Email: 269438 Autolearn: 0 AvgScore: 4.79 AvgScanTime: 1.39 sec Spam: 83308 Autolearn: 0 AvgScore: 13.54 AvgScanTime: 1.51 sec Ham: 186130 Autolearn: 0 AvgScore: 0.87 AvgScanTime: 1.34 sec Time Spent Running SA: 104.15 hours Time Spent Processing Spam: 35.05 hours Time Spent Processing Ham: 69.10 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 82969 99.71 99.59 99.76 2 HTML_MESSAGE 78353 88.04 94.05 85.34 3 DKIM_SIGNED 74188 73.31 89.05 66.27 4 XM_DK_Pass 71545 71.77 85.88 65.46 5 DKIM_VALID 71015 71.27 85.24 65.02 6 XM_B_Unicode 70258 73.05 84.34 67.99 7 RELAYCOUNTRY_US 68227 82.47 81.90 82.72 8 DCC_CHECK 65125 56.27 78.17 46.46 9 XMListUnsubscribeExists 57067 52.74 68.50 45.69 10 XM_B_SpammyWords 57045 53.62 68.47 46.97 11 DKIM_VALID_AU 56431 59.62 67.74 55.99 12 XM_B_Unicode3 44234 48.00 53.10 45.72 13 LOC_TINY_FONT_1 41493 36.22 49.81 30.14 14 XM_DK_Undo_02 35261 16.70 42.33 5.23 15 XM_B_SpammyWords2 32914 25.84 39.51 19.72 16 HTML_FONT_LOW_CONTRAST 32203 41.06 38.66 42.13 17 BAYES_50 31786 56.63 38.15 64.91 18 BAYES_99 28438 13.66 34.14 4.50 19 DKIM_VALID_EF 27595 27.65 33.12 25.20 20 FVGT_m_MULTI_ODD 27405 27.25 32.90 24.72 21 TR_XM_DKIM_Undo 25425 11.01 30.52 2.28 22 MIME_HTML_ONLY 23788 22.46 28.55 19.73 23 T_KAM_HTML_FONT_INVALID 22396 19.95 26.88 16.85 24 BAYES_999 22383 10.81 26.87 3.62 25 TR_DCC_Bayes_99 20656 9.35 24.79 2.44 26 TR_XM_DK_Unsub 20089 16.15 24.11 12.59 27 XMSubLong 18883 21.25 22.67 20.62 28 XM_Multi_Part_URI 18382 17.50 22.07 15.46 29 DCC_CHECK_NEGATIVE 17915 43.61 21.50 53.51 30 RCVD_IN_MSPIKE_H2 17426 15.51 20.92 13.09 31 UNPARSEABLE_RELAY 17080 14.73 20.50 12.14 32 T_TM2_M_HEADER_IN_MSG 16401 28.48 19.69 32.42 33 XM_B_Unsub 15625 12.69 18.76 9.98 34 TR_XM_BayesUnsub 15009 11.16 18.02 8.09 35 RELAYCOUNTRY_META 14146 7.25 16.98 2.90 36 TR_MAX_INTL_RELAY 12339 8.34 14.81 5.45 37 XM_B_SpammyWords3 11441 7.75 13.73 5.07 38 TR_XM_SpammyRelay 10483 4.90 12.58 1.46 39 TR_XM_SpammyWords2 10327 4.37 12.40 0.77 40 TR_XM_UnparsRelay 9650 4.63 11.58 1.52 41 FSL_BULK_SIG 9629 11.41 11.56 11.34 42 BOTNET_IPINHOSTNAME 9135 5.52 10.97 3.08 43 RCVD_IN_BL_SPAMCOP_NET 8509 3.47 10.21 0.45 44 RCVD_IN_MSPIKE_WL 8007 12.10 9.61 13.21 45 BAYES_80 7753 5.09 9.31 3.20 46 BAYES_60 6933 6.55 8.32 5.75 47 LOTS_OF_MONEY 6921 5.69 8.31 4.52 48 BOTNET 6800 3.17 8.16 0.94 49 XM_Evil_Numbers_Gen 6527 