Email: 363237 Autolearn: 0 AvgScore: 4.70 AvgScanTime: 1.25 sec Spam: 100249 Autolearn: 0 AvgScore: 13.63 AvgScanTime: 1.59 sec Ham: 262988 Autolearn: 0 AvgScore: 1.30 AvgScanTime: 1.12 sec Time Spent Running SA: 126.06 hours Time Spent Processing Spam: 44.32 hours Time Spent Processing Ham: 81.74 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 100184 99.84 99.94 99.80 2 HTML_MESSAGE 97728 91.55 97.49 89.28 3 DKIM_SIGNED 92053 63.96 91.82 53.34 4 XM_DK_Pass 84973 61.63 84.76 52.81 5 DKIM_VALID 84538 61.30 84.33 52.52 6 XM_B_Unicode 84111 79.03 83.90 77.17 7 RELAYCOUNTRY_US 82699 85.75 82.49 86.99 8 DCC_CHECK 72941 39.59 72.76 26.94 9 XM_B_SpammyWords 69036 54.87 68.86 49.53 10 XMListUnsubscribeExists 67656 46.86 67.49 39.00 11 DKIM_VALID_AU 66632 51.82 66.47 46.24 12 XM_B_Unicode3 52688 52.52 52.56 52.51 13 LOC_TINY_FONT_1 52174 33.69 52.04 26.70 14 XM_DK_Undo_02 45331 15.59 45.22 4.29 15 HTML_FONT_LOW_CONTRAST 41603 36.21 41.50 34.19 16 XM_B_SpammyWords2 41037 28.22 40.94 23.38 17 FVGT_m_MULTI_ODD 37392 27.66 37.30 23.98 18 BAYES_99 36920 12.69 36.83 3.49 19 BAYES_50 36148 49.93 36.06 55.22 20 TR_XM_DKIM_Undo 32072 9.87 31.99 1.44 21 BAYES_999 28697 9.83 28.63 2.66 22 DKIM_VALID_EF 28039 22.38 27.97 20.25 23 T_KAM_HTML_FONT_INVALID 27389 19.51 27.32 16.53 24 DCC_CHECK_NEGATIVE 27240 60.34 27.17 72.98 25 MIME_HTML_ONLY 25522 17.15 25.46 13.98 26 TR_DCC_Bayes_99 25372 7.57 25.31 0.81 27 XM_Multi_Part_URI 24135 15.24 24.08 11.87 28 XMSubLong 23197 21.90 23.14 21.42 29 XM_B_Unsub 22737 10.88 22.68 6.39 30 TR_XM_DK_Unsub 22508 14.03 22.45 10.82 31 TR_XM_BayesUnsub 21677 9.51 21.62 4.90 32 RCVD_IN_MSPIKE_H2 21580 13.27 21.53 10.13 33 UNPARSEABLE_RELAY 19758 12.03 19.71 9.11 34 T_TM2_M_HEADER_IN_MSG 18266 37.67 18.22 45.08 35 RELAYCOUNTRY_META 17733 6.47 17.69 2.19 36 TR_XM_SpammyWords2 15425 4.48 15.39 0.32 37 TR_MAX_INTL_RELAY 15389 8.16 15.35 5.41 38 RCVD_IN_BL_SPAMCOP_NET 14197 4.27 14.16 0.50 39 TR_XM_SpammyRelay 13228 4.47 13.20 1.14 40 XM_B_SpammyWords3 13075 7.44 13.04 5.31 41 RCVD_IN_MSPIKE_WL 12311 13.74 12.28 14.30 42 BOTNET 12139 3.86 12.11 0.71 43 TR_XM_UnparsRelay 11847 4.28 11.82 1.40 44 LOTS_OF_MONEY 11383 5.57 11.35 3.37 45 MPART_ALT_DIFF 10921 5.57 10.89 3.54 46 XM_Evil_Numbers_Gen 10885 10.57 10.86 10.46 47 BOTNET_IPINHOSTNAME 10280 4.63 10.25 2.49 48 TR_XM_SpammyWords4 10203 4.36 10.18 2.14 49 BAYES_80 