Email: 442369 Autolearn: 0 AvgScore: 5.21 AvgScanTime: 1.37 sec Spam: 135905 Autolearn: 0 AvgScore: 14.52 AvgScanTime: 1.53 sec Ham: 306464 Autolearn: 0 AvgScore: 1.08 AvgScanTime: 1.29 sec Time Spent Running SA: 167.87 hours Time Spent Processing Spam: 57.80 hours Time Spent Processing Ham: 110.07 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 133752 98.73 98.42 98.86 2 HTML_MESSAGE 129395 89.11 95.21 86.41 3 DKIM_SIGNED 123214 81.14 90.66 76.92 4 XM_B_Unicode 116549 75.17 85.76 70.47 5 XM_DK_Pass 115806 78.70 85.21 75.81 6 DKIM_VALID 114916 77.80 84.56 74.80 7 RELAYCOUNTRY_US 110349 81.66 81.20 81.86 8 DCC_CHECK 102185 52.39 75.19 42.28 9 XM_B_SpammyWords 95689 53.00 70.41 45.28 10 XMListUnsubscribeExists 92995 56.17 68.43 50.74 11 DKIM_VALID_AU 90958 62.94 66.93 61.18 12 XM_B_Unicode3 67730 44.15 49.84 41.63 13 LOC_TINY_FONT_1 67619 35.29 49.75 28.88 14 XM_B_SpammyWords2 55044 25.56 40.50 18.94 15 BAYES_50 54471 55.29 40.08 62.03 16 XM_DK_Undo_02 54148 15.66 39.84 4.94 17 HTML_FONT_LOW_CONTRAST 52000 31.30 38.26 28.22 18 FVGT_m_MULTI_ODD 48035 29.01 35.34 26.20 19 DKIM_VALID_EF 42074 30.89 30.96 30.86 20 BAYES_99 41489 11.71 30.53 3.37 21 T_KAM_HTML_FONT_INVALID 40208 24.63 29.59 22.43 22 TR_XM_DKIM_Undo 39336 10.27 28.94 1.99 23 MIME_HTML_ONLY 39252 22.00 28.88 18.95 24 XMSubLong 33033 23.80 24.31 23.58 25 DCC_CHECK_NEGATIVE 31753 47.13 23.36 57.67 26 BAYES_999 31712 8.94 23.33 2.56 27 TR_XM_DK_Unsub 31109 16.99 22.89 14.37 28 T_TM2_M_HEADER_IN_MSG 30785 27.67 22.65 29.89 29 XM_Multi_Part_URI 28993 16.26 21.33 14.01 30 TR_DCC_Bayes_99 28832 7.39 21.21 1.27 31 RCVD_IN_MSPIKE_H2 26456 17.13 19.47 16.10 32 UNPARSEABLE_RELAY 25030 13.99 18.42 12.03 33 XM_B_Unsub 24937 11.06 18.35 7.83 34 TR_XM_BayesUnsub 23504 9.56 17.29 6.13 35 RELAYCOUNTRY_META 23211 7.77 17.08 3.64 36 XM_B_SpammyWords3 20980 7.90 15.44 4.55 37 TR_MAX_INTL_RELAY 20374 9.21 14.99 6.65 38 LOTS_OF_MONEY 18687 8.66 13.75 6.40 39 BOTNET_IPINHOSTNAME 17817 6.26 13.11 3.23 40 TR_XM_SpammyRelay 17332 5.14 12.75 1.76 41 TR_XM_SpammyWords4 16722 6.40 12.30 3.78 42 TR_XM_SpammyWords2 14461 3.63 10.64 0.53 43 RCVD_IN_BL_SPAMCOP_NET 14084 3.67 10.36 0.70 44 XM_Evil_Numbers_Gen 13982 9.68 10.29 9.40 45 FSL_BULK_SIG 13589 8.82 10.00 8.30 46 BOTNET 13175 3.85 9.69 1.26 47 TR_XM_UnparsRelay 13058 3.97 9.61 1.48 48 BAYES_80 12820 5.92 9.43 4.36 49 RCVD_IN_MSPIKE_WL 