Email: 441525 Autolearn: 0 AvgScore: 4.99 AvgScanTime: 1.39 sec Spam: 134714 Autolearn: 0 AvgScore: 14.59 AvgScanTime: 1.54 sec Ham: 306811 Autolearn: 0 AvgScore: 0.78 AvgScanTime: 1.32 sec Time Spent Running SA: 169.98 hours Time Spent Processing Spam: 57.53 hours Time Spent Processing Ham: 112.45 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 132315 99.08 98.22 99.46 2 HTML_MESSAGE 127709 89.23 94.80 86.78 3 DKIM_SIGNED 119961 79.31 89.05 75.03 4 XM_DK_Pass 114331 77.26 84.87 73.91 5 DKIM_VALID 113385 76.33 84.17 72.90 6 XM_B_Unicode 112539 73.79 83.54 69.51 7 RELAYCOUNTRY_US 110182 81.69 81.79 81.65 8 DCC_CHECK 100916 50.68 74.91 40.04 9 XM_B_SpammyWords 92182 52.11 68.43 44.94 10 XMListUnsubscribeExists 90831 53.60 67.43 47.53 11 DKIM_VALID_AU 89990 61.20 66.80 58.74 12 XM_B_Unicode3 67687 42.86 50.24 39.62 13 LOC_TINY_FONT_1 65294 33.94 48.47 27.57 14 XM_DK_Undo_02 55378 15.97 41.11 4.93 15 BAYES_50 55222 54.68 40.99 60.68 16 XM_B_SpammyWords2 53938 25.04 40.04 18.46 17 HTML_FONT_LOW_CONTRAST 51351 30.40 38.12 27.01 18 FVGT_m_MULTI_ODD 47557 28.67 35.30 25.75 19 DKIM_VALID_EF 43816 31.38 32.53 30.88 20 BAYES_99 41295 11.82 30.65 3.54 21 MIME_HTML_ONLY 39515 23.23 29.33 20.54 22 TR_XM_DKIM_Undo 39125 10.15 29.04 1.86 23 T_KAM_HTML_FONT_INVALID 38680 23.87 28.71 21.75 24 XMSubLong 33733 23.58 25.04 22.94 25 BAYES_999 31787 9.08 23.60 2.70 26 DCC_CHECK_NEGATIVE 31651 48.81 23.49 59.92 27 TR_XM_DK_Unsub 31099 16.47 23.09 13.56 28 XM_Multi_Part_URI 29622 16.55 21.99 14.17 29 T_TM2_M_HEADER_IN_MSG 29222 27.78 21.69 30.45 30 TR_DCC_Bayes_99 28841 7.51 21.41 1.41 31 XM_B_Unsub 25705 13.59 19.08 11.17 32 RCVD_IN_MSPIKE_H2 25206 16.32 18.71 15.27 33 UNPARSEABLE_RELAY 25185 13.73 18.70 11.56 34 TR_XM_BayesUnsub 24679 11.29 18.32 8.21 35 RELAYCOUNTRY_META 22636 7.72 16.80 3.74 36 XM_B_SpammyWords3 18639 7.46 13.84 4.66 37 TR_MAX_INTL_RELAY 18608 8.36 13.81 5.97 38 LOTS_OF_MONEY 17706 8.43 13.14 6.36 39 BOTNET_IPINHOSTNAME 17654 6.08 13.10 3.00 40 TR_XM_SpammyRelay 16350 5.01 12.14 1.88 41 TR_XM_SpammyWords4 15783 6.48 11.72 4.18 42 RCVD_IN_MSPIKE_WL 14202 15.80 10.54 18.11 43 FSL_BULK_SIG 14092 9.38 10.46 8.91 44 TR_XM_SpammyWords2 13983 3.48 10.38 0.45 45 RCVD_IN_BL_SPAMCOP_NET 13829 3.61 10.27 0.69 46 XM_Evil_Numbers_Gen 13056 9.19 9.69 8.97 47 TR_XM_UnparsRelay 12855 4.03 9.54 1.62 48 BOTNET 12710 3.74 9.43 1.23 