14.22 7.83 17.08 50 HTML_IMAGE_RATIO_02 6512 5.73 7.82 4.80 51 TR_XM_SpammyWords4 6082 4.50 7.30 3.24 52 UNTRUSTED_Relay 5817 3.22 6.98 1.54 53 XM_B_Phish_Phrases 5805 5.88 6.97 5.40 54 XM_Body_Dirty_Words 5748 4.21 6.90 3.01 55 RELAYCOUNTRY_CA 5570 2.79 6.69 1.05 56 MPART_ALT_DIFF 5252 5.05 6.30 4.48 57 XMSubMetaSx_00 5130 4.23 6.16 3.37 58 LotsOfNums_01 4946 12.57 5.94 15.54 59 RCVD_IN_MSPIKE_BL 4903 2.34 5.89 0.75 60 TR_XM_MSPIKECOMBO 4902 2.34 5.88 0.75 61 TR_XM_SPAMCOP 4813 1.83 5.78 0.07 62 RCVD_IN_VALIDITY_RPBL 4688 1.87 5.63 0.19 63 XM_UncommonTLD01 4590 4.87 5.51 4.58 64 XM_H_Long_From01 4521 4.90 5.43 4.66 65 XMSexyCombo_05 4468 3.24 5.36 2.28 66 TM2_M_VERY_LONG_WORD 4428 11.29 5.32 13.97 67 XMStrtUSub 4367 5.62 5.24 5.79 68 TR_XM_PhishingBody 4350 2.74 5.22 1.63 69 HTML_IMAGE_RATIO_04 4292 4.63 5.15 4.40 70 BAYES_95 4214 3.12 5.06 2.25 71 XM_H_GMP 4191 5.53 5.03 5.75 72 RCVD_IN_MSPIKE_H3 4066 5.79 4.88 6.20 73 XM_B_PhoneNumber 3903 5.44 4.69 5.78 74 TR_XM_SpammyWords5 3887 2.50 4.67 1.53 75 XMNumbers 3788 4.28 4.55 4.17 76 XM_CamelCaseFrm001 3778 2.69 4.53 1.86 77 T_XMDrugObfuBody_14 3673 2.78 4.41 2.05 78 TR_XM_NoHeaderRelay 3371 1.35 4.05 0.15 79 MIME_HTML_MOSTLY 3345 2.94 4.02 2.46 80 TR_XM_SpammyWords3 3265 1.42 3.92 0.29 81 XM_B_Investor 3200 1.98 3.84 1.15 82 DKIM_INVALID 3173 2.04 3.81 1.25 83 T_FILL_THIS_FORM_SHORT 3163 1.79 3.80 0.89 84 TooManyTo_001 3036 4.45 3.64 4.80 85 RCVD_IN_MSPIKE_L3 2984 1.44 3.58 0.48 86 XM_OfRef6 2906 1.64 3.49 0.82 87 XM_B_SpammyTLD 2851 2.81 3.42 2.53 88 XM_UB50 2781 1.58 3.34 0.80 89 XM_URI_RBL 2723 1.36 3.27 0.51 90 MIME_HTML_ONLY_MULTI 2697 2.67 3.24 2.42 91 HTML_IMAGE_RATIO_06 2604 2.80 3.13 2.65 92 RCVD_IN_MSPIKE_H4 2512 2.92 3.02 2.88 93 XM_B_Unsub2 2483 1.82 2.98 1.31 94 RELAYCOUNTRY_AU 2365 1.14 2.84 0.38 95 XM_SPF_SoftFail 2276 1.60 2.73 1.10 96 ALL_TRUSTED 2242 10.75 2.69 14.35 97 T_XMHurry_00 2234 1.39 2.68 0.81 98 RCVD_IN_VALIDITY_SAFE 2161 4.90 2.59 5.94 99 T_XMDrugObfuBody_08 2151 1.57 2.58 1.12 100 FROM_EXCESS_BASE64 2127 2.15 2.55 1.96 101 XMPhish30 2127 1.37 2.55 0.84 102 T_TooManySym_01 2049 5.80 2.46 7.30 103 XM_SendGrid 2048 1.51 2.46 1.08 104 SUBJ_ALL_CAPS 1984 1.34 2.38 0.87 105 USER_IN_DEF_DKIM_WL 1961 12.88 2.35 17.59 106 XMDiploma_00 1943 1.67 2.33 1.37 107 XM_B_SpammyWords4 1930 1.47 2.32 1.10 108 TM2_M_URI_OPT_OUT 1915 1.81 2.30 1.60 