Email: 388705 Autolearn: 0 AvgScore: 4.89 AvgScanTime: 1.34 sec Spam: 115021 Autolearn: 0 AvgScore: 14.15 AvgScanTime: 1.51 sec Ham: 273684 Autolearn: 0 AvgScore: 1.00 AvgScanTime: 1.28 sec Time Spent Running SA: 145.10 hours Time Spent Processing Spam: 48.17 hours Time Spent Processing Ham: 96.93 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 113643 99.26 98.80 99.45 2 HTML_MESSAGE 107802 88.50 93.72 86.30 3 DKIM_SIGNED 100559 75.63 87.43 70.67 4 XM_DK_Pass 95917 73.74 83.39 69.68 5 DKIM_VALID 94969 72.82 82.57 68.72 6 XM_B_Unicode 94583 72.05 82.23 67.77 7 RELAYCOUNTRY_US 92617 81.47 80.52 81.87 8 DCC_CHECK 86486 50.41 75.19 40.00 9 XM_B_SpammyWords 77305 50.95 67.21 44.11 10 XMListUnsubscribeExists 75359 51.03 65.52 44.95 11 DKIM_VALID_AU 74762 58.65 65.00 55.99 12 XM_B_Unicode3 57676 44.19 50.14 41.68 13 LOC_TINY_FONT_1 54353 33.14 47.25 27.21 14 BAYES_50 47244 54.79 41.07 60.56 15 XM_DK_Undo_02 44304 14.48 38.52 4.37 16 XM_B_SpammyWords2 43786 24.44 38.07 18.72 17 HTML_FONT_LOW_CONTRAST 42301 33.28 36.78 31.81 18 DKIM_VALID_EF 36837 30.40 32.03 29.72 19 FVGT_m_MULTI_ODD 36536 26.02 31.76 23.60 20 MIME_HTML_ONLY 35558 24.03 30.91 21.13 21 BAYES_99 35405 11.53 30.78 3.44 22 T_KAM_HTML_FONT_INVALID 33436 21.93 29.07 18.93 23 TR_XM_DKIM_Undo 31852 9.32 27.69 1.59 24 BAYES_999 27360 8.85 23.79 2.57 25 DCC_CHECK_NEGATIVE 27334 49.26 23.76 59.97 26 XMSubLong 27169 22.35 23.62 21.81 27 TR_XM_DK_Unsub 25649 15.99 22.30 13.34 28 XM_Multi_Part_URI 25467 16.71 22.14 14.42 29 T_TM2_M_HEADER_IN_MSG 25207 28.96 21.92 31.92 30 TR_DCC_Bayes_99 25152 7.46 21.87 1.40 31 RCVD_IN_MSPIKE_H2 23676 16.70 20.58 15.07 32 UNPARSEABLE_RELAY 23248 14.96 20.21 12.75 33 XM_B_Unsub 21956 13.33 19.09 10.91 34 TR_XM_BayesUnsub 20885 10.60 18.16 7.43 35 RELAYCOUNTRY_META 20046 7.49 17.43 3.32 36 TR_MAX_INTL_RELAY 16522 8.33 14.36 5.79 37 XM_B_SpammyWords3 15162 7.20 13.18 4.69 38 TR_XM_SpammyRelay 14677 4.91 12.76 1.61 39 LOTS_OF_MONEY 13882 7.49 12.07 5.56 40 BOTNET_IPINHOSTNAME 13846 5.45 12.04 2.69 41 FSL_BULK_SIG 13360 9.94 11.62 9.24 42 TR_XM_UnparsRelay 12231 4.43 10.63 1.82 43 TR_XM_SpammyWords2 11896 3.40 10.34 0.49 44 TR_XM_SpammyWords4 11474 5.65 9.98 3.83 45 RCVD_IN_MSPIKE_WL 11243 13.96 9.77 15.72 46 BOTNET 10558 3.44 9.18 1.03 47 BAYES_80 10439 5.13 9.08 3.47 48 XM_Evil_Numbers_Gen 10121 11.01 8.80 11.94 49 RCVD_IN_BL_SPAMCOP_NET 