Email: 276790 Autolearn: 0 AvgScore: 4.97 AvgScanTime: 1.31 sec Spam: 93988 Autolearn: 0 AvgScore: 13.41 AvgScanTime: 1.36 sec Ham: 182802 Autolearn: 0 AvgScore: 0.63 AvgScanTime: 1.28 sec Time Spent Running SA: 100.36 hours Time Spent Processing Spam: 35.44 hours Time Spent Processing Ham: 64.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 90097 88.25 95.86 84.33 2 XM_B_Unicode 77151 74.19 82.09 70.13 3 DCC_CHECK 75809 59.70 80.66 48.92 4 DKIM_SIGNED 72991 71.09 77.66 67.71 5 XM_DK_Pass 69517 69.44 73.96 67.12 6 DKIM_VALID 69173 69.02 73.60 66.67 7 RELAYCOUNTRY_US 63343 77.75 67.39 83.07 8 XMListUnsubscribeExists 57079 52.29 60.73 47.95 9 DKIM_VALID_AU 55036 58.28 58.56 58.14 10 XM_B_SpammyWords 54885 51.09 58.40 47.34 11 XM_B_Unicode3 52265 50.26 55.61 47.51 12 LOC_TINY_FONT_1 39997 35.24 42.56 31.48 13 BAYES_50 38518 56.35 40.98 64.24 14 MIME_HTML_ONLY 37279 25.61 39.66 18.39 15 HTML_FONT_LOW_CONTRAST 37042 40.32 39.41 40.79 16 XM_DK_Undo_02 33715 15.91 35.87 5.65 17 XM_B_SpammyWords2 31786 23.87 33.82 18.75 18 BAYES_99 27432 12.94 29.19 4.58 19 FVGT_m_MULTI_ODD 26902 25.60 28.62 24.05 20 XMSubLong 25627 22.98 27.27 20.77 21 DKIM_VALID_EF 25470 26.44 27.10 26.10 22 TR_XM_DKIM_Undo 24403 10.34 25.96 2.31 23 T_KAM_HTML_FONT_INVALID 22109 20.08 23.52 18.32 24 FSL_BULK_SIG 20437 15.02 21.74 11.56 25 BAYES_999 20368 9.77 21.67 3.66 26 TR_XM_DK_Unsub 19891 15.75 21.16 12.97 27 TR_DCC_Bayes_99 19644 8.74 20.90 2.48 28 XM_UncommonTLD01 19571 10.32 20.82 4.92 29 DCC_CHECK_NEGATIVE 17708 40.11 18.84 51.05 30 XM_Multi_Part_URI 17363 15.95 18.47 14.66 31 TR_MAX_INTL_RELAY 17105 9.71 18.20 5.34 32 ALL_TRUSTED 16163 14.79 17.20 13.55 33 RCVD_IN_MSPIKE_H2 16103 14.96 17.13 13.84 34 RELAYCOUNTRY_META 15361 7.46 16.34 2.89 35 T_TM2_M_HEADER_IN_MSG 15312 25.34 16.29 30.00 36 T_HTML_ATTACH 15075 5.68 16.04 0.35 37 TR_XM_HtmlAttach 14872 5.59 15.82 0.33 38 T_OBFU_HTML_ATTACH 14872 5.59 15.82 0.33 39 UNPARSEABLE_RELAY 14304 13.19 15.22 12.14 40 XM_B_Unsub 13358 10.16 14.21 8.07 41 XM_B_SpammyWords3 13022 8.53 13.85 5.79 42 TR_XM_BayesUnsub 12855 8.77 13.68 6.25 43 TR_XM_SpammyRelay 11755 5.12 12.51 1.32 44 BAYES_80 9893 5.69 10.53 3.20 45 RCVD_IN_BL_SPAMCOP_NET 9737 3.85 10.36 0.51 46 TR_XM_SpammyWords2 9270 3.80 9.86 0.68 47 TR_XM_UnparsRelay 8273 4.04 8.80 1.60 48 LOTS_OF_MONEY 8239 6.19 8.77 4.86 49 BOTNET_IPINHOSTNAME 