Email: 337520 Autolearn: 0 AvgScore: 5.29 AvgScanTime: 1.51 sec Spam: 84646 Autolearn: 0 AvgScore: 13.49 AvgScanTime: 1.42 sec Ham: 252874 Autolearn: 0 AvgScore: 2.54 AvgScanTime: 1.53 sec Time Spent Running SA: 141.14 hours Time Spent Processing Spam: 33.34 hours Time Spent Processing Ham: 107.80 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 80104 91.20 94.63 90.05 2 DKIM_SIGNED 73953 56.42 87.37 46.06 3 XM_B_Unicode 73067 84.25 86.32 83.56 4 RELAYCOUNTRY_US 72558 87.00 85.72 87.42 5 XM_DK_Pass 71686 55.21 84.69 45.34 6 DKIM_VALID 71185 54.80 84.10 45.00 7 DCC_CHECK 65616 42.42 77.52 30.67 8 DKIM_VALID_AU 60028 46.86 70.92 38.80 9 XM_B_SpammyWords 59661 67.77 70.48 66.87 10 XMListUnsubscribeExists 58567 42.28 69.19 33.27 11 XM_B_Unicode3 48624 36.92 57.44 30.04 12 LOC_TINY_FONT_1 41991 56.53 49.61 58.85 13 BAYES_50 34809 61.34 41.12 68.10 14 RCVD_IN_MSPIKE_H2 34311 27.46 40.53 23.08 15 XM_B_SpammyWords2 34310 20.88 40.53 14.30 16 XM_DK_Undo_02 31285 11.75 36.96 3.31 17 HTML_FONT_LOW_CONTRAST 31251 52.90 36.92 58.25 18 FVGT_m_MULTI_ODD 26951 20.94 31.84 17.30 19 BAYES_99 25813 9.61 30.50 2.62 20 T_KAM_HTML_FONT_INVALID 25380 16.50 29.98 11.99 21 DKIM_VALID_EF 23077 19.36 27.26 16.72 22 TR_XM_DKIM_Undo 22775 7.90 26.91 1.54 23 MIME_HTML_ONLY 20593 15.58 24.33 12.65 24 BAYES_999 19515 7.32 23.05 2.05 25 XMSubLong 19346 17.32 22.86 15.46 26 TR_DCC_Bayes_99 18994 6.50 22.44 1.16 27 T_TM2_M_HEADER_IN_MSG 18751 45.43 22.15 53.22 28 DCC_CHECK_NEGATIVE 18653 57.46 22.04 69.32 29 XM_Multi_Part_URI 18000 12.32 21.27 9.33 30 TR_XM_DK_Unsub 15319 10.84 18.10 8.41 31 RELAYCOUNTRY_META 13762 5.44 16.26 1.82 32 UNPARSEABLE_RELAY 13726 10.25 16.22 8.25 33 TR_MAX_INTL_RELAY 12731 6.87 15.04 4.14 34 XM_B_Unsub 12384 8.13 14.63 5.96 35 TR_XM_BayesUnsub 11989 7.09 14.16 4.72 36 XM_B_SpammyWords3 11927 6.37 14.09 3.79 37 TR_XM_SpammyRelay 10581 3.91 12.50 1.03 38 TR_XM_SpammyWords2 9276 3.05 10.96 0.40 39 BAYES_80 8010 4.13 9.46 2.35 40 BOTNET_IPINHOSTNAME 7868 4.06 9.30 2.30 41 BOTNET 7684 2.87 9.08 0.80 42 XM_Evil_Numbers_Gen 7420 36.23 8.77 45.42 43 LotsOfNums_01 7416 28.29 8.76 34.83 44 BAYES_60 7392 5.29 8.73 4.14 45 HTML_IMAGE_RATIO_02 7241 4.94 8.55 3.73 46 XM_B_Phish_Phrases 7211 4.33 8.52 2.93 47 FSL_BULK_SIG 7207 6.35 8.51 5.63 48 TR_XM_UnparsRelay 7171 2.92 8.47 1.07 49 LOTS_OF_MONEY 7130 4.53 8.42 3.22 50 