Email: 266425 Autolearn: 0 AvgScore: 5.43 AvgScanTime: 1.40 sec Spam: 94494 Autolearn: 0 AvgScore: 14.18 AvgScanTime: 1.48 sec Ham: 171931 Autolearn: 0 AvgScore: 0.62 AvgScanTime: 1.36 sec Time Spent Running SA: 103.82 hours Time Spent Processing Spam: 38.76 hours Time Spent Processing Ham: 65.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 94033 99.61 99.51 99.67 2 HTML_MESSAGE 90314 88.43 95.58 84.50 3 DKIM_SIGNED 84651 80.80 89.58 75.97 4 XM_DK_Pass 80372 78.58 85.06 75.02 5 DKIM_VALID 80009 78.12 84.67 74.52 6 XM_B_Unicode 79476 75.75 84.11 71.16 7 RELAYCOUNTRY_US 75927 81.06 80.35 81.44 8 DCC_CHECK 75855 60.66 80.27 49.88 9 XM_B_SpammyWords 64939 54.74 68.72 47.05 10 XMListUnsubscribeExists 64213 58.85 67.95 53.85 11 DKIM_VALID_AU 64050 65.22 67.78 63.82 12 XM_B_Unicode3 49777 47.60 52.68 44.80 13 LOC_TINY_FONT_1 45976 38.47 48.65 32.87 14 XM_DK_Undo_02 41808 19.91 44.24 6.53 15 XM_B_SpammyWords2 37460 28.92 39.64 23.02 16 BAYES_50 34763 51.89 36.79 60.19 17 HTML_FONT_LOW_CONTRAST 34644 33.39 36.66 31.59 18 BAYES_99 34035 16.00 36.02 4.99 19 FVGT_m_MULTI_ODD 31950 31.05 33.81 29.53 20 TR_XM_DKIM_Undo 30260 12.90 32.02 2.39 21 DKIM_VALID_EF 29071 30.18 30.76 29.85 22 MIME_HTML_ONLY 28850 25.81 30.53 23.21 23 T_KAM_HTML_FONT_INVALID 28603 24.31 30.27 21.04 24 BAYES_999 26715 12.58 28.27 3.96 25 TR_DCC_Bayes_99 26181 11.16 27.71 2.06 26 TR_XM_DK_Unsub 22435 19.07 23.74 16.50 27 XM_B_Unsub 21146 16.50 22.38 13.28 28 XM_Multi_Part_URI 20397 18.33 21.59 16.54 29 TR_XM_BayesUnsub 20107 13.22 21.28 8.80 30 XMSubLong 19999 22.05 21.16 22.53 31 T_TM2_M_HEADER_IN_MSG 18733 23.30 19.82 25.21 32 RELAYCOUNTRY_META 18662 9.24 19.75 3.47 33 DCC_CHECK_NEGATIVE 18248 39.18 19.31 50.10 34 UNPARSEABLE_RELAY 17285 15.42 18.29 13.84 35 RCVD_IN_MSPIKE_H2 15545 14.98 16.45 14.17 36 XM_B_SpammyWords3 14568 9.71 15.42 6.57 37 TR_MAX_INTL_RELAY 13777 9.59 14.58 6.85 38 BOTNET_IPINHOSTNAME 13256 7.49 14.03 3.90 39 TR_XM_SpammyRelay 13024 6.27 13.78 2.14 40 TR_XM_SpammyWords2 12713 5.15 13.45 0.59 41 FSL_BULK_SIG 12422 11.89 13.15 11.19 42 RCVD_IN_BL_SPAMCOP_NET 10943 4.53 11.58 0.65 43 BOTNET 10688 5.01 11.31 1.55 44 TR_XM_UnparsRelay 9924 5.11 10.50 2.14 45 LOTS_OF_MONEY 9166 7.13 9.70 5.71 46 BAYES_80 8445 5.82 8.94 4.10 47 TR_XM_SpammyWords4 8251 5.76 8.73 4.13 48 HTML_IMAGE_RATIO_02 8187 6.65 8.66 5.54 49 XM_B_Phish_Phrases 