Email: 328786 Autolearn: 0 AvgScore: 5.15 AvgScanTime: 1.32 sec Spam: 113149 Autolearn: 0 AvgScore: 13.83 AvgScanTime: 1.37 sec Ham: 215637 Autolearn: 0 AvgScore: 0.59 AvgScanTime: 1.30 sec Time Spent Running SA: 120.93 hours Time Spent Processing Spam: 42.93 hours Time Spent Processing Ham: 78.00 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 100588 86.77 88.90 85.65 2 DKIM_SIGNED 100410 79.94 88.74 75.32 3 XM_DK_Pass 96595 77.96 85.37 74.08 4 DKIM_VALID 96068 77.38 84.90 73.44 5 XM_B_Unicode 95763 77.38 84.63 73.58 6 RELAYCOUNTRY_US 91536 82.37 80.90 83.15 7 DCC_CHECK 89976 57.73 79.52 46.30 8 XM_B_SpammyWords 78910 54.03 69.74 45.78 9 XMListUnsubscribeExists 73926 58.13 65.34 54.35 10 DKIM_VALID_AU 71090 61.59 62.83 60.94 11 XM_B_Unicode3 55232 47.12 48.81 46.23 12 LOC_TINY_FONT_1 52829 38.12 46.69 33.62 13 BAYES_50 46752 55.02 41.32 62.21 14 T_SCC_BODY_TEXT_LINE 45606 41.66 40.31 42.37 15 XM_DK_Undo_02 45500 18.00 40.21 6.34 16 XM_B_SpammyWords2 41393 24.64 36.58 18.38 17 HTML_FONT_LOW_CONTRAST 41044 35.58 36.27 35.21 18 DKIM_VALID_EF 37649 30.86 33.27 29.59 19 TR_XM_DKIM_Undo 33831 12.48 29.90 3.34 20 BAYES_99 33624 13.48 29.72 4.96 21 FVGT_m_MULTI_ODD 33522 28.85 29.63 28.44 22 T_KAM_HTML_FONT_INVALID 32398 24.30 28.63 22.03 23 MIME_HTML_ONLY 29649 22.35 26.20 20.32 24 BAYES_999 25792 10.40 22.79 3.90 25 TR_DCC_Bayes_99 25039 9.04 22.13 2.18 26 XM_Multi_Part_URI 24829 18.11 21.94 16.10 27 XMSubLong 23640 21.96 20.89 22.51 28 DCC_CHECK_NEGATIVE 22584 42.08 19.96 53.68 29 TR_XM_DK_Unsub 22202 17.38 19.62 16.20 30 RELAYCOUNTRY_META 21670 9.42 19.15 4.32 31 T_TM2_M_HEADER_IN_MSG 20499 23.94 18.12 27.00 32 UNPARSEABLE_RELAY 19876 15.72 17.57 14.75 33 FSL_BULK_SIG 18691 11.18 16.52 8.38 34 XM_B_Unsub 18114 11.94 16.01 9.81 35 TR_MAX_INTL_RELAY 17586 9.74 15.54 6.69 36 TR_XM_BayesUnsub 17555 9.92 15.51 6.98 37 LOTS_OF_MONEY 16620 9.22 14.69 6.35 38 RCVD_IN_MSPIKE_H2 15761 13.34 13.93 13.04 39 TR_XM_SpammyWords4 15264 7.76 13.49 4.75 40 TR_XM_SpammyRelay 15075 6.11 13.32 2.33 41 XM_B_SpammyWords3 14596 7.73 12.90 5.01 42 BOTNET_IPINHOSTNAME 14402 6.42 12.73 3.11 43 XM_UncommonTLD01 13177 7.31 11.65 5.04 44 TR_XM_SpammyWords2 11767 4.13 10.40 0.83 45 BOTNET 11764 4.38 10.40 1.23 46 XMStrtUSub 11433 7.14 10.10 5.58 47 TR_XM_UnparsRelay 11198 4.98 9.90 2.40 48 BAYES_80 11119 6.03 9.83 4.04 49 RCVD_IN_BL_SPAMCOP_NET 