Email: 299525 Autolearn: 0 AvgScore: 5.91 AvgScanTime: 1.49 sec Spam: 107252 Autolearn: 0 AvgScore: 14.86 AvgScanTime: 1.65 sec Ham: 192273 Autolearn: 0 AvgScore: 0.92 AvgScanTime: 1.41 sec Time Spent Running SA: 124.35 hours Time Spent Processing Spam: 49.08 hours Time Spent Processing Ham: 75.27 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 103319 88.55 96.33 84.20 2 DKIM_SIGNED 99185 79.19 92.48 71.78 3 XM_B_Unicode 92471 76.59 86.22 71.23 4 RELAYCOUNTRY_US 90647 83.01 84.52 82.17 5 XM_DK_Pass 88766 75.30 82.76 71.14 6 DKIM_VALID 88144 74.82 82.18 70.71 7 DCC_CHECK 82840 52.60 77.24 38.86 8 XM_B_SpammyWords 74721 55.72 69.67 47.95 9 XMListUnsubscribeExists 73095 56.66 68.15 50.24 10 DKIM_VALID_AU 70102 62.69 65.36 61.20 11 XM_B_Unicode3 53128 47.39 49.54 46.20 12 LOC_TINY_FONT_1 52570 38.40 49.02 32.48 13 XM_DK_Undo_02 45293 18.76 42.23 5.68 14 HTML_FONT_LOW_CONTRAST 42899 37.25 40.00 35.71 15 FVGT_m_MULTI_ODD 41199 30.55 38.41 26.17 16 XM_B_SpammyWords2 40727 26.59 37.97 20.24 17 BAYES_50 40083 52.97 37.37 61.67 18 BAYES_99 34091 14.06 31.79 4.18 19 TR_XM_DKIM_Undo 33171 12.59 30.93 2.36 20 DKIM_VALID_EF 30844 28.44 28.76 28.26 21 T_KAM_HTML_FONT_INVALID 29807 23.60 27.79 21.26 22 MIME_HTML_ONLY 26831 21.53 25.02 19.58 23 BAYES_999 26113 10.82 24.35 3.27 24 XM_Multi_Part_URI 25043 17.70 23.35 14.55 25 TR_DCC_Bayes_99 24649 9.36 22.98 1.77 26 TR_XM_DK_Unsub 24560 17.24 22.90 14.09 27 DCC_CHECK_NEGATIVE 24039 47.25 22.41 61.11 28 XM_B_Unsub 23808 13.32 22.20 8.37 29 TR_XM_BayesUnsub 22588 11.78 21.06 6.61 30 XMSubLong 22398 23.24 20.88 24.55 31 RCVD_IN_BL_SPAMCOP_NET 21146 7.47 19.72 0.63 32 RCVD_IN_MSPIKE_H2 21143 15.68 19.71 13.43 33 T_TM2_M_HEADER_IN_MSG 21050 23.43 19.63 25.55 34 UNPARSEABLE_RELAY 19380 14.20 18.07 12.05 35 TR_MAX_INTL_RELAY 18102 10.58 16.88 7.06 36 XM_B_SpammyWords3 16399 9.38 15.29 6.09 37 RELAYCOUNTRY_META 16314 7.16 15.21 2.67 38 BOTNET 15572 6.00 14.52 1.25 39 LOTS_OF_MONEY 14846 8.99 13.84 6.29 40 FSL_BULK_SIG 14437 8.06 13.46 5.04 41 TR_XM_SpammyWords4 13560 7.47 12.64 4.59 42 MPART_ALT_DIFF 12817 7.86 11.95 5.58 43 TR_XM_SpammyRelay 12571 5.19 11.72 1.54 44 TR_XM_SpammyWords2 11943 4.29 11.14 0.47 45 BAYES_80 11431 6.58 10.66 4.31 46 DKIM_INVALID 11041 4.37 10.29 1.06 47 RCVD_IN_MSPIKE_WL 10480 15.35 9.77 18.47 48 TR_XM_UnparsRelay 10466 4.61 9.76 1.74 49 BAYES_60 10339 8.18 9.64 