8028 6.94 8.50 6.09 50 RCVD_IN_MSPIKE_BL 7732 3.37 8.18 0.72 51 TR_XM_MSPIKECOMBO 7729 3.37 8.18 0.72 52 BAYES_60 7636 7.40 8.08 7.03 53 XM_Body_Dirty_Words 7618 4.44 8.06 2.46 54 RELAYCOUNTRY_CA 7329 3.46 7.76 1.10 55 XM_Evil_Numbers_Gen 7143 8.72 7.56 9.36 56 MPART_ALT_DIFF 6987 5.77 7.39 4.88 57 RCVD_IN_MSPIKE_WL 6968 12.49 7.37 15.30 58 UNTRUSTED_Relay 6931 3.60 7.33 1.54 59 RCVD_IN_VALIDITY_RPBL 6337 2.57 6.71 0.29 60 TR_XM_NoHeaderRelay 5753 2.31 6.09 0.24 61 XMSubMetaSx_00 5680 4.35 6.01 3.44 62 XM_H_Long_From01 5274 5.41 5.58 5.32 63 XM_H_GMP 5181 5.89 5.48 6.11 64 XMSexyCombo_05 5167 2.93 5.47 1.54 65 XM_UncommonTLD01 5144 5.09 5.44 4.90 66 LotsOfNums_01 5116 6.37 5.41 6.89 67 TooManyTo_001 5053 6.93 5.35 7.79 68 BAYES_95 4998 3.65 5.29 2.75 69 TR_XM_SpammyWords3 4745 1.98 5.02 0.31 70 XMStrtUSub 4706 6.07 4.98 6.67 71 DKIM_INVALID 4642 2.68 4.91 1.45 72 MIME_QP_LONG_LINE 4617 3.91 4.89 3.37 73 TR_XM_PhishingBody 4606 3.09 4.87 2.11 74 XM_CamelCaseFrm001 4601 3.06 4.87 2.07 75 DKIM_ADSP_NXDOMAIN 4278 1.88 4.53 0.43 76 XM_B_Investor 4155 2.59 4.40 1.59 77 MIME_HTML_MOSTLY 4150 3.34 4.39 2.76 78 XM_B_PhoneNumber 4135 7.06 4.38 8.53 79 HTML_IMAGE_RATIO_04 4127 4.10 4.37 3.95 80 T_XMDrugObfuBody_14 4087 2.96 4.33 2.21 81 XM_UB50 3904 2.00 4.13 0.84 82 XM_OfRef6 3749 2.16 3.97 1.17 83 RCVD_IN_MSPIKE_L3 3619 1.62 3.83 0.41 84 XMNumbers 3592 5.46 3.80 6.36 85 RCVD_IN_MSPIKE_H3 3501 5.39 3.70 6.32 86 HTML_IMAGE_RATIO_06 3493 3.82 3.70 3.89 87 XM_B_SpammyTLD 3489 3.03 3.69 2.67 88 MIME_HTML_ONLY_MULTI 3419 3.11 3.62 2.84 89 XM_H_Long_From02 3253 1.79 3.44 0.88 90 TM2_M_VERY_LONG_WORD 3128 2.32 3.31 1.77 91 USER_IN_DEF_DKIM_WL 3064 13.15 3.24 18.59 92 XM_URI_RBL 3027 1.42 3.20 0.44 93 TR_XM_SpammyWords5 2955 1.91 3.13 1.24 94 TR_XM_SPAMCOP 2906 1.18 3.08 0.14 95 XM_B_Unsub2 2898 2.01 3.07 1.43 96 TR_MetaPhish_Combo_01 2874 2.61 3.04 2.37 97 TM2_M_URI_OPT_OUT 2761 2.31 2.92 1.97 98 RCVD_IN_VALIDITY_SAFE 2756 5.16 2.92 6.39 99 BOUNCE_MESSAGE 2618 3.67 2.77 4.16 100 ANY_BOUNCE_MESSAGE 2618 3.67 2.77 4.16 101 ALL_TRUSTED 2578 10.96 2.73 15.49 102 RCVD_IN_MSPIKE_L5 2480 1.12 2.62 0.29 103 XM_SPF_SoftFail 2468 1.59 2.61 1.03 104 RELAYCOUNTRY_AU 2463 1.42 2.61 0.77 105 XMBody_17 2428 1.13 2.57 0.35 106 XM_B_SpammyWords4 2340 1.27 2.48 0.60 107 T_FILL_THIS_FORM_SHORT 2301 1.25 2.44 0.59 108 XMBrknScrpt_02 2229 