Email: 350330 Autolearn: 0 AvgScore: 10.10 AvgScanTime: 1.06 sec Spam: 155284 Autolearn: 0 AvgScore: 20.91 AvgScanTime: 1.03 sec Ham: 195046 Autolearn: 0 AvgScore: 1.49 AvgScanTime: 1.08 sec Time Spent Running SA: 103.23 hours Time Spent Processing Spam: 44.51 hours Time Spent Processing Ham: 58.72 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 155223 99.84 99.96 99.75 2 HTML_MESSAGE 152582 91.53 98.26 86.17 3 DCC_CHECK 121056 57.96 77.96 42.03 4 XM_B_SpammyWords 114235 56.31 73.57 42.58 5 BAYES_50 97179 63.99 62.58 65.11 6 XM_B_SpammyWords2 88015 36.08 56.68 19.69 7 MIME_HTML_ONLY 87519 39.10 56.36 25.36 8 XMSubLong 87431 41.92 56.30 30.46 9 DKIM_SIGNED 82379 60.64 53.05 66.68 10 XM_DK_Pass 78735 59.23 50.70 66.02 11 DKIM_VALID 78334 58.90 50.45 65.64 12 XM_B_Unicode 76435 59.53 49.22 67.74 13 RELAYCOUNTRY_US 72868 61.70 46.93 73.46 14 ALL_TRUSTED 67480 32.42 43.46 23.64 15 MIME_HEADER_CTYPE_ONLY 66222 23.08 42.65 7.50 16 DKIM_VALID_AU 62399 50.16 40.18 58.10 17 XM_B_Phish_Phrases 60991 20.11 39.28 4.86 18 XMListUnsubscribeExists 60716 44.30 39.10 48.44 19 XM_URI_RBL 54206 15.75 34.91 0.50 20 T_TooManySym_01 53622 19.58 34.53 7.68 21 TM2_M_URI_OPT_OUT 53594 16.17 34.51 1.57 22 HTML_TAG_BALANCE_HEAD 52384 14.97 33.73 0.04 23 J_WEEDS_E 52188 14.90 33.61 0.00 24 J_WEEDS_S 52188 14.90 33.61 0.00 25 J_WEEDS_A 52188 14.90 33.61 0.00 26 J_WEEDS_O 52188 14.90 33.61 0.00 27 J_WEEDS_L 52188 14.90 33.61 0.00 28 J_WEEDS_B 52187 14.90 33.61 0.00 29 J_WEEDS_C 52187 14.90 33.61 0.00 30 J_WEEDS_T 52187 14.90 33.61 0.00 31 J_WEEDS_P 52187 14.90 33.61 0.00 32 J_WEEDS_V 52187 14.90 33.61 0.00 33 J_WEEDS_M 52187 14.90 33.61 0.00 34 J_WEEDS_N 52187 14.90 33.61 0.00 35 J_WEEDS_W 52187 14.90 33.61 0.00 36 J_WEEDS_I 52187 14.90 33.61 0.00 37 J_WEEDS_D 52186 14.90 33.61 0.00 38 J_WEEDS_R 52186 14.90 33.61 0.00 39 J_WEEDS_U 52186 14.90 33.61 0.00 40 J_WEEDS_Y 52186 14.90 33.61 0.00 41 J_WEEDS_K 52186 14.90 33.61 0.00 42 J_WEEDS_X 52186 14.90 33.61 0.00 43 J_WEEDS_H 52186 14.90 33.61 0.00 44 HTML_ENTITY_ASCII 51417 14.68 33.11 0.00 45 TO_IN_SUBJ 51344 14.69 33.06 0.06 46 LOC_TINY_FONT_1 48249 32.21 31.07 33.11 47 XM_B_Unicode3 47484 39.41 30.58 46.44 48 FSL_BULK_SIG 45571 16.92 29.35 7.04 49 T_KAM_HTML_FONT_INVALID 40809 26.22 26.28 26.16 50 XM_DK_Undo_02 38697 13.97 24.92 5.25 51 HTML_FONT_LOW_CONTRAST 37456 31.59 24.12 37.53 52 