Email: 259181 Autolearn: 0 AvgScore: 5.84 AvgScanTime: 1.37 sec Spam: 96006 Autolearn: 0 AvgScore: 14.23 AvgScanTime: 1.45 sec Ham: 163175 Autolearn: 0 AvgScore: 0.90 AvgScanTime: 1.33 sec Time Spent Running SA: 98.91 hours Time Spent Processing Spam: 38.62 hours Time Spent Processing Ham: 60.29 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 92282 88.46 96.12 83.95 2 DKIM_SIGNED 81661 80.78 85.06 78.26 3 DCC_CHECK 77027 63.05 80.23 52.94 4 XM_B_Unicode 76010 74.93 79.17 72.43 5 XM_DK_Pass 75995 78.15 79.16 77.56 6 DKIM_VALID 75604 77.70 78.75 77.08 7 RELAYCOUNTRY_US 72010 78.97 75.01 81.31 8 XMListUnsubscribeExists 62437 58.73 65.03 55.02 9 XM_B_SpammyWords 61063 53.66 63.60 47.81 10 DKIM_VALID_AU 60292 65.43 62.80 66.98 11 LOC_TINY_FONT_1 45950 39.81 47.86 35.08 12 XM_B_Unicode3 45756 47.31 47.66 47.11 13 XM_DK_Undo_02 37379 18.31 38.93 6.17 14 XM_B_SpammyWords2 36580 28.17 38.10 22.32 15 BAYES_50 33317 51.58 34.70 61.51 16 FVGT_m_MULTI_ODD 32299 29.20 33.64 26.59 17 MIME_HTML_ONLY 31918 25.65 33.25 21.18 18 HTML_FONT_LOW_CONTRAST 31120 31.24 32.41 30.55 19 BAYES_99 30689 14.72 31.97 4.58 20 TR_XM_DKIM_Undo 27788 12.29 28.94 2.49 21 DKIM_VALID_EF 27302 29.97 28.44 30.88 22 T_KAM_HTML_FONT_INVALID 25833 24.70 26.91 23.40 23 BAYES_999 23394 11.26 24.37 3.55 24 TR_DCC_Bayes_99 22942 10.20 23.90 2.15 25 XMSubLong 21467 22.55 22.36 22.66 26 TR_XM_DK_Unsub 20962 18.15 21.83 15.98 27 XM_Multi_Part_URI 19616 18.46 20.43 17.30 28 TR_MAX_INTL_RELAY 19373 11.45 20.18 6.31 29 DCC_CHECK_NEGATIVE 18442 36.73 19.21 47.04 30 RCVD_IN_MSPIKE_H2 17921 15.80 18.67 14.11 31 RELAYCOUNTRY_META 16989 8.39 17.70 2.92 32 XM_B_Unsub 16913 12.33 17.62 9.22 33 T_TM2_M_HEADER_IN_MSG 16770 21.20 17.47 23.40 34 UNPARSEABLE_RELAY 16619 14.42 17.31 12.72 35 TR_XM_BayesUnsub 16242 10.87 16.92 7.31 36 FSL_BULK_SIG 16103 14.26 16.77 12.78 37 XM_B_SpammyWords3 14286 10.33 14.88 7.65 38 TR_XM_SpammyRelay 12344 5.70 12.86 1.48 39 BAYES_80 11754 6.96 12.24 3.85 40 BOTNET 11413 5.33 11.89 1.47 41 TR_XM_SpammyWords2 11032 4.68 11.49 0.68 42 BOTNET_IPINHOSTNAME 10441 6.86 10.88 4.49 43 LOTS_OF_MONEY 10113 8.04 10.53 6.58 44 RCVD_IN_BL_SPAMCOP_NET 9781 4.16 10.19 0.62 45 TR_XM_UnparsRelay 9482 4.88 9.88 1.94 46 TR_XM_SpammyWords4 9251 6.44 9.64 4.57 47 BAYES_60 8957 8.07 9.33 7.33 48 FROM_EXCESS_BASE64 8360 4.46 8.71 1.96 49 RCVD_IN_MSPIKE_WL 