Email: 638577 Autolearn: 0 AvgScore: 2.94 AvgScanTime: 2.22 sec Spam: 165632 Autolearn: 0 AvgScore: 12.64 AvgScanTime: 2.67 sec Ham: 472945 Autolearn: 0 AvgScore: -0.46 AvgScanTime: 2.06 sec Time Spent Running SA: 393.75 hours Time Spent Processing Spam: 122.77 hours Time Spent Processing Ham: 270.98 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 155672 87.89 93.99 85.76 2 DCC_CHECK 128440 49.73 77.55 39.99 3 DKIM_SIGNED 127535 74.26 77.00 73.30 4 XMListUnsubscribeExists 121971 55.35 73.64 48.95 5 XM_DK_Pass 121004 72.21 73.06 71.91 6 DKIM_VALID 115125 68.66 69.51 68.37 7 DKIM_VALID_AU 87706 51.11 52.95 50.47 8 XM_DK_Undo_02 74417 21.67 44.93 13.52 9 BAYES_99 67224 19.03 40.59 11.48 10 BAYES_50 58351 49.04 35.23 53.87 11 HTML_FONT_LOW_CONTRAST 56775 28.95 34.28 27.08 12 BAYES_999 56224 16.24 33.95 10.04 13 TR_DCC_Bayes_99 54186 12.52 32.71 5.45 14 LOC_TINY_FONT_1 52607 24.55 31.76 22.03 15 MIME_HTML_ONLY 51261 22.30 30.95 19.27 16 FVGT_m_MULTI_ODD 44787 22.79 27.04 21.30 17 XMSubLong 41949 22.62 25.33 21.68 18 T_TM2_M_HEADER_IN_MSG 39701 29.37 23.97 31.26 19 XM_Body_Dirty_Words 34213 15.99 20.66 14.35 20 DCC_CHECK_NEGATIVE 34038 48.30 20.55 58.02 21 T_KAM_HTML_FONT_INVALID 34029 17.80 20.54 16.84 22 DKIM_VALID_EF 33729 25.16 20.36 26.84 23 BOTNET 32447 6.56 19.59 1.99 24 RELAYCOUNTRY_META 32285 9.02 19.49 5.35 25 BOTNET_IPINHOSTNAME 28741 7.79 17.35 4.44 26 MultiRelay 26437 18.14 15.96 18.90 27 XM_Multi_Part_URI 25738 12.98 15.54 12.09 28 XM_B_Unicode2 24040 16.36 14.51 17.00 29 HTML_IMAGE_RATIO_02 22619 9.06 13.66 7.44 30 LOTS_OF_MONEY 21023 9.77 12.69 8.75 31 UNTRUSTED_Relay 19901 4.18 12.02 1.43 32 XM_Evil_Numbers_Gen 19855 9.68 11.99 8.88 33 FSL_BULK_SIG 19797 9.01 11.95 7.98 34 XM_UncommonTLD01 18827 5.99 11.37 4.10 35 XM_B_Unicode 16755 10.84 10.12 11.09 36 XMSexyCombo_05 15444 5.19 9.32 3.74 37 LotsOfNums_01 14059 7.98 8.49 7.80 38 BAYES_80 13250 4.86 8.00 3.77 39 TooManyTo_001 12633 8.45 7.63 8.73 40 T_XMDrugObfuBody_14 12480 8.23 7.53 8.48 41 DKIM_INVALID 12410 5.59 7.49 4.93 42 XM_B_SpammyTLD 12278 4.25 7.41 3.14 43 XMSubMetaSx_00 12274 4.61 7.41 3.63 44 MPART_ALT_DIFF 11912 4.38 7.19 3.39 45 HTML_IMAGE_RATIO_04 11529 5.89 6.96 5.51 46 XM_B_Phish_Phrases 11071 6.36 6.68 6.25 47 XM_H_Long_From01 10950 6.27 6.61 6.16 48 RCVD_IN_MSPIKE_BL 10343 3.21 6.24 2.14 49 XM_UB50 10300 2.25 6.22 0.86 50 