Email: 257525 Autolearn: 0 AvgScore: 5.09 AvgScanTime: 1.37 sec Spam: 79019 Autolearn: 0 AvgScore: 14.10 AvgScanTime: 1.52 sec Ham: 178506 Autolearn: 0 AvgScore: 1.10 AvgScanTime: 1.30 sec Time Spent Running SA: 98.06 hours Time Spent Processing Spam: 33.43 hours Time Spent Processing Ham: 64.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 78501 99.62 99.34 99.74 2 HTML_MESSAGE 74828 88.38 94.70 85.59 3 DKIM_SIGNED 71490 72.86 90.47 65.06 4 XM_DK_Pass 68331 71.22 86.47 64.47 5 DKIM_VALID 67898 70.73 85.93 64.00 6 XM_B_Unicode 66768 73.22 84.50 68.23 7 RELAYCOUNTRY_US 62797 81.91 79.47 82.98 8 DCC_CHECK 61319 54.70 77.60 44.56 9 XMListUnsubscribeExists 56676 53.17 71.72 44.95 10 XM_B_SpammyWords 56012 52.81 70.88 44.82 11 DKIM_VALID_AU 54022 59.08 68.37 54.97 12 XM_B_Unicode3 41039 47.08 51.94 44.92 13 LOC_TINY_FONT_1 38863 35.81 49.18 29.89 14 XM_DK_Undo_02 34636 17.08 43.83 5.24 15 XM_B_SpammyWords2 31954 24.67 40.44 17.68 16 HTML_FONT_LOW_CONTRAST 28228 38.75 35.72 40.08 17 BAYES_50 27754 53.22 35.12 61.23 18 BAYES_99 27457 13.63 34.75 4.29 19 DKIM_VALID_EF 26181 28.25 33.13 26.09 20 TR_XM_DKIM_Undo 25820 11.58 32.68 2.24 21 FVGT_m_MULTI_ODD 25492 26.25 32.26 23.59 22 MIME_HTML_ONLY 22724 22.64 28.76 19.93 23 T_KAM_HTML_FONT_INVALID 21554 20.40 27.28 17.35 24 BAYES_999 21120 10.56 26.73 3.40 25 TR_XM_DK_Unsub 20692 17.19 26.19 13.21 26 TR_DCC_Bayes_99 19919 9.21 25.21 2.13 27 XM_Multi_Part_URI 17532 16.97 22.19 14.66 28 DCC_CHECK_NEGATIVE 17263 45.11 21.85 55.41 29 XMSubLong 17079 20.32 21.61 19.75 30 RELAYCOUNTRY_META 15920 8.07 20.15 2.72 31 RCVD_IN_MSPIKE_H2 15402 15.52 19.49 13.77 32 T_TM2_M_HEADER_IN_MSG 14429 28.54 18.26 33.10 33 UNPARSEABLE_RELAY 14261 14.19 18.05 12.49 34 XM_B_Unsub 14028 12.55 17.75 10.25 35 TR_XM_BayesUnsub 13350 10.30 16.89 7.38 36 TR_MAX_INTL_RELAY 13112 9.24 16.59 5.99 37 XM_B_SpammyWords3 12195 8.43 15.43 5.33 38 TR_XM_SpammyRelay 11912 5.59 15.07 1.39 39 RCVD_IN_BL_SPAMCOP_NET 10210 4.34 12.92 0.54 40 TR_XM_SpammyWords2 9696 4.30 12.27 0.78 41 BOTNET_IPINHOSTNAME 9259 5.86 11.72 3.26 42 BAYES_80 8080 5.62 10.23 3.58 43 LOTS_OF_MONEY 7627 5.31 9.65 3.38 44 TR_XM_UnparsRelay 7607 4.18 9.63 1.77 45 RCVD_IN_MSPIKE_WL 7306 13.12 9.25 14.83 46 BAYES_60 7286 7.48 9.22 6.70 47 TR_XM_SpammyWords4 7047 4.21 8.92 2.13 48 XM_Body_Dirty_Words 6952 4.14 8.80 2.08 49 FSL_BULK_SIG 