Email: 263454 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.30 sec Spam: 80222 Autolearn: 0 AvgScore: 13.77 AvgScanTime: 1.46 sec Ham: 183232 Autolearn: 0 AvgScore: 0.82 AvgScanTime: 1.23 sec Time Spent Running SA: 95.49 hours Time Spent Processing Spam: 32.65 hours Time Spent Processing Ham: 62.85 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 76307 88.35 95.12 85.39 2 DKIM_SIGNED 73254 75.34 91.31 68.34 3 XM_DK_Pass 69605 73.59 86.77 67.83 4 DKIM_VALID 69157 73.10 86.21 67.36 5 XM_B_Unicode 66549 74.50 82.96 70.80 6 RELAYCOUNTRY_US 64723 83.11 80.68 84.17 7 DCC_CHECK 55759 44.47 69.51 33.51 8 XMListUnsubscribeExists 55008 54.27 68.57 48.00 9 DKIM_VALID_AU 54973 61.79 68.53 58.84 10 XM_B_SpammyWords 54132 53.77 67.48 47.76 11 XM_B_Unicode3 39861 48.53 49.69 48.03 12 LOC_TINY_FONT_1 39653 36.85 49.43 31.35 13 XM_DK_Undo_02 36258 17.98 45.20 6.06 14 XM_B_SpammyWords2 30791 25.91 38.38 20.45 15 HTML_FONT_LOW_CONTRAST 30329 40.02 37.81 40.98 16 BAYES_99 29272 14.59 36.49 5.00 17 FVGT_m_MULTI_ODD 28881 28.49 36.00 25.21 18 BAYES_50 27005 53.46 33.66 62.13 19 TR_XM_DKIM_Undo 25654 11.66 31.98 2.76 20 DKIM_VALID_EF 25541 27.64 31.84 25.80 21 DCC_CHECK_NEGATIVE 24080 55.36 30.02 66.46 22 MIME_HTML_ONLY 23605 21.32 29.42 17.76 23 BAYES_999 22808 11.44 28.43 4.00 24 T_KAM_HTML_FONT_INVALID 22393 21.79 27.91 19.11 25 TR_XM_DK_Unsub 19237 16.29 23.98 12.93 26 TR_DCC_Bayes_99 19128 8.67 23.84 2.03 27 XM_Multi_Part_URI 17689 16.87 22.05 14.60 28 XMSubLong 16750 21.14 20.88 21.26 29 RCVD_IN_MSPIKE_H2 16603 15.48 20.70 13.19 30 T_TM2_M_HEADER_IN_MSG 15473 27.30 19.29 30.80 31 UNPARSEABLE_RELAY 15460 14.20 19.27 11.99 32 RELAYCOUNTRY_META 15292 7.54 19.06 2.49 33 XM_B_Unsub 15148 11.41 18.88 8.14 34 TR_XM_BayesUnsub 14668 9.99 18.28 6.36 35 TR_MAX_INTL_RELAY 13931 9.46 17.37 6.00 36 XM_B_SpammyWords3 11603 8.75 14.46 6.24 37 TR_XM_SpammyRelay 10522 4.88 13.12 1.27 38 RCVD_IN_BL_SPAMCOP_NET 10432 4.34 13.00 0.54 39 TR_XM_UnparsRelay 9555 4.86 11.91 1.77 40 TR_XM_SpammyWords2 9363 4.13 11.67 0.83 41 BAYES_80 8436 5.80 10.52 3.73 42 BOTNET_IPINHOSTNAME 7892 5.60 9.84 3.74 43 RCVD_IN_MSPIKE_WL 7828 13.28 9.76 14.83 44 LOTS_OF_MONEY 7609 6.03 9.48 4.52 45 BOTNET 7310 3.52 9.11 1.06 46 RELAYCOUNTRY_CA 6981 3.11 8.70 0.66 47 BAYES_60 6973 7.19 8.69 6.54 48 TR_XM_SpammyWords4 6837 4.85 8.52 3.24 49 FSL_BULK_SIG 