RCVD_IN_MSPIKE_H2 10189 7.46 6.15 7.92 51 BAYES_60 9755 6.00 5.89 6.04 52 RCVD_IN_PSBL 9515 1.58 5.74 0.12 53 XM_DIRTYINTL 8457 3.10 5.11 2.40 54 MIME_QP_LONG_LINE 8373 5.51 5.06 5.67 55 RCVD_IN_BL_SPAMCOP_NET 8067 2.05 4.87 1.07 56 ALL_TRUSTED 7528 14.15 4.55 17.52 57 DKIM_ADSP_NXDOMAIN 7333 1.68 4.43 0.72 58 RCVD_IN_MSPIKE_L5 7214 1.85 4.36 0.97 59 RELAYCOUNTRY_FR 7065 1.35 4.27 0.33 60 XMStrtUSub 7046 4.40 4.25 4.45 61 XMPhish11 6899 1.99 4.17 1.22 62 MIME_HTML_ONLY_MULTI 6776 2.46 4.09 1.89 63 BAYES_95 6746 2.90 4.07 2.49 64 SpammyFromTLD_02 6681 1.31 4.03 0.36 65 HTML_IMAGE_RATIO_06 6513 3.32 3.93 3.11 66 RELAYCOUNTRY_CA 6498 2.11 3.92 1.47 67 HTML_MIME_NO_HTML_TAG 6460 2.59 3.90 2.13 68 FROM_SUSPICIOUS_NTLD 6201 1.00 3.74 0.03 69 FROM_EXCESS_BASE64 6189 3.66 3.74 3.63 70 FROM_SUSPICIOUS_NTLD_FP 6146 0.98 3.71 0.03 71 HTTPS_HTTP_MISMATCH 6095 1.48 3.68 0.72 72 BOTNET_NORDNS 6037 0.99 3.64 0.07 73 TM2_M_URI_OPT_OUT 5913 2.28 3.57 1.82 74 XM_SPF_SoftFail 5894 2.57 3.56 2.22 75 MIME_HTML_MOSTLY 5835 2.47 3.52 2.10 76 T_REMOTE_IMAGE 5541 3.81 3.35 3.97 77 HTML_IMAGE_RATIO_08 5498 2.44 3.32 2.13 78 XM_SendGrid 5362 5.31 3.24 6.04 79 XMSexyCombo_01 5317 1.42 3.21 0.79 80 TVD_RCVD_IP 5237 2.67 3.16 2.50 81 XMNumbers 5206 2.97 3.14 2.91 82 XM_URI_RBL 5115 1.04 3.09 0.32 83 XM_CamelCaseFrm001 5105 2.14 3.08 1.81 84 URI_HEX 5079 2.16 3.07 1.85 85 SUBJ_ALL_CAPS 5021 1.95 3.03 1.57 86 RCVD_IN_RP_RNBL 4988 0.81 3.01 0.04 87 XMPhish19 4834 0.77 2.92 0.02 88 XMDiploma_00 4815 2.24 2.91 2.00 89 XM_ProductURIs 4777 1.54 2.88 1.06 90 XMSubPhish3 4769 0.75 2.88 0.00 91 T_TooManySym_01 4632 4.55 2.80 5.16 92 BAYES_40 4518 3.96 2.73 4.39 93 RCVD_IN_RP_SAFE 4499 8.20 2.72 10.12 94 T_XMDrugObfuBody_08 4078 1.78 2.46 1.55 95 US_DOLLARS_3 4071 1.89 2.46 1.69 96 RCVD_IN_IADB_LISTED 4007 4.46 2.42 5.18 97 XMBdyGiftCard01 3964 1.08 2.39 0.62 98 RCVD_IN_IADB_SPF 3679 3.89 2.22 4.47 99 MultiRelay_CC 3641 0.76 2.20 0.25 100 MultiRelay_Combo 3641 0.76 2.20 0.25 101 TR_XM_PHPDW 3595 2.14 2.17 2.13 102 TR_XM_PHPForged 3579 1.94 2.16 1.86 103 TR_XM_FormFill2 3533 1.13 2.13 0.78 104 XM_H_PHPOS 3514 1.13 2.12 0.78 105 RCVD_IN_IADB_SENDERID 3513 3.42 2.12 3.87 106 RCVD_IN_IADB_DK 3493 3.36 2.11 3.80 107 XMSubMetaI_00 3474 0.99 2.10 0.60 108 RCVD_IN_MSPIKE_WL 3460 5.13 2.09 6.20 109 RELAYCOUNTRY_DE 3440 0.85 2.08 0.41 110 RCVD_IN_RP_CERTIFIED 