9966 2.84 8.66 0.40 50 XM_B_Phish_Phrases 9479 6.18 8.24 5.31 51 BAYES_60 8890 7.02 7.73 6.72 52 UNTRUSTED_Relay 8735 3.39 7.59 1.63 53 XMSubMetaSx_00 8331 5.30 7.24 4.48 54 HTML_IMAGE_RATIO_02 8222 5.40 7.15 4.67 55 XM_Body_Dirty_Words 7963 3.61 6.92 2.21 56 LotsOfNums_01 7865 9.85 6.84 11.11 57 XM_H_Long_From01 7286 5.24 6.33 4.78 58 XM_B_PhoneNumber 6929 8.45 6.02 9.47 59 XM_H_GMP 6635 5.84 5.77 5.87 60 RELAYCOUNTRY_CA 6345 2.22 5.52 0.83 61 XM_UncommonTLD01 6267 4.56 5.45 4.19 62 XMSexyCombo_05 6025 3.06 5.24 2.15 63 MPART_ALT_DIFF 5970 4.66 5.19 4.43 64 RCVD_IN_MSPIKE_H3 5925 6.44 5.15 6.98 65 RCVD_IN_MSPIKE_BL 5881 2.02 5.11 0.72 66 TR_XM_MSPIKECOMBO 5879 2.02 5.11 0.72 67 XMStrtUSub 5800 5.51 5.04 5.71 68 BAYES_95 5641 3.08 4.90 2.31 69 DKIM_INVALID 5590 2.82 4.86 1.96 70 XM_B_Investor 5580 2.35 4.85 1.30 71 TR_XM_SPAMCOP 5430 1.48 4.72 0.11 72 HTML_IMAGE_RATIO_04 5393 4.09 4.69 3.83 73 XMNumbers 5370 5.05 4.67 5.21 74 TM2_M_VERY_LONG_WORD 5336 5.83 4.64 6.33 75 TooManyTo_001 4793 7.06 4.17 8.28 76 TR_XM_PhishingBody 4703 2.10 4.09 1.26 77 TR_XM_SpammyWords5 4620 2.43 4.02 1.76 78 XM_OfRef6 4452 1.95 3.87 1.14 79 T_XMDrugObfuBody_14 4406 2.39 3.83 1.79 80 XM_B_SpammyTLD 4400 2.92 3.83 2.54 81 MIME_HTML_MOSTLY 4390 2.87 3.82 2.47 82 XM_UB50 4373 1.86 3.80 1.05 83 XM_CamelCaseFrm001 4301 2.64 3.74 2.18 84 TR_XM_NoHeaderRelay 4284 1.22 3.72 0.17 85 XM_B_Unsub2 4047 1.98 3.52 1.33 86 RCVD_IN_VALIDITY_RPBL 3991 1.13 3.47 0.15 87 XM_SPF_SoftFail 3981 1.91 3.46 1.26 88 XM_URI_RBL 3928 1.22 3.42 0.30 89 TR_XM_SpammyWords3 3879 1.19 3.37 0.27 90 ALL_TRUSTED 3682 11.64 3.20 15.18 91 RCVD_IN_MSPIKE_L3 3647 1.29 3.17 0.50 92 RELAYCOUNTRY_AU 3539 1.20 3.08 0.41 93 MIME_QP_LONG_LINE 3538 3.94 3.08 4.30 94 HTML_IMAGE_RATIO_06 3488 2.79 3.03 2.69 95 MIME_HTML_ONLY_MULTI 3445 2.58 3.00 2.40 96 RCVD_IN_MSPIKE_H4 3201 3.12 2.78 3.26 97 TM2_M_URI_OPT_OUT 3163 1.94 2.75 1.61 98 XMDiploma_00 3071 1.66 2.67 1.24 99 XM_B_URI_Unicode 3058 1.91 2.66 1.59 100 T_FILL_THIS_FORM_SHORT 2988 1.31 2.60 0.77 101 FROM_EXCESS_BASE64 2904 1.97 2.52 1.73 102 T_TooManySym_01 2899 5.04 2.52 6.10 103 SCC_BODY_URI_ONLY 2804 2.49 2.44 2.51 104 T_XMDrugObfuBody_08 2731 1.74 2.37 1.47 105 KHOP_HELO_FCRDNS 2555 3.55 2.22 4.11 106 BAYES_40 2552 4.83 2.22 5.93 107 HTML_IMAGE_RATIO_08 2547 1.90 2.21 1.77 108 XMStockSpam_06 2484 1.55 2.16 1.29 109 HTML_MIME_NO_HTML_TAG 