12457 14.76 9.17 17.23 50 XM_B_Phish_Phrases 12316 6.97 9.06 6.04 51 BAYES_60 11034 7.35 8.12 7.01 52 LotsOfNums_01 10607 9.22 7.80 9.85 53 XM_Body_Dirty_Words 9734 3.70 7.16 2.16 54 XM_UncommonTLD01 9187 4.99 6.76 4.20 55 UNTRUSTED_Relay 8890 3.07 6.54 1.53 56 HTML_IMAGE_RATIO_02 8829 5.31 6.50 4.79 57 XM_B_PhoneNumber 8789 8.81 6.47 9.85 58 RELAYCOUNTRY_CA 8782 2.55 6.46 0.81 59 DKIM_INVALID 8298 3.34 6.11 2.12 60 MPART_ALT_DIFF 7911 5.52 5.82 5.39 61 XM_H_Long_From01 7902 5.77 5.81 5.76 62 XMSubMetaSx_00 7586 3.93 5.58 3.20 63 XM_B_Investor 7486 2.90 5.51 1.74 64 T_XMDrugObfuBody_14 7439 3.19 5.47 2.17 65 TR_XM_PhishingBody 7218 2.81 5.31 1.71 66 BAYES_95 7174 3.20 5.28 2.28 67 TR_XM_SPAMCOP 7148 1.76 5.26 0.20 68 XM_H_GMP 7050 5.76 5.19 6.01 69 HTML_IMAGE_RATIO_04 7040 4.10 5.18 3.61 70 XMStrtUSub 6884 5.09 5.07 5.10 71 XMSexyCombo_05 6356 2.08 4.68 0.92 72 RCVD_IN_MSPIKE_H3 6120 6.99 4.50 8.10 73 XM_B_SpammyTLD 5769 3.28 4.24 2.86 74 TM2_M_VERY_LONG_WORD 5368 2.80 3.95 2.30 75 TooManyTo_001 5336 6.85 3.93 8.15 76 TR_XM_SpammyWords5 5325 2.11 3.92 1.30 77 HTML_IMAGE_RATIO_08 5244 2.90 3.86 2.47 78 RCVD_IN_MSPIKE_BL 5043 1.79 3.71 0.94 79 TR_XM_MSPIKECOMBO 5033 1.79 3.70 0.94 80 XMNumbers 5010 3.32 3.69 3.15 81 XM_OfRef6 4985 1.72 3.67 0.86 82 MIME_QP_LONG_LINE 4836 5.04 3.56 5.70 83 TM2_M_URI_OPT_OUT 4532 2.36 3.33 1.93 84 HTML_IMAGE_RATIO_06 4523 3.62 3.33 3.75 85 XM_SPF_SoftFail 4514 1.91 3.32 1.28 86 MIME_HTML_ONLY_MULTI 4301 2.83 3.16 2.68 87 MIME_HTML_MOSTLY 4298 3.12 3.16 3.10 88 XM_B_URI_Unicode 4281 2.39 3.15 2.06 89 XM_B_Unsub2 4275 1.75 3.15 1.14 90 XM_CamelCaseFrm001 4230 2.29 3.11 1.93 91 XM_URI_RBL 4171 1.12 3.07 0.25 92 XM_UB50 4112 1.64 3.03 1.03 93 TR_XM_NoHeaderRelay 3982 1.00 2.93 0.15 94 TR_XM_INV_DKIM 3966 0.92 2.92 0.03 95 T_XMDrugObfuBody_08 3892 1.85 2.86 1.41 96 XM_B_SpammyWords4 3811 1.20 2.80 0.49 97 RELAYCOUNTRY_AU 3774 1.21 2.78 0.52 98 TR_XM_SpammyWords3 3655 1.13 2.69 0.44 99 XMDiploma_00 3629 2.00 2.67 1.71 100 RCVD_IN_MSPIKE_H4 3603 3.36 2.65 3.67 101 T_FILL_THIS_FORM_SHORT 3584 1.45 2.64 0.93 102 T_TooManySym_01 3518 5.07 2.59 6.18 103 XM_H_Long_From02 3351 1.33 2.47 0.82 104 RCVD_IN_MSPIKE_L3 3313 1.23 2.44 0.69 105 XM_DK_Undo_01 3202 2.13 2.36 2.04 106 SpammyFromTLD_02 3167 1.09 2.33 0.54 107 XMStockSpam_06 3147 1.29 2.32 0.84 108 USER_IN_DEF_DKIM_WL 3036 10.15 2.23 13.66 109 XMPhish30 