Email: 270086 Autolearn: 0 AvgScore: 5.44 AvgScanTime: 1.28 sec Spam: 93945 Autolearn: 0 AvgScore: 13.89 AvgScanTime: 1.39 sec Ham: 176141 Autolearn: 0 AvgScore: 0.93 AvgScanTime: 1.21 sec Time Spent Running SA: 95.68 hours Time Spent Processing Spam: 36.23 hours Time Spent Processing Ham: 59.44 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 93744 99.75 99.79 99.73 2 HTML_MESSAGE 88801 87.99 94.52 84.50 3 DKIM_SIGNED 84204 79.03 89.63 73.38 4 XM_DK_Pass 78180 76.29 83.22 72.59 5 DKIM_VALID 77801 75.87 82.82 72.16 6 XM_B_Unicode 77129 75.62 82.10 72.17 7 RELAYCOUNTRY_US 75333 81.39 80.19 82.03 8 DCC_CHECK 71419 54.24 76.02 42.62 9 XM_B_SpammyWords 64331 55.11 68.48 47.97 10 XMListUnsubscribeExists 63447 57.20 67.54 51.69 11 DKIM_VALID_AU 62712 64.87 66.75 63.87 12 LOC_TINY_FONT_1 47435 41.79 50.49 37.15 13 XM_B_Unicode3 46641 49.18 49.65 48.93 14 XM_DK_Undo_02 41348 19.19 44.01 5.95 15 XM_B_SpammyWords2 36968 27.35 39.35 20.94 16 HTML_FONT_LOW_CONTRAST 36674 37.95 39.04 37.37 17 FVGT_m_MULTI_ODD 35261 30.00 37.53 25.98 18 BAYES_50 34691 53.31 36.93 62.04 19 BAYES_99 32476 15.17 34.57 4.82 20 TR_XM_DKIM_Undo 29721 12.41 31.64 2.16 21 DKIM_VALID_EF 27716 28.86 29.50 28.52 22 T_KAM_HTML_FONT_INVALID 25082 22.56 26.70 20.36 23 BAYES_999 24650 11.52 26.24 3.67 24 MIME_HTML_ONLY 24246 22.28 25.81 20.40 25 TR_DCC_Bayes_99 23948 10.12 25.49 1.93 26 DCC_CHECK_NEGATIVE 22478 45.70 23.93 57.31 27 TR_XM_DK_Unsub 21905 17.50 23.32 14.40 28 RCVD_IN_MSPIKE_H2 20495 16.83 21.82 14.17 29 XM_Multi_Part_URI 19872 18.20 21.15 16.63 30 XM_B_Unsub 19102 13.43 20.33 9.75 31 T_TM2_M_HEADER_IN_MSG 18813 24.21 20.03 26.45 32 TR_XM_BayesUnsub 18384 11.80 19.57 7.66 33 XMSubLong 17751 21.11 18.90 22.29 34 UNPARSEABLE_RELAY 17415 14.88 18.54 12.92 35 RELAYCOUNTRY_META 15884 7.78 16.91 2.92 36 TR_MAX_INTL_RELAY 15309 10.11 16.30 6.81 37 RCVD_IN_BL_SPAMCOP_NET 14137 5.62 15.05 0.59 38 BOTNET 11808 5.01 12.57 0.98 39 TR_XM_SpammyRelay 11696 5.42 12.45 1.68 40 TR_XM_SpammyWords2 11680 4.68 12.43 0.54 41 XM_B_SpammyWords3 11289 8.38 12.02 6.45 42 RCVD_IN_MSPIKE_WL 10536 15.88 11.22 18.37 43 TR_XM_UnparsRelay 10013 4.87 10.66 1.78 44 FSL_BULK_SIG 9840 6.67 10.47 4.64 45 RCVD_IN_MSPIKE_BL 9796 4.06 10.43 0.66 46 TR_XM_MSPIKECOMBO 9788 4.05 10.42 0.65 47 UNTRUSTED_Relay 9370 4.65 9.97 1.81 48 BOTNET_IPINHOSTNAME 9251 5.78 9.85 3.61 49 