109 XM_B_DNDMA 1837 1.16 2.21 0.69 110 DIET_1 1781 1.25 2.14 0.85 111 XM_ProductURIs 1745 1.09 2.09 0.64 112 KHOP_HELO_FCRDNS 1701 6.12 2.04 7.95 113 XMBrknScrpt_02 1668 1.32 2.00 1.01 114 SpammyFromTLD_01 1667 0.88 2.00 0.38 115 HTML_IMAGE_RATIO_08 1636 1.72 1.96 1.61 116 RCVD_IN_PSBL 1623 1.15 1.95 0.79 117 XMStockSpam_06 1601 1.62 1.92 1.49 118 SHOPIFY_IMG_NOT_RCVD_SFY 1594 0.82 1.91 0.33 119 MAILING_LIST_MULTI 1573 2.02 1.89 2.08 120 XM_B_URI_Unicode 1573 1.35 1.89 1.11 121 SpammyFromTLD_02 1529 0.69 1.84 0.18 122 RCVD_IN_VALIDITY_CERTIFIED 1490 3.95 1.79 4.92 123 TR_MetaPhish_Combo_01 1476 1.99 1.77 2.09 124 ANY_BOUNCE_MESSAGE 1471 12.36 1.77 17.10 125 BOUNCE_MESSAGE 1471 12.36 1.77 17.10 126 XM_PDF 1451 1.86 1.74 1.91 127 RCVD_IN_MSPIKE_H5 1429 3.39 1.72 4.14 128 XMSubMetaI_00 1395 1.01 1.67 0.71 129 T_REMOTE_IMAGE 1389 2.83 1.67 3.35 130 XMBody_17 1387 0.68 1.66 0.23 131 MIME_QP_LONG_LINE 1367 2.27 1.64 2.55 132 THIS_AD 1339 0.86 1.61 0.52 133 TR_XM_INV_DKIM 1331 0.59 1.60 0.14 134 XMClaimOffer 1303 0.61 1.56 0.19 135 DKIM_ADSP_NXDOMAIN 1301 0.76 1.56 0.40 136 TR_XM_MSPIKECOMBO2 1299 0.49 1.56 0.01 137 BOTNET_NORDNS 1277 0.48 1.53 0.00 138 XM_HighProb1 1269 0.47 1.52 0.00 139 BAYES_40 1259 4.35 1.51 5.62 140 URI_HEX 1235 0.98 1.48 0.75 141 RDNS_DYNAMIC 1225 0.63 1.47 0.26 142 XM_B_COPY_HTML 1200 1.18 1.44 1.07 143 HK_RANDOM_REPLYTO 1183 0.55 1.42 0.16 144 PLING_QUERY 1173 0.88 1.41 0.64 145 PDS_RDNS_DYNAMIC_FP 1161 0.47 1.39 0.06 146 MIME_CHARSET_FARAWAY 1136 4.06 1.36 5.27 147 XM_DK_Undo_01 1072 1.29 1.29 1.29 148 TVD_RCVD_IP 1063 1.33 1.28 1.35 149 HTTPS_HTTP_MISMATCH 1062 0.65 1.27 0.37 150 TR_XM_PHPForged 1061 0.52 1.27 0.18 151 TR_XM_PHPDW 1056 0.52 1.27 0.18 152 BAYES_20 1053 2.71 1.26 3.36 153 RELAYCOUNTRY_FR 1044 0.54 1.25 0.22 154 TR_XM_FormFill2 1038 0.51 1.25 0.17 155 RCVD_IN_MSPIKE_L5 1037 0.39 1.24 0.01 156 HTML_MIME_NO_HTML_TAG 1023 1.55 1.23 1.69 157 TR_LOTS_OF_MONEY3 1021 0.48 1.23 0.14 158 XM_H_PHPOS 1014 0.49 1.22 0.17 159 XM_UB99 1011 0.38 1.21 0.00 160 TR_XM_MaxSPIKE 1007 0.38 1.21 0.00 161 T_XMDrugObfuBody_00 1007 0.79 1.21 0.60 162 TR_XM_FormFill 1006 0.37 1.21 0.00 163 XM_H_USAA 1003 0.37 1.20 0.00 164 RCVD_IN_XBL 1000 0.38 1.20 0.01 165 FONT_INVIS_LONG_LINE 981 0.38 1.18 0.02 166 XM_B_SEO 980 0.55 1.18 0.27 167 XMReplyNow 972 0.45 1.17 0.14 168 RCVD_IN_SBL_CSS 971 0.37 1.17 