2387 2.60 2.08 2.82 110 TR_XM_INV_DKIM 2375 0.68 2.06 0.09 111 RCVD_IN_VALIDITY_SAFE 2357 3.48 2.05 4.09 112 SpammyFromTLD_02 2349 0.78 2.04 0.25 113 XM_B_SpammyWords4 2318 1.21 2.02 0.87 114 MAILING_LIST_MULTI 2279 2.48 1.98 2.68 115 T_XMHurry_00 2274 0.90 1.98 0.45 116 SUBJ_ALL_CAPS 2247 1.62 1.95 1.48 117 XMBody_17 2231 0.76 1.94 0.26 118 XMBrknScrpt_02 2131 1.18 1.85 0.89 119 RCVD_IN_MSPIKE_H5 2117 4.41 1.84 5.48 120 XM_B_SEO 2084 0.71 1.81 0.25 121 ANY_BOUNCE_MESSAGE 2027 7.22 1.76 9.51 122 BOUNCE_MESSAGE 2027 7.22 1.76 9.51 123 XM_PDF 2020 3.85 1.76 4.74 124 USER_IN_DEF_DKIM_WL 2007 9.49 1.74 12.74 125 SpammyFromTLD_01 1959 0.99 1.70 0.68 126 BAYES_20 1948 3.22 1.69 3.86 127 RCVD_IN_PSBL 1919 0.90 1.67 0.57 128 BOTNET_NORDNS 1890 0.49 1.64 0.01 129 TR_XM_MSPIKECOMBO2 1851 0.49 1.61 0.02 130 XM_SendGrid 1842 1.69 1.60 1.73 131 XMGenDplmaNmb 1832 0.85 1.59 0.54 132 XMPhish30 1822 0.73 1.58 0.37 133 TR_XM_SEO4 1806 0.54 1.57 0.11 134 RDNS_DYNAMIC 1794 0.58 1.56 0.17 135 XM_DK_Undo_01 1785 1.62 1.55 1.64 136 PDS_RDNS_DYNAMIC_FP 1751 0.47 1.52 0.03 137 THIS_AD 1736 0.75 1.51 0.43 138 T_XMDrugObfuBody_00 1735 0.94 1.51 0.70 139 RCVD_IN_VALIDITY_CERTIFIED 1733 2.73 1.51 3.25 140 SHOPIFY_IMG_NOT_RCVD_SFY 1726 0.66 1.50 0.30 141 URI_HEX 1714 1.11 1.49 0.94 142 RCVD_IN_PBL 1688 0.89 1.47 0.65 143 TR_XM_InvalidRelay 1682 0.44 1.46 0.01 144 XM_B_DNDMA 1657 0.93 1.44 0.71 145 RCVD_IN_XBL 1654 0.44 1.44 0.03 146 TVD_RCVD_IP 1645 1.04 1.43 0.88 147 T_REMOTE_IMAGE 1632 2.96 1.42 3.61 148 XM_H_Undi_Recip 1624 0.56 1.41 0.21 149 TR_MetaPhish_Combo_01 1578 1.53 1.37 1.60 150 RCVD_IN_SBL_CSS 1536 0.43 1.34 0.05 151 XM_B_COPY_HTML 1529 0.90 1.33 0.73 152 DIET_1 1528 0.62 1.33 0.32 153 XM_HighProb1 1526 0.39 1.33 0.00 154 TR_XM_MaxSPIKE 1449 0.38 1.26 0.01 155 RELAYCOUNTRY_FR 1449 0.55 1.26 0.25 156 XM_UB99 1443 0.37 1.25 0.00 157 XM_DIRTYINTL 1405 0.41 1.22 0.07 158 XM_H_Long_From02 1404 1.01 1.22 0.93 159 TR_XM_Base64_M1 1403 0.94 1.22 0.83 160 XMSubMetaI_00 1398 1.10 1.22 1.06 161 TR_XM_Undi_Recip19 1386 0.43 1.20 0.10 162 TR_Symld_Words 1352 1.42 1.18 1.53 163 MIME_CHARSET_FARAWAY 1352 2.30 1.18 2.78 164 DEAR_FRIEND 1347 0.38 1.17 0.05 165 URI_TRY_3LD 1342 0.95 1.17 0.86 166 TR_XM_Undi_RecipCombo2 1326 0.35 1.15 0.01 167 DKIM_ADSP_NXDOMAIN 1324 0.57 1.15 0.33 168 MPART_ALT_DIFF_COUNT 1292 0.65 1.12 0.45 169 TR_XM_RelayPhish 1292 