8214 5.41 8.74 3.70 50 BAYES_60 8080 7.16 8.60 6.43 51 FROM_EXCESS_BASE64 7439 4.04 7.91 2.05 52 TR_XM_SpammyWords4 7306 4.91 7.77 3.44 53 RELAYCOUNTRY_CA 7249 3.16 7.71 0.83 54 XM_Evil_Numbers_Gen 7210 12.19 7.67 14.51 55 RCVD_IN_MSPIKE_WL 7103 11.86 7.56 14.08 56 BAYES_95 6886 3.90 7.33 2.14 57 BOTNET 6523 3.22 6.94 1.31 58 XM_Body_Dirty_Words 5956 4.26 6.34 3.19 59 TR_Symld_Words 5872 2.84 6.25 1.09 60 HTML_IMAGE_RATIO_02 5831 5.29 6.20 4.82 61 LotsOfNums_01 5761 11.63 6.13 14.45 62 XM_B_Phish_Phrases 5398 4.67 5.74 4.11 63 XMSubMetaSx_00 5125 3.98 5.45 3.22 64 XM_H_GMP 4971 5.68 5.29 5.89 65 UNTRUSTED_Relay 4877 3.03 5.19 1.93 66 MPART_ALT_DIFF 4462 4.91 4.75 4.99 67 TR_XM_PhishingBody 4437 2.76 4.72 1.75 68 T_XMDrugObfuBody_14 4396 2.61 4.68 1.54 69 XM_B_Investor 4265 2.34 4.54 1.22 70 XM_H_Long_From01 4004 4.80 4.26 5.08 71 RCVD_IN_MSPIKE_BL 3974 1.74 4.23 0.46 72 TR_XM_MSPIKECOMBO 3969 1.74 4.22 0.46 73 XMSexyCombo_05 3936 2.24 4.19 1.23 74 TR_XM_SPAMCOP 3910 1.48 4.16 0.10 75 DKIM_INVALID 3818 2.06 4.06 1.03 76 T_FILL_THIS_FORM_SHORT 3814 2.01 4.06 0.95 77 XMStrtUSub 3748 4.80 3.99 5.22 78 XM_B_SpammyTLD 3618 2.88 3.85 2.38 79 HTML_IMAGE_RATIO_04 3553 3.85 3.78 3.89 80 XM_OfRef6 3409 1.67 3.63 0.66 81 TR_XM_SpammyWords5 3387 2.16 3.60 1.42 82 XM_B_PhoneNumber 3304 4.66 3.52 5.24 83 RCVD_IN_MSPIKE_H3 3217 5.29 3.42 6.26 84 TooManyTo_001 3080 4.76 3.28 5.52 85 MIME_HTML_MOSTLY 3024 2.98 3.22 2.85 86 TR_XM_SpammyWords3 2906 1.23 3.09 0.27 87 XM_CamelCaseFrm001 2896 2.40 3.08 2.05 88 TM2_M_VERY_LONG_WORD 2846 9.01 3.03 12.09 89 XM_URI_RBL 2843 1.38 3.02 0.54 90 XMNumbers 2782 4.05 2.96 4.61 91 TR_XM_NoHeaderRelay 2670 1.04 2.84 0.11 92 T_TooManySym_01 2634 5.83 2.80 7.39 93 MIME_HTML_ONLY_MULTI 2555 2.66 2.72 2.63 94 XM_B_SpammyWords4 2547 1.50 2.71 0.88 95 HTML_IMAGE_RATIO_08 2481 2.41 2.64 2.30 96 USER_IN_DEF_DKIM_WL 2423 12.77 2.58 18.01 97 XMBody_17 2405 1.12 2.56 0.38 98 XM_B_Unsub2 2388 1.62 2.54 1.15 99 RCVD_IN_MSPIKE_L3 2365 1.11 2.52 0.38 100 RELAYCOUNTRY_AU 2306 1.24 2.45 0.62 101 SUBJ_ALL_CAPS 2165 1.37 2.30 0.88 102 RCVD_IN_VALIDITY_SAFE 2144 4.59 2.28 5.77 103 HTML_IMAGE_RATIO_06 2053 2.88 2.18 3.24 104 RCVD_IN_MSPIKE_H4 2052 2.89 2.18 3.25 105 XM_SPF_SoftFail 2043 1.68 2.17 1.43 106 TR_XM_INV_DKIM 2038 0.75 2.17 0.02 107 XMPhish30 2000 1.15 2.13 0.64 108 TR_XM_INTL_Spamhaus 1964 