Email: 263833 Autolearn: 0 AvgScore: 4.88 AvgScanTime: 1.35 sec Spam: 82653 Autolearn: 0 AvgScore: 13.87 AvgScanTime: 1.46 sec Ham: 181180 Autolearn: 0 AvgScore: 0.78 AvgScanTime: 1.30 sec Time Spent Running SA: 99.20 hours Time Spent Processing Spam: 33.53 hours Time Spent Processing Ham: 65.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 82232 99.65 99.49 99.72 2 HTML_MESSAGE 78531 88.55 95.01 85.60 3 DKIM_SIGNED 73575 73.53 89.02 66.47 4 XM_B_Unicode 69851 73.64 84.51 68.68 5 XM_DK_Pass 69834 71.55 84.49 65.64 6 DKIM_VALID 69341 71.05 83.89 65.20 7 RELAYCOUNTRY_US 66763 82.32 80.78 83.02 8 DCC_CHECK 64340 55.94 77.84 45.95 9 XMListUnsubscribeExists 57669 54.40 69.77 47.38 10 XM_B_SpammyWords 57511 54.92 69.58 48.24 11 DKIM_VALID_AU 56119 60.00 67.90 56.40 12 XM_B_Unicode3 42433 47.66 51.34 45.98 13 LOC_TINY_FONT_1 40207 35.73 48.65 29.84 14 XM_DK_Undo_02 35730 16.90 43.23 4.89 15 XM_B_SpammyWords2 33366 26.76 40.37 20.56 16 HTML_FONT_LOW_CONTRAST 31544 40.06 38.16 40.92 17 BAYES_50 31067 56.21 37.59 64.70 18 BAYES_99 29574 13.99 35.78 4.05 19 FVGT_m_MULTI_ODD 27695 27.64 33.51 24.97 20 DKIM_VALID_EF 27278 28.59 33.00 26.58 21 TR_XM_DKIM_Undo 26566 11.46 32.14 2.02 22 MIME_HTML_ONLY 24910 22.41 30.14 18.88 23 T_KAM_HTML_FONT_INVALID 23406 21.50 28.32 18.39 24 BAYES_999 23061 10.93 27.90 3.19 25 TR_DCC_Bayes_99 21606 9.32 26.14 1.64 26 TR_XM_DK_Unsub 20468 17.36 24.76 13.98 27 XM_Multi_Part_URI 18581 17.36 22.48 15.03 28 XMSubLong 17986 20.17 21.76 19.44 29 DCC_CHECK_NEGATIVE 17962 43.91 21.73 54.03 30 T_TM2_M_HEADER_IN_MSG 17149 29.15 20.75 32.98 31 RELAYCOUNTRY_META 15991 7.91 19.35 2.69 32 XM_B_Unsub 14837 12.28 17.95 9.69 33 TR_XM_BayesUnsub 14399 10.52 17.42 7.37 34 UNPARSEABLE_RELAY 14311 13.98 17.31 12.46 35 RCVD_IN_MSPIKE_H2 13889 14.25 16.80 13.09 36 TR_MAX_INTL_RELAY 12226 8.72 14.79 5.95 37 TR_XM_SpammyRelay 11747 5.46 14.21 1.47 38 TR_XM_SpammyWords2 11462 4.72 13.87 0.54 39 XM_B_SpammyWords3 11284 8.10 13.65 5.56 40 BOTNET_IPINHOSTNAME 9425 5.86 11.40 3.33 41 LOTS_OF_MONEY 8809 6.38 10.66 4.42 42 RCVD_IN_BL_SPAMCOP_NET 8637 3.65 10.45 0.55 43 FSL_BULK_SIG 8561 9.98 10.36 9.81 44 TR_XM_UnparsRelay 8059 4.13 9.75 1.57 45 TR_XM_SpammyWords4 7859 5.15 9.51 3.16 46 RCVD_IN_MSPIKE_WL 7498 12.24 9.07 13.68 47 BAYES_80 7430 5.31 8.99 3.63 48 XM_Body_Dirty_Words 6970 4.11 8.43 2.14 49 BAYES_60 6885 6.90 