9293 4.94 9.27 3.29 50 FSL_BULK_SIG 9165 3.96 9.14 1.99 51 RCVD_IN_MSPIKE_BL 9008 2.97 8.99 0.67 52 TR_XM_MSPIKECOMBO 9008 2.97 8.99 0.67 53 XMSubMetaSx_00 8606 4.77 8.58 3.32 54 XM_B_Phish_Phrases 8423 4.85 8.40 3.49 55 BAYES_60 8133 6.47 8.11 5.84 56 DKIM_INVALID 7515 2.67 7.50 0.83 57 HTML_IMAGE_RATIO_02 6713 10.07 6.70 11.36 58 LotsOfNums_01 6657 22.32 6.64 28.29 59 UNTRUSTED_Relay 6623 2.87 6.61 1.44 60 MIME_HTML_MOSTLY 6392 3.09 6.38 1.84 61 XM_Body_Dirty_Words 6365 2.92 6.35 1.62 62 TR_XM_SPAMCOP 6323 1.81 6.31 0.10 63 TR_XM_SpammyWords3 6270 1.98 6.25 0.36 64 RELAYCOUNTRY_CA 6243 2.13 6.23 0.57 65 XM_H_GMP 6054 4.43 6.04 3.82 66 BAYES_95 5827 3.14 5.81 2.12 67 USER_IN_DEF_DKIM_WL 5794 11.24 5.78 13.32 68 XM_H_Long_From01 5774 4.43 5.76 3.93 69 HTML_IMAGE_RATIO_06 5672 3.33 5.66 2.44 70 XM_UncommonTLD01 5633 3.87 5.62 3.21 71 RCVD_IN_MSPIKE_H3 5155 5.73 5.14 5.96 72 T_XMDrugObfuBody_14 5125 2.23 5.11 1.13 73 RCVD_IN_MSPIKE_L3 5096 1.76 5.08 0.49 74 XMStrtUSub 5065 4.47 5.05 4.25 75 XM_B_SpammyTLD 5035 2.95 5.02 2.17 76 TR_XM_PhishingBody 4967 2.35 4.95 1.35 77 RCVD_IN_VALIDITY_RPBL 4597 1.30 4.59 0.04 78 T_XMHurry_00 4539 1.87 4.53 0.85 79 XMStockSpam_06 4426 1.77 4.42 0.76 80 TR_XM_SpammyWords5 4397 1.96 4.39 1.04 81 RCVD_IN_MSPIKE_H5 4270 4.69 4.26 4.85 82 HTML_IMAGE_RATIO_04 4195 14.74 4.18 18.76 83 TM2_M_VERY_LONG_WORD 4097 23.43 4.09 30.80 84 DKIM_ADSP_NXDOMAIN 3808 1.28 3.80 0.32 85 XM_B_PhoneNumber 3806 4.85 3.80 5.26 86 XM_B_Investor 3683 1.81 3.67 1.10 87 XMSexyCombo_05 3582 1.91 3.57 1.28 88 TR_XM_NoHeaderRelay 3560 1.07 3.55 0.13 89 XM_CamelCaseFrm001 3544 2.27 3.54 1.79 90 XM_SPF_SoftFail 3524 1.45 3.52 0.66 91 T_FILL_THIS_FORM_SHORT 3377 1.44 3.37 0.70 92 TR_XM_MSPIKECOMBO2 3347 0.96 3.34 0.05 93 SUBJ_ALL_CAPS 3342 1.61 3.33 0.95 94 MIME_QP_LONG_LINE 3247 2.44 3.24 2.13 95 XM_OfRef6 3185 1.26 3.18 0.53 96 XM_H_DKIM_GOOG 3151 0.87 3.14 0.00 97 XMNumbers 3141 3.25 3.13 3.29 98 LOW_PRICE 3111 1.10 3.10 0.34 99 BOTNET_NORDNS 3034 0.84 3.03 0.00 100 XM_ProductURIs 2921 1.13 2.91 0.45 101 TM2_M_URI_OPT_OUT 2917 1.61 2.91 1.11 102 RCVD_IN_MSPIKE_H4 2886 3.33 2.88 3.50 103 RELAYCOUNTRY_AU 2708 1.00 2.70 0.35 104 TR_XM_INV_DKIM 2645 0.73 2.64 0.01 105 XMPhish30 2623 1.15 2.62 0.60 106 TooManyTo_001 2616 3.23 2.61 3.47 107 T_TooManySym_01 2521 4.91 2.51 5.82 108 XM_B_Unsub2 2500 1.30 2.49 0.85 109 TR_XM_MaxSPIKE 