3425 7.33 2.07 9.18 111 PDS_TO_EQ_FROM_NAME 3404 0.58 2.06 0.06 112 XM_OfRef6 3268 1.79 1.97 1.72 113 HTML_IMAGE_ONLY_24 3249 0.75 1.96 0.32 114 RCVD_IN_MSPIKE_H3 3249 4.65 1.96 5.60 115 NO_DNS_FOR_FROM 3243 1.33 1.96 1.11 116 TR_Mismatch_TLD_02 3226 0.55 1.95 0.07 117 XM_UB99 3207 0.52 1.94 0.02 118 MAILING_LIST_MULTI 3191 2.30 1.93 2.43 119 URI_TRY_3LD 3165 1.46 1.91 1.30 120 URIBL_DBL_ABUSE_REDIR 3143 0.52 1.90 0.03 121 TM2_M_VERY_LONG_WORD 2993 1.35 1.81 1.19 122 XMGenDplmaNmb 2951 1.43 1.78 1.31 123 XMBody_78 2901 0.75 1.75 0.39 124 SpammyFromTLD_01 2811 1.10 1.70 0.89 125 KHOP_HELO_FCRDNS 2796 2.32 1.69 2.55 126 XM_H_Long_From02 2671 1.15 1.61 0.99 127 HELO_NO_DOMAIN 2620 1.82 1.58 1.90 128 HELO_NODOT 2620 1.82 1.58 1.90 129 T_XMDrugObfuBody_00 2592 1.03 1.56 0.84 130 XM_UB999 2568 0.42 1.55 0.02 131 FILL_THIS_FORM 2547 1.05 1.54 0.87 132 MIME_HEADER_CTYPE_ONLY 2523 0.50 1.52 0.14 133 XMMoneyMeta_00 2455 0.80 1.48 0.55 134 RCVD_IN_MSPIKE_L3 2449 0.84 1.48 0.62 135 RELAYCOUNTRY_CN 2409 0.43 1.45 0.07 136 ALIBABA_IMG_NOT_RCVD_ALI 2378 0.37 1.44 0.00 137 XM_DrugUnitList 2346 0.37 1.42 0.00 138 TR_Symld_Words 2321 1.60 1.40 1.67 139 THIS_AD 2295 0.56 1.39 0.27 140 BAYES_20 2281 2.69 1.38 3.14 141 DATE_IN_PAST_03_06 2225 0.44 1.34 0.12 142 T_FILL_THIS_FORM_LONG 2211 0.71 1.33 0.49 143 TR_XM_DK_SendGrid 2210 2.68 1.33 3.15 144 XMStockSpam_06 2176 1.28 1.31 1.27 145 FSL_HELO_NON_FQDN_1 2161 0.35 1.30 0.01 146 BODY_ENHANCEMENT 2155 0.36 1.30 0.04 147 MONEY_FORM 2117 0.34 1.28 0.01 148 XMBrknScrpt_02 2107 0.76 1.27 0.58 149 HOSTED_IMG_DIRECT_MX 2050 0.32 1.24 0.00 150 XMHTML_After_End 2037 0.61 1.23 0.39 151 T_XMHurry_00 2005 0.72 1.21 0.54 152 MONEY_ATM_CARD 1991 0.31 1.20 0.00 153 MONEY_FRAUD_5 1966 0.31 1.19 0.00 154 ADVANCE_FEE_5_NEW_FRM_MNY 1946 0.30 1.17 0.00 155 MILLION_USD 1946 0.31 1.17 0.01 156 TR_XM_RelayPhish 1936 0.92 1.17 0.84 157 XM_HighProb1 1935 0.31 1.17 0.01 158 DIET_1 1935 0.56 1.17 0.35 159 XM_B_REG_HTML 1911 0.66 1.15 0.49 160 XMBody_17 1852 0.65 1.12 0.49 161 BAYES_00 1826 9.42 1.10 12.33 162 DKIM_ADSP_CUSTOM_MED 1809 1.69 1.09 1.90 163 XMSubMetaSxObfu_03 1797 0.57 1.08 0.39 164 XM_DK_Undo_01 1788 1.44 1.08 1.57 165 T_Symld_Words_02 1783 0.74 1.08 0.62 166 T_FILL_THIS_FORM_SHORT 1774 1.00 1.07 0.98 167 URIBL_BLACK 1770 0.31 1.07 0.05 168 XM_H_PHPMailer 1753 1.73 1.06 1.97 169 XMPhish30 