Email: 443791 Autolearn: 0 AvgScore: 4.45 AvgScanTime: 1.36 sec Spam: 133281 Autolearn: 0 AvgScore: 14.06 AvgScanTime: 1.52 sec Ham: 310510 Autolearn: 0 AvgScore: 0.33 AvgScanTime: 1.29 sec Time Spent Running SA: 167.79 hours Time Spent Processing Spam: 56.16 hours Time Spent Processing Ham: 111.63 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 127558 90.26 95.71 87.92 2 DKIM_SIGNED 118109 77.73 88.62 73.05 3 XM_DK_Pass 113480 75.75 85.14 71.72 4 XM_B_Unicode 113023 74.38 84.80 69.91 5 DKIM_VALID 112532 74.93 84.43 70.85 6 RELAYCOUNTRY_US 109359 83.68 82.05 84.38 7 DCC_CHECK 101068 49.95 75.83 38.85 8 XM_B_SpammyWords 92548 53.75 69.44 47.01 9 XMListUnsubscribeExists 92367 54.98 69.30 48.83 10 DKIM_VALID_AU 90106 59.76 67.61 56.39 11 LOC_TINY_FONT_1 67729 35.58 50.82 29.04 12 XM_B_Unicode3 66870 44.47 50.17 42.02 13 BAYES_50 57553 57.36 43.18 63.44 14 XM_B_SpammyWords2 54963 27.10 41.24 21.03 15 T_SCC_BODY_TEXT_LINE 53183 41.55 39.90 42.26 16 HTML_FONT_LOW_CONTRAST 52945 34.86 39.72 32.78 17 XM_DK_Undo_02 51170 15.61 38.39 5.84 18 FVGT_m_MULTI_ODD 44621 28.06 33.48 25.73 19 T_KAM_HTML_FONT_INVALID 43416 25.07 32.57 21.84 20 DKIM_VALID_EF 40282 29.10 30.22 28.61 21 MIME_HTML_ONLY 39769 22.43 29.84 19.25 22 BAYES_99 37581 11.14 28.20 3.82 23 TR_XM_DKIM_Undo 36477 10.21 27.37 2.84 24 XM_Multi_Part_URI 33318 17.44 25.00 14.20 25 XMSubLong 32612 22.16 24.47 21.17 26 DCC_CHECK_NEGATIVE 30543 49.64 22.92 61.11 27 TR_XM_DK_Unsub 29541 16.17 22.16 13.60 28 BAYES_999 29009 8.58 21.77 2.93 29 TR_DCC_Bayes_99 27363 7.09 20.53 1.32 30 T_TM2_M_HEADER_IN_MSG 26901 28.83 20.18 32.55 31 UNPARSEABLE_RELAY 25445 14.39 19.09 12.37 32 XM_B_Unsub 23375 11.68 17.54 9.16 33 RELAYCOUNTRY_META 23058 7.80 17.30 3.72 34 TR_XM_BayesUnsub 22541 9.73 16.91 6.64 35 RCVD_IN_MSPIKE_H2 20483 14.54 15.37 14.18 36 XM_B_SpammyWords3 19902 8.67 14.93 5.98 37 TR_MAX_INTL_RELAY 19381 8.20 14.54 5.48 38 LOTS_OF_MONEY 16886 8.24 12.67 6.33 39 BOTNET_IPINHOSTNAME 16688 6.04 12.52 3.26 40 TR_XM_SpammyRelay 16006 4.97 12.01 1.95 41 XM_Evil_Numbers_Gen 15615 11.84 11.72 11.89 42 TR_XM_SpammyWords4 15212 6.53 11.41 4.43 43 FSL_BULK_SIG 14041 8.13 10.53 7.10 44 BOTNET 13763 4.20 10.33 1.58 45 TR_XM_SpammyWords2 13603 3.53 10.21 0.66 46 TR_XM_UnparsRelay 13564 4.28 10.18 1.75 47 XM_B_Phish_Phrases 12550 7.55 9.42 6.75 48 BAYES_80 12319 5.14 9.24 3.38 49 BAYES_60 11840 