49 XM_B_Phish_Phrases 12708 6.78 9.43 5.61 50 BAYES_80 11460 5.16 8.51 3.69 51 BAYES_60 10502 7.06 7.80 6.74 52 XMSubMetaSx_00 10094 4.90 7.49 3.76 53 LotsOfNums_01 9671 8.20 7.18 8.65 54 XM_B_PhoneNumber 9620 10.43 7.14 11.87 55 XM_Body_Dirty_Words 9293 3.67 6.90 2.25 56 XM_H_Long_From01 9070 6.35 6.73 6.18 57 UNTRUSTED_Relay 8954 3.08 6.65 1.51 58 HTML_IMAGE_RATIO_02 8684 5.21 6.45 4.66 59 MPART_ALT_DIFF 8251 5.08 6.12 4.62 60 TR_XM_SPAMCOP 8215 2.00 6.10 0.21 61 RCVD_IN_MSPIKE_H3 8152 7.83 6.05 8.61 62 RELAYCOUNTRY_CA 7673 2.39 5.70 0.94 63 XM_UncommonTLD01 7485 4.76 5.56 4.40 64 XM_B_Investor 7482 2.79 5.55 1.57 65 XM_H_GMP 7320 5.96 5.43 6.19 66 XMStrtUSub 7154 5.20 5.31 5.16 67 HTML_IMAGE_RATIO_04 6914 4.49 5.13 4.21 68 BAYES_95 6714 3.10 4.98 2.28 69 DKIM_INVALID 6576 2.98 4.88 2.14 70 TR_XM_PhishingBody 6345 2.64 4.71 1.73 71 TooManyTo_001 6154 7.82 4.57 9.24 72 TR_XM_SpammyWords5 5971 2.19 4.43 1.20 73 HTML_IMAGE_RATIO_06 5802 3.84 4.31 3.63 74 XMSexyCombo_05 5784 2.18 4.29 1.25 75 RCVD_IN_MSPIKE_BL 5628 1.82 4.18 0.79 76 TR_XM_MSPIKECOMBO 5628 1.82 4.18 0.79 77 XMNumbers 5499 4.20 4.08 4.26 78 MIME_HTML_MOSTLY 5240 2.85 3.89 2.39 79 XM_B_SpammyTLD 5232 3.00 3.88 2.61 80 T_XMDrugObfuBody_14 5203 2.52 3.86 1.92 81 TM2_M_VERY_LONG_WORD 5181 2.44 3.85 1.82 82 XM_B_Unsub2 4809 2.22 3.57 1.63 83 XM_SPF_SoftFail 4807 2.14 3.57 1.51 84 XM_CamelCaseFrm001 4610 2.37 3.42 1.90 85 XM_OfRef6 4490 1.79 3.33 1.11 86 MIME_HTML_ONLY_MULTI 4397 2.80 3.26 2.59 87 XM_UB50 4342 1.66 3.22 0.97 88 T_XMDrugObfuBody_08 4061 1.99 3.01 1.54 89 XM_URI_RBL 4008 1.11 2.98 0.30 90 TR_XM_SpammyWords3 3963 1.12 2.94 0.32 91 XMBody_17 3906 1.21 2.90 0.47 92 RELAYCOUNTRY_AU 3897 1.28 2.89 0.57 93 RCVD_IN_MSPIKE_L3 3837 1.24 2.85 0.53 94 TR_XM_NoHeaderRelay 3803 0.96 2.82 0.14 95 XMDiploma_00 3687 2.08 2.74 1.79 96 MIME_QP_LONG_LINE 3658 4.48 2.72 5.26 97 TM2_M_URI_OPT_OUT 3641 2.11 2.70 1.85 98 HTML_IMAGE_RATIO_08 3637 2.34 2.70 2.18 99 XM_B_URI_Unicode 3571 1.99 2.65 1.70 100 T_FILL_THIS_FORM_SHORT 3552 1.50 2.64 1.00 101 T_TooManySym_01 3390 4.88 2.52 5.91 102 RCVD_IN_MSPIKE_H4 3325 3.27 2.47 3.63 103 RCVD_IN_VALIDITY_RPBL 3179 0.80 2.36 0.12 104 MAILING_LIST_MULTI 3095 2.68 2.30 2.85 105 TR_XM_INV_DKIM 3078 0.77 2.28 0.10 106 XM_B_SpammyWords4 2996 1.11 2.22 0.62 107 ALL_TRUSTED 2937 11.24 2.18 15.22 108 USER_IN_DEF_DKIM_WL 2903 9.53 