8088 13.92 8.42 17.16 50 RCVD_IN_MSPIKE_BL 8051 3.66 8.39 0.87 51 TR_XM_MSPIKECOMBO 8017 3.64 8.35 0.87 52 XM_Evil_Numbers_Gen 7805 8.76 8.13 9.13 53 ALL_TRUSTED 7724 12.76 8.05 15.54 54 RELAYCOUNTRY_CA 7646 3.47 7.96 0.83 55 XM_UncommonTLD01 7601 6.12 7.92 5.06 56 XM_B_Phish_Phrases 7421 6.44 7.73 5.68 57 HTML_IMAGE_RATIO_02 7418 6.24 7.73 5.37 58 BAYES_95 7238 4.34 7.54 2.46 59 TR_Symld_Words 7113 3.59 7.41 1.35 60 T_HTML_ATTACH 6570 2.59 6.84 0.09 61 T_OBFU_HTML_ATTACH 6548 2.57 6.82 0.06 62 TR_XM_HtmlAttach 6548 2.57 6.82 0.06 63 UNTRUSTED_Relay 6284 3.59 6.55 1.84 64 XMSubMetaSx_00 6275 5.00 6.54 4.09 65 DKIM_INVALID 6057 3.08 6.31 1.18 66 MPART_ALT_DIFF 5613 6.39 5.85 6.71 67 XM_Body_Dirty_Words 5374 3.63 5.60 2.47 68 LotsOfNums_01 5276 6.45 5.50 7.02 69 XM_H_GMP 5139 6.01 5.35 6.39 70 T_XMDrugObfuBody_14 4482 2.92 4.67 1.89 71 TR_XM_SPAMCOP 4451 1.78 4.64 0.09 72 TR_XM_SpammyWords3 4377 1.99 4.56 0.48 73 XM_H_Long_From01 4330 5.04 4.51 5.36 74 XM_B_Investor 4226 2.45 4.40 1.31 75 HTML_IMAGE_RATIO_04 4131 4.72 4.30 4.97 76 RCVD_IN_MSPIKE_H3 4048 6.49 4.22 7.82 77 XMStrtUSub 3992 5.47 4.16 6.25 78 T_TooManySym_01 3988 6.29 4.15 7.54 79 MIME_HTML_MOSTLY 3937 3.85 4.10 3.70 80 XMSexyCombo_05 3927 2.67 4.09 1.84 81 TooManyTo_001 3726 5.17 3.88 5.93 82 XM_B_PhoneNumber 3575 5.35 3.72 6.31 83 XM_CamelCaseFrm001 3556 2.65 3.70 2.03 84 XMNumbers 3550 4.21 3.70 4.52 85 RCVD_IN_PSBL 3466 1.88 3.61 0.86 86 HTML_FONT_TINY_NORDNS 3435 1.37 3.58 0.07 87 TR_XM_PhishingBody 3377 2.53 3.52 1.94 88 XM_B_SpammyTLD 3272 2.90 3.41 2.61 89 RCVD_IN_MSPIKE_L3 3268 1.71 3.40 0.71 90 XM_OfRef6 3134 1.88 3.26 1.07 91 HTML_IMAGE_RATIO_08 3017 2.85 3.14 2.68 92 RCVD_IN_MSPIKE_L4 2989 1.21 3.11 0.10 93 USER_IN_DEF_DKIM_WL 2952 13.23 3.07 19.21 94 LongTLD 2930 1.33 3.05 0.32 95 XM_B_Unsub2 2891 2.11 3.01 1.58 96 MIME_HTML_ONLY_MULTI 2827 3.08 2.94 3.16 97 XM_H_Long_From02 2812 1.49 2.93 0.65 98 HTML_IMAGE_RATIO_06 2809 2.98 2.93 3.02 99 RCVD_IN_VALIDITY_SAFE 2743 4.40 2.86 5.32 100 TM2_M_VERY_LONG_WORD 2724 1.78 2.84 1.16 101 TR_XM_NoHeaderRelay 2647 1.08 2.76 0.09 102 TR_XM_SpammyWords5 2623 1.86 2.73 1.34 103 XMDiploma_00 2573 1.95 2.68 1.52 104 XM_SPF_SoftFail 2453 1.75 2.56 1.28 105 RELAYCOUNTRY_AU 2445 1.22 2.55 0.44 106 TR_XM_MSPIKECOMBO2 2423 0.95 2.52 0.03 107 RCVD_IN_VALIDITY_CERTIFIED 2396 3.73 2.50 4.46 108 