1.45 2.36 0.95 109 FROM_EXCESS_BASE64 2220 2.15 2.35 2.04 110 XMBounce_01 2108 0.80 2.23 0.02 111 RELAYCOUNTRY_TH 2091 0.79 2.21 0.00 112 RCVD_IN_VALIDITY_CERTIFIED 2051 3.97 2.17 4.96 113 XMDiploma_00 2039 1.48 2.16 1.11 114 HTML_IMAGE_RATIO_08 2023 1.96 2.14 1.85 115 T_XMDrugObfuBody_08 1998 1.53 2.11 1.22 116 T_TooManySym_01 1993 5.33 2.11 7.11 117 T_XMHurry_00 1926 1.21 2.04 0.75 118 SpammyFromTLD_02 1870 0.83 1.98 0.21 119 RCVD_IN_MSPIKE_H4 1824 2.43 1.93 2.70 120 TR_XM_INV_DKIM 1788 0.77 1.89 0.16 121 XM_B_URI_Unicode 1743 1.58 1.84 1.44 122 BAYES_40 1655 3.72 1.75 4.80 123 RCVD_IN_MSPIKE_H5 1643 4.66 1.74 6.27 124 XMStockSpam_06 1637 1.61 1.73 1.55 125 TR_XM_FormFill2 1634 0.81 1.73 0.30 126 RCVD_IN_MSPIKE_L4 1630 0.63 1.72 0.03 127 TR_XM_PHPDW 1627 0.80 1.72 0.30 128 TR_XM_PHPForged 1623 0.81 1.72 0.32 129 DIET_1 1618 0.86 1.71 0.39 130 SpammyFromTLD_01 1606 0.85 1.70 0.38 131 XM_H_PHPOS 1593 0.78 1.69 0.29 132 MAILING_LIST_MULTI 1587 1.99 1.68 2.16 133 XM_SendGrid 1566 1.36 1.66 1.19 134 RELAYCOUNTRY_CN 1520 0.59 1.61 0.03 135 XM_HighProb1 1503 0.57 1.59 0.00 136 XMBdyGiftCard01 1502 1.50 1.59 1.44 137 XMPhish30 1493 1.05 1.58 0.75 138 SHOPIFY_IMG_NOT_RCVD_SFY 1488 0.79 1.57 0.35 139 XM_B_DNDMA 1484 1.06 1.57 0.78 140 TR_XM_MSPIKECOMBO2 1461 0.55 1.55 0.01 141 RCVD_IN_PSBL 1444 0.80 1.53 0.40 142 XM_ProductURIs 1427 1.04 1.51 0.78 143 HK_RANDOM_REPLYTO 1423 0.66 1.51 0.19 144 XM_DIRTYINTL 1418 0.57 1.50 0.06 145 TR_LOTS_OF_MONEY3 1417 0.70 1.50 0.27 146 URI_HEX 1414 1.13 1.50 0.92 147 XM_B_COPY_HTML 1413 1.13 1.50 0.92 148 T_REMOTE_IMAGE 1387 2.61 1.47 3.23 149 RDNS_DYNAMIC 1376 0.72 1.46 0.31 150 XM_H_DKIM_GOOG 1374 0.53 1.45 0.02 151 BAYES_20 1347 2.51 1.43 3.11 152 XM_DK_Undo_01 1345 1.41 1.42 1.41 153 SUBJ_ALL_CAPS 1345 1.09 1.42 0.90 154 URI_TRY_3LD 1342 0.91 1.42 0.63 155 SCC_CANSPAM_2 1283 0.48 1.36 0.00 156 KHOP_HELO_FCRDNS 1268 1.25 1.34 1.20 157 XMBody_78 1258 0.66 1.33 0.29 158 MPART_ALT_DIFF_COUNT 1238 0.83 1.31 0.57 159 DKIM_ADSP_CUSTOM_MED 1237 0.97 1.31 0.78 160 URI_NOVOWEL 1192 1.56 1.26 1.72 161 XPRIO 1190 0.45 1.26 0.00 162 PDS_RDNS_DYNAMIC_FP 1168 0.46 1.24 0.04 163 TVD_RCVD_IP 1140 1.20 1.21 1.20 164 XM_B_Phish66 1130 0.62 1.20 0.31 165 SCC_BODY_URI_ONLY 1116 2.17 1.18 2.71 166 NML_ADSP_CUSTOM_MED 1089 0.74 1.15 0.52 167 HTML_IMAGE_ONLY_20 1078 0.63 1.14 0.35 168 TR_LOTS_OF_MONEY2 