11039 3.92 9.76 0.85 50 BAYES_60 10596 8.02 9.36 7.31 51 XM_Evil_Numbers_Gen 9688 10.50 8.56 11.51 52 UNTRUSTED_Relay 8876 3.95 7.84 1.91 53 HTML_IMAGE_RATIO_02 8376 5.92 7.40 5.14 54 XM_SendGrid 8052 3.67 7.12 1.86 55 TR_Mismatch_TLD_02 8043 2.70 7.11 0.39 56 XM_B_Phish_Phrases 7806 4.99 6.90 3.98 57 RCVD_IN_MSPIKE_WL 7713 10.48 6.82 12.40 58 RELAYCOUNTRY_CA 7621 3.20 6.74 1.34 59 XM_Body_Dirty_Words 7350 3.87 6.50 2.49 60 LotsOfNums_01 7204 10.07 6.37 12.02 61 MPART_ALT_DIFF 6860 5.05 6.06 4.52 62 HTML_IMAGE_RATIO_04 6456 5.12 5.71 4.81 63 XM_H_Long_From01 6421 5.18 5.67 4.92 64 XM_H_GMP 6212 5.70 5.49 5.80 65 RDNS_DYNAMIC 6023 1.97 5.32 0.21 66 BAYES_95 5927 3.54 5.24 2.65 67 XMSubMetaSx_00 5507 4.44 4.87 4.21 68 TooManyTo_001 5397 5.91 4.77 6.52 69 RCVD_IN_VALIDITY_RPBL 5389 1.67 4.76 0.05 70 XM_B_PhoneNumber 5032 6.34 4.45 7.33 71 RCVD_IN_MSPIKE_BL 4987 1.81 4.41 0.45 72 TR_XM_MSPIKECOMBO 4980 1.81 4.40 0.45 73 XM_B_SpammyTLD 4674 3.31 4.13 2.88 74 TM2_M_VERY_LONG_WORD 4605 5.63 4.07 6.45 75 TR_XM_PhishingBody 4596 2.49 4.06 1.67 76 MIME_HTML_MOSTLY 4500 3.07 3.98 2.59 77 RCVD_IN_MSPIKE_H3 4427 4.87 3.91 5.37 78 XM_SPF_SoftFail 4364 1.97 3.86 0.98 79 DKIM_INVALID 4342 2.56 3.84 1.88 80 TR_XM_NoHeaderRelay 4330 1.41 3.83 0.15 81 XM_OfRef6 4298 1.85 3.80 0.83 82 XM_UB50 4163 2.02 3.68 1.15 83 XM_B_Investor 4018 2.04 3.55 1.25 84 TR_XM_SpammyWords5 3924 2.12 3.47 1.41 85 XMSexyCombo_05 3922 2.41 3.47 1.86 86 T_XMDrugObfuBody_14 3819 2.31 3.38 1.75 87 TM2_M_URI_OPT_OUT 3737 2.27 3.30 1.73 88 XMNumbers 3658 4.27 3.23 4.81 89 T_XMHurry_00 3645 1.73 3.22 0.94 90 XM_CamelCaseFrm001 3644 2.42 3.22 1.99 91 PDS_RDNS_DYNAMIC_FP 3535 1.10 3.12 0.03 92 T_FILL_THIS_FORM_SHORT 3533 1.51 3.12 0.67 93 MIME_QP_LONG_LINE 3507 3.41 3.10 3.57 94 XMBody_17 3470 1.47 3.07 0.63 95 HTML_IMAGE_RATIO_06 3449 3.07 3.05 3.08 96 TR_XM_SPAMCOP 3384 1.20 2.99 0.26 97 XMSubMetaI_00 3290 1.94 2.91 1.43 98 RCVD_IN_VALIDITY_SAFE 3268 4.61 2.89 5.52 99 TR_XM_SpammyWords3 3242 1.12 2.87 0.20 100 SUBJ_ALL_CAPS 3221 2.06 2.85 1.64 101 FROM_EXCESS_BASE64 3215 2.70 2.84 2.62 102 MIME_HTML_ONLY_MULTI 3100 2.55 2.74 2.45 103 RELAYCOUNTRY_AU 2921 1.33 2.58 0.67 104 XM_URI_RBL 2784 1.09 2.46 0.37 105 XM_B_URI_Unicode 2740 1.89 2.42 1.61 106 HTML_IMAGE_RATIO_08 2719 2.05 2.40 1.86 107 MultiRelay_CC 2658 0.94 2.35 0.20 108 ALL_TRUSTED 2648 9.42 2.34 13.13 109 