7.36 50 BOTNET_IPINHOSTNAME 10194 6.08 9.50 4.17 51 XM_B_Phish_Phrases 8794 5.53 8.20 4.05 52 DKIM_ADSP_NXDOMAIN 8350 3.04 7.79 0.40 53 TR_XM_MSPIKECOMBO 8089 3.13 7.54 0.68 54 RCVD_IN_MSPIKE_BL 8089 3.13 7.54 0.68 55 XM_Evil_Numbers_Gen 7990 10.48 7.45 12.17 56 RELAYCOUNTRY_CA 7690 3.04 7.17 0.73 57 HTML_IMAGE_RATIO_02 7341 5.38 6.84 4.56 58 TR_XM_SPAMCOP 7220 2.51 6.73 0.16 59 XMSubMetaSx_00 6926 4.44 6.46 3.32 60 XM_H_DKIM_GOOG 6923 2.32 6.45 0.01 61 LotsOfNums_01 6784 6.42 6.33 6.47 62 BAYES_95 6386 3.90 5.95 2.75 63 TR_XM_SpammyWords3 6304 2.37 5.88 0.42 64 XM_Body_Dirty_Words 6210 3.52 5.79 2.26 65 XMStrtUSub 5998 6.34 5.59 6.75 66 MIME_QP_LONG_LINE 5776 4.02 5.39 3.26 67 XM_H_GMP 5565 5.58 5.19 5.79 68 UNTRUSTED_Relay 5479 2.64 5.11 1.26 69 XM_B_SpammyTLD 5415 3.46 5.05 2.57 70 RCVD_IN_VALIDITY_RPBL 5341 1.80 4.98 0.03 71 TR_XM_PhishingBody 5325 2.86 4.96 1.68 72 XM_UncommonTLD01 5312 4.59 4.95 4.39 73 TR_XM_SpammyWords5 5161 2.58 4.81 1.33 74 RCVD_IN_MSPIKE_H3 5149 6.75 4.80 7.83 75 XMNumbers 5149 4.19 4.80 3.85 76 RCVD_IN_PSBL 5138 2.09 4.79 0.59 77 XM_OfRef6 5125 2.16 4.78 0.69 78 T_FILL_THIS_FORM_SHORT 4865 2.04 4.54 0.65 79 XM_H_Long_From01 4730 4.61 4.41 4.72 80 RCVD_IN_MSPIKE_L3 4704 1.94 4.39 0.58 81 XM_B_Investor 4670 2.41 4.35 1.33 82 T_XMDrugObfuBody_14 4643 2.79 4.33 1.93 83 MIME_HTML_MOSTLY 4593 3.41 4.28 2.93 84 XM_H_Long_From02 4242 1.87 3.96 0.71 85 TM2_M_VERY_LONG_WORD 4200 5.83 3.92 6.90 86 TooManyTo_001 4187 4.43 3.90 4.73 87 HTML_IMAGE_RATIO_04 4104 3.53 3.83 3.37 88 XM_B_PhoneNumber 3906 5.03 3.64 5.81 89 TR_LOTS_OF_MONEY3 3747 1.79 3.49 0.84 90 XMSexyCombo_05 3736 2.02 3.48 1.20 91 T_XMHurry_00 3688 1.87 3.44 0.99 92 XMDiploma_00 3672 1.99 3.42 1.19 93 XM_CamelCaseFrm001 3619 2.62 3.37 2.20 94 XMBody_17 3221 1.40 3.00 0.51 95 T_XMDrugObfuBody_08 3203 1.77 2.99 1.10 96 XM_URI_RBL 3151 1.25 2.94 0.31 97 XMPhish30 3144 1.68 2.93 0.98 98 XM_B_Unsub2 2989 1.71 2.79 1.11 99 HTML_IMAGE_RATIO_06 2944 3.69 2.74 4.22 100 USER_IN_DEF_DKIM_WL 2889 11.14 2.69 15.85 101 XM_SPF_SoftFail 2879 1.66 2.68 1.09 102 HTML_IMAGE_RATIO_08 2815 2.63 2.62 2.63 103 MIME_HTML_ONLY_MULTI 2810 2.90 2.62 3.06 104 RCVD_IN_MSPIKE_H5 2749 5.04 2.56 6.42 105 TR_XM_NoHeaderRelay 2692 1.01 2.51 0.17 106 TR_XM_MSPIKECOMBO2 2678 0.91 2.50 0.02 107 HTML_FONT_TINY_NORDNS 2586 0.90 2.41 0.05 108 RCVD_IN_MSPIKE_H4 2582 3.56 2.41 