Email: 417886 Autolearn: 0 AvgScore: 5.38 AvgScanTime: 1.42 sec Spam: 133545 Autolearn: 0 AvgScore: 14.59 AvgScanTime: 1.56 sec Ham: 284341 Autolearn: 0 AvgScore: 1.06 AvgScanTime: 1.36 sec Time Spent Running SA: 164.84 hours Time Spent Processing Spam: 57.78 hours Time Spent Processing Ham: 107.06 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 131451 99.19 98.43 99.54 2 HTML_MESSAGE 126830 89.05 94.97 86.26 3 DKIM_SIGNED 118469 79.22 88.71 74.76 4 XM_DK_Pass 112876 77.08 84.52 73.58 5 XM_B_Unicode 112451 74.29 84.20 69.63 6 DKIM_VALID 111880 76.22 83.78 72.67 7 RELAYCOUNTRY_US 108120 81.40 80.96 81.61 8 DCC_CHECK 101428 52.43 75.95 41.39 9 XM_B_SpammyWords 92460 53.47 69.24 46.07 10 XMListUnsubscribeExists 89118 54.77 66.73 49.15 11 DKIM_VALID_AU 88397 61.48 66.19 59.27 12 XM_B_Unicode3 65390 43.22 48.96 40.52 13 LOC_TINY_FONT_1 61883 35.03 46.34 29.72 14 XM_DK_Undo_02 54137 16.36 40.54 5.01 15 BAYES_50 53206 54.03 39.84 60.69 16 XM_B_SpammyWords2 52265 26.32 39.14 20.30 17 HTML_FONT_LOW_CONTRAST 50250 31.92 37.63 29.24 18 FVGT_m_MULTI_ODD 44067 28.42 33.00 26.27 19 BAYES_99 42424 12.75 31.77 3.82 20 T_KAM_HTML_FONT_INVALID 41267 24.38 30.90 21.32 21 MIME_HTML_ONLY 40352 23.40 30.22 20.19 22 DKIM_VALID_EF 40303 29.40 30.18 29.04 23 TR_XM_DKIM_Undo 38200 10.60 28.60 2.14 24 XMSubLong 33276 23.74 24.92 23.19 25 BAYES_999 33076 9.90 24.77 2.92 26 TR_DCC_Bayes_99 30906 8.25 23.14 1.25 27 DCC_CHECK_NEGATIVE 30236 47.09 22.64 58.57 28 T_TM2_M_HEADER_IN_MSG 29766 28.16 22.29 30.92 29 XM_Multi_Part_URI 29654 16.95 22.21 14.48 30 TR_XM_DK_Unsub 29110 16.09 21.80 13.41 31 XM_B_Unsub 28455 13.78 21.31 10.25 32 TR_XM_BayesUnsub 27627 11.66 20.69 7.42 33 UNPARSEABLE_RELAY 24557 13.85 18.39 11.72 34 RELAYCOUNTRY_META 23644 8.03 17.70 3.48 35 RCVD_IN_MSPIKE_H2 23572 15.93 17.65 15.12 36 TR_MAX_INTL_RELAY 18779 8.74 14.06 6.25 37 LOTS_OF_MONEY 18692 8.68 14.00 6.19 38 XM_B_SpammyWords3 18594 8.10 13.92 5.37 39 TR_XM_SpammyRelay 17723 5.47 13.27 1.80 40 BOTNET_IPINHOSTNAME 17402 6.37 13.03 3.24 41 TR_XM_SpammyWords4 16754 6.86 12.55 4.19 42 FSL_BULK_SIG 15960 10.11 11.95 9.25 43 TR_XM_SpammyWords2 14870 3.87 11.13 0.45 44 RCVD_IN_BL_SPAMCOP_NET 14503 3.89 10.86 0.62 45 XM_Evil_Numbers_Gen 14411 10.52 10.79 10.40 46 TR_XM_UnparsRelay 12742 4.08 9.54 1.52 47 XM_B_Phish_Phrases 12501 7.38 9.36 6.44 48 RCVD_IN_MSPIKE_WL 12179 14.08 9.12 