Email: 401183 Autolearn: 0 AvgScore: 4.75 AvgScanTime: 1.38 sec Spam: 123762 Autolearn: 0 AvgScore: 14.38 AvgScanTime: 1.51 sec Ham: 277421 Autolearn: 0 AvgScore: 0.46 AvgScanTime: 1.32 sec Time Spent Running SA: 153.71 hours Time Spent Processing Spam: 52.04 hours Time Spent Processing Ham: 101.67 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 121806 99.19 98.42 99.54 2 HTML_MESSAGE 118256 89.08 95.55 86.20 3 DKIM_SIGNED 110475 80.69 89.26 76.87 4 XM_DK_Pass 105942 78.93 85.60 75.95 5 DKIM_VALID 105049 78.00 84.88 74.93 6 XM_B_Unicode 104461 74.67 84.40 70.33 7 RELAYCOUNTRY_US 100709 82.18 81.37 82.54 8 DCC_CHECK 92736 51.84 74.93 41.54 9 XM_B_SpammyWords 85675 52.77 69.23 45.42 10 DKIM_VALID_AU 83543 63.13 67.50 61.18 11 XMListUnsubscribeExists 83474 54.77 67.45 49.12 12 XM_B_Unicode3 61891 44.39 50.01 41.88 13 LOC_TINY_FONT_1 60469 35.34 48.86 29.31 14 BAYES_50 50683 54.28 40.95 60.23 15 XM_DK_Undo_02 50650 16.59 40.93 5.74 16 XM_B_SpammyWords2 50243 26.44 40.60 20.12 17 HTML_FONT_LOW_CONTRAST 47285 31.71 38.21 28.81 18 FVGT_m_MULTI_ODD 44259 29.33 35.76 26.46 19 DKIM_VALID_EF 40858 31.36 33.01 30.62 20 BAYES_99 39112 12.49 31.60 3.97 21 T_KAM_HTML_FONT_INVALID 38394 24.39 31.02 21.44 22 TR_XM_DKIM_Undo 36835 10.94 29.76 2.54 23 MIME_HTML_ONLY 36312 23.15 29.34 20.38 24 BAYES_999 30441 9.70 24.60 3.05 25 XMSubLong 30398 23.84 24.56 23.51 26 TR_XM_DK_Unsub 29579 16.88 23.90 13.75 27 DCC_CHECK_NEGATIVE 29250 47.69 23.63 58.43 28 XM_Multi_Part_URI 28067 17.23 22.68 14.80 29 TR_DCC_Bayes_99 28031 8.11 22.65 1.62 30 T_TM2_M_HEADER_IN_MSG 27448 27.43 22.18 29.77 31 XM_B_Unsub 25982 13.66 20.99 10.38 32 TR_XM_BayesUnsub 24925 11.73 20.14 7.97 33 RCVD_IN_MSPIKE_H2 23648 16.96 19.11 16.00 34 UNPARSEABLE_RELAY 22235 13.94 17.97 12.15 35 RELAYCOUNTRY_META 21170 7.74 17.11 3.57 36 XM_B_SpammyWords3 18259 7.85 14.75 4.77 37 LOTS_OF_MONEY 17812 8.77 14.39 6.27 38 TR_MAX_INTL_RELAY 17372 8.47 14.04 5.99 39 TR_XM_SpammyWords4 16070 6.91 12.98 4.20 40 TR_XM_SpammyRelay 15705 5.25 12.69 1.94 41 BOTNET_IPINHOSTNAME 14643 5.99 11.83 3.38 42 TR_XM_SpammyWords2 14277 3.95 11.54 0.56 43 FSL_BULK_SIG 13626 10.15 11.01 9.77 44 XM_Evil_Numbers_Gen 12509 9.33 10.11 8.99 45 RCVD_IN_BL_SPAMCOP_NET 11758 3.39 9.50 0.66 46 XM_B_Phish_Phrases 11499 7.41 9.29 6.57 47 TR_XM_UnparsRelay 11428 4.01 9.23 1.68 48 BOTNET 11343 3.90 9.17 1.55 49 