Email: 252996 Autolearn: 0 AvgScore: 5.56 AvgScanTime: 1.42 sec Spam: 83116 Autolearn: 0 AvgScore: 14.31 AvgScanTime: 1.61 sec Ham: 169880 Autolearn: 0 AvgScore: 1.28 AvgScanTime: 1.33 sec Time Spent Running SA: 99.77 hours Time Spent Processing Spam: 37.09 hours Time Spent Processing Ham: 62.68 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 78813 85.91 94.82 81.56 2 DKIM_SIGNED 74578 76.84 89.73 70.53 3 XM_DK_Pass 70926 75.01 85.33 69.96 4 DKIM_VALID 70532 74.55 84.86 69.50 5 XM_B_Unicode 70253 74.67 84.52 69.85 6 RELAYCOUNTRY_US 67888 80.34 81.68 79.68 7 DCC_CHECK 65439 61.40 78.73 52.92 8 XM_B_SpammyWords 58989 52.85 70.97 43.98 9 XMListUnsubscribeExists 58808 56.63 70.75 49.72 10 DKIM_VALID_AU 57429 63.01 69.09 60.04 11 LOC_TINY_FONT_1 44676 39.83 53.75 33.02 12 XM_B_Unicode3 44089 49.22 53.05 47.35 13 XM_DK_Undo_02 34216 17.20 41.17 5.48 14 XM_B_SpammyWords2 31538 25.93 37.94 20.05 15 HTML_FONT_LOW_CONTRAST 30687 36.82 36.92 36.77 16 BAYES_50 30195 53.13 36.33 61.35 17 FVGT_m_MULTI_ODD 29133 27.61 35.05 23.97 18 BAYES_99 27614 13.94 33.22 4.50 19 TR_XM_DKIM_Undo 25205 11.34 30.33 2.06 20 DKIM_VALID_EF 24002 28.24 28.88 27.93 21 T_KAM_HTML_FONT_INVALID 23408 22.49 28.16 19.71 22 MIME_HTML_ONLY 21559 20.84 25.94 18.34 23 BAYES_999 21188 10.74 25.49 3.52 24 RCVD_IN_MSPIKE_H2 20963 19.88 25.22 17.27 25 TR_DCC_Bayes_99 20213 9.56 24.32 2.34 26 XM_Multi_Part_URI 19170 17.77 23.06 15.18 27 TR_XM_DK_Unsub 18361 16.73 22.09 14.11 28 DCC_CHECK_NEGATIVE 17345 38.45 20.87 47.06 29 XMSubLong 16227 20.40 19.52 20.83 30 UNPARSEABLE_RELAY 16111 15.04 19.38 12.92 31 RELAYCOUNTRY_META 15791 8.05 19.00 2.70 32 T_TM2_M_HEADER_IN_MSG 14999 22.48 18.05 24.65 33 TR_MAX_INTL_RELAY 14695 9.65 17.68 5.72 34 XM_B_Unsub 13887 11.21 16.71 8.52 35 TR_XM_BayesUnsub 13439 9.84 16.17 6.75 36 XM_B_SpammyWords3 11397 8.49 13.71 5.93 37 TR_XM_SpammyRelay 11346 5.44 13.65 1.43 38 BOTNET_IPINHOSTNAME 9868 6.34 11.87 3.63 39 RCVD_IN_BL_SPAMCOP_NET 9746 4.19 11.73 0.51 40 LOTS_OF_MONEY 9536 7.42 11.47 5.44 41 TR_XM_UnparsRelay 9112 4.87 10.96 1.89 42 TR_XM_SpammyWords2 8996 4.14 10.82 0.87 43 FSL_BULK_SIG 8944 13.21 10.76 14.41 44 BAYES_80 8913 5.86 10.72 3.49 45 BOTNET 8682 4.03 10.45 0.89 46 TR_XM_SpammyWords4 8521 5.97 10.25 3.87 47 XM_B_Phish_Phrases 7986 6.39 9.61 4.81 48 BAYES_60 7488 7.58 9.01 6.88 49 RCVD_IN_MSPIKE_WL 7154 