XM_URI_RBL 2341 1.19 2.44 0.45 109 RCVD_IN_VALIDITY_RPBL 2303 0.93 2.40 0.07 110 XM_B_SpammyWords4 2295 1.83 2.39 1.49 111 T_XMDrugObfuBody_08 2292 1.69 2.39 1.28 112 XMBody_17 2276 1.31 2.37 0.69 113 XMBdyGiftCard01 2273 1.35 2.37 0.75 114 T_FILL_THIS_FORM_SHORT 2228 1.23 2.32 0.59 115 XM_UB50 2135 1.43 2.22 0.96 116 MIME_QP_LONG_LINE 2132 3.24 2.22 3.84 117 TR_XM_INV_DKIM 2099 0.82 2.19 0.02 118 RCVD_IN_MSPIKE_H5 2076 4.40 2.16 5.72 119 T_REMOTE_IMAGE 1994 3.16 2.08 3.81 120 RCVD_IN_MSPIKE_H4 1964 3.03 2.05 3.61 121 XM_B_URI_Unicode 1951 1.64 2.03 1.42 122 XMBrknScrpt_02 1911 1.50 1.99 1.21 123 XMStockSpam_06 1852 1.92 1.93 1.91 124 MAILING_LIST_MULTI 1835 2.05 1.91 2.14 125 SpammyFromTLD_02 1784 0.85 1.86 0.25 126 T_XMHurry_00 1774 1.04 1.85 0.57 127 RCVD_IN_MSPIKE_L5 1761 0.72 1.83 0.07 128 XMPhish30 1674 1.29 1.74 1.02 129 BOTNET_NORDNS 1670 0.65 1.74 0.01 130 BAYES_40 1656 3.62 1.72 4.73 131 DKIM_ADSP_NXDOMAIN 1648 1.02 1.72 0.61 132 SpammyFromTLD_01 1641 0.84 1.71 0.33 133 TM2_M_URI_OPT_OUT 1638 1.86 1.71 1.95 134 XM_UB99 1612 0.62 1.68 0.00 135 ANY_BOUNCE_MESSAGE 1600 3.64 1.67 4.80 136 URI_NOVOWEL 1598 1.42 1.66 1.27 137 BOUNCE_MESSAGE 1598 3.64 1.66 4.80 138 TR_XM_MaxSPIKE 1568 0.62 1.63 0.02 139 STY_INVIS_DIRECT 1563 0.92 1.63 0.50 140 DIET_1 1485 0.87 1.55 0.47 141 XM_HighProb1 1449 0.56 1.51 0.00 142 XM_ProductURIs 1444 0.99 1.50 0.68 143 TR_Mismatch_TLD_02 1437 0.59 1.50 0.06 144 XM_B_DNDMA 1435 0.76 1.49 0.33 145 XMBody_78 1409 0.77 1.47 0.36 146 MPART_ALT_DIFF_COUNT 1404 0.89 1.46 0.55 147 TR_LOTS_OF_MONEY3 1390 0.80 1.45 0.42 148 XMGenDplmaNmb 1389 0.91 1.45 0.59 149 URI_HEX 1342 1.21 1.40 1.10 150 HK_RANDOM_REPLYTO 1329 0.57 1.38 0.09 151 TR_XM_InvalidRelay 1317 0.51 1.37 0.01 152 SHOPIFY_IMG_NOT_RCVD_SFY 1273 0.71 1.33 0.34 153 XM_B_COPY_HTML 1260 1.15 1.31 1.05 154 TR_XM_INTL_Spamhaus 1218 0.53 1.27 0.09 155 XMClaimOffer 1204 0.50 1.25 0.05 156 T_XMDrugObfuBody_00 1201 1.28 1.25 1.29 157 TR_XM_PHPDW 1201 0.72 1.25 0.40 158 KHOP_HELO_FCRDNS 1199 1.37 1.25 1.44 159 TR_XM_PHPForged 1197 0.71 1.25 0.40 160 XM_DK_Undo_01 1195 1.36 1.24 1.42 161 URI_TRY_3LD 1188 0.90 1.24 0.70 162 TR_XM_FormFill2 1186 0.71 1.24 0.40 163 SUBJ_ALL_CAPS 1185 1.08 1.23 1.00 164 URIBL_SBL_A 1177 0.46 1.23 0.01 165 URIBL_SBL 1177 0.46 1.23 0.01 166 SH_BODYURI_REVERSE_SBL 1176 0.46 1.22 0.00 167 RDNS_DYNAMIC 1163 