6579 4.62 8.20 3.05 50 XM_Evil_Numbers_Gen 6227 12.90 7.76 15.15 51 TR_XM_MSPIKECOMBO 6213 2.92 7.74 0.80 52 RCVD_IN_MSPIKE_BL 6213 2.92 7.74 0.80 53 HTML_IMAGE_RATIO_02 5975 5.46 7.45 4.59 54 XM_UncommonTLD01 5716 5.34 7.13 4.56 55 UNTRUSTED_Relay 5297 3.11 6.60 1.58 56 BAYES_95 5152 3.53 6.42 2.27 57 TR_XM_SpammyWords3 5062 2.25 6.31 0.47 58 MPART_ALT_DIFF 5045 5.39 6.29 5.00 59 XM_Body_Dirty_Words 4929 3.29 6.14 2.04 60 XM_B_Phish_Phrases 4912 4.74 6.12 4.13 61 TR_XM_SPAMCOP 4828 1.91 6.02 0.11 62 XMSubMetaSx_00 4716 4.91 5.88 4.49 63 T_XMDrugObfuBody_14 4704 3.08 5.86 1.86 64 LotsOfNums_01 4590 5.68 5.72 5.66 65 XM_H_GMP 4408 5.79 5.49 5.91 66 RCVD_IN_MSPIKE_L3 4222 2.06 5.26 0.66 67 RCVD_IN_MSPIKE_H3 4106 6.13 5.12 6.57 68 DKIM_INVALID 4097 2.24 5.11 0.98 69 XM_H_Long_From01 4081 4.80 5.09 4.68 70 HTML_IMAGE_RATIO_04 3744 4.17 4.67 3.95 71 XMSexyCombo_05 3729 2.20 4.65 1.13 72 TR_XM_PhishingBody 3653 2.55 4.55 1.67 73 MIME_HTML_MOSTLY 3557 3.44 4.43 3.00 74 XMStrtUSub 3556 4.91 4.43 5.12 75 XM_B_Investor 3546 2.37 4.42 1.48 76 XM_B_PhoneNumber 3476 5.28 4.33 5.69 77 HTML_IMAGE_RATIO_08 3375 2.92 4.21 2.35 78 TM2_M_VERY_LONG_WORD 3369 10.01 4.20 12.56 79 TR_XM_SpammyWords5 3108 2.26 3.87 1.55 80 USER_IN_DEF_DKIM_WL 3098 12.99 3.86 16.99 81 XM_URI_RBL 3050 1.54 3.80 0.55 82 XM_B_SpammyTLD 2909 2.75 3.63 2.36 83 XMNumbers 2689 3.99 3.35 4.27 84 T_FILL_THIS_FORM_SHORT 2530 1.27 3.15 0.45 85 TooManyTo_001 2446 4.33 3.05 4.89 86 T_XMDrugObfuBody_08 2441 1.72 3.04 1.14 87 FROM_EXCESS_BASE64 2380 2.11 2.97 1.73 88 XM_CamelCaseFrm001 2320 2.30 2.89 2.04 89 MIME_HTML_ONLY_MULTI 2294 2.59 2.86 2.48 90 XM_OfRef6 2281 1.28 2.84 0.59 91 XM_SPF_SoftFail 2280 1.51 2.84 0.93 92 RELAYCOUNTRY_AU 2257 1.10 2.81 0.34 93 XM_B_Unsub2 2200 1.63 2.74 1.14 94 XMBody_17 2191 1.10 2.73 0.39 95 RCVD_IN_VALIDITY_SAFE 2149 4.91 2.68 5.89 96 T_TooManySym_01 2103 6.07 2.62 7.58 97 XM_B_SpammyWords4 2081 1.29 2.59 0.73 98 TR_XM_MSPIKECOMBO2 2078 0.80 2.59 0.01 99 TR_XM_NoHeaderRelay 2070 0.89 2.58 0.15 100 SpammyFromTLD_02 2013 0.87 2.51 0.15 101 RCVD_IN_MSPIKE_H5 2009 4.08 2.50 4.78 102 T_REMOTE_IMAGE 1984 2.71 2.47 2.81 103 HTML_IMAGE_RATIO_06 1939 3.03 2.42 3.30 104 XM_UB50 1929 1.34 2.40 0.88 105 HK_RANDOM_REPLYTO 1874 0.77 2.34 0.09 106 XMBdyGiftCard01 1819 1.20 2.27 0.73 107 TR_XM_INV_DKIM 1795 0.70 2.24 0.03 108 XMStockSpam_06 