Email: 256993 Autolearn: 0 AvgScore: 5.44 AvgScanTime: 1.35 sec Spam: 90481 Autolearn: 0 AvgScore: 14.37 AvgScanTime: 1.48 sec Ham: 166512 Autolearn: 0 AvgScore: 0.59 AvgScanTime: 1.29 sec Time Spent Running SA: 96.67 hours Time Spent Processing Spam: 37.22 hours Time Spent Processing Ham: 59.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 85586 87.84 94.59 84.18 2 DKIM_SIGNED 79207 80.85 87.54 77.21 3 XM_DK_Pass 75552 79.00 83.50 76.55 4 DKIM_VALID 74922 78.43 82.80 76.05 5 XM_B_Unicode 74432 76.70 82.26 73.68 6 RELAYCOUNTRY_US 68928 80.04 76.18 82.13 7 XM_B_SpammyWords 61495 54.26 67.96 46.81 8 XMListUnsubscribeExists 60367 58.50 66.72 54.03 9 DCC_CHECK 60158 45.64 66.49 34.31 10 DKIM_VALID_AU 59101 65.53 65.32 65.65 11 XM_B_Unicode3 45694 48.73 50.50 47.77 12 LOC_TINY_FONT_1 42657 39.80 47.14 35.81 13 XM_DK_Undo_02 39645 19.77 43.82 6.70 14 XM_B_SpammyWords2 35810 28.01 39.58 21.72 15 BAYES_99 32049 15.92 35.42 5.32 16 FVGT_m_MULTI_ODD 30937 29.43 34.19 26.84 17 HTML_FONT_LOW_CONTRAST 30804 32.88 34.04 32.24 18 BAYES_50 30379 51.33 33.58 60.98 19 DCC_CHECK_NEGATIVE 29875 54.17 33.02 65.66 20 T_KAM_HTML_FONT_INVALID 28668 26.35 31.68 23.45 21 TR_XM_DKIM_Undo 28644 12.83 31.66 2.61 22 DKIM_VALID_EF 27004 30.68 29.84 31.13 23 MIME_HTML_ONLY 26758 23.72 29.57 20.53 24 BAYES_999 24524 12.21 27.10 4.12 25 TR_XM_DK_Unsub 21156 18.71 23.38 16.17 26 RELAYCOUNTRY_META 20951 9.92 23.16 2.73 27 TR_DCC_Bayes_99 20022 8.60 22.13 1.25 28 XMSubLong 19952 23.11 22.05 23.69 29 XM_Multi_Part_URI 18673 17.62 20.64 15.99 30 RCVD_IN_MSPIKE_H2 17930 16.90 19.82 15.31 31 T_TM2_M_HEADER_IN_MSG 17153 22.00 18.96 23.65 32 TR_MAX_INTL_RELAY 16790 11.22 18.56 7.24 33 XM_B_Unsub 16658 12.61 18.41 9.46 34 TR_XM_BayesUnsub 16175 11.26 17.88 7.67 35 UNPARSEABLE_RELAY 15998 14.79 17.68 13.22 36 XM_B_SpammyWords3 14036 10.00 15.51 7.00 37 TR_XM_SpammyRelay 13943 6.34 15.41 1.41 38 RCVD_IN_BL_SPAMCOP_NET 12856 5.40 14.21 0.61 39 BOTNET_IPINHOSTNAME 12176 7.49 13.46 4.25 40 TR_XM_SpammyWords2 11361 4.86 12.56 0.68 41 BOTNET 10726 4.96 11.85 1.22 42 RCVD_IN_MSPIKE_BL 10654 4.84 11.77 1.08 43 TR_XM_MSPIKECOMBO 10654 4.84 11.77 1.08 44 BAYES_80 10289 6.85 11.37 4.39 45 TR_XM_UnparsRelay 9477 4.87 10.47 1.82 46 UNTRUSTED_Relay 9274 4.66 10.25 1.62 47 LOTS_OF_MONEY 9227 7.46 10.20 5.98 48 FSL_BULK_SIG 8585 5.31 9.49 3.04 49 