Email: 252480 Autolearn: 0 AvgScore: 4.46 AvgScanTime: 1.36 sec Spam: 79695 Autolearn: 0 AvgScore: 13.93 AvgScanTime: 1.42 sec Ham: 172785 Autolearn: 0 AvgScore: 0.09 AvgScanTime: 1.33 sec Time Spent Running SA: 95.17 hours Time Spent Processing Spam: 31.34 hours Time Spent Processing Ham: 63.83 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 79133 99.60 99.29 99.74 2 HTML_MESSAGE 74629 87.47 93.64 84.62 3 DKIM_SIGNED 69651 76.72 87.40 71.79 4 XM_B_Unicode 67445 74.85 84.63 70.34 5 XM_DK_Pass 66319 74.66 83.22 70.71 6 DKIM_VALID 65794 74.12 82.56 70.22 7 RELAYCOUNTRY_US 63530 80.95 79.72 81.52 8 DCC_CHECK 62836 58.27 78.85 48.78 9 XMListUnsubscribeExists 56613 57.21 71.04 50.83 10 XM_B_SpammyWords 54439 54.01 68.31 47.42 11 DKIM_VALID_AU 52138 61.49 65.42 59.67 12 XM_B_Unicode3 39425 47.10 49.47 46.00 13 LOC_TINY_FONT_1 38730 37.73 48.60 32.72 14 XM_DK_Undo_02 33135 17.18 41.58 5.93 15 XM_B_SpammyWords2 30068 26.93 37.73 21.95 16 HTML_FONT_LOW_CONTRAST 29969 37.31 37.60 37.17 17 BAYES_50 29335 54.25 36.81 62.30 18 BAYES_99 27840 14.30 34.93 4.78 19 FVGT_m_MULTI_ODD 25553 28.37 32.06 26.66 20 TR_XM_DKIM_Undo 24371 11.67 30.58 2.95 21 DKIM_VALID_EF 23804 28.10 29.87 27.28 22 T_KAM_HTML_FONT_INVALID 23413 22.20 29.38 18.89 23 MIME_HTML_ONLY 23393 23.44 29.35 20.72 24 BAYES_999 21136 11.05 26.52 3.92 25 TR_DCC_Bayes_99 20870 9.76 26.19 2.18 26 TR_XM_DK_Unsub 19269 17.34 24.18 14.19 27 XMSubLong 16569 21.21 20.79 21.40 28 XM_Multi_Part_URI 16461 17.93 20.65 16.68 29 DCC_CHECK_NEGATIVE 16383 41.53 20.56 51.20 30 T_TM2_M_HEADER_IN_MSG 15386 24.50 19.31 26.89 31 RELAYCOUNTRY_META 14366 8.01 18.03 3.39 32 UNPARSEABLE_RELAY 14360 14.78 18.02 13.29 33 XM_B_Unsub 13896 12.89 17.44 10.79 34 TR_XM_BayesUnsub 13418 11.06 16.84 8.39 35 TR_MAX_INTL_RELAY 12740 9.36 15.99 6.30 36 XM_B_SpammyWords3 11120 8.69 13.95 6.26 37 RCVD_IN_MSPIKE_H2 11075 13.02 13.90 12.61 38 TR_XM_SpammyWords2 10128 4.54 12.71 0.78 39 TR_XM_SpammyRelay 9718 5.09 12.19 1.81 40 BOTNET_IPINHOSTNAME 8932 5.97 11.21 3.55 41 FSL_BULK_SIG 8755 10.67 10.99 10.52 42 TR_XM_UnparsRelay 8273 4.65 10.38 2.01 43 RCVD_IN_BL_SPAMCOP_NET 7756 3.56 9.73 0.71 44 BAYES_80 7714 5.61 9.68 3.73 45 BOTNET 7695 3.86 9.66 1.19 46 LOTS_OF_MONEY 7455 6.36 9.35 4.98 47 RCVD_IN_MSPIKE_WL 6997 11.55 8.78 12.83 48 TR_XM_SpammyWords4 6610 5.00 8.29 3.48 49 XM_Body_Dirty_Words 