FVGT_m_MULTI_ODD 37263 24.60 24.00 25.09 53 DCC_CHECK_NEGATIVE 34129 41.96 21.98 57.86 54 BAYES_99 30497 11.02 19.64 4.16 55 XM_B_SpammyTLD 30251 10.39 19.48 3.15 56 DKIM_VALID_EF 26826 22.16 17.28 26.05 57 TR_XM_DKIM_Undo 26408 8.70 17.01 2.09 58 BAYES_999 23356 8.40 15.04 3.11 59 TR_DCC_Bayes_99 22448 7.49 14.46 1.94 60 XM_Multi_Part_URI 21985 14.55 14.16 14.86 61 TR_XM_DK_Unsub 20439 13.65 13.16 14.04 62 RCVD_IN_MSPIKE_H2 20218 12.88 13.02 12.77 63 XM_B_Unsub 19975 10.24 12.86 8.16 64 TR_XM_BayesUnsub 19286 8.87 12.42 6.04 65 T_TM2_M_HEADER_IN_MSG 17781 17.25 11.45 21.87 66 UNPARSEABLE_RELAY 16494 11.24 10.62 11.73 67 RELAYCOUNTRY_META 15898 6.08 10.24 2.78 68 HTML_MIME_NO_HTML_TAG 15524 9.39 10.00 8.91 69 MIXED_HREF_CASE 15493 8.39 9.98 7.12 70 HTML_FONT_SIZE_HUGE 15225 8.48 9.80 7.43 71 TR_MAX_INTL_RELAY 14503 7.78 9.34 6.53 72 XM_B_SpammyWords3 13160 7.46 8.47 6.66 73 RCVD_IN_MSPIKE_WL 12344 13.39 7.95 17.73 74 TR_XM_SpammyRelay 11928 4.21 7.68 1.45 75 TR_XM_SpammyWords2 11298 3.65 7.28 0.76 76 LOTS_OF_MONEY 11153 5.48 7.18 4.12 77 BAYES_60 10315 6.93 6.64 7.16 78 TR_XM_SpammyWords4 9922 4.31 6.39 2.65 79 RCVD_IN_BL_SPAMCOP_NET 9616 3.06 6.19 0.57 80 XM_Evil_Numbers_Gen 9373 7.92 6.04 9.42 81 TR_XM_UnparsRelay 9052 3.62 5.83 1.86 82 BOTNET_IPINHOSTNAME 9000 4.42 5.80 3.32 83 BAYES_80 8888 4.73 5.72 3.94 84 BOTNET 8828 3.00 5.69 0.87 85 MPART_ALT_DIFF 7941 5.86 5.11 6.45 86 UNTRUSTED_Relay 7119 2.98 4.58 1.71 87 XMSubMetaSx_00 7112 4.06 4.58 3.64 88 XM_H_GMP 6755 4.65 4.35 4.89 89 MIME_HTML_MOSTLY 6427 2.84 4.14 1.81 90 RCVD_IN_MSPIKE_BL 6265 2.14 4.03 0.63 91 TR_XM_MSPIKECOMBO 6258 2.14 4.03 0.63 92 XM_Body_Dirty_Words 6108 2.83 3.93 1.96 93 XMNumbers 5892 5.46 3.79 6.78 94 HTML_IMAGE_RATIO_02 5800 4.18 3.74 4.53 95 RELAYCOUNTRY_CA 5767 2.04 3.71 0.71 96 TR_XM_SpammyWords5 5673 2.21 3.65 1.06 97 TR_XM_SPAMCOP 5437 1.64 3.50 0.16 98 XM_UncommonTLD01 5273 3.93 3.40 4.36 99 T_XMDrugObfuBody_14 5226 2.37 3.37 1.58 100 T_TooManySym_02 5225 3.90 3.36 4.33 101 BAYES_95 5186 2.92 3.34 2.59 102 HTML_IMAGE_RATIO_04 5113 3.30 3.29 3.31 103 RCVD_IN_MSPIKE_H3 5106 5.67 3.29 7.56 104 USER_IN_DEF_DKIM_WL 5040 10.59 3.25 16.44 105 TR_XM_SpammyWords3 4669 1.51 3.01 0.32 106 XMStockSpam_06 4333 1.68 2.79 0.80 107 XM_H_Long_From01 4305 3.96 2.77 4.90 108 T_XMDrugObfuBody_08 4265 1.94 2.75 1.30 109 LotsOfNums_01 4260 4.47 