Email: 275347 Autolearn: 0 AvgScore: 5.57 AvgScanTime: 1.34 sec Spam: 92789 Autolearn: 0 AvgScore: 14.33 AvgScanTime: 1.48 sec Ham: 182558 Autolearn: 0 AvgScore: 1.12 AvgScanTime: 1.27 sec Time Spent Running SA: 102.66 hours Time Spent Processing Spam: 38.15 hours Time Spent Processing Ham: 64.51 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 88390 88.83 95.26 85.56 2 DKIM_SIGNED 81940 75.52 88.31 69.02 3 XM_DK_Pass 77303 73.37 83.31 68.32 4 DKIM_VALID 76925 72.95 82.90 67.89 5 XM_B_Unicode 75262 74.57 81.11 71.25 6 RELAYCOUNTRY_US 74265 82.63 80.04 83.94 7 DCC_CHECK 71385 52.65 76.93 40.31 8 DKIM_VALID_AU 62619 62.58 67.49 60.09 9 XM_B_SpammyWords 62572 55.37 67.43 49.24 10 XMListUnsubscribeExists 61580 54.59 66.37 48.60 11 LOC_TINY_FONT_1 47043 39.12 50.70 33.24 12 XM_B_Unicode3 46691 48.43 50.32 47.47 13 XM_DK_Undo_02 38993 17.70 42.02 5.33 14 FVGT_m_MULTI_ODD 35125 29.07 37.85 24.61 15 BAYES_50 34990 53.83 37.71 62.02 16 XM_B_SpammyWords2 33731 25.48 36.35 19.96 17 HTML_FONT_LOW_CONTRAST 33244 39.23 35.83 40.96 18 BAYES_99 30058 13.77 32.39 4.30 19 TR_XM_DKIM_Undo 27883 11.66 30.05 2.31 20 DKIM_VALID_EF 26371 27.49 28.42 27.02 21 T_KAM_HTML_FONT_INVALID 24740 22.08 26.66 19.75 22 MIME_HTML_ONLY 24275 21.29 26.16 18.81 23 BAYES_999 22856 10.51 24.63 3.33 24 TR_DCC_Bayes_99 22141 9.37 23.86 2.01 25 XMSubLong 21253 22.29 22.90 21.97 26 TR_XM_DK_Unsub 21199 16.90 22.85 13.88 27 DCC_CHECK_NEGATIVE 20835 47.11 22.45 59.64 28 XM_Multi_Part_URI 20506 17.58 22.10 15.29 29 RCVD_IN_MSPIKE_H2 20147 16.09 21.71 13.23 30 XM_B_Unsub 19266 13.16 20.76 9.30 31 TR_XM_BayesUnsub 18717 11.39 20.17 6.93 32 T_TM2_M_HEADER_IN_MSG 17084 25.77 18.41 29.52 33 TR_MAX_INTL_RELAY 16131 10.28 17.38 6.67 34 RELAYCOUNTRY_META 15938 7.46 17.18 2.53 35 UNPARSEABLE_RELAY 14802 13.60 15.95 12.41 36 RCVD_IN_BL_SPAMCOP_NET 14581 5.66 15.71 0.55 37 XM_B_SpammyWords3 11269 8.14 12.14 6.11 38 TR_XM_SpammyRelay 11267 4.99 12.14 1.35 39 TR_XM_SpammyWords2 10551 4.29 11.37 0.69 40 BOTNET 10208 4.35 11.00 0.96 41 LOTS_OF_MONEY 9468 6.66 10.20 4.86 42 BOTNET_IPINHOSTNAME 9430 5.65 10.16 3.36 43 BAYES_80 9427 6.16 10.16 4.13 44 RCVD_IN_MSPIKE_WL 9279 14.00 10.00 16.03 45 FSL_BULK_SIG 9029 6.06 9.73 4.19 46 TR_XM_UnparsRelay 8523 4.35 9.19 1.89 47 XM_Evil_Numbers_Gen 8348 12.80 9.00 14.73 48 TR_XM_SpammyWords4 8343 5.29 8.99 3.41 49 BAYES_60 