16.41 49 BOTNET 12120 3.75 9.08 1.25 50 BAYES_80 11854 5.49 8.88 3.90 51 BAYES_60 10873 7.38 8.14 7.02 52 LotsOfNums_01 9574 7.99 7.17 8.38 53 XMSubMetaSx_00 9469 4.71 7.09 3.59 54 XM_Body_Dirty_Words 9440 3.99 7.07 2.54 55 UNTRUSTED_Relay 9369 3.21 7.02 1.42 56 MPART_ALT_DIFF 9035 5.34 6.77 4.67 57 HTML_IMAGE_RATIO_04 8965 5.41 6.71 4.80 58 RELAYCOUNTRY_CA 8825 2.69 6.61 0.84 59 HTML_IMAGE_RATIO_02 8705 5.26 6.52 4.66 60 XM_B_PhoneNumber 8035 8.80 6.02 10.10 61 XM_UncommonTLD01 7557 4.66 5.66 4.19 62 XM_H_Long_From01 7357 5.84 5.51 5.99 63 XM_H_GMP 7350 5.72 5.50 5.82 64 TR_XM_SPAMCOP 6912 1.75 5.18 0.13 65 RCVD_IN_MSPIKE_BL 6800 1.97 5.09 0.50 66 TR_XM_MSPIKECOMBO 6800 1.97 5.09 0.50 67 DKIM_INVALID 6589 3.00 4.93 2.09 68 T_XMDrugObfuBody_14 6484 3.15 4.86 2.36 69 BAYES_95 6471 3.15 4.85 2.35 70 TooManyTo_001 6212 7.43 4.65 8.73 71 XMSexyCombo_05 6120 2.26 4.58 1.17 72 XM_B_Investor 6056 2.56 4.53 1.63 73 XMStrtUSub 6018 4.54 4.51 4.56 74 TR_XM_PhishingBody 5999 2.42 4.49 1.45 75 RCVD_IN_MSPIKE_H3 5755 6.26 4.31 7.18 76 MIME_HTML_MOSTLY 5726 3.08 4.29 2.51 77 RCVD_IN_VALIDITY_RPBL 5407 1.44 4.05 0.22 78 XM_B_SpammyTLD 5360 3.49 4.01 3.25 79 XMNumbers 5316 4.00 3.98 4.01 80 TM2_M_VERY_LONG_WORD 5310 3.44 3.98 3.18 81 TR_XM_NoHeaderRelay 5167 1.37 3.87 0.20 82 XM_CamelCaseFrm001 4813 2.55 3.60 2.05 83 MIME_HTML_ONLY_MULTI 4772 2.92 3.57 2.61 84 XM_UB50 4683 1.74 3.51 0.91 85 HTML_IMAGE_RATIO_06 4597 3.12 3.44 2.97 86 MIME_QP_LONG_LINE 4594 4.45 3.44 4.92 87 XM_OfRef6 4556 1.90 3.41 1.19 88 TR_XM_SpammyWords5 4449 1.98 3.33 1.35 89 TR_XM_SpammyWords3 4368 1.19 3.27 0.21 90 XM_URI_RBL 4308 1.22 3.23 0.27 91 T_XMDrugObfuBody_08 4166 2.08 3.12 1.59 92 XM_SPF_SoftFail 4000 1.84 3.00 1.30 93 XM_B_Unsub2 3996 1.82 2.99 1.27 94 HTML_IMAGE_RATIO_08 3963 2.40 2.97 2.14 95 XM_B_SpammyWords4 3771 1.41 2.82 0.74 96 RELAYCOUNTRY_AU 3750 1.36 2.81 0.68 97 URI_TRY_3LD 3708 1.35 2.78 0.67 98 RCVD_IN_VALIDITY_SAFE 3698 3.89 2.77 4.42 99 T_TooManySym_01 3698 4.90 2.77 5.89 100 RCVD_IN_MSPIKE_H4 3657 3.14 2.74 3.33 101 XMBody_17 3652 1.15 2.73 0.41 102 XM_B_URI_Unicode 3615 2.20 2.71 1.96 103 RCVD_IN_MSPIKE_L3 3360 0.93 2.52 0.19 104 XMDiploma_00 3319 1.66 2.49 1.28 105 T_FILL_THIS_FORM_SHORT 3235 1.26 2.42 0.71 106 TM2_M_URI_OPT_OUT 3204 2.03 2.40 1.86 107 FROM_EXCESS_BASE64 3111 1.89 2.33 1.69 108 RCVD_IN_VALIDITY_CERTIFIED 3015 3.09 2.26 