Email: 256713 Autolearn: 0 AvgScore: 5.56 AvgScanTime: 2.12 sec Spam: 86321 Autolearn: 0 AvgScore: 14.24 AvgScanTime: 1.45 sec Ham: 170392 Autolearn: 0 AvgScore: 1.16 AvgScanTime: 2.46 sec Time Spent Running SA: 150.95 hours Time Spent Processing Spam: 34.69 hours Time Spent Processing Ham: 116.26 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 82397 88.46 95.45 84.91 2 DKIM_SIGNED 79137 79.12 91.68 72.77 3 XM_DK_Pass 74608 76.89 86.43 72.06 4 DKIM_VALID 74185 76.43 85.94 71.62 5 XM_B_Unicode 73268 76.66 84.88 72.50 6 RELAYCOUNTRY_US 70906 82.55 82.14 82.75 7 DCC_CHECK 68406 60.41 79.25 50.87 8 XMListUnsubscribeExists 61611 58.47 71.37 51.94 9 DKIM_VALID_AU 60607 65.00 70.21 62.36 10 XM_B_SpammyWords 57881 54.01 67.05 47.41 11 LOC_TINY_FONT_1 45374 40.13 52.56 33.83 12 XM_B_Unicode3 44835 49.86 51.94 48.81 13 XM_DK_Undo_02 37854 18.68 43.85 5.93 14 XM_B_SpammyWords2 33036 26.91 38.27 21.15 15 FVGT_m_MULTI_ODD 31727 29.63 36.75 26.02 16 BAYES_50 30701 54.09 35.57 63.48 17 HTML_FONT_LOW_CONTRAST 28832 35.56 33.40 36.66 18 DKIM_VALID_EF 28383 29.68 32.88 28.05 19 BAYES_99 28212 14.08 32.68 4.66 20 TR_XM_DKIM_Undo 25961 11.79 30.07 2.52 21 T_KAM_HTML_FONT_INVALID 23878 22.64 27.66 20.09 22 MIME_HTML_ONLY 23272 21.49 26.96 18.71 23 TR_XM_DK_Unsub 22404 18.33 25.95 14.47 24 BAYES_999 21492 10.83 24.90 3.70 25 TR_DCC_Bayes_99 20606 9.68 23.87 2.49 26 XMSubLong 19171 21.86 22.21 21.69 27 DCC_CHECK_NEGATIVE 17425 39.36 20.19 49.07 28 RCVD_IN_MSPIKE_H2 17293 16.31 20.03 14.42 29 T_TM2_M_HEADER_IN_MSG 17211 24.28 19.94 26.48 30 XM_Multi_Part_URI 17107 16.89 19.82 15.40 31 TR_MAX_INTL_RELAY 16095 10.20 18.65 5.92 32 RELAYCOUNTRY_META 15864 7.92 18.38 2.62 33 XM_B_Unsub 15359 11.76 17.79 8.71 34 TR_XM_BayesUnsub 14706 10.30 17.04 6.88 35 UNPARSEABLE_RELAY 14662 14.36 16.99 13.04 36 RCVD_IN_BL_SPAMCOP_NET 12904 5.38 14.95 0.53 37 XM_B_SpammyWords3 12706 9.14 14.72 6.31 38 TR_XM_SpammyRelay 11687 5.39 13.54 1.26 39 BAYES_80 9905 6.21 11.47 3.54 40 TR_XM_SpammyWords2 9851 4.28 11.41 0.66 41 BOTNET_IPINHOSTNAME 9569 6.29 11.09 3.86 42 RCVD_IN_MSPIKE_BL 8920 4.01 10.33 0.81 43 TR_XM_MSPIKECOMBO 8891 4.00 10.30 0.81 44 BOTNET 8836 4.25 10.24 1.22 45 TR_XM_UnparsRelay 8569 4.60 9.93 1.90 46 LOTS_OF_MONEY 8405 6.73 9.74 5.21 47 BAYES_60 8351 7.94 9.67 7.06 48 HTML_IMAGE_RATIO_02 8302 6.55 9.62 5.00 49 FSL_BULK_SIG 7661 