RCVD_IN_MSPIKE_WL 10985 15.60 8.88 18.60 50 BAYES_80 10783 5.23 8.71 3.68 51 XMSubMetaSx_00 9572 4.89 7.73 3.63 52 HTML_IMAGE_RATIO_02 9359 5.48 7.56 4.56 53 BAYES_60 9283 7.00 7.50 6.77 54 LotsOfNums_01 9081 7.87 7.34 8.11 55 XM_Body_Dirty_Words 8811 4.29 7.12 3.03 56 RELAYCOUNTRY_CA 8492 2.65 6.86 0.77 57 MPART_ALT_DIFF 8273 5.51 6.68 4.98 58 UNTRUSTED_Relay 7921 3.07 6.40 1.59 59 XM_B_PhoneNumber 7196 8.86 5.81 10.22 60 XM_UncommonTLD01 7057 4.76 5.70 4.34 61 RCVD_IN_MSPIKE_BL 6885 2.43 5.56 1.03 62 TR_XM_MSPIKECOMBO 6885 2.43 5.56 1.03 63 XM_H_Long_From01 6811 6.30 5.50 6.66 64 HTML_IMAGE_RATIO_04 6655 5.05 5.38 4.90 65 XM_B_Investor 6361 2.65 5.14 1.53 66 XM_H_GMP 6315 5.68 5.10 5.94 67 BAYES_95 6115 3.12 4.94 2.31 68 XMStrtUSub 5881 5.06 4.75 5.19 69 TR_XM_PhishingBody 5850 2.55 4.73 1.58 70 MIME_HTML_MOSTLY 5835 3.15 4.71 2.45 71 XMSexyCombo_05 5782 2.43 4.67 1.43 72 XM_B_SpammyTLD 5703 3.57 4.61 3.10 73 TooManyTo_001 5682 7.31 4.59 8.52 74 RCVD_IN_MSPIKE_H3 5569 6.84 4.50 7.89 75 TR_XM_SPAMCOP 5511 1.53 4.45 0.23 76 DKIM_INVALID 5426 2.70 4.38 1.94 77 TM2_M_VERY_LONG_WORD 5266 2.44 4.25 1.63 78 T_XMDrugObfuBody_14 5163 2.72 4.17 2.07 79 TR_XM_SpammyWords5 4893 2.37 3.95 1.66 80 TR_XM_SpammyWords3 4876 1.47 3.94 0.37 81 XM_OfRef6 4745 1.98 3.83 1.15 82 XM_CamelCaseFrm001 4695 2.61 3.79 2.07 83 XMNumbers 4599 3.89 3.72 3.97 84 T_XMDrugObfuBody_08 4550 2.28 3.68 1.66 85 HTML_IMAGE_RATIO_06 4294 3.18 3.47 3.05 86 RCVD_IN_MSPIKE_L3 4224 1.51 3.41 0.66 87 MIME_QP_LONG_LINE 4203 4.55 3.40 5.07 88 XM_B_Unsub2 4189 1.96 3.38 1.33 89 XM_UB50 4105 1.71 3.32 0.99 90 USER_IN_DEF_DKIM_WL 3999 10.81 3.23 14.19 91 TR_XM_NoHeaderRelay 3954 1.12 3.19 0.19 92 MIME_HTML_ONLY_MULTI 3950 2.97 3.19 2.87 93 XM_URI_RBL 3843 1.17 3.11 0.31 94 XM_SPF_SoftFail 3747 2.32 3.03 2.00 95 RCVD_IN_VALIDITY_RPBL 3611 0.97 2.92 0.10 96 RELAYCOUNTRY_AU 3563 1.35 2.88 0.67 97 XM_B_URI_Unicode 3511 2.11 2.84 1.78 98 RCVD_IN_VALIDITY_SAFE 3453 3.93 2.79 4.44 99 T_TooManySym_01 3428 4.96 2.77 5.93 100 TM2_M_URI_OPT_OUT 3353 2.20 2.71 1.97 101 XMDiploma_00 3298 2.05 2.66 1.77 102 FROM_EXCESS_BASE64 3284 2.06 2.65 1.80 103 TR_LOTS_OF_MONEY3 3227 1.10 2.61 0.42 104 T_FILL_THIS_FORM_SHORT 3208 1.43 2.59 0.92 105 XM_B_SpammyWords4 3074 1.29 2.48 0.75 106 HTML_IMAGE_RATIO_08 2996 2.38 2.42 2.36 107 RCVD_IN_MSPIKE_H4 2960 3.53 2.39 4.03 108 ALL_TRUSTED 2892 10.77 2.34 