Email: 260066 Autolearn: 0 AvgScore: 4.76 AvgScanTime: 1.36 sec Spam: 86657 Autolearn: 0 AvgScore: 14.29 AvgScanTime: 1.42 sec Ham: 173409 Autolearn: 0 AvgScore: -0.00 AvgScanTime: 1.33 sec Time Spent Running SA: 98.35 hours Time Spent Processing Spam: 34.30 hours Time Spent Processing Ham: 64.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 86119 99.55 99.38 99.63 2 HTML_MESSAGE 81949 87.93 94.57 84.61 3 DKIM_SIGNED 74875 79.25 86.40 75.67 4 XM_B_Unicode 72101 74.62 83.20 70.34 5 XM_DK_Pass 70885 76.98 81.80 74.57 6 DKIM_VALID 70518 76.52 81.38 74.10 7 RELAYCOUNTRY_US 67805 80.45 78.25 81.55 8 DCC_CHECK 67414 58.13 77.79 48.30 9 XM_B_SpammyWords 59198 54.50 68.31 47.60 10 XMListUnsubscribeExists 57910 57.83 66.83 53.33 11 DKIM_VALID_AU 56287 63.71 64.95 63.09 12 XM_B_Unicode3 41845 46.32 48.29 45.33 13 LOC_TINY_FONT_1 40597 38.70 46.85 34.62 14 XM_DK_Undo_02 37872 19.09 43.70 6.79 15 XM_B_SpammyWords2 34009 27.98 39.25 22.36 16 BAYES_50 31901 52.19 36.81 59.87 17 HTML_FONT_LOW_CONTRAST 31364 32.88 36.19 31.22 18 BAYES_99 29977 15.13 34.59 5.41 19 FVGT_m_MULTI_ODD 28129 28.64 32.46 26.73 20 TR_XM_DKIM_Undo 27865 12.65 32.16 2.90 21 T_KAM_HTML_FONT_INVALID 26270 23.76 30.31 20.49 22 DKIM_VALID_EF 26102 29.76 30.12 29.58 23 MIME_HTML_ONLY 25387 26.44 29.30 25.01 24 BAYES_999 23463 11.90 27.08 4.31 25 TR_DCC_Bayes_99 22315 10.04 25.75 2.19 26 TR_XM_DK_Unsub 20465 18.30 23.62 15.64 27 DCC_CHECK_NEGATIVE 18784 41.68 21.68 51.67 28 XMSubLong 18663 22.94 21.54 23.64 29 RELAYCOUNTRY_META 18519 9.40 21.37 3.42 30 XM_Multi_Part_URI 18378 18.85 21.21 17.67 31 T_TM2_M_HEADER_IN_MSG 18043 22.97 20.82 24.05 32 XM_B_Unsub 17371 15.63 20.05 13.43 33 TR_XM_BayesUnsub 16433 12.15 18.96 8.74 34 UNPARSEABLE_RELAY 15265 14.35 17.62 12.72 35 XM_B_SpammyWords3 13625 9.71 15.72 6.71 36 TR_MAX_INTL_RELAY 13512 9.70 15.59 6.75 37 TR_XM_SpammyRelay 12566 6.17 14.50 2.01 38 RCVD_IN_MSPIKE_H2 12043 13.05 13.90 12.62 39 TR_XM_SpammyWords2 11135 4.73 12.85 0.67 40 BOTNET_IPINHOSTNAME 11095 6.76 12.80 3.75 41 FSL_BULK_SIG 10786 11.47 12.45 10.98 42 RCVD_IN_BL_SPAMCOP_NET 10437 4.51 12.04 0.74 43 BOTNET 10314 4.85 11.90 1.33 44 TR_XM_UnparsRelay 8537 4.55 9.85 1.90 45 LOTS_OF_MONEY 8497 7.73 9.81 6.70 46 BAYES_80 8289 5.88 9.57 4.04 47 RCVD_IN_MSPIKE_WL 7832 13.32 9.04 15.45 48 TR_XM_SpammyWords4 7536 6.26 8.70 5.04 49 XM_Body_Dirty_Words 