RCVD_IN_MSPIKE_WL 8349 15.13 9.23 18.33 50 BAYES_60 8347 8.25 9.23 7.73 51 TR_XM_SpammyWords4 8320 5.91 9.20 4.12 52 RELAYCOUNTRY_CA 7984 3.61 8.82 0.78 53 XM_Evil_Numbers_Gen 7604 10.01 8.40 10.88 54 TR_XM_SpammyWords3 7251 3.19 8.01 0.57 55 TooManyTo_001 6912 6.43 7.64 5.78 56 XM_B_Phish_Phrases 6905 6.01 7.63 5.12 57 XM_UncommonTLD01 6050 5.55 6.69 4.93 58 BAYES_95 5994 4.18 6.62 2.85 59 HTML_IMAGE_RATIO_02 5967 5.57 6.59 5.01 60 TR_XM_SPAMCOP 5759 2.33 6.36 0.13 61 XM_Body_Dirty_Words 5696 3.93 6.30 2.65 62 MPART_ALT_DIFF 5464 6.23 6.04 6.33 63 LotsOfNums_01 4924 6.45 5.44 7.00 64 XMSubMetaSx_00 4917 4.08 5.43 3.35 65 XM_H_GMP 4757 6.02 5.26 6.44 66 MIME_QP_LONG_LINE 4514 4.15 4.99 3.70 67 T_XMDrugObfuBody_14 4477 2.86 4.95 1.72 68 RCVD_IN_MSPIKE_L3 4447 2.28 4.91 0.84 69 RCVD_IN_MSPIKE_L5 4415 1.77 4.88 0.08 70 RCVD_IN_MSPIKE_H3 4315 6.56 4.77 7.53 71 DKIM_INVALID 4285 2.42 4.74 1.16 72 XM_H_Long_From01 4281 5.30 4.73 5.60 73 ANY_BOUNCE_MESSAGE 4143 5.48 4.58 5.98 74 BOUNCE_MESSAGE 4143 5.48 4.58 5.97 75 HTML_IMAGE_RATIO_08 4098 3.23 4.53 2.52 76 DKIM_ADSP_NXDOMAIN 4039 1.89 4.46 0.49 77 RCVD_IN_VALIDITY_RPBL 3944 1.55 4.36 0.03 78 TR_XM_PhishingBody 3837 3.09 4.24 2.46 79 XMSexyCombo_05 3809 2.28 4.21 1.24 80 HTML_IMAGE_RATIO_04 3772 3.94 4.17 3.81 81 XM_CamelCaseFrm001 3735 3.09 4.13 2.53 82 XM_B_Investor 3682 2.29 4.07 1.32 83 XMBounce_01 3671 1.44 4.06 0.02 84 XM_B_SpammyTLD 3642 3.27 4.03 2.86 85 MIME_HTML_MOSTLY 3615 3.65 4.00 3.46 86 RELAYCOUNTRY_TH 3555 1.39 3.93 0.00 87 TR_XM_NoHeaderRelay 3464 1.45 3.83 0.16 88 USER_IN_DEF_DKIM_WL 3458 12.86 3.82 17.78 89 XM_B_PhoneNumber 3446 5.61 3.81 6.59 90 XM_URI_RBL 3428 1.55 3.79 0.34 91 XM_OfRef6 3314 1.72 3.66 0.66 92 XMNumbers 3267 4.14 3.61 4.43 93 T_REMOTE_IMAGE 3115 3.55 3.44 3.61 94 XMStrtUSub 3102 4.93 3.43 5.74 95 TR_XM_MSPIKECOMBO2 3074 1.22 3.40 0.04 96 TM2_M_VERY_LONG_WORD 2981 2.06 3.29 1.39 97 TR_XM_SpammyWords5 2932 2.05 3.24 1.40 98 T_FILL_THIS_FORM_SHORT 2843 1.77 3.14 1.03 99 MIME_HTML_ONLY_MULTI 2830 3.15 3.13 3.16 100 RCVD_IN_VALIDITY_SAFE 2824 4.59 3.12 5.39 101 XM_SPF_SoftFail 2715 1.71 3.00 1.01 102 XM_B_Unsub2 2709 2.12 2.99 1.65 103 RELAYCOUNTRY_AU 2627 1.27 2.90 0.38 104 T_XMDrugObfuBody_08 2468 1.84 2.73 1.35 105 HTML_IMAGE_RATIO_06 2343 3.58 2.59 4.12 106 XM_UB50 2340 1.52 2.59 0.94 107 RCVD_IN_VALIDITY_CERTIFIED 2337 3.60 