0.38 1.12 0.07 170 HTML_IMAGE_ONLY_20 1286 0.58 1.12 0.36 171 TM2_M_OBFU_COMMENT 1282 0.54 1.11 0.29 172 MultiRelay_CC 1279 0.45 1.11 0.17 173 URI_NOVOWEL 1270 1.23 1.10 1.28 174 RELAYCOUNTRY_GB 1267 0.64 1.10 0.45 175 RCVD_IN_IADB_LISTED 1249 2.53 1.09 3.14 176 TR_XM_PHPForged 1248 0.54 1.09 0.31 177 TR_LOTS_OF_MONEY2 1240 0.43 1.08 0.16 178 T_MONEY_PERCENT 1240 0.43 1.08 0.16 179 HTTPS_HTTP_MISMATCH 1238 0.72 1.08 0.57 180 TR_XM_FormFill2 1232 0.54 1.07 0.31 181 TR_XM_PHPDW 1226 0.54 1.07 0.32 182 RCVD_IN_MSPIKE_L4 1217 0.46 1.06 0.21 183 XM_H_PHPOS 1199 0.52 1.04 0.30 184 DKIM_ADSP_CUSTOM_MED 1190 1.02 1.03 1.01 185 SHORTCIRCUIT 1179 0.30 1.03 0.00 186 T_STY_INVIS_DIRECT 1179 0.67 1.03 0.52 187 RCVD_IN_ZEN_LASTEXTERNAL 1179 0.30 1.03 0.00 188 T_Symld_Words_02 1178 0.71 1.02 0.57 189 XMSexyCombo_01 1169 0.43 1.02 0.18 190 CHARSET_FARAWAY_HEADER 1163 2.15 1.01 2.63 191 HELO_DYNAMIC_SPLIT_IP 1147 0.30 1.00 0.01 192 TR_XM_FormFill 1138 0.30 0.99 0.01 193 XMBdyGiftCard01 1134 0.79 0.99 0.71 194 XM_ProductURIs 1133 0.59 0.99 0.42 195 UNDISC_MONEY 1124 0.29 0.98 0.00 196 TR_XM_Base64_L1 1106 0.35 0.96 0.09 197 RCVD_IN_IADB_SPF 1085 2.22 0.94 2.76 198 TR_XM_Undi_Recip5 1077 0.28 0.94 0.00 199 XM_UB60 1040 0.33 0.90 0.09 200 TR_XM_Undi_Recip2 1037 0.27 0.90 0.01 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 272171 99.26 98.80 99.45 2 HTML_MESSAGE 236187 88.50 93.72 86.30 3 RELAYCOUNTRY_US 224061 81.47 80.52 81.87 4 DKIM_SIGNED 193422 75.63 87.43 70.67 5 XM_DK_Pass 190697 73.74 83.39 69.68 6 DKIM_VALID 188069 72.82 82.57 68.72 7 XM_B_Unicode 185487 72.05 82.23 67.77 8 BAYES_50 165743 54.79 41.07 60.56 9 DCC_CHECK_NEGATIVE 164141 49.26 23.76 59.97 10 DKIM_VALID_AU 153227 58.65 65.00 55.99 11 XMListUnsubscribeExists 123012 51.03 65.52 44.95 12 XM_B_SpammyWords 120724 50.95 67.21 44.11 13 XM_B_Unicode3 114085 44.19 50.14 41.68 14 DCC_CHECK 109462 50.41 75.19 40.00 15 T_TM2_M_HEADER_IN_MSG 87348 28.96 21.92 31.92 16 HTML_FONT_LOW_CONTRAST 87054 33.28 36.78 31.81 17 DKIM_VALID_EF 81337 30.40 32.03 29.72 18 LOC_TINY_FONT_1 74469 33.14 47.25 27.21 19 FVGT_m_MULTI_ODD 64595 26.02 31.76 23.60 20 XMSubLong 59699 22.35 23.62 21.81 21 MIME_HTML_ONLY 57842 24.03 30.91 21.13 22 T_KAM_HTML_FONT_INVALID 51807 21.93 29.07 18.93 23 XM_B_SpammyWords2 51232 24.44 38.07 18.72 24 RCVD_IN_MSPIKE_WL 43028 13.96 9.77 15.72 25 ALL_TRUSTED 41552 