7.09 8.88 6.31 50 LotsOfNums_01 11103 11.62 8.33 13.03 51 RCVD_IN_BL_SPAMCOP_NET 10283 3.00 7.72 0.98 52 XM_Body_Dirty_Words 9991 4.13 7.50 2.69 53 MPART_ALT_DIFF 9467 5.11 7.10 4.26 54 HTML_IMAGE_RATIO_02 9404 5.14 7.06 4.32 55 UNTRUSTED_Relay 9046 3.06 6.79 1.47 56 RELAYCOUNTRY_CA 8900 2.66 6.68 0.94 57 HTML_IMAGE_RATIO_04 8603 5.57 6.45 5.19 58 XM_H_Long_From01 7731 5.56 5.80 5.45 59 XM_UncommonTLD01 7553 4.67 5.67 4.24 60 XMSubMetaSx_00 7545 3.90 5.66 3.15 61 XM_B_PhoneNumber 7317 7.75 5.49 8.71 62 TM2_M_VERY_LONG_WORD 7136 7.61 5.35 8.57 63 RCVD_IN_MSPIKE_WL 6827 8.58 5.12 10.06 64 BAYES_95 6615 2.96 4.96 2.10 65 TooManyTo_001 6514 6.88 4.89 7.73 66 MIME_HTML_MOSTLY 5782 3.10 4.34 2.57 67 TR_XM_PhishingBody 5768 2.34 4.33 1.49 68 XM_B_SpammyTLD 5689 3.16 4.27 2.68 69 XM_H_GMP 5646 4.89 4.24 5.17 70 DKIM_INVALID 5577 2.80 4.18 2.21 71 XM_OfRef6 5514 2.12 4.14 1.25 72 XMStrtUSub 5410 4.32 4.06 4.43 73 XM_B_Investor 5181 2.32 3.89 1.65 74 MIME_HTML_ONLY_MULTI 5145 2.83 3.86 2.39 75 XMNumbers 5129 3.61 3.85 3.50 76 T_XMDrugObfuBody_14 5111 2.52 3.83 1.95 77 TR_XM_SpammyWords5 5101 2.12 3.83 1.39 78 XM_CamelCaseFrm001 5053 2.52 3.79 1.97 79 XMSexyCombo_05 5052 1.93 3.79 1.13 80 MIME_QP_LONG_LINE 4927 4.56 3.70 4.92 81 TR_XM_SPAMCOP 4914 1.26 3.69 0.21 82 XM_UB50 4700 1.70 3.53 0.92 83 HTML_IMAGE_RATIO_06 4457 2.53 3.34 2.17 84 ANY_BOUNCE_MESSAGE 4297 8.36 3.22 10.56 85 BOUNCE_MESSAGE 4296 8.36 3.22 10.56 86 T_XMDrugObfuBody_08 4149 1.96 3.11 1.46 87 XM_B_Unsub2 4133 1.98 3.10 1.49 88 XM_URI_RBL 3927 1.11 2.95 0.33 89 TR_XM_NoHeaderRelay 3773 1.01 2.83 0.23 90 XM_SPF_SoftFail 3734 1.70 2.80 1.23 91 FROM_EXCESS_BASE64 3718 2.16 2.79 1.89 92 HTML_IMAGE_RATIO_08 3685 2.30 2.76 2.09 93 XM_B_SpammyWords4 3675 1.34 2.76 0.73 94 RCVD_IN_MSPIKE_H3 3645 4.67 2.73 5.50 95 XM_B_URI_Unicode 3619 2.01 2.72 1.71 96 RCVD_IN_VALIDITY_SAFE 3552 3.77 2.67 4.24 97 RELAYCOUNTRY_AU 3372 1.27 2.53 0.73 98 XMBody_17 3333 1.08 2.50 0.47 99 MAILING_LIST_MULTI 3297 2.73 2.47 2.84 100 SUBJ_ALL_CAPS 3284 1.89 2.46 1.65 101 KHOP_HELO_FCRDNS 3258 4.00 2.44 4.67 102 XMDiploma_00 3193 1.68 2.40 1.37 103 TM2_M_URI_OPT_OUT 3178 2.07 2.38 1.94 104 USER_IN_DEF_DKIM_WL 3140 9.79 2.36 12.98 105 RCVD_IN_VALIDITY_RPBL 3135 0.76 2.35 0.07 106 T_TooManySym_01 3038 4.53 2.28 5.50 107 URI_TRY_3LD 2976 1.09 2.23 0.60 108 T_FILL_THIS_FORM_SHORT 2959 1.25 2.22 0.84 109 