SpammyFromTLD_02 2586 0.95 2.29 0.26 110 RCVD_IN_MSPIKE_H5 2563 4.52 2.27 5.70 111 BOUNCE_MESSAGE 2542 6.66 2.25 8.97 112 ANY_BOUNCE_MESSAGE 2542 6.66 2.25 8.97 113 XM_B_Unsub2 2501 1.47 2.21 1.08 114 USER_IN_DEF_DKIM_WL 2477 10.94 2.19 15.54 115 XMDiploma_00 2446 1.67 2.16 1.41 116 RCVD_IN_VALIDITY_CERTIFIED 2354 3.60 2.08 4.40 117 DKIM_ADSP_NXDOMAIN 2348 1.04 2.08 0.50 118 XMStockSpam_06 2305 1.78 2.04 1.65 119 MAILING_LIST_MULTI 2223 2.43 1.96 2.67 120 RCVD_IN_MSPIKE_L5 2199 0.67 1.94 0.01 121 RCVD_IN_PSBL 2140 0.95 1.89 0.46 122 THIS_AD 2084 1.03 1.84 0.61 123 KHOP_HELO_FCRDNS 2069 2.90 1.83 3.47 124 XMBrknScrpt_02 2061 1.44 1.82 1.24 125 T_TooManySym_01 1998 5.15 1.77 6.93 126 XM_B_SpammyWords4 1905 1.09 1.68 0.79 127 TR_XM_InvalidRelay 1892 0.58 1.67 0.01 128 T_XMDrugObfuBody_08 1886 1.22 1.67 0.99 129 SHOPIFY_IMG_NOT_RCVD_SFY 1885 0.98 1.67 0.61 130 DKIM_ADSP_CUSTOM_MED 1879 1.11 1.66 0.81 131 TR_XM_RelayPhish 1858 0.62 1.64 0.08 132 SpammyFromTLD_01 1857 0.91 1.64 0.52 133 BOTNET_NORDNS 1841 0.57 1.63 0.01 134 XM_H_Long_From02 1840 1.03 1.63 0.71 135 XM_B_COPY_HTML 1799 1.18 1.59 0.97 136 TR_XM_INV_DKIM 1793 0.69 1.58 0.22 137 T_REMOTE_IMAGE 1765 2.30 1.56 2.69 138 HTML_TAG_BALANCE_BODY 1729 0.92 1.53 0.60 139 TR_XM_Base64_M1 1723 1.00 1.52 0.72 140 FORGED_GMAIL_RCVD 1661 0.86 1.47 0.54 141 NML_ADSP_CUSTOM_MED 1648 0.81 1.46 0.47 142 BAYES_40 1639 4.05 1.45 5.41 143 RCVD_IN_PBL 1635 0.88 1.44 0.59 144 URI_NOVOWEL 1622 1.76 1.43 1.94 145 XM_DIRTYINTL 1603 0.53 1.42 0.07 146 HTML_MIME_NO_HTML_TAG 1600 1.82 1.41 2.03 147 DIET_1 1593 0.87 1.41 0.58 148 RCVD_IN_MSPIKE_L4 1548 0.47 1.37 0.00 149 URI_HEX 1543 1.23 1.36 1.17 150 XM_DK_Undo_01 1511 1.37 1.34 1.39 151 TR_LOTS_OF_MONEY3 1501 0.61 1.33 0.24 152 XM_UB99 1449 0.44 1.28 0.01 153 XMPhish30 1433 0.87 1.27 0.66 154 XM_ProductURIs 1431 1.31 1.26 1.34 155 XMReplyNow 1427 0.56 1.26 0.19 156 XM_OfRef7 1389 0.59 1.23 0.25 157 XM_UB60 1381 0.47 1.22 0.07 158 MPART_ALT_DIFF_COUNT 1371 0.79 1.21 0.56 159 TVD_RCVD_IP 1342 1.01 1.19 0.91 160 T_XMDrugObfuBody_00 1334 0.80 1.18 0.60 161 XM_B_DNDMA 1309 0.78 1.16 0.58 162 XM_B_SEO 1295 0.58 1.14 0.28 163 XMGenDplmaNmb 1284 0.92 1.13 0.81 164 RCVD_IN_SBL 1283 0.39 1.13 0.00 165 XMBounce_01 1251 0.39 1.11 0.02 166 RCVD_IN_MSPIKE_L3 1233 0.67 1.09 0.44 167 TR_MetaPhish_Combo_01 1228 0.77 1.09 0.61 168 MIME_CHARSET_FARAWAY 1221 