Email: 401004 Autolearn: 0 AvgScore: 5.15 AvgScanTime: 1.28 sec Spam: 126946 Autolearn: 0 AvgScore: 13.44 AvgScanTime: 1.54 sec Ham: 274058 Autolearn: 0 AvgScore: 1.31 AvgScanTime: 1.17 sec Time Spent Running SA: 143.07 hours Time Spent Processing Spam: 54.37 hours Time Spent Processing Ham: 88.70 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 126843 99.84 99.92 99.81 2 HTML_MESSAGE 123648 91.62 97.40 88.94 3 DKIM_SIGNED 117571 70.29 92.61 59.94 4 XM_B_Unicode 110578 80.71 87.11 77.74 5 XM_DK_Pass 109472 67.87 86.24 59.36 6 DKIM_VALID 108904 67.54 85.79 59.09 7 RELAYCOUNTRY_US 107086 86.02 84.36 86.78 8 DCC_CHECK 98439 48.36 77.54 34.84 9 XMListUnsubscribeExists 89027 53.06 70.13 45.15 10 DKIM_VALID_AU 86486 56.84 68.13 51.62 11 XM_B_SpammyWords 82660 55.68 65.11 51.32 12 LOC_TINY_FONT_1 69241 38.29 54.54 30.76 13 XM_B_Unicode3 67272 52.70 52.99 52.57 14 XM_DK_Undo_02 57968 17.85 45.66 4.97 15 HTML_FONT_LOW_CONTRAST 57888 37.50 45.60 33.75 16 FVGT_m_MULTI_ODD 56032 31.37 44.14 25.45 17 BAYES_50 48885 50.26 38.51 55.71 18 XM_B_SpammyWords2 46776 29.22 36.85 25.69 19 BAYES_99 41676 13.13 32.83 4.00 20 DKIM_VALID_EF 37754 24.54 29.74 22.12 21 TR_XM_DKIM_Undo 37087 10.44 29.21 1.74 22 RCVD_IN_MSPIKE_H2 33703 16.66 26.55 12.09 23 XM_Multi_Part_URI 33195 17.52 26.15 13.53 24 BAYES_999 32717 10.32 25.77 3.16 25 T_KAM_HTML_FONT_INVALID 32002 19.88 25.21 17.41 26 MIME_HTML_ONLY 31405 18.18 24.74 15.15 27 XMSubLong 30686 23.28 24.17 22.87 28 TR_XM_DK_Unsub 30642 16.32 24.14 12.70 29 UNPARSEABLE_RELAY 30444 15.40 23.98 11.42 30 TR_DCC_Bayes_99 30218 8.44 23.80 1.33 31 DCC_CHECK_NEGATIVE 28364 51.56 22.34 65.10 32 XM_B_Unsub 25450 10.67 20.05 6.32 33 TR_XM_BayesUnsub 24600 9.40 19.38 4.78 34 T_TM2_M_HEADER_IN_MSG 22419 31.98 17.66 38.61 35 RCVD_IN_BL_SPAMCOP_NET 20685 5.59 16.29 0.64 36 RELAYCOUNTRY_META 20308 6.76 16.00 2.48 37 TR_MAX_INTL_RELAY 19832 8.71 15.62 5.51 38 TR_XM_UnparsRelay 16788 5.44 13.22 1.83 39 XM_B_SpammyWords3 16198 7.89 12.76 5.64 40 RCVD_IN_MSPIKE_WL 15556 14.80 12.25 15.98 41 TR_XM_SpammyWords2 15329 4.18 12.08 0.52 42 BOTNET 14835 4.17 11.69 0.69 43 FSL_BULK_SIG 14684 5.93 11.57 3.32 44 TR_XM_SpammyRelay 14471 4.57 11.40 1.40 45 BOTNET_IPINHOSTNAME 13220 5.13 10.41 2.68 46 BAYES_80 12470 5.39 9.82 3.34 47 XM_Evil_Numbers_Gen 12225 10.27 9.63 10.56 48 BAYES_60 12155 7.35 9.57 6.32 49 MPART_ALT_DIFF 11146 