BAYES_80 8961 5.93 9.54 4.00 50 LOTS_OF_MONEY 8559 6.46 9.11 5.04 51 BAYES_60 7943 7.50 8.45 6.99 52 MPART_ALT_DIFF 7772 6.45 8.27 5.48 53 TR_XM_SpammyWords4 7516 5.11 8.00 3.57 54 TR_XM_SpammyWords3 7330 2.94 7.80 0.35 55 XM_B_Phish_Phrases 6984 6.06 7.43 5.33 56 TR_XM_SPAMCOP 6944 2.67 7.39 0.15 57 DKIM_INVALID 6403 3.16 6.82 1.22 58 XM_Evil_Numbers_Gen 6330 10.48 6.74 12.47 59 RELAYCOUNTRY_CA 6132 2.80 6.53 0.81 60 T_XMDrugObfuBody_14 6057 3.40 6.45 1.77 61 XM_H_GMP 6053 5.79 6.44 5.45 62 BAYES_95 5756 3.96 6.13 2.80 63 HTML_IMAGE_RATIO_02 5623 5.81 5.99 5.72 64 XMSubMetaSx_00 5479 4.23 5.83 3.37 65 LotsOfNums_01 5137 8.48 5.47 10.09 66 XM_UncommonTLD01 5118 5.09 5.45 4.89 67 XM_H_Long_From01 4904 5.24 5.22 5.26 68 XM_Body_Dirty_Words 4685 3.01 4.99 1.95 69 TooManyTo_001 4684 5.37 4.99 5.58 70 TR_XM_PhishingBody 4671 2.75 4.97 1.57 71 XMStrtUSub 4581 5.84 4.88 6.36 72 XM_UB50 4458 2.36 4.75 1.08 73 MIME_HTML_MOSTLY 4270 3.41 4.55 2.81 74 XM_SPF_SoftFail 4214 2.13 4.49 0.88 75 XM_B_SpammyTLD 4137 3.34 4.40 2.77 76 RCVD_IN_MSPIKE_H3 3948 6.44 4.20 7.63 77 DKIM_ADSP_NXDOMAIN 3931 1.77 4.18 0.48 78 XM_B_PhoneNumber 3872 5.47 4.12 6.19 79 BOTNET_NORDNS 3786 1.41 4.03 0.01 80 RCVD_IN_MSPIKE_H5 3771 5.60 4.01 6.45 81 MIME_QP_LONG_LINE 3671 3.29 3.91 2.97 82 XM_CamelCaseFrm001 3662 2.72 3.90 2.09 83 TM2_M_VERY_LONG_WORD 3654 5.36 3.89 6.15 84 RCVD_IN_MSPIKE_L5 3371 1.27 3.59 0.03 85 T_FILL_THIS_FORM_SHORT 3359 1.82 3.58 0.88 86 XMSexyCombo_05 3347 1.96 3.56 1.11 87 RCVD_IN_MSPIKE_L3 3334 1.53 3.55 0.46 88 XM_B_Investor 3324 2.02 3.54 1.20 89 TR_XM_InvalidRelay 3188 1.19 3.39 0.01 90 RCVD_IN_MSPIKE_L4 3083 1.25 3.28 0.16 91 HTML_IMAGE_RATIO_04 3048 4.12 3.24 4.58 92 USER_IN_DEF_DKIM_WL 2957 13.28 3.15 18.69 93 TR_XM_NoHeaderRelay 2854 1.15 3.04 0.14 94 TR_Symld_Words 2853 1.78 3.04 1.11 95 RCVD_IN_MSPIKE_H4 2817 3.84 3.00 4.29 96 HTML_IMAGE_RATIO_08 2652 2.90 2.82 2.94 97 RCVD_IN_VALIDITY_RPBL 2633 0.99 2.80 0.03 98 XMPhish30 2623 1.44 2.79 0.71 99 HTML_IMAGE_RATIO_06 2568 3.18 2.73 3.42 100 NORDNS_LOW_CONTRAST 2485 0.93 2.65 0.02 101 XM_OfRef6 2461 1.46 2.62 0.84 102 FROM_EXCESS_BASE64 2453 2.36 2.61 2.23 103 XM_URI_RBL 2403 1.24 2.56 0.54 104 TR_XM_SpammyWords5 2380 1.67 2.53 1.21 105 XMBody_17 2379 1.26 2.53 0.58 106 TR_XM_INV_DKIM 2315 0.87 2.46 0.03 107 XM_B_Unsub2 2309 1.65 2.46 1.22 108 RCVD_IN_VALIDITY_SAFE 