3035 1.12 2.23 0.62 110 MAILING_LIST_MULTI 2909 3.00 2.14 3.38 111 T_XMHurry_00 2908 1.12 2.14 0.67 112 XMBody_17 2862 0.90 2.11 0.36 113 FROM_EXCESS_BASE64 2833 1.74 2.08 1.59 114 RCVD_IN_VALIDITY_SAFE 2825 3.31 2.08 3.85 115 SpammyFromTLD_01 2762 1.19 2.03 0.82 116 RCVD_IN_VALIDITY_RPBL 2757 0.65 2.03 0.04 117 RCVD_IN_MSPIKE_H5 2734 4.40 2.01 5.47 118 SUBJ_ALL_CAPS 2711 1.58 1.99 1.40 119 ALL_TRUSTED 2639 11.06 1.94 15.10 120 T_REMOTE_IMAGE 2571 3.24 1.89 3.84 121 T_XMDrugObfuBody_00 2515 1.23 1.85 0.95 122 HTML_MIME_NO_HTML_TAG 2420 2.28 1.78 2.50 123 BAYES_40 2400 4.16 1.77 5.22 124 XMBrknScrpt_02 2307 1.10 1.70 0.84 125 XMGenDplmaNmb 2275 1.23 1.67 1.04 126 BAYES_20 2218 3.11 1.63 3.77 127 SCC_BODY_URI_ONLY 2176 2.23 1.60 2.51 128 RCVD_IN_VALIDITY_CERTIFIED 2156 2.79 1.59 3.32 129 TR_XM_InvalidRelay 2065 0.48 1.52 0.02 130 MPART_ALT_DIFF_COUNT 2023 0.89 1.49 0.63 131 DIET_1 2019 0.72 1.49 0.39 132 RCVD_IN_ZEN_LASTEXTERNAL 1932 0.44 1.42 0.00 133 SHORTCIRCUIT 1932 0.44 1.42 0.00 134 XM_B_Phish66 1899 0.65 1.40 0.32 135 HTML_IMAGE_ONLY_20 1888 0.65 1.39 0.32 136 URI_HEX 1868 1.35 1.37 1.34 137 XM_SendGrid 1860 1.53 1.37 1.61 138 RCVD_IN_IADB_LISTED 1848 2.80 1.36 3.44 139 XM_B_DNDMA 1821 0.73 1.34 0.45 140 RCVD_IN_PBL 1820 0.95 1.34 0.77 141 TR_XM_MSPIKECOMBO2 1818 0.44 1.34 0.04 142 KHOP_HELO_FCRDNS 1808 1.66 1.33 1.80 143 URI_TRY_3LD 1772 0.76 1.30 0.52 144 TR_XM_PHPForged 1770 0.67 1.30 0.40 145 URI_NOVOWEL 1747 1.36 1.29 1.39 146 TR_XM_FormFill2 1745 0.67 1.28 0.39 147 LongTLD 1737 0.72 1.28 0.47 148 XM_HighProb1 1723 0.39 1.27 0.01 149 DKIM_ADSP_CUSTOM_MED 1721 0.91 1.27 0.76 150 TR_XM_PHPDW 1720 0.67 1.27 0.40 151 RELAYCOUNTRY_FR 1710 0.56 1.26 0.25 152 BOTNET_NORDNS 1706 0.39 1.26 0.01 153 XM_H_PHPOS 1700 0.65 1.25 0.39 154 XM_B_SEO 1699 0.52 1.25 0.20 155 XM_B_COPY_HTML 1681 0.81 1.24 0.62 156 XM_ProductURIs 1646 0.65 1.21 0.40 157 RCVD_IN_IADB_SPF 1645 2.48 1.21 3.04 158 TR_LOTS_OF_MONEY3 1642 0.51 1.21 0.20 159 XM_DIRTYINTL 1641 0.42 1.21 0.07 160 XM_UB99 1622 0.37 1.19 0.00 161 XMBdyGiftCard01 1603 0.69 1.18 0.47 162 RCVD_IN_XBL 1591 0.37 1.17 0.02 163 RDNS_DYNAMIC 1562 0.46 1.15 0.16 164 RCVD_IN_SBL_CSS 1555 0.39 1.14 0.05 165 RCVD_IN_PSBL 1553 0.67 1.14 0.47 166 PDS_RDNS_DYNAMIC_FP 1542 0.37 1.13 0.04 167 TR_LOTS_OF_MONEY2 1540 0.49 1.13 0.20 168 T_MONEY_PERCENT 1540 0.49 1.13 0.20 169 RCVD_IN_IADB_DK 1525 2.22 