Email: 258901 Autolearn: 0 AvgScore: 5.49 AvgScanTime: 1.45 sec Spam: 88892 Autolearn: 0 AvgScore: 14.20 AvgScanTime: 1.56 sec Ham: 170009 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.40 sec Time Spent Running SA: 104.46 hours Time Spent Processing Spam: 38.51 hours Time Spent Processing Ham: 65.95 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 84137 88.38 94.65 85.10 2 DKIM_SIGNED 79891 80.70 89.87 75.91 3 XM_DK_Pass 75973 78.64 85.47 75.07 4 DKIM_VALID 75450 78.13 84.88 74.60 5 XM_B_Unicode 73454 76.81 82.63 73.76 6 RELAYCOUNTRY_US 70232 81.20 79.01 82.34 7 DCC_CHECK 67439 53.13 75.87 41.25 8 XMListUnsubscribeExists 61350 58.46 69.02 52.95 9 XM_B_SpammyWords 60668 55.55 68.25 48.91 10 DKIM_VALID_AU 59559 65.07 67.00 64.05 11 XM_B_Unicode3 42941 47.14 48.31 46.53 12 LOC_TINY_FONT_1 42902 41.48 48.26 37.93 13 XM_DK_Undo_02 40532 19.51 45.60 5.88 14 XM_B_SpammyWords2 34525 27.54 38.84 21.63 15 BAYES_99 30851 14.98 34.71 4.67 16 HTML_FONT_LOW_CONTRAST 30485 33.88 34.29 33.66 17 BAYES_50 30395 52.79 34.19 62.51 18 FVGT_m_MULTI_ODD 29666 29.23 33.37 27.06 19 TR_XM_DKIM_Undo 29616 12.80 33.32 2.07 20 DKIM_VALID_EF 28703 30.56 32.29 29.66 21 T_KAM_HTML_FONT_INVALID 28021 26.02 31.52 23.14 22 MIME_HTML_ONLY 25805 23.08 29.03 19.97 23 BAYES_999 23309 11.42 26.22 3.68 24 TR_XM_DK_Unsub 22475 18.67 25.28 15.21 25 TR_DCC_Bayes_99 21713 9.60 24.43 1.84 26 DCC_CHECK_NEGATIVE 20995 46.65 23.62 58.69 27 XM_Multi_Part_URI 19447 18.00 21.88 15.98 28 RELAYCOUNTRY_META 18714 9.21 21.05 3.01 29 RCVD_IN_MSPIKE_H2 18450 16.60 20.76 14.42 30 XMSubLong 17955 21.66 20.20 22.43 31 T_TM2_M_HEADER_IN_MSG 17764 22.48 19.98 23.78 32 XM_B_Unsub 16964 13.17 19.08 10.09 33 TR_MAX_INTL_RELAY 16747 11.08 18.84 7.02 34 TR_XM_BayesUnsub 16193 11.60 18.22 8.14 35 UNPARSEABLE_RELAY 14823 14.89 16.68 13.95 36 RCVD_IN_BL_SPAMCOP_NET 13728 5.71 15.44 0.63 37 TR_XM_SpammyRelay 13391 6.24 15.06 1.63 38 XM_B_SpammyWords3 13082 9.59 14.72 6.91 39 TR_XM_SpammyWords2 10250 4.28 11.53 0.49 40 LOTS_OF_MONEY 10051 7.83 11.31 6.02 41 BAYES_80 9927 6.65 11.17 4.29 42 RCVD_IN_MSPIKE_WL 9281 16.21 10.44 19.23 43 BOTNET_IPINHOSTNAME 9169 6.26 10.31 4.15 44 TR_XM_SpammyWords4 9105 6.45 10.24 4.47 45 FSL_BULK_SIG 8592 6.25 9.67 4.46 46 BOTNET 8497 3.99 9.56 1.08 47 BAYES_60 7877 8.00 8.86 7.54 48 RCVD_IN_MSPIKE_BL 7753 3.62 8.72 0.96 49 TR_XM_MSPIKECOMBO 