XMSubMetaSx_00 6643 3.70 7.85 2.31 51 TR_XM_SpammyWords4 5910 3.47 6.98 2.29 52 XM_Body_Dirty_Words 5530 2.66 6.53 1.37 53 RCVD_IN_BL_SPAMCOP_NET 5270 1.82 6.23 0.35 54 TM2_M_VERY_LONG_WORD 5196 31.88 6.14 40.50 55 MPART_ALT_DIFF 4920 3.45 5.81 2.66 56 XM_UncommonTLD01 4855 3.96 5.74 3.37 57 XM_H_GMP 4630 4.57 5.47 4.27 58 UNTRUSTED_Relay 4624 2.21 5.46 1.13 59 XM_H_Long_From01 4495 3.90 5.31 3.43 60 BAYES_95 4458 2.67 5.27 1.79 61 HTML_IMAGE_RATIO_04 4399 3.88 5.20 3.44 62 T_XMDrugObfuBody_14 4270 2.46 5.04 1.59 63 RELAYCOUNTRY_CA 4212 1.70 4.98 0.61 64 XM_CamelCaseFrm001 4016 2.21 4.74 1.36 65 TR_XM_SpammyWords5 3940 1.88 4.65 0.95 66 HTML_IMAGE_RATIO_06 3932 30.79 4.65 39.54 67 TR_XM_SPAMCOP 3865 1.25 4.57 0.14 68 SpammyFromTLD_02 3770 1.18 4.45 0.09 69 XMSexyCombo_05 3528 1.72 4.17 0.90 70 MIME_HTML_MOSTLY 3499 2.15 4.13 1.48 71 ANY_BOUNCE_MESSAGE 3328 32.63 3.93 42.24 72 BOUNCE_MESSAGE 3328 32.63 3.93 42.24 73 XM_B_PhoneNumber 3208 3.84 3.79 3.85 74 TooManyTo_001 3160 3.59 3.73 3.54 75 TR_XM_PhishingBody 3138 1.78 3.71 1.14 76 XMNumbers 3101 2.83 3.66 2.56 77 RCVD_IN_VALIDITY_RPBL 3017 0.92 3.56 0.04 78 XM_B_Investor 2934 1.50 3.47 0.84 79 KHOP_HELO_FCRDNS 2886 15.91 3.41 20.09 80 MAY_BE_FORGED 2867 30.50 3.39 39.58 81 MIME_HTML_ONLY_MULTI 2780 2.05 3.28 1.64 82 DKIM_INVALID 2768 1.62 3.27 1.06 83 RELAYCOUNTRY_NL 2700 0.84 3.19 0.05 84 XMStrtUSub 2679 3.31 3.16 3.36 85 XM_SPF_SoftFail 2554 1.14 3.02 0.51 86 XM_URI_RBL 2532 1.07 2.99 0.43 87 XM_B_COPY_HTML 2529 1.48 2.99 0.97 88 SUBJ_ALL_CAPS 2490 1.15 2.94 0.55 89 MIME_CHARSET_FARAWAY 2447 1.05 2.89 0.43 90 RCVD_IN_MSPIKE_H3 2427 3.01 2.87 3.06 91 RCVD_IN_MSPIKE_WL 2427 3.01 2.87 3.06 92 DIET_1 2384 1.04 2.82 0.44 93 XM_UB50 2370 1.15 2.80 0.60 94 XMEqualsVooDoo_00 2299 0.75 2.72 0.09 95 CHARSET_FARAWAY_HEADER 2296 0.91 2.71 0.31 96 TM2_M_URI_OPT_OUT 2294 1.48 2.71 1.06 97 XM_B_SpammyTLD 2273 2.04 2.69 1.83 98 TR_XM_NoHeaderRelay 2159 0.70 2.55 0.09 99 T_XMDrugObfuBody_08 2118 1.26 2.50 0.84 100 T_XMHurry_00 2104 0.97 2.49 0.47 101 SH_BODYURI_REVERSE_CSS 2075 0.85 2.45 0.31 102 XM_OfRef6 2059 0.94 2.43 0.44 103 URIBL_CSS_A 2058 0.84 2.43 0.30 104 URIBL_CSS 2058 0.84 2.43 0.30 105 HTML_IMAGE_RATIO_08 2050 1.74 2.42 1.51 106 RCVD_IN_VALIDITY_SAFE 2050 4.00 2.42 4.53 107 XMClaimOffer 1880 0.81 2.22 0.33 108 FROM_EXCESS_BASE64 1876 1.80 2.22 1.67 109 