12.10 8.61 13.81 50 XM_Evil_Numbers_Gen 6721 11.09 8.09 12.56 51 UNTRUSTED_Relay 6619 3.77 7.96 1.72 52 MPART_ALT_DIFF 5900 5.83 7.10 5.21 53 HTML_IMAGE_RATIO_02 5790 5.82 6.97 5.26 54 XM_Body_Dirty_Words 5731 3.83 6.90 2.32 55 LotsOfNums_01 5409 6.39 6.51 6.34 56 XM_UncommonTLD01 5241 5.25 6.31 4.73 57 BAYES_95 5193 3.56 6.25 2.24 58 XM_B_Investor 5069 2.91 6.10 1.35 59 XM_H_Long_From01 4973 5.09 5.98 4.65 60 XM_H_GMP 4899 6.09 5.89 6.19 61 RELAYCOUNTRY_CA 4768 2.38 5.74 0.74 62 XMSubMetaSx_00 4634 3.77 5.58 2.89 63 TR_XM_PhishingBody 4416 2.89 5.31 1.71 64 XMStrtUSub 4234 5.88 5.09 6.26 65 DKIM_INVALID 4046 2.29 4.87 1.02 66 XM_B_SpammyTLD 3978 3.12 4.79 2.30 67 T_XMDrugObfuBody_14 3932 2.68 4.73 1.67 68 TR_XM_NoHeaderRelay 3863 1.67 4.65 0.21 69 XMSexyCombo_05 3807 2.43 4.58 1.38 70 TR_XM_SPAMCOP 3771 1.57 4.54 0.12 71 XM_B_PhoneNumber 3752 5.53 4.51 6.03 72 TooManyTo_001 3685 5.04 4.43 5.34 73 TR_XM_SpammyWords5 3664 2.32 4.41 1.30 74 HTML_IMAGE_RATIO_04 3631 4.15 4.37 4.05 75 XM_CamelCaseFrm001 3501 2.76 4.21 2.05 76 MIME_HTML_MOSTLY 3472 3.69 4.18 3.45 77 RCVD_IN_MSPIKE_H3 3314 5.51 3.99 6.25 78 XM_OfRef6 3225 1.69 3.88 0.62 79 XMNumbers 2916 4.06 3.51 4.33 80 MIME_HTML_ONLY_MULTI 2831 2.70 3.41 2.36 81 TR_XM_MSPIKECOMBO 2829 1.49 3.40 0.55 82 RCVD_IN_MSPIKE_BL 2829 1.49 3.40 0.55 83 USER_IN_DEF_DKIM_WL 2795 12.77 3.36 17.37 84 TM2_M_VERY_LONG_WORD 2787 5.31 3.35 6.27 85 T_FILL_THIS_FORM_SHORT 2750 1.57 3.31 0.71 86 T_XMHurry_00 2637 1.50 3.17 0.68 87 SUBJ_ALL_CAPS 2623 1.64 3.16 0.90 88 RELAYCOUNTRY_AU 2561 1.30 3.08 0.43 89 TR_XM_INTL_Spamhaus 2540 1.07 3.06 0.10 90 XMDiploma_00 2498 1.79 3.01 1.19 91 HTML_IMAGE_RATIO_08 2486 2.52 2.99 2.29 92 RCVD_IN_VALIDITY_SAFE 2470 5.03 2.97 6.03 93 XMPhish30 2413 1.49 2.90 0.81 94 XM_UB50 2412 1.65 2.90 1.04 95 RCVD_IN_VALIDITY_RPBL 2398 1.04 2.89 0.14 96 XM_URI_RBL 2335 1.25 2.81 0.48 97 RCVD_IN_MSPIKE_H4 2284 3.02 2.75 3.15 98 RCVD_IN_XBL 2264 0.90 2.72 0.01 99 FROM_EXCESS_BASE64 2238 2.36 2.69 2.19 100 XM_B_Unsub2 2214 1.79 2.66 1.36 101 XM_SPF_SoftFail 2123 1.43 2.55 0.88 102 MIME_QP_LONG_LINE 2047 2.87 2.46 3.07 103 TR_XM_SpammyWords3 2024 0.98 2.44 0.27 104 T_XMDrugObfuBody_08 1978 1.39 2.38 0.90 105 HTML_IMAGE_RATIO_06 1956 3.18 2.35 3.58 106 XMBody_17 1948 1.14 2.34 0.56 107 RCVD_IN_VALIDITY_CERTIFIED 1904 4.28 2.29 5.25 108 SHOPIFY_IMG_NOT_RCVD_SFY 1881 