T_XMHurry_00 2956 1.19 2.22 0.75 110 XMStockSpam_06 2787 1.51 2.09 1.26 111 RCVD_IN_VALIDITY_CERTIFIED 2717 3.03 2.04 3.46 112 SpammyFromTLD_02 2616 0.89 1.96 0.43 113 BAYES_40 2537 4.48 1.90 5.59 114 XMBrknScrpt_02 2470 1.09 1.85 0.77 115 ALL_TRUSTED 2432 9.43 1.82 12.69 116 SpammyFromTLD_01 2363 1.18 1.77 0.93 117 XM_DK_Undo_01 2353 1.65 1.77 1.59 118 T_XMDrugObfuBody_00 2299 1.03 1.72 0.73 119 RCVD_IN_MSPIKE_BL 2245 0.72 1.68 0.31 120 TR_XM_MSPIKECOMBO 2243 0.72 1.68 0.30 121 TR_XM_INV_DKIM 2217 0.63 1.66 0.18 122 HTML_MIME_NO_HTML_TAG 2160 2.22 1.62 2.47 123 DKIM_ADSP_NXDOMAIN 2131 0.71 1.60 0.33 124 XMSubMetaI_00 2071 1.05 1.55 0.83 125 SHOPIFY_IMG_NOT_RCVD_SFY 2041 0.71 1.53 0.36 126 RCVD_IN_MSPIKE_H5 2004 3.25 1.50 4.01 127 XMGenDplmaNmb 1933 0.93 1.45 0.71 128 XMBdyGiftCard01 1898 1.04 1.42 0.87 129 XMPhish30 1848 0.82 1.39 0.57 130 URI_HEX 1846 1.09 1.39 0.97 131 T_REMOTE_IMAGE 1833 2.92 1.38 3.59 132 XM_B_Phish66 1775 0.61 1.33 0.31 133 HTML_FONT_TINY_NORDNS 1767 0.42 1.33 0.03 134 THIS_AD 1738 0.87 1.30 0.68 135 TM2_M_OBFU_COMMENT 1735 0.70 1.30 0.45 136 XM_SendGrid 1732 1.40 1.30 1.45 137 MAY_BE_FORGED 1722 3.68 1.29 4.70 138 URI_NOVOWEL 1712 1.56 1.28 1.68 139 RDNS_DYNAMIC 1680 0.53 1.26 0.21 140 TR_XM_PHPForged 1670 0.61 1.25 0.34 141 TR_XM_PHPDW 1668 0.60 1.25 0.32 142 DIET_1 1659 0.55 1.24 0.25 143 TR_XM_FormFill2 1656 0.60 1.24 0.33 144 RCVD_IN_ZEN_LASTEXTERNAL 1646 0.37 1.23 0.00 145 SHORTCIRCUIT 1646 0.37 1.23 0.00 146 RCVD_IN_PBL 1644 0.79 1.23 0.60 147 XM_DIRTYINTL 1631 0.44 1.22 0.10 148 RCVD_IN_PSBL 1622 0.57 1.22 0.30 149 HTTPS_HTTP_MISMATCH 1621 0.79 1.22 0.60 150 XM_H_PHPOS 1618 0.58 1.21 0.31 151 RCVD_IN_MSPIKE_L5 1604 0.37 1.20 0.01 152 XMBounce_01 1601 0.38 1.20 0.02 153 TR_XM_Base64_M1 1546 0.79 1.16 0.63 154 XM_B_DNDMA 1538 0.96 1.15 0.88 155 TR_LOTS_OF_MONEY3 1532 0.59 1.15 0.35 156 BAYES_20 1523 2.77 1.14 3.47 157 XM_B_COPY_HTML 1506 1.04 1.13 1.00 158 MPART_ALT_DIFF_COUNT 1499 0.70 1.12 0.52 159 BOTNET_NORDNS 1464 0.34 1.10 0.01 160 XM_UB60 1444 0.37 1.08 0.06 161 XMReplyNow 1421 0.45 1.07 0.19 162 XMMoneyMeta_00 1367 0.61 1.03 0.43 163 XM_H_Long_From02 1366 0.83 1.02 0.75 164 XMSexyCombo_01 1358 0.44 1.02 0.19 165 XM_S_SpammyWords 1351 0.44 1.01 0.20 166 TR_XM_Spammywords 1350 0.44 1.01 0.20 167 XMBody_78 1349 0.53 1.01 0.32 168 XM_ProductURIs 1331 0.64 1.00 0.49 169 MIME_CHARSET_FARAWAY 1328 