4.21 109 FROM_EXCESS_BASE64 2544 2.10 2.37 1.95 110 RCVD_IN_VALIDITY_SAFE 2543 3.44 2.37 4.04 111 RELAYCOUNTRY_AU 2532 1.32 2.36 0.74 112 RCVD_IN_MSPIKE_L4 2514 0.89 2.34 0.07 113 KHOP_HELO_FCRDNS 2398 4.00 2.24 4.99 114 BAYES_40 2371 4.59 2.21 5.92 115 XM_DK_Undo_01 2369 1.62 2.21 1.29 116 HTML_IMAGE_ONLY_20 2267 1.02 2.11 0.42 117 MAILING_LIST_MULTI 2218 2.03 2.07 2.01 118 XM_B_URI_Unicode 2205 1.81 2.06 1.68 119 T_TooManySym_01 2186 5.56 2.04 7.53 120 XM_B_SpammyWords4 2163 1.19 2.02 0.73 121 XMBrknScrpt_02 2139 1.42 1.99 1.09 122 TR_XM_INV_DKIM 2123 0.72 1.98 0.01 123 XMGenDplmaNmb 2106 1.04 1.96 0.52 124 FVGT_m_MULTI_ODD_EMAIL 2087 0.71 1.95 0.03 125 T_REMOTE_IMAGE 2051 2.90 1.91 3.45 126 XMStockSpam_06 2028 1.63 1.89 1.48 127 XM_UB50 2027 1.18 1.89 0.78 128 XMBdyGiftCard01 2012 0.87 1.88 0.32 129 RCVD_IN_VALIDITY_CERTIFIED 2004 2.63 1.87 3.06 130 TR_XM_MaxSPIKE 2004 0.68 1.87 0.02 131 TR_XM_INTL_Spamhaus 1988 0.72 1.85 0.09 132 SUBJ_ALL_CAPS 1977 1.37 1.84 1.10 133 URI_TRY_3LD 1966 1.15 1.83 0.77 134 ANY_BOUNCE_MESSAGE 1882 8.69 1.75 12.56 135 BOUNCE_MESSAGE 1882 8.69 1.75 12.56 136 RCVD_IN_XBL 1755 0.60 1.64 0.02 137 SpammyFromTLD_02 1740 0.74 1.62 0.24 138 BOTNET_NORDNS 1728 0.58 1.61 0.00 139 FROM_DOMAIN_NOVOWEL 1701 0.58 1.59 0.01 140 URI_HEX 1677 1.15 1.56 0.91 141 SpammyFromTLD_01 1671 0.77 1.56 0.33 142 TM2_M_URI_OPT_OUT 1644 1.63 1.53 1.68 143 STY_INVIS_DIRECT 1617 0.82 1.51 0.43 144 XMBody_78 1568 0.82 1.46 0.47 145 XM_SendGrid 1558 1.30 1.45 1.21 146 XM_ProductURIs 1539 0.85 1.43 0.53 147 RCVD_IN_SBL_CSS 1531 0.53 1.43 0.03 148 HTML_FONT_SIZE_LARGE 1490 0.52 1.39 0.04 149 XM_B_DNDMA 1488 0.84 1.39 0.53 150 RCVD_IN_PBL 1478 0.81 1.38 0.49 151 HTML_IMAGE_ONLY_24 1473 0.60 1.37 0.17 152 URI_NOVOWEL 1462 1.20 1.36 1.11 153 SHOPIFY_IMG_NOT_RCVD_SFY 1425 0.65 1.33 0.27 154 DIET_1 1414 0.69 1.32 0.33 155 TR_MetaPhish_Combo_01 1387 0.96 1.29 0.78 156 XM_B_COPY_HTML 1375 0.92 1.28 0.72 157 XM_Nigeria_01 1364 0.46 1.27 0.01 158 RDNS_DYNAMIC 1350 0.59 1.26 0.22 159 MPART_ALT_DIFF_COUNT 1349 0.78 1.26 0.52 160 XM_HighProb1 1339 0.45 1.25 0.00 161 HTML_SHORT_LINK_IMG_3 1316 0.48 1.23 0.07 162 BAYES_20 1314 3.21 1.23 4.32 163 XMSubMetaSxObfu_03 1287 0.71 1.20 0.44 164 SCC_CANSPAM_2 1284 0.43 1.20 0.00 165 THIS_AD 1266 0.84 1.18 0.64 166 URIBL_SBL 1198 0.40 1.12 0.01 167 URIBL_SBL_A 1198 0.40 1.12 0.01 168 XM_B_Phish66 