10.64 8.88 11.54 50 RCVD_IN_MSPIKE_WL 7628 12.81 8.84 14.82 51 TR_XM_SpammyWords4 7609 5.43 8.81 3.72 52 XM_Evil_Numbers_Gen 7513 11.33 8.70 12.67 53 RELAYCOUNTRY_CA 7210 3.28 8.35 0.71 54 XMSubMetaSx_00 5975 4.72 6.92 3.60 55 MPART_ALT_DIFF 5908 5.71 6.84 5.13 56 BAYES_95 5883 3.87 6.82 2.37 57 XM_H_Long_From01 5650 5.60 6.55 5.12 58 XM_UncommonTLD01 5422 5.39 6.28 4.94 59 XM_B_Phish_Phrases 5361 4.78 6.21 4.06 60 HTML_IMAGE_RATIO_04 5052 4.59 5.85 3.95 61 XM_Body_Dirty_Words 5027 3.38 5.82 2.14 62 DKIM_INVALID 4952 2.69 5.74 1.15 63 UNTRUSTED_Relay 4945 3.07 5.73 1.72 64 TR_XM_PhishingBody 4824 3.01 5.59 1.71 65 RCVD_IN_VALIDITY_RPBL 4807 1.91 5.57 0.06 66 LotsOfNums_01 4805 8.89 5.57 10.57 67 XM_H_GMP 4773 6.06 5.53 6.33 68 HTML_FONT_TINY_NORDNS 4671 1.85 5.41 0.04 69 XM_B_Investor 4595 2.58 5.32 1.19 70 TR_XM_SpammyWords3 4552 2.06 5.27 0.43 71 T_XMDrugObfuBody_14 4541 3.19 5.26 2.15 72 RCVD_IN_MSPIKE_L5 4482 1.79 5.19 0.06 73 RCVD_IN_PSBL 4353 2.22 5.04 0.80 74 XMStrtUSub 4116 5.24 4.77 5.48 75 TR_XM_SPAMCOP 4047 1.65 4.69 0.11 76 MIME_HTML_MOSTLY 3988 3.52 4.62 2.96 77 XMSexyCombo_05 3838 2.26 4.45 1.16 78 RCVD_IN_MSPIKE_H3 3638 5.95 4.21 6.83 79 XM_B_PhoneNumber 3618 5.40 4.19 6.02 80 TooManyTo_001 3485 4.85 4.04 5.26 81 XM_B_SpammyTLD 3417 2.90 3.96 2.36 82 T_FILL_THIS_FORM_SHORT 3391 1.94 3.93 0.93 83 XMNumbers 3199 4.00 3.71 4.16 84 RCVD_IN_MSPIKE_L3 3189 1.64 3.69 0.60 85 TR_XM_SpammyWords5 3085 2.09 3.57 1.33 86 TM2_M_VERY_LONG_WORD 3084 5.76 3.57 6.87 87 TR_XM_NoHeaderRelay 3082 1.31 3.57 0.16 88 XM_CamelCaseFrm001 2848 2.60 3.30 2.24 89 RCVD_IN_VALIDITY_SAFE 2654 4.96 3.07 5.91 90 XM_OfRef6 2608 1.66 3.02 0.98 91 XM_B_Unsub2 2578 2.10 2.99 1.66 92 XMPhish30 2549 1.56 2.95 0.85 93 T_XMDrugObfuBody_08 2529 1.64 2.93 0.98 94 DIET_1 2499 1.29 2.90 0.48 95 TR_XM_INV_DKIM 2412 0.95 2.79 0.02 96 HTML_IMAGE_RATIO_06 2406 3.43 2.79 3.76 97 USER_IN_DEF_DKIM_WL 2394 13.32 2.77 18.67 98 MIME_HTML_ONLY_MULTI 2374 2.73 2.75 2.73 99 XM_URI_RBL 2307 1.28 2.67 0.57 100 RELAYCOUNTRY_AU 2304 1.14 2.67 0.36 101 RCVD_IN_VALIDITY_CERTIFIED 2274 4.11 2.63 4.85 102 XM_SPF_SoftFail 2224 1.52 2.58 0.98 103 FROM_EXCESS_BASE64 2200 2.34 2.55 2.23 104 RCVD_IN_MSPIKE_H5 2095 3.95 2.43 4.72 105 XMBody_17 2047 1.11 2.37 0.48 106 DKIM_ADSP_NXDOMAIN 1943 1.09 2.25 0.50 107 TM2_M_URI_OPT_OUT 1901 2.09 2.20 2.03 108 RCVD_IN_MSPIKE_H4 