7427 5.51 8.57 3.98 50 XM_B_Phish_Phrases 7419 6.49 8.56 5.45 51 BAYES_60 7363 7.18 8.50 6.53 52 UNTRUSTED_Relay 7283 3.79 8.40 1.48 53 RELAYCOUNTRY_CA 6936 3.43 8.00 1.14 54 HTML_IMAGE_RATIO_02 6756 6.06 7.80 5.19 55 XM_Evil_Numbers_Gen 6712 9.64 7.75 10.58 56 XMSubMetaSx_00 6002 6.05 6.93 5.61 57 RCVD_IN_MSPIKE_BL 5778 2.68 6.67 0.69 58 TR_XM_MSPIKECOMBO 5776 2.68 6.67 0.69 59 MPART_ALT_DIFF 5680 5.51 6.55 4.99 60 XM_UncommonTLD01 5069 5.21 5.85 4.89 61 RCVD_IN_MSPIKE_H3 5020 6.07 5.79 6.20 62 TR_XM_PhishingBody 4964 3.08 5.73 1.76 63 BAYES_95 4898 3.69 5.65 2.71 64 LotsOfNums_01 4704 6.49 5.43 7.03 65 XM_H_Long_From01 4602 5.24 5.31 5.21 66 XMStrtUSub 4471 5.76 5.16 6.06 67 TR_XM_NoHeaderRelay 4440 1.86 5.12 0.22 68 XM_H_GMP 4439 5.95 5.12 6.37 69 DKIM_INVALID 4357 2.72 5.03 1.57 70 XM_UB50 4080 2.17 4.71 0.90 71 XMSexyCombo_05 3994 3.56 4.61 3.03 72 HTML_IMAGE_RATIO_04 3993 4.55 4.61 4.51 73 TooManyTo_001 3936 7.06 4.54 8.32 74 T_XMDrugObfuBody_14 3929 2.84 4.53 1.99 75 XM_B_PhoneNumber 3850 7.38 4.44 8.85 76 MIME_HTML_MOSTLY 3667 3.02 4.23 2.42 77 TR_XM_SpammyWords3 3643 1.64 4.20 0.36 78 XM_B_Investor 3553 2.47 4.10 1.65 79 XM_OfRef6 3546 1.97 4.09 0.92 80 XM_B_SpammyTLD 3438 3.08 3.97 2.63 81 TR_XM_SPAMCOP 3351 1.40 3.87 0.17 82 RCVD_IN_MSPIKE_L3 3241 1.60 3.74 0.53 83 RCVD_IN_VALIDITY_RPBL 3219 1.27 3.71 0.05 84 XM_CamelCaseFrm001 3035 2.95 3.50 2.67 85 TR_XM_SpammyWords5 2972 1.95 3.43 1.21 86 XMNumbers 2918 5.46 3.37 6.51 87 HTML_IMAGE_RATIO_06 2918 2.92 3.37 2.70 88 RCVD_IN_VALIDITY_SAFE 2886 4.61 3.33 5.25 89 T_TooManySym_01 2808 6.26 3.24 7.77 90 T_FILL_THIS_FORM_SHORT 2785 1.53 3.21 0.69 91 MIME_HTML_ONLY_MULTI 2782 2.98 3.21 2.87 92 TM2_M_VERY_LONG_WORD 2736 1.96 3.16 1.36 93 XM_URI_RBL 2724 1.35 3.14 0.45 94 MIME_QP_LONG_LINE 2547 3.13 2.94 3.22 95 ALL_TRUSTED 2538 11.25 2.93 15.40 96 RELAYCOUNTRY_AU 2536 1.34 2.93 0.54 97 XM_B_Unsub2 2439 1.87 2.81 1.39 98 BOTNET_NORDNS 2427 0.95 2.80 0.03 99 DKIM_ADSP_NXDOMAIN 2358 1.17 2.72 0.40 100 T_XMDrugObfuBody_08 2341 1.69 2.70 1.19 101 XM_SPF_SoftFail 2329 1.51 2.69 0.92 102 XM_B_SpammyWords4 2284 1.75 2.64 1.31 103 USER_IN_DEF_DKIM_WL 2275 13.06 2.63 18.27 104 RCVD_IN_MSPIKE_L5 2226 0.96 2.57 0.15 105 T_XMHurry_00 2209 1.40 2.55 0.83 106 XMBody_17 2171 1.14 2.51 0.45 107 FROM_EXCESS_BASE64 2133 2.29 2.46 2.20 108 RCVD_IN_MSPIKE_H5 2132 