Email: 464009 Autolearn: 0 AvgScore: 4.98 AvgScanTime: 1.39 sec Spam: 141073 Autolearn: 0 AvgScore: 14.62 AvgScanTime: 1.56 sec Ham: 322936 Autolearn: 0 AvgScore: 0.77 AvgScanTime: 1.31 sec Time Spent Running SA: 179.00 hours Time Spent Processing Spam: 61.31 hours Time Spent Processing Ham: 117.69 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 138439 99.07 98.13 99.47 2 HTML_MESSAGE 134190 90.02 95.12 87.80 3 DKIM_SIGNED 125827 80.93 89.19 77.31 4 XM_DK_Pass 119364 78.73 84.61 76.17 5 DKIM_VALID 118496 77.77 84.00 75.05 6 XM_B_Unicode 118186 75.05 83.78 71.23 7 RELAYCOUNTRY_US 114878 82.18 81.43 82.51 8 DCC_CHECK 106717 51.39 75.65 40.79 9 XM_B_SpammyWords 98950 53.33 70.14 45.98 10 XMListUnsubscribeExists 94329 54.96 66.87 49.76 11 DKIM_VALID_AU 93100 62.10 65.99 60.40 12 XM_B_Unicode3 68204 43.43 48.35 41.28 13 LOC_TINY_FONT_1 67306 34.98 47.71 29.42 14 BAYES_50 57881 55.13 41.03 61.29 15 XM_B_SpammyWords2 56521 25.76 40.07 19.51 16 XM_DK_Undo_02 54891 15.03 38.91 4.60 17 HTML_FONT_LOW_CONTRAST 52299 31.57 37.07 29.17 18 FVGT_m_MULTI_ODD 47313 28.43 33.54 26.19 19 DKIM_VALID_EF 43993 30.53 31.18 30.25 20 T_KAM_HTML_FONT_INVALID 43383 25.01 30.75 22.50 21 BAYES_99 42880 11.42 30.40 3.14 22 MIME_HTML_ONLY 42101 22.75 29.84 19.66 23 TR_XM_DKIM_Undo 39944 9.92 28.31 1.89 24 XMSubLong 34902 23.18 24.74 22.50 25 T_TM2_M_HEADER_IN_MSG 33559 28.83 23.79 31.03 26 BAYES_999 33026 8.74 23.41 2.33 27 DCC_CHECK_NEGATIVE 32119 48.09 22.77 59.15 28 TR_DCC_Bayes_99 30931 7.52 21.93 1.23 29 TR_XM_DK_Unsub 30893 16.03 21.90 13.47 30 XM_B_Unsub 29722 13.43 21.07 10.09 31 XM_Multi_Part_URI 29245 16.14 20.73 14.14 32 TR_XM_BayesUnsub 28419 11.47 20.14 7.68 33 UNPARSEABLE_RELAY 25270 14.00 17.91 12.30 34 RCVD_IN_MSPIKE_H2 24806 17.17 17.58 16.98 35 RELAYCOUNTRY_META 24104 7.73 17.09 3.64 36 XM_B_SpammyWords3 22826 8.50 16.18 5.15 37 TR_MAX_INTL_RELAY 20605 8.71 14.61 6.13 38 LOTS_OF_MONEY 18725 8.35 13.27 6.19 39 BOTNET_IPINHOSTNAME 18720 5.94 13.27 2.74 40 TR_XM_SpammyRelay 17833 5.14 12.64 1.86 41 TR_XM_SpammyWords4 16902 6.74 11.98 4.46 42 FSL_BULK_SIG 15429 9.05 10.94 8.22 43 TR_XM_SpammyWords2 15075 3.53 10.69 0.41 44 BOTNET 14310 3.90 10.14 1.17 45 XM_Evil_Numbers_Gen 13793 9.49 9.78 9.37 46 XM_B_Phish_Phrases 13310 7.05 9.43 6.01 47 BAYES_80 12876 5.40 9.13 3.77 48 TR_XM_UnparsRelay 12531 3.99 8.88 1.85 49 RCVD_IN_BL_SPAMCOP_NET 