XMEqualsVooDoo_01 1843 0.55 2.18 0.00 110 XMEqualsVooDoo_02 1839 0.54 2.17 0.00 111 XMEqualsVooDoo_03 1838 0.54 2.17 0.00 112 RELAYCOUNTRY_AU 1820 0.68 2.15 0.19 113 ALL_TRUSTED 1811 8.53 2.14 10.67 114 XM_B_URI_Unicode 1762 1.31 2.08 1.06 115 SpammyFromTLD_01 1727 0.81 2.04 0.39 116 RCVD_IN_VALIDITY_CERTIFIED 1716 3.20 2.03 3.59 117 USER_IN_DEF_DKIM_WL 1641 9.27 1.94 11.72 118 T_XMDrugObfuBody_00 1621 0.75 1.92 0.36 119 RCVD_IN_PSBL 1611 0.59 1.90 0.15 120 XM_B_Unsub2 1591 1.02 1.88 0.73 121 HTML_FONT_TINY_NORDNS 1588 0.49 1.88 0.03 122 XM_ProductURIs 1560 0.79 1.84 0.44 123 MAILING_LIST_MULTI 1551 1.37 1.83 1.21 124 MPART_ALT_DIFF_COUNT 1537 0.69 1.82 0.32 125 URI_HEX 1527 1.05 1.80 0.79 126 XMBrknScrpt_02 1522 1.10 1.80 0.87 127 XMBody_17 1516 0.70 1.79 0.33 128 XM_B_DNDMA 1511 0.69 1.79 0.33 129 SHOPIFY_IMG_NOT_RCVD_SFY 1506 0.67 1.78 0.30 130 XM_B_SpammyWords4 1502 0.78 1.77 0.44 131 XMDiploma_00 1488 1.01 1.76 0.77 132 T_TooManySym_01 1447 4.37 1.71 5.26 133 XMStockSpam_06 1414 1.27 1.67 1.14 134 LONG_JUNK_URI 1408 0.43 1.66 0.01 135 XMPhish30 1309 0.75 1.55 0.48 136 BAYES_40 1273 8.01 1.50 10.19 137 TR_XM_PHPDW 1258 0.46 1.49 0.11 138 TR_XM_PHPForged 1258 0.45 1.49 0.11 139 TR_XM_FormFill2 1246 0.46 1.47 0.12 140 HTML_TAG_BALANCE_BODY 1239 0.88 1.46 0.69 141 MIME_QP_LONG_LINE 1229 1.65 1.45 1.72 142 XM_H_PHPOS 1221 0.44 1.44 0.10 143 T_FILL_THIS_FORM_SHORT 1211 0.61 1.43 0.34 144 XM_HighProb1 1209 0.37 1.43 0.01 145 TR_XM_SpoofStaff 1179 0.48 1.39 0.18 146 XM_B_REG_HTML 1163 0.45 1.37 0.14 147 XM_DK_Undo_01 1155 1.05 1.36 0.95 148 XM_H_SpoofStaff4 1152 0.47 1.36 0.17 149 XMSpoofStaff2 1150 0.43 1.36 0.12 150 TR_XM_PSC1 1148 0.43 1.36 0.12 151 BOTNET_NORDNS 1143 0.35 1.35 0.01 152 RCVD_IN_PBL 1125 0.57 1.33 0.32 153 XMReplyNow 1122 0.44 1.33 0.14 154 TR_XM_SpoofStaff4 1101 0.41 1.30 0.11 155 TR_Symld_Words 1099 0.94 1.30 0.83 156 XMSolicitRefs_0 1085 0.53 1.28 0.28 157 TR_XM_SpoofStaff2 1083 0.32 1.28 0.00 158 URI_NOVOWEL 1066 1.12 1.26 1.07 159 DKIM_ADSP_CUSTOM_MED 1064 0.77 1.26 0.61 160 XMSexyCombo_01 1048 0.38 1.24 0.09 161 T_REMOTE_IMAGE 1048 1.62 1.24 1.74 162 BAYES_20 993 2.88 1.17 3.45 163 TR_Mismatch_TLD_01 981 0.37 1.16 0.11 164 XMSubMetaI_00 970 0.65 1.15 0.49 165 HTML_MIME_NO_HTML_TAG 961 1.21 1.14 1.24 166 XMBdyGiftCard01 953 1.02 1.13 0.99 167 T_STY_INVIS_DIRECT 953 0.60 1.13 0.42 168 