1897 2.91 2.20 3.27 109 HTML_IMAGE_RATIO_08 1852 2.22 2.15 2.26 110 SpammyFromTLD_02 1840 0.85 2.13 0.19 111 T_TooManySym_01 1821 5.89 2.11 7.80 112 TR_XM_MSPIKECOMBO2 1820 0.73 2.11 0.03 113 MIME_QP_LONG_LINE 1819 2.75 2.11 3.08 114 XM_UB50 1762 1.32 2.04 0.95 115 XMStockSpam_06 1711 1.74 1.98 1.62 116 T_XMHurry_00 1686 1.04 1.95 0.58 117 XMBrknScrpt_02 1668 1.39 1.93 1.11 118 SUBJ_ALL_CAPS 1662 1.33 1.93 1.03 119 TR_LOTS_OF_MONEY3 1660 0.80 1.92 0.24 120 XMDiploma_00 1637 1.86 1.90 1.84 121 THIS_AD 1607 0.88 1.86 0.38 122 XM_B_SpammyWords4 1601 1.11 1.85 0.73 123 TR_Mismatch_TLD_02 1580 0.66 1.83 0.06 124 KHOP_HELO_FCRDNS 1521 3.77 1.76 4.79 125 SpammyFromTLD_01 1506 0.79 1.74 0.31 126 STY_INVIS_DIRECT 1483 0.91 1.72 0.50 127 XMBdyGiftCard01 1474 1.88 1.71 1.96 128 XM_B_URI_Unicode 1472 1.61 1.71 1.57 129 XM_H_Long_From02 1465 1.02 1.70 0.67 130 XM_B_Phish66 1457 0.74 1.69 0.26 131 T_REMOTE_IMAGE 1383 2.60 1.60 3.10 132 TR_XM_INTL_Spamhaus 1338 0.58 1.55 0.09 133 URI_NOVOWEL 1333 1.23 1.54 1.08 134 XM_ProductURIs 1319 0.93 1.53 0.62 135 HK_RANDOM_REPLYTO 1315 0.56 1.52 0.07 136 MAILING_LIST_MULTI 1309 2.17 1.52 2.50 137 HTML_IMAGE_ONLY_20 1292 0.80 1.50 0.44 138 XMSlimDrugH 1276 0.98 1.48 0.73 139 TR_XM_PHPDW 1274 0.73 1.48 0.35 140 BOTNET_NORDNS 1272 0.50 1.47 0.00 141 TR_XM_FormFill2 1270 0.73 1.47 0.35 142 TR_XM_PHPForged 1265 0.73 1.47 0.35 143 URI_HEX 1260 1.12 1.46 0.94 144 XM_H_PHPOS 1244 0.71 1.44 0.34 145 RCVD_IN_MSPIKE_L4 1220 0.57 1.41 0.14 146 TVD_RCVD_IP 1215 1.67 1.41 1.80 147 XM_B_COPY_HTML 1195 1.09 1.38 0.94 148 RDNS_DYNAMIC 1190 0.64 1.38 0.27 149 PDS_RDNS_DYNAMIC_FP 1164 0.48 1.35 0.05 150 MPART_ALT_DIFF_COUNT 1139 0.81 1.32 0.55 151 ANY_BOUNCE_MESSAGE 1135 7.82 1.31 11.11 152 BOUNCE_MESSAGE 1134 7.81 1.31 11.11 153 ALL_TRUSTED 1114 10.02 1.29 14.45 154 SHOPIFY_IMG_NOT_RCVD_SFY 1099 0.66 1.27 0.35 155 TR_XM_FormFill 1095 0.43 1.27 0.01 156 TR_XM_MaxSPIKE 1094 0.44 1.27 0.03 157 XM_HighProb1 1064 0.42 1.23 0.00 158 BAYES_40 1050 3.77 1.22 5.07 159 RCVD_IN_XBL 1036 0.41 1.20 0.01 160 XMSubMetaI_00 1032 0.67 1.20 0.40 161 URI_TRY_3LD 1027 0.82 1.19 0.63 162 RCVD_IN_PBL 1022 0.76 1.18 0.54 163 HELO_DYNAMIC_SPLIT_IP 1007 0.39 1.17 0.00 164 XM_SendGrid 1002 1.16 1.16 1.15 165 TR_XM_GMP_BULK_SIG 982 0.48 1.14 0.15 166 RCVD_IN_SBL_CSS 963 0.39 1.12 0.03 167 TR_XM_Base64_M1 948 1.12 