6933 10.00 8.77 10.55 50 RELAYCOUNTRY_CA 6863 3.40 8.69 1.06 51 BOTNET 6832 3.29 8.65 0.92 52 XM_Evil_Numbers_Gen 6331 12.90 8.01 15.06 53 HTML_IMAGE_RATIO_02 6184 5.78 7.83 4.88 54 XM_UncommonTLD01 5836 5.60 7.39 4.81 55 XMSubMetaSx_00 5482 4.84 6.94 3.92 56 UNTRUSTED_Relay 5320 3.07 6.73 1.45 57 MPART_ALT_DIFF 5298 4.88 6.70 4.07 58 BAYES_95 4778 3.52 6.05 2.41 59 XM_B_Phish_Phrases 4737 4.93 5.99 4.45 60 XM_H_GMP 4355 5.95 5.51 6.14 61 TR_XM_MSPIKECOMBO 4307 2.33 5.45 0.95 62 RCVD_IN_MSPIKE_BL 4307 2.33 5.45 0.95 63 XMSexyCombo_05 4233 3.06 5.36 2.04 64 XM_B_Investor 4140 2.51 5.24 1.31 65 XM_H_Long_From01 4079 4.97 5.16 4.88 66 LotsOfNums_01 3922 8.84 4.96 10.56 67 TR_XM_NoHeaderRelay 3873 1.59 4.90 0.12 68 HTML_IMAGE_RATIO_04 3738 3.95 4.73 3.61 69 TR_XM_SPAMCOP 3655 1.49 4.63 0.10 70 DKIM_INVALID 3592 2.13 4.55 1.06 71 RCVD_IN_MSPIKE_H3 3569 5.84 4.52 6.42 72 T_XMDrugObfuBody_14 3496 2.81 4.42 2.09 73 MIME_HTML_MOSTLY 3435 3.07 4.35 2.51 74 XM_OfRef6 3417 1.85 4.32 0.76 75 TR_XM_SpammyWords3 3217 1.48 4.07 0.34 76 XM_B_SpammyTLD 3203 3.18 4.05 2.79 77 XM_URI_RBL 3146 1.60 3.98 0.55 78 XM_B_PhoneNumber 3114 5.72 3.94 6.51 79 XM_CamelCaseFrm001 3090 2.53 3.91 1.92 80 XMStrtUSub 2915 4.59 3.69 4.99 81 TooManyTo_001 2873 5.17 3.64 5.85 82 TR_XM_PhishingBody 2872 2.19 3.63 1.55 83 TM2_M_VERY_LONG_WORD 2818 10.98 3.57 14.26 84 RCVD_IN_MSPIKE_L3 2761 1.51 3.49 0.64 85 XMNumbers 2583 4.64 3.27 5.24 86 MIME_HTML_ONLY_MULTI 2569 2.66 3.25 2.40 87 TR_XM_SpammyWords5 2507 1.92 3.17 1.37 88 RCVD_IN_VALIDITY_RPBL 2410 0.96 3.05 0.04 89 XM_B_Unsub2 2326 1.72 2.94 1.18 90 T_TooManySym_01 2318 5.79 2.93 7.06 91 XMBody_17 2316 1.22 2.93 0.46 92 TM2_M_URI_OPT_OUT 2293 1.98 2.90 1.57 93 XMDiploma_00 2236 1.77 2.83 1.31 94 T_FILL_THIS_FORM_SHORT 2191 1.28 2.77 0.61 95 RCVD_IN_MSPIKE_H4 2147 3.22 2.72 3.44 96 XM_SPF_SoftFail 2146 1.41 2.72 0.84 97 RELAYCOUNTRY_AU 2144 1.05 2.71 0.31 98 XM_B_SpammyWords4 2126 1.35 2.69 0.76 99 XM_UB50 2089 1.35 2.64 0.78 100 T_XMDrugObfuBody_08 2020 1.56 2.56 1.12 101 RCVD_IN_VALIDITY_SAFE 1946 4.82 2.46 5.86 102 HTML_IMAGE_RATIO_08 1901 2.29 2.41 2.24 103 SpammyFromTLD_02 1865 0.86 2.36 0.20 104 USER_IN_DEF_DKIM_WL 1859 11.95 2.35 16.19 105 SpammyFromTLD_01 1839 0.99 2.33 0.40 106 HTML_IMAGE_RATIO_06 1830 2.86 2.32 3.10 107 MAILING_LIST_MULTI 1808 2.35 2.29 2.37 108 HK_RANDOM_REPLYTO 1780 