HTML_TEXT_INVISIBLE_STYLE 921 0.55 1.09 0.37 169 NML_ADSP_CUSTOM_MED 914 0.60 1.08 0.44 170 BAYES_00 897 4.78 1.06 6.02 171 MultiRelay_CC 887 0.29 1.05 0.03 172 TM2_M_OBFU_COMMENT 883 0.57 1.04 0.42 173 FORGED_GMAIL_RCVD 880 0.58 1.04 0.42 174 LongTLD 876 0.34 1.03 0.11 175 XMSubMetaSSx_00 876 0.33 1.03 0.09 176 THIS_AD 841 0.42 0.99 0.22 177 TR_XM_DK_Bayes 831 3.62 0.98 4.50 178 TR_XM_DK_Bayes1 830 3.58 0.98 4.45 179 XMUrgent 829 0.27 0.98 0.04 180 XM_H_PHPMailer 811 0.62 0.96 0.50 181 TR_MetaPhish_Combo_01 809 0.56 0.96 0.43 182 DKIM_ADSP_NXDOMAIN 802 0.49 0.95 0.33 183 PLING_QUERY 799 0.44 0.94 0.27 184 XM_SendGrid 794 0.79 0.94 0.74 185 XM_DIRTYINTL 789 0.27 0.93 0.05 186 XM_UB99 774 0.23 0.91 0.00 187 HTML_FONT_FACE_BAD 767 0.45 0.91 0.30 188 TM2_M_A_HREF_HREF 767 0.30 0.91 0.10 189 XM_GoogleGroups 766 0.69 0.90 0.62 190 TR_XM_INV_DKIM 765 0.34 0.90 0.16 191 URI_TRY_3LD 759 0.54 0.90 0.43 192 RCVD_IN_XBL 744 0.23 0.88 0.01 193 XMSlimDrugH 739 0.58 0.87 0.49 194 XM_B_Phish66 722 0.40 0.85 0.25 195 XMGenDplmaNmb 719 0.47 0.85 0.34 196 XM_RXBody 709 0.33 0.84 0.16 197 RDNS_DYNAMIC 708 0.32 0.84 0.15 198 TR_XM_DK_Bayes2 689 3.13 0.81 3.90 199 SUBJ_DOLLARS 686 0.38 0.81 0.24 200 PDS_RDNS_DYNAMIC_FP 668 0.22 0.79 0.03 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 227716 91.20 94.63 90.05 2 RELAYCOUNTRY_US 221074 87.00 85.72 87.42 3 XM_B_Unicode 211298 84.25 86.32 83.56 4 DCC_CHECK_NEGATIVE 175283 57.46 22.04 69.32 5 BAYES_50 172218 61.34 41.12 68.10 6 XM_B_SpammyWords 169085 67.77 70.48 66.87 7 LOC_TINY_FONT_1 148813 56.53 49.61 58.85 8 HTML_FONT_LOW_CONTRAST 147300 52.90 36.92 58.25 9 T_TM2_M_HEADER_IN_MSG 134587 45.43 22.15 53.22 10 DKIM_SIGNED 116473 56.42 87.37 46.06 11 XM_Evil_Numbers_Gen 114852 36.23 8.77 45.42 12 XM_DK_Pass 114653 55.21 84.69 45.34 13 DKIM_VALID 113789 54.80 84.10 45.00 14 ANY_BOUNCE_MESSAGE 106813 32.63 3.93 42.24 15 BOUNCE_MESSAGE 106812 32.63 3.93 42.24 16 TM2_M_VERY_LONG_WORD 102417 31.88 6.14 40.50 17 MAY_BE_FORGED 100078 30.50 3.39 39.58 18 HTML_IMAGE_RATIO_06 99981 30.79 4.65 39.54 19 DKIM_VALID_AU 98127 46.86 70.92 38.80 20 LotsOfNums_01 88068 28.29 8.76 34.83 21 XMListUnsubscribeExists 84131 42.28 69.19 33.27 22 DCC_CHECK 77550 42.42 77.52 30.67 23 XM_B_Unicode3 75975 36.92 57.44 30.04 24 RCVD_IN_MSPIKE_H2 58365 27.46 40.53 23.08 25 KHOP_HELO_FCRDNS 50811 15.91 