1.10 1.13 168 RELAYCOUNTRY_IN 941 0.37 1.09 0.01 169 XMReplyNow 940 0.51 1.09 0.22 170 XM_UB99 933 0.36 1.08 0.00 171 BAYES_20 907 2.59 1.05 3.36 172 TR_Mismatch_TLD_01 907 0.51 1.05 0.23 173 XMSexyCombo_01 891 0.47 1.03 0.19 174 XM_S_SpammyWords 879 0.44 1.02 0.14 175 TR_XM_Spammywords 878 0.44 1.02 0.14 176 XM_H_DKIM_GOOG 873 0.35 1.01 0.01 177 XM_ShortIntro_01 862 0.61 1.00 0.41 178 HTML_MIME_NO_HTML_TAG 859 1.46 1.00 1.70 179 XM_DK_Undo_01 855 1.24 0.99 1.36 180 XM_UB60 847 0.37 0.98 0.06 181 T_XMDrugObfuBody_00 843 1.50 0.98 1.77 182 XMBody_78 827 0.53 0.96 0.32 183 XMGppyBdWords 822 0.40 0.95 0.12 184 FONT_INVIS_LONG_LINE 809 0.34 0.94 0.04 185 TR_XM_InvalidRelay 780 0.31 0.90 0.01 186 RELAYCOUNTRY_FR 777 0.46 0.90 0.23 187 HTML_TAG_BALANCE_BODY 776 0.90 0.90 0.89 188 XMGenDplmaNmb 772 1.02 0.89 1.08 189 XM_UB80 763 0.31 0.88 0.01 190 XM_PDF 759 1.63 0.88 2.01 191 URIBL_SBL 757 0.30 0.88 0.00 192 SH_BODYURI_REVERSE_SBL 757 0.30 0.88 0.00 193 URIBL_SBL_A 757 0.30 0.88 0.00 194 TM2_M_OBFU_COMMENT 750 0.62 0.87 0.49 195 RCVD_IN_IADB_LISTED 743 1.52 0.86 1.85 196 XM_B_REG_HTML 738 0.44 0.85 0.22 197 XM_B_SEO 732 0.48 0.85 0.29 198 TR_XM_RelayPhish 729 0.32 0.84 0.05 199 TR_XM_DK_SendGrid 725 0.84 0.84 0.85 200 LongTLD 720 0.48 0.83 0.30 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144685 88.46 95.45 84.91 2 RELAYCOUNTRY_US 141004 82.55 82.14 82.75 3 DKIM_SIGNED 123986 79.12 91.68 72.77 4 XM_B_Unicode 123530 76.66 84.88 72.50 5 XM_DK_Pass 122789 76.89 86.43 72.06 6 DKIM_VALID 122033 76.43 85.94 71.62 7 BAYES_50 108157 54.09 35.57 63.48 8 DKIM_VALID_AU 106256 65.00 70.21 62.36 9 XMListUnsubscribeExists 88496 58.47 71.37 51.94 10 DCC_CHECK 86677 60.41 79.25 50.87 11 DCC_CHECK_NEGATIVE 83609 39.36 20.19 49.07 12 XM_B_Unicode3 83169 49.86 51.94 48.81 13 XM_B_SpammyWords 80781 54.01 67.05 47.41 14 HTML_FONT_LOW_CONTRAST 62462 35.56 33.40 36.66 15 LOC_TINY_FONT_1 57638 40.13 52.56 33.83 16 DKIM_VALID_EF 47799 29.68 32.88 28.05 17 T_TM2_M_HEADER_IN_MSG 45125 24.28 19.94 26.48 18 FVGT_m_MULTI_ODD 44339 29.63 36.75 26.02 19 XMSubLong 36955 21.86 22.21 21.69 20 XM_B_SpammyWords2 36035 26.91 38.27 21.15 21 T_KAM_HTML_FONT_INVALID 34231 22.64 27.66 20.09 22 MIME_HTML_ONLY 31883 21.49 26.96 18.71 23 USER_IN_DEF_DKIM_WL 31805 13.32 2.77 18.67 24 XM_Multi_Part_URI 26239 16.89 19.82 15.40 25 RCVD_IN_MSPIKE_WL 