2287 4.87 2.43 6.17 109 T_TooManySym_01 2262 6.12 2.41 8.09 110 RELAYCOUNTRY_AU 2225 1.12 2.37 0.46 111 MIME_HTML_ONLY_MULTI 2217 2.67 2.36 2.84 112 XM_B_URI_Unicode 2217 1.64 2.36 1.26 113 XM_H_DKIM_GOOG 2191 0.81 2.33 0.00 114 TR_XM_MSPIKECOMBO2 2190 0.84 2.33 0.05 115 T_XMDrugObfuBody_08 2176 1.75 2.32 1.45 116 BAYES_40 2162 4.60 2.30 5.83 117 XMDiploma_00 2132 1.80 2.27 1.55 118 XMNumbers 2121 3.73 2.26 4.51 119 T_XMHurry_00 2063 1.10 2.20 0.52 120 TVD_SPACE_RATIO_MINFP 1988 0.74 2.12 0.01 121 SUBJ_ALL_CAPS 1977 1.28 2.10 0.84 122 TVD_SPACE_RATIO 1968 1.67 2.09 1.44 123 XM_B_SpammyWords4 1926 1.62 2.05 1.39 124 RCVD_IN_PSBL 1924 0.73 2.05 0.03 125 MPART_ALT_DIFF_COUNT 1889 1.04 2.01 0.53 126 RELAYCOUNTRY_FR 1828 0.85 1.95 0.26 127 XMBrknScrpt_02 1789 1.59 1.90 1.43 128 XM_ProductURIs 1772 1.53 1.89 1.33 129 TM2_M_URI_OPT_OUT 1763 1.77 1.88 1.71 130 XMStockSpam_06 1731 1.82 1.84 1.80 131 KHOP_HELO_FCRDNS 1694 3.19 1.80 3.93 132 XM_UB99 1654 0.61 1.76 0.00 133 TR_LOTS_OF_MONEY3 1647 0.83 1.75 0.34 134 SpammyFromTLD_02 1647 0.71 1.75 0.15 135 T_REMOTE_IMAGE 1600 2.53 1.70 2.96 136 XMBdyGiftCard01 1567 1.43 1.67 1.30 137 MAILING_LIST_MULTI 1483 2.07 1.58 2.33 138 XM_B_COPY_HTML 1449 1.38 1.54 1.29 139 SpammyFromTLD_01 1440 0.77 1.53 0.36 140 T_XMDrugObfuBody_00 1437 1.36 1.53 1.26 141 RCVD_IN_VALIDITY_CERTIFIED 1427 4.05 1.52 5.39 142 XM_H_Long_From02 1401 0.90 1.49 0.58 143 RDNS_DYNAMIC 1393 0.68 1.48 0.25 144 ALL_TRUSTED 1377 10.21 1.47 14.88 145 URI_NOVOWEL 1364 1.26 1.45 1.15 146 HK_RANDOM_REPLYTO 1345 0.55 1.43 0.08 147 XMSubMetaI_00 1340 0.80 1.43 0.47 148 TVD_RCVD_IP 1311 1.47 1.40 1.50 149 XMBody_78 1308 0.81 1.39 0.50 150 SHOPIFY_IMG_NOT_RCVD_SFY 1305 0.70 1.39 0.33 151 HTML_TAG_BALANCE_BODY 1303 0.96 1.39 0.72 152 HTML_IMAGE_ONLY_20 1294 0.79 1.38 0.47 153 DIET_1 1258 0.85 1.34 0.58 154 SCC_CANSPAM_2 1226 0.45 1.31 0.00 155 MultiRelay_CC 1225 0.50 1.30 0.07 156 THIS_AD 1211 0.72 1.29 0.41 157 ANY_BOUNCE_MESSAGE 1207 6.69 1.28 9.58 158 BOUNCE_MESSAGE 1207 6.69 1.28 9.58 159 HELO_DYNAMIC_SPLIT_IP 1163 0.44 1.24 0.01 160 TR_XM_MaxSPIKE 1157 0.44 1.23 0.02 161 TR_XM_GMP_BULK_SIG 1140 0.46 1.21 0.06 162 XM_B_DNDMA 1140 0.73 1.21 0.48 163 XM_UB999 1102 0.41 1.17 0.00 164 TR_XM_RelayPhish 1096 0.46 1.17 0.08 165 URI_HEX 1094 1.07 1.16 1.03 166 XM_SendGrid 1065 1.25 1.13 1.31 167 BAYES_20 1041 2.59 1.11 