2.37 1.08 3.05 169 BAYES_20 1194 2.49 1.06 3.24 170 TR_XM_PHPForged 1190 0.64 1.05 0.42 171 RCVD_IN_XBL 1187 0.37 1.05 0.02 172 XM_HighProb1 1184 0.37 1.05 0.01 173 XMClaimOffer 1174 0.56 1.04 0.31 174 HELO_DYNAMIC_SPLIT_IP 1171 0.36 1.03 0.01 175 TR_XM_PHPDW 1169 0.63 1.03 0.42 176 TR_XM_SEO4 1156 0.42 1.02 0.10 177 TR_XM_FormFill2 1151 0.62 1.02 0.41 178 XM_H_PHPOS 1127 0.60 1.00 0.39 179 XMSexyCombo_01 1110 0.46 0.98 0.19 180 RELAYCOUNTRY_IN 1096 0.36 0.97 0.04 181 HTTPS_HTTP_MISMATCH 1088 0.63 0.96 0.46 182 RELAYCOUNTRY_JP 1079 0.35 0.95 0.03 183 RELAYCOUNTRY_TH 1068 0.33 0.94 0.01 184 XMBdyGiftCard01 1064 1.31 0.94 1.51 185 RELAYCOUNTRY_DE 1061 0.57 0.94 0.38 186 TR_Symld_Words 1054 1.06 0.93 1.12 187 HTML_FONT_TINY_NORDNS 1050 0.34 0.93 0.03 188 XPRIO 1048 0.32 0.93 0.00 189 XM_UB80 1045 0.33 0.92 0.02 190 TR_XM_FormFill 1038 0.33 0.92 0.02 191 T_Symld_Words_02 1031 0.58 0.91 0.41 192 XMGappySubj_01 1014 1.14 0.90 1.26 193 RCVD_IN_SBL_CSS 1013 0.32 0.90 0.02 194 URI_TRY_3LD 1002 0.67 0.89 0.55 195 RCVD_IN_IADB_LISTED 1002 2.27 0.89 3.00 196 RELAYCOUNTRY_CN 987 0.38 0.87 0.12 197 XM_B_REG_HTML 981 0.46 0.87 0.24 198 HTML_IMAGE_ONLY_20 963 0.50 0.85 0.32 199 RCVD_IN_IADB_SPF 961 2.05 0.85 2.68 200 FONT_INVIS_LONG_LINE 959 0.34 0.85 0.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 184702 86.77 88.90 85.65 2 RELAYCOUNTRY_US 179293 82.37 80.90 83.15 3 DKIM_SIGNED 162420 79.94 88.74 75.32 4 XM_DK_Pass 159734 77.96 85.37 74.08 5 XM_B_Unicode 158667 77.38 84.63 73.58 6 DKIM_VALID 158356 77.38 84.90 73.44 7 BAYES_50 134157 55.02 41.32 62.21 8 DKIM_VALID_AU 131409 61.59 62.83 60.94 9 XMListUnsubscribeExists 117189 58.13 65.34 54.35 10 DCC_CHECK_NEGATIVE 115756 42.08 19.96 53.68 11 DCC_CHECK 99830 57.73 79.52 46.30 12 XM_B_Unicode3 99686 47.12 48.81 46.23 13 XM_B_SpammyWords 98718 54.03 69.74 45.78 14 T_SCC_BODY_TEXT_LINE 91364 41.66 40.31 42.37 15 HTML_FONT_LOW_CONTRAST 75929 35.58 36.27 35.21 16 LOC_TINY_FONT_1 72497 38.12 46.69 33.62 17 DKIM_VALID_EF 63800 30.86 33.27 29.59 18 FVGT_m_MULTI_ODD 61326 28.85 29.63 28.44 19 T_TM2_M_HEADER_IN_MSG 58220 23.94 18.12 27.00 20 XMSubLong 48547 21.96 20.89 22.51 21 T_KAM_HTML_FONT_INVALID 47497 24.30 28.63 22.03 22 MIME_HTML_ONLY 43821 22.35 26.20 20.32 23 XM_B_SpammyWords2 39633 24.64 36.58 18.38 24 TR_XM_DK_Unsub 34942 17.38 19.62 16.20 25 XM_Multi_Part_URI 34717 18.11 21.94 