1743 0.60 1.05 0.44 170 RELAYCOUNTRY_GB 1735 1.14 1.05 1.17 171 XM_XX_Yahoo 1646 0.38 0.99 0.17 172 DATE_IN_PAST_06_12 1643 0.29 0.99 0.05 173 LOW_PRICE 1604 0.44 0.97 0.26 174 T_MONEY_PERCENT 1602 0.60 0.97 0.47 175 TR_LOTS_OF_MONEY2 1602 0.60 0.97 0.47 176 XM_UB60 1576 0.31 0.95 0.09 177 DATE_IN_PAST_12_24 1548 0.29 0.93 0.06 178 TR_Caps_n_Bayes_80 1509 0.28 0.91 0.05 179 RCVD_IN_IADB_VOUCHED 1508 2.85 0.91 3.53 180 XMSexyCombo_04 1500 0.29 0.91 0.07 181 FORGED_GMAIL_RCVD 1492 1.10 0.90 1.17 182 XM_H_PHPOS_M 1466 0.37 0.89 0.19 183 RDNS_DYNAMIC 1454 0.54 0.88 0.42 184 NML_ADSP_CUSTOM_MED 1450 1.45 0.88 1.65 185 XMHTMLBadTable_001 1422 0.53 0.86 0.42 186 UNPARSEABLE_RELAY 1413 2.12 0.85 2.57 187 LongTLD 1404 0.32 0.85 0.14 188 RELAYCOUNTRY_AT 1395 0.35 0.84 0.18 189 BASE64_LENGTH_79_INF 1395 0.40 0.84 0.24 190 BODY_QUOTE_MALF_MSGID 1391 0.70 0.84 0.65 191 TM2_M_A_HREF_HREF 1343 0.65 0.81 0.60 192 BAYES_05 1325 1.76 0.80 2.10 193 XM_B_COPY_HTML 1317 0.60 0.80 0.54 194 XMSubGiftCard1 1314 0.27 0.79 0.09 195 URIBL_DBL_SPAM 1291 0.23 0.78 0.04 196 HTML_OFF_PAGE 1255 0.20 0.76 0.00 197 XM_UB80 1239 0.22 0.75 0.03 198 SHORT_URI_3 1238 0.28 0.75 0.12 199 URI_NOVOWEL 1236 0.53 0.75 0.45 200 HTML_FONT_SIZE_LARGE 1231 0.30 0.74 0.14 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 405593 87.89 93.99 85.76 2 DKIM_SIGNED 346653 74.26 77.00 73.30 3 XM_DK_Pass 340088 72.21 73.06 71.91 4 DKIM_VALID 323345 68.66 69.51 68.37 5 DCC_CHECK_NEGATIVE 274419 48.30 20.55 58.02 6 BAYES_50 254795 49.04 35.23 53.87 7 DKIM_VALID_AU 238686 51.11 52.95 50.47 8 XMListUnsubscribeExists 231510 55.35 73.64 48.95 9 DCC_CHECK 189124 49.73 77.55 39.99 10 T_TM2_M_HEADER_IN_MSG 147848 29.37 23.97 31.26 11 HTML_FONT_LOW_CONTRAST 128076 28.95 34.28 27.08 12 DKIM_VALID_EF 126936 25.16 20.36 26.84 13 LOC_TINY_FONT_1 104187 24.55 31.76 22.03 14 XMSubLong 102514 22.62 25.33 21.68 15 FVGT_m_MULTI_ODD 100757 22.79 27.04 21.30 16 MIME_HTML_ONLY 91128 22.30 30.95 19.27 17 MultiRelay 89390 18.14 15.96 18.90 18 ALL_TRUSTED 82842 14.15 4.55 17.52 19 XM_B_Unicode2 80408 16.36 14.51 17.00 20 T_KAM_HTML_FONT_INVALID 79634 17.80 20.54 16.84 21 XM_Body_Dirty_Words 67873 15.99 20.66 14.35 22 XM_DK_Undo_02 63955 21.67 44.93 13.52 23 BAYES_00 58329 9.42 1.10 12.33 24 XM_Multi_Part_URI 57180 12.98 15.54 12.09 25 BAYES_99 54274 19.03 40.59 11.48 26 XM_B_Unicode 