0.01 169 XM_DIRTYINTL 968 0.41 1.16 0.07 170 MPART_ALT_DIFF_COUNT 966 0.74 1.16 0.55 171 XM_H_Long_From02 956 0.84 1.15 0.71 172 SCC_BODY_URI_ONLY 945 2.27 1.13 2.78 173 XMGenDplmaNmb 926 0.63 1.11 0.41 174 CHARSET_FARAWAY_HEADER 924 3.89 1.11 5.13 175 RCVD_IN_PBL 910 0.70 1.09 0.53 176 HELO_DYNAMIC_SPLIT_IP 904 0.34 1.09 0.00 177 XM_B_REG_HTML 903 0.50 1.08 0.24 178 BAYES_00 895 6.32 1.07 8.66 179 TR_XM_Base64_M1 884 0.66 1.06 0.48 180 RCVD_IN_MSPIKE_L4 881 0.51 1.06 0.26 181 T_STY_INVIS_DIRECT 861 0.73 1.03 0.60 182 XMBdyGiftCard01 859 1.64 1.03 1.91 183 XM_B_Phish66 849 0.49 1.02 0.26 184 XM_UB60 846 0.35 1.02 0.05 185 URI_TRY_3LD 819 0.67 0.98 0.53 186 TR_Mismatch_TLD_01 818 0.48 0.98 0.25 187 TR_XM_DK_Bayes 810 5.08 0.97 6.92 188 TR_XM_DK_Bayes1 806 5.03 0.97 6.84 189 XMSexyCombo_01 788 0.36 0.95 0.10 190 TR_XM_SEO4 783 0.41 0.94 0.17 191 MultiRelay_CC 782 0.36 0.94 0.10 192 TR_XM_RelayPhish 781 0.32 0.94 0.04 193 MISSING_HEADERS 777 0.42 0.93 0.20 194 TR_XM_DK_SendGrid 766 0.82 0.92 0.77 195 XMEqualsVooDoo_00 745 0.30 0.89 0.03 196 URI_NOVOWEL 742 1.28 0.89 1.46 197 HTML_FONT_FACE_BAD 742 0.52 0.89 0.36 198 XMEqualsVooDoo_01 734 0.27 0.88 0.00 199 XMEqualsVooDoo_02 732 0.27 0.88 0.00 200 XMEqualsVooDoo_03 731 0.27 0.88 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 185677 99.71 99.59 99.76 2 HTML_MESSAGE 158847 88.04 94.05 85.34 3 RELAYCOUNTRY_US 153971 82.47 81.90 82.72 4 XM_B_Unicode 126553 73.05 84.34 67.99 5 DKIM_SIGNED 123344 73.31 89.05 66.27 6 XM_DK_Pass 121844 71.77 85.88 65.46 7 DKIM_VALID 121024 71.27 85.24 65.02 8 BAYES_50 120808 56.63 38.15 64.91 9 DKIM_VALID_AU 104221 59.62 67.74 55.99 10 DCC_CHECK_NEGATIVE 99599 43.61 21.50 53.51 11 XM_B_SpammyWords 87427 53.62 68.47 46.97 12 DCC_CHECK 86483 56.27 78.17 46.46 13 XM_B_Unicode3 85104 48.00 53.10 45.72 14 XMListUnsubscribeExists 85046 52.74 68.50 45.69 15 HTML_FONT_LOW_CONTRAST 78424 41.06 38.66 42.13 16 T_TM2_M_HEADER_IN_MSG 60336 28.48 19.69 32.42 17 LOC_TINY_FONT_1 56107 36.22 49.81 30.14 18 DKIM_VALID_EF 46899 27.65 33.12 25.20 19 FVGT_m_MULTI_ODD 46013 27.25 32.90 24.72 20 XMSubLong 38381 21.25 22.67 20.62 21 MIME_HTML_ONLY 36719 22.46 28.55 19.73 22 XM_B_SpammyWords2 36713 25.84 39.51 19.72 23 USER_IN_DEF_DKIM_WL 32731 12.88 2.35 17.59 24 ANY_BOUNCE_MESSAGE 31831 12.36 1.77 17.10 25 BOUNCE_MESSAGE 31827 12.36 1.77 17.10 26 