1.12 2.70 170 TR_Symld_Words 1522 1.37 1.12 1.48 171 TR_XM_RelayPhish 1519 0.39 1.12 0.06 172 NML_ADSP_CUSTOM_MED 1513 0.69 1.11 0.51 173 MultiRelay_CC 1513 0.45 1.11 0.15 174 RCVD_IN_IADB_SENDERID 1507 2.26 1.11 2.77 175 RELAYCOUNTRY_GB 1477 0.76 1.09 0.61 176 TR_XM_SEO4 1476 0.39 1.09 0.08 177 URIBL_BLACK 1437 0.35 1.06 0.04 178 T_Symld_Words_02 1373 0.85 1.01 0.77 179 TooManyTo_002 1367 2.04 1.01 2.51 180 XMMoneyMeta_00 1360 0.61 1.00 0.43 181 TM2_M_OBFU_COMMENT 1356 0.52 1.00 0.31 182 FORGED_GMAIL_RCVD 1355 0.62 1.00 0.45 183 DKIM_ADSP_NXDOMAIN 1333 0.49 0.98 0.28 184 TR_Mismatch_TLD_02 1332 0.35 0.98 0.07 185 XMHTMLBadTable_001 1325 0.48 0.97 0.25 186 XMSubMetaI_00 1315 0.66 0.97 0.52 187 TVD_RCVD_IP 1313 0.91 0.97 0.88 188 SHOPIFY_IMG_NOT_RCVD_SFY 1263 0.46 0.93 0.25 189 XM_B_COVIDMETA 1261 0.40 0.93 0.16 190 TR_XM_DK_SendGrid 1249 1.01 0.92 1.05 191 XMHTML_After_End 1248 0.56 0.92 0.40 192 RCVD_IN_MSPIKE_L4 1246 0.44 0.92 0.23 193 TR_Mismatch_TLD_01 1246 0.49 0.92 0.30 194 XMBody_78 1241 0.50 0.91 0.31 195 XMPhish14 1241 0.58 0.91 0.43 196 XM_PDF 1240 3.48 0.91 4.62 197 BAYES_05 1239 1.82 0.91 2.22 198 TM2_M_A_HREF_HREF 1230 0.47 0.91 0.28 199 TR_XM_MaxSPIKE 1220 0.30 0.90 0.04 200 HTML_TAG_BALANCE_BODY 1218 0.68 0.90 0.58 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 T_SCC_BODY_TEXT_LINE 302977 98.73 98.42 98.86 2 HTML_MESSAGE 264815 89.11 95.21 86.41 3 RELAYCOUNTRY_US 250881 81.66 81.20 81.86 4 DKIM_SIGNED 235723 81.14 90.66 76.92 5 XM_DK_Pass 232320 78.70 85.21 75.81 6 DKIM_VALID 229235 77.80 84.56 74.80 7 XM_B_Unicode 215975 75.17 85.76 70.47 8 BAYES_50 190104 55.29 40.08 62.03 9 DKIM_VALID_AU 187481 62.94 66.93 61.18 10 DCC_CHECK_NEGATIVE 176739 47.13 23.36 57.67 11 XMListUnsubscribeExists 155489 56.17 68.43 50.74 12 XM_B_SpammyWords 138762 53.00 70.41 45.28 13 DCC_CHECK 129558 52.39 75.19 42.28 14 XM_B_Unicode3 127589 44.15 49.84 41.63 15 DKIM_VALID_EF 94573 30.89 30.96 30.86 16 T_TM2_M_HEADER_IN_MSG 91610 27.67 22.65 29.89 17 LOC_TINY_FONT_1 88500 35.29 49.75 28.88 18 HTML_FONT_LOW_CONTRAST 86470 31.30 38.26 28.22 19 FVGT_m_MULTI_ODD 80300 29.01 35.34 26.20 20 XMSubLong 72262 23.80 24.31 23.58 21 T_KAM_HTML_FONT_INVALID 68753 24.63 29.59 22.43 22 MIME_HTML_ONLY 58061 22.00 28.88 18.95 23 XM_B_SpammyWords2 58030 25.56 40.50 18.94 24 RCVD_IN_MSPIKE_WL 52819 14.76 9.17 17.23 25 RCVD_IN_MSPIKE_H2 49332 17.13 