14.53 109 RCVD_IN_VALIDITY_CERTIFIED 2891 3.25 2.34 3.66 110 XMBody_17 2679 0.94 2.16 0.39 111 MPART_ALT_DIFF_COUNT 2624 1.00 2.12 0.50 112 SpammyFromTLD_02 2607 1.16 2.11 0.74 113 XMStockSpam_06 2482 1.45 2.01 1.20 114 XM_SendGrid 2478 2.07 2.00 2.10 115 SpammyFromTLD_01 2471 1.20 2.00 0.85 116 RCVD_IN_MSPIKE_H5 2456 5.24 1.98 6.69 117 BAYES_40 2442 4.41 1.97 5.49 118 MAILING_LIST_MULTI 2372 2.64 1.92 2.96 119 TR_XM_INV_DKIM 2316 0.61 1.87 0.04 120 URI_HEX 2281 1.44 1.84 1.26 121 SUBJ_ALL_CAPS 2272 1.65 1.84 1.57 122 T_XMHurry_00 2250 1.09 1.82 0.77 123 T_XMDrugObfuBody_00 2235 1.17 1.81 0.89 124 XMBrknScrpt_02 2169 1.22 1.75 0.98 125 HTML_MIME_NO_HTML_TAG 2166 2.24 1.75 2.46 126 XMPhish30 2147 0.90 1.73 0.53 127 HK_RANDOM_REPLYTO 2138 0.61 1.73 0.11 128 TR_XM_MSPIKECOMBO2 2064 0.54 1.67 0.03 129 XMBdyGiftCard01 2051 0.93 1.66 0.61 130 XM_DK_Undo_01 2001 1.60 1.62 1.60 131 T_REMOTE_IMAGE 1987 3.29 1.61 4.04 132 KHOP_HELO_FCRDNS 1962 1.93 1.59 2.08 133 BAYES_20 1881 3.20 1.52 3.95 134 XMGenDplmaNmb 1853 1.23 1.50 1.11 135 TM2_M_OBFU_COMMENT 1823 0.71 1.47 0.37 136 URI_NOVOWEL 1764 1.48 1.43 1.51 137 SHORTCIRCUIT 1749 0.44 1.41 0.00 138 RCVD_IN_ZEN_LASTEXTERNAL 1749 0.44 1.41 0.00 139 URI_TRY_3LD 1738 0.96 1.40 0.76 140 XM_B_COPY_HTML 1736 0.93 1.40 0.72 141 RDNS_DYNAMIC 1708 0.54 1.38 0.17 142 TR_XM_DK_SendGrid 1700 1.43 1.37 1.45 143 XM_H_Long_From02 1692 1.02 1.37 0.86 144 XMBody_78 1692 0.68 1.37 0.37 145 PDS_RDNS_DYNAMIC_FP 1684 0.44 1.36 0.03 146 XM_B_Phish66 1604 0.66 1.30 0.38 147 TR_Symld_Words 1595 1.46 1.29 1.54 148 BOTNET_NORDNS 1575 0.40 1.27 0.01 149 SCC_BODY_URI_ONLY 1575 2.13 1.27 2.52 150 TR_MetaPhish_Combo_01 1514 1.55 1.22 1.69 151 TR_XM_PHPForged 1514 0.62 1.22 0.36 152 RCVD_IN_IADB_LISTED 1509 2.81 1.22 3.52 153 RCVD_IN_MSPIKE_L5 1508 0.38 1.22 0.00 154 TR_XM_FormFill2 1500 0.62 1.21 0.36 155 RCVD_IN_PSBL 1488 0.78 1.20 0.59 156 TR_XM_MaxSPIKE 1485 0.39 1.20 0.02 157 TR_XM_PHPDW 1479 0.61 1.20 0.36 158 XM_H_PHPOS 1451 0.60 1.17 0.35 159 XM_B_DNDMA 1445 0.64 1.17 0.41 160 TVD_RCVD_IP 1417 1.35 1.14 1.44 161 XM_HighProb1 1410 0.35 1.14 0.00 162 XM_B_SEO 1386 0.51 1.12 0.24 163 RCVD_IN_PBL 1375 0.86 1.11 0.75 164 RCVD_IN_IADB_SPF 1365 2.46 1.10 3.07 165 ANY_BOUNCE_MESSAGE 1363 2.93 1.10 3.75 166 BOUNCE_MESSAGE 1362 2.93 1.10 3.75 167 J_POPCORN_WO_D 1339 0.43 1.08 0.14 168 TR_LOTS_OF_MONEY2 1337 0.47 1.08 0.20 