5.07 8.78 3.35 50 LOTS_OF_MONEY 11006 5.03 8.67 3.34 51 TR_XM_SPAMCOP 10476 2.76 8.25 0.21 52 HTML_IMAGE_RATIO_02 10259 9.78 8.08 10.56 53 TR_XM_SpammyWords4 9753 3.96 7.68 2.24 54 XM_B_Phish_Phrases 9570 5.62 7.54 4.73 55 RCVD_IN_MSPIKE_BL 9378 3.12 7.39 1.15 56 TR_XM_MSPIKECOMBO 9371 3.12 7.38 1.15 57 XM_H_GMP 9269 5.07 7.30 4.04 58 XM_H_Long_From01 9244 5.29 7.28 4.37 59 DKIM_INVALID 8667 2.75 6.83 0.86 60 XMSubMetaSx_00 8518 4.38 6.71 3.30 61 UNTRUSTED_Relay 8295 3.19 6.53 1.64 62 RCVD_IN_MSPIKE_H3 6998 6.30 5.51 6.66 63 BAYES_95 6876 3.20 5.42 2.17 64 RELAYCOUNTRY_CA 6805 2.11 5.36 0.60 65 XM_B_SpammyTLD 6473 3.24 5.10 2.38 66 XM_UncommonTLD01 6451 3.78 5.08 3.17 67 XMStrtUSub 6388 4.85 5.03 4.77 68 XM_B_PhoneNumber 6377 6.10 5.02 6.60 69 LotsOfNums_01 6360 14.50 5.01 18.89 70 HTML_IMAGE_RATIO_04 5935 12.84 4.68 16.63 71 TM2_M_VERY_LONG_WORD 5870 18.09 4.62 24.33 72 TR_XM_SpammyWords3 5585 1.84 4.40 0.65 73 TR_XM_PhishingBody 5576 2.45 4.39 1.55 74 T_XMDrugObfuBody_14 5539 2.01 4.36 0.92 75 XM_Body_Dirty_Words 5368 2.41 4.23 1.56 76 MIME_HTML_MOSTLY 5339 2.78 4.21 2.12 77 RCVD_IN_MSPIKE_L3 5236 1.89 4.12 0.86 78 BOTNET_NORDNS 5023 1.25 3.96 0.00 79 T_TooManySym_01 4991 5.44 3.93 6.14 80 RCVD_IN_MSPIKE_H5 4849 4.99 3.82 5.54 81 T_XMHurry_00 4716 1.88 3.71 1.03 82 DKIM_ADSP_NXDOMAIN 4645 1.41 3.66 0.36 83 XMSexyCombo_05 4581 1.89 3.61 1.09 84 XM_CamelCaseFrm001 4562 2.49 3.59 1.99 85 USER_IN_DEF_DKIM_WL 4546 12.08 3.58 16.01 86 TR_XM_SpammyWords5 4356 2.29 3.43 1.76 87 SUBJ_ALL_CAPS 4268 2.37 3.36 1.90 88 XMStockSpam_06 4130 1.55 3.25 0.76 89 XMSubMetaI_00 4085 1.87 3.22 1.24 90 KHOP_HELO_FCRDNS 3989 10.46 3.14 13.85 91 XM_B_Investor 3942 1.66 3.11 0.99 92 T_REMOTE_IMAGE 3820 2.41 3.01 2.13 93 TR_XM_MSPIKECOMBO2 3778 0.99 2.98 0.07 94 XMBody_17 3768 1.26 2.97 0.46 95 RCVD_IN_MSPIKE_H4 3709 3.51 2.92 3.78 96 XMBdyGiftCard01 3689 1.72 2.91 1.17 97 RELAYCOUNTRY_AU 3621 1.20 2.85 0.43 98 XM_H_DKIM_GOOG 3618 0.91 2.85 0.01 99 HTML_IMAGE_RATIO_06 3587 2.78 2.83 2.76 100 MIME_QP_LONG_LINE 3556 2.81 2.80 2.81 101 TR_XM_NoHeaderRelay 3461 0.96 2.73 0.14 102 THIS_AD 3459 1.21 2.72 0.51 103 TR_XM_GMP_BULK_SIG 3456 0.89 2.72 0.05 104 XMNumbers 3412 3.13 2.69 3.33 105 TooManyTo_001 3359 3.27 2.65 3.56 106 XM_UB50 3357 1.59 2.64 1.10 107 RCVD_IN_VALIDITY_RPBL 3353 0.85 2.64 0.02 108 XM_OfRef6 3253 1.20 2.56 0.57 109 SHOPIFY_IMG_NOT_RCVD_SFY 