11.64 3.20 15.18 26 RCVD_IN_MSPIKE_H2 41241 16.70 20.58 15.07 27 XM_Multi_Part_URI 39468 16.71 22.14 14.42 28 TR_XM_DK_Unsub 36518 15.99 22.30 13.34 29 UNPARSEABLE_RELAY 34898 14.96 20.21 12.75 30 USER_IN_DEF_DKIM_WL 34866 9.49 1.74 12.74 31 XM_Evil_Numbers_Gen 32681 11.01 8.80 11.94 32 BAYES_00 31626 8.33 0.64 11.56 33 LotsOfNums_01 30409 9.85 6.84 11.11 34 XM_B_Unsub 29865 13.33 19.09 10.91 35 ANY_BOUNCE_MESSAGE 26027 7.22 1.76 9.51 36 BOUNCE_MESSAGE 26023 7.22 1.76 9.51 37 XM_B_PhoneNumber 25913 8.45 6.02 9.47 38 FSL_BULK_SIG 25286 9.94 11.62 9.24 39 TooManyTo_001 22649 7.06 4.17 8.28 40 TR_XM_BayesUnsub 20332 10.60 18.16 7.43 41 TR_XM_DK_Bayes 19830 5.25 0.50 7.25 42 TR_XM_DK_Bayes1 19431 5.15 0.50 7.10 43 RCVD_IN_MSPIKE_H3 19101 6.44 5.15 6.98 44 XM_DKIMWhitelistDomains 18873 4.88 0.10 6.90 45 BAYES_60 18385 7.02 7.73 6.72 46 TM2_M_VERY_LONG_WORD 17322 5.83 4.64 6.33 47 T_TooManySym_01 16685 5.04 2.52 6.10 48 TR_XM_DK_Bayes2 16460 4.36 0.41 6.01 49 BAYES_40 16235 4.83 2.22 5.93 50 XM_H_GMP 16061 5.84 5.77 5.87 51 TR_MAX_INTL_RELAY 15844 8.33 14.36 5.79 52 XMStrtUSub 15630 5.51 5.04 5.71 53 LOTS_OF_MONEY 15223 7.49 12.07 5.56 54 RCVD_IN_MSPIKE_H5 15011 4.41 1.84 5.48 55 HTML_IMAGE_ONLY_32 14878 3.90 0.25 5.44 56 MAY_BE_FORGED 14601 4.00 0.81 5.33 57 XM_B_Phish_Phrases 14528 6.18 8.24 5.31 58 XMNumbers 14257 5.05 4.67 5.21 59 XM_H_Long_From01 13073 5.24 6.33 4.78 60 XM_PDF 12961 3.85 1.76 4.74 61 XM_B_SpammyWords3 12826 7.20 13.18 4.69 62 HTML_IMAGE_RATIO_02 12783 5.40 7.15 4.67 63 XMSubMetaSx_00 12266 5.30 7.24 4.48 64 MPART_ALT_DIFF 12126 4.66 5.19 4.43 65 XM_DK_Undo_02 11969 14.48 38.52 4.37 66 MIME_QP_LONG_LINE 11766 3.94 3.08 4.30 67 XM_UncommonTLD01 11456 4.56 5.45 4.19 68 KHOP_HELO_FCRDNS 11238 3.55 2.22 4.11 69 RCVD_IN_VALIDITY_SAFE 11184 3.48 2.05 4.09 70 BAYES_20 10568 3.22 1.69 3.86 71 HTML_IMAGE_RATIO_04 10489 4.09 4.69 3.83 72 TR_XM_SpammyWords4 10475 5.65 9.98 3.83 73 TooManyTo_002 10352 2.88 0.74 3.78 74 T_REMOTE_IMAGE 9872 2.96 1.42 3.61 75 BAYES_80 9497 5.13 9.08 3.47 76 BAYES_99 9413 11.53 30.78 3.44 77 RELAYCOUNTRY_META 9079 7.49 17.43 3.32 78 RCVD_IN_MSPIKE_H4 8916 3.12 2.78 3.26 79 RCVD_IN_VALIDITY_CERTIFIED 8892 2.73 1.51 3.25 80 T_TooManySym_02 8846 2.49 0.71 3.23 81 RCVD_IN_IADB_LISTED 8592 2.53 1.09 3.14 82 HTML_MIME_NO_HTML_TAG 7723 2.60 2.08 2.82 83 MIME_CHARSET_FARAWAY 7607 2.30 1.18 2.78 