0.79 2.09 0.12 109 T_XMDrugObfuBody_08 1930 1.30 2.05 0.91 110 XMDiploma_00 1917 1.71 2.04 1.54 111 SpammyFromTLD_02 1900 0.79 2.02 0.16 112 XM_UB50 1879 1.28 2.00 0.91 113 HK_RANDOM_REPLYTO 1876 0.74 2.00 0.10 114 RCVD_IN_MSPIKE_H5 1834 3.68 1.95 4.56 115 RCVD_IN_VALIDITY_CERTIFIED 1743 3.97 1.85 5.05 116 T_XMDrugObfuBody_00 1710 1.85 1.82 1.87 117 TM2_M_URI_OPT_OUT 1694 1.71 1.80 1.66 118 RCVD_IN_XBL 1655 0.60 1.76 0.01 119 T_XMHurry_00 1616 1.18 1.72 0.90 120 RCVD_IN_VALIDITY_RPBL 1595 0.59 1.70 0.03 121 XMBrknScrpt_02 1504 1.23 1.60 1.05 122 XM_B_URI_Unicode 1500 1.30 1.60 1.15 123 DIET_1 1497 0.92 1.59 0.58 124 MAILING_LIST_MULTI 1489 2.06 1.58 2.31 125 STY_INVIS_DIRECT 1489 0.82 1.58 0.42 126 XMStockSpam_06 1468 1.69 1.56 1.76 127 TR_XM_MSPIKECOMBO2 1418 0.52 1.51 0.02 128 MultiRelay_CC 1363 0.56 1.45 0.10 129 URI_NOVOWEL 1352 1.26 1.44 1.16 130 MIME_QP_LONG_LINE 1342 2.33 1.43 2.80 131 KHOP_HELO_FCRDNS 1323 5.50 1.41 7.60 132 RCVD_IN_SBL_CSS 1315 0.48 1.40 0.01 133 SpammyFromTLD_01 1294 0.66 1.38 0.29 134 TR_XM_PHPForged 1270 0.81 1.35 0.53 135 XM_HighProb1 1255 0.46 1.34 0.00 136 THIS_AD 1255 0.67 1.34 0.33 137 TR_XM_PHPDW 1254 0.80 1.33 0.53 138 RDNS_DYNAMIC 1241 0.59 1.32 0.22 139 TR_XM_FormFill2 1238 0.80 1.32 0.54 140 XM_H_PHPOS 1230 0.79 1.31 0.52 141 SHOPIFY_IMG_NOT_RCVD_SFY 1217 0.65 1.29 0.31 142 PDS_RDNS_DYNAMIC_FP 1189 0.44 1.27 0.01 143 HTML_IMAGE_ONLY_20 1184 0.64 1.26 0.32 144 XM_ProductURIs 1179 0.89 1.25 0.71 145 T_REMOTE_IMAGE 1171 2.34 1.25 2.91 146 XMBdyGiftCard01 1159 1.03 1.23 0.93 147 XM_B_DNDMA 1157 0.77 1.23 0.54 148 RCVD_IN_PBL 1149 0.81 1.22 0.59 149 RCVD_IN_MSPIKE_L4 1147 0.45 1.22 0.05 150 TVD_RCVD_IP 1135 1.75 1.21 2.03 151 XM_B_Phish66 1130 0.59 1.20 0.28 152 XM_B_COPY_HTML 1119 1.07 1.19 1.00 153 MPART_ALT_DIFF_COUNT 1098 0.76 1.17 0.56 154 T_TooManySym_02 1096 3.30 1.17 4.40 155 XM_DK_Undo_01 1069 1.30 1.14 1.39 156 XMPhish14 1060 0.63 1.13 0.37 157 BAYES_40 1050 4.12 1.12 5.66 158 XM_SendGrid 1007 1.16 1.07 1.20 159 URI_TRY_3LD 989 0.68 1.05 0.48 160 TR_XM_GMP_BULK_SIG 987 0.43 1.05 0.11 161 URI_HEX 975 0.85 1.04 0.76 162 HTML_TAG_BALANCE_BODY 972 0.77 1.03 0.64 163 BOTNET_NORDNS 968 0.36 1.03 0.02 164 HELO_DYNAMIC_SPLIT_IP 950 0.34 1.01 0.00 165 TR_XM_FormFill 945 0.34 1.01 0.00 166 TM2_M_OBFU_COMMENT 940 0.68 1.00 0.52 167 TR_XM_MaxSPIKE 939 0.35 1.00 0.02 168 