0.62 1.21 0.27 168 XM_H_PHPOS 1163 0.69 1.21 0.39 169 TVD_RCVD_IP 1154 1.62 1.20 1.87 170 PDS_RDNS_DYNAMIC_FP 1135 0.47 1.18 0.05 171 THIS_AD 1128 0.72 1.17 0.45 172 TR_XM_GMP_BULK_SIG 1079 0.53 1.12 0.18 173 TR_XM_FormFill 1062 0.41 1.11 0.01 174 HELO_DYNAMIC_SPLIT_IP 1056 0.41 1.10 0.00 175 XMSlimDrugH 1039 0.68 1.08 0.44 176 XM_UB999 1027 0.40 1.07 0.00 177 HTML_TAG_BALANCE_BODY 1026 0.82 1.07 0.68 178 BAYES_20 1021 2.54 1.06 3.41 179 XM_SendGrid 1017 1.15 1.06 1.20 180 XMReplyNow 1000 0.49 1.04 0.17 181 XM_UB60 985 0.42 1.03 0.06 182 XM_B_REG_HTML 967 0.68 1.01 0.48 183 HTML_IMAGE_ONLY_20 967 0.61 1.01 0.38 184 RCVD_IN_XBL 961 0.38 1.00 0.01 185 XMBounce_01 955 0.39 0.99 0.04 186 RELAYCOUNTRY_TH 938 0.36 0.98 0.00 187 XM_B_Phish66 934 0.54 0.97 0.28 188 XPRIO 912 0.35 0.95 0.00 189 HTML_MIME_NO_HTML_TAG 898 1.48 0.94 1.79 190 TR_Mismatch_TLD_01 894 0.53 0.93 0.30 191 XM_UB80 888 0.35 0.92 0.02 192 TM2_M_OBFU_COMMENT 884 0.64 0.92 0.48 193 T_MONEY_PERCENT 880 0.47 0.92 0.20 194 TR_LOTS_OF_MONEY2 880 0.47 0.92 0.20 195 RCVD_IN_SBL_CSS 867 0.36 0.90 0.04 196 TR_XM_Base64_M1 855 0.88 0.89 0.88 197 RELAYCOUNTRY_FR 849 0.47 0.88 0.23 198 RCVD_IN_PBL 841 0.69 0.88 0.58 199 XM_B_SEO 836 0.42 0.87 0.16 200 MultiRelay_CC 817 0.36 0.85 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 136979 88.46 96.12 83.95 2 RELAYCOUNTRY_US 132676 78.97 75.01 81.31 3 DKIM_SIGNED 127696 80.78 85.06 78.26 4 XM_DK_Pass 126553 78.15 79.16 77.56 5 DKIM_VALID 125771 77.70 78.75 77.08 6 XM_B_Unicode 118182 74.93 79.17 72.43 7 DKIM_VALID_AU 109298 65.43 62.80 66.98 8 BAYES_50 100371 51.58 34.70 61.51 9 XMListUnsubscribeExists 89786 58.73 65.03 55.02 10 DCC_CHECK 86387 63.05 80.23 52.94 11 XM_B_SpammyWords 78014 53.66 63.60 47.81 12 XM_B_Unicode3 76867 47.31 47.66 47.11 13 DCC_CHECK_NEGATIVE 76752 36.73 19.21 47.04 14 LOC_TINY_FONT_1 57235 39.81 47.86 35.08 15 DKIM_VALID_EF 50383 29.97 28.44 30.88 16 HTML_FONT_LOW_CONTRAST 49858 31.24 32.41 30.55 17 FVGT_m_MULTI_ODD 43388 29.20 33.64 26.59 18 T_KAM_HTML_FONT_INVALID 38189 24.70 26.91 23.40 19 T_TM2_M_HEADER_IN_MSG 38185 21.20 17.47 23.40 20 XMSubLong 36973 22.55 22.36 22.66 21 XM_B_SpammyWords2 36426 28.17 38.10 22.32 22 MIME_HTML_ONLY 34553 25.65 33.25 21.18 23 USER_IN_DEF_DKIM_WL 31350 13.23 3.07 19.21 24 XM_Multi_Part_URI 28224 18.46 20.43 17.30 25 RCVD_IN_MSPIKE_WL 27995 