19.47 16.10 26 ALL_TRUSTED 46273 11.06 1.94 15.10 27 TR_XM_DK_Unsub 44052 16.99 22.89 14.37 28 XM_Multi_Part_URI 42934 16.26 21.33 14.01 29 USER_IN_DEF_DKIM_WL 41877 10.15 2.23 13.66 30 UNPARSEABLE_RELAY 36859 13.99 18.42 12.03 31 XM_B_PhoneNumber 30198 8.81 6.47 9.85 32 LotsOfNums_01 30189 9.22 7.80 9.85 33 BAYES_00 29792 6.99 0.83 9.72 34 XM_Evil_Numbers_Gen 28821 9.68 10.29 9.40 35 FSL_BULK_SIG 25449 8.82 10.00 8.30 36 TooManyTo_001 24985 6.85 3.93 8.15 37 RCVD_IN_MSPIKE_H3 24809 6.99 4.50 8.10 38 XM_B_Unsub 24000 11.06 18.35 7.83 39 BAYES_60 21498 7.35 8.12 7.01 40 TR_XM_DK_Bayes 20472 4.83 0.66 6.68 41 TR_MAX_INTL_RELAY 20372 9.21 14.99 6.65 42 TR_XM_DK_Bayes1 20203 4.77 0.65 6.59 43 LOTS_OF_MONEY 19613 8.66 13.75 6.40 44 XM_DKIMWhitelistDomains 19372 4.38 0.00 6.32 45 T_TooManySym_01 18927 5.07 2.59 6.18 46 TR_XM_BayesUnsub 18790 9.56 17.29 6.13 47 XM_B_Phish_Phrases 18511 6.97 9.06 6.04 48 XM_H_GMP 18413 5.76 5.19 6.01 49 XM_H_Long_From01 17640 5.77 5.81 5.76 50 MIME_QP_LONG_LINE 17464 5.04 3.56 5.70 51 TR_XM_DK_Bayes2 16940 3.99 0.51 5.53 52 RCVD_IN_MSPIKE_H5 16751 4.40 2.01 5.47 53 MPART_ALT_DIFF 16514 5.52 5.82 5.39 54 BAYES_40 16004 4.16 1.77 5.22 55 XMStrtUSub 15644 5.09 5.07 5.10 56 XM_DK_Undo_02 15125 15.66 39.84 4.94 57 HTML_IMAGE_RATIO_02 14682 5.31 6.50 4.79 58 XM_PDF 14146 3.48 0.91 4.62 59 XM_B_SpammyWords3 13949 7.90 15.44 4.55 60 BAYES_80 13370 5.92 9.43 4.36 61 XM_UncommonTLD01 12883 4.99 6.76 4.20 62 ANY_BOUNCE_MESSAGE 12858 3.12 0.70 4.20 63 BOUNCE_MESSAGE 12858 3.12 0.70 4.20 64 RCVD_IN_VALIDITY_SAFE 11807 3.31 2.08 3.85 65 T_REMOTE_IMAGE 11780 3.24 1.89 3.84 66 TR_XM_SpammyWords4 11586 6.40 12.30 3.78 67 BAYES_20 11557 3.11 1.63 3.77 68 HTML_IMAGE_RATIO_06 11501 3.62 3.33 3.75 69 RCVD_IN_MSPIKE_H4 11259 3.36 2.65 3.67 70 RELAYCOUNTRY_META 11147 7.77 17.08 3.64 71 HTML_IMAGE_RATIO_04 11076 4.10 5.18 3.61 72 RCVD_IN_IADB_LISTED 10544 2.80 1.36 3.44 73 MAILING_LIST_MULTI 10361 3.00 2.14 3.38 74 BAYES_99 10332 11.71 30.53 3.37 75 RCVD_IN_VALIDITY_CERTIFIED 10177 2.79 1.59 3.32 76 BOTNET_IPINHOSTNAME 9885 6.26 13.11 3.23 77 XMSubMetaSx_00 9809 3.93 5.58 3.20 78 XMNumbers 9656 3.32 3.69 3.15 79 T_TooManySym_02 9620 2.42 0.81 3.14 80 MIME_HTML_MOSTLY 9499 3.12 3.16 3.10 81 RCVD_IN_IADB_SPF 9326 2.48 1.21 3.04 82 XM_B_SpammyTLD 8751 3.28 4.24 2.86 83 RCVD_IN_IADB_SENDERID 8480 2.26 1.11 2.77 84 RCVD_IN_IADB_DK 