12389 3.21 8.78 0.78 50 BAYES_60 11180 7.26 7.92 6.97 51 RCVD_IN_MSPIKE_WL 10596 13.01 7.51 15.41 52 LotsOfNums_01 10527 7.94 7.46 8.15 53 XM_B_PhoneNumber 9958 9.48 7.06 10.54 54 XM_Body_Dirty_Words 9911 3.92 7.03 2.57 55 MPART_ALT_DIFF 9063 5.49 6.42 5.09 56 HTML_IMAGE_RATIO_02 9011 5.08 6.39 4.51 57 RELAYCOUNTRY_CA 8988 2.51 6.37 0.82 58 UNTRUSTED_Relay 8831 2.92 6.26 1.46 59 XM_UncommonTLD01 8414 4.68 5.96 4.12 60 XMSubMetaSx_00 8336 4.03 5.91 3.21 61 XM_H_Long_From01 7765 5.68 5.50 5.75 62 DKIM_INVALID 7331 3.16 5.20 2.26 63 HTML_IMAGE_RATIO_04 7172 4.11 5.08 3.68 64 BAYES_95 7170 3.18 5.08 2.35 65 XM_B_Investor 7133 2.78 5.06 1.78 66 TR_XM_PhishingBody 6508 2.66 4.61 1.81 67 RCVD_IN_MSPIKE_BL 6371 1.61 4.52 0.35 68 TR_XM_MSPIKECOMBO 6368 1.61 4.51 0.35 69 XMStrtUSub 6302 5.00 4.47 5.23 70 XM_H_GMP 6266 5.61 4.44 6.12 71 TooManyTo_001 6055 7.41 4.29 8.78 72 T_XMDrugObfuBody_14 6042 2.55 4.28 1.80 73 TR_XM_SpammyWords5 5891 2.20 4.18 1.34 74 TM2_M_VERY_LONG_WORD 5713 2.28 4.05 1.51 75 XM_B_SpammyTLD 5673 3.05 4.02 2.63 76 XMSexyCombo_05 5599 1.96 3.97 1.08 77 HTML_IMAGE_RATIO_06 5540 3.31 3.93 3.05 78 RCVD_IN_MSPIKE_H3 5426 6.17 3.85 7.19 79 MIME_HTML_MOSTLY 5372 3.03 3.81 2.69 80 MIME_QP_LONG_LINE 5335 4.83 3.78 5.29 81 XM_CamelCaseFrm001 5266 2.74 3.73 2.31 82 TR_XM_NoHeaderRelay 5171 1.25 3.67 0.20 83 XMNumbers 5145 3.37 3.65 3.25 84 TR_XM_SpammyWords3 4929 1.20 3.49 0.19 85 XM_B_Unsub2 4786 2.06 3.39 1.48 86 XMDiploma_00 4779 2.11 3.39 1.55 87 XM_B_SpammyWords4 4683 1.61 3.32 0.86 88 XM_UB50 4648 1.68 3.29 0.98 89 MIME_HTML_ONLY_MULTI 4622 2.87 3.28 2.69 90 XM_URI_RBL 4618 1.17 3.27 0.25 91 RCVD_IN_VALIDITY_RPBL 4406 1.02 3.12 0.11 92 XM_OfRef6 4393 1.89 3.11 1.35 93 XM_SPF_SoftFail 4328 1.99 3.07 1.52 94 TR_XM_SPAMCOP 4290 1.03 3.04 0.15 95 HTML_IMAGE_RATIO_08 4271 2.71 3.03 2.58 96 T_XMDrugObfuBody_08 4194 2.14 2.97 1.77 97 RELAYCOUNTRY_AU 4127 1.32 2.93 0.62 98 XM_B_URI_Unicode 4078 2.17 2.89 1.85 99 RCVD_IN_MSPIKE_L3 4014 1.03 2.85 0.24 100 T_TooManySym_01 3922 4.72 2.78 5.57 101 ALL_TRUSTED 3560 10.87 2.52 14.51 102 TR_XM_INV_DKIM 3362 0.79 2.38 0.10 103 SpammyFromTLD_02 3297 1.05 2.34 0.49 104 TM2_M_URI_OPT_OUT 3162 1.84 2.24 1.66 105 USER_IN_DEF_DKIM_WL 3121 10.39 2.21 13.96 106 T_FILL_THIS_FORM_SHORT 3050 1.27 2.16 0.88 107 SUBJ_ALL_CAPS 3024 1.84 2.14 1.71 108 RCVD_IN_MSPIKE_H5 3022 4.77 2.14 5.92 