2.58 4.15 108 SpammyFromTLD_02 2302 1.12 2.54 0.34 109 FROM_EXCESS_BASE64 2283 2.18 2.52 1.99 110 XMDiploma_00 2260 1.81 2.50 1.43 111 XMBody_17 2244 1.20 2.48 0.51 112 XMBdyGiftCard01 2190 1.10 2.42 0.39 113 TR_XM_INTL_Spamhaus 2126 0.89 2.35 0.09 114 XM_HighProb1 2091 0.81 2.31 0.00 115 T_TooManySym_01 2040 5.59 2.25 7.40 116 RCVD_IN_MSPIKE_H5 2021 5.10 2.23 6.65 117 XM_UB99 2019 0.79 2.23 0.00 118 RCVD_IN_MSPIKE_H4 2013 3.47 2.22 4.14 119 XM_UB80 2001 0.79 2.21 0.02 120 TR_XM_INV_DKIM 1995 0.79 2.20 0.02 121 RCVD_IN_SBL_CSS 1989 0.79 2.20 0.03 122 RCVD_IN_XBL 1969 0.77 2.18 0.01 123 T_XMHurry_00 1855 1.19 2.05 0.73 124 SUBJ_ALL_CAPS 1796 1.30 1.98 0.93 125 RCVD_IN_MSPIKE_L4 1792 0.80 1.98 0.15 126 XM_B_SpammyWords4 1772 1.30 1.96 0.95 127 TR_XM_MaxSPIKE 1752 0.70 1.94 0.04 128 XM_UB60 1710 0.70 1.89 0.06 129 TR_LOTS_OF_MONEY3 1698 0.84 1.88 0.28 130 ALL_TRUSTED 1698 10.39 1.88 15.01 131 RCVD_IN_PSBL 1693 1.31 1.87 1.00 132 SpammyFromTLD_01 1689 0.91 1.87 0.39 133 KHOP_HELO_FCRDNS 1685 2.09 1.86 2.21 134 XMStockSpam_06 1643 1.78 1.82 1.76 135 XM_B_URI_Unicode 1638 1.55 1.81 1.41 136 XMPhish30 1598 1.18 1.77 0.85 137 TR_Mismatch_TLD_02 1505 0.65 1.66 0.10 138 BOTNET_NORDNS 1501 0.59 1.66 0.01 139 XMBrknScrpt_02 1479 1.21 1.63 0.97 140 MAILING_LIST_MULTI 1475 2.12 1.63 2.39 141 MultiRelay_CC 1473 0.62 1.63 0.08 142 XM_B_DNDMA 1470 0.99 1.62 0.65 143 STY_INVIS_DIRECT 1437 0.94 1.59 0.59 144 TM2_M_URI_OPT_OUT 1424 1.85 1.57 1.99 145 URI_NOVOWEL 1383 1.43 1.53 1.37 146 XMSubMetaI_00 1330 0.79 1.47 0.42 147 XPRIO 1325 0.52 1.46 0.00 148 XM_DK_Undo_01 1293 1.44 1.43 1.45 149 T_XMDrugObfuBody_00 1290 1.18 1.43 1.04 150 LOW_PRICE 1286 0.77 1.42 0.42 151 XM_H_Long_From02 1269 0.98 1.40 0.76 152 URI_HEX 1268 1.35 1.40 1.32 153 RCVD_IN_PBL 1268 0.85 1.40 0.55 154 HK_RANDOM_REPLYTO 1259 0.56 1.39 0.11 155 XM_B_COPY_HTML 1241 1.11 1.37 0.97 156 DIET_1 1211 0.72 1.34 0.38 157 BAYES_40 1207 3.71 1.33 5.00 158 HTML_FONT_TINY_NORDNS 1207 0.51 1.33 0.07 159 TR_XM_InvalidRelay 1193 0.47 1.32 0.00 160 XM_ProductURIs 1172 1.48 1.30 1.58 161 SH_BODYURI_REVERSE_SBL 1167 0.46 1.29 0.00 162 URIBL_SBL 1167 0.46 1.29 0.00 163 URIBL_SBL_A 1167 0.46 1.29 0.00 164 XM_DIRTYINTL 1129 0.47 1.25 0.04 165 XM_SendGrid 1116 1.27 1.23 1.29 166 TR_XM_PHPForged 1106 0.64 1.22 0.32 167 SHOPIFY_IMG_NOT_RCVD_SFY 1105 0.67 1.22 0.37 168 