8286 2.22 1.12 2.70 85 MIME_HTML_ONLY_MULTI 8217 2.83 3.16 2.68 86 BAYES_999 7835 8.94 23.33 2.56 87 SCC_BODY_URI_ONLY 7706 2.23 1.60 2.51 88 TooManyTo_002 7678 2.04 1.01 2.51 89 HTML_MIME_NO_HTML_TAG 7661 2.28 1.78 2.50 90 HTML_IMAGE_RATIO_08 7579 2.90 3.86 2.47 91 INVALID_MSGID 7065 1.65 0.17 2.31 92 TM2_M_VERY_LONG_WORD 7038 2.80 3.95 2.30 93 BAYES_95 6995 3.20 5.28 2.28 94 BAYES_05 6811 1.82 0.91 2.22 95 T_XMDrugObfuBody_14 6652 3.19 5.47 2.17 96 RCVD_IN_IADB_VOUCHED 6618 1.71 0.68 2.16 97 XM_Body_Dirty_Words 6615 3.70 7.16 2.16 98 DKIM_INVALID 6488 3.34 6.11 2.12 99 TO_MALFORMED 6373 1.45 0.04 2.08 100 XM_B_URI_Unicode 6307 2.39 3.15 2.06 101 XM_DK_Undo_01 6240 2.13 2.36 2.04 102 TR_XM_DKIM_Undo 6110 10.27 28.94 1.99 103 TM2_M_URI_OPT_OUT 5924 2.36 3.33 1.93 104 XM_CamelCaseFrm001 5911 2.29 3.11 1.93 105 KHOP_HELO_FCRDNS 5525 1.66 1.33 1.80 106 TR_XM_SpammyRelay 5405 5.14 12.75 1.76 107 XM_B_Investor 5322 2.90 5.51 1.74 108 XMDiploma_00 5232 2.00 2.67 1.71 109 TR_XM_PhishingBody 5226 2.81 5.31 1.71 110 XM_SendGrid 4930 1.53 1.37 1.61 111 FROM_EXCESS_BASE64 4860 1.74 2.08 1.59 112 TooManyTo_003 4823 1.35 0.84 1.57 113 UNTRUSTED_Relay 4696 3.07 6.54 1.53 114 XM_GoogleGroups 4583 1.31 0.89 1.50 115 TR_Symld_Words 4548 1.37 1.12 1.48 116 TR_XM_UnparsRelay 4523 3.97 9.61 1.48 117 HTML_IMAGE_ONLY_32 4480 1.09 0.25 1.46 118 RCVD_IN_IADB_OPTIN 4407 1.16 0.53 1.44 119 T_XMDrugObfuBody_08 4312 1.85 2.86 1.41 120 SUBJ_ALL_CAPS 4286 1.58 1.99 1.40 121 URI_NOVOWEL 4264 1.36 1.29 1.39 122 XMGappySubj_01 4158 1.02 0.25 1.36 123 IN_HORDE_ADDRESS_BOOK 4120 0.95 0.07 1.34 124 URI_HEX 4112 1.35 1.37 1.34 125 HELO_NODOT 4066 0.95 0.11 1.33 126 HELO_NO_DOMAIN 4059 0.95 0.09 1.32 127 TR_XM_SpammyWords5 3991 2.11 3.92 1.30 128 XM_SPF_SoftFail 3935 1.91 3.32 1.28 129 TR_DCC_Bayes_99 3879 7.39 21.21 1.27 130 BOTNET 3856 3.85 9.69 1.26 131 T_TooManySym_03 3633 0.94 0.39 1.19 132 XM_B_Unsub2 3487 1.75 3.15 1.14 133 TooManyTo_004 3468 1.01 0.74 1.13 134 MAY_BE_FORGED 3439 0.80 0.09 1.12 135 XM_H_PHPMailer 3410 0.94 0.54 1.11 136 XMCapTrack 3384 0.95 0.59 1.10 137 TR_XM_DK_SendGrid 3205 1.01 0.92 1.05 138 XMGenDplmaNmb 3172 1.23 1.67 1.04 139 XM_UB50 3148 1.64 3.03 1.03 140 TVD_SPACE_RATIO 3137 0.76 0.16 1.02 141 TM2_M_BODY_EMPTY 3018 0.71 0.08 0.98 142 XM_ShortIntro_01 2935 0.81 0.47 0.96 143 T_XMDrugObfuBody_00 2912 1.23 1.85 0.95 144 