1765 1.78 2.20 1.60 109 TR_XM_INTL_Spamhaus 1763 0.74 2.20 0.09 110 SUBJ_ALL_CAPS 1749 1.34 2.18 0.98 111 RCVD_IN_VALIDITY_CERTIFIED 1738 4.09 2.17 4.94 112 TM2_M_URI_OPT_OUT 1734 1.93 2.16 1.83 113 T_XMHurry_00 1714 1.09 2.14 0.63 114 RCVD_IN_MSPIKE_H4 1713 3.07 2.14 3.48 115 XMDiploma_00 1713 1.42 2.14 1.11 116 KHOP_HELO_FCRDNS 1664 5.89 2.07 7.56 117 RCVD_IN_VALIDITY_RPBL 1652 0.65 2.06 0.03 118 RCVD_IN_XBL 1594 0.61 1.99 0.01 119 XMPhish30 1593 1.17 1.99 0.82 120 TR_XM_MaxSPIKE 1556 0.60 1.94 0.01 121 RCVD_IN_SBL_CSS 1555 0.60 1.94 0.01 122 XM_B_URI_Unicode 1530 1.47 1.91 1.28 123 MIME_QP_LONG_LINE 1518 2.53 1.89 2.81 124 XM_HighProb1 1478 0.56 1.84 0.00 125 XM_B_COPY_HTML 1463 1.51 1.82 1.38 126 SpammyFromTLD_01 1456 0.79 1.81 0.34 127 RDNS_DYNAMIC 1415 0.70 1.76 0.23 128 STY_INVIS_DIRECT 1398 0.86 1.74 0.48 129 XMBrknScrpt_02 1391 1.22 1.73 1.00 130 HTML_TAG_BALANCE_BODY 1388 1.04 1.73 0.73 131 BOTNET_NORDNS 1374 0.52 1.71 0.00 132 RCVD_IN_PSBL 1358 1.18 1.69 0.96 133 TR_Mismatch_TLD_02 1353 0.58 1.69 0.09 134 XM_ProductURIs 1351 0.88 1.68 0.53 135 MAILING_LIST_MULTI 1335 2.65 1.66 3.09 136 TR_LOTS_OF_MONEY3 1332 0.66 1.66 0.22 137 RCVD_IN_MSPIKE_L4 1330 0.56 1.66 0.08 138 HTML_MIME_NO_HTML_TAG 1317 1.76 1.64 1.82 139 XMSubMetaI_00 1314 0.95 1.64 0.65 140 SHOPIFY_IMG_NOT_RCVD_SFY 1292 0.70 1.61 0.31 141 XMReplyNow 1255 0.60 1.56 0.18 142 URI_HEX 1219 1.19 1.52 1.05 143 XM_SendGrid 1219 1.24 1.52 1.11 144 URI_NOVOWEL 1203 1.28 1.50 1.18 145 ALL_TRUSTED 1179 9.62 1.47 13.19 146 TVD_RCVD_IP 1174 1.56 1.46 1.61 147 BAYES_40 1174 4.82 1.46 6.29 148 RCVD_IN_PBL 1165 0.80 1.45 0.51 149 DIET_1 1146 0.71 1.43 0.40 150 TR_XM_PHPForged 1126 0.64 1.40 0.30 151 HELO_DYNAMIC_SPLIT_IP 1116 0.43 1.39 0.01 152 HTML_TAG_BALANCE_CENTER 1107 0.62 1.38 0.29 153 TR_XM_PHPDW 1100 0.62 1.37 0.30 154 XM_UB99 1094 0.42 1.36 0.00 155 TR_XM_FormFill2 1093 0.62 1.36 0.30 156 MPART_ALT_DIFF_COUNT 1074 0.74 1.34 0.47 157 XM_B_REG_HTML 1056 0.61 1.32 0.30 158 XM_B_Phish66 1052 0.58 1.31 0.25 159 XM_H_PHPOS 1049 0.59 1.31 0.28 160 MultiRelay_CC 1042 0.46 1.30 0.09 161 HTML_FONT_TINY_NORDNS 1031 0.44 1.29 0.07 162 TR_XM_FormFill 1020 0.39 1.27 0.00 163 TR_XM_DK_SendGrid 999 0.96 1.25 0.84 164 HTML_IMAGE_ONLY_20 963 0.68 1.20 0.45 165 TR_XM_Base64_L1 924 0.42 1.15 0.10 166 TM2_M_OBFU_COMMENT 921 0.66 1.15 0.44 167 TR_Mismatch_TLD_01 