1190 0.55 1.11 0.24 169 SH_BODYURI_REVERSE_SBL 1190 0.40 1.11 0.01 170 TR_XM_DK_SendGrid 1188 0.98 1.11 0.90 171 TVD_RCVD_IP 1183 1.41 1.10 1.58 172 T_XMDrugObfuBody_00 1172 0.96 1.09 0.89 173 RCVD_IN_IADB_LISTED 1166 1.84 1.09 2.26 174 TR_XM_Base64_M1 1151 0.71 1.07 0.51 175 HTML_IMAGE_ONLY_28 1151 0.53 1.07 0.22 176 RCVD_IN_SBL 1143 0.38 1.07 0.00 177 TR_XM_FormFill 1138 0.39 1.06 0.01 178 MultiRelay_CC 1128 0.41 1.05 0.05 179 XM_OfRef7 1121 0.45 1.05 0.11 180 TR_XM_GMP_BULK_SIG 1119 0.45 1.04 0.12 181 TR_XM_PHPDW 1091 0.55 1.02 0.29 182 HTML_TAG_BALANCE_BODY 1083 0.72 1.01 0.55 183 TR_XM_FormFill2 1079 0.55 1.01 0.30 184 TR_XM_PHPForged 1073 0.55 1.00 0.29 185 HTML_MIME_NO_HTML_TAG 1060 1.55 0.99 1.87 186 RCVD_IN_SBL_DROP 1055 0.35 0.98 0.00 187 XM_H_PHPOS 1049 0.53 0.98 0.28 188 TR_Mismatch_TLD_02 1045 0.40 0.97 0.07 189 ALL_TRUSTED 1039 10.06 0.97 15.13 190 TR_LOTS_OF_MONEY2 1031 0.49 0.96 0.23 191 T_MONEY_PERCENT 1031 0.49 0.96 0.23 192 XM_GoogleGroups 1019 1.03 0.95 1.07 193 XM_UB80 1013 0.35 0.94 0.02 194 XMReplyNow 1002 0.47 0.93 0.21 195 TR_XM_RelayPhish 997 0.38 0.93 0.07 196 TR_XM_Base64_L1 993 0.39 0.93 0.09 197 XMSexyCombo_01 982 0.41 0.92 0.13 198 RCVD_IN_IADB_SPF 962 1.63 0.90 2.03 199 DKIM_ADSP_CUSTOM_MED 957 0.75 0.89 0.67 200 TM2_M_OBFU_COMMENT 928 0.57 0.87 0.41 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 161897 88.55 96.33 84.20 2 RELAYCOUNTRY_US 157998 83.01 84.52 82.17 3 DKIM_SIGNED 138006 79.19 92.48 71.78 4 XM_B_Unicode 136949 76.59 86.22 71.23 5 XM_DK_Pass 136775 75.30 82.76 71.14 6 DKIM_VALID 135961 74.82 82.18 70.71 7 BAYES_50 118572 52.97 37.37 61.67 8 DKIM_VALID_AU 117663 62.69 65.36 61.20 9 DCC_CHECK_NEGATIVE 117493 47.25 22.41 61.11 10 XMListUnsubscribeExists 96607 56.66 68.15 50.24 11 XM_B_SpammyWords 92186 55.72 69.67 47.95 12 XM_B_Unicode3 88830 47.39 49.54 46.20 13 DCC_CHECK 74708 52.60 77.24 38.86 14 HTML_FONT_LOW_CONTRAST 68667 37.25 40.00 35.71 15 LOC_TINY_FONT_1 62441 38.40 49.02 32.48 16 DKIM_VALID_EF 54341 28.44 28.76 28.26 17 FVGT_m_MULTI_ODD 50320 30.55 38.41 26.17 18 T_TM2_M_HEADER_IN_MSG 49118 23.43 19.63 25.55 19 XMSubLong 47208 23.24 20.88 24.55 20 T_KAM_HTML_FONT_INVALID 40870 23.60 27.79 21.26 21 XM_B_SpammyWords2 38924 26.59 37.97 20.24 22 MIME_HTML_ONLY 37643 21.53 25.02 19.58 23 RCVD_IN_MSPIKE_WL 35507 15.35 9.77 18.47 24 USER_IN_DEF_DKIM_WL 30474 11.14 