8165 7.82 8.80 7.32 50 XMSubMetaSx_00 7742 5.11 8.34 3.47 51 TR_XM_SPAMCOP 7640 2.85 8.23 0.12 52 MPART_ALT_DIFF 7592 5.87 8.18 4.69 53 UNTRUSTED_Relay 7088 3.60 7.64 1.54 54 XM_H_GMP 6707 5.69 7.23 4.91 55 XM_B_Phish_Phrases 6525 5.09 7.03 4.10 56 BAYES_95 6061 3.89 6.53 2.54 57 RCVD_IN_MSPIKE_BL 6005 2.55 6.47 0.56 58 TR_XM_MSPIKECOMBO 6003 2.55 6.47 0.56 59 RELAYCOUNTRY_CA 5928 2.60 6.39 0.67 60 LotsOfNums_01 5603 11.41 6.04 14.14 61 T_XMDrugObfuBody_14 5339 2.88 5.75 1.42 62 MIME_HTML_MOSTLY 5307 3.62 5.72 2.55 63 XM_UncommonTLD01 5264 4.85 5.67 4.43 64 XMNumbers 5161 4.81 5.56 4.42 65 TR_XM_PhishingBody 5143 2.80 5.54 1.41 66 DKIM_INVALID 5015 2.57 5.40 1.13 67 HTML_IMAGE_RATIO_02 4931 5.00 5.31 4.85 68 XM_H_Long_From01 4770 4.77 5.14 4.58 69 XM_Body_Dirty_Words 4704 3.02 5.07 1.97 70 XM_B_SpammyTLD 4596 3.22 4.95 2.35 71 HTML_IMAGE_RATIO_06 4165 3.79 4.49 3.43 72 TR_XM_SpammyWords3 3874 1.58 4.18 0.26 73 XMSexyCombo_05 3833 2.54 4.13 1.72 74 BOTNET_NORDNS 3821 1.39 4.12 0.01 75 XM_B_PhoneNumber 3749 5.54 4.04 6.30 76 TR_XM_NoHeaderRelay 3706 1.47 3.99 0.18 77 RCVD_IN_MSPIKE_H3 3695 5.94 3.98 6.93 78 T_FILL_THIS_FORM_SHORT 3693 1.77 3.98 0.65 79 USER_IN_DEF_DKIM_WL 3631 12.94 3.91 17.53 80 XMStrtUSub 3618 4.94 3.90 5.47 81 T_XMHurry_00 3511 1.83 3.78 0.83 82 XM_B_Investor 3456 2.11 3.72 1.29 83 XM_OfRef6 3378 1.72 3.64 0.74 84 RCVD_IN_MSPIKE_L3 3370 1.49 3.63 0.40 85 XM_CamelCaseFrm001 3263 2.68 3.52 2.25 86 HTML_MIME_NO_HTML_TAG 3251 2.22 3.50 1.56 87 HTML_IMAGE_RATIO_04 3198 3.87 3.45 4.08 88 ALL_TRUSTED 3196 10.02 3.44 13.36 89 TM2_M_VERY_LONG_WORD 3127 9.19 3.37 12.15 90 T_XMDrugObfuBody_08 3115 2.06 3.36 1.40 91 XMPhish30 3028 1.45 3.26 0.52 92 XMStockSpam_06 3005 2.32 3.24 1.86 93 RCVD_IN_MSPIKE_H5 2986 4.63 3.22 5.34 94 TooManyTo_001 2846 4.75 3.07 5.61 95 XM_SPF_SoftFail 2824 1.60 3.04 0.87 96 RCVD_IN_VALIDITY_RPBL 2752 1.06 2.97 0.09 97 DKIM_ADSP_NXDOMAIN 2713 1.26 2.92 0.42 98 TR_XM_SpammyWords5 2711 1.64 2.92 0.99 99 KHOP_HELO_FCRDNS 2634 5.52 2.84 6.88 100 RCVD_IN_MSPIKE_H4 2598 3.44 2.80 3.76 101 RCVD_IN_VALIDITY_SAFE 2591 4.86 2.79 5.91 102 HTML_SHORT_LINK_IMG_1 2540 0.96 2.74 0.05 103 MIME_QP_LONG_LINE 2537 2.65 2.73 2.61 104 HTML_IMAGE_ONLY_08 2462 1.01 2.65 0.17 105 XM_B_Unsub2 2451 1.64 2.64 1.13 106 T_TooManySym_01 2395 5.78 2.58 7.41 107 XM_ProductURIs 2374 1.23 2.56 0.55 108 