3.48 109 USER_IN_DEF_DKIM_WL 3002 10.07 2.25 13.75 110 TR_LOTS_OF_MONEY3 2969 0.95 2.22 0.35 111 ALL_TRUSTED 2962 11.31 2.22 15.58 112 KHOP_HELO_FCRDNS 2898 2.19 2.17 2.20 113 TR_XM_INV_DKIM 2894 0.75 2.17 0.09 114 T_XMHurry_00 2870 1.11 2.15 0.62 115 BAYES_40 2838 4.23 2.13 5.22 116 RCVD_IN_MSPIKE_H5 2767 4.67 2.07 5.90 117 MAILING_LIST_MULTI 2665 2.57 2.00 2.83 118 XMStockSpam_06 2656 1.46 1.99 1.21 119 SpammyFromTLD_02 2540 1.11 1.90 0.74 120 XMBrknScrpt_02 2502 1.13 1.87 0.78 121 XM_DK_Undo_01 2328 1.63 1.74 1.58 122 DKIM_ADSP_NXDOMAIN 2176 0.72 1.63 0.29 123 T_XMDrugObfuBody_00 2132 1.42 1.60 1.33 124 MPART_ALT_DIFF_COUNT 2107 0.97 1.58 0.68 125 XMGenDplmaNmb 2101 0.98 1.57 0.70 126 T_REMOTE_IMAGE 2079 3.11 1.56 3.84 127 RCVD_IN_PSBL 2072 0.90 1.55 0.59 128 SpammyFromTLD_01 2042 0.94 1.53 0.66 129 RELAYCOUNTRY_FR 2017 0.70 1.51 0.33 130 BOUNCE_MESSAGE 1974 4.51 1.48 5.93 131 ANY_BOUNCE_MESSAGE 1974 4.51 1.48 5.93 132 XMPhish30 1954 0.81 1.46 0.51 133 SCC_BODY_URI_ONLY 1895 2.54 1.42 3.06 134 XM_SendGrid 1883 1.39 1.41 1.38 135 URI_HEX 1874 1.27 1.40 1.21 136 RDNS_DYNAMIC 1857 0.57 1.39 0.18 137 SHORTCIRCUIT 1855 0.44 1.39 0.00 138 RCVD_IN_ZEN_LASTEXTERNAL 1855 0.44 1.39 0.00 139 SUBJ_ALL_CAPS 1854 1.45 1.39 1.49 140 BAYES_20 1852 3.28 1.39 4.17 141 RCVD_IN_MSPIKE_L5 1825 0.53 1.37 0.13 142 PDS_RDNS_DYNAMIC_FP 1822 0.46 1.36 0.04 143 HTML_MIME_NO_HTML_TAG 1787 2.16 1.34 2.55 144 TR_XM_MSPIKECOMBO2 1768 0.43 1.32 0.01 145 TR_Symld_Words 1740 1.46 1.30 1.53 146 TR_Mismatch_TLD_02 1732 0.46 1.30 0.07 147 XM_H_Long_From02 1724 0.90 1.29 0.72 148 TR_XM_PHPForged 1695 0.67 1.27 0.39 149 TR_XM_FormFill2 1685 0.67 1.26 0.39 150 TR_XM_PHPDW 1680 0.68 1.26 0.40 151 XMSubMetaI_00 1658 0.74 1.24 0.50 152 XM_H_PHPOS 1652 0.65 1.24 0.38 153 XM_ProductURIs 1651 0.78 1.24 0.56 154 SHOPIFY_IMG_NOT_RCVD_SFY 1625 0.60 1.22 0.32 155 RCVD_IN_MSPIKE_L4 1617 0.51 1.21 0.19 156 XMBdyGiftCard01 1612 0.71 1.21 0.48 157 XM_B_COPY_HTML 1578 0.84 1.18 0.68 158 TVD_RCVD_IP 1572 1.03 1.18 0.97 159 DIET_1 1570 0.52 1.18 0.21 160 URI_NOVOWEL 1569 1.35 1.17 1.43 161 DKIM_ADSP_CUSTOM_MED 1560 0.94 1.17 0.83 162 TR_MetaPhish_Combo_01 1544 1.36 1.16 1.46 163 XM_HighProb1 1513 0.37 1.13 0.01 164 XM_DIRTYINTL 1505 0.42 1.13 0.09 165 XM_UB60 1489 0.40 1.11 0.06 166 RCVD_IN_IADB_LISTED 1480 2.89 1.11 3.73 167 HTTPS_HTTP_MISMATCH 1453 0.79 1.09 0.65 168 XM_H_Undi_Recip 