7745 3.62 8.71 0.96 50 RELAYCOUNTRY_CA 7629 3.72 8.58 1.18 51 TR_XM_UnparsRelay 7343 3.88 8.26 1.58 52 UNTRUSTED_Relay 7157 3.72 8.05 1.45 53 XM_Evil_Numbers_Gen 7094 11.00 7.98 12.58 54 XM_B_Phish_Phrases 6898 5.75 7.76 4.71 55 HTML_IMAGE_RATIO_02 6498 6.25 7.31 5.69 56 TR_XM_SpammyWords3 5918 2.70 6.66 0.63 57 BAYES_95 5904 4.07 6.64 2.73 58 MPART_ALT_DIFF 5879 6.30 6.61 6.13 59 XMSubMetaSx_00 5743 4.57 6.46 3.59 60 XM_UncommonTLD01 5673 5.46 6.38 4.98 61 TR_XM_SPAMCOP 5429 2.21 6.11 0.16 62 XM_Body_Dirty_Words 5290 3.60 5.95 2.37 63 RCVD_IN_MSPIKE_L3 5241 2.58 5.90 0.85 64 XMStrtUSub 4902 6.12 5.51 6.44 65 XM_H_GMP 4840 5.72 5.44 5.86 66 MIME_HTML_MOSTLY 4506 4.30 5.07 3.90 67 DKIM_INVALID 4441 2.57 5.00 1.30 68 TooManyTo_001 4361 5.21 4.91 5.36 69 XM_OfRef6 4316 2.23 4.86 0.85 70 T_XMDrugObfuBody_14 4124 2.69 4.64 1.67 71 TR_XM_NoHeaderRelay 4122 1.71 4.64 0.18 72 RCVD_IN_MSPIKE_H3 4023 6.98 4.53 8.27 73 XM_H_Long_From01 3964 4.76 4.46 4.92 74 XM_B_Investor 3784 2.36 4.26 1.37 75 XMSexyCombo_05 3707 2.21 4.17 1.18 76 LotsOfNums_01 3699 6.13 4.16 7.16 77 XMBody_17 3627 1.92 4.08 0.79 78 TR_XM_PhishingBody 3460 2.51 3.89 1.79 79 XM_B_PhoneNumber 3459 5.31 3.89 6.06 80 XM_URI_RBL 3381 1.58 3.80 0.42 81 HTML_IMAGE_RATIO_04 3132 5.57 3.52 6.65 82 XM_B_SpammyTLD 3129 2.69 3.52 2.26 83 XM_CamelCaseFrm001 3097 2.48 3.48 1.96 84 HTML_IMAGE_RATIO_06 3073 3.58 3.46 3.65 85 XM_B_Unsub2 3051 2.03 3.43 1.30 86 TM2_M_VERY_LONG_WORD 3019 2.19 3.40 1.56 87 MIME_QP_LONG_LINE 2980 3.55 3.35 3.66 88 TR_XM_SpammyWords5 2905 2.14 3.27 1.54 89 XMNumbers 2903 4.10 3.27 4.54 90 RCVD_IN_MSPIKE_H5 2806 5.30 3.16 6.41 91 XMDiploma_00 2799 1.88 3.15 1.22 92 DKIM_ADSP_NXDOMAIN 2759 1.35 3.10 0.43 93 T_XMDrugObfuBody_08 2703 2.45 3.04 2.14 94 TR_XM_MSPIKECOMBO2 2607 1.03 2.93 0.04 95 XM_SPF_SoftFail 2568 1.64 2.89 0.98 96 TR_XM_INTL_Spamhaus 2536 1.05 2.85 0.11 97 MIME_HTML_ONLY_MULTI 2472 2.82 2.78 2.84 98 RCVD_IN_MSPIKE_H4 2452 3.93 2.76 4.55 99 USER_IN_DEF_DKIM_WL 2411 12.33 2.71 17.35 100 RELAYCOUNTRY_AU 2373 1.21 2.67 0.45 101 HTML_IMAGE_RATIO_08 2336 2.81 2.63 2.91 102 T_XMHurry_00 2273 1.51 2.56 0.96 103 TR_XM_INV_DKIM 2266 0.89 2.55 0.03 104 RCVD_IN_VALIDITY_RPBL 2241 0.88 2.52 0.02 105 XM_B_SpammyWords4 2214 1.27 2.49 0.63 106 XM_UB50 2187 1.36 2.46 0.79 107 RCVD_IN_XBL 2186 0.86 2.46 0.02 108 SpammyFromTLD_01 2143 1.09 2.41 