TR_XM_INTL_Spamhaus 2350 0.93 2.53 0.11 109 XM_UB50 2349 1.46 2.53 0.92 110 XMBody_17 2333 1.26 2.51 0.63 111 XM_URI_RBL 2205 1.06 2.38 0.39 112 HTML_IMAGE_RATIO_08 2203 2.51 2.37 2.58 113 THIS_AD 2173 1.15 2.34 0.55 114 XM_B_SpammyWords4 2143 1.23 2.31 0.68 115 XMSubMetaSxObfu_03 2136 1.03 2.30 0.39 116 RELAYCOUNTRY_AU 2117 1.06 2.28 0.45 117 FROM_EXCESS_BASE64 2083 2.03 2.24 1.92 118 MIME_HTML_ONLY_MULTI 2055 2.35 2.21 2.41 119 TR_XM_INV_DKIM 1991 0.74 2.15 0.02 120 STY_INVIS_DIRECT 1986 0.84 2.14 0.17 121 RCVD_IN_PSBL 1977 0.74 2.13 0.03 122 XMDiploma_00 1965 1.83 2.12 1.69 123 TR_XM_MSPIKECOMBO2 1944 0.74 2.10 0.05 124 SpammyFromTLD_02 1911 0.79 2.06 0.15 125 XMBrknScrpt_02 1892 1.58 2.04 1.34 126 HTML_FONT_TINY_NORDNS 1830 0.70 1.97 0.05 127 ANY_BOUNCE_MESSAGE 1775 10.69 1.91 15.15 128 BOUNCE_MESSAGE 1775 10.69 1.91 15.15 129 XM_B_Phish66 1764 0.81 1.90 0.26 130 TM2_M_URI_OPT_OUT 1731 1.87 1.87 1.88 131 RCVD_IN_SBL_CSS 1701 0.62 1.83 0.01 132 RCVD_IN_XBL 1696 0.63 1.83 0.01 133 SUBJ_ALL_CAPS 1694 1.09 1.83 0.72 134 MPART_ALT_DIFF_COUNT 1678 0.92 1.81 0.47 135 RCVD_IN_VALIDITY_CERTIFIED 1663 3.85 1.79 4.90 136 TR_LOTS_OF_MONEY3 1600 0.89 1.72 0.47 137 MultiRelay_CC 1596 0.64 1.72 0.09 138 BAYES_40 1594 4.73 1.72 6.26 139 XM_B_URI_Unicode 1580 1.49 1.70 1.37 140 RELAYCOUNTRY_FR 1555 0.71 1.68 0.22 141 TR_XM_InvalidRelay 1528 0.56 1.65 0.01 142 MAILING_LIST_MULTI 1500 2.04 1.62 2.26 143 XMSubMetaI_00 1486 0.81 1.60 0.41 144 URI_NOVOWEL 1429 1.21 1.54 1.04 145 DIET_1 1429 0.89 1.54 0.57 146 XM_UB99 1420 0.52 1.53 0.00 147 RCVD_IN_PBL 1417 0.86 1.53 0.52 148 RDNS_DYNAMIC 1378 0.66 1.49 0.24 149 TR_XM_GMP_BULK_SIG 1351 0.56 1.46 0.10 150 TR_Mismatch_TLD_02 1348 0.55 1.45 0.09 151 TR_XM_MaxSPIKE 1346 0.50 1.45 0.02 152 RCVD_IN_MSPIKE_L5 1342 0.50 1.45 0.02 153 URI_TRY_3LD 1337 0.79 1.44 0.46 154 SpammyFromTLD_01 1318 0.69 1.42 0.32 155 TR_XM_FormFill 1294 0.48 1.39 0.01 156 RCVD_IN_MSPIKE_L4 1291 0.56 1.39 0.14 157 XM_B_COPY_HTML 1263 1.11 1.36 0.99 158 T_REMOTE_IMAGE 1233 2.24 1.33 2.70 159 XM_B_DNDMA 1204 0.85 1.30 0.62 160 XM_H_DKIM_GOOG 1199 0.44 1.29 0.01 161 SHOPIFY_IMG_NOT_RCVD_SFY 1186 0.63 1.28 0.30 162 BAYES_20 1160 2.89 1.25 3.72 163 XMGenDplmaNmb 1137 1.00 1.23 0.89 164 XM_UB60 1124 0.46 1.21 0.08 165 HTML_IMAGE_ONLY_20 1118 0.68 1.20 0.42 166 DKIM_ADSP_CUSTOM_MED 1094 0.83 1.18 0.65 167 XM_B_DynamicLink 