5.63 2.46 7.22 109 KHOP_HELO_FCRDNS 2111 1.62 2.44 1.21 110 RCVD_IN_VALIDITY_CERTIFIED 2095 3.45 2.42 3.96 111 SUBJ_ALL_CAPS 2055 1.38 2.37 0.88 112 HTML_IMAGE_RATIO_08 2037 2.57 2.35 2.68 113 RELAYCOUNTRY_CN 1940 0.76 2.24 0.03 114 XM_H_PHPMailer 1899 1.29 2.19 0.84 115 SpammyFromTLD_01 1888 1.03 2.18 0.46 116 TR_Mismatch_TLD_01 1888 0.91 2.18 0.28 117 SCC_BODY_URI_ONLY 1876 2.38 2.16 2.49 118 TR_XM_INV_DKIM 1750 0.80 2.02 0.19 119 XMBrknScrpt_02 1735 1.53 2.00 1.29 120 XMDiploma_00 1723 1.50 1.99 1.26 121 TM2_M_URI_OPT_OUT 1667 1.84 1.92 1.80 122 BOUNCE_MESSAGE 1661 3.26 1.92 3.92 123 ANY_BOUNCE_MESSAGE 1661 3.26 1.92 3.93 124 BAYES_40 1657 3.73 1.91 4.64 125 SpammyFromTLD_02 1654 0.82 1.91 0.28 126 XMPhish11 1634 0.71 1.89 0.12 127 DIET_1 1632 0.98 1.88 0.52 128 XM_DK_Undo_01 1631 1.59 1.88 1.45 129 TR_LOTS_OF_MONEY3 1627 0.84 1.88 0.32 130 XMStockSpam_06 1624 2.26 1.87 2.46 131 XM_H_Long_From02 1592 1.18 1.84 0.84 132 URI_NOVOWEL 1587 1.76 1.83 1.73 133 MAILING_LIST_MULTI 1581 2.11 1.82 2.26 134 T_REMOTE_IMAGE 1575 2.85 1.82 3.37 135 XM_B_URI_Unicode 1565 1.56 1.81 1.44 136 RCVD_IN_PSBL 1550 0.92 1.79 0.48 137 RCVD_IN_XBL 1527 0.60 1.76 0.02 138 XMBody_29 1523 0.65 1.76 0.09 139 RDNS_DYNAMIC 1482 0.77 1.71 0.30 140 XMPhish30 1456 1.03 1.68 0.70 141 XM_B_COPY_HTML 1451 1.25 1.67 1.04 142 TR_MetaPhish_Combo_01 1437 2.01 1.66 2.19 143 PDS_RDNS_DYNAMIC_FP 1415 0.59 1.63 0.08 144 XM_HighProb1 1382 0.54 1.59 0.02 145 TR_Mismatch_TLD_02 1352 0.57 1.56 0.08 146 MPART_ALT_DIFF_COUNT 1343 0.96 1.55 0.66 147 RELAYCOUNTRY_TH 1332 0.52 1.54 0.01 148 RCVD_IN_SBL_CSS 1325 0.53 1.53 0.03 149 SHOPIFY_IMG_NOT_RCVD_SFY 1301 0.76 1.50 0.39 150 XMBdyGiftCard01 1287 1.08 1.49 0.88 151 XMSexyCombo_01 1283 1.32 1.48 1.24 152 TR_XM_PHPForged 1272 0.63 1.47 0.22 153 XMBounce_01 1267 0.50 1.46 0.01 154 XMReplyNow 1266 0.66 1.46 0.27 155 TR_XM_PHPDW 1256 0.63 1.45 0.22 156 TR_XM_FormFill2 1255 0.63 1.45 0.21 157 T_XMDrugObfuBody_00 1242 0.93 1.43 0.68 158 NUMERIC_HTTP_ADDR 1233 0.59 1.42 0.17 159 XM_H_PHPOS 1226 0.61 1.41 0.20 160 TVD_RCVD_IP 1225 1.36 1.41 1.34 161 HTML_TAG_BALANCE_BODY 1181 0.93 1.36 0.71 162 NORMAL_HTTP_TO_IP 1140 0.45 1.32 0.02 163 TR_XM_MSPIKECOMBO2 1131 0.44 1.31 0.01 164 URI_TRY_3LD 1126 0.91 1.30 0.72 165 MultiRelay_CC 1123 0.51 1.30 0.11 166 VFY_ACCT_NORDNS 1117 0.43 1.29 0.00 167 REPLYTO_EMPTY 1103 