2492 0.72 2.49 0.05 110 XMDiploma_00 2440 1.42 2.43 1.03 111 XM_UB50 2433 1.33 2.43 0.91 112 MIME_HTML_ONLY_MULTI 2414 2.06 2.41 1.92 113 XMSubMetaSxObfu_03 2350 1.23 2.34 0.80 114 HTML_IMAGE_RATIO_08 2345 1.70 2.34 1.45 115 RCVD_IN_PSBL 2323 0.64 2.32 0.00 116 T_XMDrugObfuBody_08 2304 1.36 2.30 1.01 117 XM_URI_RBL 2230 0.77 2.22 0.22 118 SpammyFromTLD_02 2203 0.69 2.20 0.12 119 RCVD_IN_VALIDITY_SAFE 2155 4.13 2.15 4.89 120 XM_B_SpammyWords4 2040 1.38 2.03 1.14 121 XMBody_17 2022 1.08 2.02 0.72 122 FROM_EXCESS_BASE64 1985 2.02 1.98 2.03 123 RCVD_IN_MSPIKE_L4 1975 0.66 1.97 0.16 124 RCVD_IN_MSPIKE_L5 1937 0.55 1.93 0.02 125 XM_B_URI_Unicode 1913 1.38 1.91 1.17 126 TR_XM_RelayPhish 1910 0.57 1.91 0.06 127 MPART_ALT_DIFF_COUNT 1801 0.72 1.80 0.30 128 RELAYCOUNTRY_GB 1725 0.60 1.72 0.17 129 BAYES_40 1666 7.42 1.66 9.61 130 XM_H_Long_From02 1662 0.79 1.66 0.46 131 XMBdyGiftCard01 1656 1.32 1.65 1.20 132 KHOP_HELO_FCRDNS 1641 12.66 1.64 16.86 133 XMBrknScrpt_02 1628 1.29 1.62 1.16 134 URI_NOVOWEL 1578 1.00 1.57 0.78 135 MIXED_HREF_CASE 1553 0.47 1.55 0.06 136 TR_Mismatch_TLD_02 1547 0.47 1.54 0.06 137 XM_DK_Undo_01 1519 1.40 1.52 1.36 138 RELAYCOUNTRY_FR 1511 0.60 1.51 0.25 139 TR_MetaPhish_Combo_01b 1509 0.54 1.51 0.17 140 XMGenDplmaNmb 1506 0.70 1.50 0.40 141 SHOPIFY_IMG_NOT_RCVD_SFY 1497 0.62 1.49 0.29 142 XM_UB99 1418 0.39 1.41 0.00 143 TVD_PH_SEC 1388 0.41 1.38 0.04 144 XM_B_COPY_HTML 1375 0.99 1.37 0.84 145 TVD_PH_BODY_ACCOUNTS_PRE 1363 0.50 1.36 0.17 146 THIS_AD 1340 0.60 1.34 0.32 147 TVD_PH_SUBJ_META 1329 0.38 1.33 0.01 148 XM_B_DNDMA 1318 0.74 1.31 0.52 149 RCVD_IN_IADB_LISTED 1297 1.45 1.29 1.52 150 MAILING_LIST_MULTI 1293 1.60 1.29 1.72 151 HTML_IMAGE_ONLY_20 1289 0.54 1.29 0.26 152 BOUNCE_MESSAGE 1288 25.82 1.28 35.17 153 ANY_BOUNCE_MESSAGE 1288 25.82 1.28 35.17 154 T_REMOTE_IMAGE 1269 1.68 1.27 1.84 155 DIET_1 1267 0.67 1.26 0.44 156 T_XMDrugObfuBody_00 1241 1.01 1.24 0.92 157 RCVD_IN_VALIDITY_CERTIFIED 1228 3.27 1.22 4.05 158 RDNS_DYNAMIC 1227 0.47 1.22 0.18 159 XM_SendGrid 1226 1.07 1.22 1.02 160 XMSubMetaI_00 1209 0.67 1.21 0.46 161 BAYES_20 1184 5.26 1.18 6.82 162 TVD_RCVD_IP 1183 1.08 1.18 1.04 163 XMBody_78 1175 0.47 1.17 0.21 164 TR_XM_FormFill 1151 0.32 1.15 0.01 165 ALL_TRUSTED 1139 8.04 1.14 10.67 166 SCC_CANSPAM_2 1094 0.30 1.09 0.00 167 HELO_DYNAMIC_SPLIT_IP 1085 0.31 1.08 0.02 168 XM_B_REG_HTML 