0.80 2.25 0.16 109 XMStockSpam_06 1753 1.24 2.22 0.81 110 RCVD_IN_PSBL 1747 1.19 2.21 0.73 111 URI_NOVOWEL 1709 1.35 2.16 0.99 112 FROM_EXCESS_BASE64 1673 2.14 2.12 2.15 113 SUBJ_ALL_CAPS 1664 1.17 2.11 0.75 114 TR_XM_INV_DKIM 1602 0.63 2.03 0.02 115 RCVD_IN_MSPIKE_H5 1590 4.06 2.01 4.97 116 RCVD_IN_XBL 1578 0.62 2.00 0.01 117 XM_B_URI_Unicode 1575 1.47 1.99 1.24 118 T_XMHurry_00 1541 1.24 1.95 0.93 119 XM_HighProb1 1474 0.57 1.87 0.00 120 T_XMDrugObfuBody_00 1447 1.13 1.83 0.82 121 XMSexyCombo_01 1445 0.67 1.83 0.16 122 MIME_QP_LONG_LINE 1423 2.39 1.80 2.66 123 RCVD_IN_SBL_CSS 1420 0.56 1.80 0.01 124 KHOP_HELO_FCRDNS 1412 5.99 1.79 7.85 125 ALL_TRUSTED 1406 10.38 1.78 14.19 126 XMBrknScrpt_02 1401 1.34 1.77 1.14 127 RCVD_IN_VALIDITY_CERTIFIED 1345 4.10 1.70 5.16 128 BOTNET_NORDNS 1345 0.53 1.70 0.01 129 RDNS_DYNAMIC 1257 0.63 1.59 0.21 130 DKIM_ADSP_NXDOMAIN 1240 0.75 1.57 0.39 131 PDS_RDNS_DYNAMIC_FP 1239 0.50 1.57 0.02 132 DIET_1 1223 0.96 1.55 0.70 133 SCC_BODY_URI_ONLY 1203 2.41 1.52 2.80 134 TR_XM_PHPForged 1199 0.60 1.52 0.19 135 TR_XM_PHPDW 1199 0.59 1.52 0.18 136 SHOPIFY_IMG_NOT_RCVD_SFY 1198 0.73 1.52 0.38 137 BAYES_40 1191 5.19 1.51 6.81 138 TR_XM_FormFill2 1190 0.59 1.51 0.18 139 TR_XM_MSPIKECOMBO2 1176 0.49 1.49 0.04 140 MultiRelay_CC 1150 0.50 1.46 0.08 141 XM_H_PHPOS 1139 0.56 1.44 0.17 142 XMPhish30 1129 0.89 1.43 0.65 143 XM_B_COPY_HTML 1114 1.40 1.41 1.40 144 TVD_RCVD_IP 1111 1.32 1.41 1.28 145 XM_DIRTYINTL 1102 0.47 1.39 0.06 146 BAYES_20 1083 3.23 1.37 4.05 147 RCVD_IN_MSPIKE_L4 1081 0.63 1.37 0.30 148 TR_LOTS_OF_MONEY3 1067 0.53 1.35 0.17 149 TR_Mismatch_TLD_02 1061 0.45 1.34 0.05 150 XM_H_Long_From02 1044 0.81 1.32 0.58 151 XM_DK_Undo_01 1043 1.51 1.32 1.59 152 RCVD_IN_PBL 1039 0.85 1.31 0.65 153 URI_TRY_3LD 1038 0.85 1.31 0.65 154 DKIM_ADSP_CUSTOM_MED 1035 0.90 1.31 0.71 155 THIS_AD 1034 0.58 1.31 0.25 156 XM_UB99 1016 0.40 1.29 0.00 157 HTML_TAG_BALANCE_BODY 1008 1.03 1.28 0.93 158 XM_GoogleGroups 991 1.19 1.25 1.16 159 HTML_MIME_NO_HTML_TAG 989 1.46 1.25 1.56 160 HTML_IMAGE_ONLY_20 988 0.55 1.25 0.25 161 MPART_ALT_DIFF_COUNT 979 0.75 1.24 0.53 162 XM_ProductURIs 976 0.84 1.24 0.66 163 T_REMOTE_IMAGE 943 2.29 1.19 2.77 164 XM_SendGrid 941 1.24 1.19 1.26 165 RELAYCOUNTRY_FR 938 0.50 1.19 0.20 166 XMBody_78 935 0.59 1.18 0.33 167 RELAYCOUNTRY_IN 927 0.37 1.17 0.02 168 TR_XM_InvalidRelay 