3.38 168 XM_DK_Undo_01 1039 1.34 1.11 1.46 169 TR_XM_Base64_M1 1039 0.83 1.11 0.68 170 XM_UB60 1037 0.45 1.10 0.10 171 TM2_M_OBFU_COMMENT 1031 0.86 1.10 0.74 172 TR_XM_PHPForged 1028 0.61 1.09 0.35 173 TR_XM_PHPDW 1017 0.60 1.08 0.35 174 TR_XM_FormFill2 1005 0.60 1.07 0.35 175 XM_B_Phish66 991 0.56 1.05 0.30 176 PLING_QUERY 980 0.76 1.04 0.61 177 URI_TRY_3LD 969 0.79 1.03 0.67 178 XM_H_PHPOS 961 0.57 1.02 0.33 179 TR_Mismatch_TLD_01 957 0.67 1.02 0.49 180 XM_HighProb1 949 0.35 1.01 0.00 181 TR_XM_FormFill 948 0.36 1.01 0.01 182 XM_B_REG_HTML 944 0.45 1.00 0.16 183 XM_UB80 940 0.36 1.00 0.02 184 SUBJ_DOLLARS 918 0.59 0.98 0.38 185 XMGenDplmaNmb 906 0.87 0.96 0.82 186 XPRIO 904 0.34 0.96 0.00 187 DKIM_ADSP_CUSTOM_MED 896 0.78 0.95 0.69 188 HTML_TEXT_INVISIBLE_STYLE 888 0.56 0.95 0.35 189 HTTPS_HTTP_MISMATCH 879 0.61 0.94 0.44 190 XMReplyNow 874 0.45 0.93 0.19 191 TR_Mismatch_TLD_02 872 0.36 0.93 0.06 192 XM_B_SEO 864 0.42 0.92 0.16 193 HTML_MIME_NO_HTML_TAG 856 1.42 0.91 1.69 194 XMSexyCombo_01 848 0.40 0.90 0.13 195 XM_DIRTYINTL 841 0.34 0.90 0.04 196 NML_ADSP_CUSTOM_MED 818 0.56 0.87 0.40 197 XMClaimOffer 816 0.39 0.87 0.14 198 TR_Caps_n_Bayes_99 815 0.32 0.87 0.02 199 TR_XM_DK_SendGrid 813 0.94 0.87 0.99 200 XMSlimDrugH 797 0.79 0.85 0.75 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 175671 99.75 99.79 99.73 2 HTML_MESSAGE 148846 87.99 94.52 84.50 3 RELAYCOUNTRY_US 144491 81.39 80.19 82.03 4 DKIM_SIGNED 129250 79.03 89.63 73.38 5 XM_DK_Pass 127856 76.29 83.22 72.59 6 XM_B_Unicode 127115 75.62 82.10 72.17 7 DKIM_VALID 127108 75.87 82.82 72.16 8 DKIM_VALID_AU 112506 64.87 66.75 63.87 9 BAYES_50 109284 53.31 36.93 62.04 10 DCC_CHECK_NEGATIVE 100942 45.70 23.93 57.31 11 XMListUnsubscribeExists 91055 57.20 67.54 51.69 12 XM_B_Unicode3 86189 49.18 49.65 48.93 13 XM_B_SpammyWords 84503 55.11 68.48 47.97 14 DCC_CHECK 75079 54.24 76.02 42.62 15 HTML_FONT_LOW_CONTRAST 65816 37.95 39.04 37.37 16 LOC_TINY_FONT_1 65431 41.79 50.49 37.15 17 DKIM_VALID_EF 50227 28.86 29.50 28.52 18 T_TM2_M_HEADER_IN_MSG 46584 24.21 20.03 26.45 19 FVGT_m_MULTI_ODD 45754 30.00 37.53 25.98 20 XMSubLong 39254 21.11 18.90 22.29 21 XM_B_SpammyWords2 36889 27.35 39.35 20.94 22 MIME_HTML_ONLY 35932 22.28 25.81 20.40 23 T_KAM_HTML_FONT_INVALID 35860 22.56 26.70 20.36 24 USER_IN_DEF_DKIM_WL 32914 13.28 3.15 18.69 25 RCVD_IN_MSPIKE_WL 32361 