913 0.55 1.14 0.29 168 THIS_AD 884 0.42 1.10 0.13 169 XM_B_DNDMA 881 0.59 1.10 0.37 170 URI_TRY_3LD 867 0.76 1.08 0.62 171 T_XMDrugObfuBody_00 858 0.97 1.07 0.92 172 XMBody_78 848 0.48 1.06 0.22 173 TR_XM_InvalidRelay 842 0.32 1.05 0.01 174 BAYES_20 838 3.00 1.04 3.85 175 XMPhish14 812 0.54 1.01 0.34 176 LongTLD 809 0.47 1.01 0.23 177 T_MONEY_PERCENT 806 0.45 1.00 0.21 178 TR_LOTS_OF_MONEY2 806 0.45 1.00 0.21 179 LOW_PRICE 806 0.45 1.00 0.21 180 XM_H_Long_From02 803 0.68 1.00 0.54 181 XM_UB60 794 0.35 0.99 0.07 182 TR_XM_Base64_M1 783 0.95 0.98 0.93 183 XMSlimDrugH 760 0.76 0.95 0.67 184 XM_UB999 759 0.29 0.95 0.00 185 XM_UB80 750 0.29 0.93 0.01 186 SH_BODYURI_REVERSE_SBL 749 0.29 0.93 0.01 187 URIBL_SBL 748 0.29 0.93 0.01 188 HTML_FONT_FACE_BAD 748 0.58 0.93 0.42 189 URIBL_SBL_A 748 0.29 0.93 0.01 190 XM_DK_Undo_01 746 1.18 0.93 1.28 191 RCVD_IN_IADB_LISTED 732 1.51 0.91 1.77 192 XM_DIRTYINTL 729 0.31 0.91 0.04 193 TM2_M_A_HREF_HREF 714 0.47 0.89 0.29 194 XM_B_SEO 701 0.36 0.87 0.14 195 PLING_QUERY 700 0.83 0.87 0.81 196 GOOG_REDIR_HTML_ONLY 689 0.33 0.86 0.09 197 HTTPS_HTTP_MISMATCH 683 0.52 0.85 0.37 198 XMGenDplmaNmb 678 0.65 0.85 0.56 199 RCVD_IN_MSPIKE_L5 662 0.29 0.83 0.06 200 TR_Caps_n_Bayes_99 652 0.26 0.81 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156460 88.35 95.12 85.39 2 RELAYCOUNTRY_US 154229 83.11 80.68 84.17 3 XM_B_Unicode 129736 74.50 82.96 70.80 4 DKIM_SIGNED 125221 75.34 91.31 68.34 5 XM_DK_Pass 124280 73.59 86.77 67.83 6 DKIM_VALID 123425 73.10 86.21 67.36 7 DCC_CHECK_NEGATIVE 121779 55.36 30.02 66.46 8 BAYES_50 113835 53.46 33.66 62.13 9 DKIM_VALID_AU 107813 61.79 68.53 58.84 10 XM_B_Unicode3 88005 48.53 49.69 48.03 11 XMListUnsubscribeExists 87956 54.27 68.57 48.00 12 XM_B_SpammyWords 87516 53.77 67.48 47.76 13 HTML_FONT_LOW_CONTRAST 75097 40.02 37.81 40.98 14 DCC_CHECK 61403 44.47 69.51 33.51 15 LOC_TINY_FONT_1 57440 36.85 49.43 31.35 16 T_TM2_M_HEADER_IN_MSG 56438 27.30 19.29 30.80 17 DKIM_VALID_EF 47282 27.64 31.84 25.80 18 FVGT_m_MULTI_ODD 46186 28.49 36.00 25.21 19 XMSubLong 38957 21.14 20.88 21.26 20 XM_B_SpammyWords2 37473 25.91 38.38 20.45 21 T_KAM_HTML_FONT_INVALID 35009 21.79 27.91 19.11 22 MIME_HTML_ONLY 32551 21.32 29.42 17.76 23 USER_IN_DEF_DKIM_WL 31135 12.99 3.86 16.99 24 ANY_BOUNCE_MESSAGE 30127 11.68 0.81 16.44 25 BOUNCE_MESSAGE 30123 11.68 0.81 