BAYES_20 1101 2.65 1.22 3.43 169 RDNS_DYNAMIC 1101 0.59 1.22 0.26 170 TR_XM_FormFill2 1092 0.63 1.21 0.32 171 HTML_IMAGE_ONLY_20 1080 0.77 1.19 0.53 172 TR_XM_PHPDW 1068 0.62 1.18 0.31 173 XM_H_PHPOS 1043 0.60 1.15 0.31 174 URI_TRY_3LD 1043 0.92 1.15 0.80 175 MPART_ALT_DIFF_COUNT 1035 0.74 1.14 0.53 176 HDRS_MISSP 1030 0.41 1.14 0.01 177 TM2_M_OBFU_COMMENT 1013 0.67 1.12 0.43 178 TVD_RCVD_IP 1005 1.55 1.11 1.79 179 XMBody_78 993 0.60 1.10 0.32 180 TR_XM_FormFill 989 0.39 1.09 0.01 181 XM_UB999 989 0.38 1.09 0.00 182 XM_UB95 979 0.39 1.08 0.01 183 HELO_DYNAMIC_SPLIT_IP 964 0.39 1.07 0.02 184 XM_B_Phish66 936 0.69 1.03 0.50 185 XMGenDplmaNmb 934 0.77 1.03 0.62 186 TR_XM_DK_SendGrid 922 0.98 1.02 0.95 187 HTML_MIME_NO_HTML_TAG 890 1.55 0.98 1.85 188 XMBounce_02 888 0.35 0.98 0.01 189 XMReplyNow 888 0.49 0.98 0.22 190 XMSexyCombo_01 883 0.44 0.98 0.15 191 THIS_AD 881 0.52 0.97 0.27 192 XM_B_SEO 876 0.45 0.97 0.17 193 HTML_TAG_BALANCE_BODY 867 0.76 0.96 0.66 194 XM_B_REG_HTML 858 0.57 0.95 0.36 195 TR_XM_RelayPhish 854 0.38 0.94 0.08 196 SUBJ_DOLLARS 851 0.50 0.94 0.26 197 TooManyTo_002 837 1.43 0.93 1.70 198 TR_Mismatch_TLD_01 820 0.48 0.91 0.25 199 RCVD_IN_IADB_LISTED 810 1.80 0.90 2.29 200 TM2_M_A_HREF_HREF 806 0.64 0.89 0.50 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 140169 87.84 94.59 84.18 2 RELAYCOUNTRY_US 136763 80.04 76.18 82.13 3 DKIM_SIGNED 128567 80.85 87.54 77.21 4 XM_DK_Pass 127461 79.00 83.50 76.55 5 DKIM_VALID 126632 78.43 82.80 76.05 6 XM_B_Unicode 122684 76.70 82.26 73.68 7 DCC_CHECK_NEGATIVE 109340 54.17 33.02 65.66 8 DKIM_VALID_AU 109315 65.53 65.32 65.65 9 BAYES_50 101542 51.33 33.58 60.98 10 XMListUnsubscribeExists 89966 58.50 66.72 54.03 11 XM_B_Unicode3 79542 48.73 50.50 47.77 12 XM_B_SpammyWords 77952 54.26 67.96 46.81 13 LOC_TINY_FONT_1 59635 39.80 47.14 35.81 14 DCC_CHECK 57125 45.64 66.49 34.31 15 HTML_FONT_LOW_CONTRAST 53689 32.88 34.04 32.24 16 DKIM_VALID_EF 51842 30.68 29.84 31.13 17 FVGT_m_MULTI_ODD 44693 29.43 34.19 26.84 18 XMSubLong 39446 23.11 22.05 23.69 19 T_TM2_M_HEADER_IN_MSG 39379 22.00 18.96 23.65 20 T_KAM_HTML_FONT_INVALID 39040 26.35 31.68 23.45 21 XM_B_SpammyWords2 36168 28.01 39.58 21.72 22 MIME_HTML_ONLY 34190 23.72 29.57 20.53 23 RCVD_IN_MSPIKE_WL 30524 15.13 9.23 18.33 24 USER_IN_DEF_DKIM_WL 29600 12.86 3.82 17.78 25 TR_XM_DK_Unsub 26923 18.71 23.38 