2.69 15.85 25 ALL_TRUSTED 29093 10.06 0.97 15.13 26 XM_Multi_Part_URI 27980 17.70 23.35 14.55 27 TR_XM_DK_Unsub 27085 17.24 22.90 14.09 28 RCVD_IN_MSPIKE_H2 25830 15.68 19.71 13.43 29 ANY_BOUNCE_MESSAGE 24149 8.69 1.75 12.56 30 BOUNCE_MESSAGE 24143 8.69 1.75 12.56 31 XM_Evil_Numbers_Gen 23400 10.48 7.45 12.17 32 UNPARSEABLE_RELAY 23167 14.20 18.07 12.05 33 XM_DKIMWhitelistDomains 16114 5.41 0.09 8.38 34 XM_B_Unsub 16095 13.32 22.20 8.37 35 RCVD_IN_MSPIKE_H3 15064 6.75 4.80 7.83 36 BAYES_00 14821 5.07 0.33 7.71 37 T_TooManySym_01 14473 5.56 2.04 7.53 38 BAYES_60 14154 8.18 9.64 7.36 39 TR_MAX_INTL_RELAY 13575 10.58 16.88 7.06 40 TM2_M_VERY_LONG_WORD 13260 5.83 3.92 6.90 41 XMStrtUSub 12981 6.34 5.59 6.75 42 TR_XM_BayesUnsub 12703 11.78 21.06 6.61 43 LotsOfNums_01 12434 6.42 6.33 6.47 44 RCVD_IN_MSPIKE_H5 12353 5.04 2.56 6.42 45 LOTS_OF_MONEY 12089 8.99 13.84 6.29 46 XM_B_SpammyWords3 11706 9.38 15.29 6.09 47 TR_XM_DK_Bayes 11665 3.96 0.18 6.07 48 TR_XM_DK_Bayes1 11582 3.93 0.17 6.02 49 BAYES_40 11391 4.59 2.21 5.92 50 XM_B_PhoneNumber 11175 5.03 3.64 5.81 51 XM_H_GMP 11135 5.58 5.19 5.79 52 XM_DK_Undo_02 10912 18.76 42.23 5.68 53 MPART_ALT_DIFF 10736 7.86 11.95 5.58 54 SHORT_URI_2 10300 3.57 0.37 5.36 55 TR_XM_DK_Bayes2 10201 3.46 0.15 5.31 56 FSL_BULK_SIG 9692 8.06 13.46 5.04 57 KHOP_HELO_FCRDNS 9594 4.00 2.24 4.99 58 TooManyTo_001 9087 4.43 3.90 4.73 59 XM_H_Long_From01 9074 4.61 4.41 4.72 60 TR_XM_SpammyWords4 8821 7.47 12.64 4.59 61 HTML_IMAGE_RATIO_02 8777 5.38 6.84 4.56 62 XM_UncommonTLD01 8446 4.59 4.95 4.39 63 BAYES_20 8304 3.21 1.23 4.32 64 BAYES_80 8280 6.58 10.66 4.31 65 HTML_IMAGE_RATIO_06 8109 3.69 2.74 4.22 66 RCVD_IN_MSPIKE_H4 8090 3.56 2.41 4.21 67 BAYES_99 8028 14.06 31.79 4.18 68 BOTNET_IPINHOSTNAME 8009 6.08 9.50 4.17 69 XM_B_Phish_Phrases 7781 5.53 8.20 4.05 70 RCVD_IN_VALIDITY_SAFE 7763 3.44 2.37 4.04 71 T_TooManySym_02 7662 2.69 0.38 3.98 72 XMNumbers 7404 4.19 4.80 3.85 73 T_TVD_MIME_NO_HEADERS 6710 2.26 0.05 3.49 74 T_REMOTE_IMAGE 6625 2.90 1.91 3.45 75 HTML_IMAGE_RATIO_04 6477 3.53 3.83 3.37 76 INVALID_MSGID 6411 2.25 0.31 3.33 77 XMSubMetaSx_00 6381 4.44 6.46 3.32 78 TO_MALFORMED 6335 2.12 0.00 3.29 79 BAYES_999 6287 10.82 24.35 3.27 80 MIME_QP_LONG_LINE 6268 4.02 5.39 3.26 81 MSGID_NOFQDN1 5926 1.99 0.02 3.08 82 RCVD_IN_VALIDITY_CERTIFIED 5881 2.63 1.87 3.06 83 MIME_HTML_ONLY_MULTI 5877 2.90 2.62 