6468 4.26 8.12 2.48 50 BAYES_60 6448 6.95 8.09 6.42 51 XM_Evil_Numbers_Gen 6150 11.28 7.72 12.93 52 RELAYCOUNTRY_CA 6038 3.16 7.58 1.12 53 XM_B_Phish_Phrases 5770 7.00 7.24 6.90 54 UNTRUSTED_Relay 5669 3.28 7.11 1.51 55 HTML_IMAGE_RATIO_02 5655 5.67 7.10 5.01 56 LotsOfNums_01 5590 9.21 7.01 10.22 57 RCVD_IN_MSPIKE_BL 5283 2.54 6.63 0.66 58 TR_XM_MSPIKECOMBO 5260 2.53 6.60 0.66 59 BAYES_95 4694 3.62 5.89 2.57 60 XM_UncommonTLD01 4608 5.21 5.78 4.94 61 MPART_ALT_DIFF 4494 4.89 5.64 4.55 62 XM_H_Long_From01 4441 5.62 5.57 5.64 63 XMSubMetaSx_00 4406 4.46 5.53 3.97 64 RCVD_IN_MSPIKE_H3 4338 5.39 5.44 5.36 65 XMStrtUSub 4194 5.32 5.26 5.34 66 TR_XM_PhishingBody 4151 2.90 5.21 1.84 67 XM_H_GMP 4096 6.06 5.14 6.48 68 XM_B_PhoneNumber 3928 5.96 4.93 6.44 69 T_XMDrugObfuBody_14 3858 3.15 4.84 2.37 70 DKIM_INVALID 3857 2.60 4.84 1.57 71 XMSexyCombo_05 3805 2.62 4.77 1.62 72 HTML_IMAGE_RATIO_04 3734 4.01 4.69 3.70 73 TR_XM_SpammyWords3 3698 1.71 4.64 0.36 74 T_FILL_THIS_FORM_SHORT 3681 2.09 4.62 0.93 75 XM_CamelCaseFrm001 3549 3.25 4.45 2.69 76 TooManyTo_001 3342 5.50 4.19 6.11 77 TR_XM_NoHeaderRelay 3224 1.50 4.05 0.33 78 MIME_HTML_MOSTLY 3211 3.34 4.03 3.03 79 XM_B_Investor 3206 2.25 4.02 1.43 80 RCVD_IN_MSPIKE_L3 3203 1.62 4.02 0.52 81 XMNumbers 3075 4.22 3.86 4.39 82 TR_XM_SpammyWords5 3041 1.99 3.82 1.14 83 RCVD_IN_VALIDITY_RPBL 3038 1.24 3.81 0.05 84 XM_OfRef6 3013 1.96 3.78 1.11 85 XM_B_SpammyTLD 2874 2.93 3.61 2.61 86 XM_UB50 2818 1.73 3.54 0.89 87 HTML_IMAGE_RATIO_06 2772 3.45 3.48 3.43 88 ALL_TRUSTED 2594 11.55 3.25 15.38 89 XM_URI_RBL 2574 1.40 3.23 0.56 90 HTML_IMAGE_RATIO_08 2573 2.18 3.23 1.69 91 T_TooManySym_01 2414 6.23 3.03 7.70 92 MIME_HTML_ONLY_MULTI 2393 2.65 3.00 2.48 93 TM2_M_VERY_LONG_WORD 2353 5.14 2.95 6.15 94 TR_XM_SPAMCOP 2348 1.03 2.95 0.15 95 XMPhish30 2244 1.32 2.82 0.63 96 XM_SPF_SoftFail 2198 1.54 2.76 0.98 97 FROM_EXCESS_BASE64 2131 2.25 2.67 2.06 98 RCVD_IN_VALIDITY_SAFE 2118 5.30 2.66 6.53 99 RELAYCOUNTRY_AU 2098 1.23 2.63 0.58 100 T_XMDrugObfuBody_08 2088 1.64 2.62 1.19 101 T_XMHurry_00 1989 1.45 2.50 0.97 102 RCVD_IN_MSPIKE_H5 1971 4.63 2.47 5.62 103 SUBJ_ALL_CAPS 1967 1.37 2.47 0.87 104 XMBody_17 1885 1.11 2.37 0.54 105 MIME_QP_LONG_LINE 1871 2.65 2.35 2.79 106 XM_B_Unsub2 1854 1.56 2.33 1.20 107 USER_IN_DEF_DKIM_WL 1852 13.22 2.32 18.25 108 XM_B_SpammyWords4 1774 1.15 2.23 0.66 109 