XM_Evil_Numbers_Gen 31793 14.22 7.83 17.08 27 T_KAM_HTML_FONT_INVALID 31370 19.95 26.88 16.85 28 LotsOfNums_01 28922 12.57 5.94 15.54 29 XM_Multi_Part_URI 28776 17.50 22.07 15.46 30 ALL_TRUSTED 26710 10.75 2.69 14.35 31 TM2_M_VERY_LONG_WORD 25996 11.29 5.32 13.97 32 RCVD_IN_MSPIKE_WL 24590 12.10 9.61 13.21 33 RCVD_IN_MSPIKE_H2 24366 15.51 20.92 13.09 34 HTML_IMAGE_ONLY_32 24131 9.14 0.60 12.96 35 MAY_BE_FORGED 23635 9.04 0.87 12.70 36 TR_XM_DK_Unsub 23435 16.15 24.11 12.59 37 UNPARSEABLE_RELAY 22599 14.73 20.50 12.14 38 FSL_BULK_SIG 21111 11.41 11.56 11.34 39 XM_B_Unsub 18574 12.69 18.76 9.98 40 BAYES_00 16123 6.32 1.07 8.66 41 XM_DKIMWhitelistDomains 15915 5.92 0.03 8.55 42 TR_XM_BayesUnsub 15050 11.16 18.02 8.09 43 KHOP_HELO_FCRDNS 14797 6.12 2.04 7.95 44 T_TooManySym_01 13591 5.80 2.46 7.30 45 TR_XM_DK_Bayes 12872 5.08 0.97 6.92 46 TR_XM_DK_Bayes1 12737 5.03 0.97 6.84 47 RCVD_IN_MSPIKE_H3 11535 5.79 4.88 6.20 48 TR_XM_DK_Bayes2 11283 4.45 0.85 6.06 49 RCVD_IN_VALIDITY_SAFE 11048 4.90 2.59 5.94 50 XMStrtUSub 10778 5.62 5.24 5.79 51 XM_B_PhoneNumber 10767 5.44 4.69 5.78 52 XM_H_GMP 10711 5.53 5.03 5.75 53 BAYES_60 10711 6.55 8.32 5.75 54 BAYES_40 10453 4.35 1.51 5.62 55 TR_MAX_INTL_RELAY 10142 8.34 14.81 5.45 56 XM_B_Phish_Phrases 10051 5.88 6.97 5.40 57 MIME_CHARSET_FARAWAY 9814 4.06 1.36 5.27 58 XM_DK_Undo_02 9738 16.70 42.33 5.23 59 CHARSET_FARAWAY_HEADER 9547 3.89 1.11 5.13 60 XM_B_SpammyWords3 9439 7.75 13.73 5.07 61 RCVD_IN_VALIDITY_CERTIFIED 9164 3.95 1.79 4.92 62 TooManyTo_001 8943 4.45 3.64 4.80 63 HTML_IMAGE_RATIO_02 8933 5.73 7.82 4.80 64 XM_H_Long_From01 8677 4.90 5.43 4.66 65 XM_UncommonTLD01 8531 4.87 5.51 4.58 66 LOTS_OF_MONEY 8419 5.69 8.31 4.52 67 BAYES_99 8370 13.66 34.14 4.50 68 MPART_ALT_DIFF 8344 5.05 6.30 4.48 69 HTML_IMAGE_RATIO_04 8192 4.63 5.15 4.40 70 T_TooManySym_02 7766 3.14 0.83 4.17 71 XMNumbers 7757 4.28 4.55 4.17 72 RCVD_IN_MSPIKE_H5 7697 3.39 1.72 4.14 73 BAYES_999 6740 10.81 26.87 3.62 74 INVALID_MSGID 6654 2.61 0.45 3.57 75 XMSubMetaSx_00 6270 4.23 6.16 3.37 76 TO_MALFORMED 6259 2.33 0.04 3.36 77 BAYES_20 6248 2.71 1.26 3.36 78 T_REMOTE_IMAGE 6229 2.83 1.67 3.35 79 TR_XM_SpammyWords4 6034 4.50 7.30 3.24 80 BAYES_80 5959 5.09 9.31 3.20 81 BOTNET_IPINHOSTNAME 5733 5.52 10.97 3.08 82 XM_Body_Dirty_Words 5602 4.21 6.90 3.01 83 RELAYCOUNTRY_META 5397 7.25 16.98 2.90 84 