109 XMStockSpam_06 3012 1.57 2.14 1.33 110 MAILING_LIST_MULTI 2976 2.79 2.11 3.08 111 DKIM_ADSP_NXDOMAIN 2871 0.82 2.04 0.29 112 T_XMHurry_00 2856 1.21 2.02 0.85 113 T_XMDrugObfuBody_00 2823 1.17 2.00 0.81 114 RCVD_IN_VALIDITY_SAFE 2699 3.31 1.91 3.92 115 XMGenDplmaNmb 2695 1.26 1.91 0.98 116 FROM_EXCESS_BASE64 2689 1.81 1.91 1.76 117 URI_TRY_3LD 2631 0.95 1.86 0.55 118 SpammyFromTLD_01 2607 1.16 1.85 0.86 119 BAYES_40 2605 4.34 1.85 5.43 120 XMBrknScrpt_02 2557 1.16 1.81 0.87 121 XMBody_17 2551 0.86 1.81 0.45 122 XM_DK_Undo_01 2537 1.83 1.80 1.84 123 T_REMOTE_IMAGE 2414 3.09 1.71 3.69 124 HTML_MIME_NO_HTML_TAG 2373 2.36 1.68 2.65 125 SCC_BODY_URI_ONLY 2337 2.03 1.66 2.20 126 URI_NOVOWEL 2297 1.49 1.63 1.43 127 RCVD_IN_PSBL 2214 0.67 1.57 0.28 128 RCVD_IN_ZEN_LASTEXTERNAL 2211 0.48 1.57 0.00 129 SHORTCIRCUIT 2211 0.48 1.57 0.00 130 XM_SendGrid 2203 1.44 1.56 1.39 131 XM_ProductURIs 2176 1.09 1.54 0.89 132 RCVD_IN_MSPIKE_H4 2148 2.06 1.52 2.30 133 XM_B_DNDMA 2090 0.82 1.48 0.53 134 KHOP_HELO_FCRDNS 2032 1.58 1.44 1.64 135 BAYES_20 2026 3.13 1.44 3.87 136 URI_HEX 1968 1.29 1.40 1.24 137 XM_H_Long_From02 1939 1.01 1.37 0.84 138 HTTPS_HTTP_MISMATCH 1890 0.92 1.34 0.74 139 TR_MetaPhish_Combo_01 1889 1.51 1.34 1.59 140 BOTNET_NORDNS 1858 0.41 1.32 0.01 141 XM_HighProb1 1846 0.40 1.31 0.00 142 XM_DIRTYINTL 1837 0.45 1.30 0.08 143 TR_LOTS_OF_MONEY2 1815 0.62 1.29 0.33 144 T_MONEY_PERCENT 1815 0.62 1.29 0.33 145 BOUNCE_MESSAGE 1801 3.09 1.28 3.89 146 ANY_BOUNCE_MESSAGE 1801 3.09 1.28 3.89 147 DIET_1 1799 0.62 1.28 0.34 148 TR_LOTS_OF_MONEY3 1794 0.61 1.27 0.33 149 RDNS_DYNAMIC 1794 0.50 1.27 0.16 150 XMPhish30 1777 0.77 1.26 0.55 151 TR_Symld_Words 1773 1.66 1.26 1.83 152 TR_XM_MSPIKECOMBO2 1767 0.38 1.25 0.00 153 LongTLD 1755 0.68 1.24 0.43 154 RCVD_IN_VALIDITY_CERTIFIED 1750 2.55 1.24 3.13 155 PDS_RDNS_DYNAMIC_FP 1735 0.40 1.23 0.04 156 XMBdyGiftCard01 1710 1.07 1.21 1.01 157 SHOPIFY_IMG_NOT_RCVD_SFY 1709 0.57 1.21 0.29 158 XM_B_Phish66 1702 0.60 1.21 0.34 159 XMPhish14 1679 0.67 1.19 0.44 160 RCVD_IN_IADB_LISTED 1666 3.29 1.18 4.22 161 TR_Mismatch_TLD_02 1642 0.42 1.16 0.10 162 XM_B_COPY_HTML 1604 0.78 1.14 0.62 163 TR_XM_RelayPhish 1597 0.40 1.13 0.08 164 TR_XM_PHPForged 1584 0.57 1.12 0.32 165 HTML_IMAGE_ONLY_20 1583 0.63 1.12 0.41 166 TR_XM_PHPDW 1574 0.57 1.12 0.34 167 RELAYCOUNTRY_FR 1557 0.51 1.10 0.26 168 XM_B_SEO 1557 