1.01 2.26 0.39 109 T_REMOTE_IMAGE 1857 2.64 2.23 2.84 110 TR_XM_INV_DKIM 1799 0.72 2.16 0.02 111 DKIM_ADSP_NXDOMAIN 1768 0.99 2.13 0.44 112 T_XMDrugObfuBody_00 1724 1.03 2.07 0.52 113 BOTNET_NORDNS 1700 0.67 2.05 0.00 114 MAILING_LIST_MULTI 1661 2.15 2.00 2.22 115 XM_B_URI_Unicode 1652 1.88 1.99 1.83 116 RCVD_IN_SBL_CSS 1645 0.66 1.98 0.01 117 STY_INVIS_DIRECT 1642 0.92 1.98 0.41 118 XMBrknScrpt_02 1625 1.34 1.96 1.04 119 T_TooManySym_01 1605 5.63 1.93 7.44 120 TR_LOTS_OF_MONEY3 1588 0.78 1.91 0.23 121 RCVD_IN_MSPIKE_H5 1556 3.57 1.87 4.40 122 RELAYCOUNTRY_IN 1546 0.62 1.86 0.01 123 XMStockSpam_06 1535 1.72 1.85 1.65 124 THIS_AD 1511 0.90 1.82 0.45 125 RELAYCOUNTRY_FR 1496 0.74 1.80 0.23 126 DIET_1 1493 1.07 1.80 0.71 127 XMBdyGiftCard01 1493 1.09 1.80 0.75 128 MultiRelay_CC 1464 0.63 1.76 0.08 129 SpammyFromTLD_02 1461 0.67 1.76 0.14 130 TR_XM_RelayPhish 1425 0.61 1.71 0.08 131 TM2_M_URI_OPT_OUT 1390 1.73 1.67 1.76 132 TR_XM_XBL_BULK_SIG 1373 0.54 1.65 0.00 133 RCVD_IN_SBL 1365 0.54 1.64 0.00 134 ANY_BOUNCE_MESSAGE 1351 9.22 1.63 12.93 135 BOUNCE_MESSAGE 1350 9.21 1.62 12.93 136 RCVD_IN_SBL_DROP 1343 0.53 1.62 0.00 137 KHOP_HELO_FCRDNS 1342 3.34 1.61 4.18 138 TR_Mismatch_TLD_02 1338 0.56 1.61 0.05 139 URI_NOVOWEL 1338 1.29 1.61 1.13 140 FORGED_MUA_OUTLOOK 1326 0.55 1.60 0.04 141 AXB_XMAILER_MIMEOLE_OL_024C2 1322 0.52 1.59 0.00 142 FSL_CTYPE_WIN1251 1312 0.52 1.58 0.00 143 SpammyFromTLD_01 1312 0.74 1.58 0.33 144 XM_UB99 1305 0.52 1.57 0.00 145 XM_ProductURIs 1302 0.96 1.57 0.67 146 ALL_TRUSTED 1298 12.21 1.56 17.41 147 XMSubMetaI_00 1296 1.02 1.56 0.76 148 FSL_NEW_HELO_USER 1284 0.51 1.54 0.00 149 BAYES_40 1277 4.56 1.54 6.04 150 XM_B_SpammyWords4 1266 0.99 1.52 0.72 151 XM_B_COPY_HTML 1260 1.55 1.52 1.57 152 MPART_ALT_DIFF_COUNT 1260 0.84 1.52 0.51 153 XM_B_DNDMA 1220 0.75 1.47 0.41 154 TR_XM_PHPForged 1190 0.71 1.43 0.36 155 RCVD_IN_MSPIKE_L3 1187 0.81 1.43 0.51 156 TR_XM_FormFill2 1175 0.70 1.41 0.35 157 RCVD_IN_MSPIKE_L4 1175 0.49 1.41 0.03 158 TR_XM_PHPDW 1171 0.70 1.41 0.36 159 NSL_RCVD_FROM_USER 1164 0.46 1.40 0.00 160 XM_H_PHPOS 1141 0.68 1.37 0.34 161 XM_HighProb1 1140 0.45 1.37 0.00 162 TR_XM_Base64_M1 1127 1.14 1.36 1.04 163 RDNS_DYNAMIC 1116 0.59 1.34 0.22 164 XM_UB60 1102 0.48 1.33 0.07 165 RCVD_IN_PSBL 1097 1.21 1.32 1.16 166 RCVD_IN_PBL 1096 0.76 1.32 0.48 167 PDS_RDNS_DYNAMIC_FP 1090 0.45 