1079 0.41 1.16 0.02 168 XMBody_78 1071 0.55 1.15 0.25 169 TVD_RCVD_IP 1070 1.22 1.15 1.26 170 XMClaimOffer 1066 0.50 1.15 0.17 171 XM_UB80 1061 0.40 1.14 0.03 172 URI_HEX 1056 0.90 1.14 0.78 173 XMBdyGiftCard01 1045 1.02 1.13 0.97 174 XMReplyNow 1023 0.49 1.10 0.17 175 NML_ADSP_CUSTOM_MED 1001 0.63 1.08 0.40 176 XM_UB95 993 0.37 1.07 0.01 177 XM_DK_Undo_01 985 1.26 1.06 1.36 178 T_XMDrugObfuBody_00 983 1.35 1.06 1.49 179 XMHTML_After_End 982 0.70 1.06 0.53 180 HTML_TAG_BALANCE_BODY 967 0.79 1.04 0.66 181 XM_UB999 961 0.35 1.04 0.00 182 XM_B_SEO 945 0.44 1.02 0.14 183 HTML_TAG_BALANCE_CENTER 939 0.63 1.01 0.43 184 XM_B_REG_HTML 926 0.47 1.00 0.20 185 PLING_QUERY 926 0.60 1.00 0.40 186 XM_H_Long_From02 918 0.69 0.99 0.54 187 XM_SendGrid 916 1.07 0.99 1.12 188 FORGED_GMAIL_RCVD 913 0.59 0.98 0.39 189 XM_HighProb1 913 0.33 0.98 0.00 190 TR_XM_FormFill2 908 0.49 0.98 0.24 191 TR_XM_PHPForged 903 0.49 0.97 0.24 192 HELO_DYNAMIC_SPLIT_IP 899 0.34 0.97 0.02 193 XM_OfRef7 883 0.46 0.95 0.21 194 TR_XM_PHPDW 869 0.47 0.94 0.24 195 XM_DIRTYINTL 867 0.34 0.93 0.04 196 TR_Mismatch_TLD_01 861 0.64 0.93 0.50 197 HDRS_MISSP 861 0.32 0.93 0.01 198 XM_H_PHPOS 860 0.46 0.93 0.23 199 XMSlimDrugH 841 0.77 0.91 0.70 200 TR_XM_Base64_L1 829 0.36 0.89 0.09 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 156203 88.83 95.26 85.56 2 RELAYCOUNTRY_US 153246 82.63 80.04 83.94 3 XM_B_Unicode 130075 74.57 81.11 71.25 4 DKIM_SIGNED 126001 75.52 88.31 69.02 5 XM_DK_Pass 124721 73.37 83.31 68.32 6 DKIM_VALID 123939 72.95 82.90 67.89 7 BAYES_50 113230 53.83 37.71 62.02 8 DKIM_VALID_AU 109694 62.58 67.49 60.09 9 DCC_CHECK_NEGATIVE 108875 47.11 22.45 59.64 10 XM_B_SpammyWords 89891 55.37 67.43 49.24 11 XMListUnsubscribeExists 88725 54.59 66.37 48.60 12 XM_B_Unicode3 86659 48.43 50.32 47.47 13 HTML_FONT_LOW_CONTRAST 74777 39.23 35.83 40.96 14 DCC_CHECK 73582 52.65 76.93 40.31 15 LOC_TINY_FONT_1 60679 39.12 50.70 33.24 16 T_TM2_M_HEADER_IN_MSG 53885 25.77 18.41 29.52 17 DKIM_VALID_EF 49324 27.49 28.42 27.02 18 FVGT_m_MULTI_ODD 44932 29.07 37.85 24.61 19 XMSubLong 40117 22.29 22.90 21.97 20 XM_B_SpammyWords2 36437 25.48 36.35 19.96 21 T_KAM_HTML_FONT_INVALID 36047 22.08 26.66 19.75 22 MIME_HTML_ONLY 34340 21.29 26.16 18.81 23 USER_IN_DEF_DKIM_WL 32004 12.94 3.91 17.53 24 RCVD_IN_MSPIKE_WL 29265 14.00 10.00 16.03 25 XM_Multi_Part_URI 27905 17.58 