1.80 1.00 2.15 170 DKIM_ADSP_CUSTOM_MED 1321 0.84 0.99 0.77 171 TVD_RCVD_IP 1319 0.82 0.99 0.75 172 TR_XM_InvalidRelay 1275 0.29 0.96 0.01 173 XM_HighProb1 1273 0.30 0.96 0.02 174 T_MONEY_PERCENT 1267 0.48 0.95 0.28 175 TR_LOTS_OF_MONEY2 1267 0.48 0.95 0.28 176 RCVD_IN_IADB_LISTED 1263 2.98 0.95 3.85 177 XM_B_SEO 1252 0.45 0.94 0.24 178 TR_MetaPhish_Combo_01 1251 0.78 0.94 0.71 179 XM_GoogleGroups 1250 1.21 0.94 1.33 180 XM_UB99 1237 0.28 0.93 0.01 181 T_Symld_Words_02 1234 0.60 0.93 0.47 182 XMSubMetaSxObfu_03 1229 0.55 0.92 0.40 183 TR_Symld_Words 1224 1.22 0.92 1.35 184 MultiRelay_CC 1217 0.40 0.91 0.18 185 TR_Mismatch_TLD_02 1214 0.31 0.91 0.06 186 XMLngstWrd_00 1207 0.75 0.91 0.69 187 RELAYCOUNTRY_FR 1191 0.45 0.89 0.26 188 RCVD_IN_MSPIKE_H4 1178 0.66 0.88 0.56 189 RCVD_IN_IADB_SPF 1167 2.60 0.88 3.34 190 XM_OfRef7 1166 0.38 0.87 0.17 191 HELO_DYNAMIC_SPLIT_IP 1159 0.27 0.87 0.01 192 RCVD_IN_IADB_DK 1150 2.27 0.86 2.88 193 TR_XM_Base64_L1 1149 0.32 0.86 0.09 194 HTML_TAG_BALANCE_BODY 1148 0.76 0.86 0.72 195 TR_XM_RelayPhish 1136 0.31 0.85 0.07 196 RCVD_IN_IADB_SENDERID 1131 2.33 0.85 2.96 197 J_POPCORN_WO_D 1112 0.40 0.83 0.21 198 T_STY_INVIS_DIRECT 1095 0.56 0.82 0.45 199 URIBL_BLACK 1093 0.29 0.82 0.06 200 TR_XM_SEO4 1090 0.30 0.82 0.08 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 272997 90.26 95.71 87.92 2 RELAYCOUNTRY_US 262010 83.68 82.05 84.38 3 DKIM_SIGNED 226837 77.73 88.62 73.05 4 XM_DK_Pass 222710 75.75 85.14 71.72 5 DKIM_VALID 219983 74.93 84.43 70.85 6 XM_B_Unicode 217090 74.38 84.80 69.91 7 BAYES_50 196998 57.36 43.18 63.44 8 DCC_CHECK_NEGATIVE 189751 49.64 22.92 61.11 9 DKIM_VALID_AU 175089 59.76 67.61 56.39 10 XMListUnsubscribeExists 151635 54.98 69.30 48.83 11 XM_B_SpammyWords 145976 53.75 69.44 47.01 12 T_SCC_BODY_TEXT_LINE 131226 41.55 39.90 42.26 13 XM_B_Unicode3 130476 44.47 50.17 42.02 14 DCC_CHECK 120621 49.95 75.83 38.85 15 HTML_FONT_LOW_CONTRAST 101771 34.86 39.72 32.78 16 T_TM2_M_HEADER_IN_MSG 101064 28.83 20.18 32.55 17 LOC_TINY_FONT_1 90164 35.58 50.82 29.04 18 DKIM_VALID_EF 88849 29.10 30.22 28.61 19 FVGT_m_MULTI_ODD 79909 28.06 33.48 25.73 20 T_KAM_HTML_FONT_INVALID 67821 25.07 32.57 21.84 21 XMSubLong 65724 22.16 24.47 21.17 22 XM_B_SpammyWords2 65287 27.10 41.24 21.03 23 MIME_HTML_ONLY 59778 22.43 29.84 19.25 24 XM_Multi_Part_URI 44078 17.44 25.00 14.20 25 RCVD_IN_MSPIKE_H2 44032 