1070 0.41 1.07 0.15 169 RCVD_IN_IADB_SPF 1061 1.28 1.06 1.36 170 PLING_QUERY 1060 0.61 1.06 0.43 171 XM_B_Phish66 1051 0.45 1.05 0.22 172 TR_Symld_Words 1002 0.83 1.00 0.76 173 MultiRelay_CC 997 0.36 0.99 0.11 174 HTML_IMAGE_ONLY_32 971 0.42 0.97 0.21 175 XMSubNoVowel 960 0.34 0.96 0.11 176 HTML_TAG_BALANCE_BODY 956 0.51 0.95 0.34 177 RCVD_IN_IADB_DK 947 1.09 0.94 1.15 178 URI_HEX 945 0.90 0.94 0.88 179 XM_B_DynamicLink 945 0.28 0.94 0.03 180 XM_UB60 935 0.31 0.93 0.08 181 TR_XM_InvalidRelay 923 0.26 0.92 0.01 182 RCVD_IN_IADB_SENDERID 912 1.14 0.91 1.23 183 SpammyFromTLD_01 911 0.42 0.91 0.24 184 URI_TRY_3LD 899 0.61 0.90 0.49 185 XMSexyCombo_01 898 0.41 0.90 0.22 186 XM_UB80 897 0.26 0.89 0.01 187 TR_XM_DK_SendGrid 893 0.79 0.89 0.75 188 XM_HighProb1 883 0.25 0.88 0.00 189 NORDNS_LOW_CONTRAST 876 0.25 0.87 0.01 190 HTTPS_HTTP_MISMATCH 875 0.44 0.87 0.28 191 RCVD_IN_IADB_VOUCHED 866 0.97 0.86 1.02 192 HK_RANDOM_REPLYTO 861 0.28 0.86 0.06 193 TR_XM_GMP_BULK_SIG 857 0.24 0.85 0.01 194 MISSING_HEADERS 848 0.35 0.85 0.16 195 TM2_M_A_HREF_HREF 836 0.36 0.83 0.18 196 FROM_DOMAIN_NOVOWEL 820 0.23 0.82 0.01 197 FONT_INVIS_LONG_LINE 818 0.35 0.82 0.17 198 DKIM_ADSP_CUSTOM_MED 809 0.58 0.81 0.49 199 XMPhish14 774 0.42 0.77 0.29 200 HTML_MIME_NO_HTML_TAG 761 0.99 0.76 1.07 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 262472 99.84 99.94 99.80 2 HTML_MESSAGE 234805 91.55 97.49 89.28 3 RELAYCOUNTRY_US 228780 85.75 82.49 86.99 4 XM_B_Unicode 202938 79.03 83.90 77.17 5 DCC_CHECK_NEGATIVE 191940 60.34 27.17 72.98 6 BAYES_50 145219 49.93 36.06 55.22 7 DKIM_SIGNED 140286 63.96 91.82 53.34 8 XM_DK_Pass 138881 61.63 84.76 52.81 9 DKIM_VALID 138109 61.30 84.33 52.52 10 XM_B_Unicode3 138090 52.52 52.56 52.51 11 XM_B_SpammyWords 130256 54.87 68.86 49.53 12 DKIM_VALID_AU 121594 51.82 66.47 46.24 13 T_TM2_M_HEADER_IN_MSG 118555 37.67 18.22 45.08 14 XMListUnsubscribeExists 102575 46.86 67.49 39.00 15 ANY_BOUNCE_MESSAGE 92501 25.82 1.28 35.17 16 BOUNCE_MESSAGE 92499 25.82 1.28 35.17 17 HTML_FONT_LOW_CONTRAST 89923 36.21 41.50 34.19 18 TM2_M_VERY_LONG_WORD 81013 23.43 4.09 30.80 19 LotsOfNums_01 74405 22.32 6.64 28.29 20 DCC_CHECK 70850 39.59 72.76 26.94 21 LOC_TINY_FONT_1 70217 33.69 52.04 26.70 22 FVGT_m_MULTI_ODD 63074 27.66 37.30 23.98 23 XM_B_SpammyWords2 61485 28.22 40.94 23.38 24 MAY_BE_FORGED 58668 16.25 0.36 22.31 25 XMSubLong 56342 