13.92 8.42 17.16 26 TR_XM_DK_Unsub 26071 18.15 21.83 15.98 27 ALL_TRUSTED 25350 12.76 8.05 15.54 28 RCVD_IN_MSPIKE_H2 23021 15.80 18.67 14.11 29 FSL_BULK_SIG 20855 14.26 16.77 12.78 30 UNPARSEABLE_RELAY 20749 14.42 17.31 12.72 31 BAYES_00 16533 6.52 0.38 10.13 32 XM_B_Unsub 15044 12.33 17.62 9.22 33 XM_Evil_Numbers_Gen 14891 8.76 8.13 9.13 34 XM_DKIMWhitelistDomains 14746 5.69 0.00 9.04 35 TR_XM_DK_Bayes 13280 5.23 0.30 8.14 36 TR_XM_DK_Bayes1 13188 5.20 0.30 8.08 37 RCVD_IN_MSPIKE_H3 12766 6.49 4.22 7.82 38 XM_B_SpammyWords3 12476 10.33 14.88 7.65 39 T_TooManySym_01 12306 6.29 4.15 7.54 40 BAYES_60 11964 8.07 9.33 7.33 41 TR_XM_BayesUnsub 11929 10.87 16.92 7.31 42 TR_XM_DK_Bayes2 11722 4.60 0.22 7.18 43 LotsOfNums_01 11453 6.45 5.50 7.02 44 MPART_ALT_DIFF 10955 6.39 5.85 6.71 45 LOTS_OF_MONEY 10738 8.04 10.53 6.58 46 XM_H_GMP 10432 6.01 5.35 6.39 47 TR_MAX_INTL_RELAY 10300 11.45 20.18 6.31 48 XM_B_PhoneNumber 10292 5.35 3.72 6.31 49 XMStrtUSub 10191 5.47 4.16 6.25 50 XM_DK_Undo_02 10072 18.31 38.93 6.17 51 TooManyTo_001 9680 5.17 3.88 5.93 52 RCVD_IN_MSPIKE_H5 9337 4.40 2.16 5.72 53 XM_B_Phish_Phrases 9272 6.44 7.73 5.68 54 HTML_IMAGE_RATIO_02 8764 6.24 7.73 5.37 55 XM_H_Long_From01 8744 5.04 4.51 5.36 56 RCVD_IN_VALIDITY_SAFE 8673 4.40 2.86 5.32 57 XM_UncommonTLD01 8261 6.12 7.92 5.06 58 HTML_IMAGE_RATIO_04 8102 4.72 4.30 4.97 59 BOUNCE_MESSAGE 7830 3.64 1.66 4.80 60 ANY_BOUNCE_MESSAGE 7830 3.64 1.67 4.80 61 BAYES_40 7716 3.62 1.72 4.73 62 T_TooManySym_02 7536 3.09 0.50 4.62 63 BAYES_99 7466 14.72 31.97 4.58 64 TR_XM_SpammyWords4 7452 6.44 9.64 4.57 65 XMNumbers 7369 4.21 3.70 4.52 66 BOTNET_IPINHOSTNAME 7330 6.86 10.88 4.49 67 RCVD_IN_VALIDITY_CERTIFIED 7270 3.73 2.50 4.46 68 INVALID_MSGID 6748 2.74 0.37 4.14 69 XMSubMetaSx_00 6679 5.00 6.54 4.09 70 TO_MALFORMED 6324 2.48 0.10 3.88 71 BAYES_80 6280 6.96 12.24 3.85 72 MIME_QP_LONG_LINE 6267 3.24 2.22 3.84 73 T_REMOTE_IMAGE 6209 3.16 2.08 3.81 74 MIME_HTML_MOSTLY 6043 3.85 4.10 3.70 75 MSGID_NOFQDN1 5912 2.29 0.01 3.62 76 RCVD_IN_MSPIKE_H4 5892 3.03 2.05 3.61 77 BAYES_999 5795 11.26 24.37 3.55 78 BAYES_20 5562 2.54 1.06 3.41 79 MIME_HTML_ONLY_MULTI 5149 3.08 2.94 3.16 80 HTML_IMAGE_RATIO_06 4924 2.98 2.93 3.02 81 RELAYCOUNTRY_META 4757 8.39 17.70 2.92 82 HTML_IMAGE_RATIO_08 4379 2.85 3.14 2.68 83 XM_B_SpammyTLD 4252 2.90 3.41 2.61 84 XM_PDF 4141 1.77 