14.54 15.37 14.18 26 TR_XM_DK_Unsub 42237 16.17 22.16 13.60 27 LotsOfNums_01 40447 11.62 8.33 13.03 28 USER_IN_DEF_DKIM_WL 40304 9.79 2.36 12.98 29 ALL_TRUSTED 39406 9.43 1.82 12.69 30 UNPARSEABLE_RELAY 38404 14.39 19.09 12.37 31 XM_Evil_Numbers_Gen 36932 11.84 11.72 11.89 32 ANY_BOUNCE_MESSAGE 32800 8.36 3.22 10.56 33 BOUNCE_MESSAGE 32791 8.36 3.22 10.56 34 RCVD_IN_MSPIKE_WL 31237 8.58 5.12 10.06 35 BAYES_00 30926 7.15 0.60 9.96 36 XM_B_Unsub 28451 11.68 17.54 9.16 37 XM_B_PhoneNumber 27055 7.75 5.49 8.71 38 TM2_M_VERY_LONG_WORD 26626 7.61 5.35 8.57 39 TooManyTo_001 24015 6.88 4.89 7.73 40 XM_DKIMWhitelistDomains 22072 4.98 0.03 7.11 41 FSL_BULK_SIG 22040 8.13 10.53 7.10 42 TR_XM_DK_Bayes 21803 5.06 0.50 7.02 43 TR_XM_DK_Bayes1 21442 4.98 0.49 6.91 44 XM_B_Phish_Phrases 20963 7.55 9.42 6.75 45 TR_XM_BayesUnsub 20627 9.73 16.91 6.64 46 IN_ZIMBRA_NJ_WHITELIST 20371 4.62 0.11 6.56 47 LOTS_OF_MONEY 19669 8.24 12.67 6.33 48 BAYES_60 19604 7.09 8.88 6.31 49 XM_B_SpammyWords3 18573 8.67 14.93 5.98 50 XM_DK_Undo_02 18119 15.61 38.39 5.84 51 TR_XM_DK_Bayes2 17360 4.02 0.37 5.59 52 BAYES_40 17355 4.48 1.90 5.59 53 T_TooManySym_01 17084 4.53 2.28 5.50 54 RCVD_IN_MSPIKE_H3 17067 4.67 2.73 5.50 55 TR_MAX_INTL_RELAY 17012 8.20 14.54 5.48 56 XM_H_Long_From01 16922 5.56 5.80 5.45 57 HTML_IMAGE_RATIO_04 16109 5.57 6.45 5.19 58 XM_H_GMP 16055 4.89 4.24 5.17 59 HTML_IMAGE_ONLY_32 15411 3.57 0.32 4.96 60 MIME_QP_LONG_LINE 15291 4.56 3.70 4.92 61 MAY_BE_FORGED 14596 3.68 1.29 4.70 62 KHOP_HELO_FCRDNS 14494 4.00 2.44 4.67 63 TR_XM_SpammyWords4 13770 6.53 11.41 4.43 64 XMStrtUSub 13765 4.32 4.06 4.43 65 HTML_IMAGE_RATIO_02 13400 5.14 7.06 4.32 66 MPART_ALT_DIFF 13223 5.11 7.10 4.26 67 XM_UncommonTLD01 13174 4.67 5.67 4.24 68 RCVD_IN_VALIDITY_SAFE 13167 3.77 2.67 4.24 69 XM_PDF 12869 3.09 0.65 4.14 70 RCVD_IN_MSPIKE_H5 12436 3.25 1.50 4.01 71 RCVD_IN_IADB_LISTED 11942 2.98 0.95 3.85 72 BAYES_99 11872 11.14 28.20 3.82 73 RELAYCOUNTRY_META 11565 7.80 17.30 3.72 74 T_REMOTE_IMAGE 11136 2.92 1.38 3.59 75 XMNumbers 10874 3.61 3.85 3.50 76 BAYES_20 10768 2.77 1.14 3.47 77 RCVD_IN_VALIDITY_CERTIFIED 10748 3.03 2.04 3.46 78 BAYES_80 10484 5.14 9.24 3.38 79 RCVD_IN_IADB_SPF 10361 2.60 0.88 3.34 80 BOTNET_IPINHOSTNAME 10129 6.04 12.52 3.26 81 XMSubMetaSx_00 9766 3.90 5.66 3.15 82 T_TooManySym_02 9489 2.35 0.69 3.06 83 RCVD_IN_IADB_SENDERID 9203 2.33 0.85 