0.50 1.10 0.23 169 TR_XM_FormFill2 1554 0.56 1.10 0.33 170 RCVD_IN_PBL 1536 0.91 1.09 0.83 171 XM_H_PHPOS 1526 0.55 1.08 0.31 172 RCVD_IN_MSPIKE_L4 1520 0.34 1.08 0.01 173 MPART_ALT_DIFF_COUNT 1496 0.70 1.06 0.54 174 RCVD_IN_IADB_SPF 1478 2.85 1.05 3.64 175 TVD_RCVD_IP 1469 0.88 1.04 0.81 176 TR_XM_Spammywords 1459 0.50 1.03 0.26 177 XM_S_SpammyWords 1459 0.50 1.03 0.26 178 T_Symld_Words_02 1450 0.70 1.03 0.56 179 TM2_M_A_HREF_HREF 1413 0.48 1.00 0.25 180 RCVD_IN_XBL 1409 0.32 1.00 0.02 181 XMSolicitRefs_0 1387 0.60 0.98 0.43 182 XMSlimDrugH 1380 0.79 0.98 0.71 183 RCVD_IN_IADB_DK 1379 2.46 0.98 3.10 184 XMReplyNow 1371 0.53 0.97 0.33 185 RCVD_IN_IADB_SENDERID 1370 2.53 0.97 3.21 186 XMBody_78 1362 0.59 0.97 0.43 187 DKIM_ADSP_CUSTOM_MED 1351 0.89 0.96 0.86 188 XMSexyCombo_01 1345 0.38 0.95 0.13 189 TR_XM_SEO4 1336 0.36 0.95 0.10 190 XMHTML_After_End 1288 0.52 0.91 0.35 191 BAYES_05 1284 1.87 0.91 2.29 192 HELO_DYNAMIC_SPLIT_IP 1282 0.28 0.91 0.00 193 TR_Caps_n_Bayes_99 1281 0.29 0.91 0.01 194 TR_XM_DK_SendGrid 1274 0.88 0.90 0.87 195 URIBL_BLACK 1249 0.29 0.89 0.03 196 RELAYCOUNTRY_GB 1248 0.64 0.88 0.54 197 XMSubMetaI_00 1236 0.59 0.88 0.47 198 T_TooManySym_02 1213 2.40 0.86 3.07 199 TR_XM_MaxSPIKE 1208 0.26 0.86 0.00 200 XM_UB99 1206 0.26 0.85 0.00 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 321235 99.07 98.13 99.47 2 HTML_MESSAGE 283526 90.02 95.12 87.80 3 RELAYCOUNTRY_US 266463 82.18 81.43 82.51 4 DKIM_SIGNED 249674 80.93 89.19 77.31 5 XM_DK_Pass 245969 78.73 84.61 76.17 6 DKIM_VALID 242362 77.77 84.00 75.05 7 XM_B_Unicode 230031 75.05 83.78 71.23 8 BAYES_50 197937 55.13 41.03 61.29 9 DKIM_VALID_AU 195062 62.10 65.99 60.40 10 DCC_CHECK_NEGATIVE 191020 48.09 22.77 59.15 11 XMListUnsubscribeExists 160680 54.96 66.87 49.76 12 XM_B_SpammyWords 148490 53.33 70.14 45.98 13 XM_B_Unicode3 133294 43.43 48.35 41.28 14 DCC_CHECK 131735 51.39 75.65 40.79 15 T_TM2_M_HEADER_IN_MSG 100213 28.83 23.79 31.03 16 DKIM_VALID_EF 97685 30.53 31.18 30.25 17 LOC_TINY_FONT_1 95001 34.98 47.71 29.42 18 HTML_FONT_LOW_CONTRAST 94198 31.57 37.07 29.17 19 FVGT_m_MULTI_ODD 84593 28.43 33.54 26.19 20 T_KAM_HTML_FONT_INVALID 72666 25.01 30.75 22.50 21 XMSubLong 72652 23.18 24.74 22.50 22 MIME_HTML_ONLY 63477 22.75 29.84 19.66 23 XM_B_SpammyWords2 63007 25.76 40.07 19.51 24 RCVD_IN_MSPIKE_H2 54842 17.17 17.58 16.98 25 RCVD_IN_MSPIKE_WL 