16.44 26 XM_Evil_Numbers_Gen 27768 12.90 7.76 15.15 27 RCVD_IN_MSPIKE_WL 27167 13.28 9.76 14.83 28 XM_Multi_Part_URI 26749 16.87 22.05 14.60 29 ALL_TRUSTED 24171 9.62 1.47 13.19 30 RCVD_IN_MSPIKE_H2 24167 15.48 20.70 13.19 31 TR_XM_DK_Unsub 23689 16.29 23.98 12.93 32 HTML_IMAGE_ONLY_32 23229 8.87 0.17 12.68 33 TM2_M_VERY_LONG_WORD 23012 10.01 4.20 12.56 34 UNPARSEABLE_RELAY 21963 14.20 19.27 11.99 35 BAYES_00 15355 6.02 0.64 8.38 36 XM_B_Unsub 14908 11.41 18.88 8.14 37 XM_DKIMWhitelistDomains 14494 5.51 0.04 7.91 38 T_TooManySym_01 13884 6.07 2.62 7.58 39 KHOP_HELO_FCRDNS 13861 5.89 2.07 7.56 40 TR_XM_DK_Bayes 12083 4.69 0.35 6.59 41 RCVD_IN_MSPIKE_H3 12035 6.13 5.12 6.57 42 TR_XM_DK_Bayes1 11997 4.66 0.34 6.55 43 BAYES_60 11981 7.19 8.69 6.54 44 TR_XM_BayesUnsub 11650 9.99 18.28 6.36 45 BAYES_40 11527 4.82 1.46 6.29 46 XM_B_SpammyWords3 11438 8.75 14.46 6.24 47 XM_DK_Undo_02 11098 17.98 45.20 6.06 48 TR_MAX_INTL_RELAY 10991 9.46 17.37 6.00 49 XM_H_GMP 10833 5.79 5.49 5.91 50 RCVD_IN_VALIDITY_SAFE 10792 4.91 2.68 5.89 51 TR_XM_DK_Bayes2 10573 4.06 0.16 5.77 52 XM_B_PhoneNumber 10424 5.28 4.33 5.69 53 LotsOfNums_01 10380 5.68 5.72 5.66 54 MIME_CHARSET_FARAWAY 10118 3.99 0.47 5.52 55 CHARSET_FARAWAY_HEADER 9895 3.83 0.25 5.40 56 XMStrtUSub 9387 4.91 4.43 5.12 57 MPART_ALT_DIFF 9167 5.39 6.29 5.00 58 BAYES_99 9156 14.59 36.49 5.00 59 RCVD_IN_VALIDITY_CERTIFIED 9049 4.09 2.17 4.94 60 TooManyTo_001 8959 4.33 3.05 4.89 61 T_TooManySym_02 8776 3.55 0.73 4.79 62 RCVD_IN_MSPIKE_H5 8751 4.08 2.50 4.78 63 XM_H_Long_From01 8570 4.80 5.09 4.68 64 HTML_IMAGE_RATIO_02 8419 5.46 7.45 4.59 65 XM_UncommonTLD01 8356 5.34 7.13 4.56 66 LOTS_OF_MONEY 8277 6.03 9.48 4.52 67 XMSubMetaSx_00 8223 4.91 5.88 4.49 68 XMNumbers 7816 3.99 3.35 4.27 69 XM_B_Phish_Phrases 7571 4.74 6.12 4.13 70 BAYES_999 7325 11.44 28.43 4.00 71 HTML_IMAGE_RATIO_04 7242 4.17 4.67 3.95 72 BAYES_20 7056 3.00 1.04 3.85 73 BOTNET_IPINHOSTNAME 6861 5.60 9.84 3.74 74 BAYES_80 6839 5.80 10.52 3.73 75 INVALID_MSGID 6683 2.69 0.50 3.65 76 RCVD_IN_MSPIKE_H4 6381 3.07 2.14 3.48 77 TO_MALFORMED 6328 2.41 0.02 3.45 78 HTML_IMAGE_RATIO_06 6039 3.03 2.42 3.30 79 TR_XM_SpammyWords4 5944 4.85 8.52 3.24 80 MSGID_NOFQDN1 5923 2.31 0.21 3.23 81 MAILING_LIST_MULTI 5658 2.65 1.66 3.09 82 FSL_BULK_SIG 5584 4.62 8.20 3.05 83 MIME_HTML_MOSTLY 5498 3.44 4.43 3.00 84 MIME_QP_LONG_LINE 