2.96 84 BAYES_999 9086 8.58 21.77 2.93 85 RCVD_IN_IADB_DK 8943 2.27 0.86 2.88 86 TR_XM_DKIM_Undo 8813 10.21 27.37 2.84 87 MAILING_LIST_MULTI 8808 2.73 2.47 2.84 88 TooManyTo_002 8689 2.16 0.67 2.80 89 XM_Body_Dirty_Words 8353 4.13 7.50 2.69 90 XM_B_SpammyTLD 8322 3.16 4.27 2.68 91 RCVD_IN_IADB_VOUCHED 8186 1.94 0.33 2.64 92 MIME_HTML_MOSTLY 7990 3.10 4.34 2.57 93 HTML_MIME_NO_HTML_TAG 7684 2.22 1.62 2.47 94 MIME_HTML_ONLY_MULTI 7417 2.83 3.86 2.39 95 INVALID_MSGID 7255 1.75 0.37 2.34 96 DKIM_INVALID 6854 2.80 4.18 2.21 97 HTML_IMAGE_RATIO_06 6752 2.53 3.34 2.17 98 MIME_CHARSET_FARAWAY 6678 1.80 1.00 2.15 99 BAYES_95 6506 2.96 4.96 2.10 100 HTML_IMAGE_RATIO_08 6505 2.30 2.76 2.09 101 HTML_EXTRA_CLOSE 6387 1.45 0.04 2.06 102 TO_MALFORMED 6290 1.42 0.01 2.03 103 CHARSET_FARAWAY_HEADER 6266 1.62 0.71 2.02 104 XM_CamelCaseFrm001 6115 2.52 3.79 1.97 105 T_XMDrugObfuBody_14 6065 2.52 3.83 1.95 106 TR_XM_SpammyRelay 6040 4.97 12.01 1.95 107 TM2_M_URI_OPT_OUT 6027 2.07 2.38 1.94 108 BAYES_05 5990 1.54 0.65 1.93 109 FROM_EXCESS_BASE64 5868 2.16 2.79 1.89 110 RCVD_IN_IADB_OPTIN 5775 1.36 0.19 1.86 111 TR_XM_UnparsRelay 5421 4.28 10.18 1.75 112 XM_B_URI_Unicode 5299 2.01 2.72 1.71 113 URI_NOVOWEL 5212 1.56 1.28 1.68 114 XM_B_Investor 5128 2.32 3.89 1.65 115 SUBJ_ALL_CAPS 5111 1.89 2.46 1.65 116 XM_DK_Undo_01 4948 1.65 1.77 1.59 117 BOTNET 4891 4.20 10.33 1.58 118 XM_B_Unsub2 4634 1.98 3.10 1.49 119 TR_XM_PhishingBody 4633 2.34 4.33 1.49 120 UNTRUSTED_Relay 4549 3.06 6.79 1.47 121 T_XMDrugObfuBody_08 4537 1.96 3.11 1.46 122 XM_SendGrid 4494 1.40 1.30 1.45 123 TooManyTo_003 4472 1.18 0.57 1.44 124 TR_XM_SpammyWords5 4308 2.12 3.83 1.39 125 IN_HORDE_ADDRESS_BOOK 4280 1.00 0.11 1.38 126 XMDiploma_00 4269 1.68 2.40 1.37 127 TR_Symld_Words 4197 1.22 0.92 1.35 128 T_TooManySym_03 4175 0.99 0.17 1.34 129 XM_GoogleGroups 4139 1.21 0.94 1.33 130 TR_DCC_Bayes_99 4112 7.09 20.53 1.32 131 XMGappySubj_01 4051 1.13 0.71 1.30 132 XMStockSpam_06 3898 1.51 2.09 1.26 133 XM_OfRef6 3888 2.12 4.14 1.25 134 XM_SPF_SoftFail 3817 1.70 2.80 1.23 135 XMSexyCombo_05 3510 1.93 3.79 1.13 136 TooManyTo_004 3365 0.91 0.51 1.08 137 XM_B_COPY_HTML 3118 1.04 1.13 1.00 138 TVD_SPACE_RATIO 3086 0.74 0.15 0.99 139 RCVD_IN_BL_SPAMCOP_NET 3038 3.00 7.72 0.98 140 XMCapTrack 3008 0.82 0.48 0.97 141 URI_HEX 3003 1.09 1.39 0.97 142 HELO_NODOT 2915 0.74 0.27 0.94 143 HELO_NO_DOMAIN 