3241 1.06 2.55 0.37 110 MIME_HTML_ONLY_MULTI 3115 2.05 2.45 1.87 111 XM_B_SpammyWords4 3031 1.63 2.39 1.28 112 RCVD_IN_VALIDITY_SAFE 3022 4.90 2.38 6.07 113 XM_B_URI_Unicode 2985 1.49 2.35 1.10 114 XM_B_Unsub2 2969 1.30 2.34 0.83 115 HTML_IMAGE_RATIO_08 2897 2.03 2.28 1.91 116 XM_ProductURIs 2869 1.12 2.26 0.60 117 MPART_ALT_DIFF_COUNT 2842 1.01 2.24 0.45 118 TM2_M_URI_OPT_OUT 2806 1.71 2.21 1.48 119 T_FILL_THIS_FORM_SHORT 2763 1.08 2.18 0.57 120 TR_XM_INV_DKIM 2707 0.68 2.13 0.01 121 RCVD_IN_MSPIKE_L4 2666 0.84 2.10 0.25 122 XM_SPF_SoftFail 2664 1.17 2.10 0.75 123 T_XMDrugObfuBody_08 2613 1.75 2.06 1.60 124 XMBrknScrpt_02 2561 1.50 2.02 1.27 125 XMPhish30 2533 1.09 2.00 0.67 126 TR_XM_MaxSPIKE 2452 0.66 1.93 0.06 127 SpammyFromTLD_02 2439 0.72 1.92 0.17 128 XM_URI_RBL 2425 0.87 1.91 0.39 129 LOW_PRICE 2219 0.73 1.75 0.26 130 RELAYCOUNTRY_FR 2161 0.70 1.70 0.23 131 HTML_TAG_BALANCE_BODY 2129 0.90 1.68 0.54 132 XMDiploma_00 2049 1.14 1.61 0.92 133 XMSubMetaSxObfu_03 2005 0.96 1.58 0.67 134 XM_H_Long_From02 1989 0.86 1.57 0.53 135 URI_NOVOWEL 1969 1.12 1.55 0.91 136 XM_B_COPY_HTML 1926 1.01 1.52 0.77 137 HTML_IMAGE_ONLY_24 1923 0.58 1.51 0.15 138 XM_B_REG_HTML 1893 0.64 1.49 0.24 139 BAYES_40 1885 6.23 1.48 8.42 140 FROM_EXCESS_BASE64 1788 1.70 1.41 1.83 141 BOUNCE_MESSAGE 1738 20.25 1.37 28.99 142 ANY_BOUNCE_MESSAGE 1738 20.25 1.37 28.99 143 HK_RANDOM_REPLYTO 1735 0.47 1.37 0.06 144 RCVD_IN_PSBL 1663 0.43 1.31 0.02 145 XM_SendGrid 1652 1.14 1.30 1.06 146 RCVD_IN_VALIDITY_CERTIFIED 1618 3.65 1.27 4.75 147 RDNS_DYNAMIC 1595 0.51 1.26 0.17 148 XM_DK_Undo_01 1548 1.20 1.22 1.19 149 RCVD_IN_IADB_LISTED 1542 1.73 1.21 1.97 150 MAILING_LIST_MULTI 1526 1.55 1.20 1.71 151 DIET_1 1516 0.70 1.19 0.47 152 XMSubMetaSSx_00 1515 0.49 1.19 0.16 153 XM_UB99 1502 0.37 1.18 0.00 154 XMHTML_After_End 1493 0.68 1.18 0.44 155 BAYES_20 1488 4.72 1.17 6.36 156 RCVD_IN_MSPIKE_L5 1469 0.39 1.16 0.03 157 T_XMDrugObfuBody_00 1425 0.91 1.12 0.81 158 TVD_RCVD_IP 1412 1.09 1.11 1.08 159 ALL_TRUSTED 1412 7.54 1.11 10.52 160 HK_RANDOM_FROM 1403 0.41 1.11 0.09 161 HTML_IMAGE_ONLY_28 1379 0.45 1.09 0.16 162 TR_LOTS_OF_MONEY3 1371 0.62 1.08 0.41 163 TR_XM_RelayPhish 1371 0.39 1.08 0.07 164 HELO_DYNAMIC_SPLIT_IP 1343 0.34 1.06 0.01 165 SpammyFromTLD_01 1315 0.51 1.04 0.26 166 T_TooManySym_02 1306 2.60 1.03 3.33 167 XM_B_Phish66 1306 0.48 1.03 0.22 168 MultiRelay_CC 