2.15 12.77 109 BAYES_40 2782 4.44 2.07 5.49 110 XMStockSpam_06 2768 1.44 2.05 1.17 111 RCVD_IN_VALIDITY_SAFE 2760 3.29 2.05 3.83 112 T_REMOTE_IMAGE 2742 3.33 2.04 3.90 113 RCVD_IN_MSPIKE_H5 2725 4.69 2.02 5.87 114 SUBJ_ALL_CAPS 2648 1.56 1.97 1.38 115 T_XMDrugObfuBody_00 2615 1.19 1.94 0.85 116 SpammyFromTLD_02 2597 0.90 1.93 0.45 117 FROM_EXCESS_BASE64 2475 1.74 1.84 1.70 118 SpammyFromTLD_01 2465 1.08 1.83 0.75 119 T_XMHurry_00 2433 0.95 1.81 0.58 120 XMBrknScrpt_02 2420 1.10 1.80 0.79 121 KHOP_HELO_FCRDNS 2183 1.71 1.62 1.75 122 XM_DK_Undo_01 2181 1.82 1.62 1.91 123 XM_H_Long_From02 2180 1.07 1.62 0.84 124 RCVD_IN_VALIDITY_CERTIFIED 2147 2.85 1.59 3.40 125 SHORTCIRCUIT 2127 0.48 1.58 0.00 126 HTML_MIME_NO_HTML_TAG 2127 2.40 1.58 2.76 127 RCVD_IN_ZEN_LASTEXTERNAL 2127 0.48 1.58 0.00 128 XM_B_SEO 2049 0.65 1.52 0.27 129 XMPhish30 2019 0.88 1.50 0.60 130 URI_HEX 1978 1.32 1.47 1.26 131 XM_SendGrid 1958 1.60 1.45 1.66 132 BAYES_20 1954 3.15 1.45 3.89 133 URI_NOVOWEL 1909 1.47 1.42 1.50 134 TR_MetaPhish_Combo_01 1889 1.50 1.40 1.55 135 TR_XM_SEO4 1844 0.51 1.37 0.13 136 RELAYCOUNTRY_GB 1843 0.82 1.37 0.58 137 XMGenDplmaNmb 1790 0.96 1.33 0.79 138 RCVD_IN_PBL 1782 0.95 1.32 0.79 139 SCC_BODY_URI_ONLY 1782 2.17 1.32 2.54 140 XM_ProductURIs 1779 0.75 1.32 0.50 141 RCVD_IN_SBL_CSS 1703 0.42 1.26 0.05 142 TM2_M_OBFU_COMMENT 1691 0.66 1.26 0.40 143 TR_Symld_Words 1682 1.38 1.25 1.44 144 XM_B_Phish66 1671 0.58 1.24 0.29 145 TR_XM_InvalidRelay 1666 0.38 1.24 0.01 146 URI_TRY_3LD 1661 0.77 1.23 0.56 147 TR_LOTS_OF_MONEY3 1654 0.55 1.23 0.26 148 RELAYCOUNTRY_FR 1644 0.58 1.22 0.29 149 TR_XM_RelayPhish 1615 0.41 1.20 0.07 150 MPART_ALT_DIFF_COUNT 1607 0.78 1.19 0.59 151 XM_B_DNDMA 1599 0.69 1.19 0.47 152 XMSexyCombo_01 1559 0.46 1.16 0.15 153 XM_HighProb1 1555 0.36 1.15 0.01 154 TR_LOTS_OF_MONEY2 1552 0.48 1.15 0.19 155 T_MONEY_PERCENT 1552 0.48 1.15 0.19 156 RDNS_DYNAMIC 1549 0.47 1.15 0.17 157 XM_UB99 1540 0.35 1.14 0.00 158 RCVD_IN_IADB_LISTED 1529 3.06 1.13 3.90 159 TR_XM_MSPIKECOMBO2 1517 0.35 1.13 0.01 160 URIBL_BLACK 1506 0.35 1.12 0.02 161 PDS_RDNS_DYNAMIC_FP 1504 0.37 1.12 0.05 162 HTML_IMAGE_ONLY_20 1492 0.60 1.11 0.37 163 BOTNET_NORDNS 1485 0.34 1.10 0.01 164 DIET_1 1482 0.52 1.10 0.26 165 BAYES_00 1479 8.28 1.10 11.43 166 XM_OfRef7 1472 0.51 1.09 0.25 167 XM_B_COVIDMETA 1470 0.48 1.09 0.20 168 XMBody_78 1467 0.69 