16.10 26 USER_IN_DEF_DKIM_WL 33500 10.94 2.19 15.54 27 UNPARSEABLE_RELAY 31815 15.72 17.57 14.75 28 ALL_TRUSTED 28322 9.42 2.34 13.13 29 RCVD_IN_MSPIKE_H2 28113 13.34 13.93 13.04 30 RCVD_IN_MSPIKE_WL 26748 10.48 6.82 12.40 31 LotsOfNums_01 25915 10.07 6.37 12.02 32 XM_Evil_Numbers_Gen 24830 10.50 8.56 11.51 33 XM_B_Unsub 21155 11.94 16.01 9.81 34 ANY_BOUNCE_MESSAGE 19351 6.66 2.25 8.97 35 BOUNCE_MESSAGE 19344 6.66 2.25 8.97 36 BAYES_00 18249 5.82 0.79 8.46 37 FSL_BULK_SIG 18080 11.18 16.52 8.38 38 XM_DKIMWhitelistDomains 16286 5.03 0.21 7.55 39 XM_B_PhoneNumber 15813 6.34 4.45 7.33 40 BAYES_60 15769 8.02 9.36 7.31 41 TR_XM_BayesUnsub 15062 9.92 15.51 6.98 42 T_TooManySym_01 14934 5.15 1.77 6.93 43 TR_MAX_INTL_RELAY 14432 9.74 15.54 6.69 44 TooManyTo_001 14050 5.91 4.77 6.52 45 TM2_M_VERY_LONG_WORD 13918 5.63 4.07 6.45 46 LOTS_OF_MONEY 13687 9.22 14.69 6.35 47 XM_DK_Undo_02 13668 18.00 40.21 6.34 48 TR_XM_DK_Bayes 12696 4.09 0.68 5.89 49 TR_XM_DK_Bayes1 12559 4.05 0.67 5.82 50 XM_H_GMP 12513 5.70 5.49 5.80 51 RCVD_IN_MSPIKE_H5 12287 4.52 2.27 5.70 52 HTML_IMAGE_ONLY_32 12244 3.77 0.12 5.68 53 XMStrtUSub 12035 7.14 10.10 5.58 54 RCVD_IN_VALIDITY_SAFE 11901 4.61 2.89 5.52 55 IN_ZIMBRA_NJ_WHITELIST 11813 3.62 0.07 5.48 56 BAYES_40 11664 4.05 1.45 5.41 57 RCVD_IN_MSPIKE_H3 11574 4.87 3.91 5.37 58 HTML_IMAGE_RATIO_02 11073 5.92 7.40 5.14 59 TR_XM_DK_Bayes2 10935 3.47 0.42 5.07 60 XM_UncommonTLD01 10871 7.31 11.65 5.04 61 XM_B_SpammyWords3 10805 7.73 12.90 5.01 62 BAYES_99 10702 13.48 29.72 4.96 63 XM_H_Long_From01 10601 5.18 5.67 4.92 64 XMNumbers 10371 4.27 3.23 4.81 65 HTML_IMAGE_RATIO_04 10367 5.12 5.71 4.81 66 TR_XM_SpammyWords4 10246 7.76 13.49 4.75 67 MPART_ALT_DIFF 9740 5.05 6.06 4.52 68 RCVD_IN_VALIDITY_CERTIFIED 9483 3.60 2.08 4.40 69 RELAYCOUNTRY_META 9306 9.42 19.15 4.32 70 XMSubMetaSx_00 9077 4.44 4.87 4.21 71 BAYES_80 8705 6.03 9.83 4.04 72 XM_B_Phish_Phrases 8587 4.99 6.90 3.98 73 BAYES_999 8414 10.40 22.79 3.90 74 T_TooManySym_02 8260 2.68 0.49 3.83 75 MIME_QP_LONG_LINE 7701 3.41 3.10 3.57 76 MAY_BE_FORGED 7658 2.49 0.47 3.55 77 KHOP_HELO_FCRDNS 7477 2.90 1.83 3.47 78 TR_XM_DKIM_Undo 7210 12.48 29.90 3.34 79 BAYES_20 6989 2.49 1.06 3.24 80 BOTNET_IPINHOSTNAME 6698 6.42 12.73 3.11 81 HTML_IMAGE_RATIO_06 6641 3.07 3.05 3.08 82 MIME_CHARSET_FARAWAY 6571 2.37 1.08 3.05 83 RCVD_IN_IADB_LISTED 6461 2.27 0.89 3.00 