5155 2.53 1.89 2.81 85 T_REMOTE_IMAGE 5154 2.71 2.47 2.81 86 T_TVD_MIME_NO_HEADERS 5065 1.94 0.05 2.76 87 TR_XM_DKIM_Undo 5065 11.66 31.98 2.76 88 RELAYCOUNTRY_META 4565 7.54 19.06 2.49 89 MIME_HTML_ONLY_MULTI 4537 2.59 2.86 2.48 90 XM_B_SpammyTLD 4326 2.75 3.63 2.36 91 HTML_IMAGE_RATIO_08 4313 2.92 4.21 2.35 92 BAYES_95 4151 3.53 6.42 2.27 93 XM_Body_Dirty_Words 3745 3.29 6.14 2.04 94 XM_CamelCaseFrm001 3739 2.30 2.89 2.04 95 TR_DCC_Bayes_99 3726 8.67 23.84 2.03 96 T_TooManySym_03 3626 1.42 0.15 1.98 97 XM_PDF 3416 1.42 0.42 1.86 98 T_XMDrugObfuBody_14 3404 3.08 5.86 1.86 99 TM2_M_URI_OPT_OUT 3346 1.93 2.16 1.83 100 BAYES_05 3331 1.45 0.61 1.82 101 HTML_MIME_NO_HTML_TAG 3330 1.76 1.64 1.82 102 RCVD_IN_IADB_LISTED 3249 1.51 0.91 1.77 103 TR_XM_UnparsRelay 3241 4.86 11.91 1.77 104 FROM_EXCESS_BASE64 3169 2.11 2.97 1.73 105 TR_XM_PhishingBody 3065 2.55 4.55 1.67 106 RCVD_IN_IADB_SPF 2955 1.36 0.79 1.61 107 TVD_RCVD_IP 2943 1.56 1.46 1.61 108 XMStockSpam_06 2926 1.78 2.20 1.60 109 UNTRUSTED_Relay 2891 3.11 6.60 1.58 110 TR_XM_SpammyWords5 2833 2.26 3.87 1.55 111 XMGappySubj_01 2775 1.10 0.14 1.51 112 RCVD_IN_IADB_SENDERID 2736 1.26 0.73 1.49 113 IN_HORDE_ADDRESS_BOOK 2707 1.06 0.11 1.48 114 XM_B_Investor 2704 2.37 4.42 1.48 115 RCVD_IN_IADB_DK 2658 1.24 0.74 1.45 116 TooManyTo_002 2586 1.18 0.65 1.41 117 XM_B_COPY_HTML 2527 1.51 1.82 1.38 118 TVD_SPACE_RATIO 2472 1.02 0.27 1.35 119 XM_DK_Undo_01 2353 1.18 0.93 1.28 120 XM_B_URI_Unicode 2346 1.47 1.91 1.28 121 TR_XM_SpammyRelay 2335 4.88 13.12 1.27 122 XMNoVowels 2260 1.01 0.50 1.23 123 XMSubMetaSxObfu_03 2235 1.01 0.54 1.22 124 XMGappySubj_02 2222 0.86 0.05 1.21 125 URI_NOVOWEL 2163 1.28 1.50 1.18 126 T_XMDrugObfuBody_08 2097 1.72 3.04 1.14 127 XM_B_Unsub2 2085 1.63 2.74 1.14 128 XMSexyCombo_05 2070 2.20 4.65 1.13 129 RCVD_IN_IADB_VOUCHED 2038 0.93 0.51 1.11 130 XM_SendGrid 2037 1.24 1.52 1.11 131 XMDiploma_00 2029 1.42 2.14 1.11 132 XMBSHREFv2 1995 0.84 0.28 1.09 133 XM_GoogleGroups 1972 0.96 0.70 1.08 134 BOTNET 1951 3.52 9.11 1.06 135 URI_HEX 1917 1.19 1.52 1.05 136 XMBrknScrpt_02 1830 1.22 1.73 1.00 137 DKIM_INVALID 1796 2.24 5.11 0.98 138 SUBJ_ALL_CAPS 1789 1.34 2.18 0.98 139 RCVD_IN_PSBL 1754 1.18 1.69 0.96 140 TR_Symld_Words 1729 0.87 0.70 0.94 141 TR_XM_Base64_M1 1707 0.95 0.98 0.93 142 XM_SPF_SoftFail 1698 1.51 2.84 0.93 143 T_XMDrugObfuBody_00 