RCVD_IN_XBL 1729 0.69 2.17 0.01 110 BOTNET_NORDNS 1723 0.69 2.16 0.01 111 XM_B_COPY_HTML 1688 1.41 2.12 1.09 112 TM2_M_URI_OPT_OUT 1682 1.80 2.11 1.66 113 KHOP_HELO_FCRDNS 1675 3.48 2.10 4.12 114 XMDiploma_00 1655 1.46 2.08 1.17 115 SpammyFromTLD_01 1642 0.95 2.06 0.44 116 MAILING_LIST_MULTI 1629 2.20 2.04 2.28 117 DKIM_ADSP_NXDOMAIN 1617 0.93 2.03 0.42 118 SCC_BODY_URI_ONLY 1589 2.35 1.99 2.51 119 RCVD_IN_MSPIKE_L5 1579 0.72 1.98 0.13 120 XMStockSpam_06 1558 1.83 1.95 1.77 121 TR_XM_PHPForged 1555 0.78 1.95 0.24 122 XM_B_URI_Unicode 1548 1.80 1.94 1.74 123 SpammyFromTLD_02 1548 0.74 1.94 0.19 124 RCVD_IN_VALIDITY_CERTIFIED 1545 4.17 1.94 5.20 125 SHOPIFY_IMG_NOT_RCVD_SFY 1543 0.89 1.94 0.40 126 TR_XM_PHPDW 1542 0.77 1.93 0.23 127 TR_XM_INV_DKIM 1526 0.74 1.91 0.20 128 TR_XM_FormFill2 1514 0.76 1.90 0.24 129 RCVD_IN_PSBL 1494 0.96 1.87 0.53 130 XM_H_PHPOS 1489 0.74 1.87 0.22 131 ANY_BOUNCE_MESSAGE 1428 7.04 1.79 9.46 132 BOUNCE_MESSAGE 1428 7.04 1.79 9.46 133 XMBrknScrpt_02 1414 1.41 1.77 1.25 134 BAYES_40 1357 4.51 1.70 5.80 135 TR_XM_MSPIKECOMBO2 1338 0.54 1.68 0.01 136 DIET_1 1314 0.96 1.65 0.64 137 TR_Mismatch_TLD_02 1297 0.56 1.63 0.07 138 RCVD_IN_SBL_CSS 1267 0.51 1.59 0.01 139 XM_HighProb1 1223 0.49 1.53 0.01 140 HTML_MIME_NO_HTML_TAG 1213 1.81 1.52 1.94 141 RCVD_IN_PBL 1201 0.83 1.51 0.52 142 TR_MetaPhish_Combo_01 1168 2.05 1.47 2.32 143 TR_XM_FormFill 1115 0.45 1.40 0.01 144 URI_NOVOWEL 1098 1.44 1.38 1.47 145 XM_H_PHPMailer 1080 1.11 1.36 0.99 146 TR_Mismatch_TLD_01 1056 0.58 1.33 0.23 147 URI_HEX 1056 1.01 1.33 0.86 148 T_REMOTE_IMAGE 1049 2.43 1.32 2.94 149 TR_XM_MaxSPIKE 1035 0.41 1.30 0.01 150 RDNS_DYNAMIC 1032 0.60 1.29 0.28 151 XM_DK_Undo_01 1025 1.43 1.29 1.50 152 XM_DIRTYINTL 997 0.50 1.25 0.15 153 MPART_ALT_DIFF_COUNT 993 0.80 1.25 0.59 154 XMBounce_01 990 0.40 1.24 0.02 155 PDS_RDNS_DYNAMIC_FP 988 0.43 1.24 0.06 156 XM_ProductURIs 981 1.66 1.23 1.86 157 TVD_RCVD_IP 980 1.35 1.23 1.41 158 BAYES_20 977 2.75 1.23 3.45 159 T_TooManySym_02 966 3.75 1.21 4.92 160 TR_LOTS_OF_MONEY3 965 0.57 1.21 0.27 161 HTTPS_HTTP_MISMATCH 963 0.67 1.21 0.43 162 URI_TRY_3LD 954 0.83 1.20 0.67 163 MISSING_HEADERS 937 0.54 1.18 0.25 164 HTML_TAG_BALANCE_BODY 927 1.02 1.16 0.95 165 HTML_FONT_TINY_NORDNS 921 0.42 1.16 0.09 166 RELAYCOUNTRY_TH 906 0.36 1.14 0.00 167 PLING_QUERY 893 0.69 1.12 0.50 168 MultiRelay_CC 885 