3.06 84 MIME_HTML_MOSTLY 5630 3.41 4.28 2.93 85 BAYES_95 5294 3.90 5.95 2.75 86 RELAYCOUNTRY_META 5128 7.16 15.21 2.67 87 HTML_IMAGE_RATIO_08 5062 2.63 2.62 2.63 88 XM_PDF 5002 1.79 0.34 2.60 89 XM_B_SpammyTLD 4949 3.46 5.05 2.57 90 TR_XM_DKIM_Undo 4534 12.59 30.93 2.36 91 MIME_CHARSET_FARAWAY 4389 1.56 0.27 2.28 92 RCVD_IN_IADB_LISTED 4353 1.84 1.09 2.26 93 XM_Body_Dirty_Words 4344 3.52 5.79 2.26 94 XM_CamelCaseFrm001 4232 2.62 3.37 2.20 95 CHARSET_FARAWAY_HEADER 4170 1.45 0.17 2.17 96 SHORT_URI_3 3985 1.37 0.10 2.07 97 RCVD_IN_IADB_SPF 3909 1.63 0.90 2.03 98 MAILING_LIST_MULTI 3861 2.03 2.07 2.01 99 FROM_EXCESS_BASE64 3740 2.10 2.37 1.95 100 T_XMDrugObfuBody_14 3715 2.79 4.33 1.93 101 HTML_MIME_NO_HTML_TAG 3594 1.55 0.99 1.87 102 RCVD_IN_IADB_SENDERID 3526 1.46 0.79 1.83 103 RCVD_IN_IADB_DK 3449 1.45 0.82 1.79 104 BAYES_05 3428 1.32 0.49 1.78 105 TR_DCC_Bayes_99 3399 9.36 22.98 1.77 106 TR_XM_UnparsRelay 3354 4.61 9.76 1.74 107 TR_XM_PhishingBody 3239 2.86 4.96 1.68 108 XM_B_URI_Unicode 3231 1.81 2.06 1.68 109 TM2_M_URI_OPT_OUT 3226 1.63 1.53 1.68 110 TVD_SPACE_RATIO 3197 1.10 0.10 1.66 111 T_TooManySym_03 3189 1.10 0.09 1.66 112 IN_HORDE_ADDRESS_BOOK 3056 1.05 0.07 1.59 113 TVD_RCVD_IP 3041 1.41 1.10 1.58 114 TR_XM_SpammyRelay 2970 5.19 11.72 1.54 115 RCVD_IN_IADB_VOUCHED 2874 1.19 0.65 1.49 116 XMStockSpam_06 2844 1.63 1.89 1.48 117 XMBody_95 2579 0.90 0.11 1.34 118 TooManyTo_002 2573 1.05 0.53 1.34 119 XM_B_Investor 2562 2.41 4.35 1.33 120 TR_XM_SpammyWords5 2556 2.58 4.81 1.33 121 XM_DK_Undo_01 2487 1.62 2.21 1.29 122 UNTRUSTED_Relay 2418 2.64 5.11 1.26 123 BOTNET 2394 6.00 14.52 1.25 124 XM_SendGrid 2324 1.30 1.45 1.21 125 XMLngstWrd_00 2319 0.84 0.20 1.21 126 XMSexyCombo_05 2309 2.02 3.48 1.20 127 LOW_PRICE 2286 0.87 0.29 1.19 128 XMDiploma_00 2284 1.99 3.42 1.19 129 XM_B_Unsub2 2138 1.71 2.79 1.11 130 URI_NOVOWEL 2137 1.20 1.36 1.11 131 XMBSHREFv2 2120 0.80 0.25 1.10 132 SUBJ_ALL_CAPS 2118 1.37 1.84 1.10 133 T_XMDrugObfuBody_08 2113 1.77 2.99 1.10 134 XMBrknScrpt_02 2105 1.42 1.99 1.09 135 XM_SPF_SoftFail 2089 1.66 2.68 1.09 136 XM_GoogleGroups 2056 1.03 0.95 1.07 137 RCVD_IN_IADB_OPTIN 2055 0.86 0.50 1.07 138 DKIM_INVALID 2045 4.37 10.29 1.06 139 HTML_IMAGE_ONLY_32 2019 0.73 0.15 1.05 140 XMGappySubj_01 1984 0.75 0.24 1.03 141 T_XMHurry_00 1912 1.87 3.44 0.99 142 XMPhish30 1875 1.68 2.93 0.98 143 TR_Symld_Words 