0.42 1.27 0.00 168 HTML_MIME_NO_HTML_TAG 1087 1.61 1.25 1.78 169 BAYES_20 1084 2.54 1.25 3.19 170 HELO_DYNAMIC_SPLIT_IP 1067 0.42 1.23 0.01 171 T_TooManySym_02 1045 3.16 1.21 4.14 172 T_STY_INVIS_DIRECT 1033 0.81 1.19 0.62 173 XM_B_Phish66 1016 0.67 1.17 0.42 174 XM_B_COVIDMETA 1015 0.47 1.17 0.12 175 XPRIO 1009 0.39 1.16 0.00 176 RCVD_IN_PBL 992 0.73 1.14 0.53 177 XM_DIRTYINTL 984 0.43 1.14 0.08 178 XM_Sft_Co_L33T 952 0.46 1.10 0.14 179 SUBJ_DOLLARS 921 0.56 1.06 0.30 180 HTML_IMAGE_ONLY_20 912 0.62 1.05 0.40 181 HTML_FONT_TINY_NORDNS 899 0.44 1.04 0.14 182 THIS_AD 892 0.55 1.03 0.31 183 XM_ProductURIs 889 1.55 1.03 1.81 184 T_Symld_Words_02 886 0.50 1.02 0.24 185 TR_XM_RelayPhish 878 0.38 1.01 0.06 186 HTTPS_HTTP_MISMATCH 877 0.61 1.01 0.41 187 XMBody_78 877 0.62 1.01 0.42 188 TR_XM_FormFill 852 0.33 0.98 0.01 189 TR_XM_InvalidRelay 836 0.33 0.96 0.01 190 XMFrmHeader_28 834 0.32 0.96 0.00 191 XM_UB99 831 0.33 0.96 0.02 192 FONT_INVIS_LONG_LINE 824 0.34 0.95 0.04 193 TR_XM_MaxSPIKE 818 0.32 0.94 0.01 194 URI_HEX 815 0.92 0.94 0.91 195 RELAYCOUNTRY_FR 814 0.50 0.94 0.28 196 XM_SendGrid 801 0.98 0.92 1.01 197 XM_UB60 798 0.35 0.92 0.06 198 XM_OfRef7 793 0.44 0.92 0.21 199 PLING_QUERY 789 0.59 0.91 0.43 200 HTML_FONT_FACE_BAD 778 0.64 0.90 0.51 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 172775 99.55 99.38 99.63 2 HTML_MESSAGE 146729 87.93 94.57 84.61 3 RELAYCOUNTRY_US 141411 80.45 78.25 81.55 4 DKIM_SIGNED 131216 79.25 86.40 75.67 5 XM_DK_Pass 129318 76.98 81.80 74.57 6 DKIM_VALID 128489 76.52 81.38 74.10 7 XM_B_Unicode 121969 74.62 83.20 70.34 8 DKIM_VALID_AU 109405 63.71 64.95 63.09 9 BAYES_50 103818 52.19 36.81 59.87 10 XMListUnsubscribeExists 92475 57.83 66.83 53.33 11 DCC_CHECK_NEGATIVE 89606 41.68 21.68 51.67 12 DCC_CHECK 83753 58.13 77.79 48.30 13 XM_B_SpammyWords 82536 54.50 68.31 47.60 14 XM_B_Unicode3 78614 46.32 48.29 45.33 15 LOC_TINY_FONT_1 60038 38.70 46.85 34.62 16 HTML_FONT_LOW_CONTRAST 54135 32.88 36.19 31.22 17 DKIM_VALID_EF 51287 29.76 30.12 29.58 18 FVGT_m_MULTI_ODD 46355 28.64 32.46 26.73 19 MIME_HTML_ONLY 43365 26.44 29.30 25.01 20 T_TM2_M_HEADER_IN_MSG 41703 22.97 20.82 24.05 21 XMSubLong 40993 22.94 21.54 23.64 22 XM_B_SpammyWords2 38768 27.98 39.25 22.36 23 T_KAM_HTML_FONT_INVALID 35524 23.76 30.31 20.49 24 USER_IN_DEF_DKIM_WL 31678 13.06 2.63 18.27 25 XM_Multi_Part_URI 