16.17 26 XM_Multi_Part_URI 26620 17.62 20.64 15.99 27 RCVD_IN_MSPIKE_H2 25491 16.90 19.82 15.31 28 ALL_TRUSTED 24994 10.39 1.88 15.01 29 UNPARSEABLE_RELAY 22017 14.79 17.68 13.22 30 XM_Evil_Numbers_Gen 18114 10.01 8.40 10.88 31 XM_B_Unsub 15748 12.61 18.41 9.46 32 XM_DKIMWhitelistDomains 14437 5.62 0.02 8.67 33 BAYES_00 14063 5.59 0.34 8.45 34 BAYES_60 12866 8.25 9.23 7.73 35 TR_XM_BayesUnsub 12770 11.26 17.88 7.67 36 RCVD_IN_MSPIKE_H3 12545 6.56 4.77 7.53 37 T_TooManySym_01 12329 5.59 2.25 7.40 38 TR_MAX_INTL_RELAY 12051 11.22 18.56 7.24 39 XM_B_SpammyWords3 11657 10.00 15.51 7.00 40 LotsOfNums_01 11648 6.45 5.44 7.00 41 TR_XM_DK_Bayes 11307 4.50 0.28 6.79 42 TR_XM_DK_Bayes1 11230 4.47 0.28 6.74 43 XM_DK_Undo_02 11161 19.77 43.82 6.70 44 RCVD_IN_MSPIKE_H5 11081 5.10 2.23 6.65 45 XM_B_PhoneNumber 10979 5.61 3.81 6.59 46 XM_H_GMP 10722 6.02 5.26 6.44 47 MPART_ALT_DIFF 10542 6.23 6.04 6.33 48 ANY_BOUNCE_MESSAGE 9951 5.48 4.58 5.98 49 LOTS_OF_MONEY 9950 7.46 10.20 5.98 50 BOUNCE_MESSAGE 9947 5.48 4.58 5.97 51 TooManyTo_001 9624 6.43 7.64 5.78 52 XMStrtUSub 9560 4.93 3.43 5.74 53 TR_XM_DK_Bayes2 9358 3.71 0.20 5.62 54 XM_H_Long_From01 9330 5.30 4.73 5.60 55 RCVD_IN_VALIDITY_SAFE 8971 4.59 3.12 5.39 56 BAYES_99 8853 15.92 35.42 5.32 57 XM_B_Phish_Phrases 8528 6.01 7.63 5.12 58 HTML_IMAGE_RATIO_02 8340 5.57 6.59 5.01 59 BAYES_40 8318 3.71 1.33 5.00 60 XM_UncommonTLD01 8206 5.55 6.69 4.93 61 T_TooManySym_02 7560 3.22 0.79 4.54 62 XMNumbers 7381 4.14 3.61 4.43 63 BAYES_80 7309 6.85 11.37 4.39 64 BOTNET_IPINHOSTNAME 7082 7.49 13.46 4.25 65 RCVD_IN_VALIDITY_CERTIFIED 6903 3.60 2.58 4.15 66 RCVD_IN_MSPIKE_H4 6898 3.47 2.22 4.14 67 BAYES_999 6867 12.21 27.10 4.12 68 HTML_IMAGE_RATIO_06 6862 3.58 2.59 4.12 69 TR_XM_SpammyWords4 6856 5.91 9.20 4.12 70 INVALID_MSGID 6711 2.74 0.37 4.03 71 TO_MALFORMED 6351 2.48 0.01 3.81 72 HTML_IMAGE_RATIO_04 6342 3.94 4.17 3.81 73 MIME_QP_LONG_LINE 6156 4.15 4.99 3.70 74 T_REMOTE_IMAGE 6014 3.55 3.44 3.61 75 MSGID_NOFQDN1 5901 2.30 0.01 3.54 76 MIME_HTML_MOSTLY 5765 3.65 4.00 3.46 77 BAYES_20 5717 2.65 1.22 3.43 78 XMSubMetaSx_00 5581 4.08 5.43 3.35 79 MIME_HTML_ONLY_MULTI 5270 3.15 3.13 3.16 80 FSL_BULK_SIG 5062 5.31 9.49 3.04 81 T_TVD_MIME_NO_HEADERS 4994 1.96 0.05 3.00 82 XM_B_SpammyTLD 4765 3.27 4.03 2.86 83 BAYES_95 4741 4.18 6.62 2.85 84 RELAYCOUNTRY_META 4553 9.92 23.16 