8.33 6.25 50 BOTNET 6855 3.21 8.29 0.89 51 RELAYCOUNTRY_CA 6568 3.07 7.95 0.84 52 XM_Evil_Numbers_Gen 6371 13.32 7.71 15.88 53 TR_XM_MSPIKECOMBO 5644 2.57 6.83 0.63 54 RCVD_IN_MSPIKE_BL 5644 2.57 6.83 0.63 55 UNTRUSTED_Relay 5622 3.15 6.80 1.48 56 XMSubMetaSx_00 5587 4.84 6.76 3.96 57 MPART_ALT_DIFF 5396 4.77 6.53 3.97 58 HTML_IMAGE_RATIO_02 5306 5.23 6.42 4.68 59 RCVD_IN_VALIDITY_RPBL 5031 2.12 6.09 0.31 60 XM_B_Phish_Phrases 4876 5.09 5.90 4.72 61 LotsOfNums_01 4773 11.95 5.77 14.77 62 XM_UncommonTLD01 4610 4.95 5.58 4.66 63 TM2_M_VERY_LONG_WORD 4507 10.57 5.45 12.90 64 BAYES_95 4486 3.29 5.43 2.32 65 XMSexyCombo_05 4362 2.54 5.28 1.29 66 XM_H_Long_From01 4311 5.07 5.22 5.01 67 DKIM_INVALID 4234 2.48 5.12 1.27 68 T_XMDrugObfuBody_14 4134 3.14 5.00 2.29 69 XM_H_GMP 3933 5.66 4.76 6.08 70 XMStrtUSub 3818 4.71 4.62 4.74 71 TR_XM_SpammyWords3 3731 1.58 4.51 0.24 72 TR_XM_NoHeaderRelay 3685 1.51 4.46 0.16 73 XM_B_PhoneNumber 3665 5.78 4.43 6.39 74 XM_B_Investor 3656 2.16 4.42 1.13 75 TR_XM_PhishingBody 3529 2.33 4.27 1.44 76 RCVD_IN_MSPIKE_H3 3513 5.26 4.25 5.72 77 XMNumbers 3439 4.50 4.16 4.66 78 HTML_IMAGE_RATIO_04 3368 4.43 4.07 4.59 79 XM_CamelCaseFrm001 3365 2.79 4.07 2.21 80 TooManyTo_001 3167 5.09 3.83 5.66 81 XM_B_SpammyTLD 3139 3.00 3.80 2.64 82 MIME_HTML_MOSTLY 3063 2.82 3.71 2.41 83 RCVD_IN_MSPIKE_L3 2983 1.39 3.61 0.38 84 XM_URI_RBL 2961 1.45 3.58 0.48 85 XM_OfRef6 2921 1.62 3.53 0.75 86 TR_XM_SPAMCOP 2826 1.13 3.42 0.08 87 RCVD_IN_VALIDITY_SAFE 2702 5.13 3.27 5.97 88 TR_XM_SpammyWords5 2686 2.25 3.25 1.79 89 MIME_HTML_ONLY_MULTI 2609 2.64 3.16 2.40 90 XM_UB50 2595 1.60 3.14 0.89 91 HTML_IMAGE_RATIO_06 2530 2.85 3.06 2.76 92 T_XMDrugObfuBody_08 2515 1.74 3.04 1.15 93 RCVD_IN_MSPIKE_H4 2469 2.84 2.99 2.77 94 HTML_IMAGE_RATIO_08 2406 2.38 2.91 2.14 95 XMBody_17 2405 1.26 2.91 0.51 96 RELAYCOUNTRY_AU 2372 1.15 2.87 0.37 97 XM_B_Unsub2 2343 1.62 2.83 1.06 98 T_TooManySym_01 2332 5.77 2.82 7.11 99 FROM_EXCESS_BASE64 2278 2.17 2.76 1.90 100 TR_LOTS_OF_MONEY3 2274 1.07 2.75 0.31 101 XMDiploma_00 2224 1.57 2.69 1.05 102 XM_SPF_SoftFail 2210 1.52 2.67 0.99 103 T_FILL_THIS_FORM_SHORT 2195 1.13 2.66 0.44 104 USER_IN_DEF_DKIM_WL 2173 12.22 2.63 16.60 105 MIME_QP_LONG_LINE 2141 2.53 2.59 2.51 106 RCVD_IN_VALIDITY_CERTIFIED 2103 4.04 2.54 4.72 107 ALL_TRUSTED 1978 10.58 2.39 14.31 108 T_XMHurry_00 1931 1.15 2.34 0.60 109 