84 RCVD_IN_IADB_SPF 7562 2.22 0.94 2.76 85 HTML_IMAGE_RATIO_06 7371 2.79 3.03 2.69 86 BOTNET_IPINHOSTNAME 7352 5.45 12.04 2.69 87 MAILING_LIST_MULTI 7344 2.48 1.98 2.68 88 CHARSET_FARAWAY_HEADER 7196 2.15 1.01 2.63 89 BAYES_999 7035 8.85 23.79 2.57 90 XM_B_SpammyTLD 6956 2.92 3.83 2.54 91 SCC_BODY_URI_ONLY 6872 2.49 2.44 2.51 92 INVALID_MSGID 6836 1.85 0.31 2.50 93 MIME_HTML_MOSTLY 6755 2.87 3.82 2.47 94 RCVD_IN_IADB_SENDERID 6704 1.99 0.90 2.45 95 MIME_HTML_ONLY_MULTI 6572 2.58 3.00 2.40 96 RCVD_IN_IADB_DK 6462 1.93 0.90 2.36 97 BAYES_95 6335 3.08 4.90 2.31 98 TO_MALFORMED 6258 1.61 0.02 2.29 99 XM_Body_Dirty_Words 6059 3.61 6.92 2.21 100 XM_CamelCaseFrm001 5979 2.64 3.74 2.18 101 XMSexyCombo_05 5875 3.06 5.24 2.15 102 BAYES_05 5868 1.76 0.86 2.14 103 RCVD_IN_IADB_VOUCHED 5691 1.62 0.52 2.08 104 DKIM_INVALID 5353 2.82 4.86 1.96 105 XM_B_FormFill 5049 1.31 0.04 1.84 106 TR_XM_UnparsRelay 4981 4.43 10.63 1.82 107 T_XMDrugObfuBody_14 4886 2.39 3.83 1.79 108 HTML_IMAGE_RATIO_08 4856 1.90 2.21 1.77 109 TR_XM_SpammyWords5 4815 2.43 4.02 1.76 110 FROM_EXCESS_BASE64 4742 1.97 2.52 1.73 111 XM_SendGrid 4733 1.69 1.60 1.73 112 XMLngstWrd_00 4673 1.34 0.48 1.71 113 XM_DK_Undo_01 4501 1.62 1.55 1.64 114 UNTRUSTED_Relay 4451 3.39 7.59 1.63 115 TR_XM_SpammyRelay 4419 4.91 12.76 1.61 116 TM2_M_URI_OPT_OUT 4394 1.94 2.75 1.61 117 TR_MetaPhish_Combo_01 4377 1.53 1.37 1.60 118 TR_XM_DKIM_Undo 4356 9.32 27.69 1.59 119 XM_B_URI_Unicode 4348 1.91 2.66 1.59 120 TR_Symld_Words 4183 1.42 1.18 1.53 121 RCVD_IN_IADB_OPTIN 4143 1.16 0.31 1.51 122 SUBJ_ALL_CAPS 4057 1.62 1.95 1.48 123 T_XMDrugObfuBody_08 4014 1.74 2.37 1.47 124 TR_DCC_Bayes_99 3845 7.46 21.87 1.40 125 TooManyTo_003 3819 1.17 0.63 1.40 126 XM_B_Unsub2 3645 1.98 3.52 1.33 127 XM_B_Investor 3566 2.35 4.85 1.30 128 XMStockSpam_06 3543 1.55 2.16 1.29 129 IN_HORDE_ADDRESS_BOOK 3540 0.93 0.08 1.29 130 URI_NOVOWEL 3507 1.23 1.10 1.28 131 T_TooManySym_03 3493 1.01 0.39 1.28 132 T_TVD_MIME_NO_HEADERS 3493 0.91 0.04 1.28 133 TR_XM_PhishingBody 3443 2.10 4.09 1.26 134 XM_SPF_SoftFail 3443 1.91 3.46 1.26 135 XMDiploma_00 3399 1.66 2.67 1.24 136 TVD_SPACE_RATIO 3308 0.93 0.27 1.21 137 XM_OfRef6 3120 1.95 3.87 1.14 138 XM_GoogleGroups 2998 1.00 0.79 1.10 139 TooManyTo_004 2946 0.92 0.56 1.08 140 XMSubMetaI_00 2895 1.10 1.22 1.06 141 XM_UB50 2869 1.86 3.80 1.05 142 XMGappySubj_01 2866 0.82 0.27 