169 T_MONEY_PERCENT 1337 0.47 1.08 0.20 170 XMSexyCombo_01 1334 0.41 1.08 0.11 171 XMSubMetaI_00 1320 0.74 1.07 0.60 172 SHOPIFY_IMG_NOT_RCVD_SFY 1311 0.50 1.06 0.25 173 DKIM_ADSP_NXDOMAIN 1311 0.53 1.06 0.30 174 TR_XM_InvalidRelay 1308 0.33 1.06 0.01 175 RCVD_IN_IADB_DK 1304 2.17 1.05 2.67 176 RCVD_IN_IADB_SENDERID 1286 2.22 1.04 2.75 177 DIET_1 1271 0.53 1.03 0.31 178 XM_ProductURIs 1258 0.69 1.02 0.54 179 XM_DIRTYINTL 1245 0.35 1.01 0.06 180 TR_XM_SEO4 1241 0.38 1.00 0.10 181 HTTPS_HTTP_MISMATCH 1226 0.73 0.99 0.61 182 HTML_IMAGE_ONLY_20 1183 0.54 0.96 0.35 183 RCVD_IN_SBL_CSS 1180 0.31 0.95 0.03 184 TR_XM_Base64_L1 1177 0.33 0.95 0.05 185 RCVD_IN_XBL 1176 0.31 0.95 0.02 186 XM_UB99 1169 0.29 0.94 0.00 187 T_STY_INVIS_DIRECT 1168 0.56 0.94 0.38 188 DKIM_ADSP_CUSTOM_MED 1167 0.87 0.94 0.84 189 XMReplyNow 1166 0.48 0.94 0.28 190 TM2_M_A_HREF_HREF 1162 0.47 0.94 0.26 191 RCVD_IN_MSPIKE_L4 1156 0.54 0.93 0.37 192 RELAYCOUNTRY_FR 1130 0.43 0.91 0.22 193 HELO_DYNAMIC_SPLIT_IP 1127 0.28 0.91 0.00 194 T_Symld_Words_02 1126 0.66 0.91 0.54 195 XMPhish14 1115 0.57 0.90 0.42 196 TR_XM_RelayPhish 1103 0.32 0.89 0.07 197 T_TooManySym_02 1098 2.49 0.89 3.20 198 TR_XM_Base64_M1 1090 0.66 0.88 0.57 199 URIBL_BLACK 1084 0.28 0.88 0.01 200 RELAYCOUNTRY_GB 1062 0.67 0.86 0.59 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 276139 99.19 98.42 99.54 2 HTML_MESSAGE 239132 89.08 95.55 86.20 3 RELAYCOUNTRY_US 228974 82.18 81.37 82.54 4 DKIM_SIGNED 213257 80.69 89.26 76.87 5 XM_DK_Pass 210695 78.93 85.60 75.95 6 DKIM_VALID 207870 78.00 84.88 74.93 7 XM_B_Unicode 195108 74.67 84.40 70.33 8 DKIM_VALID_AU 169724 63.13 67.50 61.18 9 BAYES_50 167095 54.28 40.95 60.23 10 DCC_CHECK_NEGATIVE 162090 47.69 23.63 58.43 11 XMListUnsubscribeExists 136262 54.77 67.45 49.12 12 XM_B_SpammyWords 126018 52.77 69.23 45.42 13 XM_B_Unicode3 116193 44.39 50.01 41.88 14 DCC_CHECK 115238 51.84 74.93 41.54 15 DKIM_VALID_EF 84951 31.36 33.01 30.62 16 T_TM2_M_HEADER_IN_MSG 82597 27.43 22.18 29.77 17 LOC_TINY_FONT_1 81313 35.34 48.86 29.31 18 HTML_FONT_LOW_CONTRAST 79915 31.71 38.21 28.81 19 FVGT_m_MULTI_ODD 73415 29.33 35.76 26.46 20 XMSubLong 65232 23.84 24.56 23.51 21 T_KAM_HTML_FONT_INVALID 59468 24.39 31.02 21.44 22 MIME_HTML_ONLY 56544 23.15 29.34 20.38 23 XM_B_SpammyWords2 55828 26.44 40.60 20.12 24 RCVD_IN_MSPIKE_WL 51614 15.60 8.88 18.60 25 RCVD_IN_MSPIKE_H2 