0.43 1.11 0.11 169 XM_UB99 881 0.35 1.11 0.01 170 HTML_FONT_FACE_BAD 872 0.74 1.09 0.58 171 XPRIO 853 0.34 1.07 0.01 172 XMReplyNow 846 0.43 1.06 0.14 173 XMSubMetaI_00 835 1.08 1.05 1.09 174 XM_H_Long_From02 830 0.80 1.04 0.68 175 REPLYTO_WITHOUT_TO_CC 824 0.34 1.03 0.02 176 RCVD_IN_SBL 822 0.33 1.03 0.00 177 XM_B_DNDMA 819 0.94 1.03 0.90 178 HELO_DYNAMIC_SPLIT_IP 816 0.34 1.02 0.02 179 T_XMDrugObfuBody_00 807 0.84 1.01 0.76 180 FORGED_MUA_OUTLOOK 802 0.35 1.01 0.04 181 FSL_CTYPE_WIN1251 799 0.32 1.00 0.00 182 FSL_NEW_HELO_USER 798 0.32 1.00 0.00 183 XM_B_REG_HTML 797 0.45 1.00 0.19 184 TR_XM_Base64_L1 791 0.38 0.99 0.09 185 RCVD_IN_SBL_DROP 780 0.31 0.98 0.00 186 T_STY_INVIS_DIRECT 779 0.70 0.98 0.58 187 XM_SendGrid 776 1.08 0.97 1.13 188 XM_GoogleGroups 774 1.16 0.97 1.24 189 XMGenDplmaNmb 774 0.66 0.97 0.52 190 TR_XM_InvalidRelay 774 0.31 0.97 0.01 191 DKIM_ADSP_CUSTOM_MED 770 0.80 0.97 0.72 192 HTML_IMAGE_ONLY_20 736 0.49 0.92 0.29 193 FROM_MISSP_REPLYTO 736 0.29 0.92 0.00 194 TR_XM_RelayPhish 736 0.33 0.92 0.06 195 TO_NO_BRKTS_FROM_MSSP 732 0.30 0.92 0.01 196 NSL_RCVD_FROM_USER 729 0.29 0.91 0.00 197 THIS_AD 719 0.54 0.90 0.37 198 FROM_MISSPACED 705 0.28 0.88 0.00 199 TO_NO_BRKTS_MSFT 704 0.28 0.88 0.00 200 SUBJ_DOLLARS 694 0.45 0.87 0.25 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 172344 99.60 99.29 99.74 2 HTML_MESSAGE 146211 87.47 93.64 84.62 3 RELAYCOUNTRY_US 140847 80.95 79.72 81.52 4 DKIM_SIGNED 124048 76.72 87.40 71.79 5 XM_DK_Pass 122179 74.66 83.22 70.71 6 XM_B_Unicode 121542 74.85 84.63 70.34 7 DKIM_VALID 121337 74.12 82.56 70.22 8 BAYES_50 107642 54.25 36.81 62.30 9 DKIM_VALID_AU 103108 61.49 65.42 59.67 10 DCC_CHECK_NEGATIVE 88472 41.53 20.56 51.20 11 XMListUnsubscribeExists 87828 57.21 71.04 50.83 12 DCC_CHECK 84276 58.27 78.85 48.78 13 XM_B_SpammyWords 81932 54.01 68.31 47.42 14 XM_B_Unicode3 79483 47.10 49.47 46.00 15 HTML_FONT_LOW_CONTRAST 64220 37.31 37.60 37.17 16 LOC_TINY_FONT_1 56535 37.73 48.60 32.72 17 DKIM_VALID_EF 47137 28.10 29.87 27.28 18 T_TM2_M_HEADER_IN_MSG 46465 24.50 19.31 26.89 19 FVGT_m_MULTI_ODD 46063 28.37 32.06 26.66 20 XM_B_SpammyWords2 37934 26.93 37.73 21.95 21 XMSubLong 36981 21.21 20.79 21.40 22 MIME_HTML_ONLY 35798 23.44 29.35 20.72 23 T_KAM_HTML_FONT_INVALID 32639 22.20 29.38 18.89 24 USER_IN_DEF_DKIM_WL 31526 13.22 2.32 18.25 25 XM_Multi_Part_URI 28813 