2.74 5.85 110 RCVD_IN_MSPIKE_H5 4245 4.58 2.73 6.05 111 XMSexyCombo_05 4093 1.93 2.64 1.36 112 XMStrtUSub 4072 5.43 2.62 7.66 113 DKIM_INVALID 4045 1.74 2.60 1.04 114 TM2_M_VERY_LONG_WORD 3928 3.92 2.53 5.04 115 RCVD_IN_MSPIKE_L3 3859 1.39 2.49 0.52 116 TR_XM_PhishingBody 3852 2.31 2.48 2.18 117 T_XMHurry_00 3566 1.40 2.30 0.69 118 XM_B_PhoneNumber 3544 4.28 2.28 5.87 119 XM_B_Investor 3510 1.67 2.26 1.21 120 TooManyTo_001 3490 3.57 2.25 4.63 121 XM_CamelCaseFrm001 3477 2.20 2.24 2.18 122 HTML_IMAGE_RATIO_06 3413 2.62 2.20 2.96 123 XM_OfRef6 3372 1.39 2.17 0.77 124 XM_B_Unsub2 3363 1.70 2.17 1.32 125 RCVD_IN_MSPIKE_H4 2993 3.15 1.93 4.12 126 TR_XM_NoHeaderRelay 2908 0.96 1.87 0.24 127 XM_UB50 2840 1.39 1.83 1.05 128 XMBody_17 2810 1.05 1.81 0.45 129 XM_ProductURIs 2779 1.04 1.79 0.45 130 T_FILL_THIS_FORM_SHORT 2548 1.38 1.64 1.18 131 XMDiploma_00 2536 1.60 1.63 1.58 132 RELAYCOUNTRY_AU 2466 1.00 1.59 0.52 133 TR_XM_MSPIKECOMBO2 2378 0.70 1.53 0.03 134 ANY_BOUNCE_MESSAGE 2364 5.16 1.52 8.05 135 BOUNCE_MESSAGE 2364 5.15 1.52 8.05 136 SpammyFromTLD_02 2246 0.74 1.45 0.18 137 HTML_IMAGE_RATIO_08 2154 2.18 1.39 2.81 138 RCVD_IN_VALIDITY_SAFE 2113 3.90 1.36 5.93 139 XM_B_URI_Unicode 2102 1.45 1.35 1.53 140 MAILING_LIST_MULTI 2095 1.81 1.35 2.18 141 XMSubMetaSxObfu_03 2089 0.75 1.35 0.28 142 XM_SPF_SoftFail 2086 1.11 1.34 0.93 143 MIME_HTML_ONLY_MULTI 2040 1.82 1.31 2.22 144 MPART_ALT_DIFF_COUNT 2021 0.86 1.30 0.51 145 RCVD_IN_VALIDITY_RPBL 2006 0.59 1.29 0.02 146 XMPhish30 1951 1.21 1.26 1.17 147 DIET_1 1942 0.88 1.25 0.59 148 TR_XM_INV_DKIM 1907 0.55 1.23 0.02 149 XM_B_SpammyWords4 1806 1.22 1.16 1.26 150 BOTNET_NORDNS 1801 0.52 1.16 0.00 151 FROM_EXCESS_BASE64 1798 1.56 1.16 1.89 152 MIME_QP_LONG_LINE 1747 2.02 1.13 2.73 153 XMBrknScrpt_02 1699 1.08 1.09 1.06 154 SUBJ_ALL_CAPS 1663 0.86 1.07 0.69 155 RELAYCOUNTRY_FR 1658 0.61 1.07 0.25 156 TR_XM_MaxSPIKE 1655 0.49 1.07 0.03 157 URI_NOVOWEL 1648 1.00 1.06 0.96 158 XMSubMetaI_00 1618 0.78 1.04 0.58 159 RCVD_IN_MSPIKE_L4 1568 0.49 1.01 0.08 160 XM_UB99 1504 0.43 0.97 0.00 161 XMBdyGiftCard01 1497 1.12 0.96 1.25 162 T_XMDrugObfuBody_00 1456 0.89 0.94 0.84 163 SHOPIFY_IMG_NOT_RCVD_SFY 1454 0.58 0.94 0.29 164 XMGenDplmaNmb 1453 0.75 0.94 0.59 165 BAYES_40 1384 3.20 0.89 5.04 166 RDNS_DYNAMIC 1380 0.52 0.89 0.23 167 HTML_TAG_BALANCE_BODY 1370 2.25 0.88 3.34 168 DKIM_ADSP_NXDOMAIN 