30637 18.85 21.21 17.67 26 TR_XM_DK_Unsub 27119 18.30 23.62 15.64 27 RCVD_IN_MSPIKE_WL 26799 13.32 9.04 15.45 28 ALL_TRUSTED 26710 11.25 2.93 15.40 29 XM_B_Unsub 23281 15.63 20.05 13.43 30 UNPARSEABLE_RELAY 22050 14.35 17.62 12.72 31 RCVD_IN_MSPIKE_H2 21888 13.05 13.90 12.62 32 BAYES_00 20476 8.06 0.55 11.81 33 FSL_BULK_SIG 19036 11.47 12.45 10.98 34 XM_Evil_Numbers_Gen 18355 9.64 7.75 10.58 35 XM_DKIMWhitelistDomains 16760 6.45 0.02 9.67 36 XM_B_PhoneNumber 15353 7.38 4.44 8.85 37 TR_XM_BayesUnsub 15157 12.15 18.96 8.74 38 TooManyTo_001 14423 7.06 4.54 8.32 39 T_TooManySym_01 13466 6.26 3.24 7.77 40 TR_XM_DK_Bayes 12855 5.08 0.43 7.41 41 TR_XM_DK_Bayes1 12719 5.03 0.42 7.33 42 RCVD_IN_MSPIKE_H5 12513 5.63 2.46 7.22 43 LotsOfNums_01 12185 6.49 5.43 7.03 44 XM_DK_Undo_02 11778 19.09 43.70 6.79 45 TR_MAX_INTL_RELAY 11711 9.70 15.59 6.75 46 XM_B_SpammyWords3 11637 9.71 15.72 6.71 47 LOTS_OF_MONEY 11616 7.73 9.81 6.70 48 BAYES_60 11320 7.18 8.50 6.53 49 XMNumbers 11293 5.46 3.37 6.51 50 XM_H_GMP 11038 5.95 5.12 6.37 51 TR_XM_DK_Bayes2 10947 4.33 0.36 6.31 52 IN_ZIMBRA_NJ_WHITELIST 10920 4.24 0.12 6.30 53 RCVD_IN_MSPIKE_H3 10760 6.07 5.79 6.20 54 XMStrtUSub 10517 5.76 5.16 6.06 55 XMSubMetaSx_00 9735 6.05 6.93 5.61 56 XM_B_Phish_Phrases 9459 6.49 8.56 5.45 57 BAYES_99 9373 15.13 34.59 5.41 58 RCVD_IN_VALIDITY_SAFE 9107 4.61 3.33 5.25 59 XM_H_Long_From01 9034 5.24 5.31 5.21 60 HTML_IMAGE_RATIO_02 9004 6.06 7.80 5.19 61 TR_XM_SpammyWords4 8746 6.26 8.70 5.04 62 MPART_ALT_DIFF 8654 5.51 6.55 4.99 63 XM_UncommonTLD01 8472 5.21 5.85 4.89 64 BAYES_40 8052 3.73 1.91 4.64 65 HTML_IMAGE_RATIO_04 7827 4.55 4.61 4.51 66 TooManyTo_002 7801 3.22 0.66 4.50 67 BAYES_999 7472 11.90 27.08 4.31 68 T_TooManySym_02 7172 3.16 1.21 4.14 69 BAYES_80 7000 5.88 9.57 4.04 70 XM_Body_Dirty_Words 6895 5.51 8.57 3.98 71 RCVD_IN_VALIDITY_CERTIFIED 6873 3.45 2.42 3.96 72 INVALID_MSGID 6862 2.75 0.32 3.96 73 ANY_BOUNCE_MESSAGE 6810 3.26 1.92 3.93 74 BOUNCE_MESSAGE 6806 3.26 1.92 3.92 75 BOTNET_IPINHOSTNAME 6496 6.76 12.80 3.75 76 TO_MALFORMED 6255 2.41 0.01 3.61 77 RELAYCOUNTRY_META 5928 9.40 21.37 3.42 78 T_REMOTE_IMAGE 5847 2.85 1.82 3.37 79 MIME_QP_LONG_LINE 5592 3.13 2.94 3.22 80 BAYES_20 5526 2.54 1.25 3.19 81 XM_B_FormFill 5457 2.12 0.06 3.15 82 XMSexyCombo_05 5260 3.56 4.61 3.03 83 TR_XM_DKIM_Undo 5035 12.65 32.16 2.90 84 MIME_HTML_ONLY_MULTI 