RELAYCOUNTRY_FR 929 0.47 0.99 0.20 169 TR_XM_InvalidRelay 922 0.34 0.98 0.01 170 XMSubMetaI_00 921 0.80 0.98 0.71 171 XM_H_Long_From02 911 0.76 0.97 0.66 172 XM_UB99 908 0.33 0.97 0.00 173 TR_XM_Base64_L1 904 0.37 0.96 0.07 174 XM_DIRTYINTL 901 0.35 0.96 0.04 175 TR_Mismatch_TLD_02 877 0.35 0.93 0.04 176 HTML_MIME_NO_HTML_TAG 868 1.49 0.92 1.79 177 RCVD_IN_PSBL 857 0.76 0.91 0.68 178 XMGenDplmaNmb 846 0.98 0.90 1.02 179 PLING_QUERY 842 0.59 0.90 0.43 180 DKIM_ADSP_CUSTOM_MED 833 0.72 0.89 0.63 181 HTML_FONT_TINY_NORDNS 824 0.32 0.88 0.03 182 XMReplyNow 810 0.39 0.86 0.14 183 XMBody_78 800 0.45 0.85 0.24 184 XM_UB80 797 0.30 0.85 0.01 185 XM_B_COVIDMETA 791 0.41 0.84 0.19 186 BAYES_20 781 2.54 0.83 3.42 187 FONT_INVIS_LONG_LINE 772 0.30 0.82 0.03 188 TR_LOTS_OF_MONEY3 770 0.44 0.82 0.24 189 XM_UB60 758 0.32 0.81 0.07 190 TR_XM_RelayPhish 747 0.29 0.79 0.04 191 TR_Mismatch_TLD_01 742 0.44 0.79 0.25 192 SH_BODYURI_REVERSE_SBL 734 0.27 0.78 0.00 193 URIBL_SBL 733 0.27 0.78 0.00 194 URIBL_SBL_A 733 0.27 0.78 0.00 195 XM_B_REG_HTML 732 0.44 0.78 0.26 196 TR_XM_DK_SendGrid 731 0.83 0.78 0.86 197 NML_ADSP_CUSTOM_MED 719 0.52 0.76 0.39 198 XM_GoogleGroups 716 1.02 0.76 1.15 199 TR_XM_Base64_M1 706 0.81 0.75 0.84 200 XMClaimOffer 701 0.32 0.75 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 154162 88.25 95.86 84.33 2 RELAYCOUNTRY_US 151857 77.75 67.39 83.07 3 XM_B_Unicode 128196 74.19 82.09 70.13 4 DKIM_SIGNED 123767 71.09 77.66 67.71 5 XM_DK_Pass 122698 69.44 73.96 67.12 6 DKIM_VALID 121879 69.02 73.60 66.67 7 BAYES_50 117441 56.35 40.98 64.24 8 DKIM_VALID_AU 106285 58.28 58.56 58.14 9 DCC_CHECK_NEGATIVE 93320 40.11 18.84 51.05 10 DCC_CHECK 89432 59.70 80.66 48.92 11 XMListUnsubscribeExists 87650 52.29 60.73 47.95 12 XM_B_Unicode3 86848 50.26 55.61 47.51 13 XM_B_SpammyWords 86538 51.09 58.40 47.34 14 HTML_FONT_LOW_CONTRAST 74567 40.32 39.41 40.79 15 LOC_TINY_FONT_1 57551 35.24 42.56 31.48 16 T_TM2_M_HEADER_IN_MSG 54839 25.34 16.29 30.00 17 DKIM_VALID_EF 47712 26.44 27.10 26.10 18 FVGT_m_MULTI_ODD 43959 25.60 28.62 24.05 19 XMSubLong 37975 22.98 27.27 20.77 20 XM_B_SpammyWords2 34275 23.87 33.82 18.75 21 MIME_HTML_ONLY 33613 25.61 39.66 18.39 22 T_KAM_HTML_FONT_INVALID 33481 20.08 23.52 18.32 23 USER_IN_DEF_DKIM_WL 32917 12.77 2.58 18.01 24 ANY_BOUNCE_MESSAGE 28428 10.46 0.56 15.55 25 BOUNCE_MESSAGE 28425 10.46 