1434 0.44 1.07 0.15 169 THIS_AD 1432 0.74 1.07 0.58 170 XM_B_Phish66 1427 0.54 1.07 0.30 171 T_TooManySym_02 1425 2.48 1.07 3.15 172 HTML_IMAGE_ONLY_20 1425 0.58 1.07 0.35 173 XMSexyCombo_01 1398 0.53 1.05 0.29 174 XM_B_DNDMA 1384 0.81 1.04 0.71 175 XM_UB99 1354 0.33 1.01 0.00 176 LongTLD 1338 0.62 1.00 0.45 177 TM2_M_OBFU_COMMENT 1338 0.65 1.00 0.48 178 TR_LOTS_OF_MONEY2 1325 0.43 0.99 0.16 179 T_MONEY_PERCENT 1325 0.43 0.99 0.16 180 XM_B_SEO 1321 0.46 0.99 0.21 181 T_FILL_THIS_FORM_FRAUD_PHISH 1320 0.36 0.99 0.06 182 NML_ADSP_CUSTOM_MED 1316 0.64 0.99 0.47 183 TR_XM_RelayPhish 1315 0.36 0.98 0.07 184 FILL_THIS_FORM 1310 0.73 0.98 0.61 185 HTML_FONT_TINY_NORDNS 1307 0.36 0.98 0.07 186 XM_B_COVIDMETA 1297 0.41 0.97 0.15 187 XMPhish14 1290 0.57 0.97 0.39 188 RELAYCOUNTRY_GB 1285 0.60 0.96 0.44 189 XMBody_78 1277 0.58 0.96 0.41 190 RCVD_IN_PBL 1272 0.82 0.95 0.75 191 RCVD_IN_IADB_SPF 1231 2.52 0.92 3.27 192 RCVD_IN_SBL_CSS 1224 0.31 0.92 0.03 193 TR_XM_DK_SendGrid 1219 0.90 0.91 0.89 194 HELO_DYNAMIC_SPLIT_IP 1212 0.29 0.91 0.00 195 RCVD_IN_IADB_DK 1166 2.20 0.87 2.82 196 RCVD_IN_XBL 1162 0.29 0.87 0.01 197 RCVD_IN_IADB_SENDERID 1157 2.26 0.87 2.91 198 TR_XM_SEO4 1156 0.33 0.87 0.07 199 FORGED_GMAIL_RCVD 1146 0.63 0.86 0.52 200 TooManyTo_002 1144 2.68 0.86 3.53 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 283043 99.19 98.43 99.54 2 HTML_MESSAGE 245280 89.05 94.97 86.26 3 RELAYCOUNTRY_US 232055 81.40 80.96 81.61 4 DKIM_SIGNED 212572 79.22 88.71 74.76 5 XM_DK_Pass 209212 77.08 84.52 73.58 6 DKIM_VALID 206620 76.22 83.78 72.67 7 XM_B_Unicode 197977 74.29 84.20 69.63 8 BAYES_50 172575 54.03 39.84 60.69 9 DKIM_VALID_AU 168520 61.48 66.19 59.27 10 DCC_CHECK_NEGATIVE 166547 47.09 22.64 58.57 11 XMListUnsubscribeExists 139746 54.77 66.73 49.15 12 XM_B_SpammyWords 130993 53.47 69.24 46.07 13 DCC_CHECK 117678 52.43 75.95 41.39 14 XM_B_Unicode3 115222 43.22 48.96 40.52 15 T_TM2_M_HEADER_IN_MSG 87912 28.16 22.29 30.92 16 LOC_TINY_FONT_1 84516 35.03 46.34 29.72 17 HTML_FONT_LOW_CONTRAST 83135 31.92 37.63 29.24 18 DKIM_VALID_EF 82572 29.40 30.18 29.04 19 FVGT_m_MULTI_ODD 74691 28.42 33.00 26.27 20 XMSubLong 65941 23.74 24.92 23.19 21 T_KAM_HTML_FONT_INVALID 60618 24.38 30.90 21.32 22 XM_B_SpammyWords2 57728 26.32 39.14 20.30 23 MIME_HTML_ONLY 57415 23.40 30.22 20.19 24 RCVD_IN_MSPIKE_WL 46669 14.08 9.12 16.41 25 ALL_TRUSTED 