1.31 0.03 168 TVD_RCVD_IP 1047 1.63 1.26 1.81 169 XM_UB80 1044 0.43 1.26 0.02 170 XPRIO 1035 0.41 1.25 0.00 171 XMReplyNow 1029 0.50 1.24 0.14 172 MONEY_FRAUD_8 1024 0.41 1.23 0.00 173 XM_B_SEO 1008 0.49 1.21 0.14 174 XM_OfRef7 1008 0.47 1.21 0.11 175 XMGenDplmaNmb 1005 0.84 1.21 0.66 176 XM_B_Phish66 1003 0.59 1.21 0.29 177 XM_H_Undi_Recip 978 0.46 1.18 0.11 178 HTML_IMAGE_ONLY_20 969 0.59 1.17 0.31 179 BAYES_20 958 4.48 1.15 6.11 180 URI_HEX 958 0.96 1.15 0.86 181 ADVANCE_FEE_5_NEW_MONEY 957 0.38 1.15 0.00 182 URI_TRY_3LD 941 0.76 1.13 0.58 183 DKIM_ADSP_CUSTOM_MED 937 0.83 1.13 0.69 184 MISSING_HEADERS 936 0.51 1.13 0.21 185 XMBody_78 930 0.59 1.12 0.33 186 XM_SendGrid 920 1.22 1.11 1.28 187 HELO_DYNAMIC_SPLIT_IP 898 0.35 1.08 0.00 188 TR_XM_GMP_BULK_SIG 898 0.59 1.08 0.36 189 XM_GoogleGroups 897 1.19 1.08 1.25 190 XMSexyCombo_01 896 0.47 1.08 0.17 191 TR_XM_MSPIKECOMBO2 892 0.37 1.07 0.02 192 XM_DIRTYINTL 857 0.36 1.03 0.03 193 XM_H_Long_From02 855 0.73 1.03 0.59 194 XMBounce_01 854 0.35 1.03 0.01 195 XMClaimOffer 845 0.43 1.02 0.14 196 HTML_FONT_TINY_NORDNS 841 0.36 1.01 0.04 197 HTML_MIME_NO_HTML_TAG 840 1.34 1.01 1.50 198 TR_LOTS_OF_MONEY2 837 0.66 1.01 0.49 199 T_MONEY_PERCENT 837 0.66 1.01 0.49 200 XM_DK_Undo_01 829 1.19 1.00 1.29 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 138548 85.91 94.82 81.56 2 RELAYCOUNTRY_US 135357 80.34 81.68 79.68 3 DKIM_SIGNED 119812 76.84 89.73 70.53 4 XM_DK_Pass 118842 75.01 85.33 69.96 5 XM_B_Unicode 118664 74.67 84.52 69.85 6 DKIM_VALID 118071 74.55 84.86 69.50 7 BAYES_50 104225 53.13 36.33 61.35 8 DKIM_VALID_AU 101990 63.01 69.09 60.04 9 DCC_CHECK 89901 61.40 78.73 52.92 10 XMListUnsubscribeExists 84470 56.63 70.75 49.72 11 XM_B_Unicode3 80431 49.22 53.05 47.35 12 DCC_CHECK_NEGATIVE 79939 38.45 20.87 47.06 13 XM_B_SpammyWords 74711 52.85 70.97 43.98 14 HTML_FONT_LOW_CONTRAST 62465 36.82 36.92 36.77 15 LOC_TINY_FONT_1 56099 39.83 53.75 33.02 16 DKIM_VALID_EF 47450 28.24 28.88 27.93 17 T_TM2_M_HEADER_IN_MSG 41869 22.48 18.05 24.65 18 FVGT_m_MULTI_ODD 40721 27.61 35.05 23.97 19 XMSubLong 35380 20.40 19.52 20.83 20 XM_B_SpammyWords2 34064 25.93 37.94 20.05 21 T_KAM_HTML_FONT_INVALID 33489 22.49 28.16 19.71 22 MIME_HTML_ONLY 31156 20.84 25.94 18.34 23 ALL_TRUSTED 29582 12.21 1.56 17.41 24 USER_IN_DEF_DKIM_WL 29510 12.77 3.36 17.37 25 RCVD_IN_MSPIKE_H2 29341 