21.90 23.14 21.42 26 DKIM_VALID_EF 53257 22.38 27.97 20.25 27 HTML_IMAGE_RATIO_04 49343 14.74 4.18 18.76 28 KHOP_HELO_FCRDNS 44327 12.66 1.64 16.86 29 T_KAM_HTML_FONT_INVALID 43479 19.51 27.32 16.53 30 RCVD_IN_MSPIKE_WL 37615 13.74 12.28 14.30 31 MIME_HTML_ONLY 36773 17.15 25.46 13.98 32 USER_IN_DEF_DKIM_WL 35026 11.24 5.78 13.32 33 MIME_CHARSET_FARAWAY 31216 8.73 0.49 11.87 34 XM_Multi_Part_URI 31213 15.24 24.08 11.87 35 CHARSET_FARAWAY_HEADER 30913 8.61 0.36 11.75 36 HTML_IMAGE_RATIO_02 29872 10.07 6.70 11.36 37 TR_XM_DK_Unsub 28467 14.03 22.45 10.82 38 ALL_TRUSTED 28049 8.04 1.14 10.67 39 XM_Evil_Numbers_Gen 27500 10.57 10.86 10.46 40 RCVD_IN_MSPIKE_H2 26638 13.27 21.53 10.13 41 BAYES_00 25832 7.22 0.40 9.82 42 BAYES_40 25285 7.42 1.66 9.61 43 UNPARSEABLE_RELAY 23951 12.03 19.71 9.11 44 XMLngstWrd_00 22566 6.28 0.23 8.58 45 BAYES_20 17928 5.26 1.18 6.82 46 XM_B_Unsub 16799 10.88 22.68 6.39 47 RCVD_IN_MSPIKE_H3 15661 5.73 5.14 5.96 48 BAYES_60 15351 6.47 8.11 5.84 49 T_TooManySym_01 15310 4.91 2.51 5.82 50 XM_DKIMWhitelistDomains 14407 3.97 0.00 5.48 51 TR_MAX_INTL_RELAY 14240 8.16 15.35 5.41 52 XM_B_SpammyWords3 13956 7.44 13.04 5.31 53 XM_B_PhoneNumber 13827 4.85 3.80 5.26 54 TR_XM_BayesUnsub 12879 9.51 21.62 4.90 55 RCVD_IN_VALIDITY_SAFE 12847 4.13 2.15 4.89 56 RCVD_IN_MSPIKE_H5 12760 4.69 4.26 4.85 57 TR_XM_DK_Bayes 11951 3.37 0.29 4.54 58 TR_XM_DK_Bayes1 11863 3.35 0.29 4.51 59 XM_DK_Undo_02 11294 15.59 45.22 4.29 60 XMStrtUSub 11177 4.47 5.05 4.25 61 RCVD_IN_VALIDITY_CERTIFIED 10642 3.27 1.22 4.05 62 TR_XM_DK_Bayes2 10424 2.92 0.19 3.96 63 XM_H_Long_From01 10327 4.43 5.76 3.93 64 XM_H_GMP 10039 4.43 6.04 3.82 65 BAYES_05 9967 2.93 0.67 3.79 66 MPART_ALT_DIFF 9315 5.57 10.89 3.54 67 RCVD_IN_MSPIKE_H4 9194 3.33 2.88 3.50 68 XM_B_Phish_Phrases 9190 4.85 8.40 3.49 69 BAYES_99 9167 12.69 36.83 3.49 70 TooManyTo_001 9116 3.23 2.61 3.47 71 LOTS_OF_MONEY 8858 5.57 11.35 3.37 72 T_TVD_MIME_NO_HEADERS 8787 2.43 0.04 3.34 73 XMSubMetaSx_00 8727 4.77 8.58 3.32 74 XMNumbers 8663 3.25 3.13 3.29 75 BAYES_80 8650 4.94 9.27 3.29 76 XM_UncommonTLD01 8442 3.87 5.62 3.21 77 T_TooManySym_02 8078 2.39 0.59 3.07 78 TO_MALFORMED 7399 2.04 0.03 2.81 79 BAYES_999 6996 9.83 28.63 2.66 80 HTML_FONT_FACE_BAD 6707 1.91 0.24 2.55 81 BOTNET_IPINHOSTNAME 6554 4.63 10.25 2.49 82 INVALID_MSGID 6550 1.93 0.45 2.49 83 HTML_IMAGE_RATIO_06 6426 3.33 