17.93 20.65 16.68 26 ALL_TRUSTED 26570 11.55 3.25 15.38 27 TR_XM_DK_Unsub 24520 17.34 24.18 14.19 28 UNPARSEABLE_RELAY 22963 14.78 18.02 13.29 29 XM_Evil_Numbers_Gen 22334 11.28 7.72 12.93 30 RCVD_IN_MSPIKE_WL 22161 11.55 8.78 12.83 31 RCVD_IN_MSPIKE_H2 21789 13.02 13.90 12.61 32 XM_B_Unsub 18639 12.89 17.44 10.79 33 FSL_BULK_SIG 18180 10.67 10.99 10.52 34 LotsOfNums_01 17652 9.21 7.01 10.22 35 ANY_BOUNCE_MESSAGE 16350 7.04 1.79 9.46 36 BOUNCE_MESSAGE 16348 7.04 1.79 9.46 37 BAYES_00 15742 6.37 0.42 9.11 38 XM_DKIMWhitelistDomains 15479 6.13 0.00 8.96 39 TR_XM_BayesUnsub 14501 11.06 16.84 8.39 40 T_TooManySym_01 13312 6.23 3.03 7.70 41 XM_B_Phish_Phrases 11916 7.00 7.24 6.90 42 TR_XM_DK_Bayes 11651 4.73 0.36 6.74 43 TR_XM_DK_Bayes1 11549 4.69 0.36 6.68 44 RCVD_IN_VALIDITY_SAFE 11276 5.30 2.66 6.53 45 HTML_IMAGE_ONLY_32 11244 4.49 0.10 6.51 46 XM_H_GMP 11197 6.06 5.14 6.48 47 XM_B_PhoneNumber 11129 5.96 4.93 6.44 48 BAYES_60 11088 6.95 8.09 6.42 49 TR_MAX_INTL_RELAY 10891 9.36 15.99 6.30 50 XM_B_SpammyWords3 10812 8.69 13.95 6.26 51 TM2_M_VERY_LONG_WORD 10628 5.14 2.95 6.15 52 TooManyTo_001 10556 5.50 4.19 6.11 53 IN_ZIMBRA_NJ_WHITELIST 10321 4.12 0.09 5.97 54 XM_DK_Undo_02 10238 17.18 41.58 5.93 55 TR_XM_DK_Bayes2 10031 4.06 0.28 5.81 56 BAYES_40 10024 4.51 1.70 5.80 57 XM_H_Long_From01 9739 5.62 5.57 5.64 58 RCVD_IN_MSPIKE_H5 9714 4.63 2.47 5.62 59 RCVD_IN_MSPIKE_H3 9263 5.39 5.44 5.36 60 XMStrtUSub 9227 5.32 5.26 5.34 61 RCVD_IN_VALIDITY_CERTIFIED 8978 4.17 1.94 5.20 62 HTML_IMAGE_RATIO_02 8663 5.67 7.10 5.01 63 LOTS_OF_MONEY 8605 6.36 9.35 4.98 64 XM_UncommonTLD01 8536 5.21 5.78 4.94 65 T_TooManySym_02 8493 3.75 1.21 4.92 66 MAY_BE_FORGED 8348 3.31 0.00 4.83 67 BAYES_99 8264 14.30 34.93 4.78 68 MPART_ALT_DIFF 7862 4.89 5.64 4.55 69 XMNumbers 7578 4.22 3.86 4.39 70 KHOP_HELO_FCRDNS 7111 3.48 2.10 4.12 71 XMSubMetaSx_00 6856 4.46 5.53 3.97 72 BAYES_999 6772 11.05 26.52 3.92 73 INVALID_MSGID 6660 2.78 0.47 3.85 74 BAYES_80 6451 5.61 9.68 3.73 75 HTML_IMAGE_RATIO_04 6389 4.01 4.69 3.70 76 TO_MALFORMED 6248 2.50 0.07 3.62 77 BOTNET_IPINHOSTNAME 6131 5.97 11.21 3.55 78 TR_XM_SpammyWords4 6016 5.00 8.29 3.48 79 BAYES_20 5967 2.75 1.23 3.45 80 HTML_IMAGE_RATIO_06 5935 3.45 3.48 3.43 81 RELAYCOUNTRY_META 5851 8.01 18.03 3.39 82 MIME_HTML_MOSTLY 5233 3.34 4.03 3.03 83 TR_XM_DKIM_Undo 5090 11.67 30.58 2.95 84 