RCVD_IN_MSPIKE_H4 5358 2.92 3.02 2.88 85 SCC_BODY_URI_ONLY 5182 2.27 1.13 2.78 86 HTML_IMAGE_RATIO_06 4934 2.80 3.13 2.65 87 MIME_QP_LONG_LINE 4742 2.27 1.64 2.55 88 XM_B_SpammyTLD 4715 2.81 3.42 2.53 89 MIME_HTML_MOSTLY 4573 2.94 4.02 2.46 90 TR_DCC_Bayes_99 4533 9.35 24.79 2.44 91 MIME_HTML_ONLY_MULTI 4498 2.67 3.24 2.42 92 XMSexyCombo_05 4253 3.24 5.36 2.28 93 TR_XM_DKIM_Undo 4236 11.01 30.52 2.28 94 BAYES_95 4181 3.12 5.06 2.25 95 TR_MetaPhish_Combo_01 3893 1.99 1.77 2.09 96 MAILING_LIST_MULTI 3864 2.02 1.89 2.08 97 T_TVD_MIME_NO_HEADERS 3852 1.45 0.06 2.07 98 T_XMDrugObfuBody_14 3808 2.78 4.41 2.05 99 FROM_EXCESS_BASE64 3656 2.15 2.55 1.96 100 XM_PDF 3564 1.86 1.74 1.91 101 XMBdyGiftCard01 3547 1.64 1.03 1.91 102 XM_CamelCaseFrm001 3461 2.69 4.53 1.86 103 RCVD_IN_IADB_LISTED 3347 1.42 0.58 1.80 104 BAYES_05 3272 1.48 0.86 1.76 105 TooManyTo_002 3244 1.37 0.54 1.74 106 HTML_MIME_NO_HTML_TAG 3140 1.55 1.23 1.69 107 T_TooManySym_03 3127 1.29 0.42 1.68 108 TR_XM_PhishingBody 3042 2.74 5.22 1.63 109 HTML_IMAGE_RATIO_08 2998 1.72 1.96 1.61 110 RCVD_IN_IADB_SPF 2978 1.26 0.50 1.60 111 TM2_M_URI_OPT_OUT 2973 1.81 2.30 1.60 112 UNTRUSTED_Relay 2868 3.22 6.98 1.54 113 TR_XM_SpammyWords5 2851 2.50 4.67 1.53 114 TR_XM_UnparsRelay 2834 4.63 11.58 1.52 115 IN_HORDE_ADDRESS_BOOK 2788 1.07 0.11 1.50 116 XMStockSpam_06 2777 1.62 1.92 1.49 117 TR_XM_SpammyRelay 2721 4.90 12.58 1.46 118 URI_NOVOWEL 2714 1.28 0.89 1.46 119 RCVD_IN_IADB_SENDERID 2687 1.14 0.47 1.44 120 TVD_SPACE_RATIO 2659 1.03 0.15 1.43 121 RCVD_IN_IADB_DK 2617 1.12 0.48 1.41 122 XMDiploma_00 2551 1.67 2.33 1.37 123 TVD_RCVD_IP 2521 1.33 1.28 1.35 124 XM_B_Unsub2 2431 1.82 2.98 1.31 125 XM_DK_Undo_01 2407 1.29 1.29 1.29 126 URI_OPTOUT_3LD 2400 1.09 0.65 1.29 127 DKIM_INVALID 2320 2.04 3.81 1.25 128 RCVD_IN_IADB_VOUCHED 2316 0.96 0.31 1.24 129 XMGappySubj_01 2260 0.89 0.18 1.21 130 XM_B_Investor 2148 1.98 3.84 1.15 131 T_XMDrugObfuBody_08 2080 1.57 2.58 1.12 132 XM_B_URI_Unicode 2060 1.35 1.89 1.11 133 XM_SPF_SoftFail 2043 1.60 2.73 1.10 134 XM_B_SpammyWords4 2042 1.47 2.32 1.10 135 XM_SendGrid 2018 1.51 2.46 1.08 136 XMGappySubj_02 2014 0.77 0.08 1.08 137 XM_B_COPY_HTML 1989 1.18 1.44 1.07 138 RELAYCOUNTRY_CA 1957 2.79 6.69 1.05 139 XM_GoogleGroups 1920 0.94 0.75 1.03 140 XMBrknScrpt_02 1885 1.32 2.00 1.01 141 TR_Symld_Words 1747 0.87 0.72 0.94 142 BOTNET 1745 