1350 0.60 0.87 0.39 169 XM_B_COPY_HTML 1339 0.88 0.86 0.89 170 RCVD_IN_VALIDITY_CERTIFIED 1333 3.26 0.86 5.17 171 TR_LOTS_OF_MONEY3 1297 0.54 0.84 0.31 172 URI_HEX 1294 0.89 0.83 0.93 173 TVD_RCVD_IP 1283 1.23 0.83 1.56 174 XM_GoogleGroups 1250 0.94 0.80 1.05 175 RCVD_IN_PSBL 1250 0.37 0.80 0.02 176 HTML_IMAGE_ONLY_20 1222 1.37 0.79 1.84 177 T_REMOTE_IMAGE 1160 1.75 0.75 2.55 178 MultiRelay_CC 1156 0.38 0.74 0.09 179 XMSlimDrugH 1151 0.65 0.74 0.57 180 TR_XM_GMP_BULK_SIG 1144 0.37 0.74 0.08 181 XM_DK_Undo_01 1137 1.15 0.73 1.49 182 XM_SendGrid 1129 0.99 0.73 1.21 183 THIS_AD 1122 0.55 0.72 0.41 184 TR_XM_FormFill 1120 0.32 0.72 0.00 185 XM_DIRTYINTL 1112 0.34 0.72 0.04 186 HELO_DYNAMIC_SPLIT_IP 1098 0.32 0.71 0.02 187 XM_B_REG_HTML 1053 0.40 0.68 0.17 188 XM_B_DNDMA 1044 0.62 0.67 0.58 189 KHOP_HELO_FCRDNS 1037 2.06 0.67 3.17 190 URI_TRY_3LD 1013 0.60 0.65 0.56 191 XM_UB80 1010 0.30 0.65 0.02 192 XM_H_Long_From02 982 0.61 0.63 0.60 193 XM_UB999 961 0.27 0.62 0.00 194 XMCapTrack 960 0.44 0.62 0.29 195 BAYES_20 942 1.98 0.61 3.08 196 HTTPS_HTTP_MISMATCH 931 0.46 0.60 0.35 197 XM_UB60 911 0.31 0.59 0.10 198 XM_B_Phish66 903 0.43 0.58 0.30 199 TM2_M_OBFU_COMMENT 896 0.55 0.58 0.54 200 TR_XM_DK_SendGrid 882 0.77 0.57 0.93 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 194555 99.84 99.96 99.75 2 HTML_MESSAGE 168067 91.53 98.26 86.17 3 RELAYCOUNTRY_US 143285 61.70 46.93 73.46 4 XM_B_Unicode 132128 59.53 49.22 67.74 5 DKIM_SIGNED 130058 60.64 53.05 66.68 6 XM_DK_Pass 128767 59.23 50.70 66.02 7 DKIM_VALID 128024 58.90 50.45 65.64 8 BAYES_50 126999 63.99 62.58 65.11 9 DKIM_VALID_AU 113325 50.16 40.18 58.10 10 DCC_CHECK_NEGATIVE 112859 41.96 21.98 57.86 11 XMListUnsubscribeExists 94475 44.30 39.10 48.44 12 XM_B_Unicode3 90577 39.41 30.58 46.44 13 XM_B_SpammyWords 83050 56.31 73.57 42.58 14 DCC_CHECK 81983 57.96 77.96 42.03 15 HTML_FONT_LOW_CONTRAST 73207 31.59 24.12 37.53 16 LOC_TINY_FONT_1 64577 32.21 31.07 33.11 17 XMSubLong 59419 41.92 56.30 30.46 18 T_KAM_HTML_FONT_INVALID 51031 26.22 26.28 26.16 19 DKIM_VALID_EF 50808 22.16 17.28 26.05 20 MIME_HTML_ONLY 49470 39.10 56.36 25.36 21 FVGT_m_MULTI_ODD 48929 24.60 24.00 25.09 22 ALL_TRUSTED 46108 32.42 43.46 23.64 23 T_TM2_M_HEADER_IN_MSG 42655 17.25 11.45 21.87 24 XM_B_SpammyWords2 38396 36.08 56.68 19.69 25 RCVD_IN_MSPIKE_WL 34572 13.39 7.95 17.73 26 