1685 0.97 1.07 0.92 144 XM_UB50 1607 1.34 2.40 0.88 145 XM_H_PHPMailer 1554 0.77 0.58 0.85 146 TR_XM_DK_SendGrid 1532 0.96 1.25 0.84 147 TR_XM_SpammyWords2 1524 4.13 11.67 0.83 148 RCVD_IN_IADB_OPTIN 1503 0.69 0.38 0.82 149 XMPhish30 1497 1.17 1.99 0.82 150 PLING_QUERY 1485 0.83 0.87 0.81 151 RCVD_IN_MSPIKE_BL 1469 2.92 7.74 0.80 152 TR_XM_MSPIKECOMBO 1467 2.92 7.74 0.80 153 TR_MetaPhish_Combo_01 1363 0.66 0.48 0.74 154 TooManyTo_003 1358 0.69 0.58 0.74 155 HTML_TAG_BALANCE_BODY 1339 1.04 1.73 0.73 156 XMBdyGiftCard01 1338 1.20 2.27 0.73 157 TR_XM_GMP_MSPIKE_UNDO2 1334 0.58 0.23 0.73 158 XM_B_SpammyWords4 1330 1.29 2.59 0.73 159 T_TooManySym_04 1291 0.50 0.03 0.70 160 XMSlimDrugH 1236 0.76 0.95 0.67 161 SUBJ_DOLLARS 1227 0.69 0.73 0.67 162 RCVD_IN_MSPIKE_L3 1213 2.06 5.26 0.66 163 RELAYCOUNTRY_CA 1211 3.11 8.70 0.66 164 DKIM_ADSP_CUSTOM_MED 1201 0.70 0.81 0.66 165 XMSubMetaI_00 1184 0.95 1.64 0.65 166 T_XMHurry_00 1153 1.09 2.14 0.63 167 URI_TRY_3LD 1143 0.76 1.08 0.62 168 MSGID_FROM_MTA_HEADER 1139 0.56 0.40 0.62 169 TooManyTo_004 1121 0.59 0.54 0.61 170 XM_OfRef6 1088 1.28 2.84 0.59 171 XMGenDplmaNmb 1026 0.65 0.85 0.56 172 XM_URI_RBL 1014 1.54 3.80 0.55 173 XM_H_Long_From02 997 0.68 1.00 0.54 174 RCVD_IN_BL_SPAMCOP_NET 995 4.34 13.00 0.54 175 XM_ProductURIs 969 0.88 1.68 0.53 176 XMBody_95 948 0.40 0.12 0.52 177 TooManyTo_005 943 0.52 0.52 0.51 178 RCVD_IN_PBL 936 0.80 1.45 0.51 179 STY_INVIS_DIRECT 872 0.86 1.74 0.48 180 MPART_ALT_DIFF_COUNT 866 0.74 1.34 0.47 181 TR_XM_SpammyWords3 860 2.25 6.31 0.47 182 DKIM_ADSP_NXDOMAIN 839 0.55 0.75 0.46 183 HTML_IMAGE_ONLY_20 828 0.68 1.20 0.45 184 T_FILL_THIS_FORM_SHORT 828 1.27 3.15 0.45 185 XMSubMetaSxObfu_02 820 0.49 0.60 0.45 186 TM2_M_OBFU_COMMENT 813 0.66 1.15 0.44 187 XMLngstWrd_00 791 0.39 0.30 0.43 188 XM_S_SubURI 786 0.31 0.05 0.43 189 AD_PREFS 780 0.34 0.15 0.43 190 HTML_FONT_FACE_BAD 769 0.58 0.93 0.42 191 FORGED_GMAIL_RCVD 754 0.48 0.62 0.41 192 NML_ADSP_CUSTOM_MED 745 0.49 0.68 0.41 193 DIET_1 734 0.71 1.43 0.40 194 XMHTML_After_End 721 0.48 0.69 0.39 195 XMBody_17 715 1.10 2.73 0.39 196 NO_DNS_FOR_FROM 706 0.47 0.66 0.39 197 HTML_EXTRA_CLOSE 704 0.27 0.01 0.38 198 XM_B_DNDMA 686 0.59 1.10 0.37 199 HTTPS_HTTP_MISMATCH 686 0.52 0.85 0.37 200 XMLngstWrd_01 663 0.33 0.26 0.36 ----------------------------------------------------------------------