TR_XM_INV_DKIM 1875 0.80 2.27 0.14 110 ANY_BOUNCE_MESSAGE 1713 11.66 2.07 16.03 111 BOUNCE_MESSAGE 1713 11.66 2.07 16.03 112 KHOP_HELO_FCRDNS 1710 5.82 2.07 7.53 113 XMBrknScrpt_02 1670 1.30 2.02 0.97 114 SHOPIFY_IMG_NOT_RCVD_SFY 1648 0.90 1.99 0.40 115 SpammyFromTLD_01 1644 0.88 1.99 0.37 116 TM2_M_URI_OPT_OUT 1636 1.86 1.98 1.81 117 XM_B_URI_Unicode 1619 1.48 1.96 1.26 118 XM_B_SpammyWords4 1610 1.32 1.95 1.03 119 XMStockSpam_06 1583 1.64 1.92 1.51 120 RCVD_IN_PSBL 1556 1.21 1.88 0.91 121 RCVD_IN_MSPIKE_L4 1554 0.68 1.88 0.13 122 MAILING_LIST_MULTI 1553 2.11 1.88 2.22 123 XM_B_COPY_HTML 1544 1.41 1.87 1.20 124 RCVD_IN_MSPIKE_H5 1516 4.14 1.83 5.19 125 DKIM_ADSP_NXDOMAIN 1500 0.84 1.81 0.39 126 DIET_1 1481 0.75 1.79 0.28 127 XMPhish30 1474 1.01 1.78 0.66 128 SpammyFromTLD_02 1441 0.67 1.74 0.18 129 XM_HighProb1 1429 0.54 1.73 0.00 130 HK_RANDOM_REPLYTO 1408 0.64 1.70 0.15 131 TR_XM_MSPIKECOMBO2 1405 0.54 1.70 0.01 132 SUBJ_ALL_CAPS 1359 1.50 1.64 1.43 133 RELAYCOUNTRY_FR 1299 0.64 1.57 0.22 134 RCVD_IN_XBL 1291 0.50 1.56 0.01 135 XMSubMetaI_00 1283 0.93 1.55 0.64 136 MIME_CHARSET_FARAWAY 1253 3.83 1.52 4.89 137 SCC_BODY_URI_ONLY 1249 2.33 1.51 2.71 138 TR_XM_PHPDW 1247 0.62 1.51 0.22 139 TR_XM_FormFill2 1242 0.62 1.50 0.22 140 RCVD_IN_SBL_CSS 1239 0.48 1.50 0.01 141 TR_XM_PHPForged 1230 0.62 1.49 0.22 142 BAYES_40 1223 4.35 1.48 5.66 143 URI_TRY_3LD 1220 0.86 1.48 0.58 144 RDNS_DYNAMIC 1217 0.61 1.47 0.21 145 XM_H_PHPOS 1209 0.60 1.46 0.20 146 THIS_AD 1194 0.77 1.44 0.46 147 PDS_RDNS_DYNAMIC_FP 1188 0.47 1.44 0.03 148 XMReplyNow 1162 0.58 1.41 0.21 149 MultiRelay_CC 1155 0.53 1.40 0.13 150 MPART_ALT_DIFF_COUNT 1141 0.84 1.38 0.60 151 TVD_RCVD_IP 1135 1.47 1.37 1.52 152 XM_DIRTYINTL 1126 0.47 1.36 0.06 153 RCVD_IN_MSPIKE_L5 1108 0.50 1.34 0.12 154 RCVD_IN_PBL 1093 0.82 1.32 0.59 155 T_REMOTE_IMAGE 1087 2.19 1.32 2.59 156 TR_MetaPhish_Combo_01 1087 1.76 1.32 1.96 157 XMGenDplmaNmb 1067 0.67 1.29 0.39 158 XMBdyGiftCard01 1050 1.16 1.27 1.11 159 XM_B_DNDMA 1050 0.64 1.27 0.36 160 XMSexyCombo_01 1038 0.51 1.26 0.18 161 CHARSET_FARAWAY_HEADER 1030 3.64 1.25 4.73 162 XM_ProductURIs 1026 0.86 1.24 0.68 163 URI_HEX 1011 0.93 1.22 0.80 164 RELAYCOUNTRY_CN 961 0.44 1.16 0.10 165 HELO_DYNAMIC_SPLIT_IP 955 0.36 1.16 0.00 166 HTML_IMAGE_ONLY_20 954 0.64 1.15 0.41 167 TR_Mismatch_TLD_02 954 0.39 1.15 0.05 168 XM_DK_Undo_01 946 