0.40 109 T_TooManySym_01 2136 5.45 2.40 7.04 110 T_FILL_THIS_FORM_SHORT 2072 1.30 2.33 0.76 111 BOUNCE_MESSAGE 2042 6.10 2.30 8.09 112 ANY_BOUNCE_MESSAGE 2042 6.10 2.30 8.09 113 XM_B_URI_Unicode 2039 1.65 2.29 1.32 114 KHOP_HELO_FCRDNS 1922 2.81 2.16 3.15 115 TM2_M_URI_OPT_OUT 1913 1.98 2.15 1.89 116 T_XMDrugObfuBody_00 1839 1.28 2.07 0.87 117 FROM_EXCESS_BASE64 1835 1.98 2.06 1.93 118 SUBJ_ALL_CAPS 1771 1.29 1.99 0.92 119 RCVD_IN_VALIDITY_SAFE 1719 3.88 1.93 4.90 120 XM_UB99 1675 0.65 1.88 0.00 121 MultiRelay_CC 1674 0.86 1.88 0.33 122 XMPhish30 1659 1.05 1.87 0.63 123 XMBrknScrpt_02 1658 1.66 1.87 1.55 124 DIET_1 1641 0.88 1.85 0.37 125 URI_NOVOWEL 1618 1.52 1.82 1.36 126 RCVD_IN_SBL_CSS 1615 0.65 1.82 0.04 127 STY_INVIS_DIRECT 1590 0.90 1.79 0.43 128 TR_XM_MaxSPIKE 1580 0.63 1.78 0.04 129 SpammyFromTLD_02 1577 0.73 1.77 0.18 130 BOTNET_NORDNS 1571 0.61 1.77 0.00 131 XM_H_Long_From02 1539 1.10 1.73 0.77 132 XMStockSpam_06 1520 1.59 1.71 1.53 133 MAILING_LIST_MULTI 1499 2.16 1.69 2.40 134 RCVD_IN_MSPIKE_L4 1479 0.62 1.66 0.08 135 BAYES_40 1471 3.91 1.65 5.09 136 TR_Mismatch_TLD_02 1416 0.63 1.59 0.13 137 HTML_FONT_TINY_NORDNS 1410 0.58 1.59 0.05 138 TR_LOTS_OF_MONEY3 1382 0.75 1.55 0.33 139 RCVD_IN_PBL 1361 0.84 1.53 0.47 140 XM_UB80 1303 0.51 1.47 0.02 141 URI_HEX 1283 1.22 1.44 1.10 142 HTML_IMAGE_ONLY_20 1282 0.80 1.44 0.47 143 XMBounce_01 1280 0.51 1.44 0.02 144 XM_HighProb1 1279 0.50 1.44 0.00 145 XMGenDplmaNmb 1277 0.83 1.44 0.51 146 TR_Symld_Words 1262 1.37 1.42 1.34 147 XM_UB60 1196 0.51 1.35 0.07 148 URI_TRY_3LD 1177 0.83 1.32 0.57 149 RCVD_IN_VALIDITY_CERTIFIED 1164 3.13 1.31 4.08 150 XM_B_DNDMA 1145 0.66 1.29 0.34 151 SHOPIFY_IMG_NOT_RCVD_SFY 1138 0.68 1.28 0.36 152 HK_RANDOM_REPLYTO 1137 0.51 1.28 0.11 153 BAYES_20 1134 2.55 1.28 3.21 154 XMReplyNow 1127 0.62 1.27 0.28 155 MPART_ALT_DIFF_COUNT 1105 0.78 1.24 0.53 156 XM_B_COPY_HTML 1097 0.95 1.23 0.80 157 XM_UB999 1087 0.42 1.22 0.00 158 T_REMOTE_IMAGE 1079 2.86 1.21 3.71 159 PLING_QUERY 1079 0.81 1.21 0.60 160 XMBody_78 1071 0.60 1.20 0.28 161 XM_B_SEO 1059 0.51 1.19 0.16 162 XM_ProductURIs 1035 0.75 1.16 0.54 163 ALL_TRUSTED 1033 9.94 1.16 14.53 164 RCVD_IN_MSPIKE_L5 1025 0.41 1.15 0.02 165 TR_XM_GMP_BULK_SIG 1014 0.49 1.14 0.14 166 TR_XM_InvalidRelay 1013 0.39 1.14 0.01 167 RDNS_DYNAMIC 1008 0.54 1.13 0.23 168 XM_S_SpammyWords 1007 0.53 1.13 0.22 