25252 12.81 8.84 14.82 26 TR_XM_DK_Unsub 24651 18.33 25.95 14.47 27 ALL_TRUSTED 24614 10.02 1.29 14.45 28 RCVD_IN_MSPIKE_H2 24568 16.31 20.03 14.42 29 UNPARSEABLE_RELAY 22211 14.36 16.99 13.04 30 XM_Evil_Numbers_Gen 21583 11.33 8.70 12.67 31 FSL_BULK_SIG 19655 10.64 8.88 11.54 32 ANY_BOUNCE_MESSAGE 18934 7.82 1.31 11.11 33 BOUNCE_MESSAGE 18928 7.81 1.31 11.11 34 LotsOfNums_01 18017 8.89 5.57 10.57 35 XM_B_Unsub 14840 11.76 17.79 8.71 36 BAYES_00 14758 5.89 0.42 8.66 37 XM_DKIMWhitelistDomains 14669 5.72 0.00 8.61 38 T_TooManySym_01 13288 5.89 2.11 7.80 39 HTML_IMAGE_ONLY_32 12653 4.96 0.10 7.43 40 BAYES_60 12033 7.94 9.67 7.06 41 TR_XM_BayesUnsub 11731 10.30 17.04 6.88 42 TM2_M_VERY_LONG_WORD 11707 5.76 3.57 6.87 43 RCVD_IN_MSPIKE_H3 11639 5.95 4.21 6.83 44 TR_XM_DK_Bayes 11589 4.62 0.33 6.80 45 TR_XM_DK_Bayes1 11526 4.60 0.32 6.76 46 XM_H_GMP 10784 6.06 5.53 6.33 47 XM_B_SpammyWords3 10753 9.14 14.72 6.31 48 XM_B_PhoneNumber 10254 5.40 4.19 6.02 49 XM_DK_Undo_02 10105 18.68 43.85 5.93 50 TR_MAX_INTL_RELAY 10079 10.20 18.65 5.92 51 RCVD_IN_VALIDITY_SAFE 10070 4.96 3.07 5.91 52 TR_XM_DK_Bayes2 9899 3.93 0.21 5.81 53 XMStrtUSub 9338 5.24 4.77 5.48 54 MAY_BE_FORGED 9325 3.64 0.02 5.47 55 TooManyTo_001 8965 4.85 4.04 5.26 56 LOTS_OF_MONEY 8876 6.73 9.74 5.21 57 MPART_ALT_DIFF 8748 5.71 6.84 5.13 58 XM_H_Long_From01 8723 5.60 6.55 5.12 59 BAYES_40 8633 3.77 1.22 5.07 60 HTML_IMAGE_RATIO_02 8520 6.55 9.62 5.00 61 XM_UncommonTLD01 8420 5.39 6.28 4.94 62 RCVD_IN_VALIDITY_CERTIFIED 8270 4.11 2.63 4.85 63 KHOP_HELO_FCRDNS 8163 3.77 1.76 4.79 64 RCVD_IN_MSPIKE_H5 8041 3.95 2.43 4.72 65 BAYES_99 7941 14.08 32.68 4.66 66 T_TooManySym_02 7687 3.15 0.46 4.51 67 XMNumbers 7082 4.00 3.71 4.16 68 XM_B_Phish_Phrases 6913 4.78 6.21 4.06 69 INVALID_MSGID 6818 2.80 0.43 4.00 70 HTML_IMAGE_RATIO_04 6734 4.59 5.85 3.95 71 BOTNET_IPINHOSTNAME 6581 6.29 11.09 3.86 72 HTML_IMAGE_RATIO_06 6410 3.43 2.79 3.76 73 TR_XM_SpammyWords4 6343 5.43 8.81 3.72 74 TO_MALFORMED 6336 2.49 0.06 3.72 75 BAYES_999 6306 10.83 24.90 3.70 76 XMSubMetaSx_00 6135 4.72 6.92 3.60 77 BAYES_80 6034 6.21 11.47 3.54 78 MSGID_NOFQDN1 6008 2.38 0.12 3.53 79 BAYES_20 5732 2.59 1.05 3.36 80 RCVD_IN_MSPIKE_H4 5572 2.91 2.20 3.27 81 T_REMOTE_IMAGE 5290 2.60 1.60 3.10 82 MIME_QP_LONG_LINE 5245 2.75 2.11 3.08 83 MIME_HTML_MOSTLY 5039 3.52 4.62 2.96 84 MIME_CHARSET_FARAWAY 