5.66 2.44 84 RELAYCOUNTRY_META 5755 6.47 17.69 2.19 85 XM_B_SpammyTLD 5696 2.95 5.02 2.17 86 TR_XM_SpammyWords4 5625 4.36 10.18 2.14 87 MIME_QP_LONG_LINE 5602 2.44 3.24 2.13 88 BAYES_95 5588 3.14 5.81 2.12 89 FROM_EXCESS_BASE64 5347 2.02 1.98 2.03 90 FSL_BULK_SIG 5237 3.96 9.14 1.99 91 MIME_HTML_ONLY_MULTI 5054 2.06 2.41 1.92 92 T_REMOTE_IMAGE 4850 1.68 1.27 1.84 93 MIME_HTML_MOSTLY 4847 3.09 6.38 1.84 94 XM_CamelCaseFrm001 4711 2.27 3.54 1.79 95 MAILING_LIST_MULTI 4517 1.60 1.29 1.72 96 XM_Body_Dirty_Words 4255 2.92 6.35 1.62 97 XM_E_Blogspot 4193 1.18 0.09 1.59 98 RCVD_IN_IADB_LISTED 3988 1.45 1.29 1.52 99 HTML_IMAGE_RATIO_08 3813 1.70 2.34 1.45 100 UNTRUSTED_Relay 3790 2.87 6.61 1.44 101 TR_XM_DKIM_Undo 3776 9.87 31.99 1.44 102 TR_XM_UnparsRelay 3694 4.28 11.82 1.40 103 RCVD_IN_IADB_SPF 3580 1.28 1.06 1.36 104 XM_DK_Undo_01 3565 1.40 1.52 1.36 105 TR_XM_PhishingBody 3561 2.35 4.95 1.35 106 T_TooManySym_03 3545 1.01 0.13 1.35 107 XMSexyCombo_05 3366 1.91 3.57 1.28 108 RCVD_IN_IADB_SENDERID 3240 1.14 0.91 1.23 109 XM_PDF 3173 0.96 0.31 1.21 110 XMBdyGiftCard01 3145 1.32 1.65 1.20 111 XM_B_URI_Unicode 3085 1.38 1.91 1.17 112 XMBrknScrpt_02 3051 1.29 1.62 1.16 113 RCVD_IN_IADB_DK 3028 1.09 0.94 1.15 114 TR_XM_SpammyRelay 2995 4.47 13.20 1.14 115 XM_B_SpammyWords4 2986 1.38 2.03 1.14 116 T_XMDrugObfuBody_14 2963 2.23 5.11 1.13 117 TM2_M_URI_OPT_OUT 2916 1.61 2.91 1.11 118 XM_B_Investor 2902 1.81 3.67 1.10 119 TooManyTo_002 2888 0.90 0.37 1.10 120 HTML_MIME_NO_HTML_TAG 2820 0.99 0.76 1.07 121 TVD_RCVD_IP 2741 1.08 1.18 1.04 122 TR_XM_SpammyWords5 2740 1.96 4.39 1.04 123 XMDiploma_00 2713 1.42 2.43 1.03 124 XM_SendGrid 2674 1.07 1.22 1.02 125 RCVD_IN_IADB_VOUCHED 2674 0.97 0.86 1.02 126 T_XMDrugObfuBody_08 2647 1.36 2.30 1.01 127 IN_HORDE_ADDRESS_BOOK 2617 0.74 0.06 1.00 128 TVD_SPACE_RATIO 2540 0.78 0.30 0.97 129 SUBJ_ALL_CAPS 2505 1.61 3.33 0.95 130 T_XMDrugObfuBody_00 2418 1.01 1.24 0.92 131 XM_UB50 2394 1.33 2.43 0.91 132 URI_HEX 2320 0.90 0.94 0.88 133 XMGappySubj_01 2306 0.68 0.16 0.88 134 XM_B_Unsub2 2238 1.30 2.49 0.85 135 T_XMHurry_00 2237 1.87 4.53 0.85 136 XM_B_COPY_HTML 2210 0.99 1.37 0.84 137 DKIM_INVALID 2177 2.67 7.50 0.83 138 TR_DCC_Bayes_99 2143 7.57 25.31 0.81 139 XMSubMetaSxObfu_03 2107 1.23 2.34 0.80 140 XM_GoogleGroups 2092 0.74 0.60 0.80 141 RCVD_IN_IADB_OPTIN 2067 0.74 0.62 0.79 142 URI_NOVOWEL 2043 