1058 0.66 1.12 0.41 169 XMReplyNow 1058 0.56 1.12 0.26 170 T_MONEY_PERCENT 1058 0.66 1.12 0.41 171 XM_H_PHPMailer 1054 1.04 1.12 1.00 172 FORGED_GMAIL_RCVD 1037 0.69 1.10 0.47 173 XM_UB60 1032 0.44 1.09 0.08 174 RCVD_IN_XBL 1014 0.38 1.07 0.00 175 T_XMDrugObfuBody_00 1014 0.74 1.07 0.56 176 HTML_MIME_NO_HTML_TAG 1013 1.51 1.07 1.75 177 FVGT_m_MULTI_ODD_EMAIL 1012 0.41 1.07 0.04 178 TR_XM_MaxSPIKE 994 0.37 1.05 0.00 179 XMSexyCombo_01 990 0.48 1.05 0.17 180 BOTNET_NORDNS 989 0.38 1.05 0.01 181 TR_XM_RelayPhish 988 0.41 1.05 0.06 182 HTML_TAG_BALANCE_BODY 986 0.84 1.04 0.73 183 TR_Mismatch_TLD_02 960 0.40 1.02 0.06 184 HELO_DYNAMIC_SPLIT_IP 951 0.36 1.01 0.00 185 SH_BODYURI_REVERSE_CSS 950 0.37 1.01 0.02 186 XMSlimDrugH 948 0.68 1.00 0.50 187 URIBL_CSS 945 0.37 1.00 0.02 188 URIBL_CSS_A 945 0.37 1.00 0.02 189 T_STY_INVIS_DIRECT 944 0.72 1.00 0.57 190 PLING_QUERY 935 0.69 0.99 0.53 191 RCVD_IN_SBL_CSS 920 0.37 0.97 0.04 192 XMGenDplmaNmb 905 0.62 0.96 0.43 193 THIS_AD 904 0.50 0.96 0.26 194 XMSubMetaI_00 897 0.73 0.95 0.61 195 LongTLD 890 0.52 0.94 0.28 196 TR_XM_FormFill 885 0.34 0.94 0.01 197 XM_B_REG_HTML 879 0.49 0.93 0.25 198 XMPhish11 879 0.40 0.93 0.11 199 HTTPS_HTTP_MISMATCH 847 0.58 0.90 0.41 200 TR_XM_DK_SendGrid 842 0.82 0.89 0.78 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 171357 99.61 99.51 99.67 2 HTML_MESSAGE 145277 88.43 95.58 84.50 3 RELAYCOUNTRY_US 140025 81.06 80.35 81.44 4 DKIM_SIGNED 130608 80.80 89.58 75.97 5 XM_DK_Pass 128978 78.58 85.06 75.02 6 DKIM_VALID 128115 78.12 84.67 74.52 7 XM_B_Unicode 122339 75.75 84.11 71.16 8 DKIM_VALID_AU 109722 65.22 67.78 63.82 9 BAYES_50 103481 51.89 36.79 60.19 10 XMListUnsubscribeExists 92579 58.85 67.95 53.85 11 DCC_CHECK_NEGATIVE 86135 39.18 19.31 50.10 12 DCC_CHECK 85753 60.66 80.27 49.88 13 XM_B_SpammyWords 80891 54.74 68.72 47.05 14 XM_B_Unicode3 77031 47.60 52.68 44.80 15 LOC_TINY_FONT_1 56510 38.47 48.65 32.87 16 HTML_FONT_LOW_CONTRAST 54309 33.39 36.66 31.59 17 DKIM_VALID_EF 51328 30.18 30.76 29.85 18 FVGT_m_MULTI_ODD 50765 31.05 33.81 29.53 19 T_TM2_M_HEADER_IN_MSG 43343 23.30 19.82 25.21 20 MIME_HTML_ONLY 39909 25.81 30.53 23.21 21 XM_B_SpammyWords2 39587 28.92 39.64 23.02 22 XMSubLong 38744 22.05 21.16 22.53 23 T_KAM_HTML_FONT_INVALID 36175 24.31 30.27 21.04 24 USER_IN_DEF_DKIM_WL 31968 13.15 3.24 18.59 25 XM_Multi_Part_URI 