1.28 1.14 1.34 169 XM_UB99 946 0.36 1.14 0.00 170 T_STY_INVIS_DIRECT 930 0.73 1.13 0.56 171 XMBody_78 925 0.49 1.12 0.20 172 XM_UB60 901 0.38 1.09 0.06 173 XM_SendGrid 881 1.12 1.07 1.14 174 TR_XM_RelayPhish 880 0.37 1.06 0.05 175 TM2_M_OBFU_COMMENT 874 0.75 1.06 0.61 176 TR_LOTS_OF_MONEY2 847 0.41 1.02 0.13 177 T_MONEY_PERCENT 847 0.41 1.02 0.13 178 XM_B_Phish66 834 0.49 1.01 0.25 179 XMEqualsVooDoo_00 829 0.35 1.00 0.05 180 XMEqualsVooDoo_01 825 0.33 1.00 0.02 181 XMEqualsVooDoo_02 824 0.31 1.00 0.00 182 XMEqualsVooDoo_03 823 0.31 1.00 0.00 183 PLING_QUERY 823 0.65 1.00 0.49 184 BAYES_20 821 2.48 0.99 3.16 185 XM_H_Long_From02 808 0.79 0.98 0.71 186 TR_Mismatch_TLD_01 807 0.50 0.98 0.28 187 TR_XM_Base64_L1 805 0.34 0.97 0.06 188 MAY_BE_FORGED 802 8.37 0.97 11.75 189 HTML_MIME_NO_HTML_TAG 802 1.50 0.97 1.75 190 BOTNET_NORDNS 787 0.30 0.95 0.01 191 XMSlimDrugH 786 0.85 0.95 0.80 192 FONT_INVIS_LONG_LINE 777 0.31 0.94 0.02 193 TR_XM_InvalidRelay 776 0.30 0.94 0.01 194 XM_B_REG_HTML 767 0.39 0.93 0.14 195 HTML_TAG_BALANCE_BODY 765 0.89 0.93 0.87 196 HTML_FONT_SIZE_LARGE 765 0.32 0.93 0.04 197 T_XMDrugObfuBody_00 738 0.71 0.89 0.62 198 HTTPS_HTTP_MISMATCH 733 0.55 0.89 0.40 199 T_TooManySym_02 730 3.18 0.88 4.23 200 XM_GoogleGroups 724 1.02 0.88 1.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 180675 99.65 99.49 99.72 2 HTML_MESSAGE 155087 88.55 95.01 85.60 3 RELAYCOUNTRY_US 150412 82.32 80.78 83.02 4 XM_B_Unicode 124427 73.64 84.51 68.68 5 DKIM_SIGNED 120425 73.53 89.02 66.47 6 XM_DK_Pass 118928 71.55 84.49 65.64 7 DKIM_VALID 118122 71.05 83.89 65.20 8 BAYES_50 117228 56.21 37.59 64.70 9 DKIM_VALID_AU 102182 60.00 67.90 56.40 10 DCC_CHECK_NEGATIVE 97886 43.91 21.73 54.03 11 XM_B_SpammyWords 87399 54.92 69.58 48.24 12 XMListUnsubscribeExists 85852 54.40 69.77 47.38 13 XM_B_Unicode3 83306 47.66 51.34 45.98 14 DCC_CHECK 83248 55.94 77.84 45.95 15 HTML_FONT_LOW_CONTRAST 74136 40.06 38.16 40.92 16 T_TM2_M_HEADER_IN_MSG 59756 29.15 20.75 32.98 17 LOC_TINY_FONT_1 54070 35.73 48.65 29.84 18 DKIM_VALID_EF 48165 28.59 33.00 26.58 19 FVGT_m_MULTI_ODD 45239 27.64 33.51 24.97 20 XM_B_SpammyWords2 37243 26.76 40.37 20.56 21 XMSubLong 35217 20.17 21.76 19.44 22 MIME_HTML_ONLY 34209 22.41 30.14 18.88 23 T_KAM_HTML_FONT_INVALID 33315 21.50 28.32 18.39 24 USER_IN_DEF_DKIM_WL 30069 12.22 2.63 16.60 25 ANY_BOUNCE_MESSAGE 29050 11.66 