0.56 15.55 26 XM_Multi_Part_URI 26796 15.95 18.47 14.66 27 XM_Evil_Numbers_Gen 26523 12.19 7.67 14.51 28 LotsOfNums_01 26422 11.63 6.13 14.45 29 RCVD_IN_MSPIKE_WL 25732 11.86 7.56 14.08 30 RCVD_IN_MSPIKE_H2 25296 14.96 17.13 13.84 31 ALL_TRUSTED 24773 14.79 17.20 13.55 32 TR_XM_DK_Unsub 23714 15.75 21.16 12.97 33 HTML_IMAGE_ONLY_32 22239 8.06 0.07 12.17 34 UNPARSEABLE_RELAY 22198 13.19 15.22 12.14 35 TM2_M_VERY_LONG_WORD 22099 9.01 3.03 12.09 36 FSL_BULK_SIG 21139 15.02 21.74 11.56 37 BAYES_00 15581 5.77 0.41 8.52 38 XM_DKIMWhitelistDomains 15570 5.63 0.01 8.52 39 XM_B_Unsub 14758 10.16 14.21 8.07 40 KHOP_HELO_FCRDNS 13899 5.50 1.41 7.60 41 T_TooManySym_01 13504 5.83 2.80 7.39 42 BAYES_60 11746 7.16 8.60 6.43 43 TR_XM_DK_Bayes 11515 4.26 0.30 6.30 44 TR_XM_DK_Bayes1 11454 4.24 0.30 6.27 45 RCVD_IN_MSPIKE_H3 11439 5.29 3.42 6.26 46 TR_XM_BayesUnsub 11423 8.77 13.68 6.25 47 XM_H_GMP 10760 5.68 5.29 5.89 48 XM_B_SpammyWords3 10578 8.53 13.85 5.79 49 RCVD_IN_VALIDITY_SAFE 10554 4.59 2.28 5.77 50 BAYES_40 10351 4.12 1.12 5.66 51 XM_DK_Undo_02 10326 15.91 35.87 5.65 52 TooManyTo_001 10099 4.76 3.28 5.52 53 TR_XM_DK_Bayes2 9948 3.67 0.23 5.44 54 TR_MAX_INTL_RELAY 9767 9.71 18.20 5.34 55 XM_B_PhoneNumber 9586 4.66 3.52 5.24 56 XMStrtUSub 9543 4.80 3.99 5.22 57 XM_H_Long_From01 9280 4.80 4.26 5.08 58 RCVD_IN_VALIDITY_CERTIFIED 9233 3.97 1.85 5.05 59 MPART_ALT_DIFF 9116 4.91 4.75 4.99 60 MIME_CHARSET_FARAWAY 9053 3.38 0.32 4.95 61 XM_UncommonTLD01 8987 10.32 20.82 4.92 62 LOTS_OF_MONEY 8887 6.19 8.77 4.86 63 CHARSET_FARAWAY_HEADER 8810 3.25 0.20 4.82 64 HTML_IMAGE_RATIO_02 8808 5.29 6.20 4.82 65 XMNumbers 8431 4.05 2.96 4.61 66 BAYES_99 8371 12.94 29.19 4.58 67 RCVD_IN_MSPIKE_H5 8343 3.68 1.95 4.56 68 T_TooManySym_02 8048 3.30 1.17 4.40 69 XM_B_Phish_Phrases 7521 4.67 5.74 4.11 70 HTML_IMAGE_RATIO_04 7112 3.85 3.78 3.89 71 BOTNET_IPINHOSTNAME 6762 5.41 8.74 3.70 72 INVALID_MSGID 6742 2.58 0.42 3.69 73 BAYES_999 6688 9.77 21.67 3.66 74 TR_XM_SpammyWords4 6290 4.91 7.77 3.44 75 TO_MALFORMED 6269 2.27 0.00 3.43 76 BAYES_20 6256 2.54 0.83 3.42 77 RCVD_IN_MSPIKE_H4 5950 2.89 2.18 3.25 78 MSGID_NOFQDN1 5933 2.20 0.16 3.25 79 HTML_IMAGE_RATIO_06 5927 2.88 2.18 3.24 80 XMSubMetaSx_00 5883 3.98 5.45 3.22 81 BAYES_80 5848 5.69 10.53 3.20 82 XM_Body_Dirty_Words 5830 4.26 6.34 3.19 83 T_REMOTE_IMAGE 5313 2.34 1.25 2.91 84 