1302 0.38 1.03 0.08 169 TR_Mismatch_TLD_02 1301 0.36 1.02 0.06 170 XM_B_DNDMA 1282 0.70 1.01 0.55 171 HTML_IMAGE_ONLY_16 1268 0.42 1.00 0.15 172 XM_RXBody 1262 0.46 0.99 0.21 173 XMBody_78 1261 0.46 0.99 0.22 174 TR_XM_DK_SendGrid 1255 0.83 0.99 0.76 175 T_Symld_Words_02 1249 0.46 0.98 0.22 176 FVGT_m_MULTI_ODD_EMAIL 1211 0.32 0.95 0.03 177 RCVD_IN_IADB_SPF 1198 1.53 0.94 1.80 178 TR_XM_FormFill 1190 0.30 0.94 0.01 179 MONEY_BACK 1178 0.49 0.93 0.28 180 HTML_SHORT_LINK_IMG_2 1176 0.31 0.93 0.02 181 TR_Symld_Words 1153 0.79 0.91 0.73 182 HTML_IMAGE_ONLY_20 1144 0.49 0.90 0.30 183 XM_UB60 1142 0.33 0.90 0.07 184 SUBJ_DOLLARS 1141 0.41 0.90 0.18 185 URI_HEX 1097 0.68 0.86 0.60 186 TR_XM_InvalidRelay 1092 0.28 0.86 0.01 187 RCVD_IN_IADB_VOUCHED 1088 1.09 0.86 1.20 188 XM_UB999 1074 0.27 0.85 0.00 189 RCVD_IN_IADB_DK 1068 1.35 0.84 1.58 190 XM_UB80 1055 0.27 0.83 0.01 191 TM2_M_A_HREF_HREF 1045 0.40 0.82 0.20 192 RCVD_IN_IADB_SENDERID 1033 1.38 0.81 1.65 193 XM_B_SEO 1029 0.34 0.81 0.13 194 HTML_IMAGE_ONLY_12 1023 0.55 0.81 0.43 195 T_MONEY_PERCENT 1014 0.47 0.80 0.31 196 TR_LOTS_OF_MONEY2 1014 0.47 0.80 0.31 197 NO_DNS_FOR_FROM 1013 0.47 0.80 0.31 198 TR_XM_MaxWHORU 1009 0.42 0.79 0.25 199 XM_B_DynamicLink 995 0.26 0.78 0.02 200 XMGenDplmaNmb 977 0.49 0.77 0.37 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 273528 99.84 99.92 99.81 2 HTML_MESSAGE 243739 91.62 97.40 88.94 3 RELAYCOUNTRY_US 237841 86.02 84.36 86.78 4 XM_B_Unicode 213059 80.71 87.11 77.74 5 DCC_CHECK_NEGATIVE 178400 51.56 22.34 65.10 6 DKIM_SIGNED 164282 70.29 92.61 59.94 7 XM_DK_Pass 162686 67.87 86.24 59.36 8 DKIM_VALID 161932 67.54 85.79 59.09 9 BAYES_50 152670 50.26 38.51 55.71 10 XM_B_Unicode3 144074 52.70 52.99 52.57 11 DKIM_VALID_AU 141456 56.84 68.13 51.62 12 XM_B_SpammyWords 140636 55.68 65.11 51.32 13 XMListUnsubscribeExists 123727 53.06 70.13 45.15 14 T_TM2_M_HEADER_IN_MSG 105823 31.98 17.66 38.61 15 DCC_CHECK 95494 48.36 77.54 34.84 16 HTML_FONT_LOW_CONTRAST 92486 37.50 45.60 33.75 17 LOC_TINY_FONT_1 84291 38.29 54.54 30.76 18 ANY_BOUNCE_MESSAGE 79457 20.25 1.37 28.99 19 BOUNCE_MESSAGE 79456 20.25 1.37 28.99 20 XM_B_SpammyWords2 70413 29.22 36.85 25.69 21 FVGT_m_MULTI_ODD 69751 31.37 44.14 25.45 22 TM2_M_VERY_LONG_WORD 66675 18.09 4.62 24.33 23 XMSubLong 62679 23.28 24.17 22.87 24 DKIM_VALID_EF 60635 24.54 29.74 22.12 25 LotsOfNums_01 51769 