49750 13.01 7.51 15.41 26 ALL_TRUSTED 46859 10.87 2.52 14.51 27 XM_Multi_Part_URI 45650 16.14 20.73 14.14 28 USER_IN_DEF_DKIM_WL 45081 10.39 2.21 13.96 29 TR_XM_DK_Unsub 43486 16.03 21.90 13.47 30 UNPARSEABLE_RELAY 39708 14.00 17.91 12.30 31 BAYES_00 35140 7.78 0.68 10.88 32 XM_B_PhoneNumber 34025 9.48 7.06 10.54 33 XM_B_Unsub 32599 13.43 21.07 10.09 34 XM_Evil_Numbers_Gen 30243 9.49 9.78 9.37 35 TooManyTo_001 28338 7.41 4.29 8.78 36 FSL_BULK_SIG 26557 9.05 10.94 8.22 37 LotsOfNums_01 26320 7.94 7.46 8.15 38 TR_XM_BayesUnsub 24797 11.47 20.14 7.68 39 XM_DKIMWhitelistDomains 24147 5.21 0.01 7.48 40 TR_XM_DK_Bayes 23875 5.31 0.55 7.39 41 TR_XM_DK_Bayes1 23352 5.20 0.55 7.23 42 RCVD_IN_MSPIKE_H3 23225 6.17 3.85 7.19 43 BAYES_60 22510 7.26 7.92 6.97 44 LOTS_OF_MONEY 20005 8.35 13.27 6.19 45 TR_MAX_INTL_RELAY 19798 8.71 14.61 6.13 46 XM_H_GMP 19774 5.61 4.44 6.12 47 TR_XM_DK_Bayes2 19500 4.32 0.38 6.04 48 XM_B_Phish_Phrases 19415 7.05 9.43 6.01 49 RCVD_IN_MSPIKE_H5 19112 4.77 2.14 5.92 50 XM_H_Long_From01 18575 5.68 5.50 5.75 51 T_TooManySym_01 17980 4.72 2.78 5.57 52 BAYES_40 17522 4.34 1.85 5.43 53 MIME_QP_LONG_LINE 17089 4.83 3.78 5.29 54 XMStrtUSub 16905 5.00 4.47 5.23 55 XM_B_SpammyWords3 16626 8.50 16.18 5.15 56 MPART_ALT_DIFF 16432 5.49 6.42 5.09 57 XM_DK_Undo_02 14866 15.03 38.91 4.60 58 HTML_IMAGE_RATIO_02 14560 5.08 6.39 4.51 59 TR_XM_SpammyWords4 14388 6.74 11.98 4.46 60 XM_PDF 14107 3.26 0.72 4.37 61 RCVD_IN_IADB_LISTED 13622 3.29 1.18 4.22 62 XM_UncommonTLD01 13305 4.68 5.96 4.12 63 RCVD_IN_VALIDITY_SAFE 12670 3.31 1.91 3.92 64 ANY_BOUNCE_MESSAGE 12551 3.09 1.28 3.89 65 BOUNCE_MESSAGE 12550 3.09 1.28 3.89 66 BAYES_20 12495 3.13 1.44 3.87 67 BAYES_80 12189 5.40 9.13 3.77 68 T_REMOTE_IMAGE 11912 3.09 1.71 3.69 69 HTML_IMAGE_RATIO_04 11877 4.11 5.08 3.68 70 RCVD_IN_IADB_SPF 11755 2.85 1.05 3.64 71 RELAYCOUNTRY_META 11743 7.73 17.09 3.64 72 XMNumbers 10494 3.37 3.65 3.25 73 TooManyTo_002 10480 2.46 0.68 3.25 74 XMSubMetaSx_00 10381 4.03 5.91 3.21 75 RCVD_IN_IADB_SENDERID 10370 2.53 0.97 3.21 76 BAYES_99 10132 11.42 30.40 3.14 77 RCVD_IN_VALIDITY_CERTIFIED 10093 2.55 1.24 3.13 78 RCVD_IN_IADB_DK 10015 2.46 0.98 3.10 79 MAILING_LIST_MULTI 9949 2.79 2.11 3.08 80 T_TooManySym_02 9911 2.40 0.86 3.07 81 HTML_IMAGE_RATIO_06 9838 3.31 3.93 3.05 82 RCVD_IN_IADB_VOUCHED 9407 2.20 0.57 2.91 83 BOTNET_IPINHOSTNAME 8862 5.94 13.27 