T_REMOTE_IMAGE 5087 2.43 1.32 2.94 85 MIME_QP_LONG_LINE 4823 2.65 2.35 2.79 86 XM_CamelCaseFrm001 4651 3.25 4.45 2.69 87 XM_B_SpammyTLD 4513 2.93 3.61 2.61 88 BAYES_95 4437 3.62 5.89 2.57 89 SCC_BODY_URI_ONLY 4334 2.35 1.99 2.51 90 MIME_HTML_ONLY_MULTI 4289 2.65 3.00 2.48 91 XM_Body_Dirty_Words 4287 4.26 8.12 2.48 92 T_XMDrugObfuBody_14 4103 3.15 4.84 2.37 93 TooManyTo_002 4053 1.80 0.63 2.35 94 TR_MetaPhish_Combo_01 4005 2.05 1.47 2.32 95 MAILING_LIST_MULTI 3937 2.20 2.04 2.28 96 T_TVD_MIME_NO_HEADERS 3848 1.54 0.04 2.23 97 MIME_CHARSET_FARAWAY 3786 1.65 0.46 2.19 98 TR_DCC_Bayes_99 3774 9.76 26.19 2.18 99 FROM_EXCESS_BASE64 3561 2.25 2.67 2.06 100 XM_PDF 3524 1.54 0.46 2.04 101 TR_XM_UnparsRelay 3471 4.65 10.38 2.01 102 CHARSET_FARAWAY_HEADER 3442 1.43 0.21 1.99 103 HTML_MIME_NO_HTML_TAG 3351 1.81 1.52 1.94 104 RCVD_IN_IADB_LISTED 3343 1.55 0.72 1.93 105 XM_ProductURIs 3221 1.66 1.23 1.86 106 RCVD_IN_MSPIKE_H4 3184 1.53 0.86 1.84 107 TR_XM_PhishingBody 3173 2.90 5.21 1.84 108 BAYES_05 3169 1.47 0.67 1.83 109 TR_XM_SpammyRelay 3122 5.09 12.19 1.81 110 XMGappySubj_01 3076 1.27 0.16 1.78 111 XMStockSpam_06 3065 1.83 1.95 1.77 112 RCVD_IN_IADB_SPF 3023 1.40 0.64 1.75 113 XM_B_URI_Unicode 3009 1.80 1.94 1.74 114 HTML_IMAGE_RATIO_08 2926 2.18 3.23 1.69 115 TM2_M_URI_OPT_OUT 2862 1.80 2.11 1.66 116 XMSexyCombo_05 2801 2.62 4.77 1.62 117 T_TooManySym_03 2773 1.34 0.77 1.60 118 RCVD_IN_IADB_SENDERID 2769 1.29 0.62 1.60 119 RCVD_IN_IADB_DK 2719 1.27 0.62 1.57 120 DKIM_INVALID 2711 2.60 4.84 1.57 121 UNTRUSTED_Relay 2609 3.28 7.11 1.51 122 TVD_SPACE_RATIO 2607 1.11 0.23 1.51 123 IN_HORDE_ADDRESS_BOOK 2596 1.06 0.11 1.50 124 XM_DK_Undo_01 2588 1.43 1.29 1.50 125 URI_OPTOUT_3LD 2564 1.25 0.73 1.48 126 URI_NOVOWEL 2539 1.44 1.38 1.47 127 XMGappySubj_02 2490 1.01 0.06 1.44 128 XM_B_Investor 2474 2.25 4.02 1.43 129 TVD_RCVD_IP 2429 1.35 1.23 1.41 130 XMBdyGiftCard01 2243 1.08 0.62 1.30 131 XMBrknScrpt_02 2153 1.41 1.77 1.25 132 XM_GoogleGroups 2151 1.16 0.97 1.24 133 RCVD_IN_IADB_VOUCHED 2112 0.93 0.29 1.22 134 XM_B_Unsub2 2082 1.56 2.33 1.20 135 TR_Symld_Words 2076 1.05 0.73 1.20 136 BOTNET 2059 3.86 9.66 1.19 137 T_XMDrugObfuBody_08 2057 1.64 2.62 1.19 138 XMDiploma_00 2029 1.46 2.08 1.17 139 TR_XM_SpammyWords5 1976 1.99 3.82 1.14 140 XM_SendGrid 1951 1.08 0.97 1.13 141 RELAYCOUNTRY_CA 1932 3.16 7.58 1.12 142 XM_OfRef6 1923 