15.88 11.22 18.37 26 XM_Multi_Part_URI 29296 18.20 21.15 16.63 27 ALL_TRUSTED 26211 10.21 1.47 14.88 28 TR_XM_DK_Unsub 25370 17.50 23.32 14.40 29 RCVD_IN_MSPIKE_H2 24952 16.83 21.82 14.17 30 UNPARSEABLE_RELAY 22766 14.88 18.54 12.92 31 XM_Evil_Numbers_Gen 21965 10.48 6.74 12.47 32 LotsOfNums_01 17767 8.48 5.47 10.09 33 XM_B_Unsub 17179 13.43 20.33 9.75 34 ANY_BOUNCE_MESSAGE 16870 6.69 1.28 9.58 35 BOUNCE_MESSAGE 16868 6.69 1.28 9.58 36 XM_DKIMWhitelistDomains 15081 5.60 0.05 8.56 37 BAYES_00 14685 5.58 0.41 8.34 38 T_TooManySym_01 14257 6.12 2.41 8.09 39 TR_XM_BayesUnsub 13487 11.80 19.57 7.66 40 RCVD_IN_MSPIKE_H3 13445 6.44 4.20 7.63 41 BAYES_60 12314 7.50 8.45 6.99 42 TR_MAX_INTL_RELAY 11987 10.11 16.30 6.81 43 TR_XM_DK_Bayes 11618 4.40 0.30 6.60 44 TR_XM_DK_Bayes1 11546 4.38 0.29 6.55 45 RCVD_IN_MSPIKE_H5 11362 5.60 4.01 6.45 46 XM_B_SpammyWords3 11355 8.38 12.02 6.45 47 XMStrtUSub 11201 5.84 4.88 6.36 48 XM_B_PhoneNumber 10910 5.47 4.12 6.19 49 RCVD_IN_VALIDITY_SAFE 10872 4.87 2.43 6.17 50 TM2_M_VERY_LONG_WORD 10835 5.36 3.89 6.15 51 XM_DK_Undo_02 10481 19.19 44.01 5.95 52 TR_XM_DK_Bayes2 10410 3.93 0.21 5.91 53 BAYES_40 10267 4.60 2.30 5.83 54 HTML_IMAGE_RATIO_02 10078 5.81 5.99 5.72 55 TooManyTo_001 9826 5.37 4.99 5.58 56 MPART_ALT_DIFF 9651 6.45 8.27 5.48 57 XM_H_GMP 9597 5.79 6.44 5.45 58 RCVD_IN_VALIDITY_CERTIFIED 9499 4.05 1.52 5.39 59 XM_B_Phish_Phrases 9381 6.06 7.43 5.33 60 XM_H_Long_From01 9259 5.24 5.22 5.26 61 LOTS_OF_MONEY 8877 6.46 9.11 5.04 62 XM_UncommonTLD01 8617 5.09 5.45 4.89 63 BAYES_99 8486 15.17 34.57 4.82 64 FSL_BULK_SIG 8168 6.67 10.47 4.64 65 HTML_IMAGE_RATIO_04 8071 4.12 3.24 4.58 66 XMNumbers 7942 3.73 2.26 4.51 67 T_TooManySym_02 7902 3.11 0.54 4.49 68 RCVD_IN_MSPIKE_H4 7554 3.84 3.00 4.29 69 BAYES_80 7046 5.93 9.54 4.00 70 TO_MALFORMED 7005 2.60 0.01 3.98 71 KHOP_HELO_FCRDNS 6918 3.19 1.80 3.93 72 INVALID_MSGID 6916 2.75 0.53 3.93 73 BAYES_999 6468 11.52 26.24 3.67 74 BOTNET_IPINHOSTNAME 6357 5.78 9.85 3.61 75 TR_XM_SpammyWords4 6295 5.11 8.00 3.57 76 MAY_BE_FORGED 6028 2.23 0.00 3.42 77 HTML_IMAGE_RATIO_06 6028 3.18 2.73 3.42 78 BAYES_20 5945 2.59 1.11 3.38 79 XMSubMetaSx_00 5939 4.23 5.83 3.37 80 MIME_QP_LONG_LINE 5226 3.29 3.91 2.97 81 T_REMOTE_IMAGE 5222 2.53 1.70 2.96 82 HTML_IMAGE_RATIO_08 5175 2.90 2.82 2.94 83 RELAYCOUNTRY_META 5140 7.78 16.91 2.92 84 MIME_HTML_ONLY_MULTI 