28439 18.33 21.59 16.54 26 TR_XM_DK_Unsub 28363 19.07 23.74 16.50 27 ALL_TRUSTED 26634 10.96 2.73 15.49 28 RCVD_IN_MSPIKE_WL 26298 12.49 7.37 15.30 29 RCVD_IN_MSPIKE_H2 24361 14.98 16.45 14.17 30 UNPARSEABLE_RELAY 23790 15.42 18.29 13.84 31 XM_B_Unsub 22824 16.50 22.38 13.28 32 BAYES_00 19428 7.48 0.53 11.30 33 FSL_BULK_SIG 19245 11.89 13.15 11.19 34 XM_DKIMWhitelistDomains 16884 6.34 0.00 9.82 35 XM_Evil_Numbers_Gen 16091 8.72 7.56 9.36 36 TR_XM_BayesUnsub 15123 13.22 21.28 8.80 37 XM_B_PhoneNumber 14665 7.06 4.38 8.53 38 TooManyTo_001 13400 6.93 5.35 7.79 39 TR_XM_DK_Bayes 12589 4.88 0.44 7.32 40 TR_XM_DK_Bayes1 12468 4.84 0.44 7.25 41 T_TooManySym_01 12219 5.33 2.11 7.11 42 BAYES_60 12083 7.40 8.08 7.03 43 LotsOfNums_01 11846 6.37 5.41 6.89 44 TR_MAX_INTL_RELAY 11771 9.59 14.58 6.85 45 XMStrtUSub 11474 6.07 4.98 6.67 46 XM_B_SpammyWords3 11297 9.71 15.42 6.57 47 XM_DK_Undo_02 11230 19.91 44.24 6.53 48 RCVD_IN_VALIDITY_SAFE 10986 5.16 2.92 6.39 49 XMNumbers 10942 5.46 3.80 6.36 50 RCVD_IN_MSPIKE_H3 10870 5.39 3.70 6.32 51 RCVD_IN_MSPIKE_H5 10780 4.66 1.74 6.27 52 TR_XM_DK_Bayes2 10667 4.13 0.37 6.20 53 XM_H_GMP 10513 5.89 5.48 6.11 54 XM_B_Phish_Phrases 10464 6.94 8.50 6.09 55 LOTS_OF_MONEY 9817 7.13 9.70 5.71 56 HTML_IMAGE_RATIO_02 9518 6.65 8.66 5.54 57 XM_H_Long_From01 9144 5.41 5.58 5.32 58 BAYES_99 8582 16.00 36.02 4.99 59 RCVD_IN_VALIDITY_CERTIFIED 8520 3.97 2.17 4.96 60 XM_UncommonTLD01 8425 5.09 5.44 4.90 61 MPART_ALT_DIFF 8382 5.77 7.39 4.88 62 BAYES_40 8259 3.72 1.75 4.80 63 T_TooManySym_02 7514 3.08 0.74 4.37 64 TooManyTo_002 7206 2.94 0.65 4.19 65 ANY_BOUNCE_MESSAGE 7148 3.67 2.77 4.16 66 BOUNCE_MESSAGE 7147 3.67 2.77 4.16 67 TR_XM_SpammyWords4 7103 5.76 8.73 4.13 68 BAYES_80 7049 5.82 8.94 4.10 69 BAYES_999 6804 12.58 28.27 3.96 70 HTML_IMAGE_RATIO_04 6796 4.10 4.37 3.95 71 INVALID_MSGID 6717 2.63 0.32 3.91 72 BOTNET_IPINHOSTNAME 6709 7.49 14.03 3.90 73 HTML_IMAGE_RATIO_06 6687 3.82 3.70 3.89 74 TO_MALFORMED 6265 2.36 0.02 3.64 75 RELAYCOUNTRY_META 5965 9.24 19.75 3.47 76 XMSubMetaSx_00 5918 4.35 6.01 3.44 77 MIME_QP_LONG_LINE 5802 3.91 4.89 3.37 78 T_REMOTE_IMAGE 5558 2.61 1.47 3.23 79 BAYES_20 5352 2.51 1.43 3.11 80 XM_B_FormFill 4995 1.88 0.02 2.91 81 MIME_HTML_ONLY_MULTI 4880 3.11 3.62 2.84 82 MIME_HTML_MOSTLY 4746 3.34 4.39 2.76 83 BAYES_95 4721 3.65 5.29 2.75 84 SCC_BODY_URI_ONLY 4662 