RELAYCOUNTRY_META 5280 7.46 16.34 2.89 85 MIME_HTML_MOSTLY 5211 2.98 3.22 2.85 86 MIME_QP_LONG_LINE 5120 2.33 1.43 2.80 87 MIME_HTML_ONLY_MULTI 4816 2.66 2.72 2.63 88 TR_DCC_Bayes_99 4535 8.74 20.90 2.48 89 XM_B_SpammyTLD 4344 2.88 3.85 2.38 90 TR_XM_DKIM_Undo 4216 10.34 25.96 2.31 91 MAILING_LIST_MULTI 4215 2.06 1.58 2.31 92 HTML_IMAGE_RATIO_08 4202 2.41 2.64 2.30 93 T_TVD_MIME_NO_HEADERS 4016 1.48 0.10 2.20 94 BAYES_95 3919 3.90 7.33 2.14 95 XM_CamelCaseFrm001 3749 2.40 3.08 2.05 96 FROM_EXCESS_BASE64 3745 4.04 7.91 2.05 97 TVD_RCVD_IP 3704 1.75 1.21 2.03 98 XM_PDF 3604 1.45 0.43 1.97 99 UNTRUSTED_Relay 3519 3.03 5.19 1.93 100 T_XMDrugObfuBody_00 3413 1.85 1.82 1.87 101 BAYES_05 3289 1.37 0.54 1.80 102 HTML_MIME_NO_HTML_TAG 3270 1.49 0.92 1.79 103 XMStockSpam_06 3217 1.69 1.56 1.76 104 TooManyTo_002 3212 1.39 0.69 1.76 105 TR_XM_PhishingBody 3203 2.76 4.72 1.75 106 T_TooManySym_03 3196 1.20 0.14 1.75 107 TM2_M_URI_OPT_OUT 3030 1.71 1.80 1.66 108 RCVD_IN_IADB_LISTED 2985 1.33 0.74 1.63 109 TR_XM_UnparsRelay 2917 4.04 8.80 1.60 110 XMGappySubj_01 2845 1.09 0.20 1.56 111 XMDiploma_00 2817 1.71 2.04 1.54 112 T_XMDrugObfuBody_14 2815 2.61 4.68 1.54 113 RCVD_IN_IADB_SPF 2687 1.19 0.65 1.47 114 IN_HORDE_ADDRESS_BOOK 2687 0.99 0.06 1.47 115 XM_SPF_SoftFail 2614 1.68 2.17 1.43 116 TR_XM_SpammyWords5 2593 2.16 3.60 1.42 117 XM_DK_Undo_01 2542 1.30 1.14 1.39 118 XMGappySubj_02 2442 0.90 0.06 1.34 119 TVD_SPACE_RATIO 2438 0.91 0.08 1.33 120 RCVD_IN_IADB_SENDERID 2432 1.08 0.60 1.33 121 TR_XM_SpammyRelay 2409 5.12 12.51 1.32 122 BOTNET 2402 3.22 6.94 1.31 123 RCVD_IN_IADB_DK 2387 1.07 0.62 1.31 124 XMSexyCombo_05 2257 2.24 4.19 1.23 125 XM_B_Investor 2225 2.34 4.54 1.22 126 XM_SendGrid 2193 1.16 1.07 1.20 127 URI_NOVOWEL 2122 1.26 1.44 1.16 128 XM_B_Unsub2 2108 1.62 2.54 1.15 129 XM_B_URI_Unicode 2104 1.30 1.60 1.15 130 XM_GoogleGroups 2094 1.02 0.76 1.15 131 RCVD_IN_IADB_VOUCHED 2033 0.87 0.41 1.11 132 TR_Symld_Words 1994 2.84 6.25 1.09 133 XMBrknScrpt_02 1913 1.23 1.60 1.05 134 DKIM_INVALID 1888 2.06 4.06 1.03 135 XMGenDplmaNmb 1862 0.98 0.90 1.02 136 XM_B_COPY_HTML 1837 1.07 1.19 1.00 137 T_FILL_THIS_FORM_SHORT 1738 2.01 4.06 0.95 138 XMBdyGiftCard01 1703 1.03 1.23 0.93 139 TooManyTo_003 1703 0.82 0.61 0.93 140 XM_UB50 1661 1.28 2.00 0.91 141 T_XMDrugObfuBody_08 1659 1.30 2.05 0.91 142 T_XMHurry_00 1644 1.18 1.72 