52446 10.84 10.12 11.09 27 RCVD_IN_RP_SAFE 47868 8.20 2.72 10.12 28 BAYES_999 47470 16.24 33.95 10.04 29 TR_XM_DK_Bayes 44946 7.20 0.62 9.50 30 RCVD_IN_RP_CERTIFIED 43404 7.33 2.07 9.18 31 TR_XM_DK_Bayes1 43013 6.88 0.55 9.09 32 XM_Evil_Numbers_Gen 41983 9.68 11.99 8.88 33 LOTS_OF_MONEY 41364 9.77 12.69 8.75 34 TooManyTo_001 41310 8.45 7.63 8.73 35 T_XMDrugObfuBody_14 40097 8.23 7.53 8.48 36 FSL_BULK_SIG 37718 9.01 11.95 7.98 37 RCVD_IN_MSPIKE_H2 37459 7.46 6.15 7.92 38 TR_XM_DK_Bayes2 37060 5.93 0.48 7.84 39 XM_DKIMWhitelistDomains 37020 5.82 0.07 7.83 40 LotsOfNums_01 36896 7.98 8.49 7.80 41 HTML_IMAGE_RATIO_02 35206 9.06 13.66 7.44 42 XM_B_Phish_Phrases 29546 6.36 6.68 6.25 43 RCVD_IN_MSPIKE_WL 29326 5.13 2.09 6.20 44 XM_H_Long_From01 29119 6.27 6.61 6.16 45 XM_SendGrid 28552 5.31 3.24 6.04 46 BAYES_60 28552 6.00 5.89 6.04 47 MIME_QP_LONG_LINE 26796 5.51 5.06 5.67 48 RCVD_IN_MSPIKE_H3 26464 4.65 1.96 5.60 49 HTML_IMAGE_RATIO_04 26072 5.89 6.96 5.51 50 TR_DCC_Bayes_99 25795 12.52 32.71 5.45 51 RELAYCOUNTRY_META 25307 9.02 19.49 5.35 52 RCVD_IN_IADB_LISTED 24502 4.46 2.42 5.18 53 T_TooManySym_01 24404 4.55 2.80 5.16 54 TO_MALFORMED 24388 3.84 0.09 5.16 55 DKIM_INVALID 23308 5.59 7.49 4.93 56 XM_PDF 21175 3.49 0.69 4.48 57 RCVD_IN_IADB_SPF 21137 3.89 2.22 4.47 58 XMStrtUSub 21060 4.40 4.25 4.45 59 BOTNET_IPINHOSTNAME 21002 7.79 17.35 4.44 60 BAYES_40 20755 3.96 2.73 4.39 61 IN_ZIMBRA_NJ_WHITELIST 19481 3.06 0.02 4.12 62 XM_UncommonTLD01 19398 5.99 11.37 4.10 63 T_REMOTE_IMAGE 18791 3.81 3.35 3.97 64 RCVD_IN_IADB_SENDERID 18303 3.42 2.12 3.87 65 RCVD_IN_IADB_DK 17961 3.36 2.11 3.80 66 BAYES_80 17814 4.86 8.00 3.77 67 XMSexyCombo_05 17675 5.19 9.32 3.74 68 FROM_EXCESS_BASE64 17176 3.66 3.74 3.63 69 XMSubMetaSx_00 17169 4.61 7.41 3.63 70 RCVD_IN_IADB_VOUCHED 16710 2.85 0.91 3.53 71 MPART_ALT_DIFF 16032 4.38 7.19 3.39 72 TR_XM_DK_SendGrid 14891 2.68 1.33 3.15 73 BAYES_20 14871 2.69 1.38 3.14 74 XM_B_SpammyTLD 14859 4.25 7.41 3.14 75 HTML_IMAGE_RATIO_06 14688 3.32 3.93 3.11 76 XMNumbers 13756 2.97 3.14 2.91 77 UNPARSEABLE_RELAY 12143 2.12 0.85 2.57 78 KHOP_HELO_FCRDNS 12046 2.32 1.69 2.55 79 TVD_RCVD_IP 11811 2.67 3.16 2.50 80 BAYES_95 11793 2.90 4.07 2.49 81 MAILING_LIST_MULTI 11515 2.30 1.93 2.43 82 XM_DIRTYINTL 11336 3.10 5.11 2.40 83 INVALID_MSGID 11004 1.77 0.16 2.33 84 TooManyTo_002 10848 1.85 0.56 2.29 85 