1.09 0.52 169 HTTPS_HTTP_MISMATCH 1457 0.87 1.08 0.77 170 SHOPIFY_IMG_NOT_RCVD_SFY 1447 0.48 1.07 0.21 171 XM_DIRTYINTL 1435 0.36 1.07 0.05 172 XM_B_COPY_HTML 1428 0.86 1.06 0.78 173 XMHTML_After_End 1426 0.62 1.06 0.43 174 RCVD_IN_PSBL 1420 0.58 1.05 0.37 175 RCVD_IN_XBL 1402 0.33 1.04 0.02 176 XMBdyGiftCard01 1401 0.68 1.04 0.52 177 XM_H_Undi_Recip 1386 0.42 1.03 0.15 178 DKIM_ADSP_CUSTOM_MED 1354 0.91 1.01 0.87 179 XMMoneyMeta_00 1353 0.69 1.00 0.55 180 RCVD_IN_IADB_SPF 1319 2.65 0.98 3.39 181 T_Symld_Words_02 1307 0.82 0.97 0.76 182 TR_XM_DK_SendGrid 1294 0.96 0.96 0.96 183 XMReplyNow 1292 0.47 0.96 0.26 184 ANY_BOUNCE_MESSAGE 1285 3.11 0.95 4.05 185 BOUNCE_MESSAGE 1283 3.10 0.95 4.05 186 TR_XM_PHPForged 1281 0.54 0.95 0.36 187 MultiRelay_CC 1278 0.39 0.95 0.15 188 XM_PDF 1255 3.71 0.93 4.93 189 XMSubMetaI_00 1253 0.76 0.93 0.68 190 TR_XM_FormFill2 1250 0.53 0.93 0.36 191 DKIM_ADSP_NXDOMAIN 1244 0.60 0.92 0.46 192 TR_XM_PHPDW 1243 0.53 0.92 0.36 193 TM2_M_A_HREF_HREF 1243 0.48 0.92 0.29 194 RCVD_IN_IADB_DK 1241 2.29 0.92 2.89 195 TVD_RCVD_IP 1234 0.93 0.92 0.93 196 RCVD_IN_IADB_SENDERID 1229 2.36 0.91 3.00 197 XM_H_PHPOS 1222 0.52 0.91 0.34 198 XMPhish14 1207 0.60 0.90 0.47 199 XMPhish08 1186 0.45 0.88 0.26 200 XM_UB60 1179 0.31 0.88 0.06 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 305144 99.08 98.22 99.46 2 HTML_MESSAGE 266256 89.23 94.80 86.78 3 RELAYCOUNTRY_US 250513 81.69 81.79 81.65 4 DKIM_SIGNED 230214 79.31 89.05 75.03 5 XM_DK_Pass 226770 77.26 84.87 73.91 6 DKIM_VALID 223650 76.33 84.17 72.90 7 XM_B_Unicode 213264 73.79 83.54 69.51 8 BAYES_50 186188 54.68 40.99 60.68 9 DCC_CHECK_NEGATIVE 183840 48.81 23.49 59.92 10 DKIM_VALID_AU 180215 61.20 66.80 58.74 11 XMListUnsubscribeExists 145818 53.60 67.43 47.53 12 XM_B_SpammyWords 137893 52.11 68.43 44.94 13 DCC_CHECK 122837 50.68 74.91 40.04 14 XM_B_Unicode3 121560 42.86 50.24 39.62 15 DKIM_VALID_EF 94738 31.38 32.53 30.88 16 T_TM2_M_HEADER_IN_MSG 93416 27.78 21.69 30.45 17 LOC_TINY_FONT_1 84579 33.94 48.47 27.57 18 HTML_FONT_LOW_CONTRAST 82867 30.40 38.12 27.01 19 FVGT_m_MULTI_ODD 79019 28.67 35.30 25.75 20 XMSubLong 70374 23.58 25.04 22.94 21 T_KAM_HTML_FONT_INVALID 66724 23.87 28.71 21.75 22 MIME_HTML_ONLY 63034 23.23 29.33 20.54 23 XM_B_SpammyWords2 56635 25.04 40.04 18.46 24 RCVD_IN_MSPIKE_WL 55560 15.80 10.54 18.11 25 RCVD_IN_MSPIKE_H2 46858 