2.17 1.18 2.71 85 RCVD_IN_MSPIKE_H4 4648 2.43 1.93 2.70 86 XM_B_SpammyTLD 4596 3.03 3.69 2.67 87 RCVD_IN_IADB_LISTED 4388 1.92 0.76 2.55 88 XM_Body_Dirty_Words 4223 4.44 8.06 2.46 89 TR_XM_DKIM_Undo 4103 12.90 32.02 2.39 90 TR_MetaPhish_Combo_01 4069 2.61 3.04 2.37 91 RCVD_IN_IADB_SPF 3978 1.74 0.68 2.31 92 T_XMDrugObfuBody_14 3807 2.96 4.33 2.21 93 XM_PDF 3749 1.57 0.45 2.18 94 MAILING_LIST_MULTI 3715 1.99 1.68 2.16 95 TR_XM_SpammyRelay 3681 6.27 13.78 2.14 96 TR_XM_UnparsRelay 3679 5.11 10.50 2.14 97 TR_XM_PhishingBody 3633 3.09 4.87 2.11 98 RCVD_IN_IADB_SENDERID 3611 1.59 0.66 2.10 99 RCVD_IN_IADB_DK 3562 1.57 0.66 2.07 100 XM_CamelCaseFrm001 3554 3.06 4.87 2.07 101 TR_DCC_Bayes_99 3548 11.16 27.71 2.06 102 FROM_EXCESS_BASE64 3507 2.15 2.35 2.04 103 TM2_M_URI_OPT_OUT 3392 2.31 2.92 1.97 104 HTML_IMAGE_RATIO_08 3187 1.96 2.14 1.85 105 TM2_M_VERY_LONG_WORD 3043 2.32 3.31 1.77 106 HTML_MIME_NO_HTML_TAG 3016 1.51 1.07 1.75 107 T_TooManySym_03 2983 1.26 0.39 1.73 108 BAYES_05 2971 1.40 0.79 1.73 109 URI_NOVOWEL 2955 1.56 1.26 1.72 110 IN_HORDE_ADDRESS_BOOK 2775 1.07 0.09 1.61 111 RCVD_IN_IADB_VOUCHED 2756 1.14 0.29 1.60 112 XM_B_Investor 2740 2.59 4.40 1.59 113 BOTNET 2669 5.01 11.31 1.55 114 XMStockSpam_06 2661 1.61 1.73 1.55 115 TVD_SPACE_RATIO 2648 1.05 0.15 1.54 116 UNTRUSTED_Relay 2647 3.60 7.33 1.54 117 XMSexyCombo_05 2646 2.93 5.47 1.54 118 URI_OPTOUT_3LD 2493 1.19 0.72 1.45 119 DKIM_INVALID 2493 2.68 4.91 1.45 120 XMBdyGiftCard01 2482 1.50 1.59 1.44 121 XM_B_URI_Unicode 2468 1.58 1.84 1.44 122 T_TVD_MIME_NO_HEADERS 2461 0.97 0.12 1.43 123 XM_B_Unsub2 2459 2.01 3.07 1.43 124 XM_DK_Undo_01 2416 1.41 1.42 1.41 125 XMGappySubj_01 2374 1.00 0.30 1.38 126 LOW_PRICE 2252 1.09 0.69 1.31 127 TR_XM_SpammyWords5 2134 1.91 3.13 1.24 128 T_XMDrugObfuBody_08 2089 1.53 2.11 1.22 129 TVD_RCVD_IP 2070 1.20 1.21 1.20 130 KHOP_HELO_FCRDNS 2069 1.25 1.34 1.20 131 XM_SendGrid 2047 1.36 1.66 1.19 132 TR_Symld_Words 2026 1.01 0.69 1.18 133 RCVD_IN_IADB_OPTIN 2004 0.82 0.18 1.17 134 XM_OfRef6 2004 2.16 3.97 1.17 135 HTML_EXTRA_CLOSE 1964 0.76 0.06 1.14 136 XMDiploma_00 1912 1.48 2.16 1.11 137 RELAYCOUNTRY_CA 1897 3.46 7.76 1.10 138 XM_GoogleGroups 1897 1.01 0.84 1.10 139 XM_SPF_SoftFail 1774 1.59 2.61 1.03 140 XM_H_PHPMailer 1715 1.04 1.12 1.00 141 TooManyTo_003 1691 0.85 0.60 0.98 142 XMBrknScrpt_02 1641 1.45 2.36 0.95 143 