2.74 84 MIME_HTML_ONLY_MULTI 8699 2.87 3.28 2.69 85 MIME_HTML_MOSTLY 8680 3.03 3.81 2.69 86 HTML_MIME_NO_HTML_TAG 8562 2.36 1.68 2.65 87 XM_B_SpammyTLD 8479 3.05 4.02 2.63 88 HTML_IMAGE_RATIO_08 8322 2.71 3.03 2.58 89 XM_Body_Dirty_Words 8292 3.92 7.03 2.57 90 BAYES_95 7599 3.18 5.08 2.35 91 BAYES_999 7522 8.74 23.41 2.33 92 XM_CamelCaseFrm001 7452 2.74 3.73 2.31 93 RCVD_IN_MSPIKE_H4 7413 2.06 1.52 2.30 94 BAYES_05 7396 1.87 0.91 2.29 95 DKIM_INVALID 7312 3.16 5.20 2.26 96 INVALID_MSGID 7294 1.65 0.25 2.26 97 SCC_BODY_URI_ONLY 7095 2.03 1.66 2.20 98 RCVD_IN_IADB_OPTIN 6483 1.50 0.35 2.01 99 TO_MALFORMED 6305 1.37 0.04 1.95 100 TooManyTo_003 6283 1.53 0.58 1.95 101 TR_XM_DKIM_Undo 6096 9.92 28.31 1.89 102 TR_XM_SpammyRelay 6009 5.14 12.64 1.86 103 XM_B_URI_Unicode 5983 2.17 2.89 1.85 104 TR_XM_UnparsRelay 5978 3.99 8.88 1.85 105 XM_DK_Undo_01 5938 1.83 1.80 1.84 106 TR_Symld_Words 5922 1.66 1.26 1.83 107 TR_XM_PhishingBody 5834 2.66 4.61 1.81 108 T_XMDrugObfuBody_14 5805 2.55 4.28 1.80 109 XM_B_Investor 5762 2.78 5.06 1.78 110 T_XMDrugObfuBody_08 5720 2.14 2.97 1.77 111 FROM_EXCESS_BASE64 5688 1.81 1.91 1.76 112 SUBJ_ALL_CAPS 5534 1.84 2.14 1.71 113 TM2_M_URI_OPT_OUT 5354 1.84 2.24 1.66 114 KHOP_HELO_FCRDNS 5283 1.58 1.44 1.64 115 TR_MetaPhish_Combo_01 5122 1.51 1.34 1.59 116 XMDiploma_00 5015 2.11 3.39 1.55 117 XM_SPF_SoftFail 4923 1.99 3.07 1.52 118 TM2_M_VERY_LONG_WORD 4887 2.28 4.05 1.51 119 XM_B_Unsub2 4766 2.06 3.39 1.48 120 UNTRUSTED_Relay 4727 2.92 6.26 1.46 121 HELO_NODOT 4692 1.07 0.19 1.45 122 HELO_NO_DOMAIN 4687 1.07 0.18 1.45 123 URI_NOVOWEL 4608 1.49 1.63 1.43 124 XM_SendGrid 4481 1.44 1.56 1.39 125 XM_OfRef6 4375 1.89 3.11 1.35 126 TR_XM_SpammyWords5 4323 2.20 4.18 1.34 127 XMStockSpam_06 4284 1.57 2.14 1.33 128 TooManyTo_004 4265 1.07 0.50 1.32 129 XM_GoogleGroups 4137 1.12 0.75 1.28 130 IN_HORDE_ADDRESS_BOOK 4111 0.92 0.11 1.27 131 URI_HEX 3995 1.29 1.40 1.24 132 TR_DCC_Bayes_99 3974 7.52 21.93 1.23 133 XMGappySubj_01 3919 0.92 0.25 1.21 134 BOTNET 3770 3.90 10.14 1.17 135 T_TooManySym_03 3768 0.93 0.38 1.17 136 XMCapTrack 3693 0.93 0.44 1.14 137 TooManyTo_005 3507 0.89 0.45 1.09 138 XMSexyCombo_05 3477 1.96 3.97 1.08 139 XM_ShortIntro_01 3288 0.81 0.35 1.02 140 XMBdyGiftCard01 3252 1.07 1.21 1.01 141 TVD_SPACE_RATIO 3218 0.76 0.22 1.00 142 XMGenDplmaNmb 3170 1.26 1.91 0.98 143 XM_UB50 3149 1.68 3.29 