16.32 18.71 15.27 26 ALL_TRUSTED 46683 11.24 2.18 15.22 27 XM_Multi_Part_URI 43470 16.55 21.99 14.17 28 TR_XM_DK_Unsub 41613 16.47 23.09 13.56 29 USER_IN_DEF_DKIM_WL 39178 9.53 2.15 12.77 30 XM_B_PhoneNumber 36413 10.43 7.14 11.87 31 UNPARSEABLE_RELAY 35458 13.73 18.70 11.56 32 BAYES_00 35069 8.28 1.10 11.43 33 XM_B_Unsub 34278 13.59 19.08 11.17 34 TooManyTo_001 28357 7.82 4.57 9.24 35 XM_Evil_Numbers_Gen 27514 9.19 9.69 8.97 36 FSL_BULK_SIG 27327 9.38 10.46 8.91 37 LotsOfNums_01 26538 8.20 7.18 8.65 38 RCVD_IN_MSPIKE_H3 26427 7.83 6.05 8.61 39 TR_XM_BayesUnsub 25183 11.29 18.32 8.21 40 XM_DKIMWhitelistDomains 22432 5.08 0.01 7.31 41 TR_XM_DK_Bayes 21042 5.00 0.77 6.86 42 TR_XM_DK_Bayes1 20720 4.92 0.76 6.75 43 BAYES_60 20665 7.06 7.80 6.74 44 LOTS_OF_MONEY 19524 8.43 13.14 6.36 45 XM_H_GMP 18983 5.96 5.43 6.19 46 XM_H_Long_From01 18966 6.35 6.73 6.18 47 TR_MAX_INTL_RELAY 18304 8.36 13.81 5.97 48 T_TooManySym_01 18147 4.88 2.52 5.91 49 RCVD_IN_MSPIKE_H5 18000 4.69 2.02 5.87 50 TR_XM_DK_Bayes2 17790 4.15 0.38 5.80 51 XM_B_Phish_Phrases 17209 6.78 9.43 5.61 52 BAYES_40 16841 4.44 2.07 5.49 53 MIME_QP_LONG_LINE 16141 4.48 2.72 5.26 54 XMStrtUSub 15827 5.20 5.31 5.16 55 XM_PDF 15137 3.71 0.93 4.93 56 XM_DK_Undo_02 15132 15.97 41.11 4.93 57 HTML_IMAGE_RATIO_02 14306 5.21 6.45 4.66 58 XM_B_SpammyWords3 14300 7.46 13.84 4.66 59 MPART_ALT_DIFF 14179 5.08 6.12 4.62 60 XM_UncommonTLD01 13510 4.76 5.56 4.40 61 XMNumbers 13060 4.20 4.08 4.26 62 HTML_IMAGE_RATIO_04 12909 4.49 5.13 4.21 63 TR_XM_SpammyWords4 12812 6.48 11.72 4.18 64 ANY_BOUNCE_MESSAGE 12429 3.11 0.95 4.05 65 BOUNCE_MESSAGE 12426 3.10 0.95 4.05 66 T_REMOTE_IMAGE 11967 3.33 2.04 3.90 67 RCVD_IN_IADB_LISTED 11960 3.06 1.13 3.90 68 BAYES_20 11933 3.15 1.45 3.89 69 RCVD_IN_VALIDITY_SAFE 11752 3.29 2.05 3.83 70 TooManyTo_002 11699 2.86 0.70 3.81 71 XMSubMetaSx_00 11547 4.90 7.49 3.76 72 RELAYCOUNTRY_META 11463 7.72 16.80 3.74 73 BAYES_80 11307 5.16 8.51 3.69 74 HTML_IMAGE_RATIO_06 11134 3.84 4.31 3.63 75 RCVD_IN_MSPIKE_H4 11133 3.27 2.47 3.63 76 BAYES_99 10874 11.82 30.65 3.54 77 RCVD_IN_VALIDITY_CERTIFIED 10446 2.85 1.59 3.40 78 RCVD_IN_IADB_SPF 10400 2.65 0.98 3.39 79 T_TooManySym_02 9230 2.34 0.83 3.01 80 RCVD_IN_IADB_SENDERID 9212 2.36 0.91 3.00 81 BOTNET_IPINHOSTNAME 9194 6.08 13.10 3.00 82 RCVD_IN_IADB_DK 8859 2.29 0.92 2.89 83 MAILING_LIST_MULTI 8758 2.68 2.30 