169 TR_XM_Spammywords 1007 0.53 1.13 0.22 170 FORGED_MUA_OUTLOOK 1004 0.42 1.13 0.04 171 AXB_XMAILER_MIMEOLE_OL_024C2 1002 0.39 1.13 0.00 172 RELAYCOUNTRY_NL 993 0.43 1.12 0.07 173 RCVD_IN_PSBL 993 0.40 1.12 0.03 174 FSL_CTYPE_WIN1251 986 0.38 1.11 0.00 175 XMBdyGiftCard01 983 1.17 1.11 1.21 176 RELAYCOUNTRY_ID 980 0.39 1.10 0.01 177 XM_DIRTYINTL 979 0.41 1.10 0.05 178 TR_XM_FormFill2 970 0.48 1.09 0.16 179 TR_Mismatch_TLD_01 965 0.63 1.09 0.39 180 TR_XM_PHPForged 964 0.47 1.08 0.15 181 TR_XM_PHPDW 948 0.47 1.07 0.16 182 XM_H_PHPOS 926 0.45 1.04 0.15 183 FSL_NEW_HELO_USER 920 0.36 1.03 0.00 184 RELAYCOUNTRY_GB 893 0.62 1.00 0.42 185 XMSubMetaI_00 893 0.57 1.00 0.34 186 HTML_MIME_NO_HTML_TAG 887 1.58 1.00 1.89 187 TVD_RCVD_IP 886 1.35 1.00 1.54 188 HTML_TAG_BALANCE_BODY 879 0.83 0.99 0.75 189 XM_SendGrid 878 1.34 0.99 1.52 190 NSL_RCVD_FROM_USER 877 0.34 0.99 0.00 191 TR_XM_RelayPhish 871 0.38 0.98 0.07 192 XM_DK_Undo_01 855 1.16 0.96 1.26 193 XM_H_Undi_Recip 839 0.39 0.94 0.10 194 RCVD_IN_IADB_LISTED 832 2.11 0.94 2.73 195 HELO_DYNAMIC_SPLIT_IP 821 0.32 0.92 0.01 196 XMSlimDrugH 816 0.67 0.92 0.54 197 MISSING_HEADERS 807 0.46 0.91 0.23 198 XM_B_Phish66 801 0.52 0.90 0.33 199 TR_XM_Base64_M1 788 0.77 0.89 0.71 200 RELAYCOUNTRY_RU 759 0.30 0.85 0.02 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 144677 88.38 94.65 85.10 2 RELAYCOUNTRY_US 139992 81.20 79.01 82.34 3 DKIM_SIGNED 129053 80.70 89.87 75.91 4 XM_DK_Pass 127624 78.64 85.47 75.07 5 DKIM_VALID 126835 78.13 84.88 74.60 6 XM_B_Unicode 125398 76.81 82.63 73.76 7 DKIM_VALID_AU 108899 65.07 67.00 64.05 8 BAYES_50 106272 52.79 34.19 62.51 9 DCC_CHECK_NEGATIVE 99779 46.65 23.62 58.69 10 XMListUnsubscribeExists 90016 58.46 69.02 52.95 11 XM_B_SpammyWords 83146 55.55 68.25 48.91 12 XM_B_Unicode3 79100 47.14 48.31 46.53 13 DCC_CHECK 70122 53.13 75.87 41.25 14 LOC_TINY_FONT_1 64482 41.48 48.26 37.93 15 HTML_FONT_LOW_CONTRAST 57226 33.88 34.29 33.66 16 DKIM_VALID_EF 50430 30.56 32.29 29.66 17 FVGT_m_MULTI_ODD 46012 29.23 33.37 27.06 18 T_TM2_M_HEADER_IN_MSG 40430 22.48 19.98 23.78 19 T_KAM_HTML_FONT_INVALID 39341 26.02 31.52 23.14 20 XMSubLong 38128 21.66 20.20 22.43 21 XM_B_SpammyWords2 36772 27.54 38.84 21.63 22 MIME_HTML_ONLY 33958 23.08 29.03 19.97 23 RCVD_IN_MSPIKE_WL 32694 16.21 10.44 19.23 24 USER_IN_DEF_DKIM_WL 29503 12.33 2.71 17.35 25 XM_Multi_Part_URI 