XM_B_COPY_HTML 1589 1.13 1.50 0.92 144 URI_HEX 1588 1.13 1.50 0.92 145 XMBSHREFv2 1563 0.76 0.48 0.91 146 SUBJ_ALL_CAPS 1546 1.09 1.42 0.90 147 XM_H_Long_From02 1512 1.79 3.44 0.88 148 TR_XM_Base64_M1 1508 0.84 0.78 0.88 149 FILL_THIS_FORM 1485 0.76 0.57 0.86 150 XM_UB50 1436 2.00 4.13 0.84 151 XMLngstWrd_00 1399 0.66 0.39 0.81 152 XMGappySubj_02 1395 0.54 0.05 0.81 153 TM2_M_OBFU_COMMENT 1388 0.82 0.85 0.81 154 XM_ProductURIs 1349 1.04 1.51 0.78 155 DKIM_ADSP_CUSTOM_MED 1348 0.97 1.31 0.78 156 XM_B_DNDMA 1340 1.06 1.57 0.78 157 TR_XM_DK_SendGrid 1334 0.82 0.89 0.78 158 RELAYCOUNTRY_AU 1316 1.42 2.61 0.77 159 TooManyTo_004 1309 0.70 0.58 0.76 160 T_XMHurry_00 1294 1.21 2.04 0.75 161 XMPhish30 1293 1.05 1.58 0.75 162 HTML_TAG_BALANCE_BODY 1249 0.84 1.04 0.73 163 RCVD_IN_MSPIKE_BL 1245 3.37 8.18 0.72 164 TR_XM_MSPIKECOMBO 1245 3.37 8.18 0.72 165 FILL_THIS_FORM_LONG 1210 0.52 0.19 0.70 166 TooManyTo_005 1129 0.62 0.56 0.66 167 RCVD_IN_BL_SPAMCOP_NET 1119 4.53 11.58 0.65 168 XMClaimOffer 1115 0.60 0.52 0.65 169 XMPhish08 1106 0.68 0.74 0.64 170 FONT_INVIS_MSGID 1094 0.44 0.08 0.64 171 URI_TRY_3LD 1076 0.91 1.42 0.63 172 XMSubMetaI_00 1053 0.73 0.95 0.61 173 XMBody_95 1043 0.42 0.09 0.61 174 XMNoVowels 1040 0.62 0.65 0.60 175 XM_B_SpammyWords4 1040 1.27 2.48 0.60 176 T_FILL_THIS_FORM_SHORT 1021 1.25 2.44 0.59 177 USER_IN_WELCOMELIST 1019 0.38 0.00 0.59 178 USER_IN_WHITELIST 1019 0.38 0.00 0.59 179 TR_XM_SpammyWords2 1013 5.15 13.45 0.59 180 T_STY_INVIS_DIRECT 977 0.72 1.00 0.57 181 MPART_ALT_DIFF_COUNT 975 0.83 1.31 0.57 182 T_XMDrugObfuBody_00 960 0.74 1.07 0.56 183 HTML_FONT_FACE_BAD 934 0.62 0.75 0.54 184 PLING_QUERY 916 0.69 0.99 0.53 185 NML_ADSP_CUSTOM_MED 890 0.74 1.15 0.52 186 XMSlimDrugH 861 0.68 1.00 0.50 187 XMLngstWrd_01 842 0.44 0.34 0.49 188 RCVD_IN_PBL 841 0.63 0.88 0.49 189 XM_Ancestry_Forge 824 0.31 0.00 0.48 190 XM_Walgreens_Forge 812 0.32 0.03 0.47 191 FORGED_GMAIL_RCVD 810 0.69 1.10 0.47 192 T_TooManySym_04 803 0.37 0.19 0.47 193 XM_ShortIntro_01 801 0.41 0.31 0.47 194 XM_S_SubURI 759 0.30 0.06 0.44 195 XM_URI_RBL 756 1.42 3.20 0.44 196 XMGenDplmaNmb 744 0.62 0.96 0.43 197 DKIM_ADSP_NXDOMAIN 735 1.88 4.53 0.43 198 TR_LOTS_OF_MONEY2 713 0.66 1.12 0.41 199 T_MONEY_PERCENT 713 0.66 1.12 0.41 200 TRACKER_ID 711 0.30 0.10 0.41 ----------------------------------------------------------------------