1799 0.83 0.64 0.94 144 HTML_EXTRA_CLOSE 1780 0.60 0.03 0.93 145 URI_HEX 1756 1.15 1.56 0.91 146 TR_XM_DK_SendGrid 1734 0.98 1.11 0.90 147 T_XMDrugObfuBody_00 1715 0.96 1.09 0.89 148 TR_LOTS_OF_MONEY3 1612 1.79 3.49 0.84 149 TooManyTo_003 1523 0.67 0.46 0.79 150 XM_UB50 1496 1.18 1.89 0.78 151 TR_MetaPhish_Combo_01 1492 0.96 1.29 0.78 152 URI_TRY_3LD 1472 1.15 1.83 0.77 153 XMGappySubj_02 1447 0.49 0.02 0.75 154 RELAYCOUNTRY_AU 1417 1.32 2.36 0.74 155 RELAYCOUNTRY_CA 1413 3.04 7.17 0.73 156 XM_B_SpammyWords4 1398 1.19 2.02 0.73 157 TR_XM_GMP_MSPIKE_UNDO2 1393 0.53 0.18 0.72 158 XM_B_COPY_HTML 1386 0.92 1.28 0.72 159 XM_H_Long_From02 1366 1.87 3.96 0.71 160 XM_OfRef6 1336 2.16 4.78 0.69 161 RCVD_IN_MSPIKE_BL 1298 3.13 7.54 0.68 162 TR_XM_MSPIKECOMBO 1298 3.13 7.54 0.68 163 DKIM_ADSP_CUSTOM_MED 1288 0.75 0.89 0.67 164 XM_H_PHPMailer 1287 0.56 0.37 0.67 165 T_FILL_THIS_FORM_SHORT 1256 2.04 4.54 0.65 166 THIS_AD 1239 0.84 1.18 0.64 167 TooManyTo_004 1225 0.57 0.44 0.64 168 RCVD_IN_BL_SPAMCOP_NET 1219 7.47 19.72 0.63 169 HTTPS_HTTP_MISMATCH 1128 0.64 0.74 0.59 170 RCVD_IN_PSBL 1125 2.09 4.79 0.59 171 RCVD_IN_MSPIKE_L3 1119 1.94 4.39 0.58 172 HTML_TAG_BALANCE_BODY 1063 0.72 1.01 0.55 173 TooManyTo_005 1057 0.50 0.41 0.55 174 T_Symld_Words_02 1057 0.51 0.44 0.55 175 XM_B_DNDMA 1022 0.84 1.39 0.53 176 XM_ProductURIs 1020 0.85 1.43 0.53 177 XMGenDplmaNmb 999 1.04 1.96 0.52 178 MPART_ALT_DIFF_COUNT 996 0.78 1.26 0.52 179 XMBody_17 986 1.40 3.00 0.51 180 XMSubMetaSxObfu_02 982 0.45 0.34 0.51 181 T_OBFU_PDF_ATTACH 979 0.35 0.07 0.51 182 TR_XM_Base64_M1 971 0.71 1.07 0.51 183 HTML_FONT_FACE_BAD 961 0.54 0.62 0.50 184 XMNoVowels 952 0.48 0.46 0.50 185 RCVD_IN_PBL 947 0.81 1.38 0.49 186 XMBody_78 903 0.82 1.46 0.47 187 TR_XM_SpammyWords2 900 4.29 11.14 0.47 188 T_TooManySym_04 898 0.30 0.01 0.47 189 XMSubMetaSxObfu_03 844 0.71 1.20 0.44 190 XMSlimDrugH 830 0.55 0.76 0.43 191 STY_INVIS_DIRECT 827 0.82 1.51 0.43 192 FORGED_GMAIL_RCVD 824 0.55 0.77 0.43 193 ONE_TIME 809 0.28 0.04 0.42 194 FROM_GOV_DKIM_AU 809 0.30 0.07 0.42 195 HTML_IMAGE_ONLY_20 800 1.02 2.11 0.42 196 TR_XM_SpammyWords3 798 2.37 5.88 0.42 197 PLING_QUERY 790 0.56 0.82 0.41 198 TM2_M_OBFU_COMMENT 780 0.57 0.87 0.41 199 XMLngstWrd_01 774 0.31 0.15 0.40 200 MSGID_FROM_MTA_HEADER 772 0.30 0.13 0.40 ----------------------------------------------------------------------