27165 18.00 21.88 15.98 26 TR_XM_DK_Unsub 25863 18.67 25.28 15.21 27 ALL_TRUSTED 24706 9.94 1.16 14.53 28 RCVD_IN_MSPIKE_H2 24523 16.60 20.76 14.42 29 UNPARSEABLE_RELAY 23719 14.89 16.68 13.95 30 XM_Evil_Numbers_Gen 21382 11.00 7.98 12.58 31 XM_B_Unsub 17146 13.17 19.08 10.09 32 RCVD_IN_MSPIKE_H3 14061 6.98 4.53 8.27 33 XM_DKIMWhitelistDomains 14028 5.42 0.00 8.25 34 TR_XM_BayesUnsub 13832 11.60 18.22 8.14 35 BAYES_00 13825 5.47 0.38 8.13 36 BOUNCE_MESSAGE 13756 6.10 2.30 8.09 37 ANY_BOUNCE_MESSAGE 13756 6.10 2.30 8.09 38 BAYES_60 12825 8.00 8.86 7.54 39 LotsOfNums_01 12178 6.13 4.16 7.16 40 T_TooManySym_01 11972 5.45 2.40 7.04 41 TR_MAX_INTL_RELAY 11931 11.08 18.84 7.02 42 XM_B_SpammyWords3 11752 9.59 14.72 6.91 43 TR_XM_DK_Bayes 11356 4.48 0.27 6.68 44 HTML_IMAGE_RATIO_04 11301 5.57 3.52 6.65 45 TR_XM_DK_Bayes1 11276 4.45 0.27 6.63 46 XMStrtUSub 10941 6.12 5.51 6.44 47 RCVD_IN_MSPIKE_H5 10906 5.30 3.16 6.41 48 MPART_ALT_DIFF 10427 6.30 6.61 6.13 49 XM_B_PhoneNumber 10300 5.31 3.89 6.06 50 LOTS_OF_MONEY 10232 7.83 11.31 6.02 51 XM_DK_Undo_02 9991 19.51 45.60 5.88 52 XM_H_GMP 9963 5.72 5.44 5.86 53 TR_XM_DK_Bayes2 9781 3.85 0.20 5.75 54 HTML_IMAGE_RATIO_02 9673 6.25 7.31 5.69 55 TooManyTo_001 9120 5.21 4.91 5.36 56 BAYES_40 8659 3.91 1.65 5.09 57 XM_UncommonTLD01 8461 5.46 6.38 4.98 58 XM_H_Long_From01 8359 4.76 4.46 4.92 59 RCVD_IN_VALIDITY_SAFE 8324 3.88 1.93 4.90 60 XM_B_Phish_Phrases 8000 5.75 7.76 4.71 61 BAYES_99 7945 14.98 34.71 4.67 62 RCVD_IN_MSPIKE_H4 7727 3.93 2.76 4.55 63 XMNumbers 7710 4.10 3.27 4.54 64 TR_XM_SpammyWords4 7596 6.45 10.24 4.47 65 FSL_BULK_SIG 7581 6.25 9.67 4.46 66 BAYES_80 7287 6.65 11.17 4.29 67 T_TooManySym_02 7283 2.97 0.47 4.28 68 BOTNET_IPINHOSTNAME 7047 6.26 10.31 4.15 69 RCVD_IN_VALIDITY_CERTIFIED 6935 3.13 1.31 4.08 70 MIME_HTML_MOSTLY 6631 4.30 5.07 3.90 71 INVALID_MSGID 6537 2.67 0.42 3.85 72 TO_MALFORMED 6417 2.48 0.00 3.77 73 T_REMOTE_IMAGE 6313 2.86 1.21 3.71 74 BAYES_999 6252 11.42 26.22 3.68 75 MIME_QP_LONG_LINE 6222 3.55 3.35 3.66 76 HTML_IMAGE_RATIO_06 6198 3.58 3.46 3.65 77 XMSubMetaSx_00 6101 4.57 6.46 3.59 78 MSGID_NOFQDN1 5902 2.29 0.02 3.47 79 BAYES_20 5456 2.55 1.28 3.21 80 KHOP_HELO_FCRDNS 5352 2.81 2.16 3.15 81 RELAYCOUNTRY_META 5121 9.21 21.05 3.01 82 HTML_IMAGE_RATIO_08 4951 2.81 2.63 2.91 83 T_TVD_MIME_NO_HEADERS 4933 1.92 0.05 2.90 84 MIME_HTML_ONLY_MULTI 