3.41 20.09 26 FVGT_m_MULTI_ODD 43738 20.94 31.84 17.30 27 DKIM_VALID_EF 42273 19.36 27.26 16.72 28 XMSubLong 39103 17.32 22.86 15.46 29 XM_B_SpammyWords2 36165 20.88 40.53 14.30 30 MIME_HTML_ONLY 31987 15.58 24.33 12.65 31 T_KAM_HTML_FONT_INVALID 30318 16.50 29.98 11.99 32 USER_IN_DEF_DKIM_WL 29634 9.27 1.94 11.72 33 ALL_TRUSTED 26994 8.53 2.14 10.67 34 BAYES_40 25764 8.01 1.50 10.19 35 XM_Multi_Part_URI 23599 12.32 21.27 9.33 36 TR_XM_DK_Unsub 21273 10.84 18.10 8.41 37 UNPARSEABLE_RELAY 20862 10.25 16.22 8.25 38 BAYES_00 15232 4.78 1.06 6.02 39 XM_B_Unsub 15071 8.13 14.63 5.96 40 FSL_BULK_SIG 14242 6.35 8.51 5.63 41 XM_DKIMWhitelistDomains 13729 4.08 0.04 5.43 42 T_TooManySym_01 13306 4.37 1.71 5.26 43 TR_XM_BayesUnsub 11935 7.09 14.16 4.72 44 RCVD_IN_VALIDITY_SAFE 11446 4.00 2.42 4.53 45 TR_XM_DK_Bayes 11380 3.62 0.98 4.50 46 TR_XM_DK_Bayes1 11257 3.58 0.98 4.45 47 XM_H_GMP 10800 4.57 5.47 4.27 48 TR_MAX_INTL_RELAY 10473 6.87 15.04 4.14 49 BAYES_60 10460 5.29 8.73 4.14 50 TR_XM_DK_Bayes2 9866 3.13 0.81 3.90 51 XM_B_PhoneNumber 9737 3.84 3.79 3.85 52 XM_B_SpammyWords3 9575 6.37 14.09 3.79 53 HTML_IMAGE_RATIO_02 9432 4.94 8.55 3.73 54 RCVD_IN_VALIDITY_CERTIFIED 9073 3.20 2.03 3.59 55 TooManyTo_001 8941 3.59 3.73 3.54 56 BAYES_20 8731 2.88 1.17 3.45 57 HTML_IMAGE_RATIO_04 8711 3.88 5.20 3.44 58 XM_H_Long_From01 8673 3.90 5.31 3.43 59 XM_UncommonTLD01 8515 3.96 5.74 3.37 60 XMStrtUSub 8499 3.31 3.16 3.36 61 XM_DK_Undo_02 8366 11.75 36.96 3.31 62 LOTS_OF_MONEY 8152 4.53 8.42 3.22 63 IN_ZIMBRA_NJ_WHITELIST 7905 2.37 0.11 3.13 64 RCVD_IN_MSPIKE_WL 7730 3.01 2.87 3.06 65 RCVD_IN_MSPIKE_H3 7730 3.01 2.87 3.06 66 T_TooManySym_02 7614 2.37 0.45 3.01 67 XM_B_Phish_Phrases 7416 4.33 8.52 2.93 68 MPART_ALT_DIFF 6728 3.45 5.81 2.66 69 BAYES_99 6614 9.61 30.50 2.62 70 INVALID_MSGID 6562 2.04 0.38 2.59 71 XMNumbers 6463 2.83 3.66 2.56 72 TO_MALFORMED 6291 1.91 0.17 2.49 73 BAYES_80 5933 4.13 9.46 2.35 74 XMSubMetaSx_00 5850 3.70 7.85 2.31 75 BOTNET_IPINHOSTNAME 5820 4.06 9.30 2.30 76 TR_XM_SpammyWords4 5798 3.47 6.98 2.29 77 BAYES_999 5196 7.32 23.05 2.05 78 XM_B_SpammyTLD 4622 2.04 2.69 1.83 79 RELAYCOUNTRY_META 4592 5.44 16.26 1.82 80 BAYES_95 4537 2.67 5.27 1.79 81 T_REMOTE_IMAGE 4406 1.62 1.24 1.74 82 MIME_QP_LONG_LINE 4345 1.65 1.45 1.72 83 FROM_EXCESS_BASE64 4214 1.80 2.22 1.67 84 MIME_HTML_ONLY_MULTI 4137 2.05 