2.07 16.03 26 BOUNCE_MESSAGE 29043 11.66 2.07 16.03 27 XM_Evil_Numbers_Gen 28764 13.32 7.71 15.88 28 XM_Multi_Part_URI 27224 17.36 22.48 15.03 29 LotsOfNums_01 26761 11.95 5.77 14.77 30 ALL_TRUSTED 25924 10.58 2.39 14.31 31 TR_XM_DK_Unsub 25325 17.36 24.76 13.98 32 RCVD_IN_MSPIKE_WL 24787 12.24 9.07 13.68 33 RCVD_IN_MSPIKE_H2 23717 14.25 16.80 13.09 34 TM2_M_VERY_LONG_WORD 23379 10.57 5.45 12.90 35 HTML_IMAGE_ONLY_32 22907 8.72 0.13 12.64 36 UNPARSEABLE_RELAY 22580 13.98 17.31 12.46 37 MAY_BE_FORGED 21293 8.37 0.97 11.75 38 FSL_BULK_SIG 17780 9.98 10.36 9.81 39 XM_B_Unsub 17552 12.28 17.95 9.69 40 XM_DKIMWhitelistDomains 16174 6.13 0.00 8.93 41 BAYES_00 15601 6.03 0.38 8.61 42 KHOP_HELO_FCRDNS 13645 5.82 2.07 7.53 43 TR_XM_BayesUnsub 13355 10.52 17.42 7.37 44 T_TooManySym_01 12888 5.77 2.82 7.11 45 XM_B_PhoneNumber 11580 5.78 4.43 6.39 46 TR_XM_DK_Bayes 11488 4.44 0.27 6.34 47 TR_XM_DK_Bayes1 11380 4.39 0.26 6.28 48 BAYES_60 11316 6.90 8.33 6.25 49 XM_H_GMP 11012 5.66 4.76 6.08 50 RCVD_IN_VALIDITY_SAFE 10821 5.13 3.27 5.97 51 TR_MAX_INTL_RELAY 10787 8.72 14.79 5.95 52 RCVD_IN_MSPIKE_H3 10363 5.26 4.25 5.72 53 TooManyTo_001 10259 5.09 3.83 5.66 54 BAYES_40 10258 4.35 1.48 5.66 55 XM_B_SpammyWords3 10075 8.10 13.65 5.56 56 TR_XM_DK_Bayes2 9986 3.84 0.18 5.51 57 RCVD_IN_MSPIKE_H5 9407 4.14 1.83 5.19 58 XM_H_Long_From01 9070 5.07 5.22 5.01 59 XM_DK_Undo_02 8867 16.90 43.23 4.89 60 MIME_CHARSET_FARAWAY 8851 3.83 1.52 4.89 61 XMStrtUSub 8596 4.71 4.62 4.74 62 CHARSET_FARAWAY_HEADER 8578 3.64 1.25 4.73 63 XM_B_Phish_Phrases 8558 5.09 5.90 4.72 64 RCVD_IN_VALIDITY_CERTIFIED 8558 4.04 2.54 4.72 65 HTML_IMAGE_RATIO_02 8482 5.23 6.42 4.68 66 XMNumbers 8442 4.50 4.16 4.66 67 XM_UncommonTLD01 8438 4.95 5.58 4.66 68 HTML_IMAGE_RATIO_04 8310 4.43 4.07 4.59 69 LOTS_OF_MONEY 8014 6.38 10.66 4.42 70 T_TooManySym_02 7669 3.18 0.88 4.23 71 BAYES_99 7344 13.99 35.78 4.05 72 MPART_ALT_DIFF 7184 4.77 6.53 3.97 73 XMSubMetaSx_00 7170 4.84 6.76 3.96 74 BAYES_80 6579 5.31 8.99 3.63 75 INVALID_MSGID 6550 2.63 0.46 3.62 76 TO_MALFORMED 6262 2.38 0.02 3.46 77 BOTNET_IPINHOSTNAME 6037 5.86 11.40 3.33 78 BAYES_999 5779 10.93 27.90 3.19 79 BAYES_20 5726 2.48 0.99 3.16 80 TR_XM_SpammyWords4 5719 5.15 9.51 3.16 81 RCVD_IN_MSPIKE_H4 5017 2.84 2.99 2.77 82 HTML_IMAGE_RATIO_06 4995 2.85 3.06 2.76 83 SCC_BODY_URI_ONLY 4905 2.33 1.51 2.71 84 RELAYCOUNTRY_META 