14.50 5.01 18.89 26 T_KAM_HTML_FONT_INVALID 47712 19.88 25.21 17.41 27 MAY_BE_FORGED 47296 11.84 0.13 17.26 28 HTML_IMAGE_RATIO_04 45573 12.84 4.68 16.63 29 USER_IN_DEF_DKIM_WL 43883 12.08 3.58 16.01 30 RCVD_IN_MSPIKE_WL 43790 14.80 12.25 15.98 31 MIME_HTML_ONLY 41516 18.18 24.74 15.15 32 KHOP_HELO_FCRDNS 37963 10.46 3.14 13.85 33 XM_Multi_Part_URI 37076 17.52 26.15 13.53 34 TR_XM_DK_Unsub 34794 16.32 24.14 12.70 35 RCVD_IN_MSPIKE_H2 33121 16.66 26.55 12.09 36 UNPARSEABLE_RELAY 31305 15.40 23.98 11.42 37 HTML_IMAGE_RATIO_02 28950 9.78 8.08 10.56 38 XM_Evil_Numbers_Gen 28940 10.27 9.63 10.56 39 ALL_TRUSTED 28831 7.54 1.11 10.52 40 BAYES_00 28114 7.18 0.52 10.26 41 MIME_CHARSET_FARAWAY 24747 6.34 0.55 9.03 42 CHARSET_FARAWAY_HEADER 24326 6.16 0.28 8.88 43 BAYES_40 23087 6.23 1.48 8.42 44 XMLngstWrd_00 18944 4.79 0.19 6.91 45 RCVD_IN_MSPIKE_H3 18253 6.30 5.51 6.66 46 XM_B_PhoneNumber 18081 6.10 5.02 6.60 47 BAYES_20 17424 4.72 1.17 6.36 48 BAYES_60 17321 7.35 9.57 6.32 49 XM_B_Unsub 17319 10.67 20.05 6.32 50 T_TooManySym_01 16831 5.44 3.93 6.14 51 RCVD_IN_VALIDITY_SAFE 16637 4.90 2.38 6.07 52 XM_DKIMWhitelistDomains 16246 4.06 0.01 5.93 53 XM_B_SpammyWords3 15459 7.89 12.76 5.64 54 RCVD_IN_MSPIKE_H5 15171 4.99 3.82 5.54 55 TR_MAX_INTL_RELAY 15114 8.71 15.62 5.51 56 XM_DK_Undo_02 13611 17.85 45.66 4.97 57 TR_XM_DK_Bayes 13128 3.34 0.20 4.79 58 TR_XM_BayesUnsub 13099 9.40 19.38 4.78 59 XMStrtUSub 13062 4.85 5.03 4.77 60 TR_XM_DK_Bayes1 13029 3.31 0.20 4.75 61 RCVD_IN_VALIDITY_CERTIFIED 13009 3.65 1.27 4.75 62 XM_B_Phish_Phrases 12976 5.62 7.54 4.73 63 XM_H_Long_From01 11981 5.29 7.28 4.37 64 TR_XM_DK_Bayes2 11257 2.85 0.13 4.11 65 XM_H_GMP 11080 5.07 7.30 4.04 66 BAYES_99 10971 13.13 32.83 4.00 67 RCVD_IN_MSPIKE_H4 10366 3.51 2.92 3.78 68 TooManyTo_001 9752 3.27 2.65 3.56 69 BAYES_05 9358 2.54 0.66 3.41 70 MPART_ALT_DIFF 9173 5.07 8.78 3.35 71 LOTS_OF_MONEY 9163 5.03 8.67 3.34 72 BAYES_80 9156 5.39 9.82 3.34 73 XMNumbers 9132 3.13 2.69 3.33 74 T_TooManySym_02 9130 2.60 1.03 3.33 75 FSL_BULK_SIG 9089 5.93 11.57 3.32 76 XMSubMetaSx_00 9053 4.38 6.71 3.30 77 T_TVD_MIME_NO_HEADERS 8953 2.24 0.03 3.27 78 XM_UncommonTLD01 8701 3.78 5.08 3.17 79 BAYES_999 8664 10.32 25.77 3.16 80 MIME_QP_LONG_LINE 7704 2.81 2.80 2.81 81 HTML_IMAGE_RATIO_06 7556 2.78 2.83 2.76 82 BOTNET_IPINHOSTNAME 7332 5.13 10.41 2.68 83 TO_MALFORMED 7277 1.82 0.03 2.66 