22.10 15.29 26 BOUNCE_MESSAGE 27656 10.69 1.91 15.15 27 ANY_BOUNCE_MESSAGE 27656 10.69 1.91 15.15 28 XM_Evil_Numbers_Gen 26894 12.80 9.00 14.73 29 LotsOfNums_01 25808 11.41 6.04 14.14 30 TR_XM_DK_Unsub 25347 16.90 22.85 13.88 31 ALL_TRUSTED 24394 10.02 3.44 13.36 32 RCVD_IN_MSPIKE_H2 24158 16.09 21.71 13.23 33 UNPARSEABLE_RELAY 22656 13.60 15.95 12.41 34 TM2_M_VERY_LONG_WORD 22180 9.19 3.37 12.15 35 XM_B_Unsub 16978 13.16 20.76 9.30 36 XM_DKIMWhitelistDomains 14235 5.17 0.01 7.80 37 BAYES_00 14154 5.24 0.31 7.75 38 T_TooManySym_01 13522 5.78 2.58 7.41 39 BAYES_60 13372 7.82 8.80 7.32 40 TR_XM_BayesUnsub 12656 11.39 20.17 6.93 41 RCVD_IN_MSPIKE_H3 12647 5.94 3.98 6.93 42 KHOP_HELO_FCRDNS 12557 5.52 2.84 6.88 43 TR_MAX_INTL_RELAY 12177 10.28 17.38 6.67 44 XM_B_PhoneNumber 11501 5.54 4.04 6.30 45 BAYES_40 11432 4.73 1.72 6.26 46 XM_B_SpammyWords3 11157 8.14 12.14 6.11 47 RCVD_IN_VALIDITY_SAFE 10791 4.86 2.79 5.91 48 TR_XM_DK_Bayes 10426 3.87 0.24 5.71 49 TR_XM_DK_Bayes1 10312 3.82 0.23 5.65 50 TooManyTo_001 10239 4.75 3.07 5.61 51 XMStrtUSub 9984 4.94 3.90 5.47 52 RCVD_IN_MSPIKE_H5 9751 4.63 3.22 5.34 53 XM_DK_Undo_02 9737 17.70 42.02 5.33 54 TR_XM_DK_Bayes2 9036 3.34 0.18 4.95 55 XM_H_GMP 8955 5.69 7.23 4.91 56 RCVD_IN_VALIDITY_CERTIFIED 8951 3.85 1.79 4.90 57 LOTS_OF_MONEY 8867 6.66 10.20 4.86 58 HTML_IMAGE_RATIO_02 8846 5.00 5.31 4.85 59 MPART_ALT_DIFF 8567 5.87 8.18 4.69 60 MIME_CHARSET_FARAWAY 8530 3.21 0.33 4.67 61 XM_H_Long_From01 8367 4.77 5.14 4.58 62 CHARSET_FARAWAY_HEADER 8321 3.09 0.21 4.56 63 XM_UncommonTLD01 8084 4.85 5.67 4.43 64 XMNumbers 8073 4.81 5.56 4.42 65 BAYES_99 7846 13.77 32.39 4.30 66 T_TooManySym_02 7843 3.06 0.63 4.30 67 FSL_BULK_SIG 7648 6.06 9.73 4.19 68 BAYES_80 7534 6.16 10.16 4.13 69 XM_B_Phish_Phrases 7491 5.09 7.03 4.10 70 HTML_IMAGE_RATIO_04 7451 3.87 3.45 4.08 71 RCVD_IN_MSPIKE_H4 6867 3.44 2.80 3.76 72 BAYES_20 6793 2.89 1.25 3.72 73 INVALID_MSGID 6601 2.57 0.52 3.62 74 TO_MALFORMED 6571 2.39 0.01 3.60 75 XMSubMetaSx_00 6339 5.11 8.34 3.47 76 HTML_IMAGE_RATIO_06 6266 3.79 4.49 3.43 77 TR_XM_SpammyWords4 6230 5.29 8.99 3.41 78 BOTNET_IPINHOSTNAME 6127 5.65 10.16 3.36 79 BAYES_999 6087 10.51 24.63 3.33 80 MSGID_NOFQDN1 5892 2.20 0.18 3.23 81 T_REMOTE_IMAGE 4938 2.24 1.33 2.70 82 MIME_QP_LONG_LINE 4759 2.65 2.73 2.61 83 HTML_IMAGE_RATIO_08 4706 2.51 2.37 2.58 84 MIME_HTML_MOSTLY 