5004 2.67 2.36 2.84 85 MIME_HTML_MOSTLY 4950 3.41 4.55 2.81 86 BAYES_95 4940 3.96 6.13 2.80 87 XM_B_SpammyTLD 4884 3.34 4.40 2.77 88 T_TVD_MIME_NO_HEADERS 4480 1.68 0.06 2.54 89 MAILING_LIST_MULTI 4112 2.07 1.58 2.33 90 FROM_EXCESS_BASE64 3932 2.36 2.61 2.23 91 TR_XM_DKIM_Undo 3810 12.41 31.64 2.16 92 MIME_CHARSET_FARAWAY 3802 1.52 0.33 2.16 93 XM_CamelCaseFrm001 3681 2.72 3.90 2.09 94 XM_PDF 3677 1.50 0.39 2.09 95 TooManyTo_002 3587 1.53 0.59 2.04 96 CHARSET_FARAWAY_HEADER 3563 1.38 0.19 2.02 97 XM_Body_Dirty_Words 3436 3.01 4.99 1.95 98 TR_DCC_Bayes_99 3397 10.12 25.49 1.93 99 T_TooManySym_03 3384 1.32 0.20 1.92 100 UNTRUSTED_Relay 3184 4.65 9.97 1.81 101 XMStockSpam_06 3175 1.82 1.84 1.80 102 BAYES_05 3172 1.37 0.55 1.80 103 TR_XM_UnparsRelay 3140 4.87 10.66 1.78 104 T_XMDrugObfuBody_14 3123 3.40 6.45 1.77 105 TM2_M_URI_OPT_OUT 3017 1.77 1.88 1.71 106 HTML_MIME_NO_HTML_TAG 2977 1.42 0.91 1.69 107 RCVD_IN_IADB_LISTED 2963 1.33 0.68 1.68 108 TR_XM_SpammyRelay 2956 5.42 12.45 1.68 109 TR_XM_PhishingBody 2759 2.75 4.97 1.57 110 XMDiploma_00 2732 1.80 2.27 1.55 111 RCVD_IN_IADB_SPF 2696 1.20 0.57 1.53 112 IN_HORDE_ADDRESS_BOOK 2664 1.01 0.07 1.51 113 TVD_RCVD_IP 2650 1.47 1.40 1.50 114 XM_DK_Undo_01 2575 1.34 1.11 1.46 115 T_XMDrugObfuBody_08 2560 1.75 2.32 1.45 116 TVD_SPACE_RATIO 2537 1.67 2.09 1.44 117 XMGappySubj_01 2532 0.98 0.12 1.44 118 XMBrknScrpt_02 2513 1.59 1.90 1.43 119 RCVD_IN_IADB_SENDERID 2495 1.10 0.51 1.42 120 XM_B_SpammyWords4 2456 1.62 2.05 1.39 121 RCVD_IN_IADB_DK 2439 1.08 0.51 1.38 122 XM_ProductURIs 2351 1.53 1.89 1.33 123 XM_SendGrid 2302 1.25 1.13 1.31 124 XMBdyGiftCard01 2292 1.43 1.67 1.30 125 XM_B_COPY_HTML 2269 1.38 1.54 1.29 126 T_XMDrugObfuBody_00 2223 1.36 1.53 1.26 127 XM_B_URI_Unicode 2213 1.64 2.36 1.26 128 XM_B_Unsub2 2146 1.65 2.46 1.22 129 DKIM_INVALID 2142 3.16 6.82 1.22 130 TR_XM_SpammyWords5 2138 1.67 2.53 1.21 131 XM_B_Investor 2120 2.02 3.54 1.20 132 TooManyTo_003 2073 0.95 0.54 1.18 133 URI_NOVOWEL 2026 1.26 1.45 1.15 134 XMBSHREFv2 1987 0.83 0.27 1.13 135 TR_Symld_Words 1961 1.78 3.04 1.11 136 XM_GoogleGroups 1960 0.95 0.65 1.11 137 XMSexyCombo_05 1957 1.96 3.56 1.11 138 XMGappySubj_02 1952 0.74 0.04 1.11 139 XM_UB50 1904 2.36 4.75 1.08 140 RCVD_IN_IADB_VOUCHED 1887 0.84 0.41 1.07 141 URI_HEX 1806 1.07 1.16 1.03 142 XM_H_PHPMailer 1795 0.84 0.51 1.02 143 