3.17 8.16 0.94 143 RCVD_IN_IADB_OPTIN 1695 0.69 0.18 0.91 144 XMBSHREFv2 1658 0.70 0.28 0.89 145 T_FILL_THIS_FORM_SHORT 1655 1.79 3.80 0.89 146 SUBJ_ALL_CAPS 1613 1.34 2.38 0.87 147 DIET_1 1589 1.25 2.14 0.85 148 XMSolicitRefs_0 1559 0.79 0.68 0.84 149 XMPhish30 1558 1.37 2.55 0.84 150 TooManyTo_003 1537 0.72 0.49 0.83 151 XMLngstWrd_00 1529 0.68 0.36 0.82 152 XM_OfRef6 1521 1.64 3.49 0.82 153 T_XMHurry_00 1500 1.39 2.68 0.81 154 XM_UB50 1486 1.58 3.34 0.80 155 RCVD_IN_PSBL 1468 1.15 1.95 0.79 156 TR_XM_DK_SendGrid 1442 0.82 0.92 0.77 157 TR_XM_SpammyWords2 1441 4.37 12.40 0.77 158 URI_HEX 1401 0.98 1.48 0.75 159 TR_XM_MSPIKECOMBO 1391 2.34 5.88 0.75 160 RCVD_IN_MSPIKE_BL 1391 2.34 5.89 0.75 161 XM_H_Long_From02 1319 0.84 1.15 0.71 162 XMSubMetaI_00 1313 1.01 1.67 0.71 163 XM_B_DNDMA 1288 1.16 2.21 0.69 164 XM_H_PHPMailer 1270 0.69 0.71 0.68 165 TM2_M_OBFU_COMMENT 1243 0.72 0.84 0.67 166 HTML_TAG_BALANCE_BODY 1201 0.69 0.79 0.65 167 DKIM_ADSP_CUSTOM_MED 1200 0.71 0.87 0.64 168 TooManyTo_004 1200 0.59 0.46 0.64 169 XM_ProductURIs 1197 1.09 2.09 0.64 170 PLING_QUERY 1192 0.88 1.41 0.64 171 T_XMDrugObfuBody_00 1124 0.79 1.21 0.60 172 T_STY_INVIS_DIRECT 1111 0.73 1.03 0.60 173 TooManyTo_005 1030 0.52 0.43 0.55 174 MPART_ALT_DIFF_COUNT 1018 0.74 1.16 0.55 175 MSGID_FROM_MTA_HEADER 1008 0.42 0.15 0.54 176 RCVD_IN_PBL 984 0.70 1.09 0.53 177 URI_TRY_3LD 981 0.67 0.98 0.53 178 XM_B_FormFill 975 0.37 0.02 0.52 179 THIS_AD 972 0.86 1.61 0.52 180 USER_IN_WHITELIST 965 0.36 0.00 0.52 181 USER_IN_WELCOMELIST 965 0.36 0.00 0.52 182 XMSlimDrugH 945 0.56 0.69 0.51 183 XM_URI_RBL 940 1.36 3.27 0.51 184 XMBody_95 907 0.37 0.10 0.49 185 T_TooManySym_04 906 0.40 0.21 0.49 186 RCVD_IN_MSPIKE_L3 893 1.44 3.58 0.48 187 TR_XM_Base64_M1 889 0.66 1.06 0.48 188 XMLngstWrd_01 845 0.40 0.29 0.45 189 HTML_TAG_BALANCE_CENTER 842 0.40 0.27 0.45 190 RCVD_IN_BL_SPAMCOP_NET 842 3.47 10.21 0.45 191 XMSubMetaSxObfu_02 829 0.44 0.44 0.45 192 TR_XM_SpoofStaff 813 0.35 0.17 0.44 193 XM_H_SpoofStaff4 813 0.34 0.11 0.44 194 SUBJ_DOLLARS 812 0.49 0.60 0.44 195 XM_ShortIntro_01 805 0.43 0.42 0.43 196 XMNoVowels 790 0.47 0.57 0.42 197 XM_S_SubURI 763 0.31 0.08 0.41 198 XMGenDplmaNmb 761 0.63 1.11 0.41 199 FORGED_GMAIL_RCVD 746 0.48 0.67 0.40 200 DKIM_ADSP_NXDOMAIN 738 0.76 1.56 0.40 ----------------------------------------------------------------------