84 RELAYCOUNTRY_META 6787 6.76 16.00 2.48 85 INVALID_MSGID 6582 1.75 0.36 2.40 86 XM_B_SpammyTLD 6515 3.24 5.10 2.38 87 TR_XM_SpammyWords4 6128 3.96 7.68 2.24 88 BAYES_95 5955 3.20 5.42 2.17 89 T_REMOTE_IMAGE 5836 2.41 3.01 2.13 90 MIME_HTML_MOSTLY 5805 2.78 4.21 2.12 91 HTML_FONT_FACE_BAD 5696 1.60 0.57 2.08 92 XM_CamelCaseFrm001 5442 2.49 3.59 1.99 93 RCVD_IN_IADB_LISTED 5407 1.73 1.21 1.97 94 HTML_IMAGE_RATIO_08 5232 2.03 2.28 1.91 95 SUBJ_ALL_CAPS 5218 2.37 3.36 1.90 96 MIME_HTML_ONLY_MULTI 5113 2.05 2.45 1.87 97 TR_XM_UnparsRelay 5023 5.44 13.22 1.83 98 FROM_EXCESS_BASE64 5011 1.70 1.41 1.83 99 RCVD_IN_IADB_SPF 4931 1.53 0.94 1.80 100 TR_XM_SpammyWords5 4817 2.29 3.43 1.76 101 TR_XM_DKIM_Undo 4767 10.44 29.21 1.74 102 MAILING_LIST_MULTI 4689 1.55 1.20 1.71 103 RCVD_IN_IADB_SENDERID 4509 1.38 0.81 1.65 104 UNTRUSTED_Relay 4499 3.19 6.53 1.64 105 T_XMDrugObfuBody_08 4397 1.75 2.06 1.60 106 RCVD_IN_IADB_DK 4337 1.35 0.84 1.58 107 XM_Body_Dirty_Words 4285 2.41 4.23 1.56 108 TR_XM_PhishingBody 4247 2.45 4.39 1.55 109 TM2_M_URI_OPT_OUT 4062 1.71 2.21 1.48 110 TR_XM_SpammyRelay 3848 4.57 11.40 1.40 111 T_TooManySym_03 3670 0.97 0.19 1.34 112 TR_DCC_Bayes_99 3635 8.44 23.80 1.33 113 XM_E_Blogspot 3575 0.90 0.03 1.30 114 XM_PDF 3544 0.97 0.28 1.29 115 XM_B_SpammyWords4 3514 1.63 2.39 1.28 116 XMBrknScrpt_02 3474 1.50 2.02 1.27 117 XMSubMetaI_00 3411 1.87 3.22 1.24 118 RCVD_IN_IADB_VOUCHED 3279 1.09 0.86 1.20 119 XM_DK_Undo_01 3269 1.20 1.22 1.19 120 XMBdyGiftCard01 3204 1.72 2.91 1.17 121 HTML_MIME_NO_HTML_TAG 3183 1.00 0.64 1.16 122 IN_HORDE_ADDRESS_BOOK 3179 0.81 0.07 1.16 123 RCVD_IN_MSPIKE_BL 3138 3.12 7.39 1.15 124 TR_XM_MSPIKECOMBO 3138 3.12 7.38 1.15 125 XM_UB50 3025 1.59 2.64 1.10 126 XM_B_URI_Unicode 3005 1.49 2.35 1.10 127 XMSexyCombo_05 2987 1.89 3.61 1.09 128 TooManyTo_002 2980 0.83 0.28 1.09 129 TVD_RCVD_IP 2950 1.09 1.11 1.08 130 XM_SendGrid 2903 1.14 1.30 1.06 131 TVD_SPACE_RATIO 2852 0.85 0.44 1.04 132 T_XMHurry_00 2818 1.88 3.71 1.03 133 XM_B_Investor 2726 1.66 3.11 0.99 134 T_XMDrugObfuBody_14 2534 2.01 4.36 0.92 135 XMDiploma_00 2522 1.14 1.61 0.92 136 URI_NOVOWEL 2504 1.12 1.55 0.91 137 RCVD_IN_IADB_OPTIN 2460 0.80 0.60 0.90 138 XMGappySubj_01 2401 0.66 0.18 0.88 139 RCVD_IN_MSPIKE_L3 2359 1.89 4.12 0.86 140 DKIM_INVALID 2350 2.75 6.83 0.86 141 XM_B_Unsub2 2263 1.30 2.34 0.83 142 T_XMDrugObfuBody_00 2229 0.91 