44374 16.96 19.11 16.00 26 XM_Multi_Part_URI 41050 17.23 22.68 14.80 27 ALL_TRUSTED 40310 10.77 2.34 14.53 28 USER_IN_DEF_DKIM_WL 39376 10.81 3.23 14.19 29 TR_XM_DK_Unsub 38148 16.88 23.90 13.75 30 UNPARSEABLE_RELAY 33703 13.94 17.97 12.15 31 BAYES_00 31134 7.98 0.72 11.22 32 XM_B_Unsub 28806 13.66 20.99 10.38 33 XM_B_PhoneNumber 28349 8.86 5.81 10.22 34 FSL_BULK_SIG 27100 10.15 11.01 9.77 35 XM_Evil_Numbers_Gen 24938 9.33 10.11 8.99 36 TooManyTo_001 23642 7.31 4.59 8.52 37 LotsOfNums_01 22499 7.87 7.34 8.11 38 TR_XM_BayesUnsub 22120 11.73 20.14 7.97 39 RCVD_IN_MSPIKE_H3 21877 6.84 4.50 7.89 40 TR_XM_DK_Bayes 21415 5.49 0.48 7.72 41 TR_XM_DK_Bayes1 21031 5.39 0.47 7.58 42 XM_DKIMWhitelistDomains 20580 5.14 0.04 7.42 43 BAYES_60 18793 7.00 7.50 6.77 44 RCVD_IN_MSPIKE_H5 18548 5.24 1.98 6.69 45 XM_H_Long_From01 18469 6.30 5.50 6.66 46 XM_B_Phish_Phrases 18233 7.41 9.29 6.57 47 TR_XM_DK_Bayes2 17665 4.50 0.31 6.37 48 LOTS_OF_MONEY 17381 8.77 14.39 6.27 49 TR_MAX_INTL_RELAY 16627 8.47 14.04 5.99 50 XM_H_GMP 16478 5.68 5.10 5.94 51 T_TooManySym_01 16462 4.96 2.77 5.93 52 XM_DK_Undo_02 15911 16.59 40.93 5.74 53 BAYES_40 15232 4.41 1.97 5.49 54 XMStrtUSub 14409 5.06 4.75 5.19 55 MIME_QP_LONG_LINE 14053 4.55 3.40 5.07 56 MPART_ALT_DIFF 13818 5.51 6.68 4.98 57 HTML_IMAGE_RATIO_04 13593 5.05 5.38 4.90 58 XM_B_SpammyWords3 13240 7.85 14.75 4.77 59 HTML_IMAGE_RATIO_02 12638 5.48 7.56 4.56 60 RCVD_IN_VALIDITY_SAFE 12308 3.93 2.79 4.44 61 XM_PDF 12130 3.28 0.83 4.37 62 XM_UncommonTLD01 12033 4.76 5.70 4.34 63 TR_XM_SpammyWords4 11656 6.91 12.98 4.20 64 T_REMOTE_IMAGE 11212 3.29 1.61 4.04 65 RCVD_IN_MSPIKE_H4 11189 3.53 2.39 4.03 66 BAYES_99 11011 12.49 31.60 3.97 67 XMNumbers 11008 3.89 3.72 3.97 68 BAYES_20 10949 3.20 1.52 3.95 69 ANY_BOUNCE_MESSAGE 10406 2.93 1.10 3.75 70 BOUNCE_MESSAGE 10403 2.93 1.10 3.75 71 BAYES_80 10212 5.23 8.71 3.68 72 RCVD_IN_VALIDITY_CERTIFIED 10156 3.25 2.34 3.66 73 XMSubMetaSx_00 10063 4.89 7.73 3.63 74 RELAYCOUNTRY_META 9895 7.74 17.11 3.57 75 RCVD_IN_IADB_LISTED 9765 2.81 1.22 3.52 76 BOTNET_IPINHOSTNAME 9385 5.99 11.83 3.38 77 T_TooManySym_02 8881 2.49 0.89 3.20 78 XM_B_SpammyTLD 8600 3.57 4.61 3.10 79 RCVD_IN_IADB_SPF 8514 2.46 1.10 3.07 80 TooManyTo_002 8484 2.34 0.72 3.06 81 HTML_IMAGE_RATIO_06 8474 3.18 3.47 3.05 82 BAYES_999 8467 9.70 24.60 3.05 83 XM_Body_Dirty_Words 8409 4.29 7.12 3.03 84 