902 0.35 1.14 0.01 169 XMGenDplmaNmb 899 0.72 1.14 0.53 170 XM_UB60 898 0.39 1.14 0.06 171 LongTLD 895 0.59 1.13 0.35 172 XMSubMetaI_00 893 0.63 1.13 0.40 173 T_STY_INVIS_DIRECT 887 0.73 1.12 0.56 174 XMSolicitRefs_0 882 0.67 1.12 0.47 175 XM_B_Phish66 872 0.49 1.10 0.22 176 XMReplyNow 871 0.49 1.10 0.23 177 HELO_DYNAMIC_SPLIT_IP 865 0.34 1.09 0.00 178 XM_B_REG_HTML 860 0.56 1.09 0.33 179 MISSING_HEADERS 847 0.49 1.07 0.23 180 TM2_M_OBFU_COMMENT 847 0.73 1.07 0.58 181 TM2_M_A_HREF_HREF 845 0.50 1.07 0.24 182 XMBdyGiftCard01 835 1.25 1.06 1.34 183 ANY_BOUNCE_MESSAGE 826 12.47 1.05 17.53 184 BOUNCE_MESSAGE 826 12.47 1.05 17.52 185 TR_XM_FormFill 826 0.33 1.05 0.01 186 XM_OfRef7 824 0.43 1.04 0.16 187 RELAYCOUNTRY_GB 823 0.47 1.04 0.22 188 XMSubMetaSx_01 817 0.45 1.03 0.19 189 TR_XM_MaxSPIKE 816 0.34 1.03 0.04 190 TR_Mismatch_TLD_01 797 0.52 1.01 0.30 191 XMSlimDrugH 791 0.83 1.00 0.75 192 TR_MetaPhish_Combo_01 775 0.80 0.98 0.72 193 REPLYTO_WITHOUT_TO_CC 755 0.30 0.96 0.01 194 T_TooManySym_02 742 3.14 0.94 4.11 195 XM_B_SEO 734 0.49 0.93 0.29 196 TR_XM_DK_SendGrid 725 0.90 0.92 0.89 197 XMHTMLBadTable_001 710 0.41 0.90 0.19 198 TR_XM_Base64_L1 693 0.40 0.88 0.18 199 XMFrmHeader_28 693 0.27 0.88 0.00 200 XM_UB999 663 0.26 0.84 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 178042 99.62 99.34 99.74 2 HTML_MESSAGE 152780 88.38 94.70 85.59 3 RELAYCOUNTRY_US 148129 81.91 79.47 82.98 4 XM_B_Unicode 121792 73.22 84.50 68.23 5 DKIM_SIGNED 116142 72.86 90.47 65.06 6 XM_DK_Pass 115083 71.22 86.47 64.47 7 DKIM_VALID 114246 70.73 85.93 64.00 8 BAYES_50 109298 53.22 35.12 61.23 9 DCC_CHECK_NEGATIVE 98919 45.11 21.85 55.41 10 DKIM_VALID_AU 98130 59.08 68.37 54.97 11 XMListUnsubscribeExists 80247 53.17 71.72 44.95 12 XM_B_Unicode3 80193 47.08 51.94 44.92 13 XM_B_SpammyWords 79998 52.81 70.88 44.82 14 DCC_CHECK 79538 54.70 77.60 44.56 15 HTML_FONT_LOW_CONTRAST 71553 38.75 35.72 40.08 16 T_TM2_M_HEADER_IN_MSG 59079 28.54 18.26 33.10 17 LOC_TINY_FONT_1 53347 35.81 49.18 29.89 18 DKIM_VALID_EF 46571 28.25 33.13 26.09 19 FVGT_m_MULTI_ODD 42106 26.25 32.26 23.59 20 MIME_HTML_ONLY 35581 22.64 28.76 19.93 21 XMSubLong 35261 20.32 21.61 19.75 22 XM_B_SpammyWords2 31567 24.67 40.44 17.68 23 ANY_BOUNCE_MESSAGE 31284 12.47 1.05 17.53 24 BOUNCE_MESSAGE 31282 12.47 1.05 17.52 25 T_KAM_HTML_FONT_INVALID 30978 20.40 27.28 17.35 