4663 3.62 5.72 2.55 85 BAYES_95 4641 3.89 6.53 2.54 86 RELAYCOUNTRY_META 4614 7.46 17.18 2.53 87 MIME_HTML_ONLY_MULTI 4405 2.35 2.21 2.41 88 T_TVD_MIME_NO_HEADERS 4314 1.58 0.04 2.36 89 XM_B_SpammyTLD 4281 3.22 4.95 2.35 90 TR_XM_DKIM_Undo 4220 11.66 30.05 2.31 91 MAILING_LIST_MULTI 4121 2.04 1.62 2.26 92 XM_CamelCaseFrm001 4116 2.68 3.52 2.25 93 TR_DCC_Bayes_99 3661 9.37 23.86 2.01 94 XM_Body_Dirty_Words 3602 3.02 5.07 1.97 95 BAYES_05 3556 1.48 0.57 1.95 96 TooManyTo_002 3544 1.44 0.47 1.94 97 FROM_EXCESS_BASE64 3514 2.03 2.24 1.92 98 TR_XM_UnparsRelay 3459 4.35 9.19 1.89 99 HTML_IMAGE_ONLY_32 3439 1.51 0.77 1.88 100 TM2_M_URI_OPT_OUT 3427 1.87 1.87 1.88 101 XMStockSpam_06 3389 2.32 3.24 1.86 102 T_TooManySym_03 3312 1.26 0.16 1.81 103 XMSexyCombo_05 3148 2.54 4.13 1.72 104 XMDiploma_00 3086 1.83 2.12 1.69 105 XM_PDF 3069 1.26 0.44 1.68 106 RCVD_IN_IADB_LISTED 2967 1.35 0.81 1.63 107 HTML_MIME_NO_HTML_TAG 2851 2.22 3.50 1.56 108 UNTRUSTED_Relay 2813 3.60 7.64 1.54 109 T_XMDrugObfuBody_00 2727 1.35 1.06 1.49 110 RCVD_IN_IADB_SPF 2709 1.21 0.68 1.48 111 T_XMDrugObfuBody_14 2590 2.88 5.75 1.42 112 TR_XM_PhishingBody 2567 2.80 5.54 1.41 113 T_XMDrugObfuBody_08 2549 2.06 3.36 1.40 114 IN_HORDE_ADDRESS_BOOK 2517 0.94 0.06 1.38 115 XM_B_URI_Unicode 2509 1.49 1.70 1.37 116 RCVD_IN_IADB_SENDERID 2504 1.12 0.62 1.37 117 XM_DK_Undo_01 2479 1.26 1.06 1.36 118 TR_XM_SpammyRelay 2472 4.99 12.14 1.35 119 XMGappySubj_01 2461 0.94 0.14 1.35 120 XMBrknScrpt_02 2446 1.58 2.04 1.34 121 RCVD_IN_IADB_DK 2433 1.09 0.62 1.33 122 TVD_SPACE_RATIO 2425 0.96 0.22 1.33 123 XM_B_Investor 2352 2.11 3.72 1.29 124 TVD_RCVD_IP 2300 1.22 1.15 1.26 125 XM_B_Unsub2 2070 1.64 2.64 1.13 126 DKIM_INVALID 2062 2.57 5.40 1.13 127 XMGappySubj_02 2055 0.76 0.04 1.13 128 XM_SendGrid 2037 1.07 0.99 1.12 129 XM_GoogleGroups 1941 0.93 0.66 1.06 130 URI_NOVOWEL 1899 1.21 1.54 1.04 131 XM_H_PHPMailer 1847 0.81 0.42 1.01 132 RCVD_IN_IADB_VOUCHED 1836 0.81 0.44 1.01 133 TR_XM_SpammyWords5 1803 1.64 2.92 0.99 134 XM_B_COPY_HTML 1799 1.11 1.36 0.99 135 TR_XM_Base64_M1 1781 0.85 0.60 0.98 136 XMBdyGiftCard01 1762 1.02 1.13 0.97 137 BOTNET 1760 4.35 11.00 0.96 138 TR_Symld_Words 1750 0.93 0.88 0.96 139 XM_UB50 1673 1.46 2.53 0.92 140 XMGenDplmaNmb 1629 1.00 1.23 0.89 141 XM_SPF_SoftFail 1581 1.60 3.04 0.87 142 TR_XM_DK_SendGrid 1571 0.82 0.74 0.86 143 