1.96 3.78 1.11 143 XMSubMetaI_00 1885 1.08 1.05 1.09 144 XM_B_COPY_HTML 1879 1.41 2.12 1.09 145 TooManyTo_003 1725 0.87 0.58 1.00 146 XM_B_FormFill 1712 0.70 0.06 0.99 147 XM_H_PHPMailer 1710 1.11 1.36 0.99 148 XM_SPF_SoftFail 1697 1.54 2.76 0.98 149 XMBSHREFv2 1670 0.78 0.39 0.97 150 T_XMHurry_00 1669 1.45 2.50 0.97 151 HTML_TAG_BALANCE_BODY 1638 1.02 1.16 0.95 152 T_FILL_THIS_FORM_SHORT 1605 2.09 4.62 0.93 153 XM_B_DNDMA 1563 0.94 1.03 0.90 154 RCVD_IN_IADB_OPTIN 1553 0.68 0.20 0.90 155 XM_UB50 1543 1.73 3.54 0.89 156 SUBJ_ALL_CAPS 1497 1.37 2.47 0.87 157 URI_HEX 1485 1.01 1.33 0.86 158 TR_XM_DK_SendGrid 1376 0.75 0.64 0.80 159 XMSlimDrugH 1376 0.74 0.60 0.80 160 TR_XM_SpammyWords2 1346 4.54 12.71 0.78 161 T_XMDrugObfuBody_00 1314 0.84 1.01 0.76 162 TooManyTo_004 1289 0.68 0.55 0.75 163 MSGID_FROM_MTA_HEADER 1278 0.55 0.13 0.74 164 DKIM_ADSP_CUSTOM_MED 1248 0.80 0.97 0.72 165 RCVD_IN_BL_SPAMCOP_NET 1220 3.56 9.73 0.71 166 TM2_M_OBFU_COMMENT 1214 0.68 0.64 0.70 167 XMBody_95 1191 0.49 0.07 0.69 168 XM_H_Long_From02 1181 0.80 1.04 0.68 169 URI_TRY_3LD 1154 0.83 1.20 0.67 170 TR_XM_MSPIKECOMBO 1138 2.53 6.60 0.66 171 RCVD_IN_MSPIKE_BL 1138 2.54 6.63 0.66 172 XM_B_SpammyWords4 1132 1.15 2.23 0.66 173 DIET_1 1113 0.96 1.65 0.64 174 TooManyTo_005 1112 0.61 0.53 0.64 175 XMPhish30 1085 1.32 2.82 0.63 176 TR_XM_Base64_M1 1070 0.66 0.73 0.62 177 MPART_ALT_DIFF_COUNT 1016 0.80 1.25 0.59 178 XMNoVowels 1011 0.47 0.23 0.59 179 RELAYCOUNTRY_AU 1002 1.23 2.63 0.58 180 HTML_FONT_FACE_BAD 997 0.74 1.09 0.58 181 T_STY_INVIS_DIRECT 997 0.70 0.98 0.58 182 XM_URI_RBL 969 1.40 3.23 0.56 183 USER_IN_WELCOMELIST 942 0.37 0.00 0.55 184 USER_IN_WHITELIST 942 0.37 0.00 0.55 185 XMLngstWrd_00 931 0.47 0.33 0.54 186 XMBody_17 928 1.11 2.37 0.54 187 HTML_EXTRA_CLOSE 923 0.39 0.07 0.53 188 RCVD_IN_PSBL 919 0.96 1.87 0.53 189 RCVD_IN_PBL 903 0.83 1.51 0.52 190 RCVD_IN_MSPIKE_L3 896 1.62 4.02 0.52 191 XMGenDplmaNmb 895 0.66 0.97 0.52 192 XMSolicitRefs_0 868 0.56 0.69 0.50 193 PLING_QUERY 860 0.69 1.12 0.50 194 HTML_TAG_BALANCE_CENTER 859 0.49 0.47 0.50 195 T_TooManySym_04 859 0.40 0.20 0.50 196 XMHTML_After_End 819 0.51 0.59 0.47 197 FORGED_GMAIL_RCVD 806 0.57 0.80 0.47 198 AD_PREFS 799 0.36 0.14 0.46 199 XMPhish14 787 0.50 0.58 0.46 200 XMLngstWrd_01 774 0.39 0.26 0.45 ----------------------------------------------------------------------