0.90 143 XMBSHREFv2 1627 0.68 0.26 0.89 144 SUBJ_ALL_CAPS 1616 1.37 2.30 0.88 145 XM_B_SpammyWords4 1600 1.50 2.71 0.88 146 TR_XM_DK_SendGrid 1579 0.83 0.78 0.86 147 TR_XM_Base64_M1 1527 0.81 0.75 0.84 148 RELAYCOUNTRY_CA 1510 3.16 7.71 0.83 149 RCVD_IN_IADB_OPTIN 1484 0.62 0.25 0.81 150 TR_MetaPhish_Combo_01 1393 0.71 0.60 0.76 151 URI_HEX 1384 0.85 1.04 0.76 152 TooManyTo_004 1371 0.66 0.50 0.75 153 MSGID_FROM_MTA_HEADER 1319 0.57 0.26 0.72 154 XMSubMetaI_00 1295 0.80 0.98 0.71 155 XM_ProductURIs 1292 0.89 1.25 0.71 156 RCVD_IN_PSBL 1247 0.76 0.91 0.68 157 TR_XM_SpammyWords2 1245 3.80 9.86 0.68 158 XM_shorewaves_Whitelist 1235 0.45 0.00 0.68 159 XMSlimDrugH 1227 0.70 0.74 0.67 160 XM_OfRef6 1206 1.67 3.63 0.66 161 XM_H_Long_From02 1205 0.76 0.97 0.66 162 SUBJ_DOLLARS 1198 0.67 0.70 0.66 163 XM_H_PHPMailer 1193 0.59 0.47 0.65 164 XMSolicitRefs_0 1185 0.64 0.63 0.65 165 XMPhish30 1171 1.15 2.13 0.64 166 HTML_TAG_BALANCE_BODY 1168 0.77 1.03 0.64 167 DKIM_ADSP_CUSTOM_MED 1160 0.72 0.89 0.63 168 RELAYCOUNTRY_AU 1126 1.24 2.45 0.62 169 RCVD_IN_PBL 1084 0.81 1.22 0.59 170 TooManyTo_005 1077 0.54 0.44 0.59 171 TR_XM_GMP_MSPIKE_UNDO2 1067 0.44 0.17 0.58 172 DIET_1 1057 0.92 1.59 0.58 173 MPART_ALT_DIFF_COUNT 1018 0.76 1.17 0.56 174 XM_B_FormFill 997 0.37 0.03 0.55 175 XMNoVowels 993 0.50 0.42 0.54 176 XM_URI_RBL 988 1.38 3.02 0.54 177 XM_B_DNDMA 984 0.77 1.23 0.54 178 T_Symld_Words_02 982 0.59 0.70 0.54 179 TR_XM_FormFill2 981 0.80 1.32 0.54 180 TR_XM_PHPDW 973 0.80 1.33 0.53 181 TR_XM_PHPForged 969 0.81 1.35 0.53 182 HTML_FONT_FACE_BAD 960 0.55 0.59 0.53 183 XM_H_PHPOS 951 0.79 1.31 0.52 184 TM2_M_OBFU_COMMENT 943 0.68 1.00 0.52 185 T_TooManySym_04 935 0.35 0.05 0.51 186 RCVD_IN_BL_SPAMCOP_NET 933 3.85 10.36 0.51 187 URI_TRY_3LD 882 0.68 1.05 0.48 188 XMHTML_After_End 848 0.50 0.56 0.46 189 RCVD_IN_MSPIKE_BL 848 1.74 4.23 0.46 190 TR_XM_MSPIKECOMBO 848 1.74 4.22 0.46 191 HTML_EXTRA_CLOSE 829 0.30 0.01 0.45 192 XMBody_95 820 0.34 0.12 0.45 193 FONT_INVIS_MSGID 817 0.31 0.04 0.45 194 AD_PREFS 809 0.33 0.12 0.44 195 PLING_QUERY 792 0.59 0.90 0.43 196 DKIM_ADSP_NXDOMAIN 792 0.53 0.72 0.43 197 STY_INVIS_DIRECT 773 0.82 1.58 0.42 198 XMLngstWrd_00 766 0.35 0.21 0.42 199 XM_S_SubURI 759 0.29 0.06 0.42 200 HTML_TAG_BALANCE_CENTER 751 0.42 0.44 0.41 ----------------------------------------------------------------------