RCVD_IN_IADB_OPTIN 10651 1.81 0.55 2.25 86 XM_SPF_SoftFail 10515 2.57 3.56 2.22 87 RCVD_IN_MSPIKE_BL 10141 3.21 6.24 2.14 88 HTML_IMAGE_RATIO_08 10096 2.44 3.32 2.13 89 HTML_MIME_NO_HTML_TAG 10087 2.59 3.90 2.13 90 TR_XM_PHPDW 10084 2.14 2.17 2.13 91 MIME_HTML_MOSTLY 9939 2.47 3.52 2.10 92 BAYES_05 9927 1.76 0.80 2.10 93 XMDiploma_00 9482 2.24 2.91 2.00 94 BOTNET 9432 6.56 19.59 1.99 95 XM_H_PHPMailer 9296 1.73 1.06 1.97 96 DKIM_ADSP_CUSTOM_MED 8996 1.69 1.09 1.90 97 HELO_NODOT 8978 1.82 1.58 1.90 98 HELO_NO_DOMAIN 8977 1.82 1.58 1.90 99 MIME_HTML_ONLY_MULTI 8937 2.46 4.09 1.89 100 TR_XM_PHPForged 8793 1.94 2.16 1.86 101 URI_HEX 8745 2.16 3.07 1.85 102 TM2_M_URI_OPT_OUT 8627 2.28 3.57 1.82 103 XM_CamelCaseFrm001 8566 2.14 3.08 1.81 104 ANY_BOUNCE_MESSAGE 8415 1.44 0.48 1.78 105 BOUNCE_MESSAGE 8414 1.44 0.48 1.78 106 IN_HORDE_ADDRESS_BOOK 8281 1.31 0.04 1.75 107 XM_OfRef6 8139 1.79 1.97 1.72 108 US_DOLLARS_3 7989 1.89 2.46 1.69 109 TR_Symld_Words 7919 1.60 1.40 1.67 110 NML_ADSP_CUSTOM_MED 7823 1.45 0.88 1.65 111 T_TooManySym_02 7545 1.31 0.50 1.60 112 TR_MetaPhish_Combo_01 7464 1.34 0.67 1.58 113 XM_DK_Undo_01 7439 1.44 1.08 1.57 114 SUBJ_ALL_CAPS 7435 1.95 3.03 1.57 115 TooManyTo_003 7431 1.29 0.47 1.57 116 T_XMDrugObfuBody_08 7308 1.78 2.46 1.55 117 RELAYCOUNTRY_CA 6969 2.11 3.92 1.47 118 XMCapTrack 6810 1.13 0.25 1.44 119 UNTRUSTED_Relay 6769 4.18 12.02 1.43 120 XMGenDplmaNmb 6208 1.43 1.78 1.31 121 USER_IN_DEF_DKIM_WL 6154 0.97 0.03 1.30 122 URI_TRY_3LD 6147 1.46 1.91 1.30 123 XMStockSpam_06 6004 1.28 1.31 1.27 124 XMPhish11 5786 1.99 4.17 1.22 125 TM2_M_VERY_LONG_WORD 5651 1.35 1.81 1.19 126 RELAYCOUNTRY_GB 5551 1.14 1.05 1.17 127 FORGED_GMAIL_RCVD 5546 1.10 0.90 1.17 128 TooManyTo_004 5535 0.96 0.36 1.17 129 XM_GoogleGroups 5496 0.99 0.52 1.16 130 NO_DNS_FOR_FROM 5247 1.33 1.96 1.11 131 RCVD_IN_BL_SPAMCOP_NET 5042 2.05 4.87 1.07 132 XM_ProductURIs 5035 1.54 2.88 1.06 133 XM_H_Long_From02 4701 1.15 1.61 0.99 134 TooManyTo_005 4681 0.81 0.30 0.99 135 T_FILL_THIS_FORM_SHORT 4626 1.00 1.07 0.98 136 RCVD_IN_MSPIKE_L5 4598 1.85 4.36 0.97 137 SpammyFromTLD_01 4213 1.10 1.70 0.89 138 FILL_THIS_FORM 4137 1.05 1.54 0.87 139 XM_UB50 4046 2.25 6.22 0.86 140 T_XMDrugObfuBody_00 3991 1.03 1.56 0.84 141 TR_XM_RelayPhish 3956 0.92 1.17 0.84 142 XMSexyCombo_01 3735 1.42 3.21 0.79 143 TR_XM_FormFill2 3680 1.13 2.13 0.78 