4866 7.91 19.35 2.69 85 XM_B_SpammyTLD 4780 3.00 3.80 2.64 86 T_REMOTE_IMAGE 4701 2.19 1.32 2.59 87 MIME_QP_LONG_LINE 4541 2.53 2.59 2.51 88 MIME_HTML_MOSTLY 4371 2.82 3.71 2.41 89 MIME_HTML_ONLY_MULTI 4357 2.64 3.16 2.40 90 TooManyTo_002 4238 1.83 0.71 2.34 91 BAYES_95 4207 3.29 5.43 2.32 92 T_XMDrugObfuBody_14 4149 3.14 5.00 2.29 93 MAILING_LIST_MULTI 4019 2.11 1.88 2.22 94 XM_CamelCaseFrm001 4000 2.79 4.07 2.21 95 XM_Body_Dirty_Words 3881 4.11 8.43 2.14 96 HTML_IMAGE_RATIO_08 3876 2.38 2.91 2.14 97 T_TVD_MIME_NO_HEADERS 3732 1.43 0.06 2.06 98 TR_XM_DKIM_Undo 3660 11.46 32.14 2.02 99 TR_MetaPhish_Combo_01 3551 1.76 1.32 1.96 100 XM_PDF 3488 1.46 0.43 1.93 101 FROM_EXCESS_BASE64 3439 2.17 2.76 1.90 102 TM2_M_URI_OPT_OUT 3279 1.86 1.98 1.81 103 TR_XM_SpammyWords5 3251 2.25 3.25 1.79 104 HTML_MIME_NO_HTML_TAG 3166 1.50 0.97 1.75 105 RCVD_IN_IADB_LISTED 3159 1.37 0.57 1.74 106 T_TooManySym_03 3092 1.32 0.47 1.71 107 TR_DCC_Bayes_99 2976 9.32 26.14 1.64 108 BAYES_05 2918 1.30 0.62 1.61 109 RCVD_IN_IADB_SPF 2843 1.23 0.48 1.57 110 TR_XM_UnparsRelay 2842 4.13 9.75 1.57 111 TVD_RCVD_IP 2756 1.47 1.37 1.52 112 URI_NOVOWEL 2750 1.29 0.79 1.52 113 XMStockSpam_06 2733 1.64 1.92 1.51 114 UNTRUSTED_Relay 2683 3.15 6.80 1.48 115 TR_XM_SpammyRelay 2662 5.46 14.21 1.47 116 TVD_SPACE_RATIO 2620 1.04 0.17 1.45 117 TR_XM_PhishingBody 2610 2.33 4.27 1.44 118 IN_HORDE_ADDRESS_BOOK 2600 1.02 0.11 1.44 119 SUBJ_ALL_CAPS 2589 1.50 1.64 1.43 120 RCVD_IN_IADB_SENDERID 2586 1.12 0.45 1.43 121 RCVD_IN_IADB_DK 2519 1.09 0.45 1.39 122 URI_OPTOUT_3LD 2498 1.17 0.70 1.38 123 XMGappySubj_01 2470 1.00 0.20 1.36 124 XM_DK_Undo_01 2435 1.28 1.14 1.34 125 XMSexyCombo_05 2340 2.54 5.28 1.29 126 DKIM_INVALID 2303 2.48 5.12 1.27 127 XM_B_URI_Unicode 2284 1.48 1.96 1.26 128 XM_B_COPY_HTML 2178 1.41 1.87 1.20 129 RCVD_IN_IADB_VOUCHED 2083 0.88 0.30 1.15 130 XMGappySubj_02 2078 0.81 0.06 1.15 131 T_XMDrugObfuBody_08 2075 1.74 3.04 1.15 132 XM_SendGrid 2068 1.12 1.07 1.14 133 XM_B_Investor 2045 2.16 4.42 1.13 134 XMBSHREFv2 2035 0.87 0.31 1.12 135 XMBdyGiftCard01 2007 1.16 1.27 1.11 136 XM_B_FormFill 1958 0.75 0.04 1.08 137 XM_GoogleGroups 1956 1.02 0.88 1.08 138 XM_B_Unsub2 1929 1.62 2.83 1.06 139 XMDiploma_00 1908 1.57 2.69 1.05 140 XM_B_SpammyWords4 1863 1.32 1.95 1.03 141 XM_SPF_SoftFail 1799 1.52 2.67 0.99 142 TR_Symld_Words 1796 0.93 0.78 0.99 