84 INVALID_MSGID 6460 2.03 0.19 3.00 85 TO_MALFORMED 6305 1.93 0.03 2.92 86 TooManyTo_002 6267 2.12 0.62 2.91 87 XM_B_SpammyTLD 6208 3.31 4.13 2.88 88 CHARSET_FARAWAY_HEADER 6197 2.16 0.79 2.87 89 T_REMOTE_IMAGE 5793 2.30 1.56 2.69 90 RCVD_IN_IADB_SPF 5779 2.05 0.85 2.68 91 MAILING_LIST_MULTI 5759 2.43 1.96 2.67 92 BAYES_95 5721 3.54 5.24 2.65 93 FROM_EXCESS_BASE64 5657 2.70 2.84 2.62 94 MIME_HTML_MOSTLY 5589 3.07 3.98 2.59 95 XM_Body_Dirty_Words 5368 3.87 6.50 2.49 96 MIME_HTML_ONLY_MULTI 5275 2.55 2.74 2.45 97 RCVD_IN_IADB_SENDERID 5252 1.88 0.82 2.44 98 TR_XM_UnparsRelay 5183 4.98 9.90 2.40 99 RCVD_IN_IADB_DK 5122 1.85 0.84 2.38 100 TR_XM_SpammyRelay 5029 6.11 13.32 2.33 101 TR_DCC_Bayes_99 4694 9.04 22.13 2.18 102 XM_PDF 4688 1.69 0.77 2.17 103 HTML_MIME_NO_HTML_TAG 4378 1.82 1.41 2.03 104 XMLngstWrd_00 4366 1.47 0.43 2.02 105 XM_CamelCaseFrm001 4299 2.42 3.22 1.99 106 RCVD_IN_IADB_VOUCHED 4187 1.36 0.26 1.94 107 URI_NOVOWEL 4178 1.76 1.43 1.94 108 UNTRUSTED_Relay 4121 3.95 7.84 1.91 109 DKIM_INVALID 4064 2.56 3.84 1.88 110 HTML_IMAGE_RATIO_08 4012 2.05 2.40 1.86 111 XMSexyCombo_05 4010 2.41 3.47 1.86 112 XM_SendGrid 4001 3.67 7.12 1.86 113 T_XMDrugObfuBody_14 3765 2.31 3.38 1.75 114 TM2_M_URI_OPT_OUT 3724 2.27 3.30 1.73 115 BAYES_05 3673 1.37 0.74 1.70 116 TR_XM_PhishingBody 3593 2.49 4.06 1.67 117 T_TooManySym_03 3559 1.13 0.15 1.65 118 XMStockSpam_06 3554 1.78 2.04 1.65 119 SUBJ_ALL_CAPS 3538 2.06 2.85 1.64 120 XM_B_URI_Unicode 3481 1.89 2.42 1.61 121 XMBdyGiftCard01 3258 1.31 0.94 1.51 122 XMSubMetaI_00 3080 1.94 2.91 1.43 123 TR_XM_SpammyWords5 3051 2.12 3.47 1.41 124 XMDiploma_00 3041 1.67 2.16 1.41 125 IN_HORDE_ADDRESS_BOOK 3008 0.96 0.13 1.39 126 XM_DK_Undo_01 2990 1.37 1.34 1.39 127 RCVD_IN_IADB_OPTIN 2949 0.96 0.17 1.37 128 TVD_SPACE_RATIO 2900 1.00 0.34 1.34 129 RCVD_IN_MSPIKE_H4 2887 1.10 0.64 1.34 130 XM_ProductURIs 2884 1.31 1.26 1.34 131 RELAYCOUNTRY_CA 2884 3.20 6.74 1.34 132 XM_B_FormFill 2854 0.88 0.03 1.32 133 XMGappySubj_01 2721 1.14 0.90 1.26 134 XM_GoogleGroups 2696 1.09 0.78 1.25 135 XM_B_Investor 2688 2.04 3.55 1.25 136 XMBrknScrpt_02 2665 1.44 1.82 1.24 137 BOTNET 2642 4.38 10.40 1.23 138 TooManyTo_003 2623 1.00 0.58 1.22 139 URI_HEX 2516 1.23 1.36 1.17 140 XM_UB50 2478 2.02 3.68 1.15 141 TR_Symld_Words 2424 1.06 0.93 1.12 142 XM_B_Unsub2 2335 1.47 2.21 1.08 143 XMGappySubj_02 2266 0.71 