1.00 1.57 0.78 143 TR_Symld_Words 2011 0.83 1.00 0.76 144 XMBSHREFv2 2006 0.62 0.24 0.76 145 XMStockSpam_06 2003 1.77 4.42 0.76 146 TR_XM_DK_SendGrid 1975 0.79 0.89 0.75 147 XMBody_17 1890 1.08 2.02 0.72 148 BOTNET 1871 3.86 12.11 0.71 149 T_FILL_THIS_FORM_SHORT 1849 1.44 3.37 0.70 150 XMGappySubj_02 1822 0.51 0.03 0.69 151 TR_XM_MSPIKECOMBO 1762 2.97 8.99 0.67 152 RCVD_IN_MSPIKE_BL 1762 2.97 8.99 0.67 153 XM_SPF_SoftFail 1738 1.45 3.52 0.66 154 XM_H_PHPMailer 1643 0.53 0.30 0.62 155 TooManyTo_003 1614 0.53 0.30 0.61 156 TR_XM_Base64_M1 1602 0.64 0.72 0.61 157 XMPhish30 1571 1.15 2.62 0.60 158 TR_MetaPhish_Combo_01 1563 0.61 0.67 0.59 159 RELAYCOUNTRY_CA 1487 2.13 6.23 0.57 160 XM_OfRef6 1393 1.26 3.18 0.53 161 XM_B_DNDMA 1377 0.74 1.31 0.52 162 TooManyTo_004 1315 0.43 0.25 0.50 163 RCVD_IN_BL_SPAMCOP_NET 1314 4.27 14.16 0.50 164 RCVD_IN_MSPIKE_L3 1301 1.76 5.08 0.49 165 URI_TRY_3LD 1299 0.61 0.90 0.49 166 TR_XM_GMP_MSPIKE_UNDO2 1295 0.42 0.23 0.49 167 DKIM_ADSP_CUSTOM_MED 1290 0.58 0.81 0.49 168 T_TooManySym_04 1219 0.34 0.02 0.46 169 XMSubMetaI_00 1217 0.67 1.21 0.46 170 XM_H_Long_From02 1212 0.79 1.66 0.46 171 XMSolicitRefs_0 1189 0.45 0.44 0.45 172 XM_ProductURIs 1182 1.13 2.91 0.45 173 DIET_1 1162 0.67 1.26 0.44 174 XMLngstWrd_01 1155 0.38 0.21 0.44 175 TooManyTo_005 1155 0.38 0.23 0.44 176 PLING_QUERY 1142 0.61 1.06 0.43 177 XMGenDplmaNmb 1046 0.70 1.50 0.40 178 HTML_FONT_SIZE_LARGE 1025 0.38 0.37 0.39 179 MSGID_FROM_MTA_HEADER 950 0.34 0.27 0.36 180 TR_XM_SpammyWords3 939 1.98 6.25 0.36 181 RELAYCOUNTRY_AU 908 1.00 2.70 0.35 182 SUBJ_DOLLARS 907 0.43 0.64 0.34 183 TVD_PH_BODY_META 896 0.27 0.07 0.34 184 HTML_TAG_BALANCE_BODY 890 0.51 0.95 0.34 185 LOW_PRICE 889 1.10 3.10 0.34 186 FORGED_GMAIL_RCVD 884 0.43 0.67 0.34 187 AD_PREFS 852 0.30 0.23 0.32 188 TR_XM_SpammyWords2 840 4.48 15.39 0.32 189 DKIM_ADSP_NXDOMAIN 838 1.28 3.80 0.32 190 THIS_AD 837 0.60 1.34 0.32 191 XMSlimDrugH 837 0.42 0.69 0.32 192 XMHTML_After_End 831 0.38 0.55 0.32 193 XMBody_106 830 0.26 0.12 0.32 194 XM_S_SubURI 819 0.24 0.04 0.31 195 XMNoVowels 808 0.29 0.23 0.31 196 MPART_ALT_DIFF_COUNT 797 0.72 1.80 0.30 197 TM2_M_OBFU_COMMENT 784 0.31 0.34 0.30 198 NML_ADSP_CUSTOM_MED 778 0.41 0.71 0.30 199 XM_B_FormFill 774 0.22 0.02 0.29 200 SHOPIFY_IMG_NOT_RCVD_SFY 773 0.62 1.49 0.29 ----------------------------------------------------------------------