2.85 84 HTML_MIME_NO_HTML_TAG 8467 2.40 1.58 2.76 85 RCVD_IN_IADB_VOUCHED 8316 2.08 0.65 2.71 86 BAYES_999 8287 9.08 23.60 2.70 87 XM_B_SpammyTLD 8019 3.00 3.88 2.61 88 MIME_HTML_ONLY_MULTI 7950 2.80 3.26 2.59 89 SCC_BODY_URI_ONLY 7797 2.17 1.32 2.54 90 INVALID_MSGID 7518 1.78 0.26 2.45 91 MIME_HTML_MOSTLY 7346 2.85 3.89 2.39 92 BAYES_95 6981 3.10 4.98 2.28 93 BAYES_05 6947 1.84 0.87 2.26 94 XM_Body_Dirty_Words 6902 3.67 6.90 2.25 95 HTML_IMAGE_RATIO_08 6694 2.34 2.70 2.18 96 DKIM_INVALID 6564 2.98 4.88 2.14 97 TO_MALFORMED 6290 1.43 0.02 2.05 98 T_XMDrugObfuBody_14 5905 2.52 3.86 1.92 99 XM_DK_Undo_01 5852 1.82 1.62 1.91 100 XM_CamelCaseFrm001 5839 2.37 3.42 1.90 101 TR_XM_SpammyRelay 5775 5.01 12.14 1.88 102 TR_XM_DKIM_Undo 5710 10.15 29.04 1.86 103 RCVD_IN_IADB_OPTIN 5706 1.42 0.43 1.86 104 TM2_M_URI_OPT_OUT 5689 2.11 2.70 1.85 105 TM2_M_VERY_LONG_WORD 5574 2.44 3.85 1.82 106 XMDiploma_00 5482 2.08 2.74 1.79 107 KHOP_HELO_FCRDNS 5360 1.71 1.62 1.75 108 TR_XM_PhishingBody 5316 2.64 4.71 1.73 109 XM_B_URI_Unicode 5218 1.99 2.65 1.70 110 FROM_EXCESS_BASE64 5213 1.74 1.84 1.70 111 XM_SendGrid 5104 1.60 1.45 1.66 112 TooManyTo_003 5059 1.32 0.59 1.65 113 XM_B_Unsub2 5011 2.22 3.57 1.63 114 TR_XM_UnparsRelay 4957 4.03 9.54 1.62 115 XM_B_Investor 4817 2.79 5.55 1.57 116 TR_MetaPhish_Combo_01 4753 1.50 1.40 1.55 117 T_XMDrugObfuBody_08 4740 1.99 3.01 1.54 118 XM_B_FormFill 4650 1.06 0.02 1.52 119 XM_SPF_SoftFail 4636 2.14 3.57 1.51 120 UNTRUSTED_Relay 4629 3.08 6.65 1.51 121 URI_NOVOWEL 4598 1.47 1.42 1.50 122 TR_Symld_Words 4428 1.38 1.25 1.44 123 TR_DCC_Bayes_99 4335 7.51 21.41 1.41 124 SUBJ_ALL_CAPS 4249 1.56 1.97 1.38 125 HELO_NODOT 4225 1.00 0.13 1.38 126 HELO_NO_DOMAIN 4216 0.99 0.12 1.37 127 IN_HORDE_ADDRESS_BOOK 4085 0.95 0.08 1.33 128 URI_HEX 3858 1.32 1.47 1.26 129 XMSexyCombo_05 3850 2.18 4.29 1.25 130 TooManyTo_004 3820 1.02 0.50 1.25 131 XMGappySubj_01 3788 0.93 0.24 1.23 132 BOTNET 3781 3.74 9.43 1.23 133 TR_XM_SpammyWords5 3677 2.19 4.43 1.20 134 XM_GoogleGroups 3670 1.09 0.85 1.20 135 XMStockSpam_06 3603 1.44 2.05 1.17 136 XM_ShortIntro_01 3514 0.93 0.43 1.15 137 T_TooManySym_03 3494 0.91 0.39 1.14 138 XM_OfRef6 3413 1.79 3.33 1.11 139 TVD_SPACE_RATIO 3309 0.83 0.26 1.08 140 XMCapTrack 3295 0.91 0.53 1.07 141 TooManyTo_005 3195 0.86 0.46 1.04 142 HTML_IMAGE_ONLY_32 3180 0.78 0.20 1.04 143 