19.88 25.22 17.27 26 XM_Multi_Part_URI 25790 17.77 23.06 15.18 27 FSL_BULK_SIG 24481 13.21 10.76 14.41 28 TR_XM_DK_Unsub 23975 16.73 22.09 14.11 29 RCVD_IN_MSPIKE_WL 23464 12.10 8.61 13.81 30 ANY_BOUNCE_MESSAGE 21963 9.22 1.63 12.93 31 BOUNCE_MESSAGE 21961 9.21 1.62 12.93 32 UNPARSEABLE_RELAY 21947 15.04 19.38 12.92 33 XM_Evil_Numbers_Gen 21335 11.09 8.09 12.56 34 XM_DKIMWhitelistDomains 14721 5.82 0.01 8.67 35 XM_B_Unsub 14479 11.21 16.71 8.52 36 BAYES_00 13125 5.38 0.59 7.73 37 T_TooManySym_01 12633 5.63 1.93 7.44 38 BAYES_60 11695 7.58 9.01 6.88 39 HTML_IMAGE_ONLY_32 11506 4.58 0.09 6.77 40 TR_XM_BayesUnsub 11461 9.84 16.17 6.75 41 LotsOfNums_01 10763 6.39 6.51 6.34 42 TM2_M_VERY_LONG_WORD 10645 5.31 3.35 6.27 43 XMStrtUSub 10630 5.88 5.09 6.26 44 RCVD_IN_MSPIKE_H3 10624 5.51 3.99 6.25 45 XM_H_GMP 10515 6.09 5.89 6.19 46 BAYES_20 10372 4.48 1.15 6.11 47 BAYES_40 10258 4.56 1.54 6.04 48 RCVD_IN_VALIDITY_SAFE 10249 5.03 2.97 6.03 49 XM_B_PhoneNumber 10246 5.53 4.51 6.03 50 XM_B_SpammyWords3 10072 8.49 13.71 5.93 51 TR_XM_DK_Bayes 9729 4.01 0.50 5.73 52 TR_MAX_INTL_RELAY 9724 9.65 17.68 5.72 53 TR_XM_DK_Bayes1 9642 3.97 0.49 5.68 54 XM_DK_Undo_02 9309 17.20 41.17 5.48 55 LOTS_OF_MONEY 9242 7.42 11.47 5.44 56 TooManyTo_001 9068 5.04 4.43 5.34 57 HTML_IMAGE_RATIO_02 8939 5.82 6.97 5.26 58 RCVD_IN_VALIDITY_CERTIFIED 8922 4.28 2.29 5.25 59 MPART_ALT_DIFF 8852 5.83 7.10 5.21 60 TR_XM_DK_Bayes2 8472 3.47 0.38 4.99 61 MAY_BE_FORGED 8359 3.31 0.01 4.92 62 XM_B_Phish_Phrases 8175 6.39 9.61 4.81 63 XM_UncommonTLD01 8041 5.25 6.31 4.73 64 T_TooManySym_02 7977 3.29 0.42 4.70 65 XM_H_Long_From01 7892 5.09 5.98 4.65 66 BAYES_99 7652 13.94 33.22 4.50 67 RCVD_IN_MSPIKE_H5 7482 3.57 1.87 4.40 68 XMNumbers 7349 4.06 3.51 4.33 69 KHOP_HELO_FCRDNS 7099 3.34 1.61 4.18 70 HTML_IMAGE_RATIO_04 6874 4.15 4.37 4.05 71 INVALID_MSGID 6759 2.85 0.53 3.98 72 TR_XM_SpammyWords4 6577 5.97 10.25 3.87 73 TO_MALFORMED 6308 2.50 0.03 3.71 74 BOTNET_IPINHOSTNAME 6162 6.34 11.87 3.63 75 HTML_IMAGE_RATIO_06 6085 3.18 2.35 3.58 76 BAYES_999 5976 10.74 25.49 3.52 77 BAYES_80 5921 5.86 10.72 3.49 78 MSGID_NOFQDN1 5903 2.40 0.21 3.47 79 MIME_HTML_MOSTLY 5853 3.69 4.18 3.45 80 RCVD_IN_MSPIKE_H4 5358 3.02 2.75 3.15 81 MIME_QP_LONG_LINE 5218 2.87 2.46 3.07 82 XMSubMetaSx_00 4908 3.77 5.58 2.89 83 T_REMOTE_IMAGE 4827 2.64 2.23 2.84 84 RELAYCOUNTRY_META 