4731 1.97 0.38 2.78 85 T_TVD_MIME_NO_HEADERS 4729 1.86 0.06 2.78 86 MIME_HTML_ONLY_MULTI 4645 2.73 2.75 2.73 87 CHARSET_FARAWAY_HEADER 4511 1.83 0.20 2.65 88 RELAYCOUNTRY_META 4462 7.92 18.38 2.62 89 TR_XM_DKIM_Undo 4301 11.79 30.07 2.52 90 MAILING_LIST_MULTI 4256 2.17 1.52 2.50 91 TR_DCC_Bayes_99 4244 9.68 23.87 2.49 92 BAYES_95 4045 3.87 6.82 2.37 93 XM_B_SpammyTLD 4015 2.90 3.96 2.36 94 HTML_IMAGE_RATIO_08 3855 2.22 2.15 2.26 95 XM_CamelCaseFrm001 3821 2.60 3.30 2.24 96 FROM_EXCESS_BASE64 3798 2.34 2.55 2.23 97 T_XMDrugObfuBody_14 3656 3.19 5.26 2.15 98 XM_Body_Dirty_Words 3653 3.38 5.82 2.14 99 TM2_M_URI_OPT_OUT 3457 2.09 2.20 2.03 100 XM_PDF 3427 1.63 0.88 2.01 101 XMBdyGiftCard01 3343 1.88 1.71 1.96 102 TR_XM_UnparsRelay 3242 4.60 9.93 1.90 103 T_TooManySym_03 3182 1.28 0.13 1.87 104 RCVD_IN_IADB_LISTED 3147 1.52 0.86 1.85 105 XMDiploma_00 3139 1.86 1.90 1.84 106 TVD_RCVD_IP 3074 1.67 1.41 1.80 107 BAYES_05 3059 1.38 0.55 1.80 108 T_XMDrugObfuBody_00 3010 1.50 0.98 1.77 109 UNTRUSTED_Relay 2934 3.07 5.73 1.72 110 TR_XM_PhishingBody 2915 3.01 5.59 1.71 111 HTML_MIME_NO_HTML_TAG 2897 1.46 1.00 1.70 112 RCVD_IN_IADB_SPF 2872 1.37 0.76 1.69 113 XM_B_Unsub2 2820 2.10 2.99 1.66 114 IN_HORDE_ADDRESS_BOOK 2785 1.11 0.08 1.63 115 TooManyTo_002 2761 1.31 0.69 1.62 116 XMStockSpam_06 2755 1.74 1.98 1.62 117 XM_B_URI_Unicode 2672 1.61 1.71 1.57 118 RCVD_IN_IADB_SENDERID 2609 1.25 0.70 1.53 119 RCVD_IN_IADB_DK 2569 1.24 0.71 1.51 120 TVD_SPACE_RATIO 2424 1.11 0.48 1.42 121 XM_DK_Undo_01 2316 1.24 0.99 1.36 122 TR_XM_SpammyWords5 2273 2.09 3.57 1.33 123 XMGappySubj_01 2251 0.96 0.25 1.32 124 XM_GoogleGroups 2186 1.12 0.78 1.28 125 TR_XM_SpammyRelay 2142 5.39 13.54 1.26 126 PLING_QUERY 2129 1.09 0.77 1.25 127 BOTNET 2079 4.25 10.24 1.22 128 XM_B_Investor 2036 2.58 5.32 1.19 129 XMGappySubj_02 1991 0.79 0.04 1.17 130 XMSexyCombo_05 1969 2.26 4.45 1.16 131 XM_SendGrid 1968 1.16 1.16 1.15 132 DKIM_INVALID 1953 2.69 5.74 1.15 133 XMBSHREFv2 1950 0.85 0.28 1.14 134 RCVD_IN_IADB_VOUCHED 1929 0.89 0.43 1.13 135 TR_XM_Base64_M1 1918 1.12 1.10 1.13 136 XMBrknScrpt_02 1895 1.39 1.93 1.11 137 TR_Symld_Words 1845 0.99 0.79 1.08 138 XMGenDplmaNmb 1844 1.02 0.89 1.08 139 URI_NOVOWEL 1835 1.23 1.54 1.08 140 SUBJ_ALL_CAPS 1747 1.33 1.93 1.03 141 T_XMDrugObfuBody_08 1676 1.64 2.93 0.98 142 XM_SPF_SoftFail 1674 1.52 2.58 0.98 143 