143 XMBrknScrpt_02 1755 1.30 2.02 0.97 144 TooManyTo_003 1664 0.83 0.64 0.92 145 RCVD_IN_PSBL 1649 1.21 1.88 0.91 146 XM_UB50 1616 1.60 3.14 0.89 147 BOTNET 1613 3.21 8.29 0.89 148 HTML_TAG_BALANCE_BODY 1572 0.89 0.93 0.87 149 TR_XM_Base64_M1 1571 0.86 0.85 0.87 150 TR_XM_DK_SendGrid 1540 0.80 0.70 0.85 151 RELAYCOUNTRY_CA 1529 3.07 7.95 0.84 152 RCVD_IN_IADB_OPTIN 1514 0.63 0.19 0.84 153 XMSlimDrugH 1453 0.85 0.95 0.80 154 URI_HEX 1451 0.93 1.22 0.80 155 XM_OfRef6 1350 1.62 3.53 0.75 156 TooManyTo_004 1312 0.68 0.58 0.72 157 XM_H_PHPMailer 1282 0.66 0.57 0.71 158 XM_H_Long_From02 1282 0.79 0.98 0.71 159 MSGID_FROM_MTA_HEADER 1262 0.55 0.23 0.70 160 XM_ProductURIs 1240 0.86 1.24 0.68 161 DKIM_ADSP_CUSTOM_MED 1216 0.72 0.84 0.67 162 XMPhish30 1199 1.01 1.78 0.66 163 XMSubMetaI_00 1163 0.93 1.55 0.64 164 TR_XM_MSPIKECOMBO 1140 2.57 6.83 0.63 165 RCVD_IN_MSPIKE_BL 1140 2.57 6.83 0.63 166 T_XMDrugObfuBody_00 1130 0.71 0.89 0.62 167 TooManyTo_005 1116 0.59 0.55 0.62 168 TM2_M_OBFU_COMMENT 1106 0.75 1.06 0.61 169 T_XMHurry_00 1094 1.15 2.34 0.60 170 MPART_ALT_DIFF_COUNT 1083 0.84 1.38 0.60 171 XMBody_95 1074 0.44 0.10 0.59 172 RCVD_IN_PBL 1074 0.82 1.32 0.59 173 HTML_TAG_BALANCE_CENTER 1061 0.63 0.71 0.59 174 URI_TRY_3LD 1046 0.86 1.48 0.58 175 HTML_FONT_FACE_BAD 1009 0.62 0.77 0.56 176 T_STY_INVIS_DIRECT 1006 0.73 1.13 0.56 177 RCVD_IN_BL_SPAMCOP_NET 1000 3.65 10.45 0.55 178 TR_XM_SpammyWords2 980 4.72 13.87 0.54 179 USER_IN_WHITELIST 946 0.36 0.00 0.52 180 USER_IN_WELCOMELIST 946 0.36 0.00 0.52 181 HTML_EXTRA_CLOSE 939 0.37 0.05 0.52 182 XMBody_17 920 1.26 2.91 0.51 183 PLING_QUERY 887 0.65 1.00 0.49 184 T_TooManySym_04 882 0.40 0.20 0.49 185 XMLngstWrd_00 874 0.45 0.39 0.48 186 XM_URI_RBL 865 1.45 3.58 0.48 187 THIS_AD 831 0.77 1.44 0.46 188 XMNoVowels 806 0.40 0.30 0.44 189 T_FILL_THIS_FORM_SHORT 793 1.13 2.66 0.44 190 XMLngstWrd_01 771 0.40 0.33 0.43 191 XMHTML_After_End 769 0.46 0.54 0.42 192 NML_ADSP_CUSTOM_MED 757 0.52 0.73 0.42 193 XM_S_SubURI 757 0.30 0.05 0.42 194 HTML_IMAGE_ONLY_20 744 0.64 1.15 0.41 195 FORGED_GMAIL_RCVD 739 0.49 0.67 0.41 196 XM_ShortIntro_01 731 0.41 0.42 0.40 197 AD_PREFS 729 0.34 0.22 0.40 198 SHOPIFY_IMG_NOT_RCVD_SFY 723 0.90 1.99 0.40 199 XMSubMetaSxObfu_02 723 0.40 0.40 0.40 200 HTTPS_HTTP_MISMATCH 717 0.55 0.89 0.40 ----------------------------------------------------------------------