26 USER_IN_DEF_DKIM_WL 28905 11.95 2.35 16.19 27 XM_Evil_Numbers_Gen 26881 12.90 8.01 15.06 28 RCVD_IN_MSPIKE_WL 26470 13.12 9.25 14.83 29 XM_Multi_Part_URI 26167 16.97 22.19 14.66 30 TM2_M_VERY_LONG_WORD 25447 10.98 3.57 14.26 31 ALL_TRUSTED 25327 10.38 1.78 14.19 32 RCVD_IN_MSPIKE_H2 24575 15.52 19.49 13.77 33 HTML_IMAGE_ONLY_32 24239 9.44 0.10 13.58 34 TR_XM_DK_Unsub 23577 17.19 26.19 13.21 35 MAY_BE_FORGED 23242 9.05 0.07 13.02 36 UNPARSEABLE_RELAY 22291 14.19 18.05 12.49 37 LotsOfNums_01 18853 8.84 4.96 10.56 38 FSL_BULK_SIG 18831 10.00 8.77 10.55 39 XM_B_Unsub 18296 12.55 17.75 10.25 40 BAYES_00 16009 6.37 0.50 8.97 41 XM_DKIMWhitelistDomains 14511 5.64 0.02 8.13 42 KHOP_HELO_FCRDNS 14004 5.99 1.79 7.85 43 TR_XM_BayesUnsub 13181 10.30 16.89 7.38 44 T_TooManySym_01 12602 5.79 2.93 7.06 45 BAYES_40 12162 5.19 1.51 6.81 46 BAYES_60 11968 7.48 9.22 6.70 47 XM_B_PhoneNumber 11616 5.72 3.94 6.51 48 RCVD_IN_MSPIKE_H3 11461 5.84 4.52 6.42 49 XM_H_GMP 10957 5.95 5.51 6.14 50 TR_MAX_INTL_RELAY 10685 9.24 16.59 5.99 51 TR_XM_DK_Bayes 10675 4.27 0.40 5.98 52 TR_XM_DK_Bayes1 10574 4.23 0.40 5.92 53 RCVD_IN_VALIDITY_SAFE 10463 4.82 2.46 5.86 54 TooManyTo_001 10448 5.17 3.64 5.85 55 XM_B_SpammyWords3 9522 8.43 15.43 5.33 56 MIME_CHARSET_FARAWAY 9469 3.82 0.47 5.30 57 XMNumbers 9357 4.64 3.27 5.24 58 XM_DK_Undo_02 9345 17.08 43.83 5.24 59 CHARSET_FARAWAY_HEADER 9258 3.69 0.29 5.19 60 RCVD_IN_VALIDITY_CERTIFIED 9204 4.10 1.70 5.16 61 TR_XM_DK_Bayes2 9004 3.58 0.27 5.04 62 XMStrtUSub 8909 4.59 3.69 4.99 63 RCVD_IN_MSPIKE_H5 8872 4.06 2.01 4.97 64 HTML_IMAGE_RATIO_02 8710 5.78 7.83 4.88 65 XM_H_Long_From01 8709 4.97 5.16 4.88 66 XM_UncommonTLD01 8588 5.60 7.39 4.81 67 XM_B_Phish_Phrases 7947 4.93 5.99 4.45 68 BAYES_99 7650 13.63 34.75 4.29 69 T_TooManySym_02 7339 3.14 0.94 4.11 70 MPART_ALT_DIFF 7260 4.88 6.70 4.07 71 BAYES_20 7227 3.23 1.37 4.05 72 XMSubMetaSx_00 6995 4.84 6.94 3.92 73 INVALID_MSGID 6547 2.70 0.52 3.67 74 HTML_IMAGE_RATIO_04 6439 3.95 4.73 3.61 75 TO_MALFORMED 6390 2.50 0.06 3.58 76 BAYES_80 6387 5.62 10.23 3.58 77 RCVD_IN_MSPIKE_H4 6137 3.22 2.72 3.44 78 BAYES_999 6066 10.56 26.73 3.40 79 LOTS_OF_MONEY 6042 5.31 9.65 3.38 80 BOTNET_IPINHOSTNAME 5825 5.86 11.72 3.26 81 HTML_IMAGE_RATIO_06 5525 2.86 2.32 3.10 82 SCC_BODY_URI_ONLY 4995 2.41 1.52 2.80 83 XM_B_SpammyTLD 4978 3.18 4.05 2.79 84 T_REMOTE_IMAGE 