USER_IN_DEF_DKIM_WL 32068 10.59 3.25 16.44 27 XM_Multi_Part_URI 28990 14.55 14.16 14.86 28 TR_XM_DK_Unsub 27388 13.65 13.16 14.04 29 RCVD_IN_MSPIKE_H2 24900 12.88 13.02 12.77 30 UNPARSEABLE_RELAY 22884 11.24 10.62 11.73 31 XM_Evil_Numbers_Gen 18365 7.92 6.04 9.42 32 HTML_MIME_NO_HTML_TAG 17373 9.39 10.00 8.91 33 XM_B_Unsub 15915 10.24 12.86 8.16 34 ANY_BOUNCE_MESSAGE 15697 5.16 1.52 8.05 35 BOUNCE_MESSAGE 15694 5.15 1.52 8.05 36 XM_DKIMWhitelistDomains 15094 4.32 0.02 7.74 37 T_TooManySym_01 14988 19.58 34.53 7.68 38 XMStrtUSub 14949 5.43 2.62 7.66 39 RCVD_IN_MSPIKE_H3 14744 5.67 3.29 7.56 40 MIME_HEADER_CTYPE_ONLY 14634 23.08 42.65 7.50 41 HTML_FONT_SIZE_HUGE 14493 8.48 9.80 7.43 42 BAYES_00 14384 4.23 0.27 7.37 43 BAYES_60 13956 6.93 6.64 7.16 44 MIXED_HREF_CASE 13885 8.39 9.98 7.12 45 FSL_BULK_SIG 13722 16.92 29.35 7.04 46 XMNumbers 13227 5.46 3.79 6.78 47 XM_B_SpammyWords3 12989 7.46 8.47 6.66 48 TR_MAX_INTL_RELAY 12738 7.78 9.34 6.53 49 MPART_ALT_DIFF 12572 5.86 5.11 6.45 50 RCVD_IN_MSPIKE_H5 11801 4.58 2.73 6.05 51 TR_XM_BayesUnsub 11777 8.87 12.42 6.04 52 RCVD_IN_VALIDITY_SAFE 11560 3.90 1.36 5.93 53 XM_B_PhoneNumber 11440 4.28 2.28 5.87 54 LotsOfNums_01 11410 4.47 2.74 5.85 55 TR_XM_DK_Bayes 10920 3.21 0.21 5.60 56 TR_XM_DK_Bayes1 10853 3.19 0.21 5.56 57 XM_DK_Undo_02 10249 13.97 24.92 5.25 58 RCVD_IN_VALIDITY_CERTIFIED 10078 3.26 0.86 5.17 59 BAYES_40 9834 3.20 0.89 5.04 60 TM2_M_VERY_LONG_WORD 9821 3.92 2.53 5.04 61 TR_XM_DK_Bayes2 9575 2.80 0.14 4.91 62 XM_H_Long_From01 9559 3.96 2.77 4.90 63 XM_H_GMP 9534 4.65 4.35 4.89 64 XM_B_Phish_Phrases 9474 20.11 39.28 4.86 65 TooManyTo_001 9033 3.57 2.25 4.63 66 HTML_IMAGE_RATIO_02 8830 4.18 3.74 4.53 67 XM_UncommonTLD01 8502 3.93 3.40 4.36 68 T_TooManySym_02 8442 3.90 3.36 4.33 69 BAYES_99 8105 11.02 19.64 4.16 70 LOTS_OF_MONEY 8033 5.48 7.18 4.12 71 RCVD_IN_MSPIKE_H4 8027 3.15 1.93 4.12 72 BAYES_80 7676 4.73 5.72 3.94 73 XMSubMetaSx_00 7096 4.06 4.58 3.64 74 TO_MALFORMED 6895 1.97 0.01 3.54 75 INVALID_MSGID 6521 2.02 0.36 3.34 76 HTML_TAG_BALANCE_BODY 6521 2.25 0.88 3.34 77 BOTNET_IPINHOSTNAME 6479 4.42 5.80 3.32 78 HTML_IMAGE_RATIO_04 6448 3.30 3.29 3.31 79 KHOP_HELO_FCRDNS 6189 2.06 0.67 3.17 80 XM_B_SpammyTLD 6135 10.39 19.48 3.15 81 BAYES_999 6060 8.40 15.04 3.11 82 BAYES_20 6007 1.98 0.61 3.08 83 HTML_IMAGE_RATIO_06 5776 2.62 2.20 2.96 84 BASE64_LENGTH_79_INF 