1.12 0.81 143 XMBSHREFv2 2152 0.63 0.28 0.79 144 XM_B_COPY_HTML 2105 1.01 1.52 0.77 145 TR_XM_DK_SendGrid 2090 0.83 0.99 0.76 146 XMStockSpam_06 2071 1.55 3.25 0.76 147 XMGappySubj_02 2059 0.53 0.06 0.75 148 XM_SPF_SoftFail 2045 1.17 2.10 0.75 149 TR_Symld_Words 2003 0.79 0.91 0.73 150 XM_GoogleGroups 1900 0.65 0.54 0.69 151 BOTNET 1892 4.17 11.69 0.69 152 XMSubMetaSxObfu_03 1847 0.96 1.58 0.67 153 XMPhish30 1847 1.09 2.00 0.67 154 TR_XM_SpammyWords3 1792 1.84 4.40 0.65 155 RCVD_IN_BL_SPAMCOP_NET 1745 5.59 16.29 0.64 156 RELAYCOUNTRY_CA 1654 2.11 5.36 0.60 157 URI_HEX 1643 0.68 0.86 0.60 158 XM_ProductURIs 1638 1.12 2.26 0.60 159 XM_OfRef6 1572 1.20 2.56 0.57 160 T_FILL_THIS_FORM_SHORT 1557 1.08 2.18 0.57 161 TR_MetaPhish_Combo_01 1528 0.61 0.73 0.56 162 XM_B_DNDMA 1519 0.70 1.01 0.55 163 TooManyTo_003 1489 0.44 0.20 0.54 164 HTML_TAG_BALANCE_BODY 1483 0.90 1.68 0.54 165 URI_TRY_3LD 1481 0.61 0.76 0.54 166 XM_H_Long_From02 1466 0.86 1.57 0.53 167 TR_XM_SpammyWords2 1421 4.18 12.08 0.52 168 THIS_AD 1388 1.21 2.72 0.51 169 TR_XM_Base64_M1 1375 0.53 0.60 0.50 170 T_TooManySym_04 1371 0.35 0.02 0.50 171 TR_XM_GMP_MSPIKE_UNDO2 1363 0.40 0.18 0.50 172 FONT_INVIS_LONG_LINE 1338 0.51 0.57 0.49 173 DIET_1 1297 0.70 1.19 0.47 174 TR_XM_FormFill2 1295 0.51 0.58 0.47 175 TR_XM_PHPDW 1293 0.51 0.58 0.47 176 TR_XM_PHPForged 1292 0.51 0.59 0.47 177 AD_PREFS 1288 0.43 0.33 0.47 178 XMPhish14 1287 0.55 0.73 0.47 179 XM_H_PHPOS 1273 0.49 0.56 0.46 180 DKIM_ADSP_CUSTOM_MED 1270 0.51 0.62 0.46 181 XMBody_17 1269 1.26 2.97 0.46 182 XMClaimOffer 1262 0.56 0.76 0.46 183 MSGID_FROM_MTA_HEADER 1227 0.36 0.16 0.45 184 XM_H_PHPMailer 1226 0.40 0.31 0.45 185 MPART_ALT_DIFF_COUNT 1225 1.01 2.24 0.45 186 XMHTML_After_End 1216 0.68 1.18 0.44 187 XMSolicitRefs_0 1194 0.40 0.31 0.44 188 HTML_IMAGE_ONLY_12 1183 0.55 0.81 0.43 189 RELAYCOUNTRY_AU 1175 1.20 2.85 0.43 190 TooManyTo_004 1161 0.35 0.19 0.42 191 XMSlimDrugH 1130 0.39 0.35 0.41 192 TR_LOTS_OF_MONEY3 1123 0.62 1.08 0.41 193 TM2_M_OBFU_COMMENT 1119 0.40 0.38 0.41 194 XMSubMetaSxObfu_02 1114 0.40 0.39 0.41 195 XM_B_FormFill 1071 0.27 0.01 0.39 196 XM_URI_RBL 1067 0.87 1.91 0.39 197 TO_IN_SUBJ 1066 0.29 0.06 0.39 198 XMNoVowels 1048 0.39 0.41 0.38 199 SHOPIFY_IMG_NOT_RCVD_SFY 1021 1.06 2.55 0.37 200 XMGenDplmaNmb 1003 0.49 0.77 0.37 ----------------------------------------------------------------------