2.73 85 XM_Body_Dirty_Words 4407 3.93 6.30 2.65 86 TR_XM_DKIM_Undo 4339 12.83 31.66 2.61 87 XM_PDF 4284 1.81 0.42 2.57 88 XM_CamelCaseFrm001 4206 3.09 4.13 2.53 89 HTML_IMAGE_RATIO_08 4195 3.23 4.53 2.52 90 TR_XM_PhishingBody 4104 3.09 4.24 2.46 91 MAILING_LIST_MULTI 3982 2.12 1.63 2.39 92 RCVD_IN_IADB_LISTED 3806 1.80 0.90 2.29 93 KHOP_HELO_FCRDNS 3681 2.09 1.86 2.21 94 RCVD_IN_IADB_SPF 3436 1.60 0.75 2.06 95 TM2_M_URI_OPT_OUT 3319 1.85 1.57 1.99 96 FROM_EXCESS_BASE64 3312 2.18 2.52 1.99 97 T_TooManySym_03 3160 1.27 0.11 1.90 98 RCVD_IN_IADB_SENDERID 3142 1.47 0.70 1.89 99 BAYES_05 3102 1.35 0.41 1.86 100 RCVD_IN_IADB_DK 3088 1.45 0.71 1.85 101 HTML_MIME_NO_HTML_TAG 3083 1.55 0.98 1.85 102 TR_XM_UnparsRelay 3036 4.87 10.47 1.82 103 TVD_RCVD_IP 2974 1.55 1.11 1.79 104 XMStockSpam_06 2930 1.78 1.82 1.76 105 T_XMDrugObfuBody_14 2864 2.86 4.95 1.72 106 TooManyTo_002 2835 1.43 0.93 1.70 107 XM_B_Unsub2 2749 2.12 2.99 1.65 108 UNTRUSTED_Relay 2691 4.66 10.25 1.62 109 XM_ProductURIs 2637 1.48 1.30 1.58 110 IN_HORDE_ADDRESS_BOOK 2614 1.05 0.09 1.57 111 XMGappySubj_01 2603 1.08 0.20 1.56 112 TVD_SPACE_RATIO 2526 1.07 0.24 1.52 113 RCVD_IN_IADB_VOUCHED 2453 1.13 0.51 1.47 114 XM_DK_Undo_01 2417 1.44 1.43 1.45 115 XMDiploma_00 2384 1.81 2.50 1.43 116 TR_XM_SpammyRelay 2354 6.34 15.41 1.41 117 XM_B_URI_Unicode 2351 1.55 1.81 1.41 118 XMBody_95 2346 0.95 0.10 1.41 119 TR_XM_SpammyWords5 2331 2.05 3.24 1.40 120 TM2_M_VERY_LONG_WORD 2315 2.06 3.29 1.39 121 URI_NOVOWEL 2280 1.43 1.53 1.37 122 T_XMDrugObfuBody_08 2253 1.84 2.73 1.35 123 XM_B_Investor 2206 2.29 4.07 1.32 124 URI_HEX 2190 1.35 1.40 1.32 125 XM_SendGrid 2154 1.27 1.23 1.29 126 TR_Symld_Words 2087 1.07 0.74 1.25 127 TR_DCC_Bayes_99 2075 8.60 22.13 1.25 128 XMSexyCombo_05 2061 2.28 4.21 1.24 129 XMGappySubj_02 2050 0.80 0.02 1.23 130 XMBSHREFv2 2027 0.95 0.45 1.22 131 BOTNET 2026 4.96 11.85 1.22 132 XM_GoogleGroups 1964 1.01 0.71 1.18 133 DKIM_INVALID 1935 2.42 4.74 1.16 134 HTML_EXTRA_CLOSE 1846 0.73 0.04 1.11 135 RCVD_IN_MSPIKE_BL 1797 4.84 11.77 1.08 136 TR_XM_MSPIKECOMBO 1796 4.84 11.77 1.08 137 RCVD_IN_IADB_OPTIN 1770 0.82 0.38 1.06 138 T_XMDrugObfuBody_00 1734 1.18 1.43 1.04 139 T_FILL_THIS_FORM_SHORT 1707 1.77 3.14 1.03 140 XM_SPF_SoftFail 1680 1.71 3.00 1.01 141 RCVD_IN_PSBL 1665 1.31 1.87 1.00 142 XMBrknScrpt_02 1618 1.21 1.63 0.97 143 XM_B_COPY_HTML 