0.46 2.54 85 TR_XM_DKIM_Undo 4059 12.29 28.94 2.49 86 XM_Body_Dirty_Words 4028 3.63 5.60 2.47 87 BAYES_95 4016 4.34 7.54 2.46 88 RCVD_IN_IADB_LISTED 3569 1.61 0.63 2.19 89 TR_DCC_Bayes_99 3505 10.20 23.90 2.15 90 MAILING_LIST_MULTI 3490 2.05 1.91 2.14 91 XM_CamelCaseFrm001 3319 2.65 3.70 2.03 92 RCVD_IN_IADB_SPF 3274 1.45 0.52 2.01 93 BAYES_05 3267 1.45 0.50 2.00 94 FROM_EXCESS_BASE64 3202 4.46 8.71 1.96 95 TM2_M_URI_OPT_OUT 3176 1.86 1.71 1.95 96 TR_XM_PhishingBody 3173 2.53 3.52 1.94 97 TR_XM_UnparsRelay 3159 4.88 9.88 1.94 98 T_TooManySym_03 3152 1.30 0.24 1.93 99 XMStockSpam_06 3117 1.92 1.93 1.91 100 T_XMDrugObfuBody_14 3087 2.92 4.67 1.89 101 TVD_RCVD_IP 3057 1.62 1.20 1.87 102 IN_HORDE_ADDRESS_BOOK 3053 1.21 0.07 1.87 103 UNTRUSTED_Relay 3009 3.59 6.55 1.84 104 RCVD_IN_IADB_SENDERID 3004 1.33 0.46 1.84 105 XMSexyCombo_05 3002 2.67 4.09 1.84 106 RCVD_IN_IADB_DK 2938 1.31 0.47 1.80 107 HTML_MIME_NO_HTML_TAG 2925 1.48 0.94 1.79 108 T_TVD_MIME_NO_HEADERS 2732 1.07 0.04 1.67 109 TooManyTo_002 2639 1.21 0.52 1.62 110 XM_B_Unsub2 2572 2.11 3.01 1.58 111 XMDiploma_00 2479 1.95 2.68 1.52 112 TVD_SPACE_RATIO 2455 0.97 0.06 1.50 113 XM_B_SpammyWords4 2439 1.83 2.39 1.49 114 TR_XM_SpammyRelay 2419 5.70 12.86 1.48 115 BOTNET 2402 5.33 11.89 1.47 116 RCVD_IN_IADB_VOUCHED 2387 1.08 0.42 1.46 117 KHOP_HELO_FCRDNS 2353 1.37 1.25 1.44 118 XM_DK_Undo_01 2325 1.36 1.24 1.42 119 XM_B_URI_Unicode 2311 1.64 2.03 1.42 120 TR_Symld_Words 2200 3.59 7.41 1.35 121 TR_XM_SpammyWords5 2191 1.86 2.73 1.34 122 XMGappySubj_01 2150 0.91 0.22 1.32 123 XM_B_Investor 2136 2.45 4.40 1.31 124 T_XMDrugObfuBody_00 2112 1.28 1.25 1.29 125 XM_SPF_SoftFail 2087 1.75 2.56 1.28 126 T_XMDrugObfuBody_08 2085 1.69 2.39 1.28 127 URI_NOVOWEL 2071 1.42 1.66 1.27 128 XMBSHREFv2 2031 0.89 0.29 1.24 129 XM_GoogleGroups 2009 1.03 0.68 1.23 130 XMBrknScrpt_02 1982 1.50 1.99 1.21 131 XM_SendGrid 1964 1.15 1.06 1.20 132 DKIM_INVALID 1925 3.08 6.31 1.18 133 TM2_M_VERY_LONG_WORD 1891 1.78 2.84 1.16 134 XMGappySubj_02 1863 0.73 0.02 1.14 135 LOW_PRICE 1834 0.79 0.21 1.12 136 URI_HEX 1801 1.21 1.40 1.10 137 HTML_EXTRA_CLOSE 1799 0.70 0.01 1.10 138 XM_OfRef6 1738 1.88 3.26 1.07 139 RCVD_IN_IADB_OPTIN 1726 0.77 0.27 1.06 140 XM_B_COPY_HTML 1710 1.15 1.31 1.05 141 XMPhish30 1657 1.29 1.74 1.02 142 SUBJ_ALL_CAPS 1624 1.08 1.23 1.00 143 XM_UB50 1560 1.43 2.22 