4830 2.82 2.78 2.84 85 BAYES_95 4641 4.07 6.64 2.73 86 RCVD_IN_IADB_LISTED 4640 2.11 0.94 2.73 87 XM_PDF 4611 1.92 0.41 2.71 88 MAILING_LIST_MULTI 4085 2.16 1.69 2.40 89 RCVD_IN_IADB_SPF 4081 1.83 0.74 2.40 90 XM_Body_Dirty_Words 4029 3.60 5.95 2.37 91 XM_B_SpammyTLD 3840 2.69 3.52 2.26 92 T_XMDrugObfuBody_08 3644 2.45 3.04 2.14 93 RCVD_IN_IADB_SENDERID 3599 1.61 0.64 2.12 94 TR_XM_DKIM_Undo 3522 12.80 33.32 2.07 95 RCVD_IN_IADB_DK 3503 1.58 0.66 2.06 96 XM_CamelCaseFrm001 3336 2.48 3.48 1.96 97 FROM_EXCESS_BASE64 3289 1.98 2.06 1.93 98 TM2_M_URI_OPT_OUT 3206 1.98 2.15 1.89 99 HTML_MIME_NO_HTML_TAG 3206 1.58 1.00 1.89 100 TR_DCC_Bayes_99 3130 9.60 24.43 1.84 101 BAYES_05 3098 1.42 0.64 1.82 102 RCVD_IN_IADB_VOUCHED 3095 1.42 0.65 1.82 103 TR_XM_PhishingBody 3043 2.51 3.89 1.79 104 T_TooManySym_03 3027 1.21 0.11 1.78 105 T_XMDrugObfuBody_14 2844 2.69 4.64 1.67 106 TR_XM_SpammyRelay 2764 6.24 15.06 1.63 107 TR_XM_UnparsRelay 2691 3.88 8.26 1.58 108 TM2_M_VERY_LONG_WORD 2658 2.19 3.40 1.56 109 XMBrknScrpt_02 2635 1.66 1.87 1.55 110 TR_XM_SpammyWords5 2624 2.14 3.27 1.54 111 TVD_RCVD_IP 2621 1.35 1.00 1.54 112 IN_HORDE_ADDRESS_BOOK 2609 1.04 0.09 1.53 113 XMStockSpam_06 2595 1.59 1.71 1.53 114 XM_SendGrid 2583 1.34 0.99 1.52 115 TooManyTo_002 2540 1.14 0.47 1.49 116 UNTRUSTED_Relay 2462 3.72 8.05 1.45 117 TVD_SPACE_RATIO 2424 1.02 0.25 1.43 118 XM_B_Investor 2333 2.36 4.26 1.37 119 RCVD_IN_IADB_OPTIN 2307 1.05 0.46 1.36 120 URI_NOVOWEL 2306 1.52 1.82 1.36 121 TR_Symld_Words 2281 1.37 1.42 1.34 122 XM_B_URI_Unicode 2238 1.65 2.29 1.32 123 DKIM_INVALID 2218 2.57 5.00 1.30 124 XMBody_95 2206 0.89 0.12 1.30 125 XM_B_Unsub2 2202 2.03 3.43 1.30 126 XM_DK_Undo_01 2142 1.16 0.96 1.26 127 XMDiploma_00 2067 1.88 3.15 1.22 128 TR_XM_DK_SendGrid 2054 1.03 0.69 1.21 129 XMBdyGiftCard01 2051 1.17 1.11 1.21 130 XMGappySubj_01 2016 0.82 0.13 1.19 131 XMSexyCombo_05 2007 2.21 4.17 1.18 132 RELAYCOUNTRY_CA 2003 3.72 8.58 1.18 133 LOW_PRICE 1956 0.85 0.28 1.15 134 URI_HEX 1875 1.22 1.44 1.10 135 XMBSHREFv2 1839 0.81 0.28 1.08 136 BOTNET 1833 3.99 9.56 1.08 137 XM_GoogleGroups 1822 0.95 0.73 1.07 138 XMGappySubj_02 1775 0.70 0.05 1.04 139 XM_SPF_SoftFail 1669 1.64 2.89 0.98 140 T_XMHurry_00 1634 1.51 2.56 0.96 141 RCVD_IN_MSPIKE_BL 1626 3.62 8.72 0.96 142 TR_XM_MSPIKECOMBO 1626 3.62 8.71 0.96 143 SUBJ_ALL_CAPS 1556 1.29 1.99 0.92 