T_FILL_THIS_FORM_SHORT 3077 1.50 2.64 1.00 144 XM_UB50 2972 1.66 3.22 0.97 145 TR_XM_DK_SendGrid 2932 0.96 0.96 0.96 146 RELAYCOUNTRY_CA 2883 2.39 5.70 0.94 147 TVD_RCVD_IP 2854 0.93 0.92 0.93 148 DKIM_ADSP_CUSTOM_MED 2666 0.91 1.01 0.87 149 T_XMDrugObfuBody_00 2620 1.19 1.94 0.85 150 XM_H_Long_From02 2563 1.07 1.62 0.84 151 URI_OPTOUT_3LD 2555 0.73 0.51 0.83 152 T_OBFU_PDF_ATTACH 2465 0.60 0.15 0.80 153 XMGenDplmaNmb 2437 0.96 1.33 0.79 154 XMBrknScrpt_02 2433 1.10 1.80 0.79 155 RCVD_IN_PBL 2432 0.95 1.32 0.79 156 TR_XM_MSPIKECOMBO 2420 1.82 4.18 0.79 157 RCVD_IN_MSPIKE_BL 2420 1.82 4.18 0.79 158 XM_B_COPY_HTML 2381 0.86 1.06 0.78 159 HTTPS_HTTP_MISMATCH 2375 0.87 1.08 0.77 160 T_Symld_Words_02 2334 0.82 0.97 0.76 161 XM_H_PHPMailer 2315 0.68 0.50 0.75 162 SpammyFromTLD_01 2289 1.08 1.83 0.75 163 FROM_GOV_DKIM_AU 2284 0.61 0.30 0.74 164 MAY_BE_FORGED 2144 0.49 0.01 0.70 165 MSGID_FROM_MTA_HEADER 2135 0.53 0.15 0.70 166 XMSlimDrugH 2129 0.70 0.73 0.69 167 RCVD_IN_BL_SPAMCOP_NET 2111 3.61 10.27 0.69 168 XMSubMetaI_00 2094 0.76 0.93 0.68 169 XMBSHREFv2 1991 0.58 0.42 0.65 170 TR_XM_Base64_M1 1947 0.67 0.74 0.63 171 XM_B_SpammyWords4 1895 1.11 2.22 0.62 172 XMNoVowels 1862 0.62 0.65 0.61 173 XMGappySubj_02 1861 0.44 0.07 0.61 174 XMPhish30 1851 0.88 1.50 0.60 175 NML_ADSP_CUSTOM_MED 1835 0.68 0.87 0.60 176 MPART_ALT_DIFF_COUNT 1823 0.78 1.19 0.59 177 RELAYCOUNTRY_GB 1786 0.82 1.37 0.58 178 FORGED_GMAIL_RCVD 1779 0.61 0.67 0.58 179 T_XMHurry_00 1771 0.95 1.81 0.58 180 RELAYCOUNTRY_AU 1756 1.28 2.89 0.57 181 URI_TRY_3LD 1722 0.77 1.23 0.56 182 XMMoneyMeta_00 1699 0.69 1.00 0.55 183 FILL_THIS_FORM 1682 0.57 0.63 0.55 184 RCVD_IN_MSPIKE_L3 1639 1.24 2.85 0.53 185 XMBody_78 1589 0.69 1.09 0.52 186 XMLngstWrd_00 1587 0.49 0.44 0.52 187 XMBdyGiftCard01 1583 0.68 1.04 0.52 188 HTML_TAG_BALANCE_BODY 1560 0.59 0.76 0.51 189 XM_ProductURIs 1526 0.75 1.32 0.50 190 LongTLD 1519 0.60 0.82 0.50 191 XMOemUri 1466 0.39 0.19 0.48 192 XMBody_17 1455 1.21 2.90 0.47 193 XM_B_DNDMA 1446 0.69 1.19 0.47 194 PLING_QUERY 1441 0.49 0.52 0.47 195 T_TVD_MIME_NO_HEADERS 1438 0.34 0.05 0.47 196 XMPhish14 1436 0.60 0.90 0.47 197 XMBody_95 1422 0.36 0.14 0.46 198 DKIM_ADSP_NXDOMAIN 1399 0.60 0.92 0.46 199 TO_NO_BRKTS_HTML_ONLY 1394 0.53 0.70 0.45 200 MIME_CHARSET_FARAWAY 1382 0.41 0.32 0.45 ----------------------------------------------------------------------