RCVD_IN_MSPIKE_BL 2876 1.79 3.71 0.94 145 TR_XM_MSPIKECOMBO 2874 1.79 3.70 0.94 146 T_FILL_THIS_FORM_SHORT 2851 1.45 2.64 0.93 147 XMSexyCombo_05 2824 2.08 4.68 0.92 148 TooManyTo_005 2753 0.83 0.67 0.90 149 TVD_RCVD_IP 2691 0.91 0.97 0.88 150 XM_OfRef6 2624 1.72 3.67 0.86 151 XMStockSpam_06 2574 1.29 2.32 0.84 152 XMBrknScrpt_02 2569 1.10 1.70 0.84 153 SpammyFromTLD_01 2515 1.19 2.03 0.82 154 XM_H_Long_From02 2514 1.33 2.47 0.82 155 RELAYCOUNTRY_CA 2481 2.55 6.46 0.81 156 T_Symld_Words_02 2369 0.85 1.01 0.77 157 RCVD_IN_PBL 2366 0.95 1.34 0.77 158 FROM_GOV_DKIM_AU 2363 0.70 0.54 0.77 159 TR_MetaPhish_Combo_01 2341 0.78 0.82 0.76 160 DKIM_ADSP_CUSTOM_MED 2326 0.91 1.27 0.76 161 T_OBFU_PDF_ATTACH 2250 0.57 0.21 0.73 162 RCVD_IN_BL_SPAMCOP_NET 2152 3.67 10.36 0.70 163 XMEmptyBody_01 2146 0.50 0.04 0.70 164 XMGappySubj_02 2145 0.52 0.10 0.70 165 RCVD_IN_MSPIKE_L3 2122 1.23 2.44 0.69 166 T_XMHurry_00 2060 1.12 2.14 0.67 167 HTTPS_HTTP_MISMATCH 1958 0.70 0.82 0.64 168 XMNoVowels 1956 0.58 0.46 0.64 169 TR_XM_Base64_M1 1932 0.66 0.74 0.63 170 MPART_ALT_DIFF_COUNT 1924 0.89 1.49 0.63 171 XMPhish30 1912 1.12 2.23 0.62 172 XMSlimDrugH 1905 0.65 0.73 0.62 173 XM_B_COPY_HTML 1897 0.81 1.24 0.62 174 RELAYCOUNTRY_GB 1868 0.76 1.09 0.61 175 HTML_TAG_BALANCE_BODY 1784 0.68 0.90 0.58 176 MSGID_FROM_MTA_HEADER 1694 0.45 0.21 0.55 177 MIME_CHARSET_FARAWAY 1689 0.50 0.37 0.55 178 SpammyFromTLD_02 1662 1.09 2.33 0.54 179 XMBSHREFv2 1644 0.54 0.54 0.54 180 TO_NO_BRKTS_HTML_ONLY 1641 0.59 0.71 0.54 181 TR_XM_SpammyWords2 1618 3.63 10.64 0.53 182 XMSubMetaI_00 1602 0.66 0.97 0.52 183 RELAYCOUNTRY_AU 1599 1.21 2.78 0.52 184 URI_TRY_3LD 1599 0.76 1.30 0.52 185 NML_ADSP_CUSTOM_MED 1553 0.69 1.11 0.51 186 XM_B_SpammyWords4 1512 1.20 2.80 0.49 187 XMBody_95 1475 0.38 0.14 0.48 188 TRACKER_ID 1471 0.40 0.20 0.48 189 XMBdyGiftCard01 1452 0.69 1.18 0.47 190 LongTLD 1444 0.72 1.28 0.47 191 XMLngstWrd_00 1438 0.43 0.35 0.47 192 RCVD_IN_PSBL 1427 0.67 1.14 0.47 193 XM_S_SpammyWords 1395 0.58 0.87 0.46 194 TR_XM_Spammywords 1394 0.58 0.87 0.45 195 FORGED_GMAIL_RCVD 1391 0.62 1.00 0.45 196 XM_B_DNDMA 1391 0.73 1.34 0.45 197 HTML_IMAGE_ONLY_24 1363 0.39 0.26 0.44 198 TR_XM_SpammyWords3 1355 1.13 2.69 0.44 199 T_TVD_MIME_NO_HEADERS 1348 0.32 0.04 0.44 200 CHARSET_FARAWAY_HEADER 1335 0.41 0.34 0.44 ----------------------------------------------------------------------