0.05 1.05 144 T_XMDrugObfuBody_08 2135 1.22 1.67 0.99 145 XM_SPF_SoftFail 2121 1.97 3.86 0.98 146 XM_B_COPY_HTML 2084 1.18 1.59 0.97 147 T_XMHurry_00 2033 1.73 3.22 0.94 148 TooManyTo_004 2017 0.80 0.55 0.94 149 TR_XM_DK_SendGrid 1995 0.85 0.70 0.93 150 TVD_RCVD_IP 1973 1.01 1.19 0.91 151 RCVD_IN_BL_SPAMCOP_NET 1842 3.92 9.76 0.85 152 XM_OfRef6 1800 1.85 3.80 0.83 153 TR_XM_SpammyWords2 1796 4.13 10.40 0.83 154 TooManyTo_005 1783 0.72 0.51 0.83 155 DKIM_ADSP_CUSTOM_MED 1756 1.11 1.66 0.81 156 XMGenDplmaNmb 1743 0.92 1.13 0.81 157 XM_B_SpammyWords4 1695 1.09 1.68 0.79 158 TR_XM_Base64_M1 1552 1.00 1.52 0.72 159 XM_H_PHPMailer 1540 0.68 0.61 0.71 160 XM_H_Long_From02 1533 1.03 1.63 0.71 161 XMBSHREFv2 1528 0.56 0.26 0.71 162 RELAYCOUNTRY_AU 1436 1.33 2.58 0.67 163 T_FILL_THIS_FORM_SHORT 1436 1.51 3.12 0.67 164 XMCapTrack 1434 0.57 0.39 0.67 165 XMPhish30 1425 0.87 1.27 0.66 166 T_TVD_MIME_NO_HEADERS 1420 0.44 0.03 0.66 167 SUBJ_DOLLARS 1396 0.60 0.52 0.65 168 XMLngstWrd_01 1366 0.52 0.30 0.63 169 XMBody_17 1349 1.47 3.07 0.63 170 XMNoVowels 1337 0.53 0.37 0.62 171 SHOPIFY_IMG_NOT_RCVD_SFY 1323 0.98 1.67 0.61 172 THIS_AD 1311 1.03 1.84 0.61 173 TR_MetaPhish_Combo_01 1308 0.77 1.09 0.61 174 T_XMDrugObfuBody_00 1294 0.80 1.18 0.60 175 HTML_TAG_BALANCE_BODY 1286 0.92 1.53 0.60 176 RCVD_IN_PBL 1274 0.88 1.44 0.59 177 DIET_1 1260 0.87 1.41 0.58 178 XM_B_DNDMA 1255 0.78 1.16 0.58 179 MPART_ALT_DIFF_COUNT 1215 0.79 1.21 0.56 180 URI_TRY_3LD 1189 0.67 0.89 0.55 181 FONT_INVIS_MSGID 1187 0.39 0.10 0.55 182 FORGED_GMAIL_RCVD 1171 0.86 1.47 0.54 183 MSGID_FROM_MTA_HEADER 1157 0.39 0.12 0.54 184 SpammyFromTLD_01 1125 0.91 1.64 0.52 185 USER_IN_WHITELIST 1118 0.34 0.00 0.52 186 USER_IN_WELCOMELIST 1118 0.34 0.00 0.52 187 T_STY_INVIS_DIRECT 1076 0.61 0.82 0.50 188 DKIM_ADSP_NXDOMAIN 1070 1.04 2.08 0.50 189 T_TooManySym_04 1052 0.33 0.04 0.49 190 XMBody_95 1039 0.40 0.25 0.48 191 XMSlimDrugH 1037 0.55 0.67 0.48 192 NML_ADSP_CUSTOM_MED 1005 0.81 1.46 0.47 193 HTTPS_HTTP_MISMATCH 987 0.63 0.96 0.46 194 RCVD_IN_PSBL 986 0.95 1.89 0.46 195 XMLngstWrd_02 985 0.39 0.26 0.46 196 RCVD_IN_MSPIKE_BL 977 1.81 4.41 0.45 197 TR_XM_MSPIKECOMBO 976 1.81 4.40 0.45 198 XM_ShortIntro_01 973 0.53 0.69 0.45 199 RCVD_IN_MSPIKE_L3 958 0.67 1.09 0.44 200 TM2_M_OBFU_COMMENT 944 0.51 0.64 0.44 ----------------------------------------------------------------------