4579 8.05 19.00 2.70 85 T_TVD_MIME_NO_HEADERS 4483 1.79 0.05 2.64 86 MIME_CHARSET_FARAWAY 4143 1.74 0.31 2.44 87 MIME_HTML_ONLY_MULTI 4009 2.70 3.41 2.36 88 CHARSET_FARAWAY_HEADER 3982 1.64 0.21 2.34 89 TR_DCC_Bayes_99 3971 9.56 24.32 2.34 90 XM_Body_Dirty_Words 3948 3.83 6.90 2.32 91 XM_B_SpammyTLD 3911 3.12 4.79 2.30 92 HTML_IMAGE_RATIO_08 3893 2.52 2.99 2.29 93 BAYES_95 3803 3.56 6.25 2.24 94 MAILING_LIST_MULTI 3777 2.15 2.00 2.22 95 FROM_EXCESS_BASE64 3721 2.36 2.69 2.19 96 TR_XM_DKIM_Undo 3495 11.34 30.33 2.06 97 XM_CamelCaseFrm001 3490 2.76 4.21 2.05 98 T_TooManySym_03 3470 1.41 0.11 2.04 99 RCVD_IN_IADB_LISTED 3425 1.64 0.86 2.02 100 XM_PDF 3386 1.50 0.48 1.99 101 TR_XM_UnparsRelay 3211 4.87 10.96 1.89 102 XM_B_URI_Unicode 3105 1.88 1.99 1.83 103 TVD_RCVD_IP 3076 1.63 1.26 1.81 104 RCVD_IN_IADB_SPF 3066 1.46 0.75 1.80 105 TM2_M_URI_OPT_OUT 2986 1.73 1.67 1.76 106 XMGappySubj_01 2969 1.26 0.25 1.75 107 UNTRUSTED_Relay 2922 3.77 7.96 1.72 108 TR_XM_PhishingBody 2900 2.89 5.31 1.71 109 T_XMDrugObfuBody_14 2845 2.68 4.73 1.67 110 RCVD_IN_IADB_SENDERID 2845 1.36 0.70 1.67 111 BAYES_05 2829 1.39 0.81 1.67 112 XMStockSpam_06 2807 1.72 1.85 1.65 113 RCVD_IN_IADB_DK 2776 1.33 0.71 1.63 114 TooManyTo_002 2690 1.28 0.66 1.58 115 XM_B_COPY_HTML 2669 1.55 1.52 1.57 116 IN_HORDE_ADDRESS_BOOK 2644 1.08 0.09 1.56 117 XMGappySubj_02 2588 1.05 0.09 1.52 118 HTML_MIME_NO_HTML_TAG 2540 1.34 1.01 1.50 119 TR_XM_SpammyRelay 2429 5.44 13.65 1.43 120 TVD_SPACE_RATIO 2391 1.01 0.19 1.41 121 XMSexyCombo_05 2344 2.43 4.58 1.38 122 XM_B_Unsub2 2310 1.79 2.66 1.36 123 XM_B_Investor 2300 2.91 6.10 1.35 124 TR_XM_SpammyWords5 2200 2.32 4.41 1.30 125 XM_DK_Undo_01 2186 1.19 1.00 1.29 126 XM_SendGrid 2174 1.22 1.11 1.28 127 XM_GoogleGroups 2123 1.19 1.08 1.25 128 RCVD_IN_IADB_VOUCHED 2109 0.99 0.46 1.24 129 XMDiploma_00 2027 1.79 3.01 1.19 130 RCVD_IN_PSBL 1965 1.21 1.32 1.16 131 URI_NOVOWEL 1917 1.29 1.61 1.13 132 XMBrknScrpt_02 1774 1.34 1.96 1.04 133 TR_XM_Base64_M1 1767 1.14 1.36 1.04 134 TR_Symld_Words 1766 0.98 0.84 1.04 135 XM_UB50 1763 1.65 2.90 1.04 136 DKIM_INVALID 1741 2.29 4.87 1.02 137 TR_XM_DK_SendGrid 1644 0.91 0.80 0.97 138 XMBSHREFv2 1612 0.73 0.28 0.95 139 SUBJ_ALL_CAPS 1536 1.64 3.16 0.90 140 T_XMDrugObfuBody_08 1530 1.39 2.38 0.90 141 BOTNET 1514 4.03 10.45 0.89 142 XM_SPF_SoftFail 1496 1.43 2.55 0.88 143 