0.98 144 XM_ProductURIs 2859 1.09 1.54 0.89 145 T_FILL_THIS_FORM_SHORT 2832 1.27 2.16 0.88 146 TR_XM_DK_SendGrid 2815 0.88 0.90 0.87 147 XMBrknScrpt_02 2805 1.16 1.81 0.87 148 XM_H_PHPMailer 2803 0.81 0.69 0.87 149 FROM_GOV_DKIM_AU 2785 0.65 0.15 0.86 150 XM_B_SpammyWords4 2779 1.61 3.32 0.86 151 DKIM_ADSP_CUSTOM_MED 2778 0.89 0.96 0.86 152 SpammyFromTLD_01 2777 1.16 1.85 0.86 153 T_XMHurry_00 2757 1.21 2.02 0.85 154 XM_H_Long_From02 2726 1.01 1.37 0.84 155 RCVD_IN_PBL 2680 0.91 1.09 0.83 156 RELAYCOUNTRY_CA 2654 2.51 6.37 0.82 157 T_XMDrugObfuBody_00 2628 1.17 2.00 0.81 158 TVD_RCVD_IP 2617 0.88 1.04 0.81 159 URI_OPTOUT_3LD 2578 0.70 0.48 0.80 160 RCVD_IN_BL_SPAMCOP_NET 2505 3.21 8.78 0.78 161 TR_XM_Base64_M1 2471 0.75 0.71 0.77 162 HTML_IMAGE_ONLY_32 2436 0.66 0.43 0.75 163 T_TVD_MIME_NO_HEADERS 2399 0.54 0.06 0.74 164 HTTPS_HTTP_MISMATCH 2380 0.92 1.34 0.74 165 XMSlimDrugH 2286 0.79 0.98 0.71 166 XMMoneyMeta_00 2108 0.68 0.76 0.65 167 XMGappySubj_02 2019 0.45 0.05 0.63 168 RELAYCOUNTRY_AU 1997 1.32 2.93 0.62 169 XM_B_COPY_HTML 1997 0.78 1.14 0.62 170 XMNoVowels 1943 0.56 0.47 0.60 171 XM_B_FormFill 1893 0.42 0.04 0.59 172 HTML_TAG_BALANCE_BODY 1879 0.66 0.85 0.58 173 XM_RXBody 1869 0.58 0.58 0.58 174 NML_ADSP_CUSTOM_MED 1809 0.60 0.71 0.56 175 T_Symld_Words_02 1797 0.70 1.03 0.56 176 URI_TRY_3LD 1783 0.95 1.86 0.55 177 XMPhish30 1776 0.77 1.26 0.55 178 XMLngstWrd_00 1756 0.50 0.39 0.54 179 MPART_ALT_DIFF_COUNT 1746 0.70 1.06 0.54 180 RELAYCOUNTRY_GB 1736 0.64 0.88 0.54 181 XM_B_DNDMA 1713 0.82 1.48 0.53 182 XMBSHREFv2 1712 0.46 0.29 0.53 183 MSGID_FROM_MTA_HEADER 1661 0.40 0.14 0.51 184 T_OBFU_PDF_ATTACH 1643 0.39 0.11 0.51 185 SUBJ_DOLLARS 1629 0.57 0.73 0.50 186 FORGED_GMAIL_RCVD 1619 0.57 0.73 0.50 187 HTML_FONT_FACE_BAD 1602 0.55 0.67 0.50 188 TO_NO_BRKTS_HTML_ONLY 1597 0.58 0.76 0.49 189 SpammyFromTLD_02 1576 1.05 2.34 0.49 190 XMClaimOffer 1554 0.47 0.45 0.48 191 XMLngstWrd_01 1549 0.44 0.36 0.48 192 TM2_M_OBFU_COMMENT 1548 0.55 0.70 0.48 193 XMSubMetaI_00 1514 0.59 0.88 0.47 194 T_STY_INVIS_DIRECT 1475 0.57 0.83 0.46 195 XMDateMe_00 1470 0.46 0.47 0.46 196 XMBody_17 1438 0.86 1.81 0.45 197 XMPhish14 1431 0.67 1.19 0.44 198 SHORT_HELO_AND_INLINE_IMAGE 1429 0.31 0.02 0.44 199 XMSolicitRefs_0 1392 0.60 0.98 0.43 200 LongTLD 1387 0.68 1.24 0.43 ----------------------------------------------------------------------