1618 1.11 1.37 0.97 144 TR_XM_DK_SendGrid 1589 0.98 1.02 0.95 145 TooManyTo_003 1586 0.92 0.86 0.95 146 XM_B_SpammyWords4 1575 1.30 1.96 0.95 147 XM_UB50 1568 1.52 2.59 0.94 148 SUBJ_ALL_CAPS 1542 1.30 1.98 0.93 149 TR_MetaPhish_Combo_01 1512 0.76 0.50 0.91 150 XMPhish30 1422 1.18 1.77 0.85 151 RCVD_IN_MSPIKE_L3 1404 2.28 4.91 0.84 152 TR_XM_Base64_M1 1383 0.81 0.78 0.83 153 TR_XM_GMP_MSPIKE_UNDO2 1359 0.59 0.17 0.82 154 XM_H_PHPMailer 1350 0.68 0.43 0.81 155 URI_TRY_3LD 1326 0.92 1.15 0.80 156 RELAYCOUNTRY_CA 1303 3.61 8.82 0.78 157 XM_H_Long_From02 1259 0.98 1.40 0.76 158 TooManyTo_004 1254 0.77 0.81 0.75 159 DKIM_ADSP_CUSTOM_MED 1242 0.76 0.79 0.75 160 T_XMHurry_00 1213 1.19 2.05 0.73 161 TR_XM_SpammyWords2 1140 4.86 12.56 0.68 162 XMSlimDrugH 1136 0.73 0.82 0.68 163 XMPhish14 1118 0.72 0.82 0.67 164 XM_OfRef6 1102 1.72 3.66 0.66 165 HTML_TAG_BALANCE_BODY 1098 0.76 0.96 0.66 166 XM_B_DNDMA 1083 0.99 1.62 0.65 167 TooManyTo_005 1082 0.69 0.78 0.65 168 XMGenDplmaNmb 1040 0.77 1.03 0.62 169 RCVD_IN_BL_SPAMCOP_NET 1017 5.40 14.21 0.61 170 STY_INVIS_DIRECT 978 0.94 1.59 0.59 171 TR_XM_SpammyWords3 944 3.19 8.01 0.57 172 RCVD_IN_PBL 909 0.85 1.40 0.55 173 XMNoVowels 908 0.47 0.33 0.55 174 T_TooManySym_04 897 0.36 0.03 0.54 175 HTML_IMAGE_ONLY_20 890 0.77 1.19 0.53 176 XMLngstWrd_00 880 0.49 0.42 0.53 177 MPART_ALT_DIFF_COUNT 879 0.74 1.14 0.53 178 HTTPS_HTTP_MISMATCH 857 0.57 0.68 0.51 179 XMBody_17 843 1.20 2.48 0.51 180 XM_B_Phish66 831 0.69 1.03 0.50 181 TM2_M_A_HREF_HREF 830 0.64 0.89 0.50 182 DKIM_ADSP_NXDOMAIN 823 1.89 4.46 0.49 183 FORGED_GMAIL_RCVD 822 0.54 0.64 0.49 184 T_Symld_Words_02 811 0.50 0.52 0.49 185 XM_ShortIntro_01 797 0.53 0.62 0.48 186 HTML_FONT_FACE_BAD 784 0.54 0.67 0.47 187 XM_S_SubURI 783 0.32 0.05 0.47 188 NML_ADSP_CUSTOM_MED 770 0.54 0.67 0.46 189 XM_RXBody 766 0.47 0.49 0.46 190 T_OBFU_PDF_ATTACH 764 0.32 0.07 0.46 191 MSGID_FROM_MTA_HEADER 763 0.38 0.24 0.46 192 XMHTML_After_End 748 0.49 0.58 0.45 193 XMSolicitRefs_0 716 0.46 0.51 0.43 194 TM2_M_OBFU_COMMENT 711 0.67 1.12 0.43 195 XMLngstWrd_01 707 0.41 0.38 0.42 196 XMSubMetaI_00 707 0.79 1.47 0.42 197 LOW_PRICE 704 0.77 1.42 0.42 198 XMSubMetaSxObfu_02 662 0.38 0.34 0.40 199 NO_DNS_FOR_FROM 656 0.47 0.60 0.39 200 XM_B_FormFill 645 0.26 0.02 0.39 ----------------------------------------------------------------------