MAILING_LIST_MULTI 8207 2.64 1.92 2.96 85 MIME_HTML_ONLY_MULTI 7954 2.97 3.19 2.87 86 RCVD_IN_IADB_SENDERID 7623 2.22 1.04 2.75 87 RCVD_IN_IADB_DK 7395 2.17 1.05 2.67 88 TR_XM_DKIM_Undo 7059 10.94 29.76 2.54 89 SCC_BODY_URI_ONLY 6990 2.13 1.27 2.52 90 INVALID_MSGID 6988 1.81 0.22 2.52 91 HTML_MIME_NO_HTML_TAG 6831 2.24 1.75 2.46 92 MIME_HTML_MOSTLY 6800 3.15 4.71 2.45 93 BAYES_05 6583 1.84 0.66 2.37 94 HTML_IMAGE_RATIO_08 6558 2.38 2.42 2.36 95 BAYES_95 6408 3.12 4.94 2.31 96 RCVD_IN_IADB_VOUCHED 6355 1.75 0.52 2.29 97 TO_MALFORMED 6268 1.57 0.01 2.26 98 XM_SendGrid 5817 2.07 2.00 2.10 99 KHOP_HELO_FCRDNS 5765 1.93 1.59 2.08 100 XM_CamelCaseFrm001 5756 2.61 3.79 2.07 101 T_XMDrugObfuBody_14 5740 2.72 4.17 2.07 102 XM_SPF_SoftFail 5543 2.32 3.03 2.00 103 TM2_M_URI_OPT_OUT 5460 2.20 2.71 1.97 104 DKIM_INVALID 5387 2.70 4.38 1.94 105 TR_XM_SpammyRelay 5369 5.25 12.69 1.94 106 FROM_EXCESS_BASE64 4988 2.06 2.65 1.80 107 XM_B_URI_Unicode 4942 2.11 2.84 1.78 108 XMDiploma_00 4919 2.05 2.66 1.77 109 TR_MetaPhish_Combo_01 4692 1.55 1.22 1.69 110 TR_XM_UnparsRelay 4667 4.01 9.23 1.68 111 TR_XM_SpammyWords5 4613 2.37 3.95 1.66 112 T_XMDrugObfuBody_08 4607 2.28 3.68 1.66 113 TM2_M_VERY_LONG_WORD 4509 2.44 4.25 1.63 114 TR_DCC_Bayes_99 4494 8.11 22.65 1.62 115 XM_DK_Undo_01 4436 1.60 1.62 1.60 116 RCVD_IN_IADB_OPTIN 4401 1.21 0.35 1.59 117 UNTRUSTED_Relay 4398 3.07 6.40 1.59 118 TR_XM_PhishingBody 4397 2.55 4.73 1.58 119 TooManyTo_003 4371 1.26 0.57 1.58 120 SUBJ_ALL_CAPS 4359 1.65 1.84 1.57 121 XMGappySubj_01 4301 1.12 0.16 1.55 122 BOTNET 4294 3.90 9.17 1.55 123 TR_Symld_Words 4278 1.46 1.29 1.54 124 XM_B_Investor 4253 2.65 5.14 1.53 125 URI_NOVOWEL 4179 1.48 1.43 1.51 126 IN_HORDE_ADDRESS_BOOK 4107 1.06 0.11 1.48 127 TR_XM_DK_SendGrid 4023 1.43 1.37 1.45 128 TVD_RCVD_IP 3999 1.35 1.14 1.44 129 XMSexyCombo_05 3977 2.43 4.67 1.43 130 XM_B_Unsub2 3685 1.96 3.38 1.33 131 XM_GoogleGroups 3535 1.15 0.86 1.27 132 URI_HEX 3501 1.44 1.84 1.26 133 T_TooManySym_03 3371 0.96 0.38 1.22 134 FROM_GOV_DKIM_AU 3337 0.89 0.20 1.20 135 XMStockSpam_06 3331 1.45 2.01 1.20 136 HELO_NODOT 3298 0.86 0.12 1.19 137 HELO_NO_DOMAIN 3293 0.85 0.11 1.19 138 TooManyTo_004 3235 0.95 0.48 1.17 139 XM_OfRef6 3203 1.98 3.83 1.15 140 XMGenDplmaNmb 3071 1.23 1.50 1.11 141 TVD_SPACE_RATIO 2929 0.78 0.15 1.06 142 TR_XM_MSPIKECOMBO 2868 2.43 5.56 1.03 143 RCVD_IN_MSPIKE_BL 2868 