44301 11.31 2.22 15.58 26 RCVD_IN_MSPIKE_H2 42990 15.93 17.65 15.12 27 XM_Multi_Part_URI 41175 16.95 22.21 14.48 28 USER_IN_DEF_DKIM_WL 39093 10.07 2.25 13.75 29 TR_XM_DK_Unsub 38140 16.09 21.80 13.41 30 UNPARSEABLE_RELAY 33336 13.85 18.39 11.72 31 BAYES_00 30494 7.55 0.80 10.72 32 XM_Evil_Numbers_Gen 29564 10.52 10.79 10.40 33 XM_B_Unsub 29140 13.78 21.31 10.25 34 XM_B_PhoneNumber 28723 8.80 6.02 10.10 35 FSL_BULK_SIG 26290 10.11 11.95 9.25 36 TooManyTo_001 24828 7.43 4.65 8.73 37 LotsOfNums_01 23835 7.99 7.17 8.38 38 TR_XM_BayesUnsub 21088 11.66 20.69 7.42 39 RCVD_IN_MSPIKE_H3 20425 6.26 4.31 7.18 40 TR_XM_DK_Bayes 20056 4.98 0.55 7.05 41 BAYES_60 19968 7.38 8.14 7.02 42 XM_DKIMWhitelistDomains 19895 4.77 0.04 7.00 43 TR_XM_DK_Bayes1 19745 4.89 0.52 6.94 44 XM_B_Phish_Phrases 18325 7.38 9.36 6.44 45 TR_MAX_INTL_RELAY 17764 8.74 14.06 6.25 46 LOTS_OF_MONEY 17594 8.68 14.00 6.19 47 XM_H_Long_From01 17035 5.84 5.51 5.99 48 ANY_BOUNCE_MESSAGE 16858 4.51 1.48 5.93 49 BOUNCE_MESSAGE 16857 4.51 1.48 5.93 50 TR_XM_DK_Bayes2 16766 4.11 0.31 5.90 51 RCVD_IN_MSPIKE_H5 16764 4.67 2.07 5.90 52 T_TooManySym_01 16761 4.90 2.77 5.89 53 XM_H_GMP 16539 5.72 5.50 5.82 54 XM_B_SpammyWords3 15262 8.10 13.92 5.37 55 BAYES_40 14848 4.23 2.13 5.22 56 XM_DK_Undo_02 14239 16.36 40.54 5.01 57 MIME_QP_LONG_LINE 13999 4.45 3.44 4.92 58 HTML_IMAGE_RATIO_04 13639 5.41 6.71 4.80 59 MPART_ALT_DIFF 13285 5.34 6.77 4.67 60 HTML_IMAGE_RATIO_02 13264 5.26 6.52 4.66 61 XMStrtUSub 12969 4.54 4.51 4.56 62 XM_PDF 12879 3.31 0.71 4.53 63 RCVD_IN_VALIDITY_SAFE 12560 3.89 2.77 4.42 64 XM_UncommonTLD01 11918 4.66 5.66 4.19 65 TR_XM_SpammyWords4 11907 6.86 12.55 4.19 66 BAYES_20 11867 3.28 1.39 4.17 67 XMNumbers 11413 4.00 3.98 4.01 68 BAYES_80 11081 5.49 8.88 3.90 69 T_REMOTE_IMAGE 10923 3.11 1.56 3.84 70 BAYES_99 10849 12.75 31.77 3.82 71 RCVD_IN_IADB_LISTED 10613 2.89 1.11 3.73 72 XMSubMetaSx_00 10213 4.71 7.09 3.59 73 TooManyTo_002 10040 2.68 0.86 3.53 74 RCVD_IN_VALIDITY_CERTIFIED 9907 3.09 2.26 3.48 75 RELAYCOUNTRY_META 9906 8.03 17.70 3.48 76 RCVD_IN_MSPIKE_H4 9480 3.14 2.74 3.33 77 RCVD_IN_IADB_SPF 9297 2.52 0.92 3.27 78 XM_B_SpammyTLD 9228 3.49 4.01 3.25 79 BOTNET_IPINHOSTNAME 9222 6.37 13.03 3.24 80 TM2_M_VERY_LONG_WORD 9049 3.44 3.98 3.18 81 T_TooManySym_02 8950 2.48 1.07 3.15 82 SCC_BODY_URI_ONLY 8699 2.54 1.42 3.06 83 HTML_IMAGE_RATIO_06 8445 3.12 3.44 