4979 2.98 3.21 2.87 85 BAYES_95 4697 3.69 5.65 2.71 86 HTML_IMAGE_RATIO_06 4677 2.92 3.37 2.70 87 HTML_IMAGE_RATIO_08 4642 2.57 2.35 2.68 88 XM_CamelCaseFrm001 4631 2.95 3.50 2.67 89 XM_B_SpammyTLD 4560 3.08 3.97 2.63 90 SCC_BODY_URI_ONLY 4313 2.38 2.16 2.49 91 XMStockSpam_06 4266 2.26 1.87 2.46 92 XM_PDF 4224 1.76 0.40 2.44 93 MIME_HTML_MOSTLY 4199 3.02 4.23 2.42 94 MAILING_LIST_MULTI 3913 2.11 1.82 2.26 95 RCVD_IN_IADB_LISTED 3869 1.69 0.60 2.23 96 FROM_EXCESS_BASE64 3812 2.29 2.46 2.20 97 TR_DCC_Bayes_99 3806 10.04 25.75 2.19 98 TR_MetaPhish_Combo_01 3789 2.01 1.66 2.19 99 TR_Symld_Words 3532 1.65 0.89 2.04 100 RCVD_IN_MSPIKE_H4 3526 1.62 0.78 2.03 101 RCVD_IN_IADB_SPF 3500 1.53 0.54 2.02 102 TR_XM_SpammyRelay 3488 6.17 14.50 2.01 103 T_XMDrugObfuBody_14 3449 2.84 4.53 1.99 104 TR_XM_UnparsRelay 3297 4.55 9.85 1.90 105 RCVD_IN_IADB_SENDERID 3173 1.39 0.51 1.83 106 RCVD_IN_IADB_DK 3157 1.39 0.52 1.82 107 XM_ProductURIs 3145 1.55 1.03 1.81 108 BAYES_05 3144 1.43 0.66 1.81 109 TM2_M_URI_OPT_OUT 3130 1.84 1.92 1.80 110 HTML_MIME_NO_HTML_TAG 3089 1.61 1.25 1.78 111 TR_XM_PhishingBody 3044 3.08 5.73 1.76 112 URI_NOVOWEL 2996 1.76 1.83 1.73 113 IN_HORDE_ADDRESS_BOOK 2892 1.15 0.13 1.67 114 XM_B_Investor 2864 2.47 4.10 1.65 115 XMGappySubj_01 2792 1.13 0.17 1.61 116 DKIM_INVALID 2727 2.72 5.03 1.57 117 T_TooManySym_03 2722 1.28 0.71 1.57 118 TVD_SPACE_RATIO 2669 1.13 0.31 1.54 119 URI_OPTOUT_3LD 2592 1.20 0.62 1.49 120 UNTRUSTED_Relay 2575 3.79 8.40 1.48 121 RCVD_IN_IADB_VOUCHED 2523 1.05 0.25 1.45 122 XM_DK_Undo_01 2515 1.59 1.88 1.45 123 XM_B_URI_Unicode 2494 1.56 1.81 1.44 124 XM_B_Unsub2 2416 1.87 2.81 1.39 125 TM2_M_VERY_LONG_WORD 2357 1.96 3.16 1.36 126 TVD_RCVD_IP 2318 1.36 1.41 1.34 127 LOW_PRICE 2307 0.98 0.27 1.33 128 BOTNET 2301 4.85 11.90 1.33 129 XM_B_SpammyWords4 2273 1.75 2.64 1.31 130 T_TVD_MIME_NO_HEADERS 2264 0.88 0.04 1.31 131 XMBrknScrpt_02 2233 1.53 2.00 1.29 132 XMDiploma_00 2186 1.50 1.99 1.26 133 XMSexyCombo_01 2151 1.32 1.48 1.24 134 XM_GoogleGroups 2100 1.07 0.78 1.21 135 KHOP_HELO_FCRDNS 2093 1.62 2.44 1.21 136 TR_XM_SpammyWords5 2091 1.95 3.43 1.21 137 T_XMDrugObfuBody_08 2065 1.69 2.70 1.19 138 TM2_M_OBFU_COMMENT 2004 1.03 0.77 1.16 139 RELAYCOUNTRY_CA 1985 3.43 8.00 1.14 140 XMSubMetaSxObfu_03 1918 0.95 0.65 1.11 141 XM_RXBody 1893 0.88 0.46 1.09 142 HTML_EXTRA_CLOSE 1868 