2.43 5.56 1.03 144 XMSolicitRefs_0 2760 0.89 0.64 0.99 145 XM_UB50 2741 1.71 3.32 0.99 146 XMBrknScrpt_02 2718 1.22 1.75 0.98 147 XMCapTrack 2618 0.81 0.51 0.94 148 TooManyTo_005 2561 0.77 0.44 0.92 149 XM_ShortIntro_01 2549 0.75 0.39 0.92 150 T_FILL_THIS_FORM_SHORT 2539 1.43 2.59 0.92 151 XM_B_FormFill 2505 0.64 0.05 0.90 152 T_TVD_MIME_NO_HEADERS 2465 0.63 0.04 0.89 153 T_XMDrugObfuBody_00 2457 1.17 1.81 0.89 154 XM_H_Long_From02 2395 1.02 1.37 0.86 155 SpammyFromTLD_01 2345 1.20 2.00 0.85 156 DKIM_ADSP_CUSTOM_MED 2320 0.87 0.94 0.84 157 URI_OPTOUT_3LD 2261 0.81 0.81 0.82 158 RELAYCOUNTRY_CA 2130 2.65 6.86 0.77 159 T_XMHurry_00 2126 1.09 1.82 0.77 160 URI_TRY_3LD 2095 0.96 1.40 0.76 161 XM_B_SpammyWords4 2094 1.29 2.48 0.75 162 RCVD_IN_PBL 2093 0.86 1.11 0.75 163 XM_H_PHPMailer 2061 0.69 0.56 0.74 164 SpammyFromTLD_02 2057 1.16 2.11 0.74 165 XM_B_COPY_HTML 1995 0.93 1.40 0.72 166 XMNoVowels 1961 0.64 0.49 0.71 167 XM_RXBody 1910 0.69 0.68 0.69 168 XMGappySubj_02 1892 0.49 0.05 0.68 169 RELAYCOUNTRY_AU 1848 1.35 2.88 0.67 170 RCVD_IN_BL_SPAMCOP_NET 1832 3.39 9.50 0.66 171 RCVD_IN_MSPIKE_L3 1828 1.51 3.41 0.66 172 HTTPS_HTTP_MISMATCH 1692 0.73 0.99 0.61 173 HTML_IMAGE_ONLY_32 1681 0.49 0.23 0.61 174 XMBdyGiftCard01 1679 0.93 1.66 0.61 175 XMBSHREFv2 1670 0.54 0.39 0.60 176 XMSubMetaI_00 1664 0.74 1.07 0.60 177 RCVD_IN_PSBL 1644 0.78 1.20 0.59 178 RELAYCOUNTRY_GB 1638 0.67 0.86 0.59 179 XM_shorewaves_Whitelist 1621 0.40 0.00 0.58 180 TR_XM_Base64_M1 1568 0.66 0.88 0.57 181 XMLngstWrd_00 1562 0.56 0.54 0.56 182 XMSlimDrugH 1561 0.62 0.76 0.56 183 TR_XM_SpammyWords2 1558 3.95 11.54 0.56 184 T_OBFU_PDF_ATTACH 1520 0.42 0.13 0.55 185 MSGID_FROM_MTA_HEADER 1516 0.44 0.21 0.55 186 T_Symld_Words_02 1511 0.66 0.91 0.54 187 FORGED_GMAIL_RCVD 1505 0.59 0.70 0.54 188 XM_ProductURIs 1496 0.69 1.02 0.54 189 XMPhish30 1480 0.90 1.73 0.53 190 T_MANY_PILL_PRICE 1476 0.37 0.02 0.53 191 MPART_ALT_DIFF_COUNT 1398 1.00 2.12 0.50 192 NML_ADSP_CUSTOM_MED 1397 0.59 0.78 0.50 193 XMLngstWrd_01 1350 0.49 0.49 0.49 194 XMMoneyMeta_00 1301 0.58 0.83 0.47 195 LongTLD 1283 0.58 0.84 0.46 196 XMDateMe_00 1210 0.53 0.74 0.44 197 FONT_INVIS_MSGID 1204 0.31 0.05 0.43 198 HTML_TAG_BALANCE_BODY 1191 0.50 0.64 0.43 199 XMBody_95 1183 0.33 0.11 0.43 200 TR_LOTS_OF_MONEY3 1166 1.10 2.61 0.42 ----------------------------------------------------------------------