1.05 143 T_OBFU_PDF_ATTACH 2835 0.95 0.76 1.04 144 BOTNET 2817 3.44 9.18 1.03 145 TR_XM_DK_SendGrid 2811 0.93 0.71 1.03 146 DKIM_ADSP_CUSTOM_MED 2767 1.02 1.03 1.01 147 HELO_NODOT 2624 0.73 0.18 0.96 148 HELO_NO_DOMAIN 2619 0.73 0.18 0.96 149 URI_HEX 2582 1.11 1.49 0.94 150 XM_H_Long_From02 2541 1.01 1.22 0.93 151 XM_ShortIntro_01 2528 0.76 0.37 0.92 152 URI_OPTOUT_3LD 2526 0.83 0.60 0.92 153 XMCapTrack 2521 0.77 0.43 0.92 154 XMBrknScrpt_02 2447 1.18 1.85 0.89 155 TooManyTo_005 2419 0.77 0.51 0.88 156 TVD_RCVD_IP 2403 1.04 1.43 0.88 157 XM_B_SpammyWords4 2370 1.21 2.02 0.87 158 XM_H_PHPMailer 2365 0.79 0.63 0.86 159 URI_TRY_3LD 2345 0.95 1.17 0.86 160 RELAYCOUNTRY_CA 2285 2.22 5.52 0.83 161 TR_XM_Base64_M1 2262 0.94 1.22 0.83 162 T_FILL_THIS_FORM_SHORT 2097 1.31 2.60 0.77 163 XM_B_COPY_HTML 1987 0.90 1.33 0.73 164 RCVD_IN_MSPIKE_BL 1973 2.02 5.11 0.72 165 XMGappySubj_02 1972 0.53 0.07 0.72 166 TR_XM_MSPIKECOMBO 1971 2.02 5.11 0.72 167 XM_B_DNDMA 1945 0.93 1.44 0.71 168 XMBdyGiftCard01 1930 0.79 0.99 0.71 169 T_XMDrugObfuBody_00 1919 0.94 1.51 0.70 170 FORGED_GMAIL_RCVD 1885 0.70 0.73 0.69 171 SpammyFromTLD_01 1874 0.99 1.70 0.68 172 RCVD_IN_PBL 1772 0.89 1.47 0.65 173 FILL_THIS_FORM 1663 0.58 0.50 0.61 174 XMBSHREFv2 1655 0.52 0.33 0.60 175 XMNoVowels 1638 0.64 0.75 0.60 176 TRACKER_ID 1575 0.44 0.11 0.58 177 RCVD_IN_PSBL 1571 0.90 1.67 0.57 178 HTTPS_HTTP_MISMATCH 1567 0.72 1.08 0.57 179 T_Symld_Words_02 1565 0.71 1.02 0.57 180 FROM_GOV_DKIM_AU 1494 0.44 0.18 0.55 181 T_MANY_PILL_PRICE 1477 0.38 0.02 0.54 182 XMGenDplmaNmb 1467 0.85 1.59 0.54 183 NML_ADSP_CUSTOM_MED 1438 0.63 0.88 0.53 184 T_STY_INVIS_DIRECT 1421 0.67 1.03 0.52 185 MSGID_FROM_MTA_HEADER 1414 0.44 0.25 0.52 186 RCVD_IN_MSPIKE_L3 1378 1.29 3.17 0.50 187 XMLngstWrd_01 1359 0.46 0.38 0.50 188 TR_XM_SpammyWords2 1334 3.40 10.34 0.49 189 XMMoneyMeta_00 1323 0.53 0.65 0.48 190 XMBody_95 1293 0.38 0.16 0.47 191 XMSubNoVowel 1263 0.47 0.50 0.46 192 T_XMHurry_00 1243 0.90 1.98 0.45 193 MPART_ALT_DIFF_COUNT 1238 0.65 1.12 0.45 194 RELAYCOUNTRY_GB 1227 0.64 1.10 0.45 195 THIS_AD 1177 0.75 1.51 0.43 196 XMSlimDrugH 1171 0.49 0.63 0.43 197 HTML_TAG_BALANCE_BODY 1162 0.55 0.83 0.42 198 XM_ProductURIs 1142 0.59 0.99 0.42 199 RELAYCOUNTRY_AU 1135 1.20 3.08 0.41 200 TM2_M_BODY_EMPTY 1111 0.31 0.08 0.41 ----------------------------------------------------------------------