2712 2.64 4.47 1.65 111 RCVD_IN_IADB_VOUCHED 2693 1.21 0.43 1.64 112 XMStockSpam_06 2674 2.50 4.10 1.63 113 XM_DK_Undo_01 2587 1.42 1.13 1.57 114 TVD_RCVD_IP 2567 1.41 1.13 1.56 115 XM_B_URI_Unicode 2467 1.72 2.12 1.50 116 TVD_SPACE_RATIO 2419 1.01 0.15 1.47 117 TM2_M_VERY_LONG_WORD 2331 2.29 3.89 1.42 118 T_XMDrugObfuBody_08 2277 1.69 2.26 1.38 119 BOTNET 2254 3.83 8.33 1.37 120 XM_SendGrid 2234 1.33 1.27 1.36 121 T_TVD_MIME_NO_HEADERS 2227 0.89 0.04 1.35 122 XM_B_Unsub2 2222 1.96 3.07 1.35 123 URI_NOVOWEL 2208 1.47 1.71 1.34 124 SUBJ_ALL_CAPS 2197 1.74 2.48 1.34 125 XMSexyCombo_05 2117 2.50 4.73 1.29 126 XMGappySubj_02 2046 0.85 0.14 1.24 127 XM_GoogleGroups 1944 1.04 0.78 1.18 128 RCVD_IN_IADB_OPTIN 1938 0.87 0.32 1.18 129 URI_HEX 1926 1.14 1.10 1.17 130 XMBrknScrpt_02 1922 1.51 2.13 1.17 131 KHOP_HELO_FCRDNS 1865 1.24 1.45 1.13 132 DKIM_INVALID 1852 2.37 4.66 1.13 133 HTML_EXTRA_CLOSE 1720 0.68 0.02 1.05 134 XM_UB50 1715 1.44 2.18 1.04 135 XM_ProductURIs 1709 1.10 1.21 1.04 136 LOW_PRICE 1643 0.72 0.20 1.00 137 XMBSHREFv2 1641 0.77 0.34 1.00 138 TR_XM_DK_SendGrid 1620 0.97 0.95 0.98 139 T_XMHurry_00 1613 1.45 2.31 0.98 140 TR_Symld_Words 1595 0.87 0.70 0.97 141 TooManyTo_003 1533 0.84 0.67 0.93 142 RELAYCOUNTRY_CA 1502 4.00 9.65 0.91 143 XM_SPF_SoftFail 1486 1.50 2.60 0.90 144 XMGenDplmaNmb 1470 1.09 1.44 0.89 145 XM_B_COPY_HTML 1465 1.09 1.46 0.89 146 TR_MetaPhish_Combo_01 1405 0.82 0.76 0.85 147 XM_OfRef6 1372 2.24 4.83 0.83 148 RCVD_IN_BL_SPAMCOP_NET 1280 5.31 13.60 0.78 149 RCVD_IN_PSBL 1263 0.92 1.21 0.77 150 XM_B_DNDMA 1250 0.90 1.16 0.76 151 XM_B_FormFill 1238 0.50 0.04 0.75 152 XM_H_Long_From02 1235 1.04 1.56 0.75 153 TooManyTo_004 1235 0.69 0.58 0.75 154 XM_B_SpammyWords4 1211 1.35 2.47 0.74 155 XMPhish30 1185 1.09 1.77 0.72 156 XM_H_PHPMailer 1174 0.63 0.47 0.71 157 T_FILL_THIS_FORM_SHORT 1167 1.81 3.82 0.71 158 TR_XM_SpammyWords2 1165 4.78 12.22 0.71 159 TR_XM_Base64_M1 1156 0.77 0.90 0.70 160 DKIM_ADSP_CUSTOM_MED 1121 0.82 1.07 0.68 161 TR_XM_GMP_MSPIKE_UNDO2 1088 0.50 0.19 0.66 162 T_XMDrugObfuBody_00 1058 1.48 3.03 0.64 163 XMClaimOffer 1021 0.74 0.96 0.62 164 RELAYCOUNTRY_AU 1016 1.29 2.51 0.62 165 TooManyTo_005 1003 0.59 0.55 0.61 166 DIET_1 999 1.04 1.83 0.61 167 XMBody_17 996 1.33 2.66 0.61 168 RCVD_IN_PBL 968 0.73 0.98 0.59 169 SUBJ_DOLLARS 959 0.61 0.66 0.58 170 FROM_GOV_DKIM_AU 957 0.40 0.07 0.58 171 MPART_ALT_DIFF_COUNT 955 0.84 1.33 0.58 172 THIS_AD 953 0.67 0.85 0.58 173 XM_TLDProd2 931 0.50 0.38 0.57 174 XMSubMetaI_00 905 0.71 1.01 0.55 175 XMNoVowels 890 0.55 0.56 0.54 176 HTML_TAG_BALANCE_BODY 872 0.74 1.11 0.53 177 STY_INVIS_DIRECT 858 1.03 1.96 0.52 178 URI_TRY_3LD 857 0.77 1.24 0.52 179 PLING_QUERY 856 0.58 0.69 0.52 180 T_TooManySym_04 853 0.34 0.02 0.52 181 XMSolicitRefs_0 842 0.57 0.67 0.51 182 DKIM_ADSP_NXDOMAIN 832 0.71 1.08 0.51 183 XMBody_95 824 0.39 0.20 0.50 184 HTML_FONT_FACE_BAD 804 0.62 0.86 0.49 185 XMHTML_After_End 801 0.51 0.56 0.49 186 XMBdyGiftCard01 793 1.08 2.18 0.48 187 XM_S_SubURI 780 0.32 0.05 0.47 188 NO_DNS_FOR_FROM 770 0.50 0.55 0.47 189 XM_ShortIntro_01 764 0.42 0.35 0.46 190 HTTPS_HTTP_MISMATCH 764 0.71 1.16 0.46 191 XM_URI_RBL 761 1.52 3.46 0.46 192 XMSlimDrugH 761 0.60 0.86 0.46 193 SpammyFromTLD_02 760 1.10 2.28 0.46 194 RCVD_IN_MSPIKE_BL 743 2.03 4.91 0.45 195 TR_XM_MSPIKECOMBO 743 2.03 4.91 0.45 196 HTML_IMAGE_ONLY_20 741 0.79 1.43 0.45 197 MSGID_FROM_MTA_HEADER 739 0.35 0.16 0.45 198 FONT_INVIS_MSGID 738 0.34 0.14 0.45 199 XMSubMetaSxObfu_03 734 1.07 2.22 0.45 200 XMLngstWrd_00 713 0.37 0.24 0.43 ----------------------------------------------------------------------