0.77 0.15 1.08 143 XM_B_COPY_HTML 1810 1.25 1.67 1.04 144 XMGappySubj_02 1791 0.70 0.03 1.03 145 RCVD_IN_IADB_OPTIN 1779 0.74 0.16 1.03 146 XM_SendGrid 1755 0.98 0.92 1.01 147 TooManyTo_003 1684 0.85 0.62 0.97 148 XM_B_DNDMA 1630 0.85 0.67 0.94 149 XM_SPF_SoftFail 1601 1.51 2.69 0.92 150 XM_OfRef6 1588 1.97 4.09 0.92 151 URI_HEX 1578 0.92 0.94 0.91 152 XM_UB50 1566 2.17 4.71 0.90 153 XMSubMetaSx_01 1530 0.69 0.31 0.88 154 XMBSHREFv2 1525 0.71 0.36 0.88 155 SUBJ_ALL_CAPS 1523 1.38 2.37 0.88 156 XMBdyGiftCard01 1522 1.08 1.49 0.88 157 XMSexyCombo_04 1498 0.82 0.73 0.86 158 XM_H_Long_From02 1465 1.18 1.84 0.84 159 XM_H_PHPMailer 1463 1.29 2.19 0.84 160 XMSexyCombo_02 1451 0.63 0.21 0.84 161 T_XMHurry_00 1435 1.40 2.55 0.83 162 J_POPCORN_WO_D 1327 0.68 0.50 0.77 163 DKIM_ADSP_CUSTOM_MED 1301 0.79 0.88 0.75 164 RCVD_IN_BL_SPAMCOP_NET 1290 4.51 12.04 0.74 165 TooManyTo_004 1273 0.69 0.60 0.73 166 URI_TRY_3LD 1246 0.91 1.30 0.72 167 TR_XM_Base64_M1 1239 0.70 0.68 0.71 168 HTML_TAG_BALANCE_BODY 1235 0.93 1.36 0.71 169 XMPhish30 1213 1.03 1.68 0.70 170 T_FILL_THIS_FORM_SHORT 1202 1.53 3.21 0.69 171 TR_XM_MSPIKECOMBO 1197 2.68 6.67 0.69 172 RCVD_IN_MSPIKE_BL 1197 2.68 6.67 0.69 173 TR_XM_DK_SendGrid 1197 0.64 0.55 0.69 174 T_XMDrugObfuBody_00 1171 0.93 1.43 0.68 175 TR_XM_SpammyWords2 1164 4.73 12.85 0.67 176 XMNoVowels 1156 0.59 0.44 0.67 177 MPART_ALT_DIFF_COUNT 1146 0.96 1.55 0.66 178 TooManyTo_005 1097 0.61 0.58 0.63 179 T_STY_INVIS_DIRECT 1079 0.81 1.19 0.62 180 USER_IN_WELCOMELIST 959 0.37 0.00 0.55 181 USER_IN_WHITELIST 959 0.37 0.00 0.55 182 RELAYCOUNTRY_AU 936 1.34 2.93 0.54 183 RCVD_IN_MSPIKE_L3 926 1.60 3.74 0.53 184 XM_ShortIntro_01 917 0.53 0.55 0.53 185 RCVD_IN_PBL 913 0.73 1.14 0.53 186 DIET_1 907 0.98 1.88 0.52 187 XMLngstWrd_00 904 0.43 0.23 0.52 188 XMClaimOffer 896 0.44 0.28 0.52 189 HTML_FONT_FACE_BAD 892 0.64 0.90 0.51 190 XMSlimDrugH 886 0.51 0.52 0.51 191 XMBody_95 875 0.36 0.07 0.50 192 RCVD_IN_PSBL 835 0.92 1.79 0.48 193 XMHTML_After_End 826 0.48 0.48 0.48 194 FORGED_GMAIL_RCVD 811 0.56 0.73 0.47 195 SpammyFromTLD_01 797 1.03 2.18 0.46 196 XM_URI_RBL 786 1.35 3.14 0.45 197 XMBody_17 786 1.14 2.51 0.45 198 NML_ADSP_CUSTOM_MED 783 0.53 0.68 0.45 199 XMLngstWrd_01 781 0.36 0.18 0.45 200 FONT_INVIS_MSGID 775 0.34 0.13 0.45 ----------------------------------------------------------------------