5610 1.76 0.35 2.88 85 HTML_IMAGE_RATIO_08 5476 2.18 1.39 2.81 86 RELAYCOUNTRY_META 5415 6.08 10.24 2.78 87 MIME_QP_LONG_LINE 5324 2.02 1.13 2.73 88 TR_XM_SpammyWords4 5176 4.31 6.39 2.65 89 MAY_BE_FORGED 5068 1.45 0.01 2.60 90 BAYES_95 5061 2.92 3.34 2.59 91 T_REMOTE_IMAGE 4978 1.75 0.75 2.55 92 MIME_HTML_ONLY_MULTI 4326 1.82 1.31 2.22 93 MAILING_LIST_MULTI 4251 1.81 1.35 2.18 94 XM_CamelCaseFrm001 4247 2.20 2.24 2.18 95 TR_XM_PhishingBody 4243 2.31 2.48 2.18 96 T_TVD_MIME_NO_HEADERS 4129 1.20 0.05 2.12 97 TR_XM_DKIM_Undo 4070 8.70 17.01 2.09 98 T_TooManySym_03 3837 1.14 0.10 1.97 99 XM_Body_Dirty_Words 3814 2.83 3.93 1.96 100 TR_DCC_Bayes_99 3791 7.49 14.46 1.94 101 XM_PDF 3748 1.15 0.19 1.92 102 FROM_EXCESS_BASE64 3682 1.56 1.16 1.89 103 TR_XM_UnparsRelay 3634 3.62 5.83 1.86 104 HTML_IMAGE_ONLY_20 3589 1.37 0.79 1.84 105 MIME_HTML_MOSTLY 3534 2.84 4.14 1.81 106 UNTRUSTED_Relay 3327 2.98 4.58 1.71 107 MIME_CHARSET_FARAWAY 3205 1.01 0.21 1.64 108 RCVD_IN_IADB_LISTED 3201 1.15 0.54 1.64 109 T_XMDrugObfuBody_14 3089 2.37 3.37 1.58 110 XMDiploma_00 3080 1.60 1.63 1.58 111 TM2_M_URI_OPT_OUT 3071 16.17 34.51 1.57 112 TVD_RCVD_IP 3035 1.23 0.83 1.56 113 BAYES_05 3023 1.00 0.30 1.55 114 XM_B_URI_Unicode 2989 1.45 1.35 1.53 115 TooManyTo_002 2931 0.95 0.26 1.50 116 RCVD_IN_IADB_SPF 2922 1.03 0.45 1.50 117 XM_DK_Undo_01 2903 1.15 0.73 1.49 118 CHARSET_FARAWAY_HEADER 2898 0.87 0.09 1.49 119 IN_HORDE_ADDRESS_BOOK 2841 0.83 0.05 1.46 120 TR_XM_SpammyRelay 2831 4.21 7.68 1.45 121 RCVD_IN_IADB_SENDERID 2693 0.95 0.41 1.38 122 XMSexyCombo_05 2661 1.93 2.64 1.36 123 HTML_IMAGE_ONLY_24 2619 0.79 0.10 1.34 124 RCVD_IN_IADB_DK 2612 0.93 0.41 1.34 125 DC_PNG_UNO_LARGO 2596 0.80 0.14 1.33 126 XM_B_Unsub2 2577 1.70 2.17 1.32 127 T_XMDrugObfuBody_08 2534 1.94 2.75 1.30 128 XM_B_SpammyWords4 2461 1.22 1.16 1.26 129 XMBdyGiftCard01 2429 1.12 0.96 1.25 130 TVD_SPACE_RATIO 2422 0.74 0.11 1.24 131 XM_SendGrid 2352 0.99 0.73 1.21 132 XM_B_Investor 2352 1.67 2.26 1.21 133 PLING_QUERY 2338 0.84 0.38 1.20 134 T_FILL_THIS_FORM_SHORT 2303 1.38 1.64 1.18 135 XMGappySubj_01 2292 0.76 0.25 1.18 136 XMPhish30 2287 1.21 1.26 1.17 137 XMBSHREFv2 2087 0.67 0.16 1.07 138 XMBrknScrpt_02 2076 1.08 1.09 1.06 139 TR_XM_SpammyWords5 2061 2.21 3.65 1.06 140 RCVD_IN_IADB_VOUCHED 2048 0.73 0.33 1.05 141 XM_GoogleGroups 2046 0.94 0.80 1.05 142 XM_UB50 2039 