3.28 1.64 85 T_XMDrugObfuBody_14 4021 2.46 5.04 1.59 86 TR_XM_DKIM_Undo 3900 7.90 26.91 1.54 87 HTML_IMAGE_RATIO_08 3831 1.74 2.42 1.51 88 MIME_HTML_MOSTLY 3751 2.15 4.13 1.48 89 TooManyTo_002 3553 1.16 0.44 1.41 90 XM_Body_Dirty_Words 3452 2.66 6.53 1.37 91 XM_CamelCaseFrm001 3430 2.21 4.74 1.36 92 BAYES_05 3382 1.19 0.75 1.34 93 RCVD_IN_IADB_LISTED 3301 1.11 0.52 1.31 94 T_TooManySym_03 3162 0.97 0.15 1.25 95 HTML_MIME_NO_HTML_TAG 3130 1.21 1.14 1.24 96 MAILING_LIST_MULTI 3065 1.37 1.83 1.21 97 XM_PDF 3048 0.99 0.33 1.21 98 IN_HORDE_ADDRESS_BOOK 3041 0.92 0.09 1.20 99 RCVD_IN_IADB_SPF 2971 1.00 0.48 1.17 100 TR_DCC_Bayes_99 2945 6.50 22.44 1.16 101 XMStockSpam_06 2884 1.27 1.67 1.14 102 TR_XM_PhishingBody 2872 1.78 3.71 1.14 103 UNTRUSTED_Relay 2845 2.21 5.46 1.13 104 URI_NOVOWEL 2699 1.12 1.26 1.07 105 TR_XM_UnparsRelay 2696 2.92 8.47 1.07 106 TM2_M_URI_OPT_OUT 2687 1.48 2.71 1.06 107 DKIM_INVALID 2684 1.62 3.27 1.06 108 RCVD_IN_IADB_SENDERID 2679 0.91 0.46 1.06 109 XM_B_URI_Unicode 2670 1.31 2.08 1.06 110 RCVD_IN_IADB_DK 2651 0.90 0.47 1.05 111 TVD_SPACE_RATIO 2645 0.83 0.17 1.05 112 TR_XM_SpammyRelay 2601 3.91 12.50 1.03 113 XMBdyGiftCard01 2496 1.02 1.13 0.99 114 XM_B_COPY_HTML 2457 1.48 2.99 0.97 115 TR_XM_SpammyWords5 2406 1.88 4.65 0.95 116 XM_DK_Undo_01 2399 1.05 1.36 0.95 117 XMSexyCombo_05 2271 1.72 4.17 0.90 118 XMBrknScrpt_02 2200 1.10 1.80 0.87 119 RCVD_IN_IADB_VOUCHED 2199 0.70 0.20 0.87 120 XMGappySubj_01 2172 0.70 0.24 0.86 121 XM_B_Investor 2135 1.50 3.47 0.84 122 T_XMDrugObfuBody_08 2127 1.26 2.50 0.84 123 TR_Symld_Words 2087 0.94 1.30 0.83 124 BOTNET 2011 2.87 9.08 0.80 125 URI_HEX 2007 1.05 1.80 0.79 126 XMDiploma_00 1937 1.01 1.76 0.77 127 XM_SendGrid 1876 0.79 0.94 0.74 128 TVD_RCVD_IP 1875 0.73 0.69 0.74 129 XM_B_Unsub2 1841 1.02 1.88 0.73 130 TR_XM_Base64_M1 1790 0.73 0.79 0.71 131 HTML_TAG_BALANCE_BODY 1744 0.88 1.46 0.69 132 XMGappySubj_02 1698 0.51 0.03 0.67 133 RCVD_IN_IADB_OPTIN 1600 0.50 0.12 0.63 134 XM_GoogleGroups 1572 0.69 0.90 0.62 135 DKIM_ADSP_CUSTOM_MED 1536 0.77 1.26 0.61 136 RELAYCOUNTRY_CA 1535 1.70 4.98 0.61 137 TooManyTo_003 1534 0.55 0.40 0.61 138 XM_UB50 1514 1.15 2.80 0.60 139 HELO_MISC_IP 1462 0.45 0.08 0.58 140 XM_B_FormFill 1428 0.43 0.01 0.56 141 XMBSHREFv2 1420 0.49 0.26 0.56 142 XMBody_95 1393 0.44 0.12 0.55 143 SUBJ_ALL_CAPS 1391 1.15 2.94 0.55 144 