XMBSHREFv2 1567 0.64 0.22 0.86 144 TooManyTo_003 1534 0.69 0.40 0.84 145 T_XMHurry_00 1521 1.83 3.78 0.83 146 XM_B_FormFill 1452 0.54 0.05 0.80 147 URI_HEX 1427 0.90 1.14 0.78 148 RCVD_IN_IADB_OPTIN 1366 0.60 0.30 0.75 149 XM_OfRef6 1349 1.72 3.64 0.74 150 SUBJ_ALL_CAPS 1312 1.09 1.83 0.72 151 XMSlimDrugH 1273 0.77 0.91 0.70 152 TR_XM_SpammyWords2 1251 4.29 11.37 0.69 153 TooManyTo_004 1249 0.58 0.37 0.68 154 XM_B_SpammyWords4 1233 1.23 2.31 0.68 155 RELAYCOUNTRY_CA 1221 2.60 6.39 0.67 156 HTML_TAG_BALANCE_BODY 1211 0.79 1.04 0.66 157 DKIM_ADSP_CUSTOM_MED 1190 0.83 1.18 0.65 158 T_FILL_THIS_FORM_SHORT 1184 1.77 3.98 0.65 159 TR_MetaPhish_Combo_01 1178 0.65 0.67 0.65 160 XMSolicitRefs_0 1155 0.57 0.46 0.63 161 XMBody_17 1143 1.26 2.51 0.63 162 XM_B_DNDMA 1135 0.85 1.30 0.62 163 HTML_FONT_FACE_BAD 1116 0.52 0.34 0.61 164 TR_XM_GMP_MSPIKE_UNDO2 1093 0.46 0.20 0.60 165 TooManyTo_005 1079 0.50 0.33 0.59 166 DIET_1 1032 0.89 1.54 0.57 167 RCVD_IN_MSPIKE_BL 1026 2.55 6.47 0.56 168 TR_XM_MSPIKECOMBO 1024 2.55 6.47 0.56 169 MSGID_FROM_MTA_HEADER 1019 0.49 0.36 0.56 170 T_TooManySym_04 1013 0.37 0.02 0.55 171 XM_ProductURIs 1012 1.23 2.56 0.55 172 THIS_AD 1005 1.15 2.34 0.55 173 RCVD_IN_BL_SPAMCOP_NET 1003 5.66 15.71 0.55 174 XM_H_Long_From02 988 0.69 0.99 0.54 175 XMHTML_After_End 959 0.70 1.06 0.53 176 RCVD_IN_PBL 956 0.86 1.53 0.52 177 XMPhish30 954 1.45 3.26 0.52 178 TM2_M_OBFU_COMMENT 947 0.61 0.80 0.52 179 XMLngstWrd_00 929 0.44 0.29 0.51 180 XMSubMetaSxObfu_02 910 0.47 0.40 0.50 181 TR_Mismatch_TLD_01 906 0.64 0.93 0.50 182 AD_PREFS 873 0.34 0.06 0.48 183 MPART_ALT_DIFF_COUNT 863 0.92 1.81 0.47 184 XM_Ancestry_Forge 859 0.31 0.01 0.47 185 TR_LOTS_OF_MONEY3 852 0.89 1.72 0.47 186 XMNoVowels 846 0.38 0.22 0.46 187 URI_TRY_3LD 838 0.79 1.44 0.46 188 SUBJ_DOLLARS 817 0.46 0.50 0.45 189 RELAYCOUNTRY_AU 815 1.06 2.28 0.45 190 XM_S_SubURI 807 0.30 0.03 0.44 191 XM_RXBody 797 0.47 0.54 0.44 192 HTML_TAG_BALANCE_CENTER 792 0.63 1.01 0.43 193 XMPhish14 789 0.48 0.58 0.43 194 XMBody_95 785 0.31 0.07 0.43 195 HTML_TEXT_INVISIBLE_STYLE 782 0.36 0.22 0.43 196 DKIM_ADSP_NXDOMAIN 767 1.26 2.92 0.42 197 HTML_IMAGE_ONLY_20 764 0.68 1.20 0.42 198 XMLngstWrd_01 762 0.36 0.24 0.42 199 LONGLN_LOW_CONTRAST 758 0.47 0.57 0.42 200 HTTPS_HTTP_MISMATCH 755 0.52 0.74 0.41 ----------------------------------------------------------------------