144 XM_H_PHPOS 3671 1.13 2.12 0.78 145 DKIM_ADSP_NXDOMAIN 3388 1.68 4.43 0.72 146 HTTPS_HTTP_MISMATCH 3383 1.48 3.68 0.72 147 T_OBFU_PDF_ATTACH 3313 0.58 0.25 0.70 148 PLING_QUERY 3172 0.68 0.72 0.67 149 BODY_QUOTE_MALF_MSGID 3088 0.70 0.84 0.65 150 XM_RXBody 2999 0.59 0.47 0.63 151 XM_ShortIntro_01 2985 0.56 0.36 0.63 152 USER_IN_WHITELIST 2961 0.46 0.00 0.63 153 T_Symld_Words_02 2926 0.74 1.08 0.62 154 RCVD_IN_MSPIKE_L3 2926 0.84 1.48 0.62 155 XMBdyGiftCard01 2911 1.08 2.39 0.62 156 XMSubMetaI_00 2838 0.99 2.10 0.60 157 TM2_M_A_HREF_HREF 2835 0.65 0.81 0.60 158 HTML_TAG_BALANCE_BODY 2807 0.61 0.66 0.59 159 XMLngstWrd_00 2795 0.53 0.36 0.59 160 XMBrknScrpt_02 2757 0.76 1.27 0.58 161 XMBody_95 2685 0.49 0.26 0.57 162 HTML_FONT_FACE_BAD 2648 0.60 0.70 0.56 163 FROM_GOV_DKIM_AU 2628 0.50 0.33 0.56 164 XMMoneyMeta_00 2623 0.80 1.48 0.55 165 RCVD_IN_MSPIKE_L4 2617 0.52 0.41 0.55 166 XMLngstWrd_01 2591 0.49 0.32 0.55 167 T_XMHurry_00 2569 0.72 1.21 0.54 168 XMBody_29 2564 0.45 0.20 0.54 169 AC_DIV_BONANZA 2552 0.45 0.18 0.54 170 XMGappySubj_01 2549 0.50 0.40 0.54 171 XM_B_COPY_HTML 2545 0.60 0.80 0.54 172 RELAYCOUNTRY_AU 2511 0.50 0.40 0.53 173 XMNoVowels 2510 0.49 0.38 0.53 174 SHORT_HELO_AND_INLINE_IMAGE 2475 0.40 0.04 0.52 175 T_TooManySym_03 2366 0.41 0.15 0.50 176 T_FILL_THIS_FORM_LONG 2334 0.71 1.33 0.49 177 XM_B_REG_HTML 2318 0.66 1.15 0.49 178 XMBody_17 2299 0.65 1.12 0.49 179 XM_Superlative01 2294 0.38 0.07 0.49 180 TR_LOTS_OF_MONEY2 2225 0.60 0.97 0.47 181 T_MONEY_PERCENT 2225 0.60 0.97 0.47 182 XMAntiAgingB 2225 0.36 0.05 0.47 183 MISSING_HEADERS 2190 0.50 0.62 0.46 184 FROM_GOV_SPOOF 2170 0.42 0.29 0.46 185 URI_NOVOWEL 2122 0.53 0.75 0.45 186 XMPhish30 2075 0.60 1.05 0.44 187 RCVD_IN_SORBS_DUL 2035 0.37 0.20 0.43 188 TM2_M_BODY_EMPTY 2008 0.33 0.06 0.42 189 XMHTMLBadTable_001 1994 0.53 0.86 0.42 190 XMDateMe_00 1989 0.41 0.40 0.42 191 HTML_IMAGE_ONLY_28 1978 0.49 0.69 0.42 192 RDNS_DYNAMIC 1970 0.54 0.88 0.42 193 RELAYCOUNTRY_DE 1960 0.85 2.08 0.41 194 XMSubMetaSxObfu_02 1885 0.40 0.42 0.40 195 REMOVE_BEFORE_LINK 1874 0.44 0.56 0.40 196 XMBody_78 1858 0.75 1.75 0.39 197 XMSubMetaSxObfu_03 1850 0.57 1.08 0.39 198 RCVD_IN_MSPIKE_H5 1847 0.32 0.11 0.39 199 XMHTML_After_End 1844 0.61 1.23 0.39 200 HTML_IMAGE_ONLY_32 1786 0.46 0.71 0.38 ----------------------------------------------------------------------