TR_XM_DK_SendGrid 1318 0.54 0.60 0.52 145 XM_SPF_SoftFail 1282 1.14 3.02 0.51 146 XM_H_PHPMailer 1269 0.62 0.96 0.50 147 XMSubMetaI_00 1240 0.65 1.15 0.49 148 XMSlimDrugH 1231 0.58 0.87 0.49 149 XMPhish30 1213 0.75 1.55 0.48 150 T_XMHurry_00 1181 0.97 2.49 0.47 151 XM_H_Long_From02 1134 0.48 0.58 0.45 152 DIET_1 1125 1.04 2.82 0.44 153 XM_OfRef6 1125 0.94 2.43 0.44 154 XM_B_SpammyWords4 1121 0.78 1.77 0.44 155 USER_IN_WHITELIST 1120 0.33 0.00 0.44 156 USER_IN_WELCOMELIST 1120 0.33 0.00 0.44 157 TooManyTo_004 1110 0.42 0.35 0.44 158 NML_ADSP_CUSTOM_MED 1108 0.60 1.08 0.44 159 XM_ProductURIs 1106 0.79 1.84 0.44 160 MIME_CHARSET_FARAWAY 1093 1.05 2.89 0.43 161 TR_MetaPhish_Combo_01 1090 0.56 0.96 0.43 162 XM_URI_RBL 1082 1.07 2.99 0.43 163 URI_TRY_3LD 1077 0.54 0.90 0.43 164 T_TVD_MIME_NO_HEADERS 1065 0.33 0.04 0.42 165 FORGED_GMAIL_RCVD 1064 0.58 1.04 0.42 166 T_STY_INVIS_DIRECT 1061 0.60 1.13 0.42 167 TM2_M_OBFU_COMMENT 1054 0.57 1.04 0.42 168 TR_XM_SpammyWords2 1007 3.05 10.96 0.40 169 MSGID_FROM_MTA_HEADER 993 0.32 0.09 0.39 170 SpammyFromTLD_01 991 0.81 2.04 0.39 171 TooManyTo_005 968 0.37 0.32 0.38 172 HTML_TAG_BALANCE_CENTER 966 0.41 0.50 0.38 173 T_TooManySym_04 952 0.29 0.04 0.38 174 XMSubNoVowel 935 0.38 0.39 0.37 175 HTML_TEXT_INVISIBLE_STYLE 934 0.55 1.09 0.37 176 T_XMDrugObfuBody_00 922 0.75 1.92 0.36 177 RCVD_IN_BL_SPAMCOP_NET 883 1.82 6.23 0.35 178 XMLngstWrd_00 881 0.37 0.44 0.35 179 XMGenDplmaNmb 866 0.47 0.85 0.34 180 T_FILL_THIS_FORM_SHORT 861 0.61 1.43 0.34 181 DKIM_ADSP_NXDOMAIN 845 0.49 0.95 0.33 182 XMBody_17 845 0.70 1.79 0.33 183 XMClaimOffer 841 0.81 2.22 0.33 184 XM_B_DNDMA 823 0.69 1.79 0.33 185 XMNoVowels 816 0.37 0.49 0.32 186 RCVD_IN_PBL 815 0.57 1.33 0.32 187 MPART_ALT_DIFF_COUNT 799 0.69 1.82 0.32 188 SH_BODYURI_REVERSE_CSS 778 0.85 2.45 0.31 189 CHARSET_FARAWAY_HEADER 773 0.91 2.71 0.31 190 URIBL_CSS_A 765 0.84 2.43 0.30 191 URIBL_CSS 765 0.84 2.43 0.30 192 SHOPIFY_IMG_NOT_RCVD_SFY 764 0.67 1.78 0.30 193 XM_S_SubURI 760 0.24 0.06 0.30 194 NO_DNS_FOR_FROM 754 0.39 0.68 0.30 195 HTML_FONT_FACE_BAD 751 0.45 0.91 0.30 196 XMSolicitRefs_0 720 0.53 1.28 0.28 197 XM_ShortIntro_01 714 0.31 0.39 0.28 198 NUMERIC_HTTP_ADDR 713 0.24 0.10 0.28 199 HTML_EXTRA_CLOSE 705 0.21 0.02 0.28 200 XMWrdNumbWrd 691 0.22 0.04 0.27 ----------------------------------------------------------------------