2910 0.73 0.26 0.94 144 RELAYCOUNTRY_CA 2907 2.66 6.68 0.94 145 SpammyFromTLD_01 2884 1.18 1.77 0.93 146 TR_XM_DK_SendGrid 2878 0.89 0.79 0.93 147 XM_UB50 2866 1.70 3.53 0.92 148 XM_B_DNDMA 2732 0.96 1.15 0.88 149 XMBdyGiftCard01 2704 1.04 1.42 0.87 150 XM_ShortIntro_01 2699 0.74 0.45 0.87 151 XM_H_PHPMailer 2685 0.82 0.72 0.86 152 T_FILL_THIS_FORM_SHORT 2599 1.25 2.22 0.84 153 XMSubMetaI_00 2592 1.05 1.55 0.83 154 TooManyTo_005 2584 0.73 0.48 0.83 155 FROM_GOV_DKIM_AU 2521 0.68 0.38 0.81 156 XMGappySubj_02 2440 0.60 0.18 0.79 157 DKIM_ADSP_CUSTOM_MED 2394 0.84 0.99 0.77 158 XMBrknScrpt_02 2379 1.09 1.85 0.77 159 XM_B_FormFill 2365 0.54 0.03 0.76 160 T_XMHurry_00 2340 1.19 2.22 0.75 161 TVD_RCVD_IP 2322 0.82 0.99 0.75 162 XM_H_Long_From02 2315 0.83 1.02 0.75 163 T_XMDrugObfuBody_00 2276 1.03 1.72 0.73 164 XM_B_SpammyWords4 2272 1.34 2.76 0.73 165 RELAYCOUNTRY_AU 2267 1.27 2.53 0.73 166 HTML_TAG_BALANCE_BODY 2224 0.76 0.86 0.72 167 TR_MetaPhish_Combo_01 2214 0.78 0.94 0.71 168 XMGenDplmaNmb 2198 0.93 1.45 0.71 169 XMLngstWrd_00 2127 0.75 0.91 0.69 170 THIS_AD 2123 0.87 1.30 0.68 171 TR_XM_SpammyWords2 2064 3.53 10.21 0.66 172 TR_XM_Base64_M1 1947 0.79 1.16 0.63 173 T_OBFU_PDF_ATTACH 1918 0.46 0.11 0.62 174 URI_TRY_3LD 1874 1.09 2.23 0.60 175 RCVD_IN_PBL 1872 0.79 1.23 0.60 176 HTTPS_HTTP_MISMATCH 1864 0.79 1.22 0.60 177 XMPhish30 1779 0.82 1.39 0.57 178 RCVD_IN_MSPIKE_H4 1734 0.66 0.88 0.56 179 XMBSHREFv2 1683 0.46 0.28 0.54 180 XMNoVowels 1653 0.54 0.56 0.53 181 XMLngstWrd_01 1650 0.54 0.55 0.53 182 XMBody_95 1650 0.45 0.26 0.53 183 T_TVD_MIME_NO_HEADERS 1621 0.37 0.03 0.52 184 MPART_ALT_DIFF_COUNT 1607 0.70 1.12 0.52 185 RELAYCOUNTRY_GB 1601 0.59 0.75 0.52 186 XM_ProductURIs 1508 0.64 1.00 0.49 187 LongTLD 1497 0.57 0.79 0.48 188 XMSolicitRefs_0 1486 0.48 0.48 0.48 189 XMBody_17 1466 1.08 2.50 0.47 190 MSGID_FROM_MTA_HEADER 1465 0.38 0.15 0.47 191 XMSlimDrugH 1457 0.47 0.49 0.47 192 T_Symld_Words_02 1444 0.60 0.93 0.47 193 NML_ADSP_CUSTOM_MED 1408 0.53 0.71 0.45 194 FORGED_GMAIL_RCVD 1408 0.51 0.65 0.45 195 TM2_M_OBFU_COMMENT 1391 0.70 1.30 0.45 196 T_STY_INVIS_DIRECT 1390 0.56 0.82 0.45 197 FONT_INVIS_MSGID 1368 0.33 0.07 0.44 198 T_TooManySym_04 1347 0.32 0.05 0.43 199 TO_NO_BRKTS_HTML_ONLY 1345 0.45 0.47 0.43 200 SpammyFromTLD_02 1341 0.89 1.96 0.43 ----------------------------------------------------------------------