2.97 84 BAYES_999 8294 9.90 24.77 2.92 85 RCVD_IN_IADB_SENDERID 8270 2.26 0.87 2.91 86 MAILING_LIST_MULTI 8061 2.57 2.00 2.83 87 RCVD_IN_IADB_DK 8027 2.20 0.87 2.82 88 MIME_HTML_ONLY_MULTI 7426 2.92 3.57 2.61 89 HTML_MIME_NO_HTML_TAG 7250 2.16 1.34 2.55 90 XM_Body_Dirty_Words 7229 3.99 7.07 2.54 91 MIME_HTML_MOSTLY 7136 3.08 4.29 2.51 92 INVALID_MSGID 6995 1.75 0.25 2.46 93 RCVD_IN_IADB_VOUCHED 6935 1.85 0.59 2.44 94 T_XMDrugObfuBody_14 6698 3.15 4.86 2.36 95 BAYES_95 6677 3.15 4.85 2.35 96 TO_MALFORMED 6266 1.51 0.02 2.20 97 KHOP_HELO_FCRDNS 6247 2.19 2.17 2.20 98 TR_XM_DKIM_Undo 6079 10.60 28.60 2.14 99 HTML_IMAGE_RATIO_08 6072 2.40 2.97 2.14 100 BAYES_05 5975 1.69 0.83 2.10 101 DKIM_INVALID 5952 3.00 4.93 2.09 102 XM_CamelCaseFrm001 5842 2.55 3.60 2.05 103 XM_B_URI_Unicode 5566 2.20 2.71 1.96 104 TM2_M_URI_OPT_OUT 5297 2.03 2.40 1.86 105 MAY_BE_FORGED 5180 1.27 0.11 1.82 106 TR_XM_SpammyRelay 5132 5.47 13.27 1.80 107 RCVD_IN_IADB_OPTIN 4946 1.29 0.34 1.74 108 FROM_EXCESS_BASE64 4807 1.89 2.33 1.69 109 TooManyTo_003 4796 1.40 0.78 1.69 110 XMGappySubj_01 4675 1.18 0.18 1.64 111 XM_B_Investor 4623 2.56 4.53 1.63 112 T_XMDrugObfuBody_08 4525 2.08 3.12 1.59 113 XM_DK_Undo_01 4481 1.63 1.74 1.58 114 TR_Symld_Words 4343 1.46 1.30 1.53 115 TR_XM_UnparsRelay 4314 4.08 9.54 1.52 116 SUBJ_ALL_CAPS 4223 1.45 1.39 1.49 117 TR_MetaPhish_Combo_01 4139 1.36 1.16 1.46 118 TR_XM_PhishingBody 4110 2.42 4.49 1.45 119 URI_NOVOWEL 4060 1.35 1.17 1.43 120 UNTRUSTED_Relay 4043 3.21 7.02 1.42 121 HTML_IMAGE_ONLY_32 3987 1.00 0.13 1.40 122 IN_HORDE_ADDRESS_BOOK 3974 0.98 0.09 1.40 123 XM_SendGrid 3919 1.39 1.41 1.38 124 TR_XM_SpammyWords5 3828 1.98 3.33 1.35 125 T_XMDrugObfuBody_00 3792 1.42 1.60 1.33 126 XM_SPF_SoftFail 3696 1.84 3.00 1.30 127 TooManyTo_004 3678 1.11 0.72 1.29 128 XMDiploma_00 3630 1.66 2.49 1.28 129 XM_B_Unsub2 3618 1.82 2.99 1.27 130 BOTNET 3556 3.75 9.08 1.25 131 T_TooManySym_03 3553 1.00 0.47 1.25 132 TR_DCC_Bayes_99 3549 8.25 23.14 1.25 133 XM_GoogleGroups 3537 1.09 0.78 1.24 134 XM_B_FormFill 3490 0.85 0.03 1.23 135 XMStockSpam_06 3452 1.46 1.99 1.21 136 URI_HEX 3452 1.27 1.40 1.21 137 XM_OfRef6 3375 1.90 3.41 1.19 138 XMSexyCombo_05 3329 2.26 4.58 1.17 139 TVD_SPACE_RATIO 3113 0.81 0.21 1.09 140 HELO_NODOT 3000 0.75 0.09 1.06 141 HELO_NO_DOMAIN 2993 0.74 0.08 1.05 142 XM_ShortIntro_01 2988 0.81 0.30 1.05 143 TooManyTo_005 