TR_XM_DK_SendGrid 1738 0.94 0.87 0.99 144 BOTNET 1723 5.01 12.57 0.98 145 TooManyTo_004 1698 0.80 0.50 0.96 146 T_FILL_THIS_FORM_SHORT 1552 1.82 3.58 0.88 147 XM_SPF_SoftFail 1551 2.13 4.49 0.88 148 TooManyTo_005 1523 0.73 0.47 0.86 149 XM_OfRef6 1475 1.46 2.62 0.84 150 SUBJ_ALL_CAPS 1472 1.28 2.10 0.84 151 XMGenDplmaNmb 1446 0.87 0.96 0.82 152 RELAYCOUNTRY_CA 1429 2.80 6.53 0.81 153 RCVD_IN_IADB_OPTIN 1415 0.62 0.28 0.80 154 XMSlimDrugH 1324 0.79 0.85 0.75 155 TM2_M_OBFU_COMMENT 1296 0.86 1.10 0.74 156 HTML_TAG_BALANCE_BODY 1277 0.96 1.39 0.72 157 XMPhish30 1255 1.44 2.79 0.71 158 DKIM_ADSP_CUSTOM_MED 1208 0.78 0.95 0.69 159 TR_XM_Base64_M1 1201 0.83 1.11 0.68 160 TR_XM_GMP_MSPIKE_UNDO2 1200 0.53 0.23 0.68 161 URI_TRY_3LD 1176 0.79 1.03 0.67 162 RCVD_IN_MSPIKE_BL 1170 4.06 10.43 0.66 163 XMSolicitRefs_0 1152 0.58 0.44 0.65 164 XMBody_106 1147 0.47 0.12 0.65 165 TR_XM_MSPIKECOMBO 1146 4.05 10.42 0.65 166 TR_MetaPhish_Combo_01 1137 0.70 0.79 0.65 167 XMNoVowels 1092 0.54 0.38 0.62 168 PLING_QUERY 1082 0.76 1.04 0.61 169 MSGID_FROM_MTA_HEADER 1059 0.49 0.28 0.60 170 RCVD_IN_BL_SPAMCOP_NET 1041 5.62 15.05 0.59 171 DIET_1 1028 0.85 1.34 0.58 172 XMBody_17 1027 1.26 2.53 0.58 173 XM_H_Long_From02 1025 0.90 1.49 0.58 174 T_TooManySym_04 995 0.39 0.07 0.56 175 XM_URI_RBL 950 1.24 2.56 0.54 176 TR_XM_SpammyWords2 948 4.68 12.43 0.54 177 MPART_ALT_DIFF_COUNT 933 1.04 2.01 0.53 178 T_XMHurry_00 914 1.10 2.20 0.52 179 XMSubMetaSxObfu_03 904 0.55 0.61 0.51 180 XMBody_78 884 0.81 1.39 0.50 181 HTML_IMAGE_ONLY_32 879 0.35 0.07 0.50 182 TR_Mismatch_TLD_01 857 0.67 1.02 0.49 183 XM_B_FormFill 853 0.32 0.02 0.48 184 XM_B_DNDMA 844 0.73 1.21 0.48 185 DKIM_ADSP_NXDOMAIN 837 1.77 4.18 0.48 186 XMLngstWrd_00 831 0.39 0.24 0.47 187 XMSubMetaI_00 830 0.80 1.43 0.47 188 HTML_IMAGE_ONLY_20 828 0.79 1.38 0.47 189 RELAYCOUNTRY_AU 809 1.12 2.37 0.46 190 XM_S_SubURI 808 0.31 0.04 0.46 191 RCVD_IN_MSPIKE_L3 806 1.53 3.55 0.46 192 XMBody_95 799 0.32 0.08 0.45 193 FORGED_GMAIL_RCVD 784 0.57 0.81 0.45 194 HTTPS_HTTP_MISMATCH 773 0.61 0.94 0.44 195 XMHTML_After_End 770 0.48 0.57 0.44 196 FONT_INVIS_LONG_LINE 757 0.41 0.37 0.43 197 THIS_AD 727 0.72 1.29 0.41 198 NO_DNS_FOR_FROM 726 0.41 0.40 0.41 199 HTML_FONT_FACE_BAD 718 0.42 0.45 0.41 200 NML_ADSP_CUSTOM_MED 696 0.56 0.87 0.40 ----------------------------------------------------------------------