4951 2.29 1.19 2.77 85 RELAYCOUNTRY_META 4863 8.07 20.15 2.72 86 MIME_QP_LONG_LINE 4740 2.39 1.80 2.66 87 TooManyTo_002 4590 1.97 0.60 2.57 88 MIME_HTML_MOSTLY 4478 3.07 4.35 2.51 89 BAYES_95 4297 3.52 6.05 2.41 90 MIME_HTML_ONLY_MULTI 4291 2.66 3.25 2.40 91 MAILING_LIST_MULTI 4238 2.35 2.29 2.37 92 TR_XM_DKIM_Undo 4006 11.58 32.68 2.24 93 HTML_IMAGE_RATIO_08 3997 2.29 2.41 2.24 94 FROM_EXCESS_BASE64 3833 2.14 2.12 2.15 95 TR_XM_SpammyWords4 3800 4.21 8.92 2.13 96 TR_DCC_Bayes_99 3798 9.21 25.21 2.13 97 T_XMDrugObfuBody_14 3728 2.81 4.42 2.09 98 XM_Body_Dirty_Words 3713 4.14 8.80 2.08 99 XMSexyCombo_05 3637 3.06 5.36 2.04 100 BAYES_05 3508 1.58 0.72 1.97 101 XM_CamelCaseFrm001 3430 2.53 3.91 1.92 102 T_TVD_MIME_NO_HEADERS 3357 1.34 0.10 1.88 103 XM_PDF 3260 1.41 0.47 1.83 104 TR_XM_UnparsRelay 3168 4.18 9.63 1.77 105 RCVD_IN_IADB_LISTED 2989 1.36 0.66 1.67 106 T_TooManySym_03 2980 1.33 0.55 1.67 107 XM_DK_Undo_01 2841 1.51 1.32 1.59 108 TM2_M_URI_OPT_OUT 2811 1.98 2.90 1.57 109 HTML_MIME_NO_HTML_TAG 2783 1.46 1.25 1.56 110 TR_XM_PhishingBody 2775 2.19 3.63 1.55 111 RCVD_IN_IADB_SPF 2674 1.21 0.56 1.50 112 XM_B_FormFill 2595 1.01 0.02 1.45 113 UNTRUSTED_Relay 2594 3.07 6.73 1.45 114 IN_HORDE_ADDRESS_BOOK 2593 1.03 0.08 1.45 115 TVD_SPACE_RATIO 2502 1.06 0.30 1.40 116 XM_B_COPY_HTML 2494 1.40 1.41 1.40 117 TR_XM_SpammyRelay 2481 5.59 15.07 1.39 118 XMGappySubj_01 2459 1.08 0.42 1.38 119 RCVD_IN_IADB_SENDERID 2448 1.11 0.52 1.37 120 TR_XM_SpammyWords5 2440 1.92 3.17 1.37 121 XMBdyGiftCard01 2386 1.25 1.06 1.34 122 RCVD_IN_IADB_DK 2365 1.08 0.53 1.32 123 XM_H_PHPMailer 2359 1.17 0.82 1.32 124 XM_B_Investor 2331 2.51 5.24 1.31 125 XMDiploma_00 2331 1.77 2.83 1.31 126 TVD_RCVD_IP 2276 1.32 1.41 1.28 127 XM_SendGrid 2245 1.24 1.19 1.26 128 XM_B_URI_Unicode 2221 1.47 1.99 1.24 129 XM_B_Unsub2 2103 1.72 2.94 1.18 130 XM_GoogleGroups 2068 1.19 1.25 1.16 131 XMGappySubj_02 2037 0.81 0.05 1.14 132 XMBrknScrpt_02 2037 1.34 1.77 1.14 133 T_XMDrugObfuBody_08 2005 1.56 2.56 1.12 134 RCVD_IN_IADB_VOUCHED 1966 0.87 0.36 1.10 135 DKIM_INVALID 1896 2.13 4.55 1.06 136 RELAYCOUNTRY_CA 1886 3.40 8.69 1.06 137 TR_Symld_Words 1829 0.93 0.72 1.02 138 URI_NOVOWEL 1769 1.35 2.16 0.99 139 TR_XM_MSPIKECOMBO 1688 2.33 5.45 0.95 140 RCVD_IN_MSPIKE_BL 1688 2.33 5.45 0.95 141 T_XMHurry_00 1660 1.24 1.95 0.93 142 HTML_TAG_BALANCE_BODY 1656 