XM_OfRef6 1666 1.66 3.02 0.98 144 XM_UB50 1615 1.32 2.04 0.95 145 URI_HEX 1609 1.12 1.46 0.94 146 TooManyTo_003 1606 0.84 0.64 0.94 147 XM_B_COPY_HTML 1600 1.09 1.38 0.94 148 T_FILL_THIS_FORM_SHORT 1587 1.94 3.93 0.93 149 HTML_TAG_BALANCE_BODY 1522 0.90 0.90 0.89 150 RCVD_IN_IADB_OPTIN 1469 0.68 0.31 0.86 151 XMPhish30 1446 1.56 2.95 0.85 152 TR_XM_DK_SendGrid 1443 0.84 0.84 0.85 153 TR_XM_MSPIKECOMBO 1374 4.00 10.30 0.81 154 RCVD_IN_MSPIKE_BL 1374 4.01 10.33 0.81 155 RCVD_IN_PSBL 1356 2.22 5.04 0.80 156 TR_XM_GMP_MSPIKE_UNDO2 1276 0.56 0.19 0.75 157 XM_B_SpammyWords4 1249 1.11 1.85 0.73 158 XMSlimDrugH 1247 0.98 1.48 0.73 159 TooManyTo_004 1235 0.68 0.59 0.72 160 RELAYCOUNTRY_CA 1216 3.28 8.35 0.71 161 TR_MetaPhish_Combo_01 1210 0.66 0.56 0.71 162 XM_H_PHPMailer 1179 0.67 0.62 0.69 163 XM_H_Long_From02 1150 1.02 1.70 0.67 164 DKIM_ADSP_CUSTOM_MED 1132 0.67 0.67 0.66 165 TR_XM_SpammyWords2 1131 4.28 11.41 0.66 166 MSGID_FROM_MTA_HEADER 1120 0.55 0.34 0.66 167 URI_TRY_3LD 1069 0.82 1.19 0.63 168 XM_ProductURIs 1061 0.93 1.53 0.62 169 XM_B_DNDMA 1040 0.67 0.78 0.61 170 XMLngstWrd_00 1036 0.51 0.33 0.61 171 RCVD_IN_MSPIKE_L3 1020 1.64 3.69 0.60 172 TooManyTo_005 1019 0.59 0.57 0.60 173 TRACKER_ID 1018 0.42 0.06 0.60 174 T_XMHurry_00 994 1.04 1.95 0.58 175 XM_URI_RBL 974 1.28 2.67 0.57 176 MPART_ALT_DIFF_COUNT 934 0.81 1.32 0.55 177 RCVD_IN_PBL 924 0.76 1.18 0.54 178 T_TooManySym_04 921 0.36 0.02 0.54 179 RCVD_IN_BL_SPAMCOP_NET 911 5.38 14.95 0.53 180 XMLngstWrd_01 909 0.44 0.27 0.53 181 STY_INVIS_DIRECT 855 0.91 1.72 0.50 182 XMBody_95 854 0.38 0.14 0.50 183 XMSubMetaSxObfu_02 853 0.50 0.49 0.50 184 DKIM_ADSP_NXDOMAIN 852 1.09 2.25 0.50 185 TM2_M_OBFU_COMMENT 843 0.62 0.87 0.49 186 AD_PREFS 839 0.37 0.12 0.49 187 HTML_FONT_FACE_BAD 836 0.57 0.71 0.49 188 DIET_1 824 1.29 2.90 0.48 189 XMBody_17 811 1.11 2.37 0.48 190 XMNoVowels 799 0.42 0.32 0.47 191 HTML_TAG_BALANCE_CENTER 789 0.42 0.33 0.46 192 T_Symld_Words_02 788 0.54 0.70 0.46 193 XM_S_SubURI 763 0.33 0.08 0.45 194 XMHTML_After_End 758 0.55 0.76 0.44 195 HTML_IMAGE_ONLY_20 752 0.80 1.50 0.44 196 TR_XM_SpammyWords3 728 2.06 5.27 0.43 197 SUBJ_DOLLARS 725 0.55 0.80 0.43 198 XMLngstWrd_02 695 0.34 0.20 0.41 199 XM_ShortIntro_01 693 0.61 1.00 0.41 200 HTML_EXTRA_CLOSE 688 0.27 0.02 0.40 ----------------------------------------------------------------------