1.39 1.83 1.05 143 DKIM_INVALID 2034 1.74 2.60 1.04 144 TR_Symld_Words 1998 0.73 0.35 1.02 145 XMGappySubj_02 1949 0.57 0.02 1.00 146 URI_NOVOWEL 1865 1.00 1.06 0.96 147 TR_XM_DK_SendGrid 1818 0.77 0.57 0.93 148 URI_HEX 1818 0.89 0.83 0.93 149 XM_H_PHPMailer 1813 0.63 0.25 0.93 150 XM_SPF_SoftFail 1813 1.11 1.34 0.93 151 XM_B_COPY_HTML 1739 0.88 0.86 0.89 152 BOTNET 1696 3.00 5.69 0.87 153 T_XMDrugObfuBody_00 1648 0.89 0.94 0.84 154 TR_MetaPhish_Combo_01 1594 0.68 0.52 0.82 155 XMStockSpam_06 1564 1.68 2.79 0.80 156 TooManyTo_003 1555 0.54 0.22 0.80 157 T_TooManySym_04 1530 0.44 0.01 0.78 158 XM_OfRef6 1509 1.39 2.17 0.77 159 RCVD_IN_IADB_OPTIN 1484 0.52 0.23 0.76 160 TR_XM_SpammyWords2 1482 3.65 7.28 0.76 161 RELAYCOUNTRY_CA 1383 2.04 3.71 0.71 162 SUBJ_ALL_CAPS 1355 0.86 1.07 0.69 163 T_XMHurry_00 1352 1.40 2.30 0.69 164 TR_XM_GMP_MSPIKE_UNDO2 1350 0.50 0.27 0.69 165 HTML_IMAGE_ONLY_32 1286 0.38 0.03 0.66 166 TooManyTo_004 1264 0.45 0.20 0.65 167 XMNoVowels 1228 0.48 0.28 0.63 168 RCVD_IN_MSPIKE_BL 1224 2.14 4.03 0.63 169 TR_XM_MSPIKECOMBO 1224 2.14 4.03 0.63 170 TR_XM_Base64_M1 1218 0.51 0.36 0.62 171 DKIM_ADSP_CUSTOM_MED 1199 0.56 0.50 0.61 172 XM_H_Long_From02 1172 0.61 0.63 0.60 173 XMGenDplmaNmb 1157 0.75 0.94 0.59 174 DIET_1 1154 0.88 1.25 0.59 175 MSGID_FROM_MTA_HEADER 1139 0.42 0.21 0.58 176 XM_B_DNDMA 1130 0.62 0.67 0.58 177 XMSubMetaI_00 1123 0.78 1.04 0.58 178 XMSlimDrugH 1119 0.65 0.74 0.57 179 RCVD_IN_BL_SPAMCOP_NET 1103 3.06 6.19 0.57 180 URI_TRY_3LD 1102 0.60 0.65 0.56 181 TooManyTo_005 1088 0.39 0.18 0.56 182 TM2_M_OBFU_COMMENT 1048 0.55 0.58 0.54 183 XMSolicitRefs_0 1027 0.49 0.44 0.53 184 RELAYCOUNTRY_AU 1023 1.00 1.59 0.52 185 RCVD_IN_MSPIKE_L3 1011 1.39 2.49 0.52 186 MPART_ALT_DIFF_COUNT 1003 0.86 1.30 0.51 187 XM_URI_RBL 970 15.75 34.91 0.50 188 XM_B_FormFill 952 0.27 0.01 0.49 189 XMLngstWrd_00 947 0.47 0.46 0.49 190 TR_Mismatch_TLD_01 901 0.31 0.13 0.46 191 XMBody_17 874 1.05 1.81 0.45 192 XM_ProductURIs 868 1.04 1.79 0.45 193 XM_Ancestry_Forge 860 0.25 0.00 0.44 194 AD_PREFS 854 0.27 0.06 0.44 195 HTML_FONT_FACE_BAD 813 0.35 0.27 0.42 196 XMLngstWrd_01 804 0.39 0.35 0.41 197 XM_S_SubURI 799 0.23 0.01 0.41 198 THIS_AD 798 0.55 0.72 0.41 199 FORGED_GMAIL_RCVD 766 0.39 0.38 0.39 200 HTML_EXTRA_CLOSE 762 0.22 0.00 0.39 ----------------------------------------------------------------------