1.03 1.28 0.93 143 BOTNET 1636 3.29 8.65 0.92 144 TR_XM_DK_SendGrid 1595 0.90 0.92 0.89 145 TooManyTo_003 1570 0.77 0.53 0.88 146 XM_SPF_SoftFail 1496 1.41 2.72 0.84 147 RCVD_IN_IADB_OPTIN 1485 0.65 0.23 0.83 148 T_XMDrugObfuBody_00 1462 1.13 1.83 0.82 149 URI_HEX 1447 0.82 0.84 0.81 150 XMStockSpam_06 1437 1.24 2.22 0.81 151 XMBSHREFv2 1421 0.66 0.36 0.80 152 TR_XM_SpammyWords2 1390 4.30 12.27 0.78 153 XM_UB50 1390 1.35 2.64 0.78 154 XM_B_SpammyWords4 1361 1.35 2.69 0.76 155 XM_OfRef6 1356 1.85 4.32 0.76 156 XMSlimDrugH 1346 0.83 1.00 0.75 157 SUBJ_ALL_CAPS 1342 1.17 2.11 0.75 158 RCVD_IN_PSBL 1311 1.19 2.21 0.73 159 TR_MetaPhish_Combo_01 1288 0.80 0.98 0.72 160 DKIM_ADSP_CUSTOM_MED 1272 0.90 1.31 0.71 161 DIET_1 1241 0.96 1.55 0.70 162 TR_XM_Base64_M1 1229 0.66 0.59 0.69 163 TooManyTo_004 1228 0.62 0.48 0.69 164 XM_ProductURIs 1178 0.84 1.24 0.66 165 RCVD_IN_PBL 1159 0.85 1.31 0.65 166 URI_TRY_3LD 1155 0.85 1.31 0.65 167 XMPhish30 1152 0.89 1.43 0.65 168 RCVD_IN_MSPIKE_L3 1136 1.51 3.49 0.64 169 MSGID_FROM_MTA_HEADER 1114 0.48 0.15 0.62 170 T_FILL_THIS_FORM_SHORT 1095 1.28 2.77 0.61 171 XMLngstWrd_00 1077 0.53 0.37 0.60 172 TooManyTo_005 1052 0.55 0.46 0.59 173 TM2_M_OBFU_COMMENT 1034 0.73 1.07 0.58 174 XM_H_Long_From02 1033 0.81 1.32 0.58 175 T_STY_INVIS_DIRECT 1000 0.73 1.12 0.56 176 XM_URI_RBL 986 1.60 3.98 0.55 177 RCVD_IN_BL_SPAMCOP_NET 957 4.34 12.92 0.54 178 XMGenDplmaNmb 955 0.72 1.14 0.53 179 MPART_ALT_DIFF_COUNT 942 0.75 1.24 0.53 180 XMNoVowels 929 0.50 0.47 0.52 181 XMBody_95 878 0.38 0.12 0.49 182 XM_Combo_Sbj 874 0.49 0.49 0.49 183 XMLngstWrd_01 870 0.41 0.24 0.49 184 PLING_QUERY 869 0.55 0.70 0.49 185 XMSolicitRefs_0 845 0.67 1.12 0.47 186 XMBody_17 825 1.22 2.93 0.46 187 T_TooManySym_04 815 0.40 0.27 0.46 188 NML_ADSP_CUSTOM_MED 814 0.55 0.78 0.46 189 HTML_TAG_BALANCE_CENTER 805 0.39 0.25 0.45 190 XMHTML_After_End 803 0.51 0.64 0.45 191 FORGED_GMAIL_RCVD 796 0.51 0.66 0.45 192 XM_ShortIntro_01 788 0.48 0.57 0.44 193 XM_B_DNDMA 771 0.53 0.75 0.43 194 XM_S_SubURI 749 0.31 0.06 0.42 195 XMSubMetaI_00 719 0.63 1.13 0.40 196 SpammyFromTLD_01 715 0.99 2.33 0.40 197 XMPhish14 703 0.50 0.75 0.39 198 DKIM_ADSP_NXDOMAIN 698 0.75 1.57 0.39 199 HTML_FONT_FACE_BAD 692 0.48 0.70 0.39 200 SHOPIFY_IMG_NOT_RCVD_SFY 684 0.73 1.52 0.38 ----------------------------------------------------------------------