144 MIME_CHARSET_FARAWAY 1500 0.71 0.39 0.88 145 T_XMDrugObfuBody_00 1487 1.28 2.07 0.87 146 XMLngstWrd_00 1483 0.65 0.22 0.87 147 RCVD_IN_MSPIKE_L3 1451 2.58 5.90 0.85 148 XM_OfRef6 1445 2.23 4.86 0.85 149 TooManyTo_003 1417 0.68 0.39 0.83 150 XM_B_COPY_HTML 1366 0.95 1.23 0.80 151 CHARSET_FARAWAY_HEADER 1358 0.61 0.25 0.80 152 XM_UB50 1344 1.36 2.46 0.79 153 XMBody_17 1342 1.92 4.08 0.79 154 XM_H_PHPMailer 1329 0.69 0.53 0.78 155 TR_MetaPhish_Combo_01 1311 0.66 0.43 0.77 156 XM_H_Long_From02 1306 1.10 1.73 0.77 157 T_FILL_THIS_FORM_SHORT 1291 1.30 2.33 0.76 158 HTML_TAG_BALANCE_BODY 1274 0.83 0.99 0.75 159 TR_XM_Base64_M1 1205 0.77 0.89 0.71 160 TR_XM_GMP_MSPIKE_UNDO2 1184 0.50 0.14 0.70 161 DKIM_ADSP_CUSTOM_MED 1156 0.69 0.72 0.68 162 XMLngstWrd_01 1129 0.50 0.19 0.66 163 TooManyTo_004 1118 0.54 0.32 0.66 164 TR_XM_SpammyWords3 1072 2.70 6.66 0.63 165 XM_B_SpammyWords4 1070 1.27 2.49 0.63 166 XMPhish30 1070 1.05 1.87 0.63 167 XMSubMetaSxObfu_02 1070 0.57 0.46 0.63 168 RCVD_IN_BL_SPAMCOP_NET 1067 5.71 15.44 0.63 169 PLING_QUERY 1028 0.81 1.21 0.60 170 TooManyTo_005 990 0.48 0.29 0.58 171 XMBody_106 979 0.39 0.04 0.58 172 URI_TRY_3LD 965 0.83 1.32 0.57 173 HTML_FONT_FACE_BAD 934 0.54 0.52 0.55 174 XMSlimDrugH 920 0.67 0.92 0.54 175 XM_ProductURIs 916 0.75 1.16 0.54 176 MPART_ALT_DIFF_COUNT 902 0.78 1.24 0.53 177 XMGenDplmaNmb 874 0.83 1.44 0.51 178 XMPhish14 869 0.57 0.68 0.51 179 XMDiploma_06 860 0.51 0.51 0.51 180 T_TooManySym_04 849 0.33 0.02 0.50 181 TR_XM_SpammyWords2 832 4.28 11.53 0.49 182 XMSubMetaSxObfu_03 814 0.54 0.67 0.48 183 RCVD_IN_PBL 804 0.84 1.53 0.47 184 HTML_TEXT_INVISIBLE_STYLE 800 0.49 0.53 0.47 185 XM_ShortIntro_01 797 0.50 0.55 0.47 186 HTML_IMAGE_ONLY_20 793 0.80 1.44 0.47 187 RELAYCOUNTRY_AU 768 1.21 2.67 0.45 188 XMSolicitRefs_0 768 0.49 0.57 0.45 189 XM_S_SubURI 762 0.30 0.03 0.45 190 XMNoVowels 760 0.42 0.37 0.45 191 HTTPS_HTTP_MISMATCH 750 0.57 0.81 0.44 192 STY_INVIS_DIRECT 739 0.90 1.79 0.43 193 FORGED_GMAIL_RCVD 735 0.48 0.57 0.43 194 DKIM_ADSP_NXDOMAIN 733 1.35 3.10 0.43 195 LONGLN_LOW_CONTRAST 731 0.47 0.55 0.43 196 MSGID_FROM_MTA_HEADER 719 0.39 0.34 0.42 197 RELAYCOUNTRY_GB 718 0.62 1.00 0.42 198 XM_URI_RBL 716 1.58 3.80 0.42 199 XMHTML_After_End 700 0.45 0.52 0.41 200 NML_ADSP_CUSTOM_MED 692 0.49 0.64 0.41 ----------------------------------------------------------------------