0.96 144 TR_XM_Base64_M1 1435 0.88 0.89 0.88 145 TooManyTo_003 1427 0.72 0.46 0.87 146 TR_XM_MSPIKECOMBO 1426 3.64 8.35 0.87 147 RCVD_IN_MSPIKE_BL 1426 3.66 8.39 0.87 148 TR_XM_DK_SendGrid 1416 0.85 0.83 0.87 149 RCVD_IN_PSBL 1397 1.88 3.61 0.86 150 RELAYCOUNTRY_CA 1354 3.47 7.96 0.83 151 TR_XM_GMP_MSPIKE_UNDO2 1276 0.55 0.17 0.78 152 DKIM_ADSP_CUSTOM_MED 1269 0.78 0.77 0.78 153 XM_H_PHPMailer 1246 0.71 0.62 0.76 154 XMBdyGiftCard01 1229 1.35 2.37 0.75 155 TooManyTo_004 1164 0.60 0.41 0.71 156 RCVD_IN_MSPIKE_L3 1154 1.71 3.40 0.71 157 XMSubMetaSxObfu_02 1148 0.66 0.58 0.70 158 URI_TRY_3LD 1148 0.90 1.24 0.70 159 XMBody_17 1131 1.31 2.37 0.69 160 XM_ProductURIs 1115 0.99 1.50 0.68 161 HTML_TAG_BALANCE_BODY 1111 0.82 1.07 0.68 162 TR_XM_SpammyWords2 1109 4.68 11.49 0.68 163 XM_H_Long_From02 1062 1.49 2.93 0.65 164 XMLngstWrd_00 1045 0.52 0.31 0.64 165 TR_MetaPhish_Combo_01 1016 0.64 0.67 0.62 166 RCVD_IN_BL_SPAMCOP_NET 1012 4.16 10.19 0.62 167 TooManyTo_005 998 0.53 0.38 0.61 168 DKIM_ADSP_NXDOMAIN 992 1.02 1.72 0.61 169 T_Symld_Words_02 988 0.65 0.74 0.61 170 T_FILL_THIS_FORM_SHORT 964 1.23 2.32 0.59 171 XMGenDplmaNmb 962 0.91 1.45 0.59 172 XMNoVowels 952 0.52 0.42 0.58 173 XMBody_95 943 0.41 0.13 0.58 174 RCVD_IN_PBL 942 0.69 0.88 0.58 175 FONT_INVIS_POSTEXTRAS 940 0.37 0.02 0.58 176 T_XMHurry_00 925 1.04 1.85 0.57 177 MPART_ALT_DIFF_COUNT 896 0.89 1.46 0.55 178 XMLngstWrd_01 888 0.43 0.24 0.54 179 HTTPS_HTTP_MISMATCH 883 0.57 0.62 0.54 180 XMHTML_After_End 875 0.57 0.64 0.54 181 XM_Walgreens_Forge 869 0.35 0.04 0.53 182 T_TooManySym_04 841 0.36 0.08 0.52 183 XMSubMetaI_00 837 0.59 0.71 0.51 184 FORGED_GMAIL_RCVD 822 0.54 0.61 0.50 185 STY_INVIS_DIRECT 814 0.92 1.63 0.50 186 TR_XM_SpammyWords3 790 1.99 4.56 0.48 187 XM_B_REG_HTML 785 0.68 1.01 0.48 188 TM2_M_OBFU_COMMENT 780 0.64 0.92 0.48 189 DIET_1 773 0.87 1.55 0.47 190 XM_S_SubURI 760 0.31 0.05 0.47 191 SUBJ_DOLLARS 748 0.58 0.79 0.46 192 XM_URI_RBL 740 1.19 2.44 0.45 193 THIS_AD 738 0.72 1.17 0.45 194 XM_ShortIntro_01 736 0.51 0.62 0.45 195 RELAYCOUNTRY_AU 725 1.22 2.55 0.44 196 XMSlimDrugH 722 0.68 1.08 0.44 197 NML_ADSP_CUSTOM_MED 705 0.51 0.65 0.43 198 RCVD_IN_IADB_OPTIN_GT50 687 0.27 0.02 0.42 199 TR_LOTS_OF_MONEY3 678 0.80 1.45 0.42 200 NO_DNS_FOR_FROM 674 0.47 0.56 0.41 ----------------------------------------------------------------------