RCVD_IN_IADB_OPTIN 1495 0.70 0.33 0.88 144 TR_XM_SpammyWords2 1471 4.14 10.82 0.87 145 URI_HEX 1459 0.96 1.15 0.86 146 XM_H_PHPMailer 1440 0.76 0.57 0.85 147 TooManyTo_003 1391 0.75 0.60 0.82 148 XMPhish30 1368 1.49 2.90 0.81 149 XMSubMetaI_00 1290 1.02 1.56 0.76 150 HTML_TAG_BALANCE_BODY 1278 0.80 0.88 0.75 151 XMBdyGiftCard01 1273 1.09 1.80 0.75 152 RELAYCOUNTRY_CA 1261 2.38 5.74 0.74 153 XM_B_SpammyWords4 1228 0.99 1.52 0.72 154 T_FILL_THIS_FORM_SHORT 1212 1.57 3.31 0.71 155 TR_XM_GMP_MSPIKE_UNDO2 1210 0.54 0.19 0.71 156 DIET_1 1203 1.07 1.80 0.71 157 XMSolicitRefs_0 1191 0.65 0.55 0.70 158 DKIM_ADSP_CUSTOM_MED 1173 0.83 1.13 0.69 159 T_XMHurry_00 1156 1.50 3.17 0.68 160 XM_ProductURIs 1134 0.96 1.57 0.67 161 TooManyTo_004 1118 0.63 0.57 0.66 162 TR_MetaPhish_Combo_01 1115 0.71 0.82 0.66 163 XMGenDplmaNmb 1114 0.84 1.21 0.66 164 XM_OfRef6 1056 1.69 3.88 0.62 165 XMSlimDrugH 1030 0.72 0.94 0.61 166 XMBody_95 995 0.42 0.09 0.59 167 XM_H_Long_From02 995 0.73 1.03 0.59 168 URI_TRY_3LD 981 0.76 1.13 0.58 169 XMBody_17 947 1.14 2.34 0.56 170 RCVD_IN_MSPIKE_BL 932 1.49 3.40 0.55 171 TR_XM_MSPIKECOMBO 932 1.49 3.40 0.55 172 T_TooManySym_04 927 0.37 0.01 0.55 173 TooManyTo_005 910 0.54 0.55 0.54 174 XMHTML_After_End 898 0.59 0.71 0.53 175 T_XMDrugObfuBody_00 877 1.03 2.07 0.52 176 RCVD_IN_BL_SPAMCOP_NET 865 4.19 11.73 0.51 177 MPART_ALT_DIFF_COUNT 861 0.84 1.52 0.51 178 XM_B_FormFill 858 0.35 0.03 0.51 179 RCVD_IN_MSPIKE_L3 858 0.81 1.43 0.51 180 TR_Mismatch_TLD_01 846 0.63 0.89 0.50 181 T_MONEY_PERCENT 837 0.66 1.01 0.49 182 TR_LOTS_OF_MONEY2 837 0.66 1.01 0.49 183 XMNoVowels 833 0.45 0.35 0.49 184 RCVD_IN_PBL 817 0.76 1.32 0.48 185 XM_URI_RBL 816 1.25 2.81 0.48 186 XM_S_SubURI 778 0.33 0.06 0.46 187 THIS_AD 768 0.90 1.82 0.45 188 FORGED_GMAIL_RCVD 754 0.49 0.58 0.44 189 DKIM_ADSP_NXDOMAIN 745 0.99 2.13 0.44 190 HTML_FONT_FACE_BAD 740 0.46 0.51 0.44 191 XMLngstWrd_00 733 0.37 0.24 0.43 192 XM_ShortIntro_01 728 0.49 0.60 0.43 193 RELAYCOUNTRY_AU 724 1.30 3.08 0.43 194 MSGID_FROM_MTA_HEADER 713 0.34 0.19 0.42 195 STY_INVIS_DIRECT 691 0.92 1.98 0.41 196 XM_B_DNDMA 689 0.75 1.47 0.41 197 NO_DNS_FOR_FROM 677 0.41 0.42 0.40 198 SHOPIFY_IMG_NOT_RCVD_SFY 671 1.01 2.26 0.39 199 XM_Ancestry_Forge 662 0.26 0.01 0.39 200 XMSubMetaSxObfu_03 646 0.47 0.65 0.38 ----------------------------------------------------------------------