2979 0.93 0.69 1.05 144 FROM_GOV_DKIM_AU 2927 0.76 0.20 1.03 145 TVD_RCVD_IP 2753 1.03 1.18 0.97 146 XMCapTrack 2654 0.75 0.37 0.93 147 XM_UB50 2589 1.74 3.51 0.91 148 TR_XM_DK_SendGrid 2527 0.90 0.91 0.89 149 URI_OPTOUT_3LD 2488 0.77 0.54 0.88 150 RELAYCOUNTRY_CA 2401 2.69 6.61 0.84 151 XM_H_PHPMailer 2390 0.76 0.58 0.84 152 DKIM_ADSP_CUSTOM_MED 2356 0.94 1.17 0.83 153 T_TVD_MIME_NO_HEADERS 2354 0.62 0.17 0.83 154 XMGappySubj_02 2334 0.57 0.04 0.82 155 XMBrknScrpt_02 2220 1.13 1.87 0.78 156 RCVD_IN_PBL 2141 0.82 0.95 0.75 157 TR_XM_Base64_M1 2130 0.75 0.75 0.75 158 XM_B_SpammyWords4 2115 1.41 2.82 0.74 159 SpammyFromTLD_02 2097 1.11 1.90 0.74 160 XMBSHREFv2 2097 0.61 0.34 0.74 161 XM_H_Long_From02 2034 0.90 1.29 0.72 162 T_FILL_THIS_FORM_SHORT 2029 1.26 2.42 0.71 163 XM_B_DNDMA 2011 0.81 1.04 0.71 164 XMGenDplmaNmb 1997 0.98 1.57 0.70 165 RELAYCOUNTRY_AU 1947 1.36 2.81 0.68 166 MPART_ALT_DIFF_COUNT 1942 0.97 1.58 0.68 167 XM_B_COPY_HTML 1923 0.84 1.18 0.68 168 URI_TRY_3LD 1916 1.35 2.78 0.67 169 XM_RXBody 1912 0.60 0.46 0.67 170 SpammyFromTLD_01 1869 0.94 1.53 0.66 171 T_OBFU_PDF_ATTACH 1861 0.48 0.12 0.65 172 HTTPS_HTTP_MISMATCH 1857 0.79 1.09 0.65 173 XMLngstWrd_00 1788 0.60 0.53 0.63 174 T_XMHurry_00 1770 1.11 2.15 0.62 175 MIME_CHARSET_FARAWAY 1765 0.57 0.48 0.62 176 RCVD_IN_BL_SPAMCOP_NET 1751 3.89 10.86 0.62 177 FILL_THIS_FORM 1737 0.73 0.98 0.61 178 XMNoVowels 1729 0.56 0.45 0.61 179 RCVD_IN_PSBL 1685 0.90 1.55 0.59 180 THIS_AD 1656 0.74 1.07 0.58 181 XM_ProductURIs 1606 0.78 1.24 0.56 182 XMBody_95 1546 0.41 0.11 0.54 183 MSGID_FROM_MTA_HEADER 1497 0.42 0.19 0.53 184 XMLngstWrd_01 1484 0.50 0.44 0.52 185 FORGED_GMAIL_RCVD 1474 0.63 0.86 0.52 186 XMPhish30 1449 0.81 1.46 0.51 187 RCVD_IN_MSPIKE_BL 1435 1.97 5.09 0.50 188 TR_XM_MSPIKECOMBO 1432 1.97 5.09 0.50 189 XMSubMetaI_00 1423 0.74 1.24 0.50 190 HTML_FONT_FACE_BAD 1389 0.58 0.78 0.49 191 XMBdyGiftCard01 1373 0.71 1.21 0.48 192 TM2_M_OBFU_COMMENT 1368 0.65 1.00 0.48 193 HTML_TAG_BALANCE_BODY 1365 0.59 0.83 0.48 194 XMSlimDrugH 1364 0.50 0.54 0.48 195 NML_ADSP_CUSTOM_MED 1344 0